)]}'
{
  "commit": "4fbe24da41009b53b0e52d8b4f88b63b01cff59d",
  "tree": "26bafe5f6660c9ffcc85365c9b83773447c41450",
  "parents": [
    "3ec0b4579833ff27f9c13e8ee1e7e867a8ad3f3f"
  ],
  "author": {
    "name": "Luca Milanesio",
    "email": "luca.milanesio@gmail.com",
    "time": "Wed Feb 25 22:50:01 2026 +0000"
  },
  "committer": {
    "name": "Luca Milanesio",
    "email": "luca.milanesio@gmail.com",
    "time": "Thu Feb 26 14:04:20 2026 -0800"
  },
  "message": "auto-merge-on-push: Check perms on all changes in submit set\n\nWhen submitting multiple changes through a receive-pack with the submit\noption, check that the user has the UPDATE_BY_SUBMIT for every single\nchange\u0027s project/ref included in the submission change set.\n\nPrior to this change, the check happened only on the tip of the change\npushed for submission, but not on all other changes, which exposed a\ncritical security vulnerability, where any change on any project that\nwas visible to the calling user were allowed to be submitted without\nhaving the necessary permission to perform the action.\n\nOne sample scenario of the above is the submission with a topic when the\nchange.submitWholeTopic is set to true.\n\nBug: Issue 486131256\nRelease-Notes: Enforce the UPDATE_BY_SUBMIT permission check on every change to be submitted as part of the push to the magic branch with the submit option\nChange-Id: I514b22e75194bcd92d1b5c9b9eb3ce70e57fb5f2\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0a296cd2449705697b2a86b979320624d6d0d4e7",
      "old_mode": 33188,
      "old_path": "java/com/google/gerrit/server/git/receive/ReceiveCommits.java",
      "new_id": "73b680b364fdb640b5ee1cf580dd94947b359a61",
      "new_mode": 33188,
      "new_path": "java/com/google/gerrit/server/git/receive/ReceiveCommits.java"
    },
    {
      "type": "modify",
      "old_id": "974a1f7ea6025d7f91e5abe4ff42442062ccaa7b",
      "old_mode": 33188,
      "old_path": "java/com/google/gerrit/server/submit/MergeOp.java",
      "new_id": "82efa23a78c47a82f241f4b59b0aecbdde4c7794",
      "new_mode": 33188,
      "new_path": "java/com/google/gerrit/server/submit/MergeOp.java"
    },
    {
      "type": "modify",
      "old_id": "ba2a6a34222722a51039693a4aeaf45c76d46d79",
      "old_mode": 33188,
      "old_path": "javatests/com/google/gerrit/acceptance/api/change/ChangeIT.java",
      "new_id": "0eff580a4ea2850f9e820d40624307778260d810",
      "new_mode": 33188,
      "new_path": "javatests/com/google/gerrit/acceptance/api/change/ChangeIT.java"
    }
  ]
}