)]}'
{
  "commit": "61f0bd54d058789d73a8db0dfb8d23310aa8c411",
  "tree": "62170fe42ae3e68928d17bbc7848345e3bf96c35",
  "parents": [
    "c31108bcc55eaf06b2047b9ab284cbf9cd29ebf6"
  ],
  "author": {
    "name": "Masaya Suzuki",
    "email": "masayasuzuki@google.com",
    "time": "Tue Dec 18 09:20:54 2018 -0800"
  },
  "committer": {
    "name": "Matthias Sohn",
    "email": "matthias.sohn@sap.com",
    "time": "Mon Dec 24 10:58:43 2018 +0100"
  },
  "message": "Call AdvertiseRefsHook before validating wants\n\nAdvertiseRefsHook is used to limit the visibility of the refs in Gerrit.\nIf this hook is not called, then all refs are treated as visible,\ncausing the server to serve commits reachable from branches the client\nshould not be able to access, if asked to via a request naming a guessed\nobject id.\n\nThis bug was introduced in v2.0.0.201206130900-r~123 (Modify refs in\nUploadPack/ReceivePack using a hook interface, 2012-02-08).  Stateful\nbidirectional transports are not affected.\n\nFix it by moving the AdvertiseRefsHook call to\ngetAdvertisedOrDefaultRefs, ensuring the hook is called in all cases.\n\n[jn: backported to stable-4.5 by splitting out tests and the protocol v2\n specific parts]\n\nChange-Id: I159f396216354f2eda3968d17802e166d8c8ec2d\nSigned-off-by: Masaya Suzuki \u003cmasayasuzuki@google.com\u003e\nSigned-off-by: Jonathan Nieder \u003cjrn@google.com\u003e\nSigned-off-by: Matthias Sohn \u003cmatthias.sohn@sap.com\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d1fd67e97728cd56c61170d4f35d5f4b8192024f",
      "old_mode": 33188,
      "old_path": "org.eclipse.jgit/src/org/eclipse/jgit/transport/UploadPack.java",
      "new_id": "0b1848c3114939bda1329e636c04a30305057382",
      "new_mode": 33188,
      "new_path": "org.eclipse.jgit/src/org/eclipse/jgit/transport/UploadPack.java"
    }
  ]
}