)]}'
{
  "commit": "6c83f0bc5601df3e0da648853e4b09f07d583721",
  "tree": "b5389c7504af34bba907fcdfc6eb1fa66413391b",
  "parents": [
    "3be3129738f60964962a08b0168f4f390b6810cb"
  ],
  "author": {
    "name": "David Ostrovsky",
    "email": "david@ostrovsky.org",
    "time": "Sun Oct 18 18:08:19 2026 +0200"
  },
  "committer": {
    "name": "David Ostrovsky",
    "email": "david@ostrovsky.org",
    "time": "Mon Oct 19 10:15:51 2026 +0200"
  },
  "message": "Upgrade pac4j to 6.5.9 and OpenSAML to 5.2.3\n\nUse pac4j-javaee to retain javax.servlet compatibility while Gerrit\u0027s\nJakarta migration is ongoing.\n\nAdapt the filter to CallContext, an explicit session store and the HTTP\naction adapter. Validate extracted credentials before creating a profile\nand preserve the existing SAML external IDs and account attributes.\n\nRefresh the locked runtime dependencies and allowlist. Exclude libraries\nalready provided by Gerrit to avoid duplicate classes and version skew.\n\nRefresh the runtime allowlist for OpenSAML 5’s split Shibboleth\nlibraries and Velocity 2 POST-form rendering. Remove entries absent from\nthe new dependency graph.\n\nTest redirect and POST actions, credential rejection and account mapping\nand generate service-provider metadata offline.\n\nChange-Id: I2562dac373462d49045991771084dd46d9419e0b\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b44326d7dba4c67a0693852a58fd58849c383d6b",
      "old_mode": 33188,
      "old_path": "BUILD",
      "new_id": "e744b79a1ca2cfbf06005f71107eaf5a2783dd5b",
      "new_mode": 33188,
      "new_path": "BUILD"
    },
    {
      "type": "modify",
      "old_id": "a6ddf9ea01dc7e8c251213dc594a20f5503edb25",
      "old_mode": 33188,
      "old_path": "MODULE.bazel",
      "new_id": "ac850cba1c2fb3832947072b97c2d95bf7c63652",
      "new_mode": 33188,
      "new_path": "MODULE.bazel"
    },
    {
      "type": "modify",
      "old_id": "73927aa5d5bf67b91b95b0ea55c71c1ff382f287",
      "old_mode": 33188,
      "old_path": "README.md",
      "new_id": "a7dd87d80c680a990069b6b2ec9225e5c8cb8e32",
      "new_mode": 33188,
      "new_path": "README.md"
    },
    {
      "type": "modify",
      "old_id": "afb320b6b00cd43cee3c52dadefa0337e0550138",
      "old_mode": 33188,
      "old_path": "saml_plugin_deps.lock.json",
      "new_id": "8c414b973e9f2595f31cd567d9ebbf8842462e61",
      "new_mode": 33188,
      "new_path": "saml_plugin_deps.lock.json"
    },
    {
      "type": "modify",
      "old_id": "ea714f0ef4612e0c6d0fbfa64b07ee39f1370e75",
      "old_mode": 33188,
      "old_path": "saml_third_party_runtime_jars.allowlist.txt",
      "new_id": "7a758462632824504fd08af3fa65c3d0d911dbec",
      "new_mode": 33188,
      "new_path": "saml_third_party_runtime_jars.allowlist.txt"
    },
    {
      "type": "modify",
      "old_id": "4ceec35c658e4cfd532e31a8c4f0c97de5e64e9b",
      "old_mode": 33188,
      "old_path": "src/main/java/com/googlesource/gerrit/plugins/saml/SamlWebFilter.java",
      "new_id": "b4b1c7b63afff8b4a7f185f4467c8c109df3b330",
      "new_mode": 33188,
      "new_path": "src/main/java/com/googlesource/gerrit/plugins/saml/SamlWebFilter.java"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "49096c22da6ce5c16fc04edfb9d8a01e357fb467",
      "new_mode": 33188,
      "new_path": "src/test/java/com/googlesource/gerrit/plugins/saml/SamlClientProviderTest.java"
    },
    {
      "type": "modify",
      "old_id": "8e0a11bfdb2e5f0597f9e53617ded29bf87b127d",
      "old_mode": 33188,
      "old_path": "src/test/java/com/googlesource/gerrit/plugins/saml/SamlWebFilterTest.java",
      "new_id": "a7085ff4e81694dc630b243070cd37ba81cca9b3",
      "new_mode": 33188,
      "new_path": "src/test/java/com/googlesource/gerrit/plugins/saml/SamlWebFilterTest.java"
    }
  ]
}