)]}'
{
  "commit": "8a70fe70b93b622de9d211b0c56f1f2fb2070e77",
  "tree": "da56de9c138c7599676a0d2dbd2883f601e9e98f",
  "parents": [
    "e3432bdb4c14668823fbe33b0ac3b0d243e7505c"
  ],
  "author": {
    "name": "Protobuf Team Bot",
    "email": "protobuf-github-bot@google.com",
    "time": "Tue Oct 13 10:33:37 2026 -0700"
  },
  "committer": {
    "name": "Copybara-Service",
    "email": "copybara-worker@google.com",
    "time": "Tue Oct 13 10:37:19 2026 -0700"
  },
  "message": "Fix risk of upb itof corruption when legacy json_name conflicts are allowed.\n\nThis addresses a risk as identified by security researcher https://github.com/sphl.\n\nSince it is only exposed on untrusted descriptors this is outside of our CVE disclosure model, but we do intend to harden these cases as defense in depth.\n\nPiperOrigin-RevId: 998732157\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c737d2bc2aaa2886d802124d1863c3252bb3c09c",
      "old_mode": 33188,
      "old_path": "upb/reflection/message_def.c",
      "new_id": "433f4f3d3729d85f4bdec3cf095ac4f2df2b7dfc",
      "new_mode": 33188,
      "new_path": "upb/reflection/message_def.c"
    },
    {
      "type": "modify",
      "old_id": "635df534484b5409b345614cd7694497390be625",
      "old_mode": 33188,
      "old_path": "upb/reflection/reflection_test.cc",
      "new_id": "50a387d0cbad12a11ab77421e3266e755ffcb6ac",
      "new_mode": 33188,
      "new_path": "upb/reflection/reflection_test.cc"
    }
  ]
}