)]}'
{
  "commit": "ca495108a7bc4a41d1d3ae7496b3c61da31ada12",
  "tree": "035f138af4c5ff2f02d01878d1e5da7b52e71d55",
  "parents": [
    "4ac5e7412be51c92fe9e44ffb336e061bf743f20"
  ],
  "author": {
    "name": "Protobuf Team Bot",
    "email": "protobuf-github-bot@google.com",
    "time": "Fri Oct 16 11:16:10 2026 -0700"
  },
  "committer": {
    "name": "Copybara-Service",
    "email": "copybara-worker@google.com",
    "time": "Fri Oct 16 11:19:22 2026 -0700"
  },
  "message": "Reject dependency and option_dependency containing null characters in C++ DescriptorPool\n\n`DescriptorBuilder::BuildFileImpl` validates that `FileDescriptorProto.name`,\n`package`, and symbol names do not contain embedded null characters (`\u0027\\0\u0027`),\nbut previously did not check `dependency` or `option_dependency`. As a result,\n`BuildFile` accepted `option_dependency` (and unknown/weak/lazy `dependency`)\nstrings with embedded null characters, creating placeholder `FileDescriptor`s\nwith null characters in their names or truncating/failing during lazy\ndependency initialization in `InternalDependenciesOnceInit`.\n\nPiperOrigin-RevId: 1000977826\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "742ac12aff47cb142131bafdb37fca2e53a33e34",
      "old_mode": 33188,
      "old_path": "src/google/protobuf/descriptor.cc",
      "new_id": "e0fe270836102e5d4af954bfb177b992579c7c18",
      "new_mode": 33188,
      "new_path": "src/google/protobuf/descriptor.cc"
    },
    {
      "type": "modify",
      "old_id": "9cd95efd4ec87e65b2639fb127540788cef73370",
      "old_mode": 33188,
      "old_path": "src/google/protobuf/descriptor_unittest.cc",
      "new_id": "eb3bb73b628616364b5d1da625ffbc6d5c90e379",
      "new_mode": 33188,
      "new_path": "src/google/protobuf/descriptor_unittest.cc"
    }
  ]
}