[qt/qtqa/gerrit]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/qtqa/gerrit Pushed by mirror-service into branch 'upstream/master'. Changed from 6d4969a435ef77e241154783516819016f4a7f23 to 9574f0b7e9ae03a1cd9c96a76c6dd44cbd3bf3cd Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit 9574f0b7e9ae03a1cd9c96a76c6dd44cbd3bf3cd by Luca Milanesio on 31/07/2026 at 10:19.. Warn about the dangers of allowing auto-merge on push When granting the submit permission on refs/for/* and refs/* the ACLs are effectively bypassed because of the ability to push to any branch without any gates, including privilege escalation. Make the existing note more prominent and explicitly mention the danger of privilege escalation. Release-Notes: Clarify the impact of granting Submit on refs/* and refs/for/* Change-Id: I24653b4efd25d2471d4e4e8737b9d1c45174443c https://invent.kde.org/qt/qtqa/gerrit/-/commit/9574f0b7e9ae03a1cd9c96a76c6dd44cbd3bf3cd