)]}'
{
  "commit": "7409ada33f99c0d74db2b0389c51a15de116e48d",
  "tree": "2d6e9f4fbbf5e55be53c6aa023a892e3ecc8d40a",
  "parents": [
    "8c4c897d0a94c7977368511b3127acb5ab2cf5cf"
  ],
  "author": {
    "name": "Damien Neil",
    "email": "dneil@google.com",
    "time": "Wed Apr 15 16:27:23 2026 -0400"
  },
  "committer": {
    "name": "Damien Neil",
    "email": "dneil@google.com",
    "time": "Wed Apr 15 16:35:59 2026 -0700"
  },
  "message": "cmd/pack: refuse to extract files with directory components\n\nDo not write to /etc/passwd when running \"go tool pack x evil.a\"\non an archive containing a file named /etc/passwd.\n\nFixes #78778\n\nChange-Id: I4cf69b81af62321ffbb41ace679672a86a6a6964\nReviewed-on: https://go-review.googlesource.com/c/go/+/767520\nReviewed-by: Nicholas Husin \u003cnsh@golang.org\u003e\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d67112b0891565fad82ce5289d38b81621a907f7",
      "old_mode": 33188,
      "old_path": "src/cmd/pack/pack.go",
      "new_id": "5269c7465cbae9fcb7d620ce8fe07a7289ed7b90",
      "new_mode": 33188,
      "new_path": "src/cmd/pack/pack.go"
    },
    {
      "type": "modify",
      "old_id": "2922ada8e923cbc229bfc39b9b5690b6d4df3c7c",
      "old_mode": 33188,
      "old_path": "src/cmd/pack/pack_test.go",
      "new_id": "b46847bc1452d88c0a24ad66e54945b1a71fd26f",
      "new_mode": 33188,
      "new_path": "src/cmd/pack/pack_test.go"
    }
  ]
}