)]}'
{
  "commit": "c5511df3ee92e86ce3fa383fdd247080019257c7",
  "tree": "93a9268fe88544490dd58156e666dd1863e11340",
  "parents": [
    "38fd2207c0fb4b52a4123935d8c3eab8625fe119"
  ],
  "author": {
    "name": "Damien Neil",
    "email": "dneil@google.com",
    "time": "Fri Jun 05 14:16:24 2026 -0700"
  },
  "committer": {
    "name": "Gopher Robot",
    "email": "gobot@golang.org",
    "time": "Mon Jun 15 10:59:22 2026 -0700"
  },
  "message": "webp: require that VP8/VP8L dimensions match canvas dimensions\n\nVP8 and VP8L chunks contain a width and height. RFC 9649 indicates\nthat this width/height is supposed to match the width/height of\nthe canvas. Verify that they do.\n\nFixes a potential crash when processing a file where an alpha-channel\nchunk does not match the canvas dimensions.\n\nFixes CVE-2026-46601\nFixes golang/go#79869\n\nChange-Id: I26d13a523870b7cbf4bbd7f5f2383cfc6a6a6964\nReviewed-on: https://go-review.googlesource.com/c/image/+/787681\nLUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Cherry Mui \u003ccherryyz@google.com\u003e\nAuto-Submit: Damien Neil \u003cdneil@google.com\u003e\nReviewed-by: Neal Patel \u003cneal@golang.org\u003e\nReviewed-by: Neal Patel \u003cnealpatel@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "726bebded9f03dc9d4dfeb0db2e335dd3c9028bd",
      "old_mode": 33188,
      "old_path": "webp/decode.go",
      "new_id": "f55de23bff70bf35efd2272d893a4518244da21f",
      "new_mode": 33188,
      "new_path": "webp/decode.go"
    },
    {
      "type": "modify",
      "old_id": "796a8bc66c9b2faa9d9749dd3408fafe3aa6a220",
      "old_mode": 33188,
      "old_path": "webp/decode_test.go",
      "new_id": "d6f4341ef6ed4fc72804b4035c72342bad7feaca",
      "new_mode": 33188,
      "new_path": "webp/decode_test.go"
    }
  ]
}