)]}'
{
  "commit": "d598231700de8fd5e6ba4a698bca4edf21e0c1b2",
  "tree": "a37979dd7a95423409dac6fda0c9ec0ac8adfa59",
  "parents": [
    "30a792be8bcb010631a3ebf50e3941fc49b48956"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Thu Feb 19 13:58:32 2026 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Thu Feb 19 11:13:59 2026 -0800"
  },
  "message": "Update filippo.io/edwards25519 to 1.2.0\n\nSomehow, despite disabling PRs on our GitHub mirror, GitHub\u0027s Dependabot\nmanaged to open a PR on our mirror, which does not take PRs, but the URL\ncannot be resolved because PRs do not exist on that repo.\n\nIt\u0027s complaining about\nhttps://github.com/FiloSottile/edwards25519/security/advisories/GHSA-fw7p-63qq-7hpr.\nThis is a GitHub false positive because we do not use MultiScalarMult.\nIndeed we\u0027re not a Go library at all. All our Go code is test-only.\n\nStill, silence all this by updating.\n\nChange-Id: Ib87ce6cccc1f44642d141537a9abdbac0db1d727\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/89747\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Lily Chen \u003cchlily@google.com\u003e\nCommit-Queue: Lily Chen \u003cchlily@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4cb679d1b6055f0f5fea64867f6f751ad642ddb0",
      "old_mode": 33188,
      "old_path": "go.mod",
      "new_id": "8d0e6cd4adc3fca69acda6808a8403c8e8e9b3b2",
      "new_mode": 33188,
      "new_path": "go.mod"
    },
    {
      "type": "modify",
      "old_id": "00a9201c62a08bca6b4888c810edfe35951f0a71",
      "old_mode": 33188,
      "old_path": "go.sum",
      "new_id": "8877b882c32434ce4998049337436378f7d6ec32",
      "new_mode": 33188,
      "new_path": "go.sum"
    }
  ]
}