)]}'
{
  "commit": "4e853962abb9ddb4f22d1c4d47d591aeafa09784",
  "tree": "10666eb4875016d3924967c60f17416b00d6e5a9",
  "parents": [
    "95bb8d120df37e5d89e64b87f50192b65dd29ad8"
  ],
  "author": {
    "name": "Robert Lazarski",
    "email": "robertlazarski@gmail.com",
    "time": "Mon Sep 07 16:08:45 2026 -1000"
  },
  "committer": {
    "name": "Robert Lazarski",
    "email": "robertlazarski@gmail.com",
    "time": "Wed Sep 09 05:44:47 2026 -1000"
  },
  "message": "Say on the home page that 2.0.2 is a security release\n\nAlso records why the context externalization machinery stays. AXIS2-6107 scoped\nits removal and it should not be done: SessionContext is an HttpSession\nattribute that containers serialize when persisting sessions, EndpointReference\nround trips only because its custom externalization handles Axiom values that\nare not serializable, and persisting a paused MessageContext is a capability\nrather than dead code. SECURITY.md item 4 now carries those three reasons so a\nscan finding here has a citable answer instead of being re-argued. The Rampart\nparagraph also still promised to ship after 2.0.1.\n\nCo-Authored-By: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4a7f5de377bc50cf5a3aee1a757ea5ae95804251",
      "old_mode": 33188,
      "old_path": "SECURITY.md",
      "new_id": "d49379573bf3504b0ccbbfd01c25a56e93078940",
      "new_mode": 33188,
      "new_path": "SECURITY.md"
    },
    {
      "type": "modify",
      "old_id": "e9a4e7e9fccd283c9a9245fa4ea10e1086092938",
      "old_mode": 33188,
      "old_path": "src/site/xdoc/index.xml",
      "new_id": "ed296cc6056d6b5aa370882881f8bc9819922edd",
      "new_mode": 33188,
      "new_path": "src/site/xdoc/index.xml"
    }
  ]
}