This is only for breaking changes, apparently, so presumably that situation won’t arise.
I would be remiss if I didn’t take this opportunity to ask: the current API for retrieving commit metadata relies on git’s information about the committer, but you have much better information available to you. You know who actually pushed the commit.
In an enterprise setting, that’s a big deal, because it’s easy for users to have misconfigurations. We have no shortage of commits in our repositories from ec2-user or root.
I don’t think it makes sense to replace the information git supplies, but could you please augment it?