After upgrading our Phabricator installation to 2016 Week 21, a lot of our users started receiving email notifications about commits that aren't obviously related to them.
It looks like the issue may be that Phabricator is sending out audit email to owners of a package for all commits that are in that package, even if no audit is triggered.
For example, one user received an unexpected email about a commit that had X-Phabricator-Mail-Tags: <audit-commit>, <audit-add-auditors>. The commit only had one group auditor, however, and this user wasn't a member of that group. Interestingly, though, the commit did contain files that were part of other packages that the user was a member of, but the groups for those packages were not added as auditors.
Version Information
- phabricator 77d543ba44638a2e43e1b6bb7f75db80b4046409 (Fri, May 20)
- arcanist 0249f90a9a4aa42da0823673a6ac8c620251d82a (Fri, May 20)
- phutil 7ff4bd8dfb0b58686a72821dd0e9e79e0f5cbbb9 (Fri, May 20)