Commit#to_patch called from CommitController
The commit controller responds to the patch format; https://gitlab.com/gitlab-org/gitlab-ce/blob/2df09a403ba4f97cce034032d0e03cb55a6b65be/app/controllers/projects/commit_controller.rb#L27
This calls Commit#to_patch directly, while this should be done through Gitaly.