This release is meant to address the recently announced Git vulnerability.
Instead of always using /usr/bin/git
, Carthage will now use whichever version of git
is in your $PATH
. This means that /usr/local/bin/git
can be prioritized over Apple's vulnerable build of Git now.
You still must install a patched version of Git yourself, and ensure it lies first in your $PATH
.
Other minor fixes include:
~>
no longer treats 0.x and 0.y as compatible versions- Better error messaging when a repository has no tags
This version is available via Homebrew. Simply run brew update && brew install carthage
.