GitoxideLabs/gitoxide gitoxide-core-v0.62.0

gitoxide-core v0.62.0

on GitHub

New Features

• add a gix editor command Provide a small plumbing command that opens zero or more paths with
  Repository::editor()'s Git-compatible selection. Prepare editor definitions with
  command-aware argument splitting so PATH-resolved programs run directly while
  actual shell syntax still uses the shell, reject explicitly empty settings, and
  honor ':' as the no-op editor.

Bug Fixes

• validate received ref names before writing

  gix free pack receive --refs-directory joins network-advertised ref
  names onto the output directory. Its leading-slash assertion did not
  reject refs/heads/../../../outside, allowing the advertised object ID
  to overwrite a file outside that directory.

  Use gix::validate::reference::name() before path conversion or directory
  creation for every ref variant. Invalid names now return InvalidInput
  instead of being written or triggering the absolute-path assertion.
  The shared writer covers both blocking and async clients.

  Git reference: fetch-pack.c::filter_refs() rejects malformed refs/
  names with check_refname_format(), and remote.c::get_fetch_map()
  ignores invalid destination refs. The attached reproduction, run through
  jtt run with Git 2.54.0, confirms that Git ignores the funny ref and the
  fixed CLI returns an error without changing the outside sentinel. The
  fake upload-pack was made to drain stdin to avoid an early-exit race.

Changed (BREAKING)

• migrate errors to gix-error

  rubberstamp

• raise MSRV to Rust 1.88

  The newly published dua-core 3.3 release used by linked-worktree removal
  requires Rust 1.88, so raise every workspace crate and the advertised badge
  together.

  Keep the MSRV checks buildable by selecting the latest sysinfo and rusqlite
  release lines that support Rust 1.88.

Commit Statistics

• 12 commits contributed to the release over the course of 31 calendar days.
• 32 days passed between releases.
• 4 commits were understood as conventional.
• 1 unique issue was worked on: #3005

Commit Details