GitoxideLabs/gitoxide gix-v0.82.0

gix v0.82.0 - hardened

on GitHub

Advisories with fixes

• GHSA-9857-6mw7-fq2m
• GHSA-p3hw-mv63-rf9w
• GHSA-f26g-jm89-4g65
• GHSA-x494-mj8g-cj27
• GHSA-pg4w-g64p-qwhj
• GHSA-fr8x-3vfx-f45h

Bug Fixes

• Correctly use $COMMON_DIR/info/exclude to make excludes work in worktrees.
  It turns out there is no per-worktree excludes file either.

• do not open .gitmodule files through symlinks
  This could lead to places outside of the repository that are attacker controller.

• don't follow submodule names with relative paths in them
  This made it possible to trick submodule repos to be opened outside of the
  actual repository.

• Restore Category::to_full_name() to be able to produce any full name.
  Previously it learned to reject certain invalid branch names, but this has to
  be done separately and led to some unpleasant changes in gix as well.

• reject refs/heads/HEAD as branch name during repo initialisation
  Also document that refs/heads/HEAD is allowed if FullName was created
  directly.

• Tree::peel_to_entry() peel to the final tree entry (and only if it's a tree)

• deduplicate entry-finding logic
  The logic for finding entries is duplicated 3 times.

  Use std::ops::ControlFlow for simpler, callback-friendly code.

• std::path::Component has infallible conversion to &[u8]
  Instead of relying on a fallible path and using a default value,
  we can convert directly between a Component and a &[u8].

Chore (BREAKING)

• Upgrade prodash and crosstermion to the latest version.
  This will fix the cargo deny issue as it brings in a newer lru crate.

New Features (BREAKING)

• enforce the specification of alloc_init_bytes to handle untrusted input
  This breaking change is intended to force a decision about how
  much memory allocation an untrusted party can command by tempering
  with binary file formats.
• Use imara-diff-v2 with git sliders processing
  The slider post-processing imrpoves the diff quality for about 8% slower diffs.
  Line-counts, however, will be 50% faster to compute.

Other

• remove confusing map()

New Features

• automatically limit allocation size on untrusted repositories.
  This can be controlled via gitoxide.objects.allocLimitIfReducedTrust.
• read GIX_ALLOC_BYTES and pass them to gix-odb for reading untrusted input
• add sha256 to gix

Documentation

• add crate-root doctests

Commit Statistics

• 50 commits contributed to the release over the course of 32 calendar days.
• 32 days passed between releases.
• 14 commits were understood as conventional.
• 0 issues like '(#ID)' were seen in commit messages

Commit Details