What's Changed
Breaking Changes
JSON/YAML output (-o json, -o yaml) now contains raw values instead of display text:
creationDateandlastChangeare always ISO 8601 timestamps ("2018-09-14T18:51:00Z"). Previously they were relative text ("8 years ago") unless--iso-timewas passed.repoSizeis a number of bytes (2161012) instead of formatted text ("2.06 MiB").dependenciesis replaced bynumberOfDependencies(number) andmanifestType("Cargo","Npm","PyProject", ornullwhen there is no manifest).
onefetch-manifest crate: ManifestType has a new PyProject variant.
Security Fix
- Fix terminal escape sequence injection through repository data (CVE-2026-100866) By @carfeii in #1829
New Features
- Add pyproject.toml manifest support (PEP 621) by @ChrisJr404 in #1842
- Update Elixir colors to the official brand color by @georgeguimaraes in #1868
Bug Fixes
- Use the default remote for the repository URL by @o2sh in #1873
- Exit with clear error message when repository uses reftable by @Jorge-Polanco-Roque in #1853
Chores
CI / CD
New Contributors
- @Jorge-Polanco-Roque made their first contribution in #1853
- @georgeguimaraes made their first contribution in #1868
- @ChrisJr404 made their first contribution in #1842
- @carfeii made their first contribution in #1829
Full Changelog: 2.28.1...3.0.0