This release fixes issues for SREs watching stability and regressions.
Published 12d
Version Control
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
blazingly-fast
built-with-rust
cli
git
version-control
Affected surfaces
auth
Summary
AI summaryUpdates Commit Details, Commit Statistics, and Bug Fixes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Reject carriage return when parsing credentials Reject carriage return when parsing credentials Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
Bug Fixes
- also reject carriage return when parsing credentials
Test
- cover carriage returns in credential context values
Commit Statistics
- 5 commits contributed to the release.
- 50 days passed between releases.
- 2 commits were understood as conventional.
- 0 issues like '(#ID)' were seen in commit messages
Commit Details
view details- Uncategorized
- Cover carriage returns in credential context values (a30d02f)
- Also reject carriage return when parsing credentials (3a99e25)
- Merge pull request #2686 from GitoxideLabs/try-redirect-re-auth (d8aeaac)
- Adapt to changes in
gix-transport(6a7a717) - Merge pull request #2618 from GitoxideLabs/report (f7d4f33)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vgix-v0.84.0 Allow checkouts of empty repositories; `destination_must_be_empty` becomes `Option<bool>`
- vgix-worktree-stream-v0.33.0 Changes API of `Stream::add_entry_from_path` to require `hash_kind` argument.
- vgix-object-v0.61.0 Renames `Data::hash_kind` to `Data::object_hash` for consistency.
Beta — feedback welcome: [email protected]