This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryUpdates Commit Details, Commit Statistics, and Bug Fixes across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Raise MSRV (Minimum Supported Rust Version) for hash dependency updates. Raise MSRV (Minimum Supported Rust Version) for hash dependency updates. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Preserve wildmatch abort signals for star scans to avoid pathological runtime. Preserve wildmatch abort signals for star scans to avoid pathological runtime. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Refactor | Low |
Update crates to Rust 2024 edition. Update crates to Rust 2024 edition. Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Refactor | Low |
Remove rust_2018_idioms lint declarations. Remove rust_2018_idioms lint declarations. Source: llm_adapter@2026-05-26 Confidence: high |
— |
Full changelog
Bug Fixes
-
preserve wildmatch abort signals for star scans
PropagateAbortToStarStar/AbortAllfrom*handling in the
same cases as Git's wildmatch implementation instead of collapsing
them toNoMatch.This avoids retrying later text positions when a
*followed by a
literal already proved that no viable match exists within the current
path component. Add a regression test for a fuzz-discovered pattern/path
pair that Git rejects immediately but previously caused pathological
runtime ingix-glob.
Commit Statistics
- 9 commits contributed to the release over the course of 28 calendar days.
- 28 days passed between releases.
- 1 commit was understood as conventional.
- 0 issues like '(#ID)' were seen in commit messages
Commit Details
view details- Uncategorized
- Merge pull request #2579 from GitoxideLabs/gix-ignore-fuzz-timeout (9a17734)
- Preserve wildmatch abort signals for star scans (a3ba20c)
- Merge pull request #2568 from GitoxideLabs/dependabot/cargo/cargo-56d6b174d8 (ab2fee1)
- Update crates to Rust 2024 edition (2cb17b2)
- Remove rust_2018_idioms lint declarations (e10d5f6)
- Raise MSRV for hash dependency updates (3675a8d)
- Merge pull request #2551 from GitoxideLabs/fiz-fuzz-timeout (af9c03d)
- Add benchmarks to
gix-globfor possible optimisations (cbc3767) - Merge pull request #2546 from GitoxideLabs/fix-2545 (adb8328)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vgix-v0.84.0 Allow checkouts of empty repositories; `destination_must_be_empty` becomes `Option<bool>`
- vgix-worktree-stream-v0.33.0 Changes API of `Stream::add_entry_from_path` to require `hash_kind` argument.
- vgix-object-v0.61.0 Renames `Data::hash_kind` to `Data::object_hash` for consistency.
Beta — feedback welcome: [email protected]