This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryBroad release touches Commit Details, Commit Statistics, https://www.conventionalcommits.org, and 9a17734.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Dependency | Low |
Raise MSRV for hash dependency updates Raise MSRV for hash dependency updates Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Make `gix-ignore` and `gix-attributes` fuzz resilient against slow globs Make `gix-ignore` and `gix-attributes` fuzz resilient against slow globs Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Bugfix | Medium |
Sanitize gix-ignore fuzz input Sanitize gix-ignore fuzz input Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Refactor | Low |
Update crates to Rust 2024 edition Update crates to Rust 2024 edition Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Refactor | Low |
Remove rust_2018_idioms lint declarations Remove rust_2018_idioms lint declarations Source: llm_adapter@2026-05-26 Confidence: high |
— |
| Refactor | Low |
Document why each fixture archive is .gitignored Document why each fixture archive is .gitignored Source: llm_adapter@2026-05-26 Confidence: high |
— |
Full changelog
Commit Statistics
- 14 commits contributed to the release over the course of 28 calendar days.
- 28 days passed between releases.
- 0 commits were understood as conventional.
- 0 issues like '(#ID)' were seen in commit messages
Commit Details
view details- Uncategorized
- Merge pull request #2579 from GitoxideLabs/gix-ignore-fuzz-timeout (9a17734)
- Add pathological gix-ignore case to corpus (fe36476)
- Merge pull request #2575 from SarthakB11/fix/issue-2316 (4743361)
- Review (1980190)
- Document why each fixture archive is .gitignored (e3d5a04)
- Merge pull request #2572 from GitoxideLabs/fix/sanitize-ignore-fuzz-input (666d441)
- Sanitize gix-ignore fuzz input (3a678c9)
- Merge pull request #2568 from GitoxideLabs/dependabot/cargo/cargo-56d6b174d8 (ab2fee1)
- Update crates to Rust 2024 edition (2cb17b2)
- Remove rust_2018_idioms lint declarations (e10d5f6)
- Raise MSRV for hash dependency updates (3675a8d)
- Merge pull request #2551 from GitoxideLabs/fiz-fuzz-timeout (af9c03d)
- Make
gix-ignoreandgix-attributesfuzz resilient against slow globs (9b77025) - Merge pull request #2546 from GitoxideLabs/fix-2545 (adb8328)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vgix-v0.84.0 Allow checkouts of empty repositories; `destination_must_be_empty` becomes `Option<bool>`
- vgix-worktree-stream-v0.33.0 Changes API of `Stream::add_entry_from_path` to require `hash_kind` argument.
- vgix-object-v0.61.0 Renames `Data::hash_kind` to `Data::object_hash` for consistency.
Beta — feedback welcome: [email protected]