This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryBroad release touches Commit Details, Commit Statistics, Chore, and New Features.
Full changelog
Chore
- remove the unnecessary
symlinkdependency in favor ofgix-fs.
Probably added in the before times by an agent before I could do hunk-by-hunk
reviews.
So let's remove this dep in favor ofgix-fssymlink facilities.
New Features
-
allow worktree stacks to reject terminal symlinks on Windows
Add opt-in validation for terminal non-directory components to the worktree
Stack delegate. This lets callers reject an existing terminal symlink while
reusing the stack’s component-by-component path traversal.Keep the validation Windows-only so platforms with no-follow filesystem
operations incur no additional metadata I/O.
Commit Statistics
- 12 commits contributed to the release.
- 31 days passed between releases.
- 2 commits were understood as conventional.
- 0 issues like '(#ID)' were seen in commit messages
Commit Details
view details- Uncategorized
- Update changelogs prior to release (cb6ec7d)
- Release gix-trace v0.1.21, gix-validate v0.11.3, gix-path v0.12.3, gix-utils v0.3.5, gix-config-value v0.19.0, gix-prompt v0.16.0, gix-sec v0.14.2, gix-url v0.37.0, gix-credentials v0.39.0, safety bump 18 crates (f0ec710)
- Merge pull request #2811 from GitoxideLabs/no-symlink-follow-on-checkout (c4808f9)
- Allow worktree stacks to reject terminal symlinks on Windows (a89272d)
- Remove the unnecessary
symlinkdependency in favor ofgix-fs. (c3e1928) - Merge pull request #2721 from GitoxideLabs/remove-kstring (e70732a)
- Adapt to changes in
gix-attributes(e11d7a2) - Merge pull request #2722 from GitoxideLabs/reasons (c16b5a1)
- Replace lint allowances with expectations (43ff87a)
- Merge pull request #2714 from GitoxideLabs/fix-credentials-parsing (cf3053a)
- Release gix-path v0.12.2, gix-error v0.2.5, gix-utils v0.3.4, gix-date v0.15.6, gix-url v0.36.2, gix-credentials v0.38.2 (27aec47)
- Merge pull request #2646 from GitoxideLabs/report (1b1541e)
Breaking Changes
- Removed `symlink` dependency; use `gix-fs` symlink facilities instead.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vgix-v0.84.0 Allow checkouts of empty repositories; `destination_must_be_empty` becomes `Option<bool>`
- vgix-worktree-stream-v0.33.0 Changes API of `Stream::add_entry_from_path` to require `hash_kind` argument.
- vgix-object-v0.61.0 Renames `Data::hash_kind` to `Data::object_hash` for consistency.
Beta — feedback welcome: [email protected]