Update module github.com/go-git/go-git/v5 to v5.19.1 #27

renovate-bot · 2025-11-17T09:22:07+01:00

renovate-bot commented

2025-11-17 09:22:07 +01:00

This PR contains the following updates:

Package	Type	Update	Change
github.com/go-git/go-git/v5	require	minor	`v5.12.0` → `v5.19.1`

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

`v5.19.1`

Compare Source

What's Changed

v5: plumbing: transport/ssh, Shell-quote path by @hiddeco in #2068
v5: git: submodule, Fix relative URL resolution by @hiddeco in #2070
v5: git: submodule, canonical remote for relative URLs by @hiddeco in #2074
v5: git: submodule, error on remote without URLs by @hiddeco in #2078
v5: plumbing: format/idxfile, Validate offset64 indices by @hiddeco in #2084
v5: *: Reject malformed variable-length integers by @hiddeco in #2092
v5: plumbing: format/packfile, Tighten delta validation by @hiddeco in #2091
v5: Add worktreeFilesystem wrapper for worktree and hardening by @hiddeco in #2100
v5: config: validate submodule names by @hiddeco in #2082
build: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2111
v5: git: Allow MkdirAll on worktree-root paths by @hiddeco in #2117
v5: git: Stop validating symlink target paths by @pjbgf in #2116
v5: plumbing: format decoder input bounds and contracts by @hiddeco in #2125
plumbing: format/packfile, cap delta chain depth in parser by @pjbgf in #2137

Full Changelog: https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1

`v5.19.0`

Compare Source

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2010
v5: Bump sha1cd and go-billy by @pjbgf in #2060
v5: Align object encoding with upstream by @pjbgf in #2065

Full Changelog: https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0

`v5.18.0`

Compare Source

What's Changed

plumbing: transport/http, Add support for followRedirects policy by @pjbgf in #2004

Full Changelog: https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0

`v5.17.2`

Compare Source

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1941
dotgit: skip writing pack files that already exist on disk by @pjbgf in #1944

⚠️ This release fixes a bug (#1942) that blocked some users from upgrading to v5.17.1. Thanks @pskrbasu for reporting it. 🙇

Full Changelog: https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2

`v5.17.1`

Compare Source

What's Changed

build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1930
[v5] plumbing: format/index, Improve v4 entry name validation by @pjbgf in #1935
[v5] plumbing: format/idxfile, Fix version and fanout checks by @pjbgf in #1937

Full Changelog: https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1

`v5.17.0`

Compare Source

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1839
git: worktree, optimize infiles function for very large repos by @k-anshul in #1853
git: Add strict checks for supported extensions by @pjbgf in #1861
backport, git: Improve Status() speed with new index.ModTime check by @cedric-appdirect in #1862
storage: filesystem, Avoid overwriting loose obj files by @pjbgf in #1864

Full Changelog: https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0

`v5.16.5`

Compare Source

What's Changed

build: Update module golang.org/x/crypto to v0.45.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1744
build: Bump Go test versions to 1.23-1.25 (v5) by @pjbgf in #1746
[v5] git: worktree, Don't delete local untracked files when resetting worktree by @Ch00k in #1800
Expand packfile checks by @pjbgf in #1836

Full Changelog: https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5

`v5.16.4`

Compare Source

What's Changed

backport plumbing: format/idxfile, prevent panic by @swills in #1732
[backport] build: test, Fix build on Windows. by @pjbgf in #1734
build: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1742
build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1741
build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #1743

Full Changelog: https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4

`v5.16.3`

Compare Source

What's Changed

internal: Expand regex to fix build [5.x] by @baloo in #1644
build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @baloo in #1646
plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @baloo in #1633

Full Changelog: https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3

`v5.16.2`

Compare Source

What's Changed

utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by @kane8n in #1567

Full Changelog: https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2

`v5.16.1`

Compare Source

What's Changed

utils: merkletrie, Fix diff on sparse-checkout index. Fixes #1406 to releases/v5.x by @kane8n in #1561

New Contributors

@kane8n made their first contribution in #1561

Full Changelog: https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1

`v5.16.0`

Compare Source

What's Changed

[v5] plumbing: support mTLS for HTTPS protocol by @hiddeco in #1510
v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514 by @pjbgf in #1515

Full Changelog: https://github.com/go-git/go-git/compare/v5.15.0...v5.16.0

`v5.15.0`

Compare Source

What's Changed

plumbing: add cert auth support to releases/v5.x by @Javier-varez in #1482
v5: Bump dependencies by @pjbgf in #1505

Full Changelog: https://github.com/go-git/go-git/compare/v5.14.0...v5.15.0

`v5.14.0`

Compare Source

What's Changed

v5: Bump Go and dependencies to mitigate GO-2025-3487 by @pjbgf in #1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0

`v5.13.2`

Compare Source

What's Changed

plumbing: use the correct user agent string. Fixes #883 by @uragirii in #1364
build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @dependabot in #1365
build: bump the golang-org group with 2 updates by @dependabot in #1367
build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @dependabot in #1368
build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in #1378
build: bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #1376
build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @dependabot in #1377
git: worktree, fix restoring dot slash files (backported to v5). Fixes #1176 by @BeChris in #1361
build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by @dependabot in #1392
git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes #1150 by @BeChris in #1359
build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by @dependabot in #1383

Full Changelog: https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2

`v5.13.1`

Compare Source

What's Changed

build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @dependabot in #1327
build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by @dependabot in #1329
build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by @dependabot in #1340
Revert "plumbing: transport/ssh, Add support for SSH @cert-authority." by @pjbgf in #1346

Full Changelog: https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1

`v5.13.0`

Compare Source

What's Changed

build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in /cli/go-git by @dependabot in #1065
build: bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #1068
build: bump golang.org/x/net from 0.23.0 to 0.24.0 by @dependabot in #1071
Properly support skipping of non-mandatory extensions by @codablock in #1066
git: Refine some codes in test and non-test. by @onee-only in #1077
plumbing: protocol/packp, client-side filter capability support by @edigaryev in #1000
build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by @dependabot in #1078
plumbing: fix sideband demux on flush by @aymanbagabas in #1084
storage: dotgit, head reference usually comes first by @aymanbagabas in #1085
build: bump golang.org/x/text from 0.14.0 to 0.15.0 by @dependabot in #1091
build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #1094
build: bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #1093
git: Added an example for Repository.Branches by @johnmatthiggins in #1088
git: worktree_commit, Modify checking empty commit. Fixes #723 by @onee-only in #1050
plumbing: transport/http, Wrap http errors to return reason. Fixes #1097 by @ggambetti in #1100
build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #1106
build: bump golang.org/x/text from 0.15.0 to 0.16.0 by @dependabot in #1107
Bumps Go versions and go-billy by @pjbgf in #1056
_examples: Fixed a dead link COMPATIBILITY.md by @gecko655 in #1109
build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in /cli/go-git by @dependabot in #1115
build: bump github.com/elazarl/goproxy from v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb by @hbelmiro in #1124
build: bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #1104
Add option approximating git clean -x flag. by @msuozzo in #995
Revert "Add option approximating git clean -x flag." by @pjbgf in #1129
Fix reference updated concurrently error for the filesystem storer by @Javier-varez in #1116
build: bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #1134
utils: merkletrie, Align error message with upstream by @pjbgf in #1142
plumbing: transport/file, Change paths to absolute by @pjbgf in #1141
plumbing: gitignore, Fix loading of ignored .gitignore files. by @Achilleshiel in #1114
build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by @dependabot in #1147
plumbing: transport/ssh, Add support for SSH @cert-authority. by @Javier-varez in #1157
build: run example tests during CI workflow by @crazybolillo in #1030
storage: filesystem, Fix object cache not working due to uninitialised objects being put into cache by @SatelliteMind in #1138
git: Fix fetching missing commits by @AriehSchneier in #1032
plumbing: format/packfile, remove duplicate checks in findMatch() by @edigaryev in #1152
git: worktree, Fix file reported as Untracked while it is committed by @rodrigocam in #1023
build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by @dependabot in #1160
plumbing: filemode, Remove check for setting size of .git/index file by @nicholasSUSE in #1159
build: bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1163
Fix some lint warning and increase stalebot to 180 days by @pjbgf in #1128
adjust path extracted from file: url on Windows by @tomqwpl in #416
build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by @dependabot in #1164
Add RestoreStaged to Worktree that mimics the behaviour of git restore --staged ... by @ben-tbotlabs in #493
plumbing: signature, support the same x509 signature formats as git by @yoavamit in #1169
fix: allow discovery of non bare repos in fsLoader by @jakobmoellerdev in #1170
build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by @dependabot in #1178
build: bump golang.org/x/text from 0.17.0 to 0.18.0 by @dependabot in #1179
build: bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1184
Consume push URLs when they are provided by @mcepl in #1191
*: use gocheck's MkDir instead of TempDir for tests. Fixes #807 by @uragirii in #1194
build: bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #1200
worktree: .git/index not correctly generated when running on Windows by @BeChris in #1198
git: worktree, Fix sparse reset. Fixes #90 by @onee-only in #1101
git: worktree, Pass context on updateSubmodules. Fixes #1098 by @onee-only in #1154
build: bump github.com/go-git/go-billy/v5 from 5.5.1-0.20240427054813-8453aa90c6ec to 5.6.0 by @dependabot in #1211
Update contributing guidelines by @pjbgf in #1217
build: bump github.com/ProtonMail/go-crypto from 1.0.0 to 1.1.1 by @dependabot in #1222
build: bump golang.org/x/sys from 0.26.0 to 0.27.0 by @dependabot in #1223
build: bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in #1221
build: bump github.com/ProtonMail/go-crypto from 1.1.1 to 1.1.2 by @dependabot in #1226
build: bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #1232
build: bump github.com/ProtonMail/go-crypto from 1.1.2 to 1.1.3 by @dependabot in #1231
build: General improvements around fuzzing by @pjbgf in #1229
build: bump golang.org/x/net from 0.30.0 to 0.32.0 by @dependabot in #1241
build: group dependabot updates for golang.org by @AriehSchneier in #1243
build: bump github/codeql-action from 2.22.11 to 3.27.6 by @dependabot in #1244
build: bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /cli/go-git by @dependabot in #1246
build: bump golang.org/x/crypto from 0.30.0 to 0.31.0 by @dependabot in #1247
build: bump github.com/gliderlabs/ssh from 0.3.7 to 0.3.8 by @dependabot in #1248
add comment preventing people from creating invalid trees by @petar in #732
build: bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot in #1250
plumbing: Properly encode index version 4 by @BeChris in #1251
Fix typos by @deining in #1148
Fix reset files in subfolders by @linglo in #1177
git: update switch cases by @hezhizhen in #1182
build: bump golang.org/x/net from 0.32.0 to 0.33.0 in the golang-org group by @dependabot in #1256
fix(1212): Fix invalid reference name error while cloning branches containing /- by @varmakarthik12 in #1257
pktline : accept upercase hexadecimal value as pktline length information by @BeChris in #1220
build: bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #1260
build: bump github.com/elazarl/goproxy from 0.0.0-20240618083138-03be62527ccb to 1.2.1 by @dependabot in #1262
git: worktree_commit, sanitize author and commiter name and email before creating the commit object. Fixes #680 by @BeChris in #1261

New Contributors

@johnmatthiggins made their first contribution in #1088
@ggambetti made their first contribution in #1100
@gecko655 made their first contribution in #1109
@hbelmiro made their first contribution in #1124
@msuozzo made their first contribution in #995
@Javier-varez made their first contribution in #1116
@Achilleshiel made their first contribution in #1114
@crazybolillo made their first contribution in #1030
@SatelliteMind made their first contribution in #1138
@rodrigocam made their first contribution in #1023
@nicholasSUSE made their first contribution in #1159
@tomqwpl made their first contribution in #416
@ben-tbotlabs made their first contribution in #493
@yoavamit made their first contribution in #1169
@uragirii made their first contribution in #1194
@petar made their first contribution in #732
@deining made their first contribution in #1148
@linglo made their first contribution in #1177
@varmakarthik12 made their first contribution in #1257

Full Changelog: https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | require | minor | `v5.12.0` → `v5.19.1` | --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.19.1`](https://github.com/go-git/go-git/releases/tag/v5.19.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1) #### What's Changed - v5: plumbing: transport/ssh, Shell-quote path by [@hiddeco](https://github.com/hiddeco) in [#2068](https://github.com/go-git/go-git/pull/2068) - v5: git: submodule, Fix relative URL resolution by [@hiddeco](https://github.com/hiddeco) in [#2070](https://github.com/go-git/go-git/pull/2070) - v5: git: submodule, canonical remote for relative URLs by [@hiddeco](https://github.com/hiddeco) in [#2074](https://github.com/go-git/go-git/pull/2074) - v5: git: submodule, error on remote without URLs by [@hiddeco](https://github.com/hiddeco) in [#2078](https://github.com/go-git/go-git/pull/2078) - v5: plumbing: format/idxfile, Validate offset64 indices by [@hiddeco](https://github.com/hiddeco) in [#2084](https://github.com/go-git/go-git/pull/2084) - v5: \*: Reject malformed variable-length integers by [@hiddeco](https://github.com/hiddeco) in [#2092](https://github.com/go-git/go-git/pull/2092) - v5: plumbing: format/packfile, Tighten delta validation by [@hiddeco](https://github.com/hiddeco) in [#2091](https://github.com/go-git/go-git/pull/2091) - v5: Add `worktreeFilesystem` wrapper for worktree and hardening by [@hiddeco](https://github.com/hiddeco) in [#2100](https://github.com/go-git/go-git/pull/2100) - v5: config: validate submodule names by [@hiddeco](https://github.com/hiddeco) in [#2082](https://github.com/go-git/go-git/pull/2082) - build: Update module github.com/go-git/go-git/v5 to v5.19.0 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2111](https://github.com/go-git/go-git/pull/2111) - v5: git: Allow MkdirAll on worktree-root paths by [@hiddeco](https://github.com/hiddeco) in [#2117](https://github.com/go-git/go-git/pull/2117) - v5: git: Stop validating symlink target paths by [@pjbgf](https://github.com/pjbgf) in [#2116](https://github.com/go-git/go-git/pull/2116) - v5: plumbing: format decoder input bounds and contracts by [@hiddeco](https://github.com/hiddeco) in [#2125](https://github.com/go-git/go-git/pull/2125) - plumbing: format/packfile, cap delta chain depth in parser by [@pjbgf](https://github.com/pjbgf) in [#2137](https://github.com/go-git/go-git/pull/2137) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1> ### [`v5.19.0`](https://github.com/go-git/go-git/releases/tag/v5.19.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0) #### What's Changed - build: Update module github.com/go-git/go-git/v5 to v5.18.0 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2010](https://github.com/go-git/go-git/pull/2010) - v5: Bump sha1cd and go-billy by [@pjbgf](https://github.com/pjbgf) in [#2060](https://github.com/go-git/go-git/pull/2060) - v5: Align object encoding with upstream by [@pjbgf](https://github.com/pjbgf) in [#2065](https://github.com/go-git/go-git/pull/2065) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0> ### [`v5.18.0`](https://github.com/go-git/go-git/releases/tag/v5.18.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0) #### What's Changed - plumbing: transport/http, Add support for followRedirects policy by [@pjbgf](https://github.com/pjbgf) in [#2004](https://github.com/go-git/go-git/pull/2004) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.17.2...v5.18.0> ### [`v5.17.2`](https://github.com/go-git/go-git/releases/tag/v5.17.2) [Compare Source](https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2) #### What's Changed - build: Update module github.com/go-git/go-git/v5 to v5.17.1 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1941](https://github.com/go-git/go-git/pull/1941) - dotgit: skip writing pack files that already exist on disk by [@pjbgf](https://github.com/pjbgf) in [#1944](https://github.com/go-git/go-git/pull/1944) :warning: This release fixes a bug ([#1942](https://github.com/go-git/go-git/issues/1942)) that blocked some users from upgrading to `v5.17.1`. Thanks [@pskrbasu](https://github.com/pskrbasu) for reporting it. :bow: **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2> ### [`v5.17.1`](https://github.com/go-git/go-git/releases/tag/v5.17.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1) #### What's Changed - build: Update module github.com/cloudflare/circl to v1.6.3 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1930](https://github.com/go-git/go-git/pull/1930) - \[v5] plumbing: format/index, Improve v4 entry name validation by [@pjbgf](https://github.com/pjbgf) in [#1935](https://github.com/go-git/go-git/pull/1935) - \[v5] plumbing: format/idxfile, Fix version and fanout checks by [@pjbgf](https://github.com/pjbgf) in [#1937](https://github.com/go-git/go-git/pull/1937) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1> ### [`v5.17.0`](https://github.com/go-git/go-git/releases/tag/v5.17.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0) #### What's Changed - build: Update module github.com/go-git/go-git/v5 to v5.16.5 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1839](https://github.com/go-git/go-git/pull/1839) - git: worktree, optimize infiles function for very large repos by [@k-anshul](https://github.com/k-anshul) in [#1853](https://github.com/go-git/go-git/pull/1853) - git: Add strict checks for supported extensions by [@pjbgf](https://github.com/pjbgf) in [#1861](https://github.com/go-git/go-git/pull/1861) - backport, git: Improve Status() speed with new index.ModTime check by [@cedric-appdirect](https://github.com/cedric-appdirect) in [#1862](https://github.com/go-git/go-git/pull/1862) - storage: filesystem, Avoid overwriting loose obj files by [@pjbgf](https://github.com/pjbgf) in [#1864](https://github.com/go-git/go-git/pull/1864) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0> ### [`v5.16.5`](https://github.com/go-git/go-git/releases/tag/v5.16.5) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5) #### What's Changed - build: Update module golang.org/x/crypto to v0.45.0 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1744](https://github.com/go-git/go-git/pull/1744) - build: Bump Go test versions to 1.23-1.25 (v5) by [@pjbgf](https://github.com/pjbgf) in [#1746](https://github.com/go-git/go-git/pull/1746) - \[v5] git: worktree, Don't delete local untracked files when resetting worktree by [@Ch00k](https://github.com/Ch00k) in [#1800](https://github.com/go-git/go-git/pull/1800) - Expand packfile checks by [@pjbgf](https://github.com/pjbgf) in [#1836](https://github.com/go-git/go-git/pull/1836) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5> ### [`v5.16.4`](https://github.com/go-git/go-git/releases/tag/v5.16.4) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4) #### What's Changed - backport plumbing: format/idxfile, prevent panic by [@swills](https://github.com/swills) in [#1732](https://github.com/go-git/go-git/pull/1732) - \[backport] build: test, Fix build on Windows. by [@pjbgf](https://github.com/pjbgf) in [#1734](https://github.com/go-git/go-git/pull/1734) - build: Update module golang.org/x/net to v0.38.0 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1742](https://github.com/go-git/go-git/pull/1742) - build: Update module github.com/cloudflare/circl to v1.6.1 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1741](https://github.com/go-git/go-git/pull/1741) - build: Update module github.com/go-git/go-git/v5 to v5.13.0 \[SECURITY] (releases/v5.x) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#1743](https://github.com/go-git/go-git/pull/1743) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4> ### [`v5.16.3`](https://github.com/go-git/go-git/releases/tag/v5.16.3) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3) #### What's Changed - internal: Expand regex to fix build \[5.x] by [@baloo](https://github.com/baloo) in [#1644](https://github.com/go-git/go-git/pull/1644) - build: raise timeouts for windows CI tests and disable CIFuzz \[5.x] by [@baloo](https://github.com/baloo) in [#1646](https://github.com/go-git/go-git/pull/1646) - plumbing: support commits extra headers, support jujutsu signed commit \[5.x] by [@baloo](https://github.com/baloo) in [#1633](https://github.com/go-git/go-git/pull/1633) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3> ### [`v5.16.2`](https://github.com/go-git/go-git/releases/tag/v5.16.2) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2) #### What's Changed - utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by [@kane8n](https://github.com/kane8n) in [#1567](https://github.com/go-git/go-git/pull/1567) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.16.1...v5.16.2> ### [`v5.16.1`](https://github.com/go-git/go-git/releases/tag/v5.16.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1) #### What's Changed - utils: merkletrie, Fix diff on sparse-checkout index. Fixes [#1406](https://github.com/go-git/go-git/issues/1406) to releases/v5.x by [@kane8n](https://github.com/kane8n) in [#1561](https://github.com/go-git/go-git/pull/1561) #### New Contributors - [@kane8n](https://github.com/kane8n) made their first contribution in [#1561](https://github.com/go-git/go-git/pull/1561) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.16.0...v5.16.1> ### [`v5.16.0`](https://github.com/go-git/go-git/releases/tag/v5.16.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.15.0...v5.16.0) #### What's Changed - \[v5] plumbing: support mTLS for HTTPS protocol by [@hiddeco](https://github.com/hiddeco) in [#1510](https://github.com/go-git/go-git/pull/1510) - v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix [#1514](https://github.com/go-git/go-git/issues/1514) by [@pjbgf](https://github.com/pjbgf) in [#1515](https://github.com/go-git/go-git/pull/1515) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.15.0...v5.16.0> ### [`v5.15.0`](https://github.com/go-git/go-git/releases/tag/v5.15.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.14.0...v5.15.0) #### What's Changed - plumbing: add cert auth support to `releases/v5.x` by [@Javier-varez](https://github.com/Javier-varez) in [#1482](https://github.com/go-git/go-git/pull/1482) - v5: Bump dependencies by [@pjbgf](https://github.com/pjbgf) in [#1505](https://github.com/go-git/go-git/pull/1505) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.14.0...v5.15.0> ### [`v5.14.0`](https://github.com/go-git/go-git/releases/tag/v5.14.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0) #### What's Changed - v5: Bump Go and dependencies to mitigate [GO-2025-3487](https://pkg.go.dev/vuln/GO-2025-3487) by [@pjbgf](https://github.com/pjbgf) in [#1436](https://github.com/go-git/go-git/pull/1436) :warning: Note that this version requires Go 1.23, due to the bump to `golang.org/x/crypto@v0.35.0` which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release. **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0> ### [`v5.13.2`](https://github.com/go-git/go-git/releases/tag/v5.13.2) [Compare Source](https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2) #### What's Changed - plumbing: use the correct user agent string. Fixes [#883](https://github.com/go-git/go-git/issues/883) by [@uragirii](https://github.com/uragirii) in [#1364](https://github.com/go-git/go-git/pull/1364) - build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by [@dependabot](https://github.com/dependabot) in [#1365](https://github.com/go-git/go-git/pull/1365) - build: bump the golang-org group with 2 updates by [@dependabot](https://github.com/dependabot) in [#1367](https://github.com/go-git/go-git/pull/1367) - build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by [@dependabot](https://github.com/dependabot) in [#1368](https://github.com/go-git/go-git/pull/1368) - build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by [@dependabot](https://github.com/dependabot) in [#1378](https://github.com/go-git/go-git/pull/1378) - build: bump github/codeql-action from 3.28.0 to 3.28.1 by [@dependabot](https://github.com/dependabot) in [#1376](https://github.com/go-git/go-git/pull/1376) - build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by [@dependabot](https://github.com/dependabot) in [#1377](https://github.com/go-git/go-git/pull/1377) - git: worktree, fix restoring dot slash files (backported to v5). Fixes [#1176](https://github.com/go-git/go-git/issues/1176) by [@BeChris](https://github.com/BeChris) in [#1361](https://github.com/go-git/go-git/pull/1361) - build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by [@dependabot](https://github.com/dependabot) in [#1392](https://github.com/go-git/go-git/pull/1392) - git: worktree\_status, fix adding dot slash files to working tree (backported to v5). Fixes [#1150](https://github.com/go-git/go-git/issues/1150) by [@BeChris](https://github.com/BeChris) in [#1359](https://github.com/go-git/go-git/pull/1359) - build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by [@dependabot](https://github.com/dependabot) in [#1383](https://github.com/go-git/go-git/pull/1383) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2> ### [`v5.13.1`](https://github.com/go-git/go-git/releases/tag/v5.13.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1) #### What's Changed - build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by [@dependabot](https://github.com/dependabot) in [#1327](https://github.com/go-git/go-git/pull/1327) - build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by [@dependabot](https://github.com/dependabot) in [#1329](https://github.com/go-git/go-git/pull/1329) - build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by [@dependabot](https://github.com/dependabot) in [#1340](https://github.com/go-git/go-git/pull/1340) - Revert "plumbing: transport/ssh, Add support for SSH [@cert-authority](https://github.com/cert-authority)." by [@pjbgf](https://github.com/pjbgf) in [#1346](https://github.com/go-git/go-git/issues/1346) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1> ### [`v5.13.0`](https://github.com/go-git/go-git/releases/tag/v5.13.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0) #### What's Changed - build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in /cli/go-git by [@dependabot](https://github.com/dependabot) in [#1065](https://github.com/go-git/go-git/pull/1065) - build: bump golang.org/x/net from 0.22.0 to 0.23.0 by [@dependabot](https://github.com/dependabot) in [#1068](https://github.com/go-git/go-git/pull/1068) - build: bump golang.org/x/net from 0.23.0 to 0.24.0 by [@dependabot](https://github.com/dependabot) in [#1071](https://github.com/go-git/go-git/pull/1071) - Properly support skipping of non-mandatory extensions by [@codablock](https://github.com/codablock) in [#1066](https://github.com/go-git/go-git/pull/1066) - git: Refine some codes in test and non-test. by [@onee-only](https://github.com/onee-only) in [#1077](https://github.com/go-git/go-git/pull/1077) - plumbing: protocol/packp, client-side filter capability support by [@edigaryev](https://github.com/edigaryev) in [#1000](https://github.com/go-git/go-git/pull/1000) - build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by [@dependabot](https://github.com/dependabot) in [#1078](https://github.com/go-git/go-git/pull/1078) - plumbing: fix sideband demux on flush by [@aymanbagabas](https://github.com/aymanbagabas) in [#1084](https://github.com/go-git/go-git/pull/1084) - storage: dotgit, head reference usually comes first by [@aymanbagabas](https://github.com/aymanbagabas) in [#1085](https://github.com/go-git/go-git/pull/1085) - build: bump golang.org/x/text from 0.14.0 to 0.15.0 by [@dependabot](https://github.com/dependabot) in [#1091](https://github.com/go-git/go-git/pull/1091) - build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by [@dependabot](https://github.com/dependabot) in [#1094](https://github.com/go-git/go-git/pull/1094) - build: bump golang.org/x/net from 0.24.0 to 0.25.0 by [@dependabot](https://github.com/dependabot) in [#1093](https://github.com/go-git/go-git/pull/1093) - git: Added an example for Repository.Branches by [@johnmatthiggins](https://github.com/johnmatthiggins) in [#1088](https://github.com/go-git/go-git/pull/1088) - git: worktree\_commit, Modify checking empty commit. Fixes [#723](https://github.com/go-git/go-git/issues/723) by [@onee-only](https://github.com/onee-only) in [#1050](https://github.com/go-git/go-git/pull/1050) - plumbing: transport/http, Wrap http errors to return reason. Fixes [#1097](https://github.com/go-git/go-git/issues/1097) by [@ggambetti](https://github.com/ggambetti) in [#1100](https://github.com/go-git/go-git/pull/1100) - build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by [@dependabot](https://github.com/dependabot) in [#1106](https://github.com/go-git/go-git/pull/1106) - build: bump golang.org/x/text from 0.15.0 to 0.16.0 by [@dependabot](https://github.com/dependabot) in [#1107](https://github.com/go-git/go-git/pull/1107) - Bumps Go versions and go-billy by [@pjbgf](https://github.com/pjbgf) in [#1056](https://github.com/go-git/go-git/pull/1056) - \_examples: Fixed a dead link COMPATIBILITY.md by [@gecko655](https://github.com/gecko655) in [#1109](https://github.com/go-git/go-git/pull/1109) - build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in /cli/go-git by [@dependabot](https://github.com/dependabot) in [#1115](https://github.com/go-git/go-git/pull/1115) - build: bump github.com/elazarl/goproxy from v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb by [@hbelmiro](https://github.com/hbelmiro) in [#1124](https://github.com/go-git/go-git/pull/1124) - build: bump golang.org/x/net from 0.25.0 to 0.26.0 by [@dependabot](https://github.com/dependabot) in [#1104](https://github.com/go-git/go-git/pull/1104) - Add option approximating `git clean -x` flag. by [@msuozzo](https://github.com/msuozzo) in [#995](https://github.com/go-git/go-git/pull/995) - Revert "Add option approximating `git clean -x` flag." by [@pjbgf](https://github.com/pjbgf) in [#1129](https://github.com/go-git/go-git/pull/1129) - Fix reference updated concurrently error for the filesystem storer by [@Javier-varez](https://github.com/Javier-varez) in [#1116](https://github.com/go-git/go-git/pull/1116) - build: bump golang.org/x/net from 0.26.0 to 0.27.0 by [@dependabot](https://github.com/dependabot) in [#1134](https://github.com/go-git/go-git/pull/1134) - utils: merkletrie, Align error message with upstream by [@pjbgf](https://github.com/pjbgf) in [#1142](https://github.com/go-git/go-git/pull/1142) - plumbing: transport/file, Change paths to absolute by [@pjbgf](https://github.com/pjbgf) in [#1141](https://github.com/go-git/go-git/pull/1141) - plumbing: gitignore, Fix loading of ignored .gitignore files. by [@Achilleshiel](https://github.com/Achilleshiel) in [#1114](https://github.com/go-git/go-git/pull/1114) - build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by [@dependabot](https://github.com/dependabot) in [#1147](https://github.com/go-git/go-git/pull/1147) - plumbing: transport/ssh, Add support for SSH [@cert-authority](https://github.com/cert-authority). by [@Javier-varez](https://github.com/Javier-varez) in [#1157](https://github.com/go-git/go-git/pull/1157) - build: run example tests during CI workflow by [@crazybolillo](https://github.com/crazybolillo) in [#1030](https://github.com/go-git/go-git/pull/1030) - storage: filesystem, Fix object cache not working due to uninitialised objects being put into cache by [@SatelliteMind](https://github.com/SatelliteMind) in [#1138](https://github.com/go-git/go-git/pull/1138) - git: Fix fetching missing commits by [@AriehSchneier](https://github.com/AriehSchneier) in [#1032](https://github.com/go-git/go-git/pull/1032) - plumbing: format/packfile, remove duplicate checks in findMatch() by [@edigaryev](https://github.com/edigaryev) in [#1152](https://github.com/go-git/go-git/pull/1152) - git: worktree, Fix file reported as `Untracked` while it is committed by [@rodrigocam](https://github.com/rodrigocam) in [#1023](https://github.com/go-git/go-git/pull/1023) - build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by [@dependabot](https://github.com/dependabot) in [#1160](https://github.com/go-git/go-git/pull/1160) - plumbing: filemode, Remove check for setting size of .git/index file by [@nicholasSUSE](https://github.com/nicholasSUSE) in [#1159](https://github.com/go-git/go-git/pull/1159) - build: bump golang.org/x/net from 0.27.0 to 0.28.0 by [@dependabot](https://github.com/dependabot) in [#1163](https://github.com/go-git/go-git/pull/1163) - Fix some lint warning and increase stalebot to 180 days by [@pjbgf](https://github.com/pjbgf) in [#1128](https://github.com/go-git/go-git/pull/1128) - adjust path extracted from file: url on Windows by [@tomqwpl](https://github.com/tomqwpl) in [#416](https://github.com/go-git/go-git/pull/416) - build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by [@dependabot](https://github.com/dependabot) in [#1164](https://github.com/go-git/go-git/pull/1164) - Add RestoreStaged to Worktree that mimics the behaviour of git restore --staged <file>... by [@ben-tbotlabs](https://github.com/ben-tbotlabs) in [#493](https://github.com/go-git/go-git/pull/493) - plumbing: signature, support the same x509 signature formats as git by [@yoavamit](https://github.com/yoavamit) in [#1169](https://github.com/go-git/go-git/pull/1169) - fix: allow discovery of non bare repos in fsLoader by [@jakobmoellerdev](https://github.com/jakobmoellerdev) in [#1170](https://github.com/go-git/go-git/pull/1170) - build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by [@dependabot](https://github.com/dependabot) in [#1178](https://github.com/go-git/go-git/pull/1178) - build: bump golang.org/x/text from 0.17.0 to 0.18.0 by [@dependabot](https://github.com/dependabot) in [#1179](https://github.com/go-git/go-git/pull/1179) - build: bump golang.org/x/net from 0.28.0 to 0.29.0 by [@dependabot](https://github.com/dependabot) in [#1184](https://github.com/go-git/go-git/pull/1184) - Consume push URLs when they are provided by [@mcepl](https://github.com/mcepl) in [#1191](https://github.com/go-git/go-git/pull/1191) - \*: use gocheck's MkDir instead of TempDir for tests. Fixes [#807](https://github.com/go-git/go-git/issues/807) by [@uragirii](https://github.com/uragirii) in [#1194](https://github.com/go-git/go-git/pull/1194) - build: bump golang.org/x/net from 0.29.0 to 0.30.0 by [@dependabot](https://github.com/dependabot) in [#1200](https://github.com/go-git/go-git/pull/1200) - worktree: .git/index not correctly generated when running on Windows by [@BeChris](https://github.com/BeChris) in [#1198](https://github.com/go-git/go-git/pull/1198) - git: worktree, Fix sparse reset. Fixes [#90](https://github.com/go-git/go-git/issues/90) by [@onee-only](https://github.com/onee-only) in [#1101](https://github.com/go-git/go-git/pull/1101) - git: worktree, Pass context on updateSubmodules. Fixes [#1098](https://github.com/go-git/go-git/issues/1098) by [@onee-only](https://github.com/onee-only) in [#1154](https://github.com/go-git/go-git/pull/1154) - build: bump github.com/go-git/go-billy/v5 from 5.5.1-0.20240427054813-8453aa90c6ec to 5.6.0 by [@dependabot](https://github.com/dependabot) in [#1211](https://github.com/go-git/go-git/pull/1211) - Update contributing guidelines by [@pjbgf](https://github.com/pjbgf) in [#1217](https://github.com/go-git/go-git/pull/1217) - build: bump github.com/ProtonMail/go-crypto from 1.0.0 to 1.1.1 by [@dependabot](https://github.com/dependabot) in [#1222](https://github.com/go-git/go-git/pull/1222) - build: bump golang.org/x/sys from 0.26.0 to 0.27.0 by [@dependabot](https://github.com/dependabot) in [#1223](https://github.com/go-git/go-git/pull/1223) - build: bump golang.org/x/crypto from 0.28.0 to 0.29.0 by [@dependabot](https://github.com/dependabot) in [#1221](https://github.com/go-git/go-git/pull/1221) - build: bump github.com/ProtonMail/go-crypto from 1.1.1 to 1.1.2 by [@dependabot](https://github.com/dependabot) in [#1226](https://github.com/go-git/go-git/pull/1226) - build: bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by [@dependabot](https://github.com/dependabot) in [#1232](https://github.com/go-git/go-git/pull/1232) - build: bump github.com/ProtonMail/go-crypto from 1.1.2 to 1.1.3 by [@dependabot](https://github.com/dependabot) in [#1231](https://github.com/go-git/go-git/pull/1231) - build: General improvements around fuzzing by [@pjbgf](https://github.com/pjbgf) in [#1229](https://github.com/go-git/go-git/pull/1229) - build: bump golang.org/x/net from 0.30.0 to 0.32.0 by [@dependabot](https://github.com/dependabot) in [#1241](https://github.com/go-git/go-git/pull/1241) - build: group dependabot updates for golang.org by [@AriehSchneier](https://github.com/AriehSchneier) in [#1243](https://github.com/go-git/go-git/pull/1243) - build: bump github/codeql-action from 2.22.11 to 3.27.6 by [@dependabot](https://github.com/dependabot) in [#1244](https://github.com/go-git/go-git/pull/1244) - build: bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /cli/go-git by [@dependabot](https://github.com/dependabot) in [#1246](https://github.com/go-git/go-git/pull/1246) - build: bump golang.org/x/crypto from 0.30.0 to 0.31.0 by [@dependabot](https://github.com/dependabot) in [#1247](https://github.com/go-git/go-git/pull/1247) - build: bump github.com/gliderlabs/ssh from 0.3.7 to 0.3.8 by [@dependabot](https://github.com/dependabot) in [#1248](https://github.com/go-git/go-git/pull/1248) - add comment preventing people from creating invalid trees by [@petar](https://github.com/petar) in [#732](https://github.com/go-git/go-git/pull/732) - build: bump github/codeql-action from 3.27.6 to 3.27.9 by [@dependabot](https://github.com/dependabot) in [#1250](https://github.com/go-git/go-git/pull/1250) - plumbing: Properly encode index version 4 by [@BeChris](https://github.com/BeChris) in [#1251](https://github.com/go-git/go-git/pull/1251) - Fix typos by [@deining](https://github.com/deining) in [#1148](https://github.com/go-git/go-git/pull/1148) - Fix reset files in subfolders by [@linglo](https://github.com/linglo) in [#1177](https://github.com/go-git/go-git/pull/1177) - git: update switch cases by [@hezhizhen](https://github.com/hezhizhen) in [#1182](https://github.com/go-git/go-git/pull/1182) - build: bump golang.org/x/net from 0.32.0 to 0.33.0 in the golang-org group by [@dependabot](https://github.com/dependabot) in [#1256](https://github.com/go-git/go-git/pull/1256) - fix(1212): Fix invalid reference name error while cloning branches containing /- by [@varmakarthik12](https://github.com/varmakarthik12) in [#1257](https://github.com/go-git/go-git/pull/1257) - pktline : accept upercase hexadecimal value as pktline length information by [@BeChris](https://github.com/BeChris) in [#1220](https://github.com/go-git/go-git/pull/1220) - build: bump github/codeql-action from 3.27.9 to 3.28.0 by [@dependabot](https://github.com/dependabot) in [#1260](https://github.com/go-git/go-git/pull/1260) - build: bump github.com/elazarl/goproxy from 0.0.0-20240618083138-03be62527ccb to 1.2.1 by [@dependabot](https://github.com/dependabot) in [#1262](https://github.com/go-git/go-git/pull/1262) - git: worktree\_commit, sanitize author and commiter name and email before creating the commit object. Fixes [#680](https://github.com/go-git/go-git/issues/680) by [@BeChris](https://github.com/BeChris) in [#1261](https://github.com/go-git/go-git/pull/1261) #### New Contributors - [@johnmatthiggins](https://github.com/johnmatthiggins) made their first contribution in [#1088](https://github.com/go-git/go-git/pull/1088) - [@ggambetti](https://github.com/ggambetti) made their first contribution in [#1100](https://github.com/go-git/go-git/pull/1100) - [@gecko655](https://github.com/gecko655) made their first contribution in [#1109](https://github.com/go-git/go-git/pull/1109) - [@hbelmiro](https://github.com/hbelmiro) made their first contribution in [#1124](https://github.com/go-git/go-git/pull/1124) - [@msuozzo](https://github.com/msuozzo) made their first contribution in [#995](https://github.com/go-git/go-git/pull/995) - [@Javier-varez](https://github.com/Javier-varez) made their first contribution in [#1116](https://github.com/go-git/go-git/pull/1116) - [@Achilleshiel](https://github.com/Achilleshiel) made their first contribution in [#1114](https://github.com/go-git/go-git/pull/1114) - [@crazybolillo](https://github.com/crazybolillo) made their first contribution in [#1030](https://github.com/go-git/go-git/pull/1030) - [@SatelliteMind](https://github.com/SatelliteMind) made their first contribution in [#1138](https://github.com/go-git/go-git/pull/1138) - [@rodrigocam](https://github.com/rodrigocam) made their first contribution in [#1023](https://github.com/go-git/go-git/pull/1023) - [@nicholasSUSE](https://github.com/nicholasSUSE) made their first contribution in [#1159](https://github.com/go-git/go-git/pull/1159) - [@tomqwpl](https://github.com/tomqwpl) made their first contribution in [#416](https://github.com/go-git/go-git/pull/416) - [@ben-tbotlabs](https://github.com/ben-tbotlabs) made their first contribution in [#493](https://github.com/go-git/go-git/pull/493) - [@yoavamit](https://github.com/yoavamit) made their first contribution in [#1169](https://github.com/go-git/go-git/pull/1169) - [@uragirii](https://github.com/uragirii) made their first contribution in [#1194](https://github.com/go-git/go-git/pull/1194) - [@petar](https://github.com/petar) made their first contribution in [#732](https://github.com/go-git/go-git/pull/732) - [@deining](https://github.com/deining) made their first contribution in [#1148](https://github.com/go-git/go-git/pull/1148) - [@linglo](https://github.com/linglo) made their first contribution in [#1177](https://github.com/go-git/go-git/pull/1177) - [@varmakarthik12](https://github.com/varmakarthik12) made their first contribution in [#1257](https://github.com/go-git/go-git/pull/1257) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2025-11-17 09:22:09 +01:00

Update module github.com/go-git/go-git/v5 to v5.16.3 c79e7b1909

renovate-bot commented

2025-11-17 09:22:10 +01:00

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

10 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.22` -> `1.23.0`
`golang.org/x/sys`	`v0.22.0` -> `v0.32.0`
`github.com/ProtonMail/go-crypto`	`v1.0.0` -> `v1.1.6`
`github.com/cloudflare/circl`	`v1.3.8` -> `v1.6.1`
`github.com/cyphar/filepath-securejoin`	`v0.2.5` -> `v0.4.1`
`github.com/go-git/go-billy/v5`	`v5.5.0` -> `v5.6.2`
`github.com/golang/groupcache`	`v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8`
`github.com/pjbgf/sha1cd`	`v0.3.0` -> `v0.3.2`
`github.com/skeema/knownhosts`	`v1.2.2` -> `v1.3.1`
`golang.org/x/crypto`	`v0.23.0` -> `v0.37.0`
`golang.org/x/net`	`v0.25.0` -> `v0.39.0`

### ℹ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 10 additional dependencies were updated - The `go` directive was updated for compatibility reasons Details: | **Package** | **Change** | | :-------------------------------------- | :--------------------------------------------------------------------------- | | `go` | `1.22` -> `1.23.0` | | `golang.org/x/sys` | `v0.22.0` -> `v0.32.0` | | `github.com/ProtonMail/go-crypto` | `v1.0.0` -> `v1.1.6` | | `github.com/cloudflare/circl` | `v1.3.8` -> `v1.6.1` | | `github.com/cyphar/filepath-securejoin` | `v0.2.5` -> `v0.4.1` | | `github.com/go-git/go-billy/v5` | `v5.5.0` -> `v5.6.2` | | `github.com/golang/groupcache` | `v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8` | | `github.com/pjbgf/sha1cd` | `v0.3.0` -> `v0.3.2` | | `github.com/skeema/knownhosts` | `v1.2.2` -> `v1.3.1` | | `golang.org/x/crypto` | `v0.23.0` -> `v0.37.0` | | `golang.org/x/net` | `v0.25.0` -> `v0.39.0` |

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.16.3~~ to Update module github.com/go-git/go-git/v5 to v5.16.4

2025-11-23 23:57:15 +01:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from c79e7b1909 to f96271bfb8

2025-11-23 23:57:18 +01:00

Compare

renovate-bot commented

2026-01-13 19:02:55 +01:00

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

10 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.22` -> `1.25.0`
`golang.org/x/sys`	`v0.22.0` -> `v0.43.0`
`github.com/ProtonMail/go-crypto`	`v1.0.0` -> `v1.1.6`
`github.com/cloudflare/circl`	`v1.3.8` -> `v1.6.3`
`github.com/cyphar/filepath-securejoin`	`v0.2.5` -> `v0.6.1`
`github.com/go-git/go-billy/v5`	`v5.5.0` -> `v5.9.0`
`github.com/golang/groupcache`	`v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8`
`github.com/pjbgf/sha1cd`	`v0.3.0` -> `v0.6.0`
`github.com/skeema/knownhosts`	`v1.2.2` -> `v1.3.1`
`golang.org/x/crypto`	`v0.23.0` -> `v0.50.0`
`golang.org/x/net`	`v0.25.0` -> `v0.53.0`

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 10 additional dependencies were updated - The `go` directive was updated for compatibility reasons Details: | **Package** | **Change** | | :-------------------------------------- | :--------------------------------------------------------------------------- | | `go` | `1.22` -> `1.25.0` | | `golang.org/x/sys` | `v0.22.0` -> `v0.43.0` | | `github.com/ProtonMail/go-crypto` | `v1.0.0` -> `v1.1.6` | | `github.com/cloudflare/circl` | `v1.3.8` -> `v1.6.3` | | `github.com/cyphar/filepath-securejoin` | `v0.2.5` -> `v0.6.1` | | `github.com/go-git/go-billy/v5` | `v5.5.0` -> `v5.9.0` | | `github.com/golang/groupcache` | `v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8` | | `github.com/pjbgf/sha1cd` | `v0.3.0` -> `v0.6.0` | | `github.com/skeema/knownhosts` | `v1.2.2` -> `v1.3.1` | | `golang.org/x/crypto` | `v0.23.0` -> `v0.50.0` | | `golang.org/x/net` | `v0.25.0` -> `v0.53.0` |

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from f96271bfb8 to 741491b5bf

2026-01-13 19:02:57 +01:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.16.4~~ to Update module github.com/go-git/go-git/v5 to v5.16.5

2026-02-09 14:06:06 +01:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 741491b5bf to 0ba509b6f6

2026-02-09 14:06:07 +01:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.16.5~~ to Update module github.com/go-git/go-git/v5 to v5.17.0

2026-03-02 19:38:58 +01:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 0ba509b6f6 to fcaa4e787b

2026-03-02 19:39:00 +01:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from fcaa4e787b to 6179ba5c35

2026-03-12 21:37:10 +01:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 6179ba5c35 to 1700cb72ea

2026-03-27 07:09:25 +01:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 1700cb72ea to 73427f4cbe

2026-03-27 15:19:27 +01:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.17.0~~ to Update module github.com/go-git/go-git/v5 to v5.17.1

2026-03-29 22:11:13 +02:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 73427f4cbe to f89d7f469c

2026-03-29 22:11:15 +02:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.17.1~~ to Update module github.com/go-git/go-git/v5 to v5.17.2

2026-03-31 16:18:19 +02:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from f89d7f469c to c1e9e44dfa

2026-03-31 16:18:21 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from c1e9e44dfa to 890bd44607

2026-04-10 16:19:28 +02:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.17.2~~ to Update module github.com/go-git/go-git/v5 to v5.18.0

2026-04-17 00:15:06 +02:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 890bd44607 to 6c2f2baeab

2026-04-17 00:15:07 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 6c2f2baeab to 9245289e32

2026-04-21 16:02:19 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 9245289e32 to c8f4a8e95c

2026-04-21 22:36:53 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from c8f4a8e95c to 010995840b

2026-04-22 00:21:05 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 010995840b to f988ac52e3

2026-04-26 16:14:28 +02:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.18.0~~ to Update module github.com/go-git/go-git/v5 to v5.19.0

2026-05-06 17:27:08 +02:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from f988ac52e3 to 6243d8b685

2026-05-06 17:27:10 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 6243d8b685 to 405dcdccb0

ci/woodpecker/pr/lint Pipeline is pending

Details

ci/woodpecker/pr/test Pipeline is pending

Details

2026-05-10 13:49:22 +02:00

Compare

renovate-bot changed title from ~~Update module github.com/go-git/go-git/v5 to v5.19.0~~ to Update module github.com/go-git/go-git/v5 to v5.19.1

2026-05-18 22:53:38 +02:00

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 405dcdccb0

ci/woodpecker/pr/lint Pipeline is pending

Details

ci/woodpecker/pr/test Pipeline is pending

Details

to 4f605205c9

ci/woodpecker/pr/lint Pipeline is pending

Details

ci/woodpecker/pr/test Pipeline is pending

Details

2026-05-18 22:53:38 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 4f605205c9

ci/woodpecker/pr/lint Pipeline is pending

Details

ci/woodpecker/pr/test Pipeline is pending

Details

to 82c2fca3a4

2026-06-10 21:12:36 +02:00

Compare

renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 82c2fca3a4 to bce3558852

ci/woodpecker/pr/lint Pipeline is pending

Details

ci/woodpecker/pr/test Pipeline is pending

Details

2026-07-23 22:25:31 +02:00

Compare

ci/woodpecker/pr/lint Pipeline is pending

Details

ci/woodpecker/pr/test Pipeline is pending

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/github.com-go-git-go-git-v5-5.x:renovate/github.com-go-git-go-git-v5-5.x

git switch renovate/github.com-go-git-go-git-v5-5.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff renovate/github.com-go-git-go-git-v5-5.x

git switch renovate/github.com-go-git-go-git-v5-5.x

git rebase main

git switch main

git merge --ff-only renovate/github.com-go-git-go-git-v5-5.x

git switch renovate/github.com-go-git-go-git-v5-5.x

git rebase main

git switch main

git merge --no-ff renovate/github.com-go-git-go-git-v5-5.x

git switch main

git merge --squash renovate/github.com-go-git-go-git-v5-5.x

git switch main

git merge --ff-only renovate/github.com-go-git-go-git-v5-5.x

git switch main

git merge renovate/github.com-go-git-go-git-v5-5.x

git push origin main

Sign in to join this conversation.

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ada/spiegel!27

Rows
Columns