Git 2.29-rc1
Signed-off-by: Junio C Hamano <gitster@pobox.com>
Junio C Hamano committed
Oct 8, 2020 at 21:53 UTC
d4a392452e292ff924e79ec8458611c0f679d6d4
2 files changed
+22
-14
Documentation/RelNotes/2.29.0.txt
+21
-13
@@ -156,7 +156,7 @@ Performance, Internal Implementation, Development Support etc.
156
barrier to adoption.
157
158
* The final leg of SHA-256 transition plus doc updates. Note that
159
- there is no inter-operability between SHA-1 and SHA-256
159
+ there is no interoperability between SHA-1 and SHA-256
160
repositories yet.
161
162
* CMake support to build with MSVC for Windows bypassing the Makefile.
@@ -184,10 +184,6 @@ Performance, Internal Implementation, Development Support etc.
184
the ref backend in use, as its format is much richer than the
185
normal refs, and written directly by "git fetch" as a plain file..
186
187
- * A handful of places in in-tree code still relied on being able to
188
- execute the git subcommands, especially built-ins, in "git-foo"
189
- form, which have been corrected.
190
-
187
* An unused binary has been discarded, and and a bunch of commands
188
have been turned into into built-in.
189
@@ -216,10 +212,25 @@ Performance, Internal Implementation, Development Support etc.
212
* "diff-highlight" (in contrib/) had a logic to flush its output upon
213
seeing a blank line but the way it detected a blank line was broken.
214
215
+ * The logic to skip testing on the tagged commit and the tag itself
216
+ was not quite consistent which led to failure of Windows test
217
+ tasks. It has been revamped to consistently skip revisions that
218
+ have already been tested, based on the tree object of the revision.
219
+
220
221
Fixes since v2.28
222
-----------------
223
224
+ * The "mediawiki" remote backend which lives in contrib/mw-to-git/
225
+ and is not built with git by default, had an RCE bug allowing a
226
+ malicious MediaWiki server operator to inject arbitrary commands
227
+ for execution by a cloning client. This has been fixed.
228
+
229
+ The bug was discovered and reported by Joern Schneeweisz of GitLab
230
+ to the git-security mailing list. Its practical impact due to the
231
+ obscurity of git-remote-mediawiki was deemed small enough to forgo
232
+ a dedicated security release.
233
+
234
* "git clone --separate-git-dir=$elsewhere" used to stomp on the
235
contents of the existing directory $elsewhere, which has been
236
taught to fail when $elsewhere is not an empty directory.
@@ -355,16 +366,13 @@ Fixes since v2.28
366
"git log --tags=no-tag-matches-this-pattern" does.
367
(merge 04a0e98515 jk/rev-input-given-fix later to maint).
368
358
- * Various callers of run_command API has been modernized.
369
+ * Various callers of run_command API have been modernized.
370
(merge afbdba391e jc/run-command-use-embedded-args later to maint).
371
372
* List of options offered and accepted by "git add -i/-p" were
373
inconsistent, which have been corrected.
374
(merge ce910287e7 pw/add-p-allowed-options-fix later to maint).
375
365
- * Various callers of run_command API has been modernized.
366
- (merge afbdba391e jc/run-command-use-embedded-args later to maint).
367
-
376
* "git diff --stat -w" showed 0-line changes for paths whose changes
377
were only whitespaces, which was not intuitive. We now omit such
378
paths from the stat output.
@@ -381,7 +389,7 @@ Fixes since v2.28
389
information (e.g. "@{u}" does not record what branch the user was
390
on hence which branch 'the upstream' needs to be computed, and even
391
if the record were available, the relationship between branches may
384
- have changed), at least hide the error to allow "status" show its
392
+ have changed), at least hide the error and allow "status" to show its
393
output.
394
395
* "git status --short" quoted a path with SP in it when tracked, but
@@ -398,7 +406,7 @@ Fixes since v2.28
406
(merge 378fe5fc3d mt/config-fail-nongit-early later to maint).
407
408
* There is a logic to estimate how many objects are in the
401
- repository, which is mean to run once per process invocation, but
409
+ repository, which is meant to run once per process invocation, but
410
it ran every time the estimated value was requested.
411
(merge 67bb65de5d jk/dont-count-existing-objects-twice later to maint).
412
@@ -411,8 +419,8 @@ Fixes since v2.28
419
which has been corrected.
420
(merge 4e735c1326 ar/fetch-ipversion-in-all later to maint).
421
414
- * The "unshelve" subcommand of "git p4" used incorrectly used
415
- commit^N where it meant to say commit~N to name the Nth generation
422
+ * The "unshelve" subcommand of "git p4" incorrectly used commit^N
423
+ where it meant to say commit~N to name the Nth generation
424
ancestor, which has been corrected.
425
(merge 0acbf5997f ld/p4-unshelve-fix later to maint).
426
GIT-VERSION-GEN
+1
-1
@@ -1,7 +1,7 @@
1
#!/bin/sh
2
3
GVF=GIT-VERSION-FILE
4
-DEF_VER=v2.29.0-rc0
4
+DEF_VER=v2.29.0-rc1
5
6
LF='
7
'