What's Changed

• backport plumbing: format/idxfile, prevent panic by@swills in#1732
• [backport] build: test, Fix build on Windows. by@pjbgf in#1734
• build: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in#1742
• build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in#1741
• build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in#1743

Full Changelog:v5.16.3...v5.16.4

Contributors

What's Changed

• internal: Expand regex to fix build [5.x] by@baloo in#1644
• build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by@baloo in#1646
• plumbing: support commits extra headers, support jujutsu signed commit [5.x] by@baloo in#1633

Full Changelog:v5.16.2...v5.16.3

Contributors

What's Changed

• utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by@kane8n in#1567

Full Changelog:v5.16.1...v5.16.2

Contributors

What's Changed

• utils: merkletrie, Fix diff on sparse-checkout index. Fixes#1406 to releases/v5.x by@kane8n in#1561

New Contributors

• @kane8n made their first contribution in#1561

Full Changelog:v5.16.0...v5.16.1

Contributors

What's Changed

• [v5] plumbing: support mTLS for HTTPS protocol by@hiddeco in#1510
• v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix#1514 by@pjbgf in#1515

Full Changelog:v5.15.0...v5.16.0

Contributors

What's Changed

• plumbing: add cert auth support toreleases/v5.x by@Javier-varez in#1482
• v5: Bump dependencies by@pjbgf in#1505

Full Changelog:v5.14.0...v5.15.0

Contributors

What's Changed

• v5: Bump Go and dependencies to mitigateGO-2025-3487 by@pjbgf in#1436

⚠️ Note that this version requires Go 1.23, due to the bump togolang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog:v5.13.2...v5.14.0

Contributors

What's Changed

• plumbing: use the correct user agent string. Fixes#883 by@uragirii in#1364
• build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by@dependabot in#1365
• build: bump the golang-org group with 2 updates by@dependabot in#1367
• build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by@dependabot in#1368
• build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by@dependabot in#1378
• build: bump github/codeql-action from 3.28.0 to 3.28.1 by@dependabot in#1376
• build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by@dependabot in#1377
• git: worktree, fix restoring dot slash files (backported to v5). Fixes#1176 by@BeChris in#1361
• build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by@dependabot in#1392
• git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes#1150 by@BeChris in#1359
• build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by@dependabot in#1383

Full Changelog:v5.13.1...v5.13.2

Contributors

What's Changed

• build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by@dependabot in#1327
• build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by@dependabot in#1329
• build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by@dependabot in#1340
• Revert "plumbing: transport/ssh, Add support for SSH@cert-authority." by@pjbgf in#1346

Full Changelog:v5.13.0...v5.13.1

Contributors

What's Changed

• build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in /cli/go-git by@dependabot in#1065
• build: bump golang.org/x/net from 0.22.0 to 0.23.0 by@dependabot in#1068
• build: bump golang.org/x/net from 0.23.0 to 0.24.0 by@dependabot in#1071
• Properly support skipping of non-mandatory extensions by@codablock in#1066
• git: Refine some codes in test and non-test. by@onee-only in#1077
• plumbing: protocol/packp, client-side filter capability support by@edigaryev in#1000
• build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by@dependabot in#1078
• plumbing: fix sideband demux on flush by@aymanbagabas in#1084
• storage: dotgit, head reference usually comes first by@aymanbagabas in#1085
• build: bump golang.org/x/text from 0.14.0 to 0.15.0 by@dependabot in#1091
• build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by@dependabot in#1094
• build: bump golang.org/x/net from 0.24.0 to 0.25.0 by@dependabot in#1093
• git: Added an example for Repository.Branches by@johnmatthiggins in#1088
• git: worktree_commit, Modify checking empty commit. Fixes#723 by@onee-only in#1050
• plumbing: transport/http, Wrap http errors to return reason. Fixes#1097 by@ggambetti in#1100
• build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by@dependabot in#1106
• build: bump golang.org/x/text from 0.15.0 to 0.16.0 by@dependabot in#1107
• Bumps Go versions and go-billy by@pjbgf in#1056
• _examples: Fixed a dead link COMPATIBILITY.md by@gecko655 in#1109
• build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in /cli/go-git by@dependabot in#1115
• build: bump github.com/elazarl/goproxy from v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb by@hbelmiro in#1124
• build: bump golang.org/x/net from 0.25.0 to 0.26.0 by@dependabot in#1104
• Add option approximatinggit clean -x flag. by@msuozzo in#995
• Revert "Add option approximatinggit clean -x flag." by@pjbgf in#1129
• Fix reference updated concurrently error for the filesystem storer by@Javier-varez in#1116
• build: bump golang.org/x/net from 0.26.0 to 0.27.0 by@dependabot in#1134
• utils: merkletrie, Align error message with upstream by@pjbgf in#1142
• plumbing: transport/file, Change paths to absolute by@pjbgf in#1141
• plumbing: gitignore, Fix loading of ignored .gitignore files. by@Achilleshiel in#1114
• build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by@dependabot in#1147
• plumbing: transport/ssh, Add support for SSH@cert-authority. by@Javier-varez in#1157
• build: run example tests during CI workflow by@crazybolillo in#1030
• storage: filesystem, Fix object cache not working due to uninitialised objects being put into cache by@SatelliteMind in#1138
• git: Fix fetching missing commits by@AriehSchneier in#1032
• plumbing: format/packfile, remove duplicate checks in findMatch() by@edigaryev in#1152
• git: worktree, Fix file reported asUntracked while it is committed by@rodrigocam in#1023
• build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by@dependabot in#1160
• plumbing: filemode, Remove check for setting size of .git/index file by@nicholasSUSE in#1159
• build: bump golang.org/x/net from 0.27.0 to 0.28.0 by@dependabot in#1163
• Fix some lint warning and increase stalebot to 180 days by@pjbgf in#1128
• adjust path extracted from file: url on Windows by@tomqwpl in#416
• build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by@dependabot in#1164
• Add RestoreStaged to Worktree that mimics the behaviour of git restore --staged ... by@ben-tbotlabs in#493
• plumbing: signature, support the same x509 signature formats as git by@yoavamit in#1169
• fix: allow discovery of non bare repos in fsLoader by@jakobmoellerdev in#1170
• build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by@dependabot in#1178
• build: bump golang.org/x/text from 0.17.0 to 0.18.0 by@dependabot in#1179
• build: bump golang.org/x/net from 0.28.0 to 0.29.0 by@dependabot in#1184
• Consume push URLs when they are provided by@mcepl in#1191
• *: use gocheck's MkDir instead of TempDir for tests. Fixes#807 by@uragirii in#1194
• build: bump golang.org/x/net from 0.29.0 to 0.30.0 by@dependabot in#1200
• worktree: .git/index not correctly generated when running on Windows by@BeChris in#1198
• git: worktree, Fix sparse reset. Fixes#90 by@onee-only in#1101
• git: worktree, Pass context on updateSubmodules. Fixes#1098 by@onee-only in#1154
• build: bump github.com/go-git/go-billy/v5 from 5.5.1-0.20240427054813-8453aa90c6ec to 5.6.0 by@dependabot in#1211
• Update contributing guidelines by@pjbgf in#1217
• build: bump github.com/ProtonMail/go-crypto from 1.0.0 to 1.1.1 by@dependabot in#1222
• build: bump golang.org/x/sys from 0.26.0 to 0.27.0 by@dependabot in#1223
• build: bump golang.org/x/crypto from 0.28.0 to 0.29.0 by@dependabot in#1221
• build: bump github.com/ProtonMail/go-crypto from 1.1.1 to 1.1.2 by@dependabot in#1226
• build: bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by@dependabot in#1232
• build: bump github.com/ProtonMail/go-crypto from 1.1.2 to 1.1.3 by@dependabot in#1231
• build: General improvements around fuzzing by@pjbgf in#1229
• build: bump golang.org/x/net from 0.30.0 to 0.32.0 by@dependabot in#1241
• build: group dependabot updates for golang.org by@AriehSchneier in#1243
• build: bump github/codeql-action from 2.22.11 to 3.27.6 by@dependabot in#1244
• build: bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /cli/go-git by@dependabot in#1246
• build: bump golang.org/x/crypto from 0.30.0 to 0.31.0 by@dependabot in#1247
• build: bump github.com/gliderlabs/ssh from 0.3.7 to 0.3.8 by@dependabot in#1248
• add comment preventing people from creating invalid trees by@petar in#732
• build: bump github/codeql-action from 3.27.6 to 3.27.9 by@dependabot in#1250
• plumbing: Properly encode index version 4 by@BeChris in#1251
• Fix typos by@deining in#1148
• Fix reset files in subfolders by@linglo in#1177
• git: update switch cases by@hezhizhen in#1182
• build: bump golang.org/x/net from 0.32.0 to 0.33.0 in the golang-org group by@dependabot in#1256
• fix(1212): Fix invalid reference name error while cloning branches containing /- by@varmakarthik12 in#1257
• pktline : accept upercase hexadecimal value as pktline length information by@BeChris in#1220
• build: bump github/codeql-action from 3.27.9 to 3.28.0 by@dependabot in#1260
• build: bump github.com/elazarl/goproxy from 0.0.0-20240618083138-03be62527ccb to 1.2.1 by@dependabot in#1262
• git: worktree_commit, sanitize author and commiter name and email before creating the commit object. Fixes#680 by@BeChris in#1261

New Contributors

• @johnmatthiggins made their first contribution in#1088
• @ggambetti made their first contribution inhttps://github....

Contributors