Sourced from github.com/go-git/go-git/v5's releases.
v5.19.1
What's Changed
- v5: plumbing: transport/ssh, Shell-quote path by
@hiddecoin go-git/go-git#2068- v5: git: submodule, Fix relative URL resolution by
@hiddecoin go-git/go-git#2070- v5: git: submodule, canonical remote for relative URLs by
@hiddecoin go-git/go-git#2074- v5: git: submodule, error on remote without URLs by
@hiddecoin go-git/go-git#2078- v5: plumbing: format/idxfile, Validate offset64 indices by
@hiddecoin go-git/go-git#2084- v5: *: Reject malformed variable-length integers by
@hiddecoin go-git/go-git#2092- v5: plumbing: format/packfile, Tighten delta validation by
@hiddecoin go-git/go-git#2091- v5: Add
worktreeFilesystemwrapper for worktree and hardening by@hiddecoin go-git/go-git#2100- v5: config: validate submodule names by
@hiddecoin go-git/go-git#2082- build: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by
@go-git-renovate[bot] in go-git/go-git#2111- v5: git: Allow MkdirAll on worktree-root paths by
@hiddecoin go-git/go-git#2117- v5: git: Stop validating symlink target paths by
@pjbgfin go-git/go-git#2116- v5: plumbing: format decoder input bounds and contracts by
@hiddecoin go-git/go-git#2125- plumbing: format/packfile, cap delta chain depth in parser by
@pjbgfin go-git/go-git#2137Full Changelog: https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1
3c3be60
Merge pull request #2137
from go-git/validate-v53fba897
plumbing: format/packfile, cap delta chain depth in parsera97d660
Merge pull request #2125
from hiddeco/v5/format-input-boundsaeaa125
plumbing: format/objfile, require Header before Read1f38e17
plumbing: format/packfile, bound inflate sizef7545a0
plumbing: format/idxfile, bound nr by file size170b881
Merge pull request #2116
from pjbgf/symlink-v57b6d994
Merge pull request #2117
from hiddeco/v5/worktree-fs-mkdirall-root-noopf0709b3
git: Stop validating symlink target paths776d00f
git: Allow MkdirAll on worktree-root paths