libgit2 1.9.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

release notes

This is release v1.9.0, "Schwibbogen". As usual, it contains numerous bug fixes, compatibility improvements, and new features.
This is expected to be the final release in the libgit2 v1.x lineage. libgit2 v2.0 is expected to be the next version, with support for SHA256 moving to "supported" status (out of "experimental" status). This means that v2.0 will have API and ABI changes to support SHA256, as well as other breaking changes.
Major changes


Documentation improvements

We've launched a new website for our API reference docs at https://libgit2.org/docs/reference/main. To support this, we've updated the documentation to ensure that all APIs are well-documented, and added docurium-style specifiers to indicate more depth about the API surface.
We now also publish a JSON blob with the API structure and the documentation that may be helpful for binding authors.


TLS cipher updates

libgit2 has updated our TLS cipher selection to match the "compatibility" cipher suite settings as documented by Mozilla.


Blame improvements

The blame API now contains committer information and commit summaries for blame hunks, and the ability to get information about the line of text that was modified. In addition, a CLI blame command has been added so that the blame functionality can be benchmarked by our benchmark suite.


More CLI commands

libgit2 has added blame and init commands, which have allowed for further benchmarking and several API improvements and git compatibility updates.


Warning when configuring without SHA1DC

Users are encouraged to use SHA1DC, which is git's hash; users should not use SHA1 in the general case. Users will now be warned if they try to configure cmake with a SHA1 backend (-DUSE_SHA1=...).


Breaking changes
There are several ABI-breaking changes that integrators, particularly maintainers of bindings or FFI users, may want to be aware of.


Blame hunk structure updates (ABI breaking change)

There are numerous additions to the git_blame_hunk structure to accommodate more information about the blame process.


Checkout strategy updates (ABI breaking change)

The values for GIT_CHECKOUT_SAFE and GIT_CHECKOUT_NONE have been updated. GIT_CHECKOUT_SAFE is now 0; this was implicitly the default value (with the options constructors setting that as the checkout strategy). It is now the default if the checkout strategy is set to 0. This allows for an overall code simplification in the library.


Configuration entry member removal (ABI breaking change)

The git_config_entry structure no longer contains a free member; this was an oversight as end-users should not try to free that structure.


Configuration backend function changes (ABI breaking change)

git_config_backends should now return git_config_backend_entry objects instead of git_config_entry objects. This allows backends to provide a mechanism to nicely free the configuration entries that they provide.


What's Changed
New features


The git_signature_default_from_env API will now produce a pair of git_signatures representing the author, and the committer, taking the GIT_AUTHOR_NAME and GIT_COMMITTER_NAME environment variables into account. Added by @u-quark in Use environment variables when creating signatures libgit2/libgit2#6706


packbuilder can now be interrupted from a callback. Added @roberth in Make packbuilder interruptible using progress callback libgit2/libgit2#6874


libgit2 now claims to honor the preciousObject repository extension. This extension indicates that the client will never delete objects (in other words, will not garbage collect). libgit2 has no functionality to remove objects, so it implicitly obeys this in all cases. Added by @ethomson in repo: support the preciousObjects extension libgit2/libgit2#6886


Push status will be reported even when a push fails. This is useful to give information from the server about possible updates, even when the overall status failed. Added by @yerseg in push: report a push status even the push has failed libgit2/libgit2#6876


You can now generate a thin pack from a mempack instance using git_mempack_write_thin_pack. Added by @roberth in Add git_mempack_write_thin_pack libgit2/libgit2#6875


The new LIBGIT2_VERSION_CHECK macro will indicate whether the version of libgit2 being compiled against is at least the version specified. For example: #if LIBGIT2_VERSION_CHECK(1, 6, 3) is true for libgit2 version 1.6.3 or newer. In addition, the new LIBGIT2_VERSION_NUMBER macro will return an integer version representing the libgit2 version number. For example, for version 1.6.3, LIBGIT2_VERSION_NUMBER will evaluate to 010603. Added by @HamedMasafi in Add LIBGIT2_VER_CHECK Macro for Version Comparison libgit2/libgit2#6882


Custom X509 certificates can be added to OpenSSL's certificate store using the GIT_OPT_ADD_SSL_X509_CERT option. Added by @yerseg in ssl: ability to add raw X509 certs to the cert store libgit2/libgit2#6877


The libgit2 compatibility CLI now has a git blame command. Added by @ethomson in Introduce a blame command libgit2/libgit2#6907


Remote callbacks now provide an update_refs callback so that users can now get the refspec of the updated reference during push. This gives more complete information about the remote reference that was updated. Added by @ethomson in remote: add update_refs with git_refspec libgit2/libgit2#6559


An optional FIPS-compliant mode for hashing is now available; you can set -DUSE_SHA256=OpenSSL-FIPS to enable it. Added by @marcind-dot in Add OpenSSL-FIPS option to USE_SHA256 CMake flag libgit2/libgit2#6906


The git-compatible CLI now supports the git init command, which has been useful in identifying API improvements and incompatibilities with git. Added by @ethomson in CLI: introduce init command libgit2/libgit2#6984


Consumers can now query more information about how libgit2 was compiled, and query the "backends" that libgit2 uses. Added by @ethomson in Allow consumers to query the "backends" that libgit2 was built with libgit2/libgit2#6971


Bug fixes

Fix constness issue introduced in #6716 by @ethomson in  Fix constness issue introduced in #6716 libgit2/libgit2#6829
odb: conditional git_hash_ctx_cleanup in git_odb_stream by @gensmusic in odb: conditional git_hash_ctx_cleanup in git_odb_stream libgit2/libgit2#6836
Fix shallow root maintenance during fetch by @kcsaul in Fix shallow root maintenance during fetch libgit2/libgit2#6846
Headers cleanup by @anatol in Headers cleanup libgit2/libgit2#6842
http: Initialize on_status when using the http-parser backend by @civodul in http: Initialize ‘on_status’ when using the http-parser backend. libgit2/libgit2#6870
Leak in truncate_racily_clean in index.c by @lstoppa in Leak in truncate_racily_clean in index.c libgit2/libgit2#6884
ssh: Omit port option from ssh command unless specified in remote url by @jayong93 in ssh: Omit port option from ssh command unless specified in remote url libgit2/libgit2#6845
diff: print the file header on GIT_DIFF_FORMAT_PATCH_HEADER by @carlosmn in diff: print the file header on GIT_DIFF_FORMAT_PATCH_HEADER libgit2/libgit2#6888
Add more robust reporting to SecureTransport errors on macos by @vcfxb in Add more robust reporting to SecureTransport errors on macos libgit2/libgit2#6848
transport: do not filter tags based on ref dir in local by @rindeal in transport: do not filter tags based on ref dir in local libgit2/libgit2#6881
push: handle tags to blobs by @ethomson in push: handle tags to blobs libgit2/libgit2#6898
Fixes for OpenSSL dynamic by @ethomson in Fixes for OpenSSL dynamic libgit2/libgit2#6901
realpath: unbreak build on OpenBSD by @ajacoutot in realpath: unbreak build on OpenBSD libgit2/libgit2#6932
util/win32: Continue if access is denied when deleting a folder by @lrm29 in util/win32: Continue if access is denied when deleting a folder. libgit2/libgit2#6929
object: git_object_short_id fails with core.abbrev string values by @lrm29 in  object: git_object_short_id fails with core.abbrev string values libgit2/libgit2#6944
Clear data after negotiation by @lrm29 in Clear data after negotiation libgit2/libgit2#6947
smart: ignore shallow/unshallow packets during ACK processing by @kempniu in smart: ignore shallow/unshallow packets during ACK processing libgit2/libgit2#6973

Security fixes

ssh: Include rsa-sha2-256 and rsa-sha2-512 in the list of hostkey types by @lrm29 in ssh: Include rsa-sha2-256 and rsa-sha2-512 in the list of hostkey types libgit2/libgit2#6938
TLS: v1.2 and updated cipher list by @ethomson in TLS: v1.2 and updated cipher list libgit2/libgit2#6960

Code cleanups

checkout: make safe checkout the default by @ethomson in checkout: make safe checkout the default libgit2/libgit2#6037
url: track whether url explicitly specified a port by @ethomson in url: track whether url explicitly specified a port libgit2/libgit2#6851
config: remove free ptr from git_config_entry by @ethomson in config: remove free ptr from git_config_entry libgit2/libgit2#6804
Add SecCopyErrorMessageString for iOS and update README for iOS by @Kyle-Ye in Add SecCopyErrorMessageString for iOS and update README for iOS libgit2/libgit2#6862
vector: free is now dispose by @ethomson in vector: free is now dispose libgit2/libgit2#6896
hashmap: a libgit2-idiomatic khash by @ethomson in hashmap: a libgit2-idiomatic khash libgit2/libgit2#6897
hashmap: asserts by @ethomson in hashmap: asserts libgit2/libgit2#6902
hashmap: further asserts by @ethomson in hashmap: further asserts libgit2/libgit2#6904
Make GIT_WIN32 an internal declaration by @ethomson in Make GIT_WIN32 an internal declaration libgit2/libgit2#6940
pathspec: additional pathspec wildcard tests by @ethomson in pathspec: additional pathspec wildcard tests libgit2/libgit2#6959
repo: don't require option when template_path is specified by @ethomson in repo: don't require option when template_path is specified libgit2/libgit2#6983
options: update X509 cert constant by @ethomson in options: update X509 cert constant libgit2/libgit2#6974
remote: Handle fetching negative refspecs by @ryan-ph in remote: Handle fetching negative refspecs libgit2/libgit2#6962
Restore tls v1.0 support temporarily by @ethomson in Restore tls v1.0 support temporarily libgit2/libgit2#6964
SHA256 improvements by @ethomson in SHA256 improvements libgit2/libgit2#6965

Benchmarks

Add benchmarks for blame by @ethomson in Add benchmarks for blame libgit2/libgit2#6920

Build and CI improvements

README: add experimental builds to ci table by @ethomson in README: add experimental builds to ci table libgit2/libgit2#6816
Update stransport.c by @ethomson in Update stransport.c libgit2/libgit2#6891
stransport: initialize for iOS by @ethomson in stransport: initialize for iOS libgit2/libgit2#6893
CI updates by @ethomson in CI updates libgit2/libgit2#6895
Configurable C standard by @ethomson in Configurable C standard libgit2/libgit2#6911
cmake: update python locator by @ethomson in cmake: update python locator libgit2/libgit2#6915
ci: don't run Windows SHA256 gitdaemon tests by @ethomson in ci: don't run Windows SHA256 gitdaemon tests libgit2/libgit2#6916
cmake-standard c standards by @ethomson in cmake-standard c standards libgit2/libgit2#6914
ci: don't run Windows SHA256 gitdaemon tests by @ethomson in ci: don't run Windows SHA256 gitdaemon tests libgit2/libgit2#6919
Improve dependency selection in CMake by @ethomson in Improve dependency selection in CMake libgit2/libgit2#6924
ci: port latest fixes to nightlies by @ethomson in ci: port latest fixes to nightlies libgit2/libgit2#6926
cmake: warn for not using sha1dc by @ethomson in cmake: warn for not using sha1dc libgit2/libgit2#6986

Documentation improvements

Fix docs for git_odb_stream_read return value. by @ehuss in Fix docs for git_odb_stream_read return value. libgit2/libgit2#6837
docs: Add instructions to build examples by @thymusvulgaris in docs: Add instructions to build examples libgit2/libgit2#6839
Fix contradictory phrase in SECURITY.md by @Kyle-Ye in Fix contradictory phrase in SECURITY.md libgit2/libgit2#6859
Update README.md by @Kyle-Ye in Update README.md libgit2/libgit2#6860
README updates by @ethomson in README updates libgit2/libgit2#6908
typo: s/size on bytes/size in bytes/ by @John-Colvin in typo: s/size on bytes/size in bytes/ libgit2/libgit2#6909
readme: add OpenSSF best practices badge by @ethomson in readme: add OpenSSF best practices badge libgit2/libgit2#6925
Update documentation of merge_base_many by @Caleb-T-Owens in Update documentation of merge_base_many libgit2/libgit2#6927
Include documentation generator by @ethomson in Include documentation generator libgit2/libgit2#6945
Update documentation generation workflow by @ethomson in Update documentation generation workflow libgit2/libgit2#6948
Improve documentation and validate during CI by @ethomson in Improve documentation and validate during CI libgit2/libgit2#6949
Add search functionality to our docs generator by @ethomson in Add search functionality to our docs generator libgit2/libgit2#6953
Documentation: don't resort versions by @ethomson in Documentation: don't resort versions libgit2/libgit2#6954
Documentation: update refdb_backend docs by @ethomson in Documentation: update refdb_backend docs libgit2/libgit2#6955
Documentation: clean up old documentation by @ethomson in Documentation: clean up old documentation libgit2/libgit2#6957
docs: remind people about git_libgit2_init by @ethomson in docs: remind people about git_libgit2_init libgit2/libgit2#6958
Update changelog with v1.8.4 content by @ethomson in Update changelog with v1.8.4 content libgit2/libgit2#6961

Git compatibility fixes

Limit .gitattributes and .gitignore files to 100 MiB by @csware in Limit .gitattributes and .gitignore files to 100 MiB libgit2/libgit2#6834
refs: Handle normalizing negative refspecs by @ryan-ph in refs: Handle normalizing negative refspecs libgit2/libgit2#6951
repo: put a newline on the .git link file by @ethomson in repo: put a newline on the .git link file libgit2/libgit2#6981

Dependency updates

zlib: update bundled zlib to v1.3.1 by @ethomson in zlib: update bundled zlib to v1.3.1 libgit2/libgit2#6905
Update ntlmclient dependency by @ethomson in Update ntlmclient dependency libgit2/libgit2#6912

Other changes

Create FUNDING.json by @BenJam in Create FUNDING.json libgit2/libgit2#6853

New Contributors

@gensmusic made their first contribution in odb: conditional git_hash_ctx_cleanup in git_odb_stream libgit2/libgit2#6836
@u-quark made their first contribution in Use environment variables when creating signatures libgit2/libgit2#6706
@thymusvulgaris made their first contribution in docs: Add instructions to build examples libgit2/libgit2#6839
@anatol made their first contribution in Headers cleanup libgit2/libgit2#6842
@BenJam made their first contribution in Create FUNDING.json libgit2/libgit2#6853
@Kyle-Ye made their first contribution in Fix contradictory phrase in SECURITY.md libgit2/libgit2#6859
@civodul made their first contribution in http: Initialize ‘on_status’ when using the http-parser backend. libgit2/libgit2#6870
@lstoppa made their first contribution in Leak in truncate_racily_clean in index.c libgit2/libgit2#6884
@jayong93 made their first contribution in ssh: Omit port option from ssh command unless specified in remote url libgit2/libgit2#6845
@roberth made their first contribution in Make packbuilder interruptible using progress callback libgit2/libgit2#6874
@vcfxb made their first contribution in Add more robust reporting to SecureTransport errors on macos libgit2/libgit2#6848
@yerseg made their first contribution in push: report a push status even the push has failed libgit2/libgit2#6876
@rindeal made their first contribution in transport: do not filter tags based on ref dir in local libgit2/libgit2#6881
@HamedMasafi made their first contribution in Add LIBGIT2_VER_CHECK Macro for Version Comparison libgit2/libgit2#6882
@John-Colvin made their first contribution in typo: s/size on bytes/size in bytes/ libgit2/libgit2#6909
@marcind-dot made their first contribution in Add OpenSSL-FIPS option to USE_SHA256 CMake flag libgit2/libgit2#6906
@ajacoutot made their first contribution in realpath: unbreak build on OpenBSD libgit2/libgit2#6932
@Caleb-T-Owens made their first contribution in Update documentation of merge_base_many libgit2/libgit2#6927
@ryan-ph made their first contribution in refs: Handle normalizing negative refspecs libgit2/libgit2#6951
@bmarques1995 made their first contribution in Add cmake package targets libgit2/libgit2#6840

Full Changelog: libgit2/libgit2@v1.8.4...v1.9.0

[carlocab]

Should be able to skip revision bumps for literate-git and dvc after #202657 and #202656.

But pygit2 will likely need a [email protected].

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. To keep this pull request open, add a help wanted or in progress label.

[chenrui333]

libgit2-sys needs to be updated to use libgit2 1.9, rust-lang/git2-rs#1109 (it would affect all the rust formulae)

---

for pygit2, waiting this to be released