What's Changed

• [v5] plumbing: support mTLS for HTTPS protocol by @hiddeco in #1510
• v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #1514 by @pjbgf in #1515

Full Changelog: v5.15.0...v5.16.0

What's Changed

• plumbing: add cert auth support to releases/v5.x by @Javier-varez in #1482
• v5: Bump dependencies by @pjbgf in #1505

Full Changelog: v5.14.0...v5.15.0

What's Changed

• v5: Bump Go and dependencies to mitigate GO-2025-3487 by @pjbgf in #1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/[email protected] which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: v5.13.2...v5.14.0

What's Changed

• plumbing: use the correct user agent string. Fixes #883 by @uragirii in #1364
• build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @dependabot in #1365
• build: bump the golang-org group with 2 updates by @dependabot in #1367
• build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @dependabot in #1368
• build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in #1378
• build: bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #1376
• build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @dependabot in #1377
• git: worktree, fix restoring dot slash files (backported to v5). Fixes #1176 by @BeChris in #1361
• build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by @dependabot in #1392
• git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes #1150 by @BeChris in #1359
• build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by @dependabot in #1383

Full Changelog: v5.13.1...v5.13.2

What's Changed

• build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @dependabot in #1327
• build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by @dependabot in #1329
• build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by @dependabot in #1340
• Revert "plumbing: transport/ssh, Add support for SSH @cert-authority." by @pjbgf in #1346

Full Changelog: v5.13.0...v5.13.1

What's Changed

• build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in /cli/go-git by @dependabot in #1065
• build: bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #1068
• build: bump golang.org/x/net from 0.23.0 to 0.24.0 by @dependabot in #1071
• Properly support skipping of non-mandatory extensions by @codablock in #1066
• git: Refine some codes in test and non-test. by @onee-only in #1077
• plumbing: protocol/packp, client-side filter capability support by @edigaryev in #1000
• build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by @dependabot in #1078
• plumbing: fix sideband demux on flush by @aymanbagabas in #1084
• storage: dotgit, head reference usually comes first by @aymanbagabas in #1085
• build: bump golang.org/x/text from 0.14.0 to 0.15.0 by @dependabot in #1091
• build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #1094
• build: bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #1093
• git: Added an example for Repository.Branches by @johnmatthiggins in #1088
• git: worktree_commit, Modify checking empty commit. Fixes #723 by @onee-only in #1050
• plumbing: transport/http, Wrap http errors to return reason. Fixes #1097 by @ggambetti in #1100
• build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by @dependabot in #1106
• build: bump golang.org/x/text from 0.15.0 to 0.16.0 by @dependabot in #1107
• Bumps Go versions and go-billy by @pjbgf in #1056
• _examples: Fixed a dead link COMPATIBILITY.md by @gecko655 in #1109
• build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in /cli/go-git by @dependabot in #1115
• build: bump github.com/elazarl/goproxy from v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb by @hbelmiro in #1124
• build: bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #1104
• Add option approximating git clean -x flag. by @msuozzo in #995
• Revert "Add option approximating git clean -x flag." by @pjbgf in #1129
• Fix reference updated concurrently error for the filesystem storer by @Javier-varez in #1116
• build: bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #1134
• utils: merkletrie, Align error message with upstream by @pjbgf in #1142
• plumbing: transport/file, Change paths to absolute by @pjbgf in #1141
• plumbing: gitignore, Fix loading of ignored .gitignore files. by @Achilleshiel in #1114
• build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by @dependabot in #1147
• plumbing: transport/ssh, Add support for SSH @cert-authority. by @Javier-varez in #1157
• build: run example tests during CI workflow by @crazybolillo in #1030
• storage: filesystem, Fix object cache not working due to uninitialised objects being put into cache by @SatelliteMind in #1138
• git: Fix fetching missing commits by @AriehSchneier in #1032
• plumbing: format/packfile, remove duplicate checks in findMatch() by @edigaryev in #1152
• git: worktree, Fix file reported as Untracked while it is committed by @rodrigocam in #1023
• build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by @dependabot in #1160
• plumbing: filemode, Remove check for setting size of .git/index file by @nicholasSUSE in #1159
• build: bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #1163
• Fix some lint warning and increase stalebot to 180 days by @pjbgf in #1128
• adjust path extracted from file: url on Windows by @tomqwpl in #416
• build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by @dependabot in #1164
• Add RestoreStaged to Worktree that mimics the behaviour of git restore --staged ... by @ben-tbotlabs in #493
• plumbing: signature, support the same x509 signature formats as git by @yoavamit in #1169
• fix: allow discovery of non bare repos in fsLoader by @jakobmoellerdev in #1170
• build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by @dependabot in #1178
• build: bump golang.org/x/text from 0.17.0 to 0.18.0 by @dependabot in #1179
• build: bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1184
• Consume push URLs when they are provided by @mcepl in #1191
• *: use gocheck's MkDir instead of TempDir for tests. Fixes #807 by @uragirii in #1194
• build: bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #1200
• worktree: .git/index not correctly generated when running on Windows by @BeChris in #1198
• git: worktree, Fix sparse reset. Fixes #90 by @onee-only in #1101
• git: worktree, Pass context on updateSubmodules. Fixes #1098 by @onee-only in #1154
• build: bump github.com/go-git/go-billy/v5 from 5.5.1-0.20240427054813-8453aa90c6ec to 5.6.0 by @dependabot in #1211
• Update contributing guidelines by @pjbgf in #1217
• build: bump github.com/ProtonMail/go-crypto from 1.0.0 to 1.1.1 by @dependabot in #1222
• build: bump golang.org/x/sys from 0.26.0 to 0.27.0 by @dependabot in #1223
• build: bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in #1221
• build: bump github.com/ProtonMail/go-crypto from 1.1.1 to 1.1.2 by @dependabot in #1226
• build: bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #1232
• build: bump github.com/ProtonMail/go-crypto from 1.1.2 to 1.1.3 by @dependabot in #1231
• build: General improvements around fuzzing by @pjbgf in #1229
• build: bump golang.org/x/net from 0.30.0 to 0.32.0 by @dependabot in #1241
• build: group dependabot updates for golang.org by @AriehSchneier in #1243
• build: bump github/codeql-action from 2.22.11 to 3.27.6 by @dependabot in #1244
• build: bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /cli/go-git by @dependabot in #1246
• build: bump golang.org/x/crypto from 0.30.0 to 0.31.0 by @dependabot in #1247
• build: bump github.com/gliderlabs/ssh from 0.3.7 to 0.3.8 by @dependabot in #1248
• add comment preventing people from creating invalid trees by @petar in #732
• build: bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot in #1250
• plumbing: Properly encode index version 4 by @BeChris in #1251
• Fix typos by @deining in #1148
• Fix reset files in subfolders by @linglo in #1177
• git: update switch cases by @hezhizhen in #1182
• build: bump golang.org/x/net from 0.32.0 to 0.33.0 in the golang-org group by @dependabot in #1256
• fix(1212): Fix invalid reference name error while cloning branches containing /- by @varmakarthik12 in #1257
• pktline : accept upercase hexadecimal value as pktline length information by @BeChris in #1220
• build: bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #1260
• build: bump github.com/elazarl/goproxy from 0.0.0-20240618083138-03be62527ccb to 1.2.1 by @dependabot in #1262
• git: worktree_commit, sanitize author and commiter name and email before creating the commit object. Fixes #680 by @BeChris in #1261

New Contributors

• @johnmatthiggins made their first contribution in #1088
• @ggambetti made their first contribution in https://github....

What's Changed

• git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by @moranCohen26 in #994
• git: Signer: fix usage of crypto.Signer interface by @wlynch in #1029
• git: Remote, fetch, adds the prune option. by @juliens in #366
• git: Add crypto.Signer option to CommitOptions. by @wlynch in #996
• git: Worktree checkout tag hash id (#959) by @aymanbagabas in #966
• git: Worktree, Don't panic on empty or root path when checking if it is valid by @tim775 in #1042
• git: Add commit validation for Reset by @pjbgf in #1048
• git: worktree_commit, Fix amend commit to apply changes. Fixes #1024 by @onee-only in #1045
• git: Implement Merge function with initial FastForwardMerge support by @pjbgf in #1044
• plumbing: object, Make first commit visible on logs filtered with filename. Fixes #191 by @onee-only in #1036
• plumbing: no panic in printStats function. Fixes #177 by @nodivbyzero in #971
• plumbing: object, Optimize logging with file. by @onee-only in #1046
• plumbing: object, check legitimacy in (*Tree).Encode by @niukuo in #967
• plumbing: format/gitattributes, close file in ReadAttributesFile by @prskr in #1018
• plumbing: check setAuth error. Fixes #185 by @nodivbyzero in #969
• plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by @Jerry-yz in #987
• utils: merkletrie, calculate filesystem node's hash lazily. by @candid82 in #825
• utils: update comment in node.go's Hash() by @codablock in #992
• _example: fix 404 link and added ssh-agent clone link by @grinish21 in #1022
• _example: checkout-branch example by @dlambda in #446
• _example: example for git clone using ssh-agent by @pjbgf in #998

New Contributors

• @candid82 made their first contribution in #825
• @codablock made their first contribution in #992
• @Jerry-yz made their first contribution in #987
• @wlynch made their first contribution in #996
• @moranCohen26 made their first contribution in #994
• @grinish21 made their first contribution in #1022
• @prskr made their first contribution in #1018
• @dlambda made their first contribution in #446
• @juliens made their first contribution in #366
• @onee-only made their first contribution in #1036
• @tim775 made their first contribution in #1042
• @niukuo made their first contribution in #967
• @avoidalone made their first contribution in #1047

Full Changelog: v5.11.0...v5.12.0

What's Changed

• git: validate reference names (#929) by @aymanbagabas in #950
• git: stop iterating at oldest shallow when pulling. Fixes #305 by @dhoizner in #939
• plumbing: object, enable renames in getFileStatsFromFilePatches by @djmoch in #941
• storage: filesystem, Add option to set a specific FS for alternates by @pjbgf in #953
• Align worktree validation with upstream and remove build warnings by @pjbgf in #958

New Contributors

• @dhoizner made their first contribution in #939
• @djmoch made their first contribution in #941

Full Changelog: v5.10.1...v5.11.0

What's Changed

• Worktree, ignore ModeSocket files by @steiler in #930
• git: add tracer package by @aymanbagabas in #916
• remote: Flip clause for fast-forward only check by @adityasaky in #875
• plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes #900 by @anandf in #901
• plumbing: uppload-server-info, implement upload-server-info by @aymanbagabas in #896
• plumbing: optimise memory consumption for filesystem storage by @pjbgf in #799
• plumbing: format/packfile, Refactor patch delta by @pjbgf in #908
• plumbing: fix empty uploadpack request error by @aymanbagabas in #932
• plumbing: transport/git, Improve tests error message by @pjbgf in #752
• plumbing: format/pktline, Respect pktline error-line errors by @aymanbagabas in #936
• utils: remove ioutil.Pipe and use std library io.Pipe by @aymanbagabas in #922
• utils: move trace to utils by @aymanbagabas in #931
• cli: separate go module for cli by @aymanbagabas in #914
• build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in #887
• build: bump actions/setup-go from 3 to 4 by @dependabot in #891
• build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by @dependabot in #888
• build: bump actions/checkout from 3 to 4 by @dependabot in #890
• build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by @dependabot in #907
• build: bump golang.org/x/text from 0.13.0 to 0.14.0 by @dependabot in #906
• build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @dependabot in #917
• build: bump golang.org/x/net from 0.17.0 to 0.18.0 by @dependabot in #918

New Contributors

• @anandf made their first contribution in #901
• @steiler made their first contribution in #930

Full Changelog: v5.10.0...v5.10.1

What's Changed

• PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by @ThinkChaos in #782
• Worktree, apply ProxyOption on Pull by @nodivbyzero in #840
• Repository: add clone --shared feature by @enverbisevac in #860
• build: Add github workflow to check commit message format by @pjbgf in #867
• Improve handling of remote errors by @makkes in #866
• build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in #873
• plumbing: commitgraph, Add generation v2 support by @zeripath in #869
• plumbing: protocol/packp, Add validation for decodeLine by @pjbgf in #868
• plumbing: parse the encoding header of the commit object by @liwenqiu in #761
• plumbing: commitgraph, allow SHA256 commit-graphs by @zeripath in #853
• plumbing: commitgraph, Allow reading commit-graph chains by @zeripath in #854
• plumbing/object: Support mergetag in merge commits by @adityasaky in #847

New Contributors

• @nodivbyzero made their first contribution in #840
• @adityasaky made their first contribution in #847
• @hezhizhen made their first contribution in #836
• @0x34d made their first contribution in #855
• @liwenqiu made their first contribution in #761
• @enverbisevac made their first contribution in #860
• @makkes made their first contribution in #866

Full Changelog: v5.9.0...v5.10.0