chore(deps): update rust crate gix-transport to 0.59.0 - #17420
Open
renovate[bot] wants to merge 1 commit into
Open
chore(deps): update rust crate gix-transport to 0.59.0#17420renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
rustbot
added
the
S-waiting-on-review
Collaborator
|
r? @epage rustbot has assigned @epage. Use Why was this reviewer chosen?The reviewer was selected based on:
|
renovate
Bot
force-pushed
the
renovate/gix-transport-0.x
branch
from
September 2, 2026 14:51
c4388a4 to
73c714f
Compare
renovate
Bot
force-pushed
the
renovate/gix-transport-0.x
branch
from
September 4, 2026 06:41
73c714f to
d16f7a8
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.57.0→0.59.0Release Notes
GitoxideLabs/gitoxide (gix-transport)
v0.59.2: gix-transport v0.59.2Compare Source
Bug Fixes
reject control bytes in git daemon requests
Reject NUL, CR, and LF in repository paths and virtual hosts at the shared
git-daemon request serializer before any bytes are written. This addresses
GHSA-rc7h-wp5f-w3g5 without changing URL handling for other transports.
The regression exercises both inputs through the shared blocking/async transport
test and verifies that invalid requests produce an error with no output.
Git baseline:
a02ea57(git_connect_git(): forbid newlines in host and path) validates both components before requestconstruction. Rust byte strings can additionally retain NUL, and CR is rejected
with LF to cover both newline forms.
Commit Statistics
Commit Details
view details
3e7f185)dda600d)v0.59.1: gix-transport v0.59.1Compare Source
Commit Statistics
Commit Details
view details
6704303)e52fe9d)b8914ff)v0.59.0: gix-transport v0.59.0Compare Source
New Features
support cloning a single revision
A full object ID passed through with_ref_name() produced an object-ID refspec
mapping and panicked while clone assumed every mapping had a name. Branch and
tag checkout also retained ordinary clone tracking semantics instead of offering
a single-revision mode.
Add PrepareFetch::with_revision() and gix clone --revision for full refs, HEAD,
and full object IDs. Revision clones use a one source-only implicit refspec,
detach HEAD to the fetched commit, create no ordinary refs, persist no fetch
refspec, and disable tag following. Existing with_ref_name() and --ref behavior
stays unchanged.
This follows Git commit
3378556(builtin/clone: teach git-clone(1) the--revision= option) and its t/t5621-clone-revision.sh behavior.
Commit Statistics
Commit Details
view details
b1174b6)ebe9095)dbd162d)gix-url(2648dc1)7a34c17)cc3ee80)v0.58.1: gix-transport v0.58.1Compare Source
Bug Fixes
preserve encoded HTTP paths across redirects.
Resolve relative curl redirects against the original request URL spelling
so percent-encoded separators remain data instead of changing path segment
structure.
terminate URL authorities at query and fragment delimiters.
gix-url treated everything before the first slash as the authority, so a
query or fragment could change the parsed host and make gix-transport retain
an identity across an actual authority change.
End the authority at slash, query, or fragment delimiters, and cover both the
parser result and redirect identity decision. This addresses
GHSA-jrcm-326h-gpp8 without changing how the remainder is stored in the path.
Git baseline: git url-parse at
da5fa73reports the host before either delimiter.
Commit Statistics
Commit Details
view details
60850df)156b53d)ae8845a)v0.58.0: gix-transport v0.58.0Compare Source
New Features
gix_path::env::core_dir_program()for git-upload-packThis way it can be found even if not in path, or through Git.
Bug Fixes
re-authenticate smart HTTP redirects
preserve the underlying error when a reqwest request fails without a status
When the blocking
reqwestHTTP backend failed without an HTTP status --e.g. a connection or TLS failure, as when
http-client-reqwestis usedwithout a TLS feature against an
https://URL -- it stringified thereqwest::Errorbefore wrapping it in anio::Error. That dead-endedsource(), so callers only saw "An IO error occurred when talking to theserver" with no way to reach the real cause.
Keep the
reqwest::Erroras theio::Error's source (viaio::Error::other) so the underlying cause is preserved. The HTTP-statusbranch is unchanged.
Adds a
reqwest-only regression test that drives a refused connection andasserts the error source is retained; it runs under the
http-client-reqwesttest configuration, which also adds http testcoverage for that backend.
Changed (BREAKING)
replace
maybe-asyncwithbisync.Replace the globally feature-selected maybe-async dependency with bisync 0.3 and
re-export the locally selected macro mode from gix-protocol.
Also use it to deduplicate portions which previously couldn't be handled.
Commit Statistics
Commit Details
view details
ac26491)cb6ec7d)f0ec710)e7af50e)271454b)adf4b7a)2619919)maybe-asyncwithbisync. (c3f2244)c16b5a1)43ff87a)cf3053a)27aec47)9884f48)151a0af)gix_path::env::core_dir_program()for git-upload-pack (41e1bd7)d8aeaac)b893e01)e94565e)c8fbf29)1228b87)1b1541e)Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.