Changelog for libgit2-1_6-1.6.3-1.1.x86_64.rpm :

* Tue Mar 21 2023 Paolo Stivanin - Update to 1.6.3:
* odb: restore git_odb_open by AATTethomson in #6520
* Ensure that git_index_add_all handles ignored directories by AATTethomson in #6521
* pack: use 64 bits for the number of objects by AATTcarlosmn in #6530- Drop restore-git-odb-open.patch
* Tue Mar 21 2023 Daniel Garcia - Add restore-git-odb-open.patch, some code was removed by error upstream and they fix it after the release. gh#libgit2/libgit2AATTe1e0d77c6f15
* Tue Mar 07 2023 Andreas Stieger - libgit2 1.6.2:
* Support the notion of a home directory separately from global configuration directory
* stash: partial stash specific files
* push: revpars refspec source, so user can push things that are not refs
* Support OpenSSL 3
* Many bug fixes- Not enabled: experimental SHA256 support for bare repositories
* Sun Feb 26 2023 Andreas Stieger - update to 1.5.2:
* Improve SSH key handling functionality: examine all keys in known_hosts files for matches, to support remote hosts with multiple key types
* Sat Jan 21 2023 Dirk Müller - update to 1.5.1:
* This is a security release to address CVE-2023-22742: when compiled using the optional, included libssh2 backend, libgit2 fails to verify SSH keys by default. boo#1207364
* When using an SSH remote with the optional, included libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2\'s `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack.
* Wed Dec 21 2022 Dominique Leuenberger - Drop baselibs.conf: there is no known consumer of the -32bit package.
* Thu Jul 14 2022 Andreas Stieger - update to 1.5.0:
* add the basis for an experimental CLI
* continue prepare for SHA256 support
* add a benchmarking utility
* Tue Jul 12 2022 Andreas Stieger - update to 1.4.4:
* Compatibility with git\'s changes to address CVE 2022-29187. As a follow up to CVE 2022-24765, now not only is the working directory of a non-bare repository examined for its ownership, but the .git directory and the .git file (if present) are also examined for their ownership [boo#1201431]
* A fix for compatibility with git\'s (new) behavior for CVE 2022-24765 allows users on POSIX systems to access a git repository that is owned by them when they are running in sudo- enable reproducible builds
* Wed Apr 13 2022 Andreas Stieger - update to 1.4.3:
* compatibility with git\'s changes for CVE-2022-24765 boo#1187234
* several correctness fixes where invalid input can lead to a crash and denial of service
* Thu Mar 17 2022 Andreas Stieger - update to 1.4.2:
* remote: do store the update_tips callback error value
* Sat Feb 19 2022 Andreas Stieger - update to 1.4.1:
* improve compatibility with git
* some deprecated API, ABI has changed
* multiple bug fixes and developer visible changes- build with system PCRE2- remove http-parser build dependency, bundled lib has fixes
* Wed Oct 20 2021 Matej Cepl - Update to 1.3.0: - This release includes only minor new features that will be helpful for users to have an orderly transition to the v2.0 lineage. - Complete list is available on https://github.com/libgit2/libgit2/blob/main/docs/changelog.md#v13
* Thu Sep 02 2021 Andreas Stieger - update to 1.2.0:
* Add support for commit graphs
* Add support for multi-pack indexes
* And core.longpaths support
* Add support for additional SSH hostkey types
* Add NO_PROXY environment variable support
* Developer visible changes and bug fixes
* Fri Jul 16 2021 Dirk Müller - update to 1.1.1:
* Fixes a bug where decompressing packfiles could fail in rare instances.
* Ensure worktree paths are validated in more cases.
* Builds without thread-safety (`THREADSAFE=OFF`) are supported again.
* Builds without mmap (`NO_MMAP`) are supported again.
* mbedTLS is supported in non-default locations.
* Malformed branch names or missing branches on remotes are ignored.
* Use compiler intrinsics to detect arithmetic overflows in more cases.
* The configuration cache functions properly on systems with strict alignment.
* A missing options initializer function (`git_blob_filter_options_init`) was added for `git_blob_filter_options`.
* Several documentation fixes.
* Thu Nov 26 2020 Marcus Rueckert - require library required by pkg-config file
* Mon Oct 19 2020 Andreas Stieger - update to 1.1.0:
* The refs/remotes/origin/HEAD file will be created at clone time to point to the origin\'s default branch
* libgit2 now uses the __atomic_ intrinsics instead of __sync_ intrinsics on supported gcc and clang versions
* The init.defaultBranch setting is now respected and master is no longer the hardcoded as the default branch name
* Patch files that do not contain an index line can now be parsed
* Configuration files with multi-line values can now contain quotes split across multiple lines
* Servers that request an upgrade to a newer HTTP version are silently ignored instead of erroneously failing
* Users can pass NULL to the options argument to git_describe_commit
* Clones and fetches of very large packfiles now succeeds on 32-bit platforms
* Custom reference database backends can now handle the repository\'s HEAD correctly
* Repositories with a large number of packfiles no longer exhaust the number of file descriptors
* The test framework now supports TAP output when the -t flag is specified
* The test framework can now specify an exact match to a test function using a trailing $
* All checkout types support GIT_CHECKOUT_DISABLE_PATHSPEC_MATCH
* git_blame now can ignore whitespace changes using the option GIT_BLAME_IGNORE_WHITESPACE
* Several new examples have been created, including an examples for commit, add and push
* Mode changes during rename are now supported in patch application
* git_checkout_head now correctly removes untracked files in a subdirectory when the FORCE | REMOVE_UNTRACKED options are specified
* Sat Jun 20 2020 Andreas Stieger - update to 1.0.1:
* Improve merge efficiency
* git_worktree_prune_init_options restored for backward compatibility
* Configuration files that are unreadable due to permissions are now silently ignored, and treated as if they do not exist
* v4 index files are now correctly written
* Improve compatibility with some servers including Gerrit
* Wed Apr 01 2020 Bjørn Lie - Update to version 1.0.0:
* CMake was converted to make use of the GNUInstallDirs module for both our pkgconfig and install targets in favor of our custom build options BIN_INSTALL_DIR, LIB_INSTALL_DIR and INCLUDE_INSTALL_DIR. Instead, you can now use CMakes standard variables CMAKE_INSTALL_BINDIR, CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR.
* Some CMake build options accepted either a specific value or a boolean value to disable the option altogether or use automatic detection. We only accepted \"ON\" or \"OFF\", but none of the other values CMake recognizes as boolean. This was aligned with CMake\'s understanding of booleans.
* The installed pkgconfig file contained incorrect values for both libdir and includedir variables.
* If using pcre2 for regular expressions, then we incorrectly added \"pcre2\" instead of \"pcre2-8\" to our pkgconfig dependencies, which was corrected.
* Fixed building the bundled ntlmclient dependency on FreeBSD, OpenBSD and SunOS.
* When writing symlinks on Windows, we incorrectly handled relative symlink targets, which was corrected.
* When using the HTTP protocol via macOS\' SecureTransport implementation, reads could stall at the end of the session and only continue after a timeout of 60 seconds was reached.
* The filesystem-based reference callback didn\'t corectly initialize the backend version.
* A segmentation fault was fixed when calling git_blame_buffer() for files that were modified and added to the index.
* A backwards-incompatible change was introduced when we moved some structures from \"git2/credentials.h\" into \"git2/sys/credentials.h\". This was fixed in the case where you do not use hard deprecation.
* Improved error handling in various places.- Change sover define to 1_0 and in baselibs following upstream changes.
* Wed Apr 01 2020 Bjørn Lie - Update to version 0.28.5:
* Fix an out-of-bounds read when applying patches that do not end with a newline.
* Fix an out-of-bounds read when decoding specially crafted binary patches.
* Fix an out-of-bounds read when receiving a specially crafted \"OK\" packet via the smarthttp transport.
* Fix lifetime for parsed patches depending on the lifetime of the parsed buffe.
* Several fixes when parsing and applying patches.
* Fix computed patch IDs for patches that have no newline at end of file.
* Fix applying patches to trees that add new files.
* Do not read configuration from a user\'s home directory if running in a sandboxed environment.
* Fix handling of nested ignore rules overriding wildcard unignores in parent directories.
* Fix reference locks not being correctly honored on Unix systems.
* Follow 308 redirects when fetching or pushing from remote repositories on Windows.
* Fix a race when detaching the libgit2 library on Windows.
* Update the \"binary\" gitattribute macro to match git\'s change to \"-diff -merge -text -crlf\".
* Refuse to delete the HEAD reference.
* Fixes for several memory leaks.
* When fetching from an anonymous remote using a URL with authentication information provided in the URL (eg https://foo:barAATTexample.com/repo), we would erroneously include the literal URL in the FETCH_HEAD file. We now remove that to match git\'s behavior.