Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: go-git/go-git
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 5e23dfd
Choose a base ref
...
head repository: go-git/go-git
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 45ae193
Choose a head ref
  • 4 commits
  • 4 files changed
  • 2 contributors

Commits on Mar 31, 2026

  1. build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]

    @go-git-renovate
    go-git-renovate[bot] authored Mar 31, 2026
    Configuration menu
    Copy the full SHA
    ebb2d7d View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1941 from go-git/renovate/releases/v5.x-go-github… 

    ….com-go-git-go-git-v5-vulnerability

build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x)
    @pjbgf
    pjbgf authored Mar 31, 2026
    Configuration menu
    Copy the full SHA
    2212dc7 View commit details
    Browse the repository at this point in the history

  3. storage: filesystem/dotgit, Skip writing pack files that already exis… 

    …t on disk

PackWriter.save() used fs.Create() unconditionally for .idx and .pack
files. After the first write, fixPermissions() sets these to read-only
(0o444), so a subsequent fetch/pull producing the same pack hash would
fail with "permission denied" when Create() tried to truncate the
existing read-only file.

Each file (.idx, .pack, .rev) is now checked individually with Lstat
before creation — if it already exists, the write is skipped. This
mirrors the existing pattern in ObjectWriter.save() for loose objects.

Also switches ObjectWriter.save() from Stat to Lstat for consistency.

Signed-off-by: Paulo Gomes <[email protected]>
Assisted-by: Assisted-by: Claude Opus 4.6 <[email protected]>
Entire-Checkpoint: 98ea9828f0ce
    @pjbgf
    pjbgf committed Mar 31, 2026
    Configuration menu
    Copy the full SHA
    fda4f74 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #1944 from go-git/fix-perms 

    dotgit: skip writing pack files that already exist on disk
    @pjbgf
    pjbgf authored Mar 31, 2026
    Configuration menu
    Copy the full SHA
    45ae193 View commit details
    Browse the repository at this point in the history
Loading