Update gix to 0.82 (with security fixes and hardened parsers)#16941
Update gix to 0.82 (with security fixes and hardened parsers)#16941weihanglo merged 1 commit intorust-lang:masterfrom
gix to 0.82 (with security fixes and hardened parsers)#16941Conversation
rustbot
added
the
S-waiting-on-review
|
r? @weihanglo rustbot has assigned @weihanglo. Use Why was this reviewer chosen?The reviewer was selected based on:
|
There was a problem hiding this comment.
Thanks! Do we have any changelog that I can follow?
There was a problem hiding this comment.
That's difficult for the lack of one global changelog.
There is one per crate effectively, and this would be a way to surface all of them.
GitoxideLabs/gitoxide@gix-v0.81.0...gix-v0.82.0
Short version of this release is hardening and security fixes. The respective advisories are still something I have to publish.
There was a problem hiding this comment.
And I realize that the main gix release (v0.82) is quite usable for an overview:
Now with a list of advisories.
There was a problem hiding this comment.
Yeah I saw the info/exclude as was wonder if there is anything related to cargo package. Turns out that we dont even have test around this (and hope people dont publish under worktrees).
I'll need to look closer to those advisories over the weekend. Seems like some related to stable features Cargo relies on, like file traversing/listing?
Regardless, thank you for fixing all of them!!
rustbot
removed
the
S-waiting-on-review
|
Is the underlying problem in the previous version fixed and the processes that led to it? |
I think that very much boils down to whether or not you think AI is a solution or a problem. Because that's the new tool I use to be better than I otherwise could be. It's not trivial to wield, but I think I am getting the hang of it, with my entire workflow and tooling adjusted to support line-by-line reviews and refactors. |
Update cargo submodule 10 commits in eb9b60f1f6604b5e022c56be31692c215b8ba11d..4f9b52075316e9ced380c8fa492858048d5758b6 2026-04-24 20:52:07 +0000 to 2026-05-01 22:36:41 +0000 - chore(deps): update compatible (rust-lang/cargo#16952) - feat(lints): Add deny-by-default text_direction_codepoint lints (rust-lang/cargo#16950) - chore(deps): update embarkstudios/cargo-deny-action action to v2.0.17 (rust-lang/cargo#16953) - docs(guide): Switch from third-party to first-party unused deps detection (rust-lang/cargo#16946) - Remove curl dependency from crates-io crate (rust-lang/cargo#16936) - chore(deps): update gix to 0.83 (rust-lang/cargo#16945) - fix(compile): Where possible, hint about misplaced deps (rust-lang/cargo#16940) - Remove `windows-sys` from `home` (rust-lang/cargo#16918) - docs(resolver): `--precise <yanked>` is on stable (rust-lang/cargo#16944) - Update `gix` to 0.82 (with security fixes and hardened parsers) (rust-lang/cargo#16941)
4 participants
This seems to have been an eventless update locally.
Tasks