github.com/gabrie30/ghorg

Added

• Codeberg support via a first-class --scm=codeberg provider (reuses the Gitea backend, defaults the base URL to https://codeberg.org, and authenticates with GHORG_CODEBERG_TOKEN); self-hosted Forgejo instances are supported via --base-url, including http instances with --insecure-codeberg-client; resolves #678

Changed

Deprecated

Removed

Fixed

• Gitea/Codeberg wiki clones now use the repo's default branch instead of a hardcoded master, fixing pulls of existing wiki clones on instances where wikis live on main (e.g. Codeberg)
• GHORG_PROTECT_LOCAL, GHORG_FETCH_GIT_LFS, GHORG_FETCH_PRUNE, and GHORG_ONLY_PATH were ignored when set in the configuration file (the CLI flags worked); thanks @xashr

Security

Added

• Optional token_cmd to the reclone.yaml configuration; thanks @jmd-au

Changed

Deprecated

Removed

Fixed

• Bug with reclone index out of range when cmd not in reclone.conf; thanks @chirag127

Security

• Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#684)
• Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /scripts/local-gitea/seeder (#683)
• Bump actions/upload-pages-artifact from 3 to 5 (#670)
• Bump github/codeql-action from 2 to 4 (#669)
• Bump actions/setup-go from 4 to 6 (#668)
• Bump actions/deploy-pages from 4 to 5 (#667)
• Bump actions/checkout from 2 to 7 (#666)
• Bump actions/configure-pages from 2 to 6 (#665)
• Bump docker/login-action from 3 to 4 (#664)
• Bump docker/setup-buildx-action from 2 to 4 (#663)
• Bump goreleaser/goreleaser-action from 4 to 7 (#662)
• Bump docker/build-push-action from 5 to 7 (#661)
• Bump golang.org/x/image from 0.39.0 to 0.41.0 (#660)
• Bump golang.org/x/net from 0.38.0 to 0.55.0 in /scripts/local-bitbucket/seeder (#659)
• Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 (#658)

Added

• GHORG_FETCH_GIT_LFS to run git lfs fetch --all on every repo which will correctly fetch all LFS objects from the upstream repository; thanks @dotboris
• GHORG_GITLAB_INCLUDE_SHARED_PROJECTS (--gitlab-include-shared-projects), GitLab only, defaults to true; set to false to skip projects that are only shared with a group rather than owned by it; thanks @agncr
• GHORG_TOKEN_CMD to populate token from password managers; thanks @batagy

Changed

• ghorg reclone --list now returns a sorted list

Deprecated

Removed

Fixed

Security

Added

• GHORG_GITHUB_REPO_LIST_CONCURRENCY to prevent github secondary ratelimiting
• Automatic git clone retries (up to 3 retries with 1s, 2s, then 3s delay) on failure

Changed

Deprecated

Removed

Fixed

• --protect-local --dry-run now previews which existing local repos would be skipped due to uncommitted changes or unpushed commits (previously the dry-run output made no mention of protected repos, despite the documented behavior); thanks @mogsdad
• --dry-run no longer double-spaces the repo URL list (each URL was ending with \n\n because colorlog.PrintSubtleInfo already appends a newline)
• GitHub Actions use Go 1.26.0 so go test matches go 1.26 and vendored module requirements (was 1.25.0 with GOTOOLCHAIN=local)
• CLI bool flag overrides (e.g. --no-clean=false) are now honored against config-enabled flags; previously the override was silently dropped because the flag-to-env sync hardcoded "true" regardless of the parsed value, violating the documented "CLI > config > default" precedence; thanks @crd

Security

• Updated to go-term-markdown fork with updated depedencies

Added

• ghorg-create-workspace skill
• GHORG_GITHUB_USER_GISTS flag to clone a GitHub user's gists (#626)
• GHORG_PROTECT_LOCAL - Skip updating repositories with uncommitted changes or unpushed commits
• GHORG_FETCH_PRUNE to toggle the --prune flag on git fetches; thanks @batagy

Changed

Deprecated

Removed

Fixed

Security

Added

• GHORG_GITLAB_GROUP_MATCH_REGEX; thanks @batagy

Changed

Deprecated

Removed

Fixed

• Quotes within reclone commands; thanks @batagy

Security

Added

• Bitbucket Cloud API token authentication support; thanks @dean-tate
• Allow host name to specified in SSH clone URLs; thanks @nickdademo

Changed

Deprecated

Removed

Fixed

Security

• Bump golang.org/x/oauth2 from 0.32.0 to 0.34.0 (#607)
• Bump github.com/ktrysmt/go-bitbucket from 0.9.87 to 0.9.88 (#606)
• Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#608)
• Bump gitlab.com/gitlab-org/api/client-go from 0.157.1 to 1.10.0 (#609)
• Bump gitlab.com/gitlab-org/api/client-go from 1.10.0 to 1.24.0 (#613)

Added

• Parallel pagination for SCM repo fetching. A major speed improvement for cloning large organizations (#597)

Changed

Deprecated

Removed

Fixed

• GHORG_FETCH_ALL check to no-clean mode processing; thanks @ypid-work (#594)

Security

• Bump golang.org/x/crypto in /scripts/local-gitea/seeder (#595)
• Bump golang.org/x/crypto from 0.39.0 to 0.45.0 (#596)

Added

• Sourcehut as a new SCM provider; thanks @shabbyrobe

Changed

Deprecated

Removed

Fixed

Security

• Bump gitlab.com/gitlab-org/api/client-go from 0.150.0 to 0.157.1 (#592)
• Bump code.gitea.io/sdk/gitea from 0.22.0 to 0.22.1 (#591)
• Bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#590)

Added

• Self hosted Bitbucket support
• ghorgonly file support to clone only repos matching substring patterns (include-only filter); thanks @fgouteroux

Changed

• Empty interface to any

Deprecated

Removed

Fixed

• File path in tokens; thanks @blackcodersec

Security

• Bump gitlab.com/gitlab-org/api/client-go from 0.142.0 to 0.148.1 (#583)
• Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#582)
• Bump code.gitea.io/sdk/gitea from 0.21.0 to 0.22.0 (#584)
• Bump github.com/ktrysmt/go-bitbucket from 0.9.86 to 0.9.87 (#585)
• Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.16.0 to 2.17.0 (#581)
• Bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 (#580)
• Bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#579)
• Bump rexml from 3.3.9 to 3.4.2 in /site (#577)
• Sanitize token read from file and add tests (#573)
• Bump golang.org/x/net in /scripts/local-bitbucket/seeder (#571)
• Bump golang.org/x/oauth2 in /scripts/local-bitbucket/seeder (#570)