dulwich

• Detect delta cycles in Pack.resolve_object: a crafted pack with REF_DELTA objects that name each other sent get_raw into an unbounded loop. Such chains now raise DeltaCycle.
• Fix porcelain.clean when the target directory and the repository path are spelled differently, such as via a relative path or a symlink. (Jelmer Vernooij)
• Memoize tag peeling on the object store, so refs sharing an annotated tag chain no longer re-walk it once per ref. show_ref --dereference and the ref advertisement were quadratic. (Jelmer Vernooij, #2406)
• Give a .gitignore in a subdirectory precedence over one closer to the root, matching git. A negation in a deeper file no longer loses to a rule at the root, and a nested negation no longer re-includes a path whose parent directory stays excluded. (Jelmer Vernooij, #2399)
• Reject reftable tables.list entries that contain a path separator or are absolute, so a hostile repository cannot make a ref lookup open a file outside the reftable directory. (netliomax25-code)
• Support dulwich commit -C/--reuse-message and -c/--reedit-message to reuse a commit's message, author and author date, optionally editing the message. The committer and new commit ancestry remain independent. (eunwoo song, #1845)
• List local branches for bare dulwich branch and standalone dulwich branch --list [pattern]. Listing empty repositories or patterns with no matches succeeds without changing refs. (be-student, #1847)
• Add dulwich commit --author="Name <email>" to override the author of a new or amended commit. (kudala-bharani, #1845)
• Set branch.<name>.remote and branch.<name>.merge for the branch checked out by a clone, so that a subsequent git pull with no arguments has tracking information. (Jelmer Vernooij, #2376)
• Keep relative paths relative in SSHGitClient.get_url, emitting git's ssh://host/~/path form. Cloning from an scp-style URL like user@host:git/repo.git previously stored ssh://user@host/git/repo.git as the remote URL, which points at a different repository. (Jelmer Vernooij, #2375)
• Name a symlink by its own path in porcelain.path_to_tree_path, rather than by the path of its target. porcelain.status listed a tracked symlink as untracked whenever the file it pointed at was itself untracked or missing, so a modified symlink was reported twice. (Jerry Xiao)
• Ignore gitignore lines that carry no pattern, such as a bare ! or /. A bare ! previously re-included a directory that an earlier pattern in the same file had ignored. (Jelmer Vernooij, #2398)
• Avoid quadratic cost in PktLineParser.parse, which resliced its remaining buffer once per pkt-line. (Jelmer Vernooij, #2408)

Collapse consecutive ** segments in wildmatch translation, matching git's behavior and avoiding catastrophic regex backtracking on patterns like a/**/**/**/z from untrusted repositories. (netliomax25-code)

• Make concurrent Pack.get_raw calls thread-safe by synchronizing
  PackData's resolved-object offset cache.
  (Bojan Zivanovic)

• Speed up cached PackData.get_object_at lookups by acquiring the
  offset-cache lock directly instead of through a with statement.
  (Bojan Zivanovic)

• Bound fetch negotiation the way C Git's MAX_IN_VAIN does: give up
  after 256 unacknowledged "have" lines instead of draining the whole
  graph walker into stateless (HTTP) requests. (Bojan Zivanovic, #2343)

• Add repo.sanitize_user_identity, which builds an identity from a
  name and an email sanitized the way git's fmt_ident does, for
  callers who cannot reject invalid input via check_user_identity.
  (Bojan Zivanovic, #2342)

• Make concurrent PackData reads thread-safe by mmap-ing pack contents
  and indexing the mapping at explicit offsets instead of sharing the file
  position. New unpack_object_at, read_pack_header_at,
  read_zlib_chunks_at, take_msb_bytes_at and compute_buffer_sha
  read from a buffer; the existing read-callable variants remain for streams.
  (Bojan Zivanovic, Jelmer Vernooij)

• Deduplicate the commit walk in find_shallow and get_depth
  (dulwich.object_store). Both re-expanded a commit once per path that
  reached it, so a merge-heavy history walked in exponential time.
  (netliomax25-code)

• SECURITY: Don't follow symlinks when writing messages in
  porcelain.format_patch, mbox.split_mbox and mbox.split_maildir.
  A symlink pre-planted at an output filename was followed, writing the
  message outside the output
  directory. (Jelmer Vernooij; Reported by wzc)

• Only reject reserved Windows device names (aux, nul, con, ...)
  when actually running on Windows. C git confines this check to its Windows
  compat layer, so repositories carrying such paths could not be cloned
  elsewhere. (Jelmer Vernooij, #2351)

• Fix ignore and attrs matching for patterns ending in **/. The
  trailing slash was dropped when translating the pattern, so foo/**/ also
  matched foo/ itself and every file directly inside it. Git only ignores
  the directories below foo. (adarshsm)

• Catch PackFileDisappeared in the bitmap probe in
  get_reachability_provider, which only guarded FileNotFoundError.
  (Jelmer Vernooij, #2344)

• SECURITY: Widen modes for core.sharedRepository as git does rather than
  chmodding to a precomputed one, which left .git/hooks and .git/refs
  world-writable for all. (netliomax25-code, Jelmer Vernooij, #2323)

• parse_shared_repository now returns a SharedPerm, and
  DiskObjectStore, Index and GitFile take a shared_perm
  argument in place of file_mode/dir_mode. (Jelmer Vernooij)

• Fix commit-graph extra edge indexing: the stored value is a position in a
  list of 4-byte entries, not a byte offset, so every octopus merge after
  the first got a wrong parent list. (netliomax25-code)

• Refresh the mtime of an existing loose object in
  DiskObjectStore.add_object(), so that a concurrent git gc cannot
  prune an object that was just reported as present.
  (Bojan Zivanovic, #2340)

• HARDEN: Validate shallow object ids received from the remote.
  (netliomax25-code)

• SECURITY: Refuse patch targets addressing the .git control directory.
  apply_patches (via porcelain.am/apply_patch) previously wrote and
  ran .git/hooks/pre-commit. (Jelmer Vernooij, reported by @bhaswanthc)

• Extend the verify_leading_dirs symlink guard to
  update_working_tree (used by pull, merge and checkout).
  The 1.2.12 fix only covered build_index_from_tree, so a tree pairing a
  symlink x with a descendant x/config could still write through the
  link and overwrite .git/config on pull.
  (Jelmer Vernooij, reported by Hugh Lewis)

• Translate .gitignore/.gitattributes bracket expressions with Git's
  wildmatch() semantics: [^...] negation, POSIX classes, backslash
  escapes and malformed-class handling. ignore and attrs now share
  one translator, the new public dulwich.wildmatch.
  (Vincent Gao, #2326)

• Always single-quote the repository path in the SSH command, matching git's
  sq_quote(). shlex.quote left paths without shell metacharacters
  bare, which broke cloning from servers that parse the command themselves
  rather than handing it to a shell, such as Bitbucket Server.
  (Jelmer Vernooij, #2319)

• SECURITY: Refuse to write a checkout entry whose leading path resolves
  through a symlink. `build_index_from_tree` (used by `reset_index` and
  thus by `clone`/`checkout`) materialized a tree in sorted order without
  checking leading components, so a tree pairing a symlink `link` with a
  descendant `link/foo` wrote `foo` through the link to an arbitrary
  absolute path. The same `verify_leading_dirs` guard already used by
  porcelain and stash is now applied here.
  (Jelmer Vernooij, reported by Hugh Lewis)

• Fix `Bundle.store_objects()` silently dropping every OFS_DELTA/REF_DELTA
  object in the bundle's pack instead of resolving it, leaving the target
  object store missing most objects with no error raised. Delta resolution
  now goes through `PackInflater`, matching how packs are ingested
  elsewhere in the object store code.
  (theVinchi, #2312)

Security and hardening

• Apply core.protectHFS and core.protectNTFS together when selecting the checkout path-element validator. Previously only the NTFS validator ran when protectNTFS was on (the default), so on macOS an HFS+ spelling of .git using ignorable code points could pass validation and poison .git on checkout.
• Canonicalize file modes in git archive tarballs, so a crafted tree entry can no longer carry setuid/setgid/sticky bits into an extracted file.
• Collapse embedded whitespace in reflog messages, so a crafted multi-line commit message can no longer forge additional reflog entries with attacker-chosen SHAs.
• Verify that a .bitmap index matches the pack it is loaded for, so a stale or swapped-in bitmap can't produce a wrong reachable-object set during fetch negotiation.
• Parse commit-message trailers in linear time, fixing a cubic blowup where a crafted commit message could tie up CPU for minutes to hours.

Features and fixes

• Honour core.worktree, so the working tree can live outside the parent of the control directory.
• Porcelain functions now take an env argument, and read GIT_PROTOCOL, GIT_SSH_COMMAND/GIT_SSH when called as a library rather than only from the CLI (fixes a regression since 1.2.1 where porcelain.clone() silently ignored the SSH variables).
• porcelain.archive() gained a remote argument.
• Recurse into subtrees when merging trees, so non-overlapping changes under a shared directory merge cleanly.
• Clear core.bare when setting up a submodule's working tree.

Security and hardening fixes in this release were contributed by Kartik Kenchi (@netliomax25-code).

• Fix regression in 1.2.9 where loose objects whose content inflates to
  more than 8192 bytes failed to parse with `zlib.error: object header
  exceeds maximum size`. (Jelmer Vernooij, #2292)

Highlights of this release:

Security fixes

• Reject checkout paths whose leading component is a DOS drive-letter prefix on Windows (e.g. C:), which os.path.join would otherwise treat as absolute and let a crafted tree write outside the work tree. (reported by Luke Baton)
• Bound zlib decompression of pack entries and loose objects against decompression-bomb DoS. read_zlib_chunks now caps the inflated size at the declared decomp_len, and loose-object parsing accepts max_size defaulting to git's core.bigFileThreshold (512 MiB). (reported by Luke Bento)
• Reject OFS_DELTA pack entries whose delta_base_offset is zero. Such an entry references itself, so Pack.resolve_object would loop forever growing its delta stack until OOM. (reported by Luke Banto)
• Bound Transfer-Encoding: chunked request bodies in dulwich.web: strip chunk extensions, reject negative sizes, enforce per-chunk and per-request size limits, and cap requests that omit Content-Length.
• Bound the running length when decoding EWAH bitmaps so a corrupt or malformed .bitmap index raises ValueError instead of hanging in an unbounded loop that exhausts memory.

Other changes

• web: Reject smart HTTP git-upload-pack / git-receive-pack POSTs whose Content-Type is not the exact application/x-<service>-request value, matching git http-backend.
• dulwich.web: Warn at startup that running python3 -m dulwich.web is not intended as a production web server (no authentication, etc.).

See NEWS for the full list.

Security

• GHSA-8w8g-wq8h-fq33: Write files through build_file_from_blob in path-restricted porcelain.checkout(paths=...) instead of a raw os.open. The old path followed a symlink left at the target, so a crafted repository could write attacker content outside the work tree (e.g. into .git/hooks) on checkout.
• GHSA-5fqc-mrg8-w798: Build the temporary index for filter-branch --index-filter in memory instead of materializing tree entries into CWD. Persisted entries between commits let a symlink from an ancestor commit redirect a descendant's writes outside the work tree.
• Refuse to write a stash entry through an intermediate symlink on stash.pop. The old os.path.exists check followed symlinks, so a crafted stash whose parent path was a symlink already present in the worktree (e.g. link -> .git/hooks) let the subsequent write land outside the work tree.
• Refuse path-restricted porcelain.checkout, restore and reset_file writes whose leading directory is an existing symlink, so a crafted repository can no longer land sub as a link to .git/hooks and have a write to sub/anything traverse it.
• Canonicalize file modes to 0o644/0o755 before chmod on checkout and patch apply, matching git. An untrusted tree entry or patch `new file mode` could otherwise set setuid/setgid/sticky or world-writable bits on a materialized file.
• Reject non-hex pkt-line length prefixes in the protocol parser. int(sizestr, 16) accepted a leading -, whose negative length made the following `read(size - 4)` slurp the rest of the stream and caused `PktLineParser` to loop without consuming its buffer. (#2267)
• Escape the repository path passed to the remote in the SSH client, so a path containing a single quote can no longer close the quoting and have the remainder interpreted by the remote shell. (#2254)
• Reject an option-like host in TCPGitClient before invoking the core.gitProxy command, matching the SubprocessSSHVendor guard, so a URL like `git://-oProxyCommand=...` can no longer be interpreted as a flag by the proxy program. (#2240)
• Validate object ids in the object store and refs container. An id containing path separators would previously be joined into a filename by `DiskObjectStore._get_shafile_path` (escaping the objects directory) or stored as a ref value. (#2256)
• Validate the object id in LFS server request handlers before it reaches the store, so a request path containing .. cannot escape the LFS directory. (#2255)
• Don't expand config include/includeIf directives when parsing bundle lists served by an untrusted bundle-uri host, matching the handling of `.gitmodules`. (#2243)
• Read the signing key from gpg's --status-fd (VALIDSIG) in `GPGCliSignatureVendor.verify` instead of the human-readable stderr text, which could be spoofed by embedding a matching line in the signed payload. (#2245)
• Raise UntrustedSignature from verify_commit/verify_tag when keyids is set and the object carries no signature, instead of silently accepting it. (#2238)
• Fix quadratic backtracking in _find_scissors_line so a crafted patch can no longer stall mailinfo/git am --scissors. (#2239)
• Collapse consecutive * wildcards to at most ** in .gitattributes, .gitignore and config glob translation to avoid catastrophic backtracking (ReDoS). (#2237)
• Fix quadratic buffering in web.ChunkReader.read. (#2262)
• Skip invalid tree paths (containing .., .git, etc.) in `diff_working_tree_to_tree` instead of joining them onto the work tree; a working-tree diff against an untrusted commit could otherwise read a file outside the work tree and disclose its contents. (#2261)
• Fix quadratic header accumulation in ShaFile._parse_message. (#2273)

Fixes

• Enumerate the objects to push before the HTTP git-receive-pack request body starts streaming. `generate_pack_data` previously ran lazily inside the body generator, after the header pkt-lines were already on the wire, so on large repositories the request stalled mid-body while objects were counted and servers such as GitHub aborted the push with a timeout / broken pipe. (#2248)
• Replace a symlink left at the target path with a fresh regular file in build_file_from_blob instead of writing through it, matching git on checkout. (#2259)
• Raise GitProtocolError carrying the server's message when the fetch/send-pack tail loop sees a fatal side-band channel (\x03), instead of crashing with `AssertionError: Invalid sideband channel 3` and swallowing the server's error text.
• Use ThreadingHTTPServer and advertise HTTP/1.1 in lfs_server so urllib3's keep-alive pool doesn't race a torn-down connection into RemoteDisconnected.

Other

• Support http.postBuffer. (#2248)
• Support pyo3 0.29.
• Deprecate dulwich.objects.filename_to_hex, which is unused.

Security

• Don't expand config include directives when parsing .gitmodules, so a crafted .gitmodules in a cloned repository can no longer make clone --recurse-submodules read arbitrary files.
• Validate ref names before resolving them to a path, so a client-supplied name like ../../secret can no longer read a file outside the ref store. Closes a traversal via git-upload-archive's argument and other lookup paths. (#2212)
• Reject pack names containing path separators in the dumb HTTP transport, so a malicious server can no longer escape the temporary directory. (#2213)
• Verify that an object retrieved by id actually hashes to the requested id, raising ChecksumMismatch otherwise. (#2223)

New features

• Add porcelain.request_pull and a dulwich request-pull command, like git request-pull. (#1823)
• Add porcelain.range_diff and a dulwich range-diff command, like git range-diff (requires the dulwich[range_diff] extra). (#1828)

Fixes

• Check out files whose names contain a colon or backslash on NTFS, instead of silently dropping them on clone, and abort the checkout on a genuinely invalid path. (#2205)
• Fix apply_patch writing index entries with mode 0, which made native git abort. (#2218)
• Fix deepening of a local shallow fetch not transferring newly-uncovered commits.
• Several gc/repack fixes on Windows (read-only pack files, leaked temporary packs, files-in-use).
• Discover and serve packs with non-pack- names such as loose-<hash> (written by git maintenance). (#2229)

See NEWS for the full changelog.

This is a security release. All users are encouraged to upgrade.

Security fixes

• GHSA-gfhv-vqv2-4544 -- Validate submodule paths in porcelain.submodule_update (and thus porcelain.clone(recurse_submodules=True)). A crafted upstream repository could carry a submodule whose path was .git/hooks (or any other path inside .git or above the work tree), causing the submodule's tree contents to be written there with their executable bits intact. The dulwich analogue of git's CVE-2024-32002 / CVE-2024-32004. (Reported by tonghuaroot)

• CVE-2026-42305 -- Harden tree path validation against entry names that are harmless on POSIX but dangerous when checked out on Windows. validate_path_element_ntfs now also rejects Windows path separators, the alternate data stream marker :, NTFS 8.3 short-name aliases of .git, and reserved Windows device names. core.protectNTFS now defaults to true on every platform, and both core.protectNTFS and core.protectHFS are now read under their correct option names. (Reported by Christopher Toth)

• CVE-2026-42563 -- Shell-quote values substituted into ProcessMergeDriver commands. A malicious branch could inject shell commands when a merge driver referencing %P was configured. (Reported by Ravishanker Kusuma (hayageek))

• CVE-2026-47712 -- Sanitize commit subjects used in porcelain.format_patch filenames so a malicious subject (e.g. x/../../x) cannot direct the generated patch outside outdir. (Reported by Christopher Toth)

• receive.maxInputSize -- Honour receive.maxInputSize in ReceivePackHandler. Previously a remote unauthenticated client could send a tiny crafted pack that declared a huge dest_size and trigger hundreds of MB of allocation over git-receive-pack. (Reported by Liyi, Ziyue, Strick, Maurice and Chenchen @ University of Sydney)

What's Changed

• refs: reject malformed ref prefixes/suffixes by @jelmer in https://github.com/jelmer/dulwich/pull/2193
• Use decorator form for properties by @stephenfin in https://github.com/jelmer/dulwich/pull/2191
• refs: for now, warn rather than error on malformed ref names by @jelmer in https://github.com/jelmer/dulwich/pull/2194

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-1.2.3...dulwich-1.2.4

Changes since 1.2.0

• Derive the LFS endpoint as the remote's on-disk LFS store (<remote>/.git/lfs for worktrees, <remote>/lfs for bare repos) when remote.origin.url points at a local filesystem path or file:// URL, matching git-lfs behaviour. Previously the built-in smudge filter constructed an HTTP-style <remote>.git/info/lfs path that did not exist on disk, leaving LFS-tracked files as pointers when cloning from a local repo.

• Deduplicate objects when writing a multi-pack-index. Objects present in multiple packs (e.g. after git gc creates a cruft pack) would otherwise produce an OIDL chunk with repeated SHAs, causing git multi-pack-index verify to fail with "oid lookup out of order". (#2152)

• Extend ignorecase and precomposeunicode support to index lookups. (#1807)

Notable changes since 1.1.0

New features

• Add am command and porcelain.am() for applying mailbox-style email patches (git am), with state persistence for --continue, --skip, --abort, and --quit recovery (#1692).
• Add apply command and porcelain.apply_patch() for applying unified diffs, including rename/copy detection, binary patches with Git's base85 encoding, and --3way merge fallback (#1784).
• Expand log command options: --oneline, --abbrev-commit, --author, --committer, --grep, --since/--after, --until/--before, -n/--max-count, --no-merges, --merges, --stat, -p/--patch, --name-only, and --follow (#1779).
• Add support for push options (-o/--push-option) in push, enabling AGit flow and other server-side push option workflows.
• Add missing push options: --all, --tags, --delete, --dry-run, --prune, --set-upstream, --follow-tags, and --mirror (#1844).
• Add support for atomic push operations (--atomic): either all ref updates succeed or none are applied (#1781).
• Add support for extensions.relativeworktrees repository extension, allowing worktrees to use relative paths (#2112).

Configuration support

• gc.pruneExpire — grace period before unreachable objects are pruned (#1859).
• core.precomposeunicode — normalize NFD Unicode paths from macOS filesystems to NFC (#1804).
• core.gitProxy — proxy command for git:// protocol connections (#1850).
• core.maxStat — limit stat operations when checking for unstaged changes (#1853).
• core.packedGitLimit — cap memory used for mmapped pack files, closing LRU packs when exceeded (#1848).
• core.deltaBaseCacheLimit — cap memory used for caching delta base objects; defaults to 96 MiB (#1849).
• http.userAgent — customize the User-Agent header (global and URL-specific); default is git/dulwich/{version}.

Fixes

• Fix GPG signature verification to raise BadSignature for all GPG errors, not just BadSignatures; also detect when GPG returns no signatures.
• Fix client incorrectly sending unborn argument in Git protocol v2 ls-refs requests to servers that don't advertise ls-refs=unborn, preventing clones from older servers like Gerrit 3.12.2 (#2104).
• Improve error message in read_info_refs() to show the actual line content when parsing fails (#2103).
• Preserve quoted trailing whitespace in config values (#2145, Christopher Toth).
• Fix .gitignore parent re-include handling so a later !dir/ re-include allows a subsequent file-level negation to take effect (#2141, N0zoM1z0).
• Fix host key verification in contrib/paramiko_vendor.py by loading known hosts and rejecting unknown SSH host keys by default (#2123, quart27219).

Packaging

• No longer ship contrib/ as part of the distribution. The contrib/ directory has always been documented as unsupported and is now excluded from the installed package (#2122).

What's Changed

• Add reference to c-git-compatibility doc in README.md by @jelmer in https://github.com/jelmer/dulwich/pull/2069
• Implement cli commands for more porcelain by @jelmer in https://github.com/jelmer/dulwich/pull/2071
• Support GIT_TRACE_PACKET by @jelmer in https://github.com/jelmer/dulwich/pull/2073
• Fix cloning of SHA-256 repositories with protocol v2 by @jelmer in https://github.com/jelmer/dulwich/pull/2074
• skip tests that require merge3 when it's not available by @kulikjak in https://github.com/jelmer/dulwich/pull/2075
• Add test-minimal to CI; run tests without installing any optional dependencies by @jelmer in https://github.com/jelmer/dulwich/pull/2076
• Update SECURITY.md by @jelmer in https://github.com/jelmer/dulwich/pull/2077
• Don't skip 3.14 wheels by @bowiechen in https://github.com/jelmer/dulwich/pull/2078
• Add Git protocol v2 packfile-uris client support by @jelmer in https://github.com/jelmer/dulwich/pull/2079
• Attempt to fix occasional issues with long running lfs processes in tests by @jelmer in https://github.com/jelmer/dulwich/pull/2081
• Allow passing commit and author timestamps into porcelain.commit by @ading2210 in https://github.com/jelmer/dulwich/pull/2080
• Skip Python 3.14 x86_64/universal2 wheels on macOS by @jelmer in https://github.com/jelmer/dulwich/pull/2082
• Improve exception message for tags by @jelmer in https://github.com/jelmer/dulwich/pull/2083
• ci(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2084
• ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2085
• deps(deps-dev): bump ruff from 0.14.10 to 0.14.14 in the pip group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2086
• Add bundle URI support for faster clones and fetches by @jelmer in https://github.com/jelmer/dulwich/pull/2087
• Add basic subtree support by @jelmer in https://github.com/jelmer/dulwich/pull/2088
• Add support for core.trustctime configuration option by @jelmer in https://github.com/jelmer/dulwich/pull/2091
• Fix LFS client selection for file:// URLs by @jelmer in https://github.com/jelmer/dulwich/pull/2089
• Add support for core.commentChar configuration option (#1852) by @jelmer in https://github.com/jelmer/dulwich/pull/2092
• Add --unshallow support to fetch command by @jelmer in https://github.com/jelmer/dulwich/pull/2093
• Add progress reporting during pack file downloads by @jelmer in https://github.com/jelmer/dulwich/pull/2094
• Macos wheels fix by @jelmer in https://github.com/jelmer/dulwich/pull/2095
• Disable git-lfs filter process in LFS status tests to fix flaky Windows failures by @jelmer in https://github.com/jelmer/dulwich/pull/2096
• Server side hooks by @jelmer in https://github.com/jelmer/dulwich/pull/2097
• Fix checkout skipping files with paths starting with '.git' by @jelmer in https://github.com/jelmer/dulwich/pull/2098

New Contributors

• @bowiechen made their first contribution in https://github.com/jelmer/dulwich/pull/2078
• @ading2210 made their first contribution in https://github.com/jelmer/dulwich/pull/2080

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-1.0.0...dulwich-1.1.0

What's Changed

• More tests by @jelmer in https://github.com/jelmer/dulwich/pull/2066
• Document C git compatibility by @jelmer in https://github.com/jelmer/dulwich/pull/2067
• Remove deprecated functions by @jelmer in https://github.com/jelmer/dulwich/pull/2068

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.25.2...dulwich-1.0.0

What's Changed

• Fix GPG signature test to handle InvalidSigners exception by @jelmer in https://github.com/jelmer/dulwich/pull/2064
• Make object store close() idempotent and warn on unclosed resources by @jelmer in https://github.com/jelmer/dulwich/pull/2065

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.25.1...dulwich-0.25.2

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.25.0...dulwich-0.25.1

What's Changed

• ci(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1975
• deps(deps): bump pyo3 from 0.27.0 to 0.27.1 in the cargo group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1977
• ci(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1976
• deps(deps-dev): bump ruff from 0.13.2 to 0.14.3 in the pip group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1978
• Drop python 3.9 by @jelmer in https://github.com/jelmer/dulwich/pull/1950
• fix(docs): add missing hyphen in date format in NEWS by @Guts in https://github.com/jelmer/dulwich/pull/1979
• client: relax check to support subclasses of Urllib3HttpGitClient by @skshetry in https://github.com/jelmer/dulwich/pull/1980
• pass key_filename and ssh_command to SSHGitClient by @skshetry in https://github.com/jelmer/dulwich/pull/1981
• Add tests to verify client args are passed by @jelmer in https://github.com/jelmer/dulwich/pull/1982
• Add mailinfo command by @jelmer in https://github.com/jelmer/dulwich/pull/1983
• Add column formatting support by @jelmer in https://github.com/jelmer/dulwich/pull/1984
• Fix warnings by @jelmer in https://github.com/jelmer/dulwich/pull/1985
• Fix test_concurrent_ref_operations_compatibility by @jelmer in https://github.com/jelmer/dulwich/pull/1986
• Fix typo in preamble by @jelmer in https://github.com/jelmer/dulwich/pull/1987
• Add diagnose command by @jelmer in https://github.com/jelmer/dulwich/pull/1988
• Add rerere support by @jelmer in https://github.com/jelmer/dulwich/pull/1992
• Add reachability abstraction by @jelmer in https://github.com/jelmer/dulwich/pull/1994
• update security support by @jelmer in https://github.com/jelmer/dulwich/pull/1996
• Modernize by @jelmer in https://github.com/jelmer/dulwich/pull/1997
• Implement core.sharedRepository configuration support (#1804) by @jelmer in https://github.com/jelmer/dulwich/pull/1942
• NEWS: Fix formatting for 0.24.10 by @jelmer in https://github.com/jelmer/dulwich/pull/2000
• Optimize status performance by using stat matching to skip unchanged files by @jelmer in https://github.com/jelmer/dulwich/pull/2001
• Improve error handling when trying to remove non-empty directory by @kulikjak in https://github.com/jelmer/dulwich/pull/2004
• Implement restore and switch commands by @jelmer in https://github.com/jelmer/dulwich/pull/2003
• skip tests that require merge3 when it's not available by @kulikjak in https://github.com/jelmer/dulwich/pull/2002
• Use bitmap support by @jelmer in https://github.com/jelmer/dulwich/pull/1995
• Fix doc warnings by @jelmer in https://github.com/jelmer/dulwich/pull/2006
• Make Ref and ObjectID newtypes for improved typing by @jelmer in https://github.com/jelmer/dulwich/pull/2008
• Fix get_unstaged_changes filter callback to expect Blob objects by @jelmer in https://github.com/jelmer/dulwich/pull/2011
• Add basic midx support by @jelmer in https://github.com/jelmer/dulwich/pull/1998
• avoid signing commits in stash by @skshetry in https://github.com/jelmer/dulwich/pull/2012
• deps(deps): bump pyo3 from 0.27.1 to 0.27.2 in the cargo group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2014
• deps(deps-dev): bump the pip group with 2 updates by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2015
• ci(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2016
• ci(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/2017
• Ensure maintenance tests are run by @jelmer in https://github.com/jelmer/dulwich/pull/2019
• Use nanosecond-resolution when comparing file entries by @jelmer in https://github.com/jelmer/dulwich/pull/2013
• Move peeled tags protocol functions to dulwich.protocol by @jelmer in https://github.com/jelmer/dulwich/pull/2020
• Move greenthreads to contrib/ by @jelmer in https://github.com/jelmer/dulwich/pull/2021
• Add all to all files by @jelmer in https://github.com/jelmer/dulwich/pull/2022
• Fix UTF-8 decode error in process filter protocol handling by @jelmer in https://github.com/jelmer/dulwich/pull/2024
• Add --stat argument to diff by @jelmer in https://github.com/jelmer/dulwich/pull/2026
• Make porcelain.add check explicit for None by @ejfine in https://github.com/jelmer/dulwich/pull/2027
• Fix ParamikoSSHVendor interface compatibility with SSHVendor by @jelmer in https://github.com/jelmer/dulwich/pull/2029
• Quote smudge path by @jelmer in https://github.com/jelmer/dulwich/pull/2031
• Initial work splitting porcelain by @jelmer in https://github.com/jelmer/dulwich/pull/2032
• Add tests for consistent license preamble, and to prevent os.environ use in lower layers by @jelmer in https://github.com/jelmer/dulwich/pull/2033
• Install dulwich.porcelain by @jelmer in https://github.com/jelmer/dulwich/pull/2035
• fix typing by @radoering in https://github.com/jelmer/dulwich/pull/2036
• Split out worktree by @jelmer in https://github.com/jelmer/dulwich/pull/2037
• Add comprehensive SHA256 support for Git repositories by @jelmer in https://github.com/jelmer/dulwich/pull/1604
• dumb: Add fallback when HEAD is missing by @anlambert in https://github.com/jelmer/dulwich/pull/2030

New Contributors

• @Guts made their first contribution in https://github.com/jelmer/dulwich/pull/1979
• @ejfine made their first contribution in https://github.com/jelmer/dulwich/pull/2027
• @radoering made their first contribution in https://github.com/jelmer/dulwich/pull/2036

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.10...dulwich-0.25.0

• Fix compatibility with python 3.9. (@jelmer, #1991)

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.9...dulwich-0.24.10

• Fix passing key_filename and ssh_command parameters to SSHGitClient by @skshetry

• Relax check to support subclasses of Urllib3HttpGitClient. Fixes regression from 0.24.2 where subclasses of Urllib3HttpGitClient would not receive the config object. by @skshetry

• Fix test_concurrent_ref_operations_compatibility test flakiness by @jelmer

• Fix warnings in test suite by @jelmer

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.8...dulwich-0.24.9

What's Changed

• Support ref namespaces by @jelmer in https://github.com/jelmer/dulwich/pull/1957
• Add Rust test step to CI workflow. by @jelmer in https://github.com/jelmer/dulwich/pull/1958
• Add support for GIT_FLUSH environment variable by @jelmer in https://github.com/jelmer/dulwich/pull/1959
• Add support for recursive submodule updates by @jelmer in https://github.com/jelmer/dulwich/pull/1961
• Add maintenance subcommand by @jelmer in https://github.com/jelmer/dulwich/pull/1960
• Add interpret-trailers command by @jelmer in https://github.com/jelmer/dulwich/pull/1962
• Add support for replace command by @jelmer in https://github.com/jelmer/dulwich/pull/1963
• Fix config file leakage in compat tests by @jelmer in https://github.com/jelmer/dulwich/pull/1964
• Various bundle fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1965
• Implement advanced Git object specification support by @jelmer in https://github.com/jelmer/dulwich/pull/1966
• Add rust implementation of create_delta by @jelmer in https://github.com/jelmer/dulwich/pull/1956
• Add support for dulwich stripspace by @jelmer in https://github.com/jelmer/dulwich/pull/1967
• Fix TypeError when passing refspec to clone() by @jelmer in https://github.com/jelmer/dulwich/pull/1968
• Drop authors by @jelmer in https://github.com/jelmer/dulwich/pull/1970
• Add per-URL http.extraHeader configuration support by @jelmer in https://github.com/jelmer/dulwich/pull/1969
• Add support for GIT_REFLOG_ACTION environment variable by @jelmer in https://github.com/jelmer/dulwich/pull/1971
• Make generate_pack_data() arguments consistent and keyword-only by @jelmer in https://github.com/jelmer/dulwich/pull/1972
• Bump typing-extensions by @jelmer in https://github.com/jelmer/dulwich/pull/1974

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.7...dulwich-0.24.8

What's Changed

• Use make_commit() from test utils in test files by @jelmer in https://github.com/jelmer/dulwich/pull/1943
• Enhance fetch with missing options by @jelmer in https://github.com/jelmer/dulwich/pull/1944
• Add sparse index support for improved performance with large repositories by @jelmer in https://github.com/jelmer/dulwich/pull/1946
• Fix SSH connections with custom ssh command by @jelmer in https://github.com/jelmer/dulwich/pull/1947
• Work around typing module bug in Python 3.9.0/3.9.1 by @jelmer in https://github.com/jelmer/dulwich/pull/1949
• And support for local files in LFS by @jelmer in https://github.com/jelmer/dulwich/pull/1953
• Add support for core.fsyncObjectFiles configuration option by @jelmer in https://github.com/jelmer/dulwich/pull/1954
• Add bitmap support by @jelmer in https://github.com/jelmer/dulwich/pull/1952

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.6...dulwich-0.24.7

What's Changed

• Restore pool_manager parameter to transport functions by @jelmer in https://github.com/jelmer/dulwich/pull/1929
• Support show-branch by @jelmer in https://github.com/jelmer/dulwich/pull/1931
• Add support for git mailsplit command by @jelmer in https://github.com/jelmer/dulwich/pull/1930
• Add dulwich config CLI command by @jelmer in https://github.com/jelmer/dulwich/pull/1933
• Add support for git cherry command by @jelmer in https://github.com/jelmer/dulwich/pull/1932
• Ensure files are closed by @jelmer in https://github.com/jelmer/dulwich/pull/1935
• Add support for octopus merge strategy by @jelmer in https://github.com/jelmer/dulwich/pull/1934
• Add convenience functions for dealing with refs by @jelmer in https://github.com/jelmer/dulwich/pull/1937
• Implement recursive merge strategy for handling multiple merge bases by @jelmer in https://github.com/jelmer/dulwich/pull/1936
• Add support for git grep command by @jelmer in https://github.com/jelmer/dulwich/pull/1938
• Fix import failure when sys.stdin is None by @jelmer in https://github.com/jelmer/dulwich/pull/1940
• Implement git reflog expire and delete commands by @jelmer in https://github.com/jelmer/dulwich/pull/1941

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.5...dulwich-0.24.6

What's Changed

• Fix LFS status tests cleanup issue on Windows Python 3.14 by @jelmer in https://github.com/jelmer/dulwich/pull/1924
• Fix HTTP authentication with credentials in URLs by @jelmer in https://github.com/jelmer/dulwich/pull/1926

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.4...dulwich-0.24.5

What's Changed

• Fix pypi publish action version by @jelmer in https://github.com/jelmer/dulwich/pull/1890
• Add remaining typing by @jelmer in https://github.com/jelmer/dulwich/pull/1891
• Disable android wheels build, which currently fails due to 403s on by @jelmer in https://github.com/jelmer/dulwich/pull/1892
• fix typing by @jelmer in https://github.com/jelmer/dulwich/pull/1893
• deps(deps): bump memchr from 2.7.5 to 2.7.6 in the cargo group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1901
• ci(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1900
• deps(deps): bump the pip group with 2 updates by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1902
• ci(deps): bump docker/setup-qemu-action from 3.2.0 to 3.6.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1899
• ci(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1897
• ci(deps): bump dependabot/fetch-metadata from 2.2.0 to 2.4.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1898
• Use immutable container type annotations where appropriate by @jelmer in https://github.com/jelmer/dulwich/pull/1903
• Add extract_signature() method to Commit and Tag by @jelmer in https://github.com/jelmer/dulwich/pull/1905
• Fix BlackboxTestCase to respect Python venv path by @mgorny in https://github.com/jelmer/dulwich/pull/1906
• Add DependencyMissing class by @jelmer in https://github.com/jelmer/dulwich/pull/1907
• More typing fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1908
• Implement GPG signing and verification support for commits and tags by @jelmer in https://github.com/jelmer/dulwich/pull/1909
• Add support for GIT_TRACE environment variable by @jelmer in https://github.com/jelmer/dulwich/pull/1910
• Fix Git filter protocol to handle two-phase response format by @jelmer in https://github.com/jelmer/dulwich/pull/1911
• Add git worktree repair command by @jelmer in https://github.com/jelmer/dulwich/pull/1912
• Add support for dulwich verify-tag command by @jelmer in https://github.com/jelmer/dulwich/pull/1914
• Add support for git var command by @jelmer in https://github.com/jelmer/dulwich/pull/1913
• Add support for dulwich verify-commit command by @jelmer in https://github.com/jelmer/dulwich/pull/1915
• Add support for dulwich merge-base command by @jelmer in https://github.com/jelmer/dulwich/pull/1916
• Avoid PyObject, deprecated in PyO3 0.26 by @jelmer in https://github.com/jelmer/dulwich/pull/1917
• Add python 3.14 support by @jelmer in https://github.com/jelmer/dulwich/pull/1918
• Re-enable Android wheels build by @mhsmith in https://github.com/jelmer/dulwich/pull/1919
• Attempt to fix 3.14 errors by @jelmer in https://github.com/jelmer/dulwich/pull/1920
• Fix pypi-publish action version by @jelmer in https://github.com/jelmer/dulwich/pull/1921
• Fix pack copy test for Windows Python 3.14 by @jelmer in https://github.com/jelmer/dulwich/pull/1922
• Fix LFS status tests cleanup issue on Windows Python 3.14 by @jelmer in https://github.com/jelmer/dulwich/pull/1923

New Contributors

• @mhsmith made their first contribution in https://github.com/jelmer/dulwich/pull/1919

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.2...dulwich-0.24.4

What's Changed

• Fix pypi publish action version by @jelmer in https://github.com/jelmer/dulwich/pull/1890
• Add remaining typing by @jelmer in https://github.com/jelmer/dulwich/pull/1891
• Disable android wheels build, which currently fails due to 403s on by @jelmer in https://github.com/jelmer/dulwich/pull/1892
• fix typing by @jelmer in https://github.com/jelmer/dulwich/pull/1893
• deps(deps): bump memchr from 2.7.5 to 2.7.6 in the cargo group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1901
• ci(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1900
• deps(deps): bump the pip group with 2 updates by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1902
• ci(deps): bump docker/setup-qemu-action from 3.2.0 to 3.6.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1899
• ci(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1897
• ci(deps): bump dependabot/fetch-metadata from 2.2.0 to 2.4.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1898
• Use immutable container type annotations where appropriate by @jelmer in https://github.com/jelmer/dulwich/pull/1903
• Add extract_signature() method to Commit and Tag by @jelmer in https://github.com/jelmer/dulwich/pull/1905
• Fix BlackboxTestCase to respect Python venv path by @mgorny in https://github.com/jelmer/dulwich/pull/1906
• Add DependencyMissing class by @jelmer in https://github.com/jelmer/dulwich/pull/1907
• More typing fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1908
• Implement GPG signing and verification support for commits and tags by @jelmer in https://github.com/jelmer/dulwich/pull/1909
• Add support for GIT_TRACE environment variable by @jelmer in https://github.com/jelmer/dulwich/pull/1910
• Fix Git filter protocol to handle two-phase response format by @jelmer in https://github.com/jelmer/dulwich/pull/1911
• Add git worktree repair command by @jelmer in https://github.com/jelmer/dulwich/pull/1912
• Add support for dulwich verify-tag command by @jelmer in https://github.com/jelmer/dulwich/pull/1914
• Add support for git var command by @jelmer in https://github.com/jelmer/dulwich/pull/1913
• Add support for dulwich verify-commit command by @jelmer in https://github.com/jelmer/dulwich/pull/1915
• Add support for dulwich merge-base command by @jelmer in https://github.com/jelmer/dulwich/pull/1916

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.2...dulwich-0.24.3

What's Changed

• Fix worktree CLI tests to properly change to repository directory by @jelmer in https://github.com/jelmer/dulwich/pull/1739
• Add temporary_worktree context manager by @jelmer in https://github.com/jelmer/dulwich/pull/1742
• Add more typing by @jelmer in https://github.com/jelmer/dulwich/pull/1743
• Add more typing by @jelmer in https://github.com/jelmer/dulwich/pull/1744
• Add more typing by @jelmer in https://github.com/jelmer/dulwich/pull/1745
• Add colorized diff support for show command by @jelmer in https://github.com/jelmer/dulwich/pull/1746
• Add more typing by @jelmer in https://github.com/jelmer/dulwich/pull/1747
• Fix Windows path handling regression in checkout operations by @jelmer in https://github.com/jelmer/dulwich/pull/1752
• Add more docstrings by @jelmer in https://github.com/jelmer/dulwich/pull/1753
• Fix Windows config loading to only use current Git installation by @jelmer in https://github.com/jelmer/dulwich/pull/1755
• Add interactive rebase support by @jelmer in https://github.com/jelmer/dulwich/pull/1756
• Run tests on Android by @jelmer in https://github.com/jelmer/dulwich/pull/1757
• Add docstrings for everything by @jelmer in https://github.com/jelmer/dulwich/pull/1754
• Disable android test for now by @jelmer in https://github.com/jelmer/dulwich/pull/1758
• Add more typing by @jelmer in https://github.com/jelmer/dulwich/pull/1750
• Fix merge functionality to handle missing merge3 dependency gracefully by @jelmer in https://github.com/jelmer/dulwich/pull/1760
• ci(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1763
• deps(deps): bump ruff from 0.12.4 to 0.12.8 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1764
• ci(deps): bump actions/download-artifact from 4 to 5 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1762
• refs: handle per-worktree and shared refs on read and on reflog writes by @skshetry in https://github.com/jelmer/dulwich/pull/1749
• Revert accidental API change by @jelmer in https://github.com/jelmer/dulwich/pull/1766
• Add object_store.iter_commit_contents() by @mathrick in https://github.com/jelmer/dulwich/pull/1761
• Add recipes to documentation by @mathrick in https://github.com/jelmer/dulwich/pull/1767
• deps(deps): bump ruff from 0.12.8 to 0.12.9 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1772
• Factor out checks for merge3 module to a function by @mathrick in https://github.com/jelmer/dulwich/pull/1771
• Fix handling of CRLF line endings with core.autocrlf = input by @jelmer in https://github.com/jelmer/dulwich/pull/1773
• Add support for http.extraHeader configuration by @jelmer in https://github.com/jelmer/dulwich/pull/1774
• Add support for patiencediff by @jelmer in https://github.com/jelmer/dulwich/pull/1820
• Reduce test noise by @jelmer in https://github.com/jelmer/dulwich/pull/1818
• Add IPv6 support for git:// protocol URLs by @jelmer in https://github.com/jelmer/dulwich/pull/1821
• Optimize LFS performance by avoiding redundant disk writes by @jelmer in https://github.com/jelmer/dulwich/pull/1864
• Improve new contributor experience by @mathrick in https://github.com/jelmer/dulwich/pull/1768
• deps(deps): bump ruff from 0.12.9 to 0.12.10 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1867
• Add porcelain.shortlog function to summarize commits by author by @UsamaQaisrani in https://github.com/jelmer/dulwich/pull/1865
• group items in dependabot by @jelmer in https://github.com/jelmer/dulwich/pull/1869
• deps(deps): bump mypy from 1.17.0 to 1.17.1 in the pip group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1870
• Fix TreeEntry typing to not allow None values by @jelmer in https://github.com/jelmer/dulwich/pull/1871
• add --all flag to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1866
• add --remotes to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1872
• Fix subprocess filter performance issues (#1789) by @jelmer in https://github.com/jelmer/dulwich/pull/1868
• add --merged to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1873
• add --no-merged to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1874
• add --contains to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1875
• deps(deps): bump ruff from 0.12.10 to 0.12.11 in the pip group by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1877
• Add support for core.whitespace and core.safecrlf by @jelmer in https://github.com/jelmer/dulwich/pull/1879
• Add support for core.preloadIndex configuration setting by @jelmer in https://github.com/jelmer/dulwich/pull/1682
• add --column to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1876
• Fix test failures by adding missing test modules and fixing filter tests by @jelmer in https://github.com/jelmer/dulwich/pull/1881
• add --list to branch command by @xifOO in https://github.com/jelmer/dulwich/pull/1882
• Appease deps.dev by @jelmer in https://github.com/jelmer/dulwich/pull/1883
• Remove me from AUTHORS list by @warrd in https://github.com/jelmer/dulwich/pull/1884
• Support TMPDIR as example system directory in symlink test by @jelmer in https://github.com/jelmer/dulwich/pull/1887
• Fix ruff issues by @jelmer in https://github.com/jelmer/dulwich/pull/1886

New Contributors

• @mathrick made their first contribution in https://github.com/jelmer/dulwich/pull/1761
• @UsamaQaisrani made their first contribution in https://github.com/jelmer/dulwich/pull/1865
• @xifOO made their first contribution in https://github.com/jelmer/dulwich/pull/1866
• @warrd made their first contribution in https://github.com/jelmer/dulwich/pull/1884

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.1...dulwich-0.24.2

What's Changed

• Require typing_extensions on Python 3.10. by @jelmer in https://github.com/jelmer/dulwich/pull/1736

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.24.0...dulwich-0.24.1

What's Changed

• deps(deps): bump ruff from 0.12.1 to 0.12.2 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1676
• Add basic reflog command by @jelmer in https://github.com/jelmer/dulwich/pull/1675
• gc: improve test coverage by @jelmer in https://github.com/jelmer/dulwich/pull/1679
• Add autogc disable mechanisms for API users by @jelmer in https://github.com/jelmer/dulwich/pull/1680
• Allow ready objects to be passed into parse_commit/parse_tree by @jelmer in https://github.com/jelmer/dulwich/pull/1677
• refs: optimise writing unchanged refs by @danchr in https://github.com/jelmer/dulwich/pull/1120
• Add support for core.commitGraph configuration setting by @jelmer in https://github.com/jelmer/dulwich/pull/1683
• Add some more tests for the paramiko vendor by @jelmer in https://github.com/jelmer/dulwich/pull/1684
• Add format-patch command by @jelmer in https://github.com/jelmer/dulwich/pull/1686
• Implement diffing two committed trees, and between cached and working tree by @jelmer in https://github.com/jelmer/dulwich/pull/1687
• Improve bundle handling by @jelmer in https://github.com/jelmer/dulwich/pull/1685
• Protov2 deepen by @stspdotname in https://github.com/jelmer/dulwich/pull/1681
• Improve LFS support by @jelmer in https://github.com/jelmer/dulwich/pull/1688
• filters: Support required setting by @jelmer in https://github.com/jelmer/dulwich/pull/1689
• Various LFS fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1691
• Add basic support for merge drivers by @jelmer in https://github.com/jelmer/dulwich/pull/1690
• Add bundle command by @jelmer in https://github.com/jelmer/dulwich/pull/1697
• Add support for GIT_CONFIG_GLOBAL and GIT_CONFIG_SYSTEM environment variables by @jelmer in https://github.com/jelmer/dulwich/pull/1699
• Some simplifications, fix typo in preamble by @jelmer in https://github.com/jelmer/dulwich/pull/1700
• Add -a argument to commit by @jelmer in https://github.com/jelmer/dulwich/pull/1701
• Add basic pager support by @jelmer in https://github.com/jelmer/dulwich/pull/1702
• dulwich.cli: Reconcile parse_commit_range and parse_committish_range by @jelmer in https://github.com/jelmer/dulwich/pull/1705
• Fix gitignore handling for nested directories by @jelmer in https://github.com/jelmer/dulwich/pull/1706
• cli: Add support for editing commit message in editor by @jelmer in https://github.com/jelmer/dulwich/pull/1703
• diff: Add colordiff support by @jelmer in https://github.com/jelmer/dulwich/pull/1707
• Add --amend support to dulwich.cli.commit and dulwich.porcelain.commit by @jelmer in https://github.com/jelmer/dulwich/pull/1709
• deps(deps): bump ruff from 0.12.2 to 0.12.3 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1712
• Add locked_ref context manager and fix packed ref deletion by @jelmer in https://github.com/jelmer/dulwich/pull/1713
• Fix type for ShaFile.from_string() by @jelmer in https://github.com/jelmer/dulwich/pull/1714
• Support more complicated revision syntax by @jelmer in https://github.com/jelmer/dulwich/pull/1704
• Fix Unicode filename encoding on Windows by @jelmer in https://github.com/jelmer/dulwich/pull/1715
• dumb: Optimize number of HTTP requests sent to git server by @anlambert in https://github.com/jelmer/dulwich/pull/1716
• Optimize update_working_tree and prevent overwriting uncommitted changes by @jelmer in https://github.com/jelmer/dulwich/pull/1708
• Support pack config options by @jelmer in https://github.com/jelmer/dulwich/pull/1717
• various minor type improvements by @jelmer in https://github.com/jelmer/dulwich/pull/1719
• deps(deps): bump mypy from 1.16.1 to 1.17.0 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1722
• deps(deps): bump ruff from 0.12.3 to 0.12.4 by @dependabot[bot] in https://github.com/jelmer/dulwich/pull/1723
• Avoid unnecessary import probing by @jelmer in https://github.com/jelmer/dulwich/pull/1725
• Support empty path in Tree.lookup_path by @jelmer in https://github.com/jelmer/dulwich/pull/1726
• Automatically publish a main brach that is like the master branch by @jelmer in https://github.com/jelmer/dulwich/pull/1724
• Support python 3.14 by @jelmer in https://github.com/jelmer/dulwich/pull/1727
• Split out WorkTree from Repo by @jelmer in https://github.com/jelmer/dulwich/pull/1711
• Simplify gitignore parent exclusion logic by @jelmer in https://github.com/jelmer/dulwich/pull/1728
• Implement basic worktree support by @jelmer in https://github.com/jelmer/dulwich/pull/1729
• Don't build python 3.14 wheels yet by @jelmer in https://github.com/jelmer/dulwich/pull/1730
• Fix deprecation warnings by @jelmer in https://github.com/jelmer/dulwich/pull/1733

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.23.2...dulwich-0.24.0

What's Changed

• Only write Git index extensions when they contain meaningful data by @jelmer in https://github.com/jelmer/dulwich/pull/1644
• Add test for porcelain.push return value by @jelmer in https://github.com/jelmer/dulwich/pull/1645
• Some fixes for the dumb transfer protocol by @anlambert in https://github.com/jelmer/dulwich/pull/1646
• Support branch..merge configuration options by @jelmer in https://github.com/jelmer/dulwich/pull/1648
• Add porcelain submodule commands by @jelmer in https://github.com/jelmer/dulwich/pull/1647
• Add support for branch.sort configuration by @jelmer in https://github.com/jelmer/dulwich/pull/1655
• Add support for remote.<name>.mirror configuration by @jelmer in https://github.com/jelmer/dulwich/pull/1652
• Fix GPG signing parameter behavior to match Git by @jelmer in https://github.com/jelmer/dulwich/pull/1653
• Add support for branch.autoSetupMerge configuration by @jelmer in https://github.com/jelmer/dulwich/pull/1654
• Minor fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1649
• Add support for Git filter drivers (clean/smudge) by @jelmer in https://github.com/jelmer/dulwich/pull/1657
• Add support for reftables by @jelmer in https://github.com/jelmer/dulwich/pull/1570
• Add LFS support implementation by @jelmer in https://github.com/jelmer/dulwich/pull/1658
• Apply filters when checking file modifications in remove command by @jelmer in https://github.com/jelmer/dulwich/pull/1659
• Apply filters when materializing files in sparse checkout by @jelmer in https://github.com/jelmer/dulwich/pull/1660
• Apply filters during checkout operations by @jelmer in https://github.com/jelmer/dulwich/pull/1661
• Add support for reading GitAttributes by @jelmer in https://github.com/jelmer/dulwich/pull/1662
• Add notes on exceptions to CONTRIBUTING by @jelmer in https://github.com/jelmer/dulwich/pull/1663
• Support popping stashes by @jelmer in https://github.com/jelmer/dulwich/pull/1665
• Various minor cleanups by @jelmer in https://github.com/jelmer/dulwich/pull/1664
• Emit deprecation warnings on use rather than import by @ncoghlan in https://github.com/jelmer/dulwich/pull/1651
• Various minor cleanups by @jelmer in https://github.com/jelmer/dulwich/pull/1666
• Add GitAttributes modification and serialization methods by @jelmer in https://github.com/jelmer/dulwich/pull/1667
• Add bisect by @jelmer in https://github.com/jelmer/dulwich/pull/1668
• Fix GitAttributes.set_attribute to properly update existing patterns by @jelmer in https://github.com/jelmer/dulwich/pull/1669
• Fix porcelain.describe() hash length to match git describe behavior by @jelmer in https://github.com/jelmer/dulwich/pull/1671
• Add support for core.protectHFS configuration setting by @jelmer in https://github.com/jelmer/dulwich/pull/1670
• ParamikoSSHVendor: Add support for SSH config file by @jelmer in https://github.com/jelmer/dulwich/pull/1673
• Add test for porcelain.add() from ignored directory by @jelmer in https://github.com/jelmer/dulwich/pull/1674

New Contributors

• @ncoghlan made their first contribution in https://github.com/jelmer/dulwich/pull/1651

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.23.1...dulwich-0.23.2

What's Changed

• Add basic notes support by @jelmer in https://github.com/jelmer/dulwich/pull/1602
• Add basic cherry-pick support by @jelmer in https://github.com/jelmer/dulwich/pull/1597
• Implement git revert command (#1599) by @jelmer in https://github.com/jelmer/dulwich/pull/1603
• Support "depth" argument in local clone by @jelmer in https://github.com/jelmer/dulwich/pull/1080
• Implement annotate. Fixes #245 by @jelmer in https://github.com/jelmer/dulwich/pull/536
• Convert assertion to ApplyDeltaError in apply_delta function by @jelmer in https://github.com/jelmer/dulwich/pull/1607
• Fix handling of fetching of packs over dumb http transports by @jelmer in https://github.com/jelmer/dulwich/pull/1608
• Add test for issue #1247 (top-level untracked files detection) by @jelmer in https://github.com/jelmer/dulwich/pull/1609
• Add more typing by @jelmer in https://github.com/jelmer/dulwich/pull/1605
• Fix support for short commit hashes in porcelain.reset() by @jelmer in https://github.com/jelmer/dulwich/pull/1610
• Fix TypeError when handling bytes paths in FileSystemBackend by @jelmer in https://github.com/jelmer/dulwich/pull/1611
• Fix porcelain.reset --hard to delete files not in target tree by @jelmer in https://github.com/jelmer/dulwich/pull/1612
• Return symrefs from ls_refs by @jelmer in https://github.com/jelmer/dulwich/pull/1615
• Add comprehensive include/includeIf support to config parser by @jelmer in https://github.com/jelmer/dulwich/pull/1614
• Bump ruff from 0.11.13 to 0.12.0 by @dependabot in https://github.com/jelmer/dulwich/pull/1617
• Bump mypy from 1.16.0 to 1.16.1 by @dependabot in https://github.com/jelmer/dulwich/pull/1618
• Fix running of all tests by @jelmer in https://github.com/jelmer/dulwich/pull/1613
• porcelain.status: Support untracked_files="normal" and make it the default by @jelmer in https://github.com/jelmer/dulwich/pull/1619
• Support timeouts for HTTP client operations by @jelmer in https://github.com/jelmer/dulwich/pull/1620
• Add prune command by @jelmer in https://github.com/jelmer/dulwich/pull/1622
• Add support for auto garbage collection. by @jelmer in https://github.com/jelmer/dulwich/pull/1623
• Support matchers in includeIf by @jelmer in https://github.com/jelmer/dulwich/pull/1624
• Misc fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1625
• Add basic filter-branch support by @jelmer in https://github.com/jelmer/dulwich/pull/1626
• Fix KeyError when pulling from a shallow clone by @jelmer in https://github.com/jelmer/dulwich/pull/1628
• Fix porcelain.remove() to work from any directory by @jelmer in https://github.com/jelmer/dulwich/pull/1627
• Fix docstrings for pydoctor by @jelmer in https://github.com/jelmer/dulwich/pull/1629
• Configure Dependabot to use shorter commit messages by @jelmer in https://github.com/jelmer/dulwich/pull/1630
• Implement mv porcelain. Fixes #1633 by @jelmer in https://github.com/jelmer/dulwich/pull/1634
• Add support for reset --mixed and reset --soft modes by @jelmer in https://github.com/jelmer/dulwich/pull/1635
• Increase buffer sizes by @jelmer in https://github.com/jelmer/dulwich/pull/1637
• Add blob_normalizer support to update_working_tree by @jelmer in https://github.com/jelmer/dulwich/pull/1636
• Fix parse_commit to properly dereference annotated tags by @jelmer in https://github.com/jelmer/dulwich/pull/1639
• fix: handle missing sshCommand in config by @skshetry in https://github.com/jelmer/dulwich/pull/1640
• Fix update workingtree by @jelmer in https://github.com/jelmer/dulwich/pull/1641
• deps(deps): bump ruff from 0.12.0 to 0.12.1 by @dependabot in https://github.com/jelmer/dulwich/pull/1642

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.23.0...dulwich-0.23.1

What's Changed

• Bump ruff from 0.9.7 to 0.9.9 by @dependabot in https://github.com/jelmer/dulwich/pull/1502
• Install libatomic - necessary for rustup by @jelmer in https://github.com/jelmer/dulwich/pull/1507
• cli: protocol argument consistency and fixups by @jayaddison in https://github.com/jelmer/dulwich/pull/1506
• cli: adjust 'message' argument parsing to require a value by @jayaddison in https://github.com/jelmer/dulwich/pull/1511
• cli: adjust parsing of positional path arguments by @jayaddison in https://github.com/jelmer/dulwich/pull/1512
• Handle empty commit messages in porcelain.log by @jelmer in https://github.com/jelmer/dulwich/pull/1515
• Bump ruff from 0.9.9 to 0.9.10 by @dependabot in https://github.com/jelmer/dulwich/pull/1516
• Bump ruff by @jelmer in https://github.com/jelmer/dulwich/pull/1518
• cli: add basic branch management commands by @jayaddison in https://github.com/jelmer/dulwich/pull/1514
• Document dulwich.porcelain functions by their Python identi… by @marnanel in https://github.com/jelmer/dulwich/pull/1520
• Update NEWS by @jelmer in https://github.com/jelmer/dulwich/pull/1522
• Bump ruff from 0.11.0 to 0.11.2 by @dependabot in https://github.com/jelmer/dulwich/pull/1523
• Bump ruff from 0.11.2 to 0.11.4 by @dependabot in https://github.com/jelmer/dulwich/pull/1525
• Bump ruff from 0.11.4 to 0.11.5 by @dependabot in https://github.com/jelmer/dulwich/pull/1526
• Bump ruff from 0.11.5 to 0.11.6 by @dependabot in https://github.com/jelmer/dulwich/pull/1527
• Resolve datetime deprecation warnings by @emmanuel-ferdman in https://github.com/jelmer/dulwich/pull/1528
• client: Ensure thin_packs parameter is honored with git protocol v2 by @anlambert in https://github.com/jelmer/dulwich/pull/1530
• Fix some warnings by @jelmer in https://github.com/jelmer/dulwich/pull/1529
• Add more tests by @jelmer in https://github.com/jelmer/dulwich/pull/1531
• Bump ruff from 0.11.6 to 0.11.7 by @dependabot in https://github.com/jelmer/dulwich/pull/1532
• Bump ruff from 0.11.7 to 0.11.8 by @dependabot in https://github.com/jelmer/dulwich/pull/1533
• Bump ruff from 0.11.8 to 0.11.9 by @dependabot in https://github.com/jelmer/dulwich/pull/1534
• Add tests for log_utils and submodule by @jelmer in https://github.com/jelmer/dulwich/pull/1535
• Add more release robot tests by @jelmer in https://github.com/jelmer/dulwich/pull/1536
• Add tests for cloud_gcs by @jelmer in https://github.com/jelmer/dulwich/pull/1537
• Add more object_store tests by @jelmer in https://github.com/jelmer/dulwich/pull/1538
• Add more tests by @jelmer in https://github.com/jelmer/dulwich/pull/1539
• Bump ruff from 0.11.9 to 0.11.10 by @dependabot in https://github.com/jelmer/dulwich/pull/1540
• Bump ruff from 0.11.10 to 0.11.11 by @dependabot in https://github.com/jelmer/dulwich/pull/1544
• Bump PyO3 to 0.25 by @jelmer in https://github.com/jelmer/dulwich/pull/1547
• Split out Config.set and Config.add by @jelmer in https://github.com/jelmer/dulwich/pull/1549
• Support core.sshCommand by @jelmer in https://github.com/jelmer/dulwich/pull/1550
• Fix typing issues. Fixes #1521 by @jelmer in https://github.com/jelmer/dulwich/pull/1551
• SubprocessClient: timeout after 60s of inactivity when closing channel by @jelmer in https://github.com/jelmer/dulwich/pull/1552
• Add merge command by @jelmer in https://github.com/jelmer/dulwich/pull/1554
• Add type hint for get_ssh_vendor by @jelmer in https://github.com/jelmer/dulwich/pull/1553
• Fix handling of casing of subsection names in config by @jelmer in https://github.com/jelmer/dulwich/pull/1556
• Update working tree in pull by @jelmer in https://github.com/jelmer/dulwich/pull/1555
• Cope with missing merge3 by @jelmer in https://github.com/jelmer/dulwich/pull/1557
• Implement dulwich.porcelain.checkout by @jelmer in https://github.com/jelmer/dulwich/pull/1558
• Add script for fixing dulwich' history by @jelmer in https://github.com/jelmer/dulwich/pull/1559
• Fix warnings by @jelmer in https://github.com/jelmer/dulwich/pull/1562
• Add basic support for manyfiles feature by @jelmer in https://github.com/jelmer/dulwich/pull/1560
• Use dissolve to manage deprecations by @jelmer in https://github.com/jelmer/dulwich/pull/1563
• Use dissolve's remove_in by @jelmer in https://github.com/jelmer/dulwich/pull/1565
• Bump ruff from 0.11.11 to 0.11.12 by @dependabot in https://github.com/jelmer/dulwich/pull/1566
• Handle trailing backslashes in config files appropriately by @jelmer in https://github.com/jelmer/dulwich/pull/1568
• Bump mypy by @jelmer in https://github.com/jelmer/dulwich/pull/1569
• Add basic commit graph support. See #1191 by @jelmer in https://github.com/jelmer/dulwich/pull/1564
• Factor out varint by @jelmer in https://github.com/jelmer/dulwich/pull/1571
• Fix tests by @jelmer in https://github.com/jelmer/dulwich/pull/1572
• Revert "Factor out varint" by @jelmer in https://github.com/jelmer/dulwich/pull/1573
• Port remaining dulwich.cli commands to argparse by @jelmer in https://github.com/jelmer/dulwich/pull/1574
• Fix gitignore pattern matching for directory negation patterns by @jelmer in https://github.com/jelmer/dulwich/pull/1575
• Pydoctor fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1576
• Fix porcelain.add() to handle symlinks pointing outside repository by @jelmer in https://github.com/jelmer/dulwich/pull/1577
• Two fixes for add handling by @jelmer in https://github.com/jelmer/dulwich/pull/1578
• Bump ruff from 0.11.12 to 0.11.13 by @dependabot in https://github.com/jelmer/dulwich/pull/1579
• More add fixes by @jelmer in https://github.com/jelmer/dulwich/pull/1580
• Fix compatibility with testtools by @jelmer in https://github.com/jelmer/dulwich/pull/1581
• Bump pyo3 from 0.25.0 to 0.25.1 by @dependabot in https://github.com/jelmer/dulwich/pull/1582
• Bump memchr from 2.7.4 to 2.7.5 by @dependabot in https://github.com/jelmer/dulwich/pull/1583
• Add support for format argument to Repo.init() and Repo.init_bare() by @jelmer in https://github.com/jelmer/dulwich/pull/1584
• Fix Rust implementation of sorted_tree_items() for submodules (#1325) by @jelmer in https://github.com/jelmer/dulwich/pull/1585
• Fix LocalGitClient assertion error with MemoryRepo by @jelmer in https://github.com/jelmer/dulwich/pull/1588
• Add support for os.PathLike objects throughout the API by @jelmer in https://github.com/jelmer/dulwich/pull/1586
• Initial work on pack index v3 by @jelmer in https://github.com/jelmer/dulwich/pull/1119
• Add unpack-objects plumbing command by @jelmer in https://github.com/jelmer/dulwich/pull/1592
• docs: Clarify trailing slash requirement for directory ignore checks by @jelmer in https://github.com/jelmer/dulwich/pull/1591
• Add merge-tree plumbing command by @jelmer in https://github.com/jelmer/dulwich/pull/1589
• Support garbage collection by @jelmer in https://github.com/jelmer/dulwich/pull/1593
• Add porcelain.count_objects() function by @jelmer in https://github.com/jelmer/dulwich/pull/1590
• Support pack.indexVersion config option by @jelmer in https://github.com/jelmer/dulwich/pull/1594
• Fix DictRefsContainer.set_if_equals() to only update requested ref by @jelmer in https://github.com/jelmer/dulwich/pull/1596
• Implement basic rebase by @jelmer in https://github.com/jelmer/dulwich/pull/1595

New Contributors

• @emmanuel-ferdman made their first contribution in https://github.com/jelmer/dulwich/pull/1528

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.22.8...dulwich-0.23.0

What's Changed

• Bump ruff from 0.8.3 to 0.8.4 by @dependabot in https://github.com/jelmer/dulwich/pull/1469
• Bump mypy to 1.14.0 by @jelmer in https://github.com/jelmer/dulwich/pull/1470
• Bump ruff from 0.8.4 to 0.8.6 by @dependabot in https://github.com/jelmer/dulwich/pull/1475
• Bump mypy from 1.14.0 to 1.14.1 by @dependabot in https://github.com/jelmer/dulwich/pull/1474
• Add auto-merge for dependabot by @jelmer in https://github.com/jelmer/dulwich/pull/1476
• Bump pyo3 from 0.23.3 to 0.23.4 by @dependabot in https://github.com/jelmer/dulwich/pull/1478
• Bump ruff to 0.9.1 by @jelmer in https://github.com/jelmer/dulwich/pull/1480
• Bump ruff from 0.9.1 to 0.9.2 by @dependabot in https://github.com/jelmer/dulwich/pull/1481
• porcelain: respect 'abbrev' argument when describing annotated-tagless repositories by @jayaddison in https://github.com/jelmer/dulwich/pull/1482
• Ruff 0.9.3 by @jelmer in https://github.com/jelmer/dulwich/pull/1486
• Provide gpgme-config on Ubuntu by @jelmer in https://github.com/jelmer/dulwich/pull/1487
• Bump ruff from 0.9.3 to 0.9.4 by @dependabot in https://github.com/jelmer/dulwich/pull/1489
• Bump ruff from 0.9.4 to 0.9.6 by @dependabot in https://github.com/jelmer/dulwich/pull/1491
• Bump mypy by @jelmer in https://github.com/jelmer/dulwich/pull/1493
• Docstrings for constructors of repo.Repo and repo.MemoryRepo by @marnanel in https://github.com/jelmer/dulwich/pull/1490
• add support for the git option "index.skipHash" by @rggjan in https://github.com/jelmer/dulwich/pull/1488
• Skip-worktree support, sparse checkout impl by @lmmx in https://github.com/jelmer/dulwich/pull/1495
• Add default values for IndexEntry by @jelmer in https://github.com/jelmer/dulwich/pull/1496
• Bump ruff from 0.9.6 to 0.9.7 by @dependabot in https://github.com/jelmer/dulwich/pull/1498
• Allow passing in plain strings to tag_create by @jelmer in https://github.com/jelmer/dulwich/pull/1500
• feat(cone-mode): sparse checkout cone mode support by @lmmx in https://github.com/jelmer/dulwich/pull/1497
• Add note on comparison with other Git libraries by @jelmer in https://github.com/jelmer/dulwich/pull/1501

New Contributors

• @rggjan made their first contribution in https://github.com/jelmer/dulwich/pull/1488
• @lmmx made their first contribution in https://github.com/jelmer/dulwich/pull/1495

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.22.7...dulwich-0.22.8

• Fix serializing of commits with empty commit messages. (Castedo Ellerman, #1429)

What's Changed

• Various minor rust improvements by @jelmer in https://github.com/jelmer/dulwich/pull/1390
• Fix handling of symrefs with protocol v2. Fixes #1389 by @jelmer in https://github.com/jelmer/dulwich/pull/1392
• Refactor ref handling by @jelmer in https://github.com/jelmer/dulwich/pull/1393
• Bump mypy from 1.12.0 to 1.12.1 by @dependabot in https://github.com/jelmer/dulwich/pull/1395
• Bump ruff from 0.6.9 to 0.7.0 by @dependabot in https://github.com/jelmer/dulwich/pull/1396
• Build pure wheels by @jelmer in https://github.com/jelmer/dulwich/pull/1398
• Bump mypy from 1.12.1 to 1.13.0 by @dependabot in https://github.com/jelmer/dulwich/pull/1401
• Bump ruff from 0.7.0 to 0.7.1 by @dependabot in https://github.com/jelmer/dulwich/pull/1400
• Add ObjectStore.iter_prefix by @jelmer in https://github.com/jelmer/dulwich/pull/1402
• Test symrefs handling for git protocol v2 by @stspdotname in https://github.com/jelmer/dulwich/pull/1403
• use a default ref-prefix when fetching with git protocol v2 by @stspdotname in https://github.com/jelmer/dulwich/pull/1404
• Revert back to Cargo.lock format version 3 by @jelmer in https://github.com/jelmer/dulwich/pull/1406
• Upgrade disperse config by @jelmer in https://github.com/jelmer/dulwich/pull/1408
• Fix new version by @jelmer in https://github.com/jelmer/dulwich/pull/1409
• Drop outdated performance.txt file. Fixes #1411 by @jelmer in https://github.com/jelmer/dulwich/pull/1412
• return peeled refs from GitClient.get_refs() if protocol-v2 is used by @stspdotname in https://github.com/jelmer/dulwich/pull/1413
• Bump ruff from 0.7.1 to 0.7.2 by @dependabot in https://github.com/jelmer/dulwich/pull/1415
• Drop support for Python 3.8 by @jelmer in https://github.com/jelmer/dulwich/pull/1414
• build: respect the "pure" argument at metadata generation time by @eli-schwartz in https://github.com/jelmer/dulwich/pull/1417
• Move ref_prefix default behaviour down by @jelmer in https://github.com/jelmer/dulwich/pull/1418
• Drop broken refspecs argument for porcelain.clone by @jelmer in https://github.com/jelmer/dulwich/pull/1420
• consistently pass around ref_prefix and protocol_version in dulwich.client by @jelmer in https://github.com/jelmer/dulwich/pull/1421
• Revert broken ref_prefix handling, consistently apply ref_prefix by @jelmer in https://github.com/jelmer/dulwich/pull/1422
• Strip pkt-line when negotiating Git protocol v2 by @Lordshinjo in https://github.com/jelmer/dulwich/pull/1424
• add easy type hints to some function returns by @castedo in https://github.com/jelmer/dulwich/pull/1426
• Bump ruff from 0.7.2 to 0.7.3 by @dependabot in https://github.com/jelmer/dulwich/pull/1427
• iter_prefix: fix handling of missing loose object directories by @jelmer in https://github.com/jelmer/dulwich/pull/1428
• type hints for ShaFile.copy and Tree.lookup_path by @castedo in https://github.com/jelmer/dulwich/pull/1430
• Improve unittest calls by @jelmer in https://github.com/jelmer/dulwich/pull/1433
• Upgrade Python code to a modern version by @jelmer in https://github.com/jelmer/dulwich/pull/1436
• Reject refcontainer values that are not 40 char sha or symref by @abn in https://github.com/jelmer/dulwich/pull/1437

New Contributors

• @eli-schwartz made their first contribution in https://github.com/jelmer/dulwich/pull/1417
• @Lordshinjo made their first contribution in https://github.com/jelmer/dulwich/pull/1424
• @abn made their first contribution in https://github.com/jelmer/dulwich/pull/1437

Full Changelog: https://github.com/jelmer/dulwich/compare/v0.22.2...v0.22.6

What's Changed

• Drop outdated performance.txt file. Fixes #1411 by @jelmer in https://github.com/jelmer/dulwich/pull/1412
• return peeled refs from GitClient.get_refs() if protocol-v2 is used by @stspdotname in https://github.com/jelmer/dulwich/pull/1413
• Bump ruff from 0.7.1 to 0.7.2 by @dependabot in https://github.com/jelmer/dulwich/pull/1415
• Drop support for Python 3.8 by @jelmer in https://github.com/jelmer/dulwich/pull/1414
• build: respect the "pure" argument at metadata generation time by @eli-schwartz in https://github.com/jelmer/dulwich/pull/1417
• Move ref_prefix default behaviour down by @jelmer in https://github.com/jelmer/dulwich/pull/1418
• Drop broken refspecs argument for porcelain.clone by @jelmer in https://github.com/jelmer/dulwich/pull/1420
• consistently pass around ref_prefix and protocol_version in dulwich.client by @jelmer in https://github.com/jelmer/dulwich/pull/1421
• Revert broken ref_prefix handling, consistently apply ref_prefix by @jelmer in https://github.com/jelmer/dulwich/pull/1422
• Strip pkt-line when negotiating Git protocol v2 by @Lordshinjo in https://github.com/jelmer/dulwich/pull/1424

New Contributors

• @eli-schwartz made their first contribution in https://github.com/jelmer/dulwich/pull/1417
• @Lordshinjo made their first contribution in https://github.com/jelmer/dulwich/pull/1424

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.22.4...dulwich-0.22.5

• Fix handling of symrefs with protocol v2. (Jelmer Vernooij, #1389)

• Add ObjectStore.iter_prefix. (Jelmer Vernooij)

• Revert back to version 3 of Cargo.lock, to allow building with older Cargo versions. (Jelmer Vernooij)

• Use a default ref-prefix when fetching with git protocol v2 (Stefan Sperling, #1389)

• Add ObjectStore.iter_prefix. (Jelmer Vernooij)

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.22.2...dulwich-0.22.3

What's Changed

• Fix pypi deployments by @jelmer in https://github.com/jelmer/dulwich/pull/1284
• Handle alternate case for worktreeconfig setting by @wshanks in https://github.com/jelmer/dulwich/pull/1286
• Ship rust files. Fixes #1287 by @jelmer in https://github.com/jelmer/dulwich/pull/1290

New Contributors

• @wshanks made their first contribution in https://github.com/jelmer/dulwich/pull/1286

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.22.0...dulwich-0.22.1

What's Changed

• Start on 0.21.8 by @jelmer in https://github.com/jelmer/dulwich/pull/1240
• Install twine when uploading to pypi by @jelmer in https://github.com/jelmer/dulwich/pull/1241
• Remove shebang from graph.py by @mtelka in https://github.com/jelmer/dulwich/pull/1242
• Disable pypi uploads in disperse; this is now down by the GitHub actions workflow by @jelmer in https://github.com/jelmer/dulwich/pull/1243
• tweak doc-strings in LocalGitClient for clarity by @stspdotname in https://github.com/jelmer/dulwich/pull/1245
• Keep GitHub Actions up to date with GitHub's Dependabot by @cclauss in https://github.com/jelmer/dulwich/pull/1249
• Bump the github_actions group with 5 updates by @dependabot in https://github.com/jelmer/dulwich/pull/1250
• Add Python 3.12 to the testing by @cclauss in https://github.com/jelmer/dulwich/pull/1251
• pyproject.toml: Add trove classifier for Python 3.12 by @cclauss in https://github.com/jelmer/dulwich/pull/1252
• Convert _objects.c to _objects.rs by @jelmer in https://github.com/jelmer/dulwich/pull/1204
• Convert pack C helper to rust by @jelmer in https://github.com/jelmer/dulwich/pull/1255
• Convert diff-tree C helper to rust by @jelmer in https://github.com/jelmer/dulwich/pull/1256
• Revert "Bump the github_actions group with 5 updates" by @jelmer in https://github.com/jelmer/dulwich/pull/1257
• Only expect a shallow update when requesting a depth by @abderrahim in https://github.com/jelmer/dulwich/pull/1259
• Use f-strings by @jelmer in https://github.com/jelmer/dulwich/pull/1263
• Wrap all urllib3 read ProtocolErrors as GitProtocolError by @nanonyme in https://github.com/jelmer/dulwich/pull/1261
• Update cargo dependencies with dependabot by @jelmer in https://github.com/jelmer/dulwich/pull/1264
• wheels: Don't build with nightly by @jelmer in https://github.com/jelmer/dulwich/pull/1273
• Reformat with ruff by @jelmer in https://github.com/jelmer/dulwich/pull/1272
• Use latest cibuildwheel by @jelmer in https://github.com/jelmer/dulwich/pull/1276
• cibuildwheel: define options in pyproject.toml by @jelmer in https://github.com/jelmer/dulwich/pull/1275
• Move tests to root. Fixes #1024 by @jelmer in https://github.com/jelmer/dulwich/pull/1277
• Stop installing docs/ as part of package code by @jelmer in https://github.com/jelmer/dulwich/pull/1278
• Bump pyo3 from 0.21.1 to 0.21.2 by @dependabot in https://github.com/jelmer/dulwich/pull/1280
• Set correct version for rust modules by @jelmer in https://github.com/jelmer/dulwich/pull/1281
• Fix installation of tests package by @jelmer in https://github.com/jelmer/dulwich/pull/1282

New Contributors

• @dependabot made their first contribution in https://github.com/jelmer/dulwich/pull/1250
• @abderrahim made their first contribution in https://github.com/jelmer/dulwich/pull/1259

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.21.7...dulwich-0.22.0

• Fix NameError when encountering errors during HTTP operation. (Jelmer Vernooij, #1208)

• Raise exception when default identity can't be found. (Jelmer Vernooij)

• Add a dedicated exception class for unresolved deltas. (Jelmer Vernooij, #1221)

• Support credentials in proxy URL. (Jelmer Vernooij, #1227)

• Add dulwich.porcelain.for_each_ref. (Daniele Trifirò)

What's Changed

• Define a stricter return type for _parse_message by @progval in https://github.com/jelmer/dulwich/pull/1176
• Use ruff support for dulwich by @jelmer in https://github.com/jelmer/dulwich/pull/1177
• Update docs regarding building dulwich without c bindings by @aplaice in https://github.com/jelmer/dulwich/pull/1180
• Be backwards compatible with older derived Repo implementations by @jelmer in https://github.com/jelmer/dulwich/pull/1181
• _hashlib import is needed only for typechecking by @dimbleby in https://github.com/jelmer/dulwich/pull/1184
• Enable pyupgrade by @jelmer in https://github.com/jelmer/dulwich/pull/1185
• updates to the _find_lcas routine for improved efficiency and robustness by @kevinhendricks in https://github.com/jelmer/dulwich/pull/1186
• Add the readthedocs configuration by @jelmer in https://github.com/jelmer/dulwich/pull/1187
• client: Fix content type check in AbstractHttpGitClient._smart_request by @anlambert in https://github.com/jelmer/dulwich/pull/1192
• config: check both git/etc and git/mingw64/etc on windows by @pmrowla in https://github.com/jelmer/dulwich/pull/1194
• Define enum for stage values by @jelmer in https://github.com/jelmer/dulwich/pull/1195
• More refactoring of index by @jelmer in https://github.com/jelmer/dulwich/pull/1196
• Raise GitProtocolError when encountering HTTP Errors in HTTPGitClient by @jelmer in https://github.com/jelmer/dulwich/pull/1200
• Raise GitProtocolError on unexpected pkt by @nanonyme in https://github.com/jelmer/dulwich/pull/1202

New Contributors

• @progval made their first contribution in https://github.com/jelmer/dulwich/pull/1176
• @aplaice made their first contribution in https://github.com/jelmer/dulwich/pull/1180

Full Changelog: https://github.com/jelmer/dulwich/compare/dulwich-0.21.5...dulwich-0.21.6

• Be more tolerant to non-3-length tuple versions. (Jelmer Vernooij)

• Support core.symlinks=false. (Jelmer Vernooij, #1169)

• Deprecate dulwich.objects.parse_commit.

• Fix fetching into MemoryRepo. (Jelmer Vernooij, #1157)

• Support init.defaultBranch config. (Jelmer Vernooij)

• Fix ObjectStore.iterobjects_subset() when hex shas are passed for objects that live in packs. (Jelmer Vernooij, #1166)

• client: Handle absolute path as redirect location in HTTP client. (Antoine Lambert)

• Add support for worktreeconfig extension. (Jelmer Vernooij)

• Deprecate Commit.extra; the Git project specifically discourages adding custom lines, and the contents of Commit.extra are unpredictable as contents may be different between different versions of Dulwich with support for different headers.

  Commit._extra still exists. (Jelmer Vernooij)

• Fix early file close bug in dulwich.pack.extend_pack. (@jelmer)

• Factor out dulwich.pack.extend_pack. (@jelmer)

• Pack internals have been significantly refactored, including significant low-level API changes.

  As a consequence of this, Dulwich now reuses pack deltas when communicating with remote servers, which brings a big boost to network performance. (@jelmer)

• Add 'pack-refs' command. (@danchr)

• Handle more errors when trying to read a ref (@danchr )

• Allow for reuse of existing deltas while creating pack files (@stspdotname )

• cli: fix argument parsing for pack-objects --stdout (@stspdotname)

• cli: open pack-objects output files in binary mode to avoid write() error (@stspdotname)

• Bump minimum python version to 3.7. (@jelmer)

• honor no_proxy environment variable (#1098, @afaul )

• In HTTP Git Client, allow missing Content-Type. (@jelmer)

• Fix --pure builds (@jelmer, #1093)

• Allow passing abbrev to describe (#1084, @nanonyme )

• Fix Repo.reset_index. Previously, it instead took the union with the given tree. (@sattlerc , #1072)

• Add -b argument to dulwich clone. (@jelmer

• On Windows, provide a hint about developer mode when creating symlinks fails due to a permission error. (@jelmer, #1005)

• Add new ObjectID type in dulwich.objects, currently just an alias for bytes. (@jelmer)

• Support repository format version 1. (@jelmer, #1056)

• Support \r\n line endings with continuations when parsing configuration files. (@jelmer)

• Fix handling of SymrefLoop in RefsContainer.setitem. (@domdfcoding, @jelmer)

• Apply insteadOf to rsync-style location strings (previously it was just applied to URLs). (@jelmer, python-poetry/poetry#6329)

• Drop use of certifi, instead relying on urllib3's default code to find system CAs. (@jelmer , #1025)

• Implement timezone parsing in porcelain. (@springheeledjack0 , #1026)

• Drop support for running without setuptools. (@jelmer )

• Ensure configuration is loaded when running "dulwich clone". (@jelmer )

• Build 32 bit wheels for Windows. (@bparzella)

• tests: Ignore errors when deleting GNUPG home directory. Fixes spurious errors racing gnupg-agent. Thanks, @mcepl . Fixes #1000

• config: Support closing brackets in quotes in section names. (@jelmer , #10124)

• Various and formatting fixes. (@kianmeng )

• Document basic authentication in dulwich.porcelain.clone. (@TuringTux )

• Flush before calling fsync, ensuring buffers are filled. (@wernha )

• Support GPG commit signing. (@springheeledjack0 )

• Add python 3.11 support. (Saugat Pachhai))

• Allow missing GPG during tests. (@kulikjak)

• status: return posix-style untracked paths instead of nt-style paths on win32 (@dtrifiro)

• Honour PATH environment when running C Git for testing. (@stspdotname )

• Split out exception for symbolic reference loops. (@jelmer)

• Move various long-deprecated methods. (@jelmer)