Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps gix from 0.75.0 to 0.77.0.

Release notes

Sourced from gix's releases.

gix v0.77.0

Documentation

  • using PrepareFetch::with_ref_name with non-branch refs causes panics

Bug Fixes

  • obtain correct worktree directories for submodule status when behind symlinks. Related to gitui-org/gitui#2820

Commit Statistics

  • 14 commits contributed to the release over the course of 9 calendar days.
  • 9 days passed between releases.
  • 2 commits were understood as conventional.
  • 1 unique issue was worked on: #2320

Commit Details

  • #2320
    • Create configuration file before possibly probing the filesystem. (b1d6c67)
  • Uncategorized
    • Merge pull request #2314 from GitoxideLabs/copilot/fix-shallow-cloning-issue (30d8d5c)
    • Refactor (3529428)
    • Merge pull request #2312 from GitoxideLabs/copilot/adapt-script-for-gix-test-suite (0b29bd3)
    • Obtain correct worktree directories for submodule status when behind symlinks. (2ffee22)
    • Fix shallow clone to respect remote HEAD instead of local defaults (f087953)
    • Merge pull request #2321 from GitoxideLabs/improvements (ac0af1d)
    • Merge pull request #2315 from decathorpe/main (7c59cf4)
    • More standard panic heading. (7d900a6)
    • Using PrepareFetch::with_ref_name with non-branch refs causes panics (e29e952)
    • Merge pull request #2307 from cruessler/add-feature-flag-to-binary (d602d7e)
    • Refactor (d532bbf)
    • Add feature flag blame-experimental to gix (826effb)
    • Merge pull request #2299 from GitoxideLabs/report (d6c5b9d)

gix v0.76.0

New Features

  • respect the :(optional) prefix when interpolating paths via ConfigSnapshot::trusted_path(). Optional, but non-existing paths are now returned as None.

Bug Fixes (BREAKING)

  • expose raw commit/tag actor headers for round-tripping.

... (truncated)

Commits
  • 115e208 Release gix-date v0.12.0, gix-actor v0.37.0, gix-features v0.45.1, gix-hash v...
  • f7c2248 Bump the main crate to the next minor level
  • 9b721c3 Add end of 2025 report
  • 30d8d5c Merge pull request #2314 from GitoxideLabs/copilot/fix-shallow-cloning-issue
  • 3529428 refactor
  • 0b29bd3 Merge pull request #2312 from GitoxideLabs/copilot/adapt-script-for-gix-test-...
  • 2ffee22 fix: obtain correct worktree directories for submodule status when behind sym...
  • f087953 Fix shallow clone to respect remote HEAD instead of local defaults
  • ab67301 refactor
  • 33ff24b fix: handle read_link errors instead of panicking
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [gix](https://github.com/GitoxideLabs/gitoxide) from 0.75.0 to 0.77.0.
- [Release notes](https://github.com/GitoxideLabs/gitoxide/releases)
- [Changelog](https://github.com/GitoxideLabs/gitoxide/blob/main/CHANGELOG.md)
- [Commits](GitoxideLabs/gitoxide@gix-v0.75.0...gix-v0.77.0)

---
updated-dependencies:
- dependency-name: gix
  dependency-version: 0.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jan 1, 2026
@cruessler
Copy link
Collaborator

@extrawurst There was only a small breaking change that required changes to 2 lines. I haven’t yet tried this branch on my machine. I might get to it over the weekend, though!

@extrawurst
Copy link
Collaborator

@cruessler
I will merge this into main as it also fixes the gix-date CVE. let me know if you find any reason to roll it back

@extrawurst extrawurst merged commit 68ca570 into master Jan 10, 2026
22 checks passed
@extrawurst extrawurst deleted the dependabot/cargo/gix-0.77.0 branch January 10, 2026 17:07
@extrawurst extrawurst added this to the v0.28.1 milestone Jan 10, 2026
@cruessler
Copy link
Collaborator

@extrawurst Thanks! I’ve been using this branch for more than a week now, both at work and on my personal machine. In my usual workflows, I did not encounter any issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants