From 7ccddc49e22088f192ea5ac152e9f416423a2f1e Mon Sep 17 00:00:00 2001 From: Eric Huss Date: Sat, 6 Dec 2025 07:04:27 -0800 Subject: [PATCH] Update libgit2 to 1.9.2 --- Cargo.lock | 2 +- Cargo.toml | 2 +- libgit2-sys/CHANGELOG.md | 11 +++++++++++ libgit2-sys/Cargo.toml | 2 +- libgit2-sys/build.rs | 2 +- libgit2-sys/libgit2 | 2 +- 6 files changed, 16 insertions(+), 5 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index d302b33c3b..f1114c374b 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -479,7 +479,7 @@ checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776" [[package]] name = "libgit2-sys" -version = "0.18.2+1.9.1" +version = "0.18.3+1.9.2" dependencies = [ "cc", "libc", diff --git a/Cargo.toml b/Cargo.toml index 30a496deaf..492a9e08e1 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -20,7 +20,7 @@ url = { version = "2.5.4", optional = true } bitflags = "2.1.0" libc = "0.2" log = "0.4.8" -libgit2-sys = { path = "libgit2-sys", version = "0.18.1" } +libgit2-sys = { path = "libgit2-sys", version = "0.18.3" } [target."cfg(all(unix, not(target_os = \"macos\")))".dependencies] openssl-sys = { version = "0.9.45", optional = true } diff --git a/libgit2-sys/CHANGELOG.md b/libgit2-sys/CHANGELOG.md index 06ce1a7253..261d259f53 100644 --- a/libgit2-sys/CHANGELOG.md +++ b/libgit2-sys/CHANGELOG.md @@ -1,5 +1,16 @@ # Changelog +## 0.18.3+1.9.2 - 2025-12-06 +[0.18.2...0.18.3](https://github.com/rust-lang/git2-rs/compare/libgit2-sys-0.18.2+1.9.1...libgit2-sys-0.18.3+1.9.2) + +### Changed +- Updated to libgit2 [1.9.2](https://github.com/libgit2/libgit2/releases/tag/v1.9.2) + [#1195](https://github.com/rust-lang/git2-rs/pull/1195) + + Note that this release fixes two security issues. However, the Rust bindings do not provide direct support for the affected APIs. In particular: + - The `libgit2-sys` crate does not support building the vendored C library with the `GIT_SSH_EXEC` setting. This will only be an issue if you are binding to a system-provided library built with this setting. + - The `git2` crate does not support custom SSH credentials. However, the `libgit2-sys` crate does export the `git_cred_ssh_custom_new` C-binding. Any projects using the C bindings directly are affected. + ## 0.18.2+1.9.1 - 2025-06-21 [0.18.1...0.18.2](https://github.com/rust-lang/git2-rs/compare/libgit2-sys-0.18.1+1.9.0...libgit2-sys-0.18.2+1.9.1) diff --git a/libgit2-sys/Cargo.toml b/libgit2-sys/Cargo.toml index b2df3ca828..675c2fa35c 100644 --- a/libgit2-sys/Cargo.toml +++ b/libgit2-sys/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "libgit2-sys" -version = "0.18.2+1.9.1" +version = "0.18.3+1.9.2" authors = ["Josh Triplett ", "Alex Crichton "] links = "git2" build = "build.rs" diff --git a/libgit2-sys/build.rs b/libgit2-sys/build.rs index 7b5a374e9b..356ad53ea5 100644 --- a/libgit2-sys/build.rs +++ b/libgit2-sys/build.rs @@ -7,7 +7,7 @@ use std::process::Command; /// Tries to use system libgit2 and emits necessary build script instructions. fn try_system_libgit2() -> Result { let mut cfg = pkg_config::Config::new(); - match cfg.range_version("1.9.0".."1.10.0").probe("libgit2") { + match cfg.range_version("1.9.2".."1.10.0").probe("libgit2") { Ok(lib) => { for include in &lib.include_paths { println!("cargo:root={}", include.display()); diff --git a/libgit2-sys/libgit2 b/libgit2-sys/libgit2 index 0060d9cf56..ca225744b9 160000 --- a/libgit2-sys/libgit2 +++ b/libgit2-sys/libgit2 @@ -1 +1 @@ -Subproject commit 0060d9cf5666f015b1067129bd874c6cc4c9c7ac +Subproject commit ca225744b992bf2bf24e9a2eb357ddef78179667