maint: Update module github.com/go-git/go-git/v6 to v6.0.0-alpha.5

renovate-bot commented

2026-07-29 17:23:50 +00:00

Owner

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-git/go-git/v6	`v6.0.0-alpha.4` → `v6.0.0-alpha.5`

Release Notes

go-git/go-git (github.com/go-git/go-git/v6)

`v6.0.0-alpha.5`

Compare Source

What's Changed

plumbing: format/packfile, allow injecting a custom ObjectSelector by @Soph in #2142
storage: pool .pack file descriptors via internal/packhandle by @hiddeco in #2132
build: Update module golang.org/x/crypto to v0.52.0 [SECURITY] (main) by @go-git-renovate[bot] in #2148
build: Update module golang.org/x/net to v0.55.0 [SECURITY] (main) by @go-git-renovate[bot] in #2151
plumbing, storage: add CloseIdleDescriptors soft-close primitive by @hiddeco in #2133
*: harden format parsers against unbounded loops by @hiddeco in #2162
storage: pack read optimisations and storage-wide LRU FD pool by @hiddeco in #2134
plumbing: format/packfile, fix delta-base parsing bugs by @hiddeco in #2163
git: worktree, hoist Config() calls out of per-file loops by @cedric-appdirect in #1990
storage: filesystem, pool FSObject reads via PackHandle by @hiddeco in #2154
plumbing: format/index, accept empty trailing checksum on decode by @pjbgf in #2181
build: Update golang (main) by @go-git-renovate[bot] in #2182
build: Update module golang.org/x/net to v0.56.0 (main) by @go-git-renovate[bot] in #2191
*: speed up multi-pack reads via Index fanout probes by @hiddeco in #2147
Fix URL insteadOf to use longest match when multiple values exist by @AriehSchneier in #2189
transport/http, backend, utils/ioutil: fix HTTP data races on the fetch and serve paths by @georg in #2128
plumbing: protocol/packp, handle shallow-only no-op push in UpdateRequests.Decode by @yuzhuo in #2172
git: signer, add context.Context to Sign by @pjbgf in #2202
plumbing: transport/http, Expose typed auth error for Azure DevOps /_signin redirects by @jfjrh2014 in #2201
plumbing: format, faster diff patch generation by @pjbgf in #2186
plumbing: transport, Protocol v2 for upload-pack by @blmayer in #2188
plumbing: pktline, use Scanner for decoding by @aymanbagabas in #2038
internal: server/git, Fix TestGitServer_Timeout flakiness on Windows CI by @aymanbagabas in #2129
plumbing: packp, validate push options to prevent invalid characters by @aymanbagabas in #2057
plumbing: packp/capability, Zero-value-safe types and capability cleanup (1/11) by @aymanbagabas in #2206
plumbing: object, skip path validation in tree diff walk by @pjbgf in #2222
plumbing: packp/transport, Slice-based AdvRefs and v1 handling (2/11) by @aymanbagabas in #2225
plumbing: transport, Add options and result struct to GetRemoteRefs (3/11) by @aymanbagabas in #2226
git: Expose AlternatesFS on PlainOpenOptions by @andrew in #2101
plumbing: packp, Protocol v2 wire types with caller-owned packfile streaming (4/11) by @aymanbagabas in #2227
plumbing/transport: receive_pack, add ReceivePackHooks with PreReceive/PostReceive by @andrew in #2236
plumbing: transport, Protocol v2 session handshake and Command (5/11) by @aymanbagabas in #2228
plumbing: transport, ls-refs over Protocol v2 for GetRemoteRefs (6/11) by @aymanbagabas in #2229
plumbing: transport, fetch over Protocol v2 with caller-owned packfile (7/11) by @aymanbagabas in #2230
plumbing: transport, Wire Protocol v2 across HTTP and share the client core (8/11) by @aymanbagabas in #2231
plumbing: transport, Refactor server-side Protocol v2 onto packp types (9/11) by @aymanbagabas in #2232
plumbing: transport, git archive over HTTP (10/11) by @aymanbagabas in #2233
plumbing: transport, Run the upload-pack suite across v0/v1/v2 (11/11) by @aymanbagabas in #2234
plumbing: optimize Tree.Decode with ReadSlice and io.ReadFull by @Bluebugs in #1736
plumbing: object, Isolate tests from host git config. by @cedric-appdirect in #2122
plumbing: default to wire protocol v2 and close client/server conformance gaps by @pjbgf in #2237
build: Update module golang.org/x/text to v0.39.0 (main) by @go-git-renovate[bot] in #2241
build: Update golang (main) by @go-git-renovate[bot] in #2246
plumbing: object, include submodules in patches by @upuddu in #2243
storage: dotgit, reject path traversal in reference names by @Sahana2524 in #2247
plumbing: transport/http, redact credentials in error messages by @Sahana2524 in #2252
git: worktree, checkout reuse a single os.Root per reset. by @cedric-appdirect in #2259
git: Worktree: Add stores index entires with backslashes on Windows by @joshblum in #2253
storage: dotgit, align reference-name safety with refname_is_safe by @pjbgf in #2257
git: fetch, refuse to clobber existing tags by @Sahana2524 in #2250
internal: v2, skip closeReader on a cancelled context by @georg in #2269
git: include shallow references in object walker by @erka in #1792
plumbing: protocol/packp, reject control bytes in daemon request by @Sahana2524 in #2263
plumbing: protocol/packp, compare zero object ids by value in Action by @Sahana2524 in #2264
plumbing: gitignore, Clarify pattern and matcher parameters by @ahmojo in #2248
storage: filesystem, Make ObjectStorage a pointer field by @AriehSchneier in #2118
plumbing: format/index, sort entries by Name and Stage by @wacky6 in #2158
Fix CodeQL warnings by @AriehSchneier in #2126
git: worktree, fix RemoveGlob on root-level files by @NoahStarkenburg in #2219
internal: revision, fix resolution for tags containing @ and / by @tmchow in #1957
git: submodule, skip .gitmodules entries missing from the index by @gecube in #2256
build: Update module github.com/go-git/go-billy/v6 to v6.0.0-alpha.2 (main) by @go-git-renovate[bot] in #2270
build: re-enable go-billy renovate updates on v5.x by @pjbgf in #2272
build: Update github-actions (main) by @go-git-renovate[bot] in #2273
build: Update github-actions to v7 (main) (major) by @go-git-renovate[bot] in #2274
plumbing: format/gitignore, fix trailing ** matching unrelated paths by @glitch-ux in #2279
build: Update github-actions (main) by @go-git-renovate[bot] in #2280
git: worktree, make the filesystem wrapper a symlink-safe boundary by @pjbgf in #2276

New Contributors

@jfjrh2014 made their first contribution in #2201
@upuddu made their first contribution in #2243
@Sahana2524 made their first contribution in #2247
@erka made their first contribution in #1792
@ahmojo made their first contribution in #2248
@wacky6 made their first contribution in #2158
@NoahStarkenburg made their first contribution in #2219
@gecube made their first contribution in #2256
@glitch-ux made their first contribution in #2279

Full Changelog: https://github.com/go-git/go-git/compare/v6.0.0-alpha.4...v6.0.0-alpha.5

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-git/go-git/v6](https://github.com/go-git/go-git) | `v6.0.0-alpha.4` → `v6.0.0-alpha.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv6/v6.0.0-alpha.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv6/v6.0.0-alpha.4/v6.0.0-alpha.5?slim=true) | --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v6)</summary> ### [`v6.0.0-alpha.5`](https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5) [Compare Source](https://github.com/go-git/go-git/compare/v6.0.0-alpha.4...v6.0.0-alpha.5) #### What's Changed - plumbing: format/packfile, allow injecting a custom ObjectSelector by [@Soph](https://github.com/Soph) in [#2142](https://github.com/go-git/go-git/pull/2142) - storage: pool .pack file descriptors via internal/packhandle by [@hiddeco](https://github.com/hiddeco) in [#2132](https://github.com/go-git/go-git/pull/2132) - build: Update module golang.org/x/crypto to v0.52.0 \[SECURITY] (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2148](https://github.com/go-git/go-git/pull/2148) - build: Update module golang.org/x/net to v0.55.0 \[SECURITY] (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2151](https://github.com/go-git/go-git/pull/2151) - plumbing, storage: add CloseIdleDescriptors soft-close primitive by [@hiddeco](https://github.com/hiddeco) in [#2133](https://github.com/go-git/go-git/pull/2133) - \*: harden format parsers against unbounded loops by [@hiddeco](https://github.com/hiddeco) in [#2162](https://github.com/go-git/go-git/pull/2162) - storage: pack read optimisations and storage-wide LRU FD pool by [@hiddeco](https://github.com/hiddeco) in [#2134](https://github.com/go-git/go-git/pull/2134) - plumbing: format/packfile, fix delta-base parsing bugs by [@hiddeco](https://github.com/hiddeco) in [#2163](https://github.com/go-git/go-git/pull/2163) - git: worktree, hoist Config() calls out of per-file loops by [@cedric-appdirect](https://github.com/cedric-appdirect) in [#1990](https://github.com/go-git/go-git/pull/1990) - storage: filesystem, pool FSObject reads via PackHandle by [@hiddeco](https://github.com/hiddeco) in [#2154](https://github.com/go-git/go-git/pull/2154) - plumbing: format/index, accept empty trailing checksum on decode by [@pjbgf](https://github.com/pjbgf) in [#2181](https://github.com/go-git/go-git/pull/2181) - build: Update golang (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2182](https://github.com/go-git/go-git/pull/2182) - build: Update module golang.org/x/net to v0.56.0 (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2191](https://github.com/go-git/go-git/pull/2191) - \*: speed up multi-pack reads via Index fanout probes by [@hiddeco](https://github.com/hiddeco) in [#2147](https://github.com/go-git/go-git/pull/2147) - Fix URL insteadOf to use longest match when multiple values exist by [@AriehSchneier](https://github.com/AriehSchneier) in [#2189](https://github.com/go-git/go-git/pull/2189) - transport/http, backend, utils/ioutil: fix HTTP data races on the fetch and serve paths by [@georg](https://github.com/georg) in [#2128](https://github.com/go-git/go-git/pull/2128) - plumbing: protocol/packp, handle shallow-only no-op push in UpdateRequests.Decode by [@yuzhuo](https://github.com/yuzhuo) in [#2172](https://github.com/go-git/go-git/pull/2172) - git: signer, add context.Context to Sign by [@pjbgf](https://github.com/pjbgf) in [#2202](https://github.com/go-git/go-git/pull/2202) - plumbing: transport/http, Expose typed auth error for Azure DevOps /\_signin redirects by [@jfjrh2014](https://github.com/jfjrh2014) in [#2201](https://github.com/go-git/go-git/pull/2201) - plumbing: format, faster diff patch generation by [@pjbgf](https://github.com/pjbgf) in [#2186](https://github.com/go-git/go-git/pull/2186) - plumbing: transport, Protocol v2 for upload-pack by [@blmayer](https://github.com/blmayer) in [#2188](https://github.com/go-git/go-git/pull/2188) - plumbing: pktline, use Scanner for decoding by [@aymanbagabas](https://github.com/aymanbagabas) in [#2038](https://github.com/go-git/go-git/pull/2038) - internal: server/git, Fix TestGitServer\_Timeout flakiness on Windows CI by [@aymanbagabas](https://github.com/aymanbagabas) in [#2129](https://github.com/go-git/go-git/pull/2129) - plumbing: packp, validate push options to prevent invalid characters by [@aymanbagabas](https://github.com/aymanbagabas) in [#2057](https://github.com/go-git/go-git/pull/2057) - plumbing: packp/capability, Zero-value-safe types and capability cleanup (1/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2206](https://github.com/go-git/go-git/pull/2206) - plumbing: object, skip path validation in tree diff walk by [@pjbgf](https://github.com/pjbgf) in [#2222](https://github.com/go-git/go-git/pull/2222) - plumbing: packp/transport, Slice-based AdvRefs and v1 handling (2/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2225](https://github.com/go-git/go-git/pull/2225) - plumbing: transport, Add options and result struct to GetRemoteRefs (3/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2226](https://github.com/go-git/go-git/pull/2226) - git: Expose AlternatesFS on PlainOpenOptions by [@andrew](https://github.com/andrew) in [#2101](https://github.com/go-git/go-git/pull/2101) - plumbing: packp, Protocol v2 wire types with caller-owned packfile streaming (4/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2227](https://github.com/go-git/go-git/pull/2227) - plumbing/transport: receive\_pack, add ReceivePackHooks with PreReceive/PostReceive by [@andrew](https://github.com/andrew) in [#2236](https://github.com/go-git/go-git/pull/2236) - plumbing: transport, Protocol v2 session handshake and Command (5/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2228](https://github.com/go-git/go-git/pull/2228) - plumbing: transport, ls-refs over Protocol v2 for GetRemoteRefs (6/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2229](https://github.com/go-git/go-git/pull/2229) - plumbing: transport, fetch over Protocol v2 with caller-owned packfile (7/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2230](https://github.com/go-git/go-git/pull/2230) - plumbing: transport, Wire Protocol v2 across HTTP and share the client core (8/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2231](https://github.com/go-git/go-git/pull/2231) - plumbing: transport, Refactor server-side Protocol v2 onto packp types (9/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2232](https://github.com/go-git/go-git/pull/2232) - plumbing: transport, git archive over HTTP (10/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2233](https://github.com/go-git/go-git/pull/2233) - plumbing: transport, Run the upload-pack suite across v0/v1/v2 (11/11) by [@aymanbagabas](https://github.com/aymanbagabas) in [#2234](https://github.com/go-git/go-git/pull/2234) - plumbing: optimize Tree.Decode with ReadSlice and io.ReadFull by [@Bluebugs](https://github.com/Bluebugs) in [#1736](https://github.com/go-git/go-git/pull/1736) - plumbing: object, Isolate tests from host git config. by [@cedric-appdirect](https://github.com/cedric-appdirect) in [#2122](https://github.com/go-git/go-git/pull/2122) - plumbing: default to wire protocol v2 and close client/server conformance gaps by [@pjbgf](https://github.com/pjbgf) in [#2237](https://github.com/go-git/go-git/pull/2237) - build: Update module golang.org/x/text to v0.39.0 (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2241](https://github.com/go-git/go-git/pull/2241) - build: Update golang (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2246](https://github.com/go-git/go-git/pull/2246) - plumbing: object, include submodules in patches by [@upuddu](https://github.com/upuddu) in [#2243](https://github.com/go-git/go-git/pull/2243) - storage: dotgit, reject path traversal in reference names by [@Sahana2524](https://github.com/Sahana2524) in [#2247](https://github.com/go-git/go-git/pull/2247) - plumbing: transport/http, redact credentials in error messages by [@Sahana2524](https://github.com/Sahana2524) in [#2252](https://github.com/go-git/go-git/pull/2252) - git: worktree, checkout reuse a single os.Root per reset. by [@cedric-appdirect](https://github.com/cedric-appdirect) in [#2259](https://github.com/go-git/go-git/pull/2259) - git: Worktree: Add stores index entires with backslashes on Windows by [@joshblum](https://github.com/joshblum) in [#2253](https://github.com/go-git/go-git/pull/2253) - storage: dotgit, align reference-name safety with refname\_is\_safe by [@pjbgf](https://github.com/pjbgf) in [#2257](https://github.com/go-git/go-git/pull/2257) - git: fetch, refuse to clobber existing tags by [@Sahana2524](https://github.com/Sahana2524) in [#2250](https://github.com/go-git/go-git/pull/2250) - internal: v2, skip closeReader on a cancelled context by [@georg](https://github.com/georg) in [#2269](https://github.com/go-git/go-git/pull/2269) - git: include shallow references in object walker by [@erka](https://github.com/erka) in [#1792](https://github.com/go-git/go-git/pull/1792) - plumbing: protocol/packp, reject control bytes in daemon request by [@Sahana2524](https://github.com/Sahana2524) in [#2263](https://github.com/go-git/go-git/pull/2263) - plumbing: protocol/packp, compare zero object ids by value in Action by [@Sahana2524](https://github.com/Sahana2524) in [#2264](https://github.com/go-git/go-git/pull/2264) - plumbing: gitignore, Clarify pattern and matcher parameters by [@ahmojo](https://github.com/ahmojo) in [#2248](https://github.com/go-git/go-git/pull/2248) - storage: filesystem, Make ObjectStorage a pointer field by [@AriehSchneier](https://github.com/AriehSchneier) in [#2118](https://github.com/go-git/go-git/pull/2118) - plumbing: format/index, sort entries by Name and Stage by [@wacky6](https://github.com/wacky6) in [#2158](https://github.com/go-git/go-git/pull/2158) - Fix CodeQL warnings by [@AriehSchneier](https://github.com/AriehSchneier) in [#2126](https://github.com/go-git/go-git/pull/2126) - git: worktree, fix RemoveGlob on root-level files by [@NoahStarkenburg](https://github.com/NoahStarkenburg) in [#2219](https://github.com/go-git/go-git/pull/2219) - internal: revision, fix resolution for tags containing @ and / by [@tmchow](https://github.com/tmchow) in [#1957](https://github.com/go-git/go-git/pull/1957) - git: submodule, skip .gitmodules entries missing from the index by [@gecube](https://github.com/gecube) in [#2256](https://github.com/go-git/go-git/pull/2256) - build: Update module github.com/go-git/go-billy/v6 to v6.0.0-alpha.2 (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2270](https://github.com/go-git/go-git/pull/2270) - build: re-enable go-billy renovate updates on `v5.x` by [@pjbgf](https://github.com/pjbgf) in [#2272](https://github.com/go-git/go-git/pull/2272) - build: Update github-actions (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2273](https://github.com/go-git/go-git/pull/2273) - build: Update github-actions to v7 (main) (major) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2274](https://github.com/go-git/go-git/pull/2274) - plumbing: format/gitignore, fix trailing \*\* matching unrelated paths by [@glitch-ux](https://github.com/glitch-ux) in [#2279](https://github.com/go-git/go-git/pull/2279) - build: Update github-actions (main) by [@go-git-renovate](https://github.com/go-git-renovate)\[bot] in [#2280](https://github.com/go-git/go-git/pull/2280) - git: worktree, make the filesystem wrapper a symlink-safe boundary by [@pjbgf](https://github.com/pjbgf) in [#2276](https://github.com/go-git/go-git/pull/2276) #### New Contributors - [@jfjrh2014](https://github.com/jfjrh2014) made their first contribution in [#2201](https://github.com/go-git/go-git/pull/2201) - [@upuddu](https://github.com/upuddu) made their first contribution in [#2243](https://github.com/go-git/go-git/pull/2243) - [@Sahana2524](https://github.com/Sahana2524) made their first contribution in [#2247](https://github.com/go-git/go-git/pull/2247) - [@erka](https://github.com/erka) made their first contribution in [#1792](https://github.com/go-git/go-git/pull/1792) - [@ahmojo](https://github.com/ahmojo) made their first contribution in [#2248](https://github.com/go-git/go-git/pull/2248) - [@wacky6](https://github.com/wacky6) made their first contribution in [#2158](https://github.com/go-git/go-git/pull/2158) - [@NoahStarkenburg](https://github.com/NoahStarkenburg) made their first contribution in [#2219](https://github.com/go-git/go-git/pull/2219) - [@gecube](https://github.com/gecube) made their first contribution in [#2256](https://github.com/go-git/go-git/pull/2256) - [@glitch-ux](https://github.com/glitch-ux) made their first contribution in [#2279](https://github.com/go-git/go-git/pull/2279) **Full Changelog**: <https://github.com/go-git/go-git/compare/v6.0.0-alpha.4...v6.0.0-alpha.5> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-29 17:23:50 +00:00

maint: Update module github.com/go-git/go-git/v6 to v6.0.0-alpha.5

ci/woodpecker/pr/pr_check Pipeline was successful

Details

ci/woodpecker/pr/pr_unit_test Pipeline was successful

Details

ci/woodpecker/pr/pr_integration_test Pipeline was successful

Details

aff61f12ef

renovate-bot commented

2026-07-29 17:23:50 +00:00

Author

Owner

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated

Details:

Package	Change
`github.com/go-git/go-billy/v6`	`v6.0.0-alpha.1` -> `v6.0.0-alpha.2`
`golang.org/x/net`	`v0.56.0` -> `v0.57.0`

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 2 additional dependencies were updated Details: | **Package** | **Change** | | :------------------------------ | :----------------------------------- | | `github.com/go-git/go-billy/v6` | `v6.0.0-alpha.1` -> `v6.0.0-alpha.2` | | `golang.org/x/net` | `v0.56.0` -> `v0.57.0` |