v0.2.1

What's changed

🔒 Security

• --https no longer embeds the gh token in remote URLs. Git now fetches it on demand through gh auth git-credential, so the token is never written to a mirror's config or visible in the process list. Mirrors created by earlier versions have their remote URL rewritten on the next sync.
• Git runs with GIT_TERMINAL_PROMPT=0, so a failed authentication errors out instead of hanging on a prompt.

🐛 Bug fixes

• --prune deletes with shutil.rmtree instead of shelling out to rm -rf, so it works on Windows (including git's read-only object files). Mirrors that can't be deleted are now reported instead of being counted as pruned.

🧰 Maintenance

• Run the tests on macOS and Windows in CI, and mark the package as OS independent

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's changed

✨ New features

• --working-tree / --bare: clone repositories with their files checked out instead of as bare mirrors (default stays --bare)

🚀 Enhancements

• Switch to httpx2 and require gidgethub>=6, which moved its httpx extra to the httpx2 fork, so only one HTTP client is installed
• Clearer CLI help summary
• PyPI classifiers, keywords, and project URLs (fixes the Python versions badge)

🧰 Maintenance

• pytest suite with 98% coverage, run on Python 3.12, 3.13, 3.14, and free-threaded 3.14t, with Codecov upload
• Fix the PyPI environment URL in the publish workflow
• Bump GitHub Actions and pre-commit hooks; generate the README TOC with doctoc

📚 Documentation

• New README with an animated logo, badges, features, quick start, and option tables
• Fix the uvx example and document the --https token storage and --working-tree reset behavior

Full Changelog: v0.1.0...v0.2.0

v0.1.0

Initial release