Skip to content

build(deps): bump github.com/go-git/go-git/v6 from 6.0.0-alpha.1 to 6.0.0-alpha.2#977

Merged
gtrrz-victor merged 3 commits intomainfrom
dependabot/go_modules/github.com/go-git/go-git/v6-6.0.0-alpha.2
Apr 18, 2026
Merged

build(deps): bump github.com/go-git/go-git/v6 from 6.0.0-alpha.1 to 6.0.0-alpha.2#977
gtrrz-victor merged 3 commits intomainfrom
dependabot/go_modules/github.com/go-git/go-git/v6-6.0.0-alpha.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026

Bumps github.com/go-git/go-git/v6 from 6.0.0-alpha.1 to 6.0.0-alpha.2.

Release notes

Sourced from github.com/go-git/go-git/v6's releases.

v6.0.0-alpha.2

🚀 Release Summary

⚠️ v6 Alpha Release

This is an alpha release of go-git v6.

We encourage users to test this version in real-world scenarios and help us validate the new transport layer and features.

👉 Please report any issues, bugs, or unexpected behavior via GitHub issues.

This release brings major improvements across transport, performance, and Git feature support, along with significant internal modernization.

🚀 Highlights

  • Major refactor of the plumbing/transport API with a new design, improving extensibility and aligning behaviour more closely with upstream Git.
  • Performance improvements in remote operations, including faster send-pack.
  • Significant improvements to HTTP transport robustness and protocol correctness.
  • File transport: added support for gitfile and improved repository detection logic.

🐛 Bug Fixes

  • repository: fix DeleteBranch failing when using full ref names (#1951)
  • worktree: fix Add silently failing for absolute paths (#1949)
  • transport/http: fix multi-round pack negotiation (#1992)
  • transport/http: harden redirect handling to match canonical Git (#1997)
  • transport/http: fix data race in dumb HTTP test server (#1960)
  • transport: avoid emitting duplicate NAK after empty ACKs (#1989)
  • updreq: support multiple shallow records in upload request decoding (#1952)
  • file transport: fix Windows file handle leak (#1976)
  • worktree tests: fix Windows file handle leaks (#1996)
  • transport tests: correct receive-pack usage (#1988)

✨ Enhancements

  • remote: faster send-pack implementation (#1947)
  • object: improved object walk painting (#1973)
  • repository: add gitfile support and improve loader detection (#1994)
  • config: introduce ConfigLoader plugins aligned with upstream Git (#1924)

🔧 Refactoring

  • plumbing/transport: replace transport API with new design (#1972)
  • plumbing/transport: follow-up API refactoring and cleanup (#1983)

📚 Documentation

  • docs: updates and introduction of AI Policy (#1913)

📋 Full Changelog

What's Changed

... (truncated)

Commits
  • 137874f Merge pull request #1997 from aymanbagabas/http-hardening
  • 38f2574 plumbing: transport/http, Add support for FollowRedirects to align with upstream
  • f4af53c plumbing: transport/http, Apply redirection rules to custom clients
  • 0020ab6 plumbing: http, harden redirect handling in http transport
  • 71c0311 Merge pull request #1924 from pjbgf/config-plugin
  • 9eef6d1 x: plugin/config, Consolidate Auto tests and fix Windows compatibility
  • 06b2bd9 x: plugin/config: Make Auto the default plugin
  • 9191eb9 x: plugin/config, Add Auto ConfigSource implementation
  • 835918a config: Deprecate LoadConfig and Paths in favour of ConfigLoader
  • 5779608 Merge pull request #1992 from stiak/fix-missing-haves-negotiation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/go-git/go-git/v6](https://github.com/go-git/go-git) from 6.0.0-alpha.1 to 6.0.0-alpha.2.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v6.0.0-alpha.1...v6.0.0-alpha.2)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v6
  dependency-version: 6.0.0-alpha.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 17, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 17, 2026 18:26
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 17, 2026
v6-alpha.2 changes two things that break the tree:

1. config.NewEmpty() now returns an unexported *static rather than
   plugin.ConfigSource, so passing it directly to plugin.Register's
   generic func() T no longer infers ConfigSource. Wrap it in a closure
   in every TestMain that registers it.

2. config.LoadConfig(scope) is deprecated in favor of the ConfigLoader
   plugin. Migrate GetGitAuthorFromRepo to repo.ConfigScoped, which
   returns local+global merged (local wins), matching git's own
   resolution and dropping the manual two-call fallback. main.go now
   blank-imports x/plugin so the default NewAuto loader is registered in
   production.

Tests that exercise the global-config fallback need to temporarily swap
the TestMain-installed NewEmpty plugin for NewAuto (which reads
\$HOME/.gitconfig). Add a useAutoConfigLoader(t) helper in both
packages' global_test.go that performs the swap and restores NewEmpty
on cleanup, and also sets GIT_CONFIG_NOSYSTEM=1 so the host's
/etc/gitconfig does not leak into tests.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Entire-Checkpoint: 1d2a4a2b6694
@gtrrz-victor gtrrz-victor enabled auto-merge April 18, 2026 14:19
@gtrrz-victor gtrrz-victor merged commit 616c197 into main Apr 18, 2026
9 checks passed
@gtrrz-victor gtrrz-victor deleted the dependabot/go_modules/github.com/go-git/go-git/v6-6.0.0-alpha.2 branch April 18, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Development

Successfully merging this pull request may close these issues.

2 participants