v0.8.0

What's Changed

• Stop credential tokens leaking into usage output by @Soph in #77
• Enforcing stricter input validation for SSH destinations by @Soph in #78
• Fix nil-pointer panic in checkpoint parent-load error path by @Soph in #80
• Consume positional source/target left-to-right across commands by @Soph in #81
• Include the port in the git-credential host field by @Soph in #82
• Carry Scope.Mappings into the fetch config by @Soph in #83
• gitproto: classify create-side CAS races (already exists) as ErrTargetRefMoved by @nodo in #86
• Keep a pack-observer Scanner error from aborting the upload by @Soph in #84
• Treat a pack-less v2 fetch response as an error, not success by @Soph in #85
• Release session resources on partial-setup and error paths by @Soph in #88
• Move internalbridge under internal/ so it is truly unimportable by @Soph in #87
• go.mod and test hygiene by @Soph in #93
• Don't mutate the caller's managed map in BuildPlans by @Soph in #89
• git-sync-bench: exit non-zero on failed runs, drop -1 sentinels by @Soph in #91
• Make the token-store file lock compile and work on Windows by @Soph in #92
• Batch ref-update commands to stay under receive-pack cap by @Soph in #94
• Remove the Entire DB credential-store integration by @Soph in #95
• Support git remote-helper schemes (entire://) as a transport by @Soph in #96
• refscope: add ExcludeRefs for exact ref-name exclusion by @nodo in #98
• Simplify: remove pass-through layers, dead code, and copy-pasted helpers by @Soph in #99
• adding runners config, used "entire runner setup" by @Soph in #97
• enable ref backend for git-sync by @Soph in #100
• Bump golang.org/x/net to v0.55.0 (CVE-2026-25680) by @Soph in #101
• Add SetIdentity for embedder User-Agent attribution; derive default version from build info by @toothbrush in #102
• Cut 0.8.0 release section in the changelog by @toothbrush in #103

New Contributors

• @toothbrush made their first contribution in #102

Full Changelog: v0.7.0...v0.8.0