v2.13.3

This release fixes two bugs that caused git lfs prune to hang, updates some
dependencies to versions which lack a security issue (which did not affect Git
LFS), and adds support for ARM64 builds on macOS.

Bugs

• lfs: don't invoke diff drivers when pruning repositories #4407 (@bk2204)
• Parse stash log entries parsimonously in prune command #4449 (@chrisd8088)

Misc

• Darwin ARM64 support #4437 (@bk2204)
• vendor,go.{mod,sum}: update x/net and dependencies #4398 (@chrisd8088)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-amd64-v2.13.3.zip
20509abd5291586c53e1c19768e06e7b2cf7d200cdce7b73a8ff2cfd51c49c51

git-lfs-darwin-arm64-v2.13.3.zip
0e845245d08036fd03eb2c1de18e6a1b0355485d73ad1d925fa9d19acc71f883

git-lfs-freebsd-386-v2.13.3.tar.gz
1959126d7189b62a4d07bab2cc402feb4027c0644b8d4a73ee4f5529613be549

git-lfs-freebsd-amd64-v2.13.3.tar.gz
9deaf0ec4a0b761ba88c135487622b180dc715e579a99b2c45de34db64de8ffc

git-lfs-linux-386-v2.13.3.tar.gz
b10807b769c3cb1151979a7b5e4798fbbd9d2b29b2ff43e3b3ae97ebd2d3e315

git-lfs-linux-amd64-v2.13.3.tar.gz
03197488f7be54cfc7b693f0ed6c75ac155f5aaa835508c64d68ec8f308b04c1

git-lfs-linux-arm-v2.13.3.tar.gz
b317893dc789ee386999469cc7a9866d8d23d8b1084236e77a25e64536995b3d

git-lfs-linux-arm64-v2.13.3.tar.gz
42baf1ec23e9fba197b1a62d09aab1d5dab744da6923009d6f9e4dc6d79df978

git-lfs-linux-ppc64le-v2.13.3.tar.gz
bf6eafb1f9aedbdbfed6bed1b6007400d237a3ab82153908892de6ca7ad902f1

git-lfs-linux-s390x-v2.13.3.tar.gz
f2b261140e1d38324407e3c6e59d5facbe55ccc3baa83a0feb0031eb180e5651

git-lfs-v2.13.3.tar.gz
f8bd7a06e61e47417eb54c3a0db809ea864a9322629b5544b78661edab17b950

git-lfs-windows-386-v2.13.3.zip
ba10671d021f39269f0c8374c9ae140a5acbd73a30e3b812173a80b777a2e867

git-lfs-windows-amd64-v2.13.3.zip
7997d2a6e4103af331c73db10860426cb03c5188426d27619e823358493e13e4

git-lfs-windows-v2.13.3.exe
dbb53e845a1264dd898dc682d06f890a9d703c843a8a0f8be646efcdc7bc940b

sha256sums.asc
7cd300d35c12228a795037873aae30144cf722be268c1ae27db2050d60c0275c

v2.13.2

This release introduces a security fix for Windows systems, which has been
assigned CVE-2021-21237.

On Windows, if Git LFS operates on a malicious repository with a git.bat or
git.exe file in the current directory, that program is executed, permitting the
attacker to execute arbitrary code. This security problem does not affect Unix
systems. This is the same issue as CVE-2020-27955, but the fix for that issue
was incomplete and certain options can still cause the problem to occur.

This occurs because on Windows, Go includes (and prefers) the current directory
when the name of a command run does not contain a directory separator. This has
been solved by always using PATH to pre-resolve paths before handing them to Go.

We would like to extend a special thanks to the following open-source
contributors:

• @Ry0taK for reporting this to us responsibly

Bugs

• Use subprocess for invoking all commands (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-amd64-v2.13.2.zip
c2ba5d42dfae821e8e013a6be7527a1a8e773af0f140f0b4c0a9c19e367a56cb

git-lfs-freebsd-386-v2.13.2.tar.gz
20a7dba8c1691be5d5a130935e7a8bbf9de5667b5b0925d68fd728d923fd2c16

git-lfs-freebsd-amd64-v2.13.2.tar.gz
2b871fed8e75dbd1ec24ee42d0c45eb2102dfdef1b64ed5bf32cd6bcd574b712

git-lfs-linux-386-v2.13.2.tar.gz
16548c11c02dbe9ca1ff817fd0b453e5bc97f43267c40d5beaf83ce997d0938f

git-lfs-linux-amd64-v2.13.2.tar.gz
7913f267c84518860551384313ece6f2e72cb5a18cf9987189a087108346267d

git-lfs-linux-arm-v2.13.2.tar.gz
0970357d9c21e5024e5a8712f4aaf64facf69c2d9aff1f0d058ad3d4ba0d829c

git-lfs-linux-arm64-v2.13.2.tar.gz
e5b509fc18ed75974cd0ee3634e3f392d3ceed60023210c482cab4292e0560e7

git-lfs-linux-ppc64le-v2.13.2.tar.gz
92921cfa791da627f1b59a0685e7f726d608ff1076727b4132eb909e4c6a1517

git-lfs-linux-s390x-v2.13.2.tar.gz
04af15fe15611c695d27a9f04fb54cdeaeaa70f96ee16e7d375373d1a9c2594b

git-lfs-v2.13.2.tar.gz
782e6275df9ca370730945112e16a0b8c64b9819f0b61fae52ba1ebbc8dce2d5

git-lfs-windows-386-v2.13.2.zip
27d061f9fd6b14555c220758ae0b77d81ef20f64dde0179a515d55a75f5355a8

git-lfs-windows-amd64-v2.13.2.zip
0e13b411ca6c2b2cfb3d82b67ae747ca5d055734d0ab2030d0823fc37ad48902

git-lfs-windows-v2.13.2.exe
f9da82f94ad447b307002222e0b7faab046c162b33a0962cce7f2bdac1e8a443

sha256sums.asc
673d4c73d273155668b5bc818286ac426718dadfb86fc8bd2a7f615da9312801

v2.13.1

This release fixes a bug in our build tooling that prevents our release process
from working properly. This release is otherwise identical to 2.13.0.

Misc

• Makefile: don't fail the second time macOS builds are built #4341 (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-amd64-v2.13.1.zip
e6b356167e10d894a52f32691bf6fe65658066a4d81e5980add1cc28f64cb33c

git-lfs-freebsd-386-v2.13.1.tar.gz
137bef490f5c1691027d85086c79d93509d98038de50ca98766ce5ff56730d75

git-lfs-freebsd-amd64-v2.13.1.tar.gz
4ed42ce73b32aee52f109ed29dd952f9392dee6261cbf569fee504fdd5a1f3cb

git-lfs-linux-386-v2.13.1.tar.gz
ad1c45691736b2d960bcbc5612b8b84e4becff88165bc00235df21cdfa897bb7

git-lfs-linux-amd64-v2.13.1.tar.gz
9eb3fac34783f600a7bf48d7e444a3e2e65bf452f8f76527806da51bedc295a4

git-lfs-linux-arm-v2.13.1.tar.gz
9a72698dbff4ba56e72edd4495dc8487b475bd42c88e70b11a798ea536127231

git-lfs-linux-arm64-v2.13.1.tar.gz
0da5405aaf03aceab0e02bf1190adf0533e507325658d7a64a92836177c5050d

git-lfs-linux-ppc64le-v2.13.1.tar.gz
e5486b7976547c2a473c5d4e590097b31e6519b93c64499cadeec86f08b22929

git-lfs-linux-s390x-v2.13.1.tar.gz
e1b3975c02a55a1344cb308445857be92f93c354c4615c3e5297d0168d57893f

git-lfs-v2.13.1.tar.gz
5ba7d945d96ad49492e29edbfd1cce528b2a034fdddbf6e5424e754a4a012029

git-lfs-windows-386-v2.13.1.zip
5fe696dc31e14af1a202d04d0f643a1281101ceb9384ff77c487611a34e2ca87

git-lfs-windows-amd64-v2.13.1.zip
cfd2a1b65664f7a9dfafeee61d063653e626448582bd53f7c268d9a72650185d

git-lfs-windows-v2.13.1.exe
7a3d5924766926e15fa8bcddb11ee71d2bbc19beaa872cd9b09ac73aaa704ac7

sha256sums.asc
1ac556793a30b04d6705af44a3424aad2eb2dccc48c5c07e7770e8ed01eb5489

v2.12.1

This release introduces a security fix for Windows systems, which has been
assigned CVE-2020-27955.

On Windows, if Git LFS operates on a malicious repository with a git.bat or
git.exe file in the current directory, that program is executed, permitting the
attacker to execute arbitrary code. This security problem does not affect Unix
systems.

This occurs because on Windows, Go includes (and prefers) the current directory
when the name of a command run does not contain a directory separator. This has
been solved by always using PATH to pre-resolve paths before handing them to Go.

We would like to extend a special thanks to the following open-source
contributors:

• @dawidgolunski for reporting this to us responsibly

Bugs

• subprocess: avoid using relative program names (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-amd64-v2.12.1.zip
df9321896c7537969911227d900861c6ca840b2f1ac5fd5c7e5deeb2bf9c2cbd

git-lfs-freebsd-386-v2.12.1.tar.gz
777374374a7fef476145e80b06f4a6d36022b7d7544c6c248ab6c3ed95261991

git-lfs-freebsd-amd64-v2.12.1.tar.gz
b9149f4838ff65d96a47ce3adab119e6f8b91e6f75a320ab1ee3705f5711ba10

git-lfs-linux-386-v2.12.1.tar.gz
861f36921be0b206a0ad7b179ba6e595e8f32f9747541579bb3d7a54360798b5

git-lfs-linux-amd64-v2.12.1.tar.gz
f1ad07284dfdefaca96fbd047b804dd95731332c90ae79acc30a5ab575a42c5c

git-lfs-linux-arm-v2.12.1.tar.gz
6b47a3e7104534616fc2ac6fa0ec400b0ec7de2c29f3ca9208079d3931d81389

git-lfs-linux-arm64-v2.12.1.tar.gz
53d6851160f71fdd0c243fc3435e8eec92b116d7a9ea30fa923eb533cbbd6052

git-lfs-linux-ppc64le-v2.12.1.tar.gz
a738e35f102c1849d9e0565ac88aeb9d6797d7f9e9b8c5a082b9632a0ddf8169

git-lfs-linux-s390x-v2.12.1.tar.gz
3ca0262b1d3694445c9c7d668e225e191b25625ad1eadd6c6393ab19b65e33fd

git-lfs-v2.12.1.tar.gz
2b2e70f1233f7efe9a010771510391a07527ec7c0af721ecf8edabac5d60f62b

git-lfs-windows-386-v2.12.1.zip
246d6ad24ae6c89d88453dac50aa6ec991b0f09b21a72b56397c4ee3d795b2fc

git-lfs-windows-amd64-v2.12.1.zip
1243626c8b7d3607e1335c31cc00972e34904a568dcfb48e7c0f404877cceadc

git-lfs-windows-v2.12.1.exe
4a0118684f8e1445433a91a8ecd3176a201b5a90793f240fb9c61207fdb96e20

sha256sums.asc
24b9b046a8bb55a8e6daff2d7b8a465b87a8e3eca6453b616ef33a17b245fb0d

v2.12.0

This release introduces several new features, such as support for the SHA-256
repositories coming in a future version of Git, restored support for Go 1.11,
the ability to read the contents of .lfsconfig from the repository, signed and
notarized binaries on macOS, and pre-built 32-bit ARM binaries on Linux. In
addition, several bugs have been fixed and miscellaneous fixes included.

Note that macOS releases are now shipped as zip files, not tarballs, since it is
not possible to notarize tarballs. macOS releases are now also built on macOS,
so git lfs dedup should now function.

We would like to extend a special thanks to the following open-source
contributors:

• @saracen for adding support for ARM binaries
• @mversluys for improving locking support
• @cccfeng for updating our documentation to make it more readable
• @bluekeyes for improving performance and tracing
• @gertcuykens for adding missing parts of our documentation

Features

• config: optionally read .lfsconfig from the repository #4200 (@bk2204)
• Support SHA-256 repositories #4186 (@bk2204)
• allow Go 1.11 builds by using WaitStatus.ExitStatus() #4183 (@chrisd8088)
• add --worktree option to install and uninstall commands #4159 (@chrisd8088)
• Sign and notarize binaries on macOS #4143 (@bk2204)
• Makefile: add linux arm build and release targets #4126 (@saracen)
• Allow locking and unlocking non-existent files #3992 (@mversluys)

Bugs

• docs/api/locking: add an explicit
  #4208 (@cccfeng)
• Fix hang when the user lacks permissions #4207 (@bk2204)
• Don't mark unlocked files that aren't lockable as read-only #4171 (@bk2204)
• locking: make patterns with slashes work on Windows #4139 (@bk2204)
• git: consider full refspec when determining seen refs #4133 (@bk2204)

Misc

• Fix Windows CI #4199 (@bk2204)
• Fix testsuite when working with non-master default branch #4174 (@bk2204)
• git: improve performance of remote ref listing #4176 (@bluekeyes)
• subprocess: trace all command execution #4175 (@bluekeyes)
• Update git-lfs-migrate.1.ronn #3869 (@gertcuykens)
• t: use repo v1 with extensions #4177 (@bk2204)
• Makefile: ensure temp Go modules can be deleted #4157 (@chrisd8088)
• Improve test suite robustness via environment #4132 (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-amd64-v2.12.0.zip
1efa512f27113d560552d6e9008af422d4007e5cf20735e2f5109ad04c9add21

git-lfs-freebsd-386-v2.12.0.tar.gz
0d239f399d3af06771ef52b08517d8a90f563d7b6118dff2efd4be2956c74eb2

git-lfs-freebsd-amd64-v2.12.0.tar.gz
9014da6066b564d02e93cce1d70c67b448b79f1436c0630ed66dc16411f20b60

git-lfs-linux-386-v2.12.0.tar.gz
bbb792a32401300d6aed616f954ad15e17f15254c60b97704d56f6a3ff95d47e

git-lfs-linux-amd64-v2.12.0.tar.gz
f9befd0fa0b19517b8ed14ab07812f0d39d776d8c9ea0023e343e30ff300813f

git-lfs-linux-arm-v2.12.0.tar.gz
9f46c3fbb77c2e2719d7db9f12cd8cfa951edecd1a8c2714f644729fbe154453

git-lfs-linux-arm64-v2.12.0.tar.gz
df6aa720ad53c2549035589fd0a62246ce06b1c3c8e65c35d7ce1ee43f7bc29d

git-lfs-linux-ppc64le-v2.12.0.tar.gz
3e2ed6baaf2784d41934ab9245346cc15cb7d88278c2500a2411fed773eaaca1

git-lfs-linux-s390x-v2.12.0.tar.gz
dd0737369174e3f0c26d582061898b049dab49f19efc146aa1d457dec13419b5

git-lfs-v2.12.0.tar.gz
9971d91cd2b0dd34ccda41a3db97504bfdb4fbc23cc2ee4b6e3b9afea5643941

git-lfs-windows-386-v2.12.0.zip
09dbc739034ef8f551de8dc5ecdbfce3e77690b35ef734423e31797990960ecf

git-lfs-windows-amd64-v2.12.0.zip
6d9418bf28ec59d5875a6bc51e56241c6a54916b3beedc802e137d8d76ab1db5

git-lfs-windows-v2.12.0.exe
92ba19d77f67dd06fc971d57de7883888aa20fcd6f09e1118c83b99d4f02318b

sha256sums.asc
968df09a440f9c048749695019b4e051849322910fe029c6813cb0ffbe2788be

v2.11.0

This release introduces several new features, such as better support for unnamed
local paths and URLs as remotes, support for submodule.recurse, exponential
backoff on failure, and support for renegotiation. In addition, numerous bugs
have been fixed and miscellaneous issues have been addressed.

We would like to extend a special thanks to the following open-source
contributors:

• @bluekeyes for adding support for exponential backoff
• @pluehne for adding support for submodule.recurse
• @electric26 for fixing the default behavior of a prompt
• @nataliechen1 for fixing certain upload retry failures
• @shalashik for fixing a panic during cherry-pick
• @swisspol for updating our documentation to reflect supported .lfsconfig
  keys
• @dan2468 for updating the copyright year

Features

• Allow literal local paths as remotes #4119 (@bk2204)
• pre-push: find named remote for URL if possible #4103 (@bk2204)
• tq: add exponential backoff for retries #4097 (@bluekeyes)
• migrate import: set text to unspecified for excluded fields #4068 (@bk2204)
• Update list of distros for packagecloud.io #4080 (@bk2204)
• lfshttp: allow renegotiation #4066 (@bk2204)
• Support submodule.recurse = true #4063 (@pluehne)
• add man page for the post-commit hook command #4052 (@chrisd8088)
• Add an option to control warning about files larger than 4 GiB #4009 (@bk2204)

Bugs

• commands/command_migrate.go: fix bug #4116 (@electric26)
• git: avoid "bad object" messages when force-pushing #4102 (@bk2204)
• git: avoid trying to rewrite remote tags as remote branches #4096 (@bk2204)
• make Go tests run consistently using local binary #4084 (@chrisd8088)
• commands: don't honor lfs.fetch* for ls-files #4083 (@bk2204)
• commands: print help output with --help #4059 (@bk2204)
• fail dedup command with explanation when LFS extensions configured #4045 (@chrisd8088)
• fix upload retry 'file already closed' issue' #4042 (@nataliechen1)
• commands/command_filter_process: cherry-pick of several commits cause panic error #4017 (@shalashik)
• Check error when creating local storage directory #4016 (@bk2204)
• track: detect duplicate patterns with --filename #4000 (@bk2204)

Misc

• Removed lfs.extension.* from list of supported keys for .lfsconfig #4044 (@swisspol)
• Tidy modules #4035 (@bk2204)
• README: explain how to verify releases #4022 (@bk2204)
• docs: document git lfs migrate --yes #4023 (@bk2204)
• Stop using cgo on amd64 Linux #4026 (@bk2204)
• updated copyright year #3995 (@dan2468)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-386-v2.11.0.tar.gz
a787317307eda160eb2231231cfaccd709e548bf0177fb24f9a6356721915590

git-lfs-darwin-amd64-v2.11.0.tar.gz
d4ae4db762f037de6224b2524adfccb736105bdcbb59c788da381e69a320e151

git-lfs-freebsd-386-v2.11.0.tar.gz
de155afdad8cf6c317146b6d9a17aacda3144d6dea584590eccf6181976c4bbb

git-lfs-freebsd-amd64-v2.11.0.tar.gz
070024b478a86e4941114c3594b529b985c2fa9dde64ec671401c30b9b157acd

git-lfs-linux-386-v2.11.0.tar.gz
7a70b73386fd29e639cfdf6366b3261c7ff207171e50e19a39b5efc15827dd0a

git-lfs-linux-amd64-v2.11.0.tar.gz
46508eb932c2ec0003a940f179246708d4ddc2fec439dcacbf20ff9e98b957c9

git-lfs-linux-arm64-v2.11.0.tar.gz
ba6a2820d6afcdf94a83c9307bfbabcc2f8146b27404b450c673567798a81f67

git-lfs-linux-ppc64le-v2.11.0.tar.gz
76196d06a79eec11c202d9cbafbab98f52b9a7fda8538c2d94748461ba192209

git-lfs-linux-s390x-v2.11.0.tar.gz
ca73776cb1cdc855aaf743c09ae70caae97f67d8d5e4147f19dcc4f959f9fc4d

git-lfs-v2.11.0.tar.gz
8183c4cbef8cf9c2e86b0c0a9822451e2df272f89ceb357c498bfdf0ff1b36c7

git-lfs-windows-386-v2.11.0.zip
6de91f3ee5f82304bba99211609323a4ba6f6846e80e5f9e368f3c2d30564d66

git-lfs-windows-amd64-v2.11.0.zip
ca05b0b9bd39d99665045776a5d0d5c7bfa2605a6118c2f489bfd40c2c3e4f2c

git-lfs-windows-v2.11.0.exe
bd314f1857d429a144cd7110f135743efe310e90ac56a2f182cad8e33c299da1

sha256sums.asc
6cb1d6c0d2b462459d883b9427eff6443ccdcb1b8a6f342222855b15c51b624d

v2.10.0

This release introduces several new features, such as support for local paths in
remotes, Kerberos support, and official binaries for S390x and little-endian
64-bit PowerPC systems. In addition, numerous bugs have been fixed and
miscellaneous issues have been addressed.

We would like to extend a special thanks to the following open-source
contributors:

• @ganadist for fixing a bug in the output of git lfs env
• @exceed-alae for fixing a possible nil pointer dereference
• @slonopotamus for improvements to Windows support and code cleanups
• @nataliechen1 for fixing a data race
• @ssgelm for writing and updating the code to use a new cookie jar parser
• @austintraver for improving the output of git lfs status
• @nikola-sh for improving option parity with Git
• @alrs for fixing several error checks in the testsuite
• @pluehne for improving our support for uncommon references

Features

• Optimize pushes for multiple refs #3978 (@bk2204)
• Include ppc64le and s390x Linux builds in releases #3983 (@bk2204)
• Kerberos (SPNEGO) support for HTTP #3941 (@bk2204)
• Add support for local paths #3918 (@bk2204)
• Allow specifying HTTP version to use #3887 (@bk2204)

Bugs

• t-duplicate-oids: use correct awk indexing #3981 (@bk2204)
• Improved proxy support #3972 (@bk2204)
• install: don't print error if run outside repository #3969 (@bk2204)
• debian: bump version of golang-go #3959 (@bk2204)
• lfshttp: Set valid default value for lfs.concurrenttransfers #3949 (@ganadist)
• Add nil-check on defer block of DoTransfer() #3936 (@exceed-alae)
• Retry batch failures #3930 (@bk2204)
• rpm: use old setup code on CentOS 7 #3938 (@bk2204)
• Interpret relative hook paths as relative to working tree #3926 (@bk2204)
• Handle missing cygpath gracefully #3910 (@bk2204)
• Update index before showing status #3921 (@bk2204)
• Honor lfs.url when deciding on transfer adapters #3905 (@bk2204)
• Implement retry logic to fix LFS storage race conditions on Windows #3890 (@slonopotamus)
• Avoid hang when using git hash-object --stdin --path #3902 (@bk2204)
• synchronize access to netrcCredentialHelper.skip #3896 (@nataliechen1)

Misc

• Improve license files #3973 (@bk2204)
• Add CI link to CI badge in README #3960 (@slonopotamus)
• Clarify output shown by git lfs status #3953 (@austintraver)
• Revert "ci: force Windows Git version to 2.22.0" #3903 (@bk2204)
• Better document pointer format constraints #3944 (@bk2204)
• Don't abort with newer Git when in a bare repo #3940 (@bk2204)
• Fix more Linux package issues #3932 (@bk2204)
• docs: explain shell metacharacters better #3920 (@bk2204)
• Reset the text attribute on export #3913 (@bk2204)
• Support schannel ssl backend #3868 (@nikola-sh)
• Allow migrate export to handle non-pointer files gracefully #3911 (@bk2204)
• git/gitattr: fix dropped test errors #3904 (@alrs)
• Accept all local references with git lfs push #3876 (@pluehne)
• Drop pre-1.6 Go compatibility code #3897 (@slonopotamus)
• tools/kv: Fix dropped test error #3882 (@alrs)
• Use different parser for cookiejar files #3886 (@ssgelm)
• Stop replacing files in LFS storage when downloading them concurrently on Windows #3880 (@slonopotamus)
• Fix error strings to follow Go guidelines #3871 (@slonopotamus)
• Miscellaneous release fixes #3866 (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-386-v2.10.0.tar.gz
d3f1e0829e404f98813d0c85b50c7a6e435214c13c04b97b575f9804c3be2030

git-lfs-darwin-amd64-v2.10.0.tar.gz
5fab721a45cb03e6596310dcd53097d1bd1239c23c36d45d596d194110bf5565

git-lfs-freebsd-386-v2.10.0.tar.gz
bba52ee62af72c6569aa22f20847e10f040e07b85fc5a57681613502b0b8d5b7

git-lfs-freebsd-amd64-v2.10.0.tar.gz
f36a73598e605e5f78525ff0ae13a364af0ce798cde655c166b1091b4dc9476a

git-lfs-linux-386-v2.10.0.tar.gz
8cb943466ab91f3ce8cdc9cf160c32c4a368ea3c69fc6143cde881bb80b667cc

git-lfs-linux-amd64-v2.10.0.tar.gz
ec1513069f2679c4c95d9d7c54fdb4b9d7007cc568578a25e2b2ff30edd93cfd

git-lfs-linux-arm64-v2.10.0.tar.gz
2dee573bd2357136c7a7a406d5c82347c11aade1bf5b8343fc63b941607022a5

git-lfs-linux-ppc64le-v2.10.0.tar.gz
9b66563a53da2ff2155deb21b67a39699795314d3b5bff9d621aca4bbb39a63f

git-lfs-linux-s390x-v2.10.0.tar.gz
e297592f8927142509055cc3b25319b1bdfb0ac6c6f7935bf6109bfb9cf005a0

git-lfs-v2.10.0.tar.gz
07fd5c57a1039d5717dc192affbe3268ec2fd03accdca462cb504c0b4194cd23

git-lfs-windows-386-v2.10.0.zip
28c06a016cdf76c75880a5260a12c78767eb6a02a2d8e258ecf708d84c613570

git-lfs-windows-amd64-v2.10.0.zip
7b2d3fc3ae96a81eaccadf718faa0b7676aad39a121c8d7c2686b7349a7ee7aa

git-lfs-windows-v2.10.0.exe
eab94d193b0781047df753a22935b7b2406367e3d4944685abf1e47435bc1a84

sha256sums.asc
3f076872a996208d316cb06deec96f6b55b3cc2a280e671ba466ef8bb1af30d2

v2.9.2

This release fixes a few regressions, such as a possible nil pointer
dereference, a failure to retry batch requests, and a bug where repositories
could fail to be detected on Windows.

We would like to extend a special thanks to the following open-source
contributors:

• @exceed-alae for fixing a possible nil pointer dereference

Bugs

• Add nil-check on defer block of DoTransfer() #3936 (@exceed-alae)
• Retry batch failures #3930 (@bk2204)
• rpm: use old setup code on CentOS 7 #3938 (@bk2204)
• Handle missing cygpath gracefully #3910 (@bk2204)

Misc

• Don't abort with newer Git when in a bare repo #3940 (@bk2204)
• Fix more Linux package issues #3932 (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-386-v2.9.2.tar.gz
dd835e174306b67781adbe696f78fd12ab1b4c025d44733e94f8256994649c17

git-lfs-darwin-amd64-v2.9.2.tar.gz
c55ec633fae52741d733d5ed23837af2b74886260dca2fa0d7d1c715c6bbc4e8

git-lfs-freebsd-386-v2.9.2.tar.gz
d1ac223dfc3a5c247ab574d1acba2aab10ec2bb43b4a8b4cb411b5092cc8362e

git-lfs-freebsd-amd64-v2.9.2.tar.gz
8126f0f3cb621bc466fa86ee53ff02993ea28604f4cd4146c946e1b34d9df716

git-lfs-linux-386-v2.9.2.tar.gz
1861cafcb73a2df095fb3ef0f1d4a7f2962cabdf8a92fdbaf77299e5d930913d

git-lfs-linux-amd64-v2.9.2.tar.gz
04346234130e518d165bdc7e9964375bbeb3b98efabd042084530cc34288274c

git-lfs-linux-arm64-v2.9.2.tar.gz
5decc81c3cfca1f445b08cb9d9414c4afde3c593d57c117e9e7e142886d54573

git-lfs-v2.9.2.tar.gz
77358e12545415a6716b1e0228540f0e90619f1738dfe114cd3e5c30d43ffffd

git-lfs-windows-386-v2.9.2.zip
5e979cfcf859fbfac59ef2e78bb2e1d83c7f8d7d5e91df8ee85d47c1694ef916

git-lfs-windows-amd64-v2.9.2.zip
90847c9c9e4fb4ecd04fbeedc8f04f6519bbe0e4fd5f5b5674406f6d90409993

git-lfs-windows-v2.9.2.exe
73bc2b6d6f6ec57911414926f9f032976c345e8ce7a3df019e4e846f21156f95

sha256sums.asc
551378c09cdfb6843a629b9bd3dd524412a2735d5d2d5be9a60b57dc0fe6e2af

v2.9.1

This release fixes a few regressions, such as the ability to use HTTP/1.1 when
required, addresses a race condition, and switches the cookie jar parser to
something that's easier for distributions to package.

We would like to extend a special thanks to the following open-source
contributors:

• @nataliechen1 for fixing a data race
• @ssgelm for writing and updating the code to use a new cookie jar parser

Features

• Allow specifying HTTP version to use #3887 (@bk2204)

Bugs

• synchronize access to netrcCredentialHelper.skip #3896 (@nataliechen1)
• Fix several causes of CI problems #3878 (@bk2204)
• Miscellaneous release fixes #3866 (@bk2204)

Misc

• Build artifacts during CI for easier testing #3892 (@bk2204)
• Use different parser for cookiejar files #3886 (@ssgelm)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-386-v2.9.1.tar.gz
71c7774315ee25d96811a4ab49301cbce53b9a42cffe89c68bfcff3a1be55b93

git-lfs-darwin-amd64-v2.9.1.tar.gz
973b6acb2735016265008b74c2f677ed5c086d2abfef4e77925f00efa4751205

git-lfs-freebsd-386-v2.9.1.tar.gz
427513aa66557875f161f8fe48471691f9b6621af9238bc0459d27c151e6b501

git-lfs-freebsd-amd64-v2.9.1.tar.gz
2a343d5d24469366202d1a16a25afaebc2d93f71ce746375a125c6a0878b1009

git-lfs-linux-386-v2.9.1.tar.gz
87a44e41ae1da1ed2650f74d5e4129a166c2c13c8e58566848edd655ddb7bff9

git-lfs-linux-amd64-v2.9.1.tar.gz
2a8e60cf51ec45aa0f4332aa0521d60ec75c76e485d13ebaeea915b9d70ea466

git-lfs-linux-arm64-v2.9.1.tar.gz
ff2f8472a5ac0e808108bad0cc6be5ca1849eb970228b1aa3d627bcbc8228ad9

git-lfs-v2.9.1.tar.gz
f5a444f00e30b663ae32b34ebee82356ec2af62a8d6eafceaa4f18bfa9b6e600

git-lfs-windows-386-v2.9.1.zip
8f4283326a27576e005e63938e0928080ed5662272099e65dae16f8a4396b2a2

git-lfs-windows-amd64-v2.9.1.zip
ac3aff23a44722db7f267b7f2bfac8c30951cd821b6f5fe385ef93b31e04f957

git-lfs-windows-v2.9.1.exe
ec424624ae85ea4145d65cc3d2aae80cc4a880292713f78be2e08789775cd17d

sha256sums.asc
d4355945abed87b6331659ade5117605edfd7d3fc9d6166e43c195472a9f2bbc

v2.9.0

This release adds support for DragonFly BSD, adds a new git lfs dedup command
to save space if the file system supports it, adds support for file URLs,
improves the performance when walking the repository, contains improvements
to use HTTP/2 when available and cookies when required, and numerous other bug
fixes, features, and modifications.

We would like to extend a special thanks to the following open-source
contributors:

• @pluehne for adding support for fetching the history of specific refs
• @kupson for adding cookie support
• @liweitianux for adding Dragonfly BSD support
• @kazuki-ma for implementing de-duplication support
• @dvdveer for adding range support to ls-files
• @dyrone, @pmeerw, @yamiacat, and @kittenking for cleaning up some documentation issues
• @slonopotamus for improving concurrent downloads
• @nataliechen1 for fixing remote names with dots
• @jw3 for removing excessive logging
• @SeamusConnor for significantly improving performance when walking the repository

Features

• Support fetching entire history of specific refs #3849 (@pluehne)
• Add support for CentOS 8 #3854 (@bk2204)
• Let git-lfs HTTPS transport send cookies #3825 (@kupson)
• Support DragonFly BSD #3837 (@liweitianux)
• HTTP/2 protocol support #3793 (@PastelMobileSuit)
• Add clonefile on Windows over ReFS support. #3790 (@kazuki-ma)
• Add new command git lfs dedup for file system level de-duplication. #3753 (@kazuki-ma)
• Support GIT_ALTERNATE_OBJECT_DIRECTORIES #3765 (@bk2204)
• ls-files: add support for reference range #3764 (@dvdveer)
• Add several additional distros for packagecloud.io #3751 (@bk2204)
• Provide an option to track to handle paths literally #3756 (@bk2204)
• Optimize traversal of Git objects with URL remotes #3755 (@bk2204)
• Support for file URLs #3748 (@bk2204)
• Add clone file on MacOS X (darwin). #3745 (@kazuki-ma)

Bugs

• Fix JSON comma problems in docs #3851 (@dyrone)
• Remove redundant comma in batch.md #3841 (@dyrone)
• More robust handling of parallel attempts to download the same file #3826 (@slonopotamus)
• Update wildmatch to v1.0.4 #3820 (@bk2204)
• Update to gitobj v1.4.1 #3815 (@bk2204)
• Fix build error when cross-compiling #3817 (@bk2204)
• Do not fail when multiple processes download the same lfs file #3813 (@slonopotamus)
• Fix Remote Name Parsing Bug #3812 (@nataliechen1)
• status: gracefully handle files replaced by directories #3768 (@bk2204)
• Avoid deadlock when transfer queue fails #3800 (@bk2204)
• Avoid a hang when Git is slow to provide us data #3806 (@bk2204)
• tasklog/log.go: print "done" messages with a trailing period #3789 (@ttaylorr)
• track: make --filename work with spaces #3785 (@bk2204)
• Fix couple of 'the the' typos #3786 (@pmeerw)
• Use an absolute path for smudging #3780 (@bk2204)
• Fix URL parsing with Go 1.12.8 #3771 (@bk2204)
• Fix remote autoselection when not on a branch #3759 (@bk2204)
• Replace deprecated SEEK_SET, SEEK_CUR usage. #3739 (@kazuki-ma)
• Do not log skipped checkouts to file #3736 (@jw3)
• Fix typos across git-lfs repository #3728 (@kittenking)
• Accept legacy Git SSH URLs #3713 (@bk2204)

Misc

• ls-files --all man patch #3859 (@yamiacat)
• Reworked to use git ls-files in some circumstances instead of FastWalkGitRepo #3823 (@SeamusConnor)
• Clean up go.mod for Go 1.13 #3807 (@bk2204)
• Use FICLONE instead of BTRFS_IOC_CLONE. #3796 (@kazuki-ma)
• Remove unused pty code #3737 (@bk2204)

Packages

Up to date packages are available on PackageCloud and Homebrew.

RPM RHEL 6/CentOS 6
RPM RHEL 7/CentOS 7
RPM RHEL 8/CentOS 8
Debian 8
Debian 9
Debian 10

SHA-256 hashes:

git-lfs-darwin-386-v2.9.0.tar.gz
ea419d14428cc84121b714c9c54eaa51b66b65d078c8599a12d09da7a165c792

git-lfs-darwin-amd64-v2.9.0.tar.gz
aa581bc8de80d3f9c7ebc1b08c472437df0c0ad118a4cdc84a5be29dbf49e6e4

git-lfs-freebsd-386-v2.9.0.tar.gz
2d7b28888db0ceb7549d8b9cf57b54e7e01c74d3d4883a07f2de406be816aa93

git-lfs-freebsd-amd64-v2.9.0.tar.gz
314b83ee20143853b6b87e23fdc81c0e685d9b9dde9a33deaf562762536f2eb5

git-lfs-linux-386-v2.9.0.tar.gz
4e792c03c86c9819d1aaa681a9435e336697b6064fc1947a4afe327e746a0dfe

git-lfs-linux-amd64-v2.9.0.tar.gz
afe269af8c60f2f36f9c9203dd0af279f0b8f74e1a36493330b82d99adc05ddc

git-lfs-linux-arm64-v2.9.0.tar.gz
55bdf6d1b39782d0053f9a3e7949a1d66b383f7d374bddb4bcabc3d9067659a9

git-lfs-v2.9.0.tar.gz
f1963ad88747577ffeeb854649aeacaa741c59be74683da4d46b129a72d111b7

git-lfs-windows-386-v2.9.0.zip
b80b7b000c06727c51b8c69acb6f3190c507f7260ed7f3a86b5ae62879fdf1fe

git-lfs-windows-amd64-v2.9.0.zip
b6748daf645335b9316ea6356ee4c48262d1da196424d51d17c4dbbf9ef46e75

git-lfs-windows-v2.9.0.exe
f4842e31113f8d9bfc1ea811757f10a5470943501657c3aeff1b5d8340e9a002

sha256sums.asc
4dd5a0dbff24785c678d6d61e574c6e496d4ed7cf0b344866bddc0ad52c94e06