v6.0.0-alpha.4

What's Changed

• plumbing: transport/ssh, Shell-quote path and args by @hiddeco in #2067
• git: submodule, canonical remote for relative URLs by @hiddeco in #2071
• storage: filesystem, Use repository object format for writing loose objects by @pjbgf in #2073
• git: submodule, error on remote without URLs by @hiddeco in #2076
• plumbing: objfile, Pass object format into Reader by @pjbgf in #2077
• git: submodule, Add relative URL regression tests by @hiddeco in #2072
• plumbing: format/idxfile, Validate offset64 indices by @hiddeco in #2083
• storage: filesystem, Search alternates in HashesWithPrefix by @andrew in #2087
• *: Reject malformed variable-length integers by @hiddeco in #2090
• Add worktreeFilesystem wrapper for worktree by @pjbgf in #2081
• tests: fix three recurring CI flakes by @hiddeco in #2093
• plumbing: format/packfile, Test patchDeltaWriter cap by @hiddeco in #2086
• plumbing: format/packfile, Tighten delta validation by @hiddeco in #2089
• git: worktree path hardening by @hiddeco in #2097
• build: Update module github.com/go-git/go-git-fixtures/v6 to v6.0.0-20260502205956-66bffbe5a6ff (main) by @go-git-renovate[bot] in #2102
• build: Update golang (main) by @go-git-renovate[bot] in #2099
• config: validate submodule names by @hiddeco in #2079
• build: Update go-git (main) by @go-git-renovate[bot] in #2103
• worktree: skip ignored directories during Reset walk by @Soph in #2075
• plumbing: format/pktline, validate reader/writer inputs by @pjbgf in #2104
• build: Update module github.com/go-git/go-git-fixtures/v6 to v6.0.0-alpha.1 (main) by @go-git-renovate[bot] in #2110
• plumbing: object, tree entry validation by @hiddeco in #2105
• git: Stop validating symlink target paths by @pjbgf in #2114
• git: Allow MkdirAll on worktree-root paths by @hiddeco in #2115
• git: add repository and remote archive support by @aymanbagabas in #2013
• Fix file handle leaks by calling Repository.Close() and adding transactional.Storage.Close() by @AriehSchneier in #1999
• plumbing: fuzz on-disk format decoders by @hiddeco in #2120
• plumbing: format decoder input bounds and contracts by @hiddeco in #2119
• plumbing: fuzz packp and capability decoders by @hiddeco in #2121
• storage: dotgit, fix hasIncomingObjects race by @hiddeco in #2131
• plumbing: format/packfile, use ReadAt in FSObject.Reader() for concurrency safety. by @cedric-appdirect in #1998
• plumbing: format/packfile, harden malformed pack handling by @pjbgf in #2113

New Contributors

• @andrew made their first contribution in #2087

Full Changelog: v6.0.0-alpha.3...v6.0.0-alpha.4