Git - dispose untrusted repositories when trust state changes

[lszomoru]

Fixes https://github.com/microsoft/vscode-internalbacklog/issues/6659

[Copilot]

Pull request overview

This PR ensures Git repositories are disposed when workspace trust configuration changes, preventing repositories from remaining active after becoming untrusted.

Changes:

• Subscribes the Git model to workspace trusted-folder change events.
• Adds logic to detect repositories that are no longer trusted and dispose them.

[Copilot]

Trust is being evaluated against path.dirname(dotGitPath) where dotGitPath prefers repository.dotGit.commonPath. For worktrees, commonPath points at the main repo’s .git directory (see extensions/git/src/repository.ts:941-945), which can be outside the worktree folder. This can incorrectly dispose a trusted worktree (or keep an untrusted worktree) because you’re not checking the repository working tree location.

Instead, check trust for the repository root (e.g. workspace.isResourceTrusted(Uri.file(openRepository.repository.root))) so the trust decision matches the repository the user has open.

Suggested change

	const dotGitPath = openRepository.repository.dotGit.commonPath ?? openRepository.repository.dotGit.path;
	const isTrusted = await workspace.isResourceTrusted(Uri.file(path.dirname(dotGitPath)));
	if (!isTrusted) {
	openRepositoriesToDispose.push(openRepository);
	this.logger.trace(`[Model][onDidChangeWorkspaceTrustedFolders] Repository is no longer trusted: ${openRepository.repository.root}`);
	}
	}
	const isTrusted = await workspace.isResourceTrusted(Uri.file(openRepository.repository.root));
	if (!isTrusted) {
	openRepositoriesToDispose.push(openRepository);
	this.logger.trace(`[Model][onDidChangeWorkspaceTrustedFolders] Repository is no longer trusted: ${openRepository.repository.root}`);
	}
	}
	}