Changes for version 0.040 - 2026-04-06

  • Prevent "mangling shebang" during build.
  • Security: Honor core.sshCommand if exists.
  • Security: Throttle push notifications if too many.
  • Security: Use $PATH properly (broke in v0.036).
  • Optimization: Cache git some ref lookups.
  • Utilize core.hooksPath or emulate it on older git.
  • Allow Read-Only Repo (without "acl.writers").
  • Add git-packer to wrap even without ForceCommand.
  • Improvements with git-verify
    • Try looking in more places for git-verify.
    • Works even if within directory with weird chars.
    • Auto-correct authorized_keys broken permissions.
    • Fix authorized_keys parser.
    • Use first repo match in ".git" scan.
    • Calculate a better REMOTE_USER hint for pubkey update recommendation.
    • Setup git-packer wrapper until SSH configured.
  • Improvements with git-deploy
    • Better handling of NON-deploy repos.
    • Avoid aborting if local changes.
    • Use real remote word; not just hardcode "origin".
    • Add git-deploy -i <SSH_IDENTITY_FILE> feature.
    • Fix pull grind when "new" file already exists.
    • Fix git-deploy auto-update %ENV pollution.
    • Auto-detect fatal pull attempts.

Documentation

Git Client Wrapper
Client for push notification deployment
Secure Git Server with more granular hooks capabilities than default git.
Verify server configuration settings.
Tracer wrapper around the real git-shell
Run this hook before performing the "git pull" for git-deploy clients.
Run after "git push" completes, i.e., within post-write.
Restrict read and write access to the IP Address whitelist specified.
Secure Git Server with more granular hooks capabilities than default git.

Modules

Secure Git Server with more granular hooks capabilities than default git.