Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 30, 2025

Bumps git2 from 0.18.3 to 0.20.2.

Changelog

Sourced from git2's changelog.

0.20.2 - 2025-05-05

0.20.1...0.20.2

Added

  • Added Status::WT_UNREADABLE. #1151

Fixed

  • Added missing codes for GIT_EDIRECTORY, GIT_EMERGECONFLICT, GIT_EUNCHANGED, GIT_ENOTSUPPORTED, and GIT_EREADONLY to Error::raw_code. #1153
  • Fixed missing initialization in Indexer::new. #1160

0.20.1 - 2025-03-17

0.20.0...0.20.1

Added

  • Added Repository::branch_upstream_merge() #1131
  • Added Index::conflict_get() #1134
  • Added Index::conflict_remove() #1133
  • Added opts::set_cache_object_limit() #1118
  • Added Repo::merge_file_from_index() and associated MergeFileOptions and MergeFileResult. #1062

Changed

  • The url dependency minimum raised to 2.5.4 #1128
  • Changed the tracing callback to abort the process if the callback panics instead of randomly detecting the panic in some other function. #1121
  • Credential helper config (loaded with CredentialHelper::config) now checks for helpers that start with something that looks like an absolute path, rather than checking for a / or \ anywhere in the helper string (which resolves an issue if the helper had arguments with / or \). #1137

Fixed

  • Fixed panic in Remote::url_bytes if the url is empty. #1120
  • Fixed incorrect lifetimes on Patch::delta, Patch::hunk, and Patch::line_in_hunk. The return values must not outlive the Patch. #1141
  • Bumped requirement to libgit2-sys 0.18.1, which fixes linking of advapi32 on Windows. #1143

... (truncated)

Commits
  • 1fb5f64 Merge pull request #1161 from ehuss/bump-version
  • 26bfd30 Update version of git2 to 0.20.2
  • eef4592 Merge pull request #1160 from ehuss/indexer-init
  • 7f42b7a Clarify Indexer::new path parameter
  • 1774e57 Call init in Indexer::new
  • 5bc3baa Merge pull request #1155 from reddevilmidzy/master
  • ba5e1b3 Make link an intra-doc link
  • 38681b1 fix: add a backtick
  • b82f801 Merge pull request #1153 from alyssais/raw_code
  • 00faf61 Add missing code checks to Error::raw_code()
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [git2](https://github.com/rust-lang/git2-rs) from 0.18.3 to 0.20.2.
- [Changelog](https://github.com/rust-lang/git2-rs/blob/master/CHANGELOG.md)
- [Commits](rust-lang/git2-rs@git2-0.18.3...git2-0.20.2)

---
updated-dependencies:
- dependency-name: git2
  dependency-version: 0.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 30, 2025
Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Greptile Overview

Summary

This dependency bump updates git2 from 0.18.3 to 0.20.2, bringing bug fixes and improvements without breaking API changes.

Key changes:

  • Updated git2 dependency from 0.18.3 to 0.20.2
  • Updated libgit2-sys from 0.16.2+1.7.2 to 0.18.2+1.9.1
  • Includes important fixes: Windows advapi32 linking issue, Indexer::new initialization bug, and missing error codes
  • All existing git2 API usage in the codebase remains compatible (Repository operations, RevWalk, TreeWalk, etc.)
  • The upgrade provides enhanced stability and security through the underlying libgit2 improvements

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk
  • Score reflects a straightforward dependency update with backward-compatible API and important bug fixes. All git2 APIs used in the codebase (Repository::open, RevWalk, TreeWalk, ObjectType checks) remain unchanged between versions.
  • No files require special attention

Important Files Changed

File Analysis

Filename        Score        Overview
Cargo.toml 5/5 Updated git2 dependency from 0.18.2 to 0.20.2 with same features
Cargo.lock 5/5 Updated checksums and versions for git2 (0.18.3→0.20.2) and libgit2-sys (0.16.2→0.18.2) dependencies

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant Dep as Dependabot
    participant Git2 as git2 Library
    participant LibGit as libgit2-sys
    participant Code as Yek Codebase
    
    Note over Dep: Detects outdated dependency
    Dep->>Dev: Creates PR #219
    Dev->>Git2: Upgrade from 0.18.3 to 0.20.2
    Git2->>LibGit: Updates underlying libgit2-sys
    LibGit->>LibGit: 0.16.2 → 0.18.2 (includes advapi32 fix)
    
    Note over Code: API compatibility check
    Code->>Git2: Repository::open()
    Code->>Git2: RevWalk operations
    Code->>Git2: TreeWalk with PreOrder mode
    Code->>Git2: ObjectType::Blob checks
    
    Note over Git2: All APIs remain compatible
    Git2-->>Code: Success (backward compatible)
    
    Note over Dev: Review and merge
    Dev->>Dep: Approve dependency update
Loading

1 file reviewed, no comments

Edit Code Review Agent Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants