Merging debian version 1:2.45.1-1.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 1868 insertions, 13 deletions

diff --git a/debian/changelog.upstream b/debian/changelog.upstream
index 69e5ac8..2342f06 100644
--- a/debian/changelog.upstream
+++ b/debian/changelog.upstream
@@ -1,3 +1,1627 @@
+Version v2.45.1; changes since v2.45.0:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff King (6):
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (26):
+      repository: avoid leaking `fsmonitor` data
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+      Git 2.40.2
+      Git 2.41.1
+      Git 2.42.2
+      Git 2.43.4
+      Git 2.44.1
+      Git 2.45.1
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
+Version v2.45.0; changes since v2.45.0-rc1:
+-------------------------------------------
+
+Alexander Shopov (1):
+      l10n: bg.po: Updated Bulgarian translation (5652t)
+
+Arkadii Yakovets (1):
+      l10n: uk: v2.45 update
+
+Bagas Sanjaya (1):
+      l10n: po-id for 2.45
+
+Emir SARI (1):
+      l10n: tr: Update Turkish translations
+
+Jean-Noël Avila (1):
+      l10n: fr: v2.45.0
+
+Jiang Xin (1):
+      l10n: TEAMS: retire l10n teams no update in 1 year
+
+Junio C Hamano (1):
+      Git 2.45
+
+Peter Krefting (1):
+      l10n: sv.po: Update Swedish translation
+
+Ralf Thielow (1):
+      l10n: Update German translation
+
+René Scharfe (1):
+      don't report vsnprintf(3) error as bug
+
+Rubén Justo (4):
+      apply: plug a leak in apply_data
+      add-interactive: plug a leak in get_untracked_files
+      add-patch: plug a leak handling the '/' command
+      add: plug a leak on interactive_add
+
+Taylor Blau (1):
+      Documentation/RelNotes/2.45.0.txt: fix typo
+
+Teng Long (1):
+      l10n: zh_CN: for git 2.45 rounds
+
+Vũ Tiến Hưng (2):
+      l10n: Update Vietnamese team contact
+      l10n: vi: Updated translation for 2.45
+
+Yi-Jyun Pan (1):
+      l10n: zh-TW: Git 2.45
+
+
+Version v2.45.0-rc1; changes since v2.45.0-rc0:
+-----------------------------------------------
+
+Junio C Hamano (2):
+      A bit more topics before -rc1
+      Git 2.45-rc1
+
+Linus Arver (5):
+      format_trailer_info(): use trailer_item objects
+      format_trailer_info(): drop redundant unfold_value()
+      format_trailer_info(): append newline for non-trailer lines
+      trailer: begin formatting unification
+      trailer: finish formatting unification
+
+Marcel Röthke (1):
+      rerere: fix crashes due to unmatched opening conflict markers
+
+Orgad Shaneh (1):
+      docs: remove duplicate entry and fix typo in 2.45 changelog
+
+Patrick Steinhardt (15):
+      reftable/block: rename `block_reader_start()`
+      reftable/block: merge `block_iter_seek()` and `block_reader_seek()`
+      reftable/block: better grouping of functions
+      reftable/block: introduce `block_reader_release()`
+      reftable/block: move ownership of block reader into `struct table_iter`
+      reftable/reader: iterate to next block in place
+      reftable/block: reuse uncompressed blocks
+      reftable/block: open-code call to `uncompress2()`
+      reftable/block: reuse `zstream` state on inflation
+      reftable/block: avoid copying block iterators on seek
+      pack-bitmap: gracefully handle missing BTMP chunks
+      run-command: introduce function to prepare auto-maintenance process
+      builtin/receive-pack: convert to use git-maintenance(1)
+      docs: improve changelog entry for `git pack-refs --auto`
+      docs: address typos in Git v2.45 changelog
+
+Peter Krefting (1):
+      bisect: report the found commit with "show"
+
+René Scharfe (3):
+      git-compat-util: fix NO_OPENSSL on current macOS
+      imap-send: increase command size limit
+      apply: avoid using fixed-size buffer in write_out_one_reject()
+
+Rubén Justo (1):
+      launch_editor: waiting message on error
+
+Thalia Archibald (8):
+      fast-import: tighten path unquoting
+      fast-import: directly use strbufs for paths
+      fast-import: allow unquoted empty path for root
+      fast-import: remove dead strbuf
+      fast-import: improve documentation for path quoting
+      fast-import: document C-style escapes for paths
+      fast-import: forbid escaped NUL in paths
+      fast-import: make comments more precise
+
+Xing Xin (1):
+      Documentation: fix typos describing date format
+
+Yehezkel Bernat (1):
+      Documentation: fix linkgit reference
+
+Đoàn Trần Công Danh (1):
+      t9604: Fix test for musl libc and new Debian
+
+
+Version v2.45.0-rc0; changes since v2.44.1:
+-------------------------------------------
+
+Ahelenia Ziemiańska (1):
+      grep: improve errors for unmatched ( and )
+
+Alexander Shopov (4):
+      transport-helper.c: trivial fix of error message
+      builtin/remote.c: trivial fix of error message
+      builtin/clone.c: trivial fix of message
+      revision.c: trivial fix to message
+
+Aryan Gupta (1):
+      tests: modernize the test script t0010-racy-git.sh
+
+Beat Bolli (25):
+      completion: use awk for filtering the config entries
+      date: make "iso-strict" conforming for the UTC timezone
+      t0006: add more tests with a negative TZ offset
+      doc: avoid redundant use of cat
+      contrib/subtree/t: avoid redundant use of cat
+      t/lib-cvs.sh: avoid redundant use of cat
+      t/annotate-tests.sh: avoid redundant use of cat
+      t/perf: avoid redundant use of cat
+      t/t0*: avoid redundant uses of cat
+      t/t1*: avoid redundant uses of cat
+      t/t3*: avoid redundant uses of cat
+      t/t4*: avoid redundant uses of cat
+      t/t5*: avoid redundant uses of cat
+      t/t6*: avoid redundant uses of cat
+      t/t7*: avoid redundant use of cat
+      t/t8*: avoid redundant use of cat
+      t/t9*: avoid redundant uses of cat
+      t/t1*: merge a "grep | sed" pipeline
+      t/t3*: merge a "grep | awk" pipeline
+      t/t4*: merge a "grep | sed" pipeline
+      t/t5*: merge a "grep | sed" pipeline
+      t/t8*: merge "grep | sed" pipelines
+      t/t9*: merge "grep | sed" pipelines
+      contrib/coverage-diff: avoid redundant pipelines
+      git-quiltimport: avoid an unnecessary subshell
+
+Bo Anderson (5):
+      t/lib-credential: clean additional credential
+      osxkeychain: replace deprecated SecKeychain API
+      osxkeychain: erase all matching credentials
+      osxkeychain: erase matching passwords only
+      osxkeychain: store new attributes
+
+Brian C Tracy (1):
+      fuzz: add fuzzer for config parsing
+
+Brian Lyles (13):
+      docs: clarify file options in git-config `--edit`
+      docs: fix typo in git-config `--default`
+      docs: correct trailer `key_value_separator` description
+      docs: adjust trailer `separator` and `key_value_separator` language
+      pretty: update tests to use `test_config`
+      pretty: find pretty formats case-insensitively
+      docs: address inaccurate `--empty` default with `--exec`
+      docs: clean up `--empty` formatting in git-rebase(1) and git-am(1)
+      rebase: update `--empty=ask` to `--empty=stop`
+      sequencer: handle unborn branch with `--allow-empty`
+      sequencer: do not require `allow_empty` for redundant commit options
+      cherry-pick: enforce `--keep-redundant-commits` incompatibility
+      cherry-pick: add `--empty` for more robust redundant commit handling
+
+Chandra Pratap (2):
+      apply: ignore working tree filemode when !core.filemode
+      t9146: replace test -d/-e/-f with appropriate test_path_is_* function
+
+Christian Couder (5):
+      revision: clarify a 'return NULL' in get_reference()
+      oidset: refactor oidset_insert_from_set()
+      t6022: fix 'test' style and 'even though' typo
+      rev-list: allow missing tips with --missing=[print|allow*]
+      revision: fix --missing=[print|allow*] for annotated tags
+
+Derrick Stolee (1):
+      fetch: return when parsing submodule.recurse
+
+Dirk Gouders (6):
+      Documentation/user-manual.txt: example for generating object hashes
+      MyFirstObjectWalk: use additional arg in config_fn_t
+      MyFirstObjectWalk: fix misspelled "builtins/"
+      MyFirstObjectWalk: fix filtered object walk
+      MyFirstObjectWalk: fix description for counting omitted objects
+      MyFirstObjectWalk: add stderr to pipe processing
+
+Dragan Simic (8):
+      documentation: send-email: use camel case consistently
+      config: minor addition of whitespace
+      config: really keep value-internal whitespace verbatim
+      t1300: add more tests for whitespace and inline comments
+      config.txt: describe handling of whitespace further
+      grep docs: describe --recurse-submodules further and improve formatting a bit
+      grep docs: describe --no-index further and improve formatting a bit
+      config: fix some small capitalization issues, as spotted
+
+Eric Sunshine (2):
+      docs: sort configuration variable groupings alphabetically
+      test-lib: fix non-functioning GIT_TEST_MAINT_SCHEDULER fallback
+
+Eric W. Biederman (23):
+      object-file-convert: stubs for converting from one object format to another
+      oid-array: teach oid-array to handle multiple kinds of oids
+      object-names: support input of oids in any supported hash
+      repository: add a compatibility hash algorithm
+      loose: compatibilty short name support
+      object-file: update the loose object map when writing loose objects
+      object-file: add a compat_oid_in parameter to write_object_file_flags
+      commit: convert mergetag before computing the signature of a commit
+      commit: export add_header_signature to support handling signatures on tags
+      tag: sign both hashes
+      object: factor out parse_mode out of fast-import and tree-walk into in object.h
+      object-file-convert: don't leak when converting tag objects
+      object-file-convert: convert commits that embed signed tags
+      object-file: update object_info_extended to reencode objects
+      rev-parse: add an --output-object-format parameter
+      builtin/cat-file: let the oid determine the output algorithm
+      tree-walk: init_tree_desc take an oid to get the hash algorithm
+      object-file: handle compat objects in check_object_signature
+      builtin/ls-tree: let the oid determine the output algorithm
+      test-lib: compute the compatibility hash so tests may use it
+      t1006: rename sha1 to oid
+      t1006: test oid compatibility with cat-file
+      t1016-compatObjectFormat: add tests to verify the conversion between objects
+
+Eugenio Gigante (1):
+      add: use unsigned type for collection of bits
+
+Florian Schmidt (1):
+      wt-status: don't find scissors line beyond buf len
+
+Ghanshyam Thakkar (5):
+      add-patch: classify '@' as a synonym for 'HEAD'
+      add -p tests: remove PERL prerequisites
+      setup: remove unnecessary variable
+      builtin/commit: error out when passing untracked path with -i
+      builtin/add: error out when passing untracked path with -u
+
+Haritha D (1):
+      build: support z/OS (OS/390).
+
+Harmen Stoppels (1):
+      rebase: make warning less passive aggressive
+
+Jakub Wilk (1):
+      git-remote.txt: fix typo
+
+Jean-Noël Avila (17):
+      doc: git-rev-parse: enforce command-line description syntax
+      doc: close unclosed angle-bracket of a placeholder in git-clone doc
+      doc: end sentences with full-stop
+      doc: clarify the format of placeholders
+      doc: git-init: format verbatim parts
+      doc: git-init: format placeholders
+      doc: git-init: rework definition lists
+      doc: git-init: rework config item init.templateDir
+      doc: git-clone: format verbatim words
+      doc: git-clone: format placeholders
+      doc: format alternatives in synopsis
+      doc: fix some placeholders formating
+      doc: rework CodingGuidelines with new formatting rules
+      doc: allow literal and emphasis format in doc vs help tests
+      doc: git-init: apply new documentation formatting guidelines
+      doc: git-clone: apply new documentation formatting guidelines
+      doc: git-clone: do not autoreference the manpage in itself
+
+Jeff Hostetler (17):
+      name-hash: add index_dir_find()
+      t7527: add case-insensitve test for FSMonitor
+      fsmonitor: refactor refresh callback on directory events
+      fsmonitor: clarify handling of directory events in callback helper
+      fsmonitor: refactor refresh callback for non-directory events
+      dir: create untracked_cache_invalidate_trimmed_path()
+      fsmonitor: refactor untracked-cache invalidation
+      fsmonitor: move untracked-cache invalidation into helper functions
+      fsmonitor: return invalidated cache-entry count on directory event
+      fsmonitor: remove custom loop from non-directory path handler
+      fsmonitor: return invalidated cache-entry count on non-directory event
+      fsmonitor: trace the new invalidated cache-entry count
+      fsmonitor: refactor bit invalidation in refresh callback
+      fsmonitor: support case-insensitive events
+      t0211: demonstrate missing 'def_param' events for certain commands
+      trace2: avoid emitting 'def_param' set more than once
+      trace2: emit 'def_param' set with 'cmd_name' event
+
+Jeff King (51):
+      t0303: check that helper_test_clean removes all credentials
+      userdiff: skip textconv caching when not in a repository
+      Revert "refs: allow @{n} to work with n-sized reflog"
+      get_oid_basic(): special-case ref@{n} for oldest reflog entry
+      read_ref_at(): special-case ref@{0} for an empty reflog
+      upload-pack: drop separate v2 "haves" array
+      upload-pack: switch deepen-not list to an oid_array
+      upload-pack: use oidset for deepen_not list
+      upload-pack: use a strmap for want-ref lines
+      upload-pack: accept only a single packfile-uri line
+      upload-pack: always turn off save_commit_buffer
+      upload-pack: use PARSE_OBJECT_SKIP_HASH_CHECK in more places
+      upload-pack: free tree buffers after parsing
+      upload-pack: use repository struct to get config
+      upload-pack: centralize setup of sideband-all config
+      upload-pack: use existing config mechanism for advertisement
+      upload-pack: only accept packfile-uris if we advertised it
+      doc/gitremote-helpers: fix missing single-quote
+      config: forbid newline as core.commentChar
+      strbuf: simplify comment-handling in add_lines() helper
+      strbuf: avoid static variables in strbuf_add_commented_lines()
+      commit: refactor base-case of adjust_comment_line_char()
+      strbuf: avoid shadowing global comment_line_char name
+      environment: store comment_line_char as a string
+      strbuf: accept a comment string for strbuf_stripspace()
+      strbuf: accept a comment string for strbuf_commented_addf()
+      strbuf: accept a comment string for strbuf_add_commented_lines()
+      prefer comment_line_str to comment_line_char for printing
+      find multi-byte comment chars in NUL-terminated strings
+      find multi-byte comment chars in unterminated buffers
+      sequencer: handle multi-byte comment characters when writing todo list
+      wt-status: drop custom comment-char stringification
+      environment: drop comment_line_char compatibility macro
+      config: allow multi-byte core.commentChar
+      shortlog: stop setting pp.print_email_subject
+      pretty: split oneline and email subject printing
+      pretty: drop print_email_subject flag
+      log: do not set up extra_headers for non-email formats
+      format-patch: return an allocated string from log_write_email_headers()
+      format-patch: simplify after-subject MIME header handling
+      doc/gitremote-helpers: fix more missing single-quotes
+      transport-helper: use write helpers more consistently
+      transport-helper: drop "object-format <algo>" option
+      transport-helper: send "true" value for object-format option
+      contrib: drop hg-to-git script
+      format-patch: fix leak of empty header string
+      rebase: use child_process_clear() to clean
+      config: add core.commentString
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+
+Jiamu Sun (1):
+      bugreport.c: fix a crash in `git bugreport` with `--no-suffix` option
+
+Johannes Schindelin (22):
+      merge-tree: accept 3 trees as arguments
+      merge-tree: fail with a non-zero exit code on missing tree objects
+      merge-ort: do check `parse_tree()`'s return value
+      t4301: verify that merge-tree fails on missing blob objects
+      Always check `parse_tree*()`'s return value
+      cache-tree: avoid an unnecessary check
+      fill_tree_descriptor(): mark error message for translation
+      neue: remove a bogus empty file
+      commit-reach(paint_down_to_common): plug two memory leaks
+      commit-reach(repo_in_merge_bases_many): optionally expect missing commits
+      commit-reach(repo_in_merge_bases_many): report missing commits
+      commit-reach(paint_down_to_common): prepare for handling shallow commits
+      commit-reach(paint_down_to_common): start reporting errors
+      commit-reach(merge_bases_many): pass on "missing commits" errors
+      commit-reach(get_merge_bases_many_0): pass on "missing commits" errors
+      commit-reach(repo_get_merge_bases): pass on "missing commits" errors
+      commit-reach(get_octopus_merge_bases): pass on "missing commits" errors
+      commit-reach(repo_get_merge_bases_many): pass on "missing commits" errors
+      commit-reach(repo_get_merge_bases_many_dirty): pass on errors
+      merge-recursive: prepare for `merge_submodule()` to report errors
+      merge-ort/merge-recursive: do report errors in `merge_submodule()`
+      merge-tree: fix argument type of the `--merge-base` option
+
+John Cai (1):
+      t5300: fix test_with_bad_commit()
+
+Jonas Wunderlich (1):
+      doc: status.showUntrackedFiles does not take "false"
+
+Josh Triplett (2):
+      commit: avoid redundant scissor line with --cleanup=scissors -v
+      commit: unify logic to avoid multiple scissors lines when merging
+
+Julio Bacellari (1):
+      doc: remove outdated information about interactive.singleKey
+
+Junio C Hamano (61):
+      apply: correctly reverse patch's pre- and post-image mode bits
+      apply: code simplification
+      t9210: do not rely on lazy fetching to fail
+      git: --no-lazy-fetch option
+      doc: add shortcut to "am --whitespace=<action>"
+      doc: apply the new placeholder rules to git-add documentation
+      compat: drop inclusion of <git-compat-util.h>
+      Start the 2.45 cycle
+      git: document GIT_NO_REPLACE_OBJECTS environment variable
+      doc: clarify the wording on <git-compat-util.h> requirement
+      git: extend --no-lazy-fetch to work across subprocesses
+      The second batch
+      The third batch
+      test_i18ngrep: hard deprecate and forbid its use
+      unpack: replace xwrite() loop with write_in_full()
+      sideband: avoid short write(2)
+      repack: check error writing to pack-objects subprocess
+      clean: further clean-up of implementation around "--force"
+      The fourth batch
+      The fifth batch
+      setup: notice more types of implicit bare repositories
+      The sixth batch
+      status: unify parsing of --untracked= and status.showUntrackedFiles
+      status: allow --untracked=false and friends
+      The seventh batch
+      The eighth batch
+      config: fix --comment formatting
+      config: allow tweaking whitespace between value and comment
+      diff.*Prefix: use camelCase in the doc and test titles
+      The ninth batch
+      apply: parse names out of "diff --git" more carefully
+      The tenth batch
+      The eleventh batch
+      SubmittingPatches: release-notes entry experiment
+      The twelfth batch
+      t4126: make sure a directory with SP at the end is usable
+      t4126: fix "funny directory name" test on Windows (again)
+      advice: omit trailing whitespace
+      checkout: omit "tracking" information on a detached HEAD
+      The thirteenth batch
+      t2104: style fixes
+      The fourteenth batch
+      revision: optionally record matches with pathspec elements
+      The fifteenth batch
+      CodingGuidelines: describe "export VAR=VAL" rule
+      CodingGuidelines: quote assigned value in 'local var=$val'
+      t: local VAR="VAL" (quote positional parameters)
+      t: local VAR="VAL" (quote command substitution)
+      t: local VAR="VAL" (quote ${magic-reference})
+      t: teach lint that RHS of 'local VAR=VAL' needs to be quoted
+      t0610: local VAR="VAL" fix
+      t1016: local VAR="VAL" fix
+      config: do not leak excludes_file
+      Makefile(s): do not enforce "all indents must be done with tab"
+      The sixteenth batch
+      t2104: style fixes
+      The seventeenth batch
+      The eighteenth batch
+      The ninteenth batch
+      The twentieth batch
+      Git 2.45-rc0
+
+Justin Tobler (3):
+      reftable/stack: expose option to disable auto-compaction
+      reftable/stack: add env to disable autocompaction
+      reftable/stack: use geometric table compaction
+
+Karthik Nayak (7):
+      refs: introduce `is_pseudoref()` and `is_headref()`
+      refs: extract out `loose_fill_ref_dir_regular_file()`
+      refs: introduce `refs_for_each_include_root_refs()`
+      ref-filter: rename 'FILTER_REFS_ALL' to 'FILTER_REFS_REGULAR'
+      for-each-ref: add new option to include root refs
+      update-ref: use {old,new}-oid instead of {old,new}value
+      githooks: use {old,new}-oid instead of {old,new}-value
+
+Kipras Melnikovas (1):
+      mergetools: vimdiff: use correct tool's name when reading mergetool config
+
+Kristoffer Haugsbakk (9):
+      column: disallow negative padding
+      column: guard against negative padding
+      gitcli: drop mention of “non-dashed form”
+      config: document `core.commentChar` as ASCII-only
+      t3200: improve test style
+      advice: make all entries stylistically consistent
+      advice: use backticks for verbatim
+      advice: use double quotes for regular quoting
+      branch: advise about ref syntax rules
+
+Linus Arver (10):
+      trailer: free trailer_info _after_ all related usage
+      shortlog: add test for de-duplicating folded trailers
+      trailer: rename functions to use 'trailer'
+      trailer: reorder format_trailers_from_commit() parameters
+      trailer: move interpret_trailers() to interpret-trailers.c
+      trailer_info_get(): reorder parameters
+      format_trailers(): use strbuf instead of FILE
+      format_trailer_info(): move "fast path" to caller
+      format_trailers_from_commit(): indirectly call trailer_info_get()
+      mailmap: change primary address for Linus Arver
+
+M Hickford (1):
+      libsecret: retrieve empty password
+
+Matthias Aßhauer (1):
+      Win32: detect unix socket support at runtime
+
+Max Gautier (1):
+      editorconfig: add Makefiles to "text files"
+
+Michael Lohmann (2):
+      revision: ensure MERGE_HEAD is a ref in prepare_show_merge
+      revision: implement `git log --merge` also for rebase/cherry-pick/revert
+
+Patrick Steinhardt (84):
+      refs: introduce reftable backend
+      ci: add jobs to test with the reftable backend
+      refs/reftable: fix leak when copying reflog fails
+      reftable/record: introduce function to compare records by key
+      reftable/merged: allocation-less dropping of shadowed records
+      reftable/merged: skip comparison for records of the same subiter
+      reftable/pq: allocation-less comparison of entry keys
+      reftable/block: swap buffers instead of copying
+      reftable/record: don't try to reallocate ref record name
+      reftable/reader: add comments to `table_iter_next()`
+      t: move tests exercising the "files" backend
+      t0410: convert tests to use DEFAULT_REPO_FORMAT prereq
+      t1400: exercise reflog with gaps with reftable backend
+      t1404: make D/F conflict tests compatible with reftable backend
+      t1405: remove unneeded cleanup step
+      t2011: exercise D/F conflicts with HEAD with the reftable backend
+      t7003: ensure filter-branch prunes reflogs with the reftable backend
+      git-difftool--helper: honor `--trust-exit-code` with `--dir-diff`
+      dir-iterator: pass name to `prepare_next_entry_data()` directly
+      dir-iterator: support iteration in sorted order
+      refs/files: sort reflogs returned by the reflog iterator
+      refs/files: sort merged worktree and common reflogs
+      refs: always treat iterators as ordered
+      refs: drop unused params from the reflog iterator callback
+      refs: stop resolving ref corresponding to reflogs
+      builtin/reflog: introduce subcommand to list reflogs
+      builtin/clone: allow remote helpers to detect repo
+      refs/reftable: don't fail empty transactions in repo without HEAD
+      reftable/pq: use `size_t` to track iterator index
+      reftable/merged: make `merged_iter` structure private
+      reftable/merged: advance subiter on subsequent iteration
+      reftable/merged: make subiters own their records
+      reftable/merged: remove unnecessary null check for subiters
+      reftable/merged: handle subiter cleanup on close only
+      reftable/merged: circumvent pqueue with single subiter
+      reftable/merged: avoid duplicate pqueue emptiness check
+      reftable/record: reuse refname when decoding
+      reftable/record: reuse refname when copying
+      reftable/record: decode keys in place
+      reftable: allow inlining of a few functions
+      refs/reftable: precompute prefix length
+      refs/reftable: reload correct stack when creating reflog iter
+      reftable/record: convert old and new object IDs to arrays
+      reftable/record: avoid copying author info
+      reftable/record: reuse refnames when decoding log records
+      reftable/record: reuse message when decoding log records
+      reftable/record: use scratch buffer when decoding records
+      refs/reftable: track last log record name via strbuf
+      t0610: remove unused variable assignment
+      lockfile: report when rollback fails
+      reftable/stack: register new tables as tempfiles
+      reftable/stack: register lockfiles during compaction
+      reftable/stack: register compacted tables as tempfiles
+      reftable/record: fix memory leak when decoding object records
+      reftable/block: fix binary search over restart counter
+      t5601: exercise clones with "includeIf.*.onbranch"
+      reftable: fix tests being broken by NFS' delete-after-close semantics
+      t7800: improve test descriptions with empty arguments
+      t7800: use single quotes for test bodies
+      t/README: document how to loop around test cases
+      reftable/stack: fix error handling in `reftable_stack_init_addition()`
+      reftable/error: discern locked/outdated errors
+      reftable/stack: use error codes when locking fails during compaction
+      reftable/stack: gracefully handle failed auto-compaction due to locks
+      refs/reftable: print errors on compaction failure
+      t/helper: drop pack-refs wrapper
+      refs: move `struct pack_refs_opts` to where it's used
+      refs: remove `PACK_REFS_ALL` flag
+      refs/reftable: expose auto compaction via new flag
+      builtin/pack-refs: release allocated memory
+      builtin/pack-refs: introduce new "--auto" flag
+      builtin/gc: move `struct maintenance_run_opts`
+      t6500: extract objects with "17" prefix
+      builtin/gc: forward git-gc(1)'s `--auto` flag when packing refs
+      builtin/gc: pack refs when using `git maintenance run --auto`
+      reftable/basics: fix return type of `binsearch()` to be `size_t`
+      reftable/basics: improve `binsearch()` test
+      reftable/refname: refactor binary search over refnames
+      reftable/block: refactor binary search over restart points
+      reftable/block: fix error handling when searching restart points
+      reftable/record: extract function to decode key lengths
+      reftable/block: avoid decoding keys when searching restart points
+      t0610: make `--shared=` tests reusable
+      t0610: execute git-pack-refs(1) with specified umask
+
+Peter Hutterer (1):
+      diff: add diff.srcPrefix and diff.dstPrefix configuration variables
+
+Philippe Blain (5):
+      merge-ort: turn submodule conflict suggestions into an advice
+      ci(github): make Windows test artifacts name unique
+      sequencer: allow disabling conflict advice
+      builtin/am: allow disabling conflict advice
+      t/README: mention test files are make targets
+
+Phillip Wood (9):
+      rebase -i: stop setting GIT_CHERRY_PICK_HELP
+      xdiff-interface: refactor parsing of merge.conflictstyle
+      merge-ll: introduce LL_MERGE_OPTIONS_INIT
+      merge options: add a conflict style member
+      checkout: cleanup --conflict=<style> parsing
+      checkout: fix interaction between --conflict and --merge
+      t3428: modernize test setup
+      t3428: use test_commit_message
+      t3428: restore coverage for "apply" backend
+
+Pi Fisher (1):
+      typo: replace 'commitish' with 'committish'
+
+Ralph Seichter (1):
+      config: add --comment option to add a comment
+
+René Scharfe (28):
+      use xstrncmpz()
+      fetch: convert strncmp() with strlen() to starts_with()
+      mem-pool: add mem_pool_strfmt()
+      name-rev: use mem_pool_strfmt()
+      submodule: use strvec_pushf() for --submodule-prefix
+      t-ctype: allow NUL anywhere in the specification string
+      t-ctype: simplify EOF check
+      t-ctype: align output of i
+      t-ctype: avoid duplicating class names
+      parse-options: recognize abbreviated negated option with arg
+      parse-options: set arg of abbreviated option lazily
+      parse-options: factor out register_abbrev() and struct parsed_option
+      parse-options: detect ambiguous self-negation
+      parse-options: normalize arg and long_name before comparison
+      parse-options: rearrange long_name matching code
+      t-prio-queue: shorten array index message
+      t-prio-queue: check result array bounds
+      factor out strbuf_expand_bad_format()
+      cat-file: use strbuf_expand_bad_format()
+      midx: use strvec_pushf() for pack-objects base name
+      mem-pool: use st_add() in mem_pool_strvfmt()
+      imap-send: use xsnprintf to format command
+      t-prio-queue: simplify using compound literals
+      apply: avoid fixed-size buffer in create_one_file()
+      path: remove mksnpath()
+      apply: don't leak fd on fdopen() error
+      usage: report vsnprintf(3) failure
+      date: make DATE_MODE thread-safe
+
+Richard Macklin (1):
+      rebase: fix typo in autosquash documentation
+
+Rubén Justo (13):
+      tag: error when git-column fails
+      completion: fix __git_complete_worktree_paths
+      completion: reflog with implicit "show"
+      completion: reflog show <log-options>
+      completion: introduce __git_find_subcommand
+      completion: factor out __git_resolve_builtins
+      completion: reflog subcommands and options
+      checkout: plug some leaks in git-restore
+      add-patch: introduce 'p' in interactive-patch
+      add-patch: do not print hunks repeatedly
+      add: use advise_if_enabled for ADVICE_ADD_IGNORED_FILE
+      add: use advise_if_enabled for ADVICE_ADD_EMPTY_PATHSPEC
+      add: use advise_if_enabled for ADVICE_ADD_EMBEDDED_REPO
+
+SZEDER Gábor (1):
+      upload-pack: don't send null character in abort message to the client
+
+Sergey Organov (1):
+      clean: improve -n and -f implementation and documentation
+
+Steven Jeuris (1):
+      userdiff: better method/property matching for C#
+
+Taylor Blau (8):
+      Documentation/config/pack.txt: fix broken AsciiDoc mark-up
+      upload-pack: disallow object-info capability by default
+      midx-write: move writing-related functions from midx.c
+      midx-write.c: factor out common want_included_pack() routine
+      midx-write.c: check count of packs to repack after grouping
+      midx-write.c: use `--stdin-packs` when repacking
+      t/t7700-repack.sh: fix test breakages with `GIT_TEST_MULTI_PACK_INDEX=1 `
+      Makefile(s): avoid recipe prefix in conditional statements
+
+Ville Skyttä (2):
+      completion: fix prompt with unset SHOWCONFLICTSTATE in nounset mode
+      completion: protect prompt against unset SHOWUPSTREAM in nounset mode
+
+Vincenzo Mezzela (1):
+      t7301: use test_path_is_(missing|file)
+
+brian m. carlson (7):
+      loose: add a mapping between SHA-1 and SHA-256 for loose objects
+      commit: write commits for both hashes
+      cache: add a function to read an OID of a specific algorithm
+      object-file-convert: add a function to convert trees between algorithms
+      object-file-convert: convert tag objects when writing
+      object-file-convert: convert commit objects when writing
+      repository: implement extensions.compatObjectFormat
+
+shejialuo (1):
+      t9117: prefer test_path_* helper functions
+
+
+Version v2.44.1; changes since v2.44.0:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff King (6):
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (25):
+      repository: avoid leaking `fsmonitor` data
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+      Git 2.40.2
+      Git 2.41.1
+      Git 2.42.2
+      Git 2.43.4
+      Git 2.44.1
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
+Version v2.44.0; changes since v2.44.0-rc2:
+-------------------------------------------
+
+Junio C Hamano (1):
+      Git 2.43.3
+
+
+Version v2.44.0-rc2; changes since v2.44.0-rc1:
+-----------------------------------------------
+
+Alexander Shopov (1):
+      l10n: bg.po: Updated Bulgarian translation (5610t)
+
+Arkadii Yakovets (3):
+      l10n: uk: v2.44 localization update
+      l10n: uk: v2.44 update (round 2)
+      l10n: uk: v2.44 update (round 3)
+
+Bagas Sanjaya (1):
+      l10n: po-id for 2.44 (round 1)
+
+Emir SARI (1):
+      l10n: tr: Update Turkish translations for 2.44
+
+Jean-Noël Avila (1):
+      l10n: fr.po: v2.44.0 round 3
+
+Jeff King (1):
+      trailer: fix comment/cut-line regression with opts->no_divider
+
+Jiang Xin (3):
+      diff: mark param1 and param2 as placeholders
+      l10n: ci: remove unused param for add-pr-comment@v2
+      l10n: ci: disable cache for setup-go to suppress warnings
+
+Johannes Schindelin (2):
+      Always check the return value of `repo_read_object_file()`
+      l10n: bump Actions versions in l10n.yml
+
+Jordi Mas (1):
+      l10n: Update Catalan translation
+
+Junio C Hamano (2):
+      Hopefully the last batch of fixes before 2.44 final
+      Git 2.44-rc2
+
+Peter Krefting (1):
+      l10n: sv.po: Update Swedish translation
+
+Philippe Blain (4):
+      completion: add space after config variable names also in Bash 3
+      completion: complete 'submodule.*' config variables
+      completion: add and use __git_compute_first_level_config_vars_for_section
+      completion: add and use __git_compute_second_level_config_vars_for_section
+
+Phillip Wood (1):
+      prune: mark rebase autostash and orig-head as reachable
+
+Ralf Thielow (1):
+      l10n: Update German translation
+
+René Scharfe (2):
+      receive-pack: use find_commit_header() in check_cert_push_options()
+      receive-pack: use find_commit_header() in check_nonce()
+
+Teng Long (1):
+      l10n: zh_CN: for git 2.44 rounds
+
+Todd Zullinger (1):
+      RelNotes: minor typo fixes in 2.44.0 draft
+
+Vegard Nossum (1):
+      sequencer: unset GIT_CHERRY_PICK_HELP for 'exec' commands
+
+Yi-Jyun Pan (1):
+      l10n: zh_TW: Git 2.44
+
+
+Version v2.44.0-rc1; changes since v2.44.0-rc0:
+-----------------------------------------------
+
+Britton Leo Kerin (7):
+      completion: tests: always use 'master' for default initial branch name
+      completion: bisect: complete bad, new, old, and help subcommands
+      completion: bisect: complete custom terms and related options
+      completion: bisect: complete missing --first-parent and - -no-checkout options
+      completion: new function __git_complete_log_opts
+      completion: bisect: complete log opts for visualize subcommand
+      completion: bisect: recognize but do not complete view subcommand
+
+Johannes Schindelin (2):
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+
+Junio C Hamano (11):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+      tag: fix sign_buffer() call to create a signed tag
+      bisect: document "terms" subcommand more fully
+      bisect: document command line arguments for "bisect start"
+      ssh signing: signal an error with a negative return value
+      unit-tests: do show relative file paths on non-Windows, too
+      A few more topics before -rc1
+      write-or-die: fix the polarity of GIT_FLUSH environment variable
+      A few more fixes before -rc1
+      Git 2.43.2
+
+Patrick Steinhardt (15):
+      reftable/reader: be more careful about errors in indexed seeks
+      reftable/writer: use correct type to iterate through index entries
+      reftable/writer: simplify writing index records
+      reftable/writer: fix writing multi-level indices
+      reftable: document reading and writing indices
+      builtin/stash: report failure to write to index
+      reftable: introduce macros to grow arrays
+      reftable: introduce macros to allocate arrays
+      reftable/stack: fix parameter validation when compacting range
+      reftable/stack: index segments with `size_t`
+      reftable/stack: use `size_t` to track stack slices during compaction
+      reftable/stack: use `size_t` to track stack length
+      reftable/merged: refactor seeking of records
+      reftable/merged: refactor initialization of iterators
+      reftable/record: improve semantics when initializing records
+
+Philippe Blain (1):
+      .github/PULL_REQUEST_TEMPLATE.md: add a note about single-commit PRs
+
+Phillip Wood (2):
+      show-ref --verify: accept pseudorefs
+      t1400: use show-ref to check pseudorefs
+
+Taylor Blau (2):
+      t5332-multi-pack-reuse.sh: extract pack-objects helper functions
+      pack-objects: enable multi-pack reuse via `feature.experimental`
+
+Victoria Dye (1):
+      ref-filter.c: sort formatted dates by byte value
+
+
+Version v2.44.0-rc0; changes since v2.43.4:
+-------------------------------------------
+
+Achu Luma (2):
+      unit-tests: rewrite t/helper/test-ctype.c as a unit test
+      t2400: avoid losing exit status to pipes
+
+Andy Koppe (3):
+      rebase: fully ignore rebase.autoSquash without -i
+      rebase: support --autosquash without -i
+      rebase: rewrite --(no-)autosquash documentation
+
+Antonin Delpeuch (2):
+      merge-file: add --diff-algorithm option
+      merge-ll: expose revision names to custom drivers
+
+Arthur Chan (1):
+      fuzz: add new oss-fuzz fuzzer for date.c / date.h
+
+Britton Leo Kerin (2):
+      doc: use singular form of repeatable path arg
+      doc: refer to pathspec instead of path
+
+Carlo Marcelo Arenas Belón (1):
+      ci: update FreeBSD cirrus job
+
+Chandra Pratap (2):
+      t4129: prevent loss of exit code due to the use of pipes
+      tests: move t0009-prio-queue.sh to the new unit testing framework
+
+Elijah Newren (19):
+      t6429: remove switching aspects of fast-rebase
+      replay: introduce new builtin
+      replay: start using parse_options API
+      replay: die() instead of failing assert()
+      replay: introduce pick_regular_commit()
+      replay: change rev walking options
+      replay: add an important FIXME comment about gpg signing
+      replay: remove progress and info output
+      replay: remove HEAD related sanity check
+      replay: make it a minimal server side command
+      replay: use standard revision ranges
+      replay: add --advance or 'cherry-pick' mode
+      replay: add --contained to rebase contained branches
+      replay: stop assuming replayed branches do not diverge
+      completion: squelch stray errors in sparse-checkout completion
+      completion: fix logic for determining whether cone mode is active
+      completion: avoid misleading completions in cone mode
+      completion: avoid user confusion in non-cone mode
+      sparse-checkout: be consistent with end of options markers
+
+Ghanshyam Thakkar (4):
+      t7501: add tests for --include and --only
+      t7501: add tests for --amend --signoff
+      t0024: avoid losing exit status to pipes
+      t0024: style fix
+
+Jean-Noël Avila (2):
+      doc: enforce dashes in placeholders
+      doc: enforce placeholders in documentation
+
+Jeff Hostetler (1):
+      sparse-index: pass string length to index_file_exists()
+
+Jeff King (13):
+      commit-graph: handle overflow in chunk_size checks
+      midx: check consistency of fanout table
+      commit-graph: drop redundant call to "lite" verification
+      commit-graph: clarify missing-chunk error messages
+      commit-graph: abort as soon as we see a bogus chunk
+      commit-graph: use fanout value for graph size
+      commit-graph: check order while reading fanout chunk
+      commit-graph: drop verify_commit_graph_lite()
+      commit-graph: mark chunk error messages for translation
+      transport-helper: re-examine object dir after fetching
+      Makefile: use mkdir_p_parent_template for UNIT_TEST_BIN
+      Makefile: remove UNIT_TEST_BIN directory with "make clean"
+      t/Makefile: get UNIT_TESTS list from C sources
+
+Jiang Xin (6):
+      transport-helper: no connection restriction in connect_helper
+      remote-curl: supports git-upload-archive service
+      transport-helper: protocol v2 supports upload-archive
+      http-backend: new rpc-service for git-upload-archive
+      transport-helper: call do_take_over() in connect_helper
+      transport-helper: call do_take_over() in process_connect
+
+Joanna Wang (2):
+      attr: enable attr pathspec magic for git-add and git-stash
+      attr: add builtin objectmode values support
+
+Johannes Schindelin (7):
+      cmake: also build unit tests
+      unit-tests: do not mistake `.pdb` files for being executable
+      unit-tests: do show relative file paths
+      artifacts-tar: when including `.dll` files, don't forget the unit-tests
+      cmake: fix typo in variable name
+      cmake: use test names instead of full paths
+      cmake: handle also unit tests
+
+John Cai (15):
+      t3210: move to t0601
+      remove REFFILES prerequisite for some tests in t1405 and t2017
+      t1414: convert test to use Git commands instead of writing refs manually
+      t1404: move reffiles specific tests to t0600
+      t1405: move reffiles specific tests to t0601
+      t1406: move reffiles specific tests to t0600
+      t1410: move reffiles specific tests to t0600
+      t1415: move reffiles specific tests to t0601
+      t1503: move reffiles specific tests to t0600
+      t3903: make drop stash test ref backend agnostic
+      t4202: move reffiles specific tests to t0600
+      t5312: move reffiles specific tests to t0601
+      reftable: honor core.fsync
+      index-pack: test and document --strict=<msg-id>=<severity>...
+      index-pack: --fsck-objects to take an optional argument for fsck msgs
+
+Josh Steadmon (4):
+      unit tests: add a project plan document
+      ci: run unit tests in CI
+      fuzz: fix fuzz test build rules
+      ci: build and run minimal fuzzers in GitHub CI
+
+Junio C Hamano (26):
+      cache: add fake_lstat()
+      diff-lib: fix check_removed() when fsmonitor is active
+      checkout: refactor die_if_checked_out() caller
+      Start the 2.44 cycle
+      checkout: forbid "-B <branch>" from touching a branch used elsewhere
+      The second batch
+      The third batch
+      The fourth batch
+      The fifth batch
+      The sixth batch
+      messages: mark some strings with "up-to-date" not to touch
+      The seventh batch
+      The eighth batch
+      The ninth batch
+      ls-files: avoid the verb "deprecate" for individual options
+      The tenth batch
+      The eleventh batch
+      t0091: allow test in a repository without tags
+      The twelfth batch
+      Makefile: reduce repetitive library paths
+      Makefile: simplify output of the libpath_template
+      The thirteenth batch
+      t/Makefile: say the default target upfront
+      The fourteenth batch
+      The fifteenth batch
+      Git 2.44-rc0
+
+Justin Tobler (2):
+      t1401: remove lockfile creation
+      t5541: remove lockfile creation
+
+Kristoffer Haugsbakk (5):
+      config: format newlines
+      config: rename global config function
+      config: factor out global config file retrieval
+      maintenance: use XDG config if it exists
+      config: add back code comment
+
+Kyle Lippincott (1):
+      setup: allow cwd=.git w/ bareRepository=explicit
+
+M Hickford (1):
+      credential/wincred: store oauth_refresh_token
+
+Marcelo Roberto Jimenez (1):
+      gitweb: die when a configuration file cannot be read
+
+Patrick Steinhardt (93):
+      t: allow skipping expected object ID in `ref-store update-ref`
+      t: convert tests to not write references via the filesystem
+      t: convert tests to not access symrefs via the filesystem
+      t: convert tests to not access reflog via the filesystem
+      t1450: convert tests to remove worktrees via git-worktree(1)
+      t4207: delete replace references via git-update-ref(1)
+      t7300: assert exact states of repo
+      t7900: assert the absence of refs via git-for-each-ref(1)
+      t: mark several tests that assume the files backend with REFFILES
+      t/lib-httpd: dynamically detect httpd and modules path
+      t/lib-httpd: stop using legacy crypt(3) for authentication
+      t9164: fix inability to find basename(1) in Subversion hooks
+      global: convert trivial usages of `test <expr> -a/-o <expr>`
+      contrib/subtree: stop using `-o` to test for number of args
+      contrib/subtree: convert subtree type check to use case statement
+      Makefile: stop using `test -o` when unlinking duplicate executables
+      t5510: ensure that the packed-refs file needs locking
+      refs/files: use transactions to delete references
+      refs: deduplicate code to delete references
+      refs: remove `delete_refs` callback from backends
+      setup: extract function to create the refdb
+      setup: allow skipping creation of the refdb
+      remote-curl: rediscover repository when fetching refs
+      builtin/clone: fix bundle URIs with mismatching object formats
+      builtin/clone: set up sparse checkout later
+      builtin/clone: skip reading HEAD when retrieving remote
+      builtin/clone: create the refdb with the correct object format
+      wt-status: read HEAD and ORIG_HEAD via the refdb
+      refs: propagate errno when reading special refs fails
+      refs: complete list of special refs
+      bisect: consistently write BISECT_EXPECTED_REV via the refdb
+      t: introduce DEFAULT_REPO_FORMAT prereq
+      worktree: skip reading HEAD when repairing worktrees
+      refs: refactor logic to look up storage backends
+      setup: start tracking ref storage format
+      setup: set repository's formats on init
+      setup: introduce "extensions.refStorage" extension
+      setup: introduce GIT_DEFAULT_REF_FORMAT envvar
+      t: introduce GIT_TEST_DEFAULT_REF_FORMAT envvar
+      builtin/rev-parse: introduce `--show-ref-format` flag
+      builtin/init: introduce `--ref-format=` value flag
+      builtin/clone: introduce `--ref-format=` value flag
+      t9500: write "extensions.refstorage" into config
+      reftable/stack: do not overwrite errors when compacting
+      reftable/stack: do not auto-compact twice in `reftable_stack_add()`
+      reftable/writer: fix index corruption when writing multiple indices
+      reftable/record: constify some parts of the interface
+      reftable/record: store "val1" hashes as static arrays
+      reftable/record: store "val2" hashes as static arrays
+      reftable/merged: really reuse buffers to compute record keys
+      reftable/merged: transfer ownership of records when iterating
+      git-prompt: stop manually parsing HEAD with unknown ref formats
+      ci: add job performing static analysis on GitLab CI
+      refs: prepare `refs_init_db()` for initializing worktree refs
+      setup: move creation of "refs/" into the files backend
+      refs/files: skip creation of "refs/{heads,tags}" for worktrees
+      builtin/worktree: move setup of commondir file earlier
+      worktree: expose interface to look up worktree by name
+      builtin/worktree: create refdb via ref backend
+      reftable/stack: refactor stack reloading to have common exit path
+      reftable/stack: refactor reloading to use file descriptor
+      reftable/stack: use stat info to avoid re-reading stack list
+      reftable/blocksource: refactor code to match our coding style
+      reftable/blocksource: use mmap to read tables
+      git-p4: stop reaching into the refdb
+      commit-graph: fix memory leak when not writing graph
+      completion: discover repo path in `__git_pseudoref_exists ()`
+      t9902: verify that completion does not print anything
+      completion: improve existence check for pseudo-refs
+      completion: silence pseudoref existence check
+      completion: treat dangling symrefs as existing pseudorefs
+      t7527: decrease likelihood of racing with fsmonitor daemon
+      Makefile: detect new Homebrew location for ARM-based Macs
+      ci: handle TEST_OUTPUT_DIRECTORY when printing test failures
+      ci: make p4 setup on macOS more robust
+      ci: add macOS jobs to GitLab CI
+      reftable/stack: unconditionally reload stack after commit
+      reftable/stack: fix race in up-to-date check
+      sequencer: clean up pseudo refs with REF_NO_DEREF
+      sequencer: delete REBASE_HEAD in correct repo when picking commits
+      refs: convert AUTO_MERGE to become a normal pseudo-ref
+      sequencer: introduce functions to handle autostashes via refs
+      refs: convert MERGE_AUTOSTASH to become a normal pseudo-ref
+      refs: redefine special refs
+      Documentation: add "special refs" to the glossary
+      reftable/stack: adjust permissions of compacted tables
+      t1300: make tests more robust with non-default ref backends
+      t1301: mark test for `core.sharedRepository` as reffiles specific
+      t1302: make tests more robust with new extensions
+      t1419: mark test suite as files-backend specific
+      t5526: break test submodule differently
+      t: mark tests regarding git-pack-refs(1) to be backend specific
+      reftable/stack: fsync "tables.list" during compaction
+
+Philippe Blain (5):
+      completion: complete missing rev-list options
+      completion: complete --patch-with-raw
+      completion: complete --encoding
+      completion: complete missing 'git log' options
+      ci(github): also skip logs of broken test cases
+
+Phillip Wood (1):
+      unit tests: add TAP unit test framework
+
+René Scharfe (3):
+      git-compat-util: convert skip_{prefix,suffix}{,_mem} to bool
+      mem-pool: fix big allocations
+      mem-pool: simplify alignment calculation
+
+Rubén Justo (9):
+      branch: clarify <oldbranch> term
+      advice: sort the advice related lists
+      advice: fix an unexpected leading space
+      branch: make the advice to force-deleting a conditional one
+      advice: allow disabling the automatic hint in advise_if_enabled()
+      t5332: mark as leak-free
+      t6113: mark as leak-free
+      test-lib: check for TEST_PASSES_SANITIZE_LEAK
+      t0080: mark as leak-free
+
+Simon Ser (1):
+      format-patch: fix ignored encode_email_headers for cover letter
+
+Sören Krecker (1):
+      mingw: give more details about unsafe directory's ownership
+
+Tamino Bauknecht (1):
+      fetch: add new config option fetch.all
+
+Taylor Blau (26):
+      pack-objects: free packing_data in more places
+      pack-bitmap-write: deep-clear the `bb_commit` slab
+      pack-bitmap: plug leak in find_objects()
+      midx: factor out `fill_pack_info()`
+      midx: implement `BTMP` chunk
+      midx: implement `midx_locate_pack()`
+      pack-bitmap: pass `bitmapped_pack` struct to pack-reuse functions
+      ewah: implement `bitmap_is_empty()`
+      pack-bitmap: simplify `reuse_partial_packfile_from_bitmap()` signature
+      pack-bitmap: return multiple packs via `reuse_partial_packfile_from_bitmap()`
+      pack-objects: parameterize pack-reuse routines over a single pack
+      pack-objects: keep track of `pack_start` for each reuse pack
+      pack-objects: pass `bitmapped_pack`'s to pack-reuse functions
+      pack-objects: prepare `write_reused_pack()` for multi-pack reuse
+      pack-objects: prepare `write_reused_pack_verbatim()` for multi-pack reuse
+      pack-objects: include number of packs reused in output
+      git-compat-util.h: implement checked size_t to uint32_t conversion
+      midx: implement `midx_preferred_pack()`
+      pack-revindex: factor out `midx_key_to_pack_pos()` helper
+      pack-revindex: implement `midx_pair_to_pack_pos()`
+      pack-bitmap: prepare to mark objects from multiple packs for reuse
+      pack-objects: add tracing for various packfile metrics
+      t/test-lib-functions.sh: implement `test_trace2_data` helper
+      pack-objects: allow setting `pack.allowPackReuse` to "single"
+      pack-bitmap: enable reuse from all bitmapped packs
+      t/perf: add performance tests for multi-pack reuse
+
+Victoria Dye (14):
+      ref-filter.c: really don't sort when using --no-sort
+      ref-filter.h: add max_count and omit_empty to ref_format
+      ref-filter.h: move contains caches into filter
+      ref-filter.h: add functions for filter/format & format-only
+      ref-filter.c: rename 'ref_filter_handler()' to 'filter_one()'
+      ref-filter.c: refactor to create common helper functions
+      ref-filter.c: filter & format refs in the same callback
+      for-each-ref: clean up documentation of --format
+      ref-filter.c: use peeled tag for '*' format fields
+      t/perf: add perf tests for for-each-ref
+      submodule-config.h: move check_submodule_url
+      test-submodule: remove command line handling for check-name
+      t7450: test submodule urls
+      submodule-config.c: strengthen URL fsck check
+
+Zach FettersMoore (1):
+      subtree: fix split processing with multiple subtrees present
+
+
+Version v2.43.4; changes since v2.43.3:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff King (6):
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (24):
+      repository: avoid leaking `fsmonitor` data
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+      Git 2.40.2
+      Git 2.41.1
+      Git 2.42.2
+      Git 2.43.4
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
+Version v2.43.3; changes since v2.43.2:
+---------------------------------------
+
+Jeff King (1):
+      trailer: fix comment/cut-line regression with opts->no_divider
+
+Junio C Hamano (1):
+      Git 2.43.3
+
+
+Version v2.43.2; changes since v2.43.1:
+---------------------------------------
+
+Elijah Newren (1):
+      diffcore-delta: avoid ignoring final 'line' of file
+
+James Touton (1):
+      git-p4: use raw string literals for regular expressions
+
+Jeff King (1):
+      diff: handle NULL meta-info when spawning external diff
+
+Johannes Schindelin (1):
+      win32: special-case `ENOSPC` when writing to a pipe
+
+Junio C Hamano (11):
+      Docs: majordomo@vger.kernel.org has been decomissioned
+      CoC: whitespace fix
+      builtin/worktree: comment style fixes
+      merge-ort.c: comment style fix
+      reftable/pq_test: comment style fix
+      tag: fix sign_buffer() call to create a signed tag
+      bisect: document "terms" subcommand more fully
+      bisect: document command line arguments for "bisect start"
+      ssh signing: signal an error with a negative return value
+      write-or-die: fix the polarity of GIT_FLUSH environment variable
+      Git 2.43.2
+
+Linus Arver (1):
+      strvec: use correct member name in comments
+
+Nikolay Borisov (1):
+      rebase: fix documentation about used shell in -x
+
+Nikolay Edigaryev (1):
+      rev-list-options: fix off-by-one in '--filter=blob:limit=<n>' explainer
+
+Patrick Steinhardt (1):
+      builtin/stash: report failure to write to index
+
+Philippe Blain (2):
+      imap-send: add missing "strbuf.h" include under NO_CURL
+      .github/PULL_REQUEST_TEMPLATE.md: add a note about single-commit PRs
+
+René Scharfe (2):
+      parse-options: fully disable option abbreviation with PARSE_OPT_KEEP_UNKNOWN
+      parse-options: simplify positivation handling
+
+Sam Delmerico (1):
+      push: region_leave trace for negotiate_using_fetch
+
+Taylor Blau (1):
+      pack-bitmap: drop unused `reuse_objects`
+
+Toon Claes (1):
+      builtin/show-ref: treat directory as non-existing in --exists
+
+
+Version v2.43.1; changes since v2.43.0:
+---------------------------------------
+
+Chandra Pratap (2):
+      sideband.c: remove redundant 'NEEDSWORK' tag
+      write-or-die: make GIT_FLUSH a Boolean environment variable
+
+Elijah Newren (12):
+      treewide: remove unnecessary includes from header files
+      treewide: remove unnecessary includes in source files
+      archive.h: remove unnecessary include
+      blame.h: remove unnecessary includes
+      fsmonitor--daemon.h: remove unnecessary includes
+      http.h: remove unnecessary include
+      line-log.h: remove unnecessary include
+      pkt-line.h: remove unnecessary include
+      submodule-config.h: remove unnecessary include
+      trace2/tr2_tls.h: remove unnecessary include
+      treewide: add direct includes currently only pulled in transitively
+      treewide: remove unnecessary includes in source files
+
+Eric Sunshine (1):
+      git-add.txt: add missing short option -A to synopsis
+
+Illia Bobyr (1):
+      rebase: clarify --reschedule-failed-exec default
+
+Jeff Hostetler (3):
+      trace2: fix signature of trace2_def_param() macro
+      t0211: test URL redacting in PERF format
+      t0212: test URL redacting in EVENT format
+
+Jeff King (24):
+      parse-options: decouple "--end-of-options" and "--"
+      bisect: always clean on reset
+      config: handle NULL value when parsing non-bools
+      setup: handle NULL value when parsing extensions
+      trace2: handle NULL values in tr2_sysenv config callback
+      help: handle NULL value for alias.* config
+      submodule: handle NULL value when parsing submodule.*.branch
+      trailer: handle NULL value when parsing trailer-specific config
+      fsck: handle NULL value when parsing message config
+      config: reject bogus values for core.checkstat
+      git_xmerge_config(): prefer error() to die()
+      imap-send: don't use git_die_config() inside callback
+      config: use config_error_nonbool() instead of custom messages
+      diff: give more detailed messages for bogus diff.* config
+      config: use git_config_string() for core.checkRoundTripEncoding
+      push: drop confusing configset/callback redundancy
+      gpg-interface: drop pointless config_error_nonbool() checks
+      sequencer: simplify away extra git_config_string() call
+      mailinfo: fix out-of-bounds memory reads in unquote_quoted_pair()
+      t5100: make rfc822 comment test more careful
+      mailinfo: avoid recursion when unquoting From headers
+      t1006: add tests for %(objectsize:disk)
+      commit-graph: retain commit slab when closing NULL commit_graph
+      index-pack: spawn threads atomically
+
+Jiang Xin (5):
+      t5574: test porcelain output of atomic fetch
+      fetch: no redundant error message for atomic fetch
+      test-pkt-line: add option parser for unpack-sideband
+      pkt-line: memorize sideband fragment in reader
+      pkt-line: do not chomp newlines for sideband messages
+
+Johannes Schindelin (3):
+      ci: avoid running the test suite _twice_
+      packfile.c: fix a typo in `each_file_in_pack_dir_fn()`'s declaration
+      trace2: redact passwords from https:// URLs by default
+
+Josh Brobst (1):
+      builtin/reflog.c: fix dry-run option short name
+
+Josh Soref (13):
+      doc: update links to current pages
+      doc: switch links to https
+      doc: update links for andre-simon.de
+      doc: refer to internet archive
+      CodingGuidelines: move period inside parentheses
+      CodingGuidelines: write punctuation marks
+      SubmittingPatches: drop ref to "What's in git.git"
+      SubmittingPatches: discourage new trailers
+      SubmittingPatches: update extra tags list
+      SubmittingPatches: provide tag naming advice
+      SubmittingPatches: clarify GitHub visual
+      SubmittingPatches: clarify GitHub artifact format
+      SubmittingPatches: hyphenate non-ASCII
+
+Julian Prein (1):
+      hooks--pre-commit: detect non-ASCII when renaming
+
+Junio C Hamano (13):
+      orphan/unborn: add to the glossary and use them consistently
+      orphan/unborn: fix use of 'orphan' in end-user facing messages
+      revision: parse integer arguments to --max-count, --skip, etc., more carefully
+      git.txt: HEAD is not that special
+      git-bisect.txt: BISECT_HEAD is not that special
+      refs.h: HEAD is not that special
+      docs: AUTO_MERGE is not that special
+      docs: MERGE_AUTOSTASH is not that special
+      doc: format.notes specify a ref under refs/notes/ hierarchy
+      remote.h: retire CAS_OPT_NAME
+      archive: "--list" does not take further options
+      sparse-checkout: use default patterns for 'set' only !stdin
+      Git 2.43.1
+
+Linus Arver (3):
+      commit: ignore_non_trailer computes number of bytes to ignore
+      trailer: find the end of the log message
+      trailer: use offsets for trailer_start/trailer_end
+
+Maarten van der Schrieck (1):
+      Documentation: fix statement about rebase.instructionFormat
+
+Marcel Krause (1):
+      doc: make the gitfile syntax easier to discover
+
+Michael Lohmann (2):
+      Documentation/git-merge.txt: fix reference to synopsis
+      Documentation/git-merge.txt: use backticks for command wrapping
+
+Patrick Steinhardt (31):
+      ci: reorder definitions for grouping functions
+      ci: make grouping setup more generic
+      ci: group installation of Docker dependencies
+      ci: split out logic to set up failed test artifacts
+      ci: unify setup of some environment variables
+      ci: squelch warnings when testing with unusable Git repo
+      ci: install test dependencies for linux-musl
+      ci: add support for GitLab CI
+      commit-graph: disable GIT_COMMIT_GRAPH_PARANOIA by default
+      t0410: mark tests to require the reffiles backend
+      t1400: split up generic reflog tests from the reffile-specific ones
+      t1401: stop treating FETCH_HEAD as real reference
+      t1410: use test-tool to create empty reflog
+      t1417: make `reflog --updateref` tests backend agnostic
+      t3310: stop checking for reference existence via `test -f`
+      t4013: simplify magic parsing and drop "failure"
+      t5401: speed up creation of many branches
+      t5551: stop writing packed-refs directly
+      t6301: write invalid object ID via `test-tool ref-store`
+      reftable: wrap EXPECT macros in do/while
+      reftable: handle interrupted reads
+      reftable: handle interrupted writes
+      reftable/stack: verify that `reftable_stack_add()` uses auto-compaction
+      reftable/stack: perform auto-compaction with transactional interface
+      reftable/stack: reuse buffers when reloading stack
+      reftable/stack: fix stale lock when dying
+      reftable/stack: fix use of unseeded randomness
+      reftable/merged: reuse buffer to compute record keys
+      reftable/block: introduce macro to initialize `struct block_iter`
+      reftable/block: reuse buffer to compute record keys
+      tests: adjust whitespace in chainlint expectations
+
+René Scharfe (14):
+      column: release strbuf and string_list after use
+      i18n: factorize even more 'incompatible options' messages
+      push: use die_for_incompatible_opt4() for - -delete/--tags/--all/--mirror
+      repack: use die_for_incompatible_opt3() for -A/-k/--cruft
+      revision: use die_for_incompatible_opt3() for - -graph/--reverse/--walk-reflogs
+      revision, rev-parse: factorize incompatibility messages about - -exclude-hidden
+      clean: factorize incompatibility message
+      worktree: standardize incompatibility messages
+      worktree: simplify incompatibility message for --orphan and commit-ish
+      show-ref: use die_for_incompatible_opt3()
+      t6300: avoid hard-coding object sizes
+      rebase: use strvec_pushf() for format-patch revisions
+      fast-import: use mem_pool_calloc()
+      t1006: prefer shell loop to awk for packed object sizes
+
+Rubén Justo (1):
+      status: fix branch shown when not only bisecting
+
+Shreyansh Paliwal (1):
+      test-lib-functions.sh: fix test_grep fail message wording
+
+Stan Hu (2):
+      completion: refactor existence checks for pseudorefs
+      completion: support pseudoref existence checks for reftables
+
+Todd Zullinger (2):
+      perl: bump the required Perl version to 5.8.1 from 5.8.0
+      send-email: avoid duplicate specification warnings
+
+
 Version v2.43.0; changes since v2.43.0-rc2:
 -------------------------------------------
 
@@ -139,7 +1763,7 @@ brian m. carlson (1):
       merge-file: add an option to process object IDs
 
 
-Version v2.43.0-rc0; changes since v2.42.1:
+Version v2.43.0-rc0; changes since v2.42.2:
 -------------------------------------------
 
 Alyssa Ross (1):
@@ -535,6 +2159,59 @@ brian m. carlson (1):
       doc: correct the 50 characters soft limit (+)
 
 
+Version v2.42.2; changes since v2.42.1:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff King (6):
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (23):
+      repository: avoid leaking `fsmonitor` data
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+      Git 2.40.2
+      Git 2.41.1
+      Git 2.42.2
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
 Version v2.42.1; changes since v2.42.0:
 ---------------------------------------
 
@@ -800,7 +2477,7 @@ brian m. carlson (2):
       gitignore: ignore clangd .cache directory
 
 
-Version v2.42.0-rc0; changes since v2.41.0:
+Version v2.42.0-rc0; changes since v2.41.1:
 -------------------------------------------
 
 Alejandro R. Sedeño (1):
@@ -921,7 +2598,7 @@ Jacob Keller (1):
 Jan Klötzke (1):
       ref-filter: handle nested tags in --points-at option
 
-Jeff King (36):
+Jeff King (35):
       format-patch: free rev.message_id when exiting
       format-patch: free elements of rev.ref_message_ids list
       pathspec: factor out magic-to-name function
@@ -931,7 +2608,6 @@ Jeff King (36):
       ci: run ASan/UBSan in a single job
       ci: drop linux-clang job
       commit: pass --no-divider to interpret-trailers
-      http: handle both "h2" and "h2h3" in curl info lines
       var: mark unused parameters in git_var callbacks
       imap-send: use server conf argument in setup_curl()
       imap-send: drop unused parameter from imap_cmd_cb callback
@@ -1289,6 +2965,61 @@ brian m. carlson (7):
       var: add config file locations
 
 
+Version v2.41.1; changes since v2.41.0:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff King (9):
+      http: handle both "h2" and "h2h3" in curl info lines
+      http: factor out matching of curl http/2 trace lines
+      http: update curl http/2 info matching for curl 8.3.0
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (22):
+      repository: avoid leaking `fsmonitor` data
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+      Git 2.40.2
+      Git 2.41.1
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
 Version v2.41.0; changes since v2.41.0-rc2:
 -------------------------------------------
 
@@ -1382,7 +3113,7 @@ brian m. carlson (1):
       upload-pack: advertise capabilities when cloning empty repos
 
 
-Version v2.41.0-rc0; changes since v2.40.1:
+Version v2.41.0-rc0; changes since v2.40.2:
 -------------------------------------------
 
 Adam Johnson (1):
@@ -1969,6 +3700,60 @@ ZheNing Hu (2):
       branch, for-each-ref, tag: add option to omit empty lines
 
 
+Version v2.40.2; changes since v2.40.1:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff King (9):
+      http: handle both "h2" and "h2h3" in curl info lines
+      http: factor out matching of curl http/2 trace lines
+      http: update curl http/2 info matching for curl 8.3.0
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (21):
+      repository: avoid leaking `fsmonitor` data
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+      Git 2.40.2
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
 Version v2.40.1; changes since v2.40.0:
 ---------------------------------------
 
@@ -2144,7 +3929,7 @@ idriss fekir (1):
       trace.c, git.c: remove unnecessary parameter to trace_repo_setup()
 
 
-Version v2.40.0-rc0; changes since v2.39.3:
+Version v2.40.0-rc0; changes since v2.39.4:
 -------------------------------------------
 
 Adam Szkoda (1):
@@ -2248,11 +4033,10 @@ Harshil-Jani (2):
       mingw: remove duplicate `USE_NED_ALLOCATOR` directive
       mingw: remove msysGit/MSYS1 support
 
-Jeff Hostetler (2):
+Jeff Hostetler (1):
       fsmonitor: fix race seen in t7527
-      fsmonitor: eliminate call to deprecated FSEventStream function
 
-Jeff King (32):
+Jeff King (28):
       git-jump: move valid-mode check earlier
       pack-bitmap.c: break out of the bitmap loop early if not tracing
       pack-bitmap.c: trace bitmap ignore logs when midx-bitmap is found
@@ -2279,10 +4063,6 @@ Jeff King (32):
       hash-object: use fsck for object checks
       hash-object: fix descriptor leak with --literally
       fsck: do not assume NUL-termination of buffers
-      t/lib-httpd: bump required apache version to 2.2
-      t/lib-httpd: bump required apache version to 2.4
-      t/lib-httpd: drop SSLMutex config
-      t/lib-httpd: increase ssl key size to 2048 bits
       doc/ls-remote: cosmetic cleanups for examples
       doc/ls-remote: clarify pattern format
 
@@ -2557,6 +4337,81 @@ ZheNing Hu (1):
       date.c: allow ISO 8601 reduced precision times
 
 
+Version v2.39.4; changes since v2.39.3:
+---------------------------------------
+
+Filip Hejsek (4):
+      t0411: add tests for cloning from partial repo
+      has_dir_name(): do not get confused by characters < '/'
+      t7423: add tests for symlinked submodule directories
+      clone: prevent clashing git dirs when cloning submodule in parallel
+
+Jeff Hostetler (1):
+      fsmonitor: eliminate call to deprecated FSEventStream function
+
+Jeff King (29):
+      t/lib-httpd: bump required apache version to 2.2
+      t/lib-httpd: bump required apache version to 2.4
+      t/lib-httpd: drop SSLMutex config
+      t/lib-httpd: increase ssl key size to 2048 bits
+      t5541: run "used receive-pack service" test earlier
+      t5541: stop marking "used receive-pack service" test as v0 only
+      t5541: simplify and move "no empty path components" test
+      t5551: drop redundant grep for Accept-Language
+      t5551: lower-case headers in expected curl trace
+      t5551: handle HTTP/2 when checking curl trace
+      t5551: stop forcing clone to run with v0 protocol
+      t5551: handle v2 protocol when checking curl trace
+      t5551: handle v2 protocol in upload-pack service test
+      t5551: simplify expected cookie file
+      t5551: handle v2 protocol in cookie test
+      t5551: drop curl trace lines without headers
+      t/lib-httpd: respect $HTTPD_PROTO in expect_askpass()
+      t/lib-httpd: enable HTTP/2 "h2" protocol, not just h2c
+      t5559: fix test failures with LIB_HTTPD_SSL
+      t5559: make SSL/TLS the default
+      http: handle both "h2" and "h2h3" in curl info lines
+      http: factor out matching of curl http/2 trace lines
+      http: update curl http/2 info matching for curl 8.3.0
+      http: reset POSTFIELDSIZE when clearing curl handle
+      INSTALL: bump libcurl version to 7.21.3
+      remote-curl: add Transfer-Encoding header only for older curl
+      test-lib: ignore uninteresting LSan output
+      upload-pack: disable lazy-fetching by default
+      docs: document security issues around untrusted .git dirs
+
+Johannes Schindelin (19):
+      ci: upgrade to using macos-13
+      ci(linux-asan/linux-ubsan): let's save some time
+      ci: bump remaining outdated Actions versions
+      ci(linux32): add a note about Actions that must not be updated
+      fetch/clone: detect dubious ownership of local repositories
+      submodules: submodule paths must not contain symlinks
+      clone_submodule: avoid using `access()` on directories
+      submodule: require the submodule path to contain directories only
+      t5510: verify that D/F confusion cannot lead to an RCE
+      entry: report more colliding paths
+      clone: when symbolic links collide with directories, keep the latter
+      find_hook(): refactor the `STRIP_EXTENSION` logic
+      init: refactor the template directory discovery into its own function
+      Add a helper function to compare file contents
+      clone: prevent hooks from running during a clone
+      init.templateDir: consider this config setting protected
+      core.hooksPath: add some protection while cloning
+      fsck: warn about symlink pointing inside a gitdir
+      Git 2.39.4
+
+Junio C Hamano (2):
+      GitHub Actions: update to checkout@v4
+      GitHub Actions: update to github-script@v7
+
+Patrick Steinhardt (4):
+      builtin/clone: stop resolving symlinks when copying files
+      builtin/clone: abort when hardlinked source and target file differ
+      setup.c: introduce `die_upon_dubious_ownership()`
+      builtin/clone: refuse local clones of unsafe repositories
+
+
 Version v2.39.3; changes since v2.39.2:
 ---------------------------------------