libgit2 v1.6.0 (Hubbeliges Krokodil) is now available with experimental SHA256 support for bare repositories, partial stash, support for push-by-OID, and many bug fixes. github.com/libgit2/libgit…
libgit2 has released v1.4.5 and v1.5.1 to mitigate CVE 2023-22742. Prior versions did not validate remote ssh host keys by default, and required users to provide a callback. libgit2 now validates remote host keys. Users are encouraged to upgrade.
