Age	Commit message (Collapse)	Author	Lines
2026-07-25	Release v2.2.0v2.2.0	Bryce Kwon	-1/+1
2026-07-25	Drop the example cgitrc from the manual	Bryce Kwon	-190/+0
2026-07-25	Replace the browser markdown renderer with a filter	Bryce Kwon	-233/+613
	The readme is now escaped plain text unless `about-filter` points at the new `about-render.lua`, which renders markdown, man pages and plain text server-side. `enable-markdown` goes away with the renderer.
2026-07-25	Skip a malformed config line	Bryce Kwon	-24/+34
2026-07-25	Bound the cache listing key output	Bryce Kwon	-2/+9
2026-07-25	Prune the stats walk and guard its dates	Bryce Kwon	-1/+9
2026-07-25	Keep zstd snapshots single-threaded	Bryce Kwon	-1/+3
2026-07-25	Add `max-patch-count` to bound the patch view	Bryce Kwon	-0/+27
2026-07-25	Cap the header branch switcher	Bryce Kwon	-2/+9
2026-07-25	Backfill an absent commit message	Bryce Kwon	-8/+36
2026-07-25	Stream the tree line numbers instead of buffering	Bryce Kwon	-5/+2
2026-07-25	Apply the diff size caps under follow	Bryce Kwon	-7/+9
2026-07-25	Cap diff blobs by `max-blob-size`	Bryce Kwon	-3/+48
	The diff family inflated a blob of any size just to render it. A file over the limit is reported as binary instead.
2026-07-25	Skip a ref whose object cannot be parsed	Bryce Kwon	-1/+7
	A dangling or unreadable ref was described through a null object.
2026-07-25	Percent-encode file paths in side-by-side diffs	Bryce Kwon	-2/+42
2026-07-25	Tighten the gitignore and gitattributes rules	Bryce Kwon	-5/+24
2026-07-25	Bound syntax-highlight memory and widen coverage	Bryce Kwon	-74/+173
2026-07-25	Rework link-commits into a rules filter	Bryce Kwon	-14/+140
2026-07-25	Guard the avatar filters and expose settings	Bryce Kwon	-23/+181
2026-07-25	Harden and reorganize the auth filters	Bryce Kwon	-334/+667
2026-07-25	Add a dist target and build releases through it	Bryce Kwon	-10/+24
2026-07-25	Reorganize and simplify the Makefile	Bryce Kwon	-97/+98
2026-07-25	Remove the PDF documentation output	Bryce Kwon	-22/+6
2026-07-25	Make the clean targets remove real test output	Bryce Kwon	-3/+6
2026-07-21	Emit a conforming `rel=icon` for the favicon link	Bryce Kwon	-4/+5
2026-07-21	Redraw the logo and favicon at higher resolution	Bryce Kwon	-0/+10
2026-07-21	Widen the `robots.txt` rules to extensionless paths	Bryce Kwon	-3/+2
2026-07-21	Build the sources with `-fno-common`	Bryce Kwon	-0/+7
	Apple clang still defaults to `-fcommon`, so git's 64 KB packet_buffer became a common symbol whose size drove a 32 KB section alignment that ld64 then clamped to the 16 KB page size, warning on every macOS link. Everywhere else already compiles with `-fno-common`.
2026-07-20	Gate the stats page and add a language breakdown	Bryce Kwon	-24/+297
	`max-stats` only bounds the selectable periods now and no longer doubles as the enable switch. The tree walk runs before the history walk on purpose. Releasing commit memory while walking history resets each commit slab index, and a commit graph lookup afterwards would read another commit slot and walk the wrong tree. The stats fixture writes a commit graph so the tests cover that path. The history walk bounds the window in process rather than passing a formatted since date to `setup_revisions`, and parses each commit once.
2026-07-19	Release v2.1.0v2.1.0	Bryce Kwon	-1/+1
2026-07-19	Keep the version fallback in shallow builds	Bryce Kwon	-2/+8
	A checkout without tags made `git describe` fail and the empty result overwrote the fallback, so CI release binaries carried no version at all. The release workflow now also fetches tags so a tag build stamps its exact version.
2026-07-19	Run CI only on branch pushes	Bryce Kwon	-1/+2
2026-07-19	Even out font sizes and drop dead styles	Bryce Kwon	-116/+47
2026-07-19	Remove the owner filter hook	Bryce Kwon	-55/+3
2026-07-19	Declutter the interface on small screens	Bryce Kwon	-36/+32
2026-07-19	Follow the theme in the external tab icon	Bryce Kwon	-3/+13
2026-07-19	Highlight and center fragment-targeted lines	Bryce Kwon	-0/+79
2026-07-19	Move syntax highlighting to a Lua source filter	Bryce Kwon	-250/+247
2026-07-19	Stat oversized diffs instead of inlining them	Bryce Kwon	-3/+130
2026-07-19	Cap and paginate the ref listings	Bryce Kwon	-14/+189
2026-07-19	Add a help page with common workflows	Bryce Kwon	-0/+182
2026-07-19	Keep line structure in plaintext readmes	Bryce Kwon	-1/+29
2026-07-19	Submit option forms without inline handlers	Bryce Kwon	-6/+34
2026-07-16	Add security and fork-behaviour regression testsv2.0.0	Bryce Kwon	-0/+113
2026-07-16	Rewrite the README for the fork as `README.txt`	Bryce Kwon	-99/+144
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-34/+42
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-16	Add a post-update hook for HTTP clones	Bryce Kwon	-0/+18
	cgit's built-in clone support speaks the dumb HTTP protocol, which serves static files that only `git update-server-info` refreshes. Without this hook a clone can miss refs pushed after the repository was created.
2026-07-16	Add example web server configurations	Bryce Kwon	-0/+477
	The wiring has real pitfalls around PATH_INFO and the link base, so these ship as working commented configs. nginx needs the fcgiwrap bridge while apache and lighttpd run the CGI directly. The security headers live here rather than in cgit because they must also cover the static assets the server serves itself.
2026-07-16	Add a commented example configuration	Bryce Kwon	-0/+548
2026-07-16	Harden the auth filter headers and session cookie	Bryce Kwon	-10/+62
	The filters signed the request url and later wrote it into a Location header, and the signing step re-encoded a newline that the verifying step decoded back, so a crafted url could smuggle CR and LF into the response. The cookie HMAC was also checked with a short-circuiting comparison and carried no SameSite attribute.

• [next]