Age	Commit message (Collapse)	Author	Lines
9 days	Call string.match like the rest of the highlighter	Bryce Kwon	-1/+1
9 days	Carry a man page's text as plain strings	Bryce Kwon	-23/+16
	lpeg's constant, query and numbered captures already do what the token helpers did, and nothing ever read the tokens of an escape that draws nothing.
9 days	Take a no fill line's plain text from its nodes	Bryce Kwon	-7/+1
9 days	Wrap a man page's font runs as the macros do	Bryce Kwon	-27/+11
9 days	Reuse the digit pattern where it is spelt out	Bryce Kwon	-2/+2
9 days	Build the block start test from the line grammars	Bryce Kwon	-2/+1
9 days	Count a rule among the blocks that end a paragraph	Bryce Kwon	-7/+4
9 days	Inline the list check before indented code	Bryce Kwon	-6/+2
9 days	Read a setext heading's level off its capture	Bryce Kwon	-10/+4
9 days	Build every code block in one place	Bryce Kwon	-17/+11
9 days	Replace a readme's NUL bytes in one substitution	Bryce Kwon	-19/+3
9 days	Let the dispatch serve markdown without lpeg	Bryce Kwon	-5/+0
	Without lpeg both renderers stay nil, and the handler lookup already falls back to plain text for a format it has no renderer for.
9 days	Render markdown and man pages through one function	Bryce Kwon	-28/+18
	Everything that can raise already runs inside the parse and emit pcalls, so the outer one in filter_close could only ever have sent the page a second time.
9 days	Drop three needless forward declarations	Bryce Kwon	-9/+3
9 days	Drop fallbacks for a match that cannot fail	Bryce Kwon	-3/+3
	A table capture of a pattern repeated zero or more times matches every string, the empty one included, so the inline grammars never return nil.
9 days	Drop the readme hooks that nothing reads	Bryce Kwon	-14/+7
	Nothing in assets/ or in README's list of hooks reads a fenced block's data-lang or the manpage class on a man page's wrapper.
10 days	Rewrap the max-ref-count comment	Bryce Kwon	-2/+1
10 days	Spell customisation and uncoloured the British way	Bryce Kwon	-1/+2
10 days	Point each hook at the other hooks here	Bryce Kwon	-3/+6
	The cache hook named only the age-file hook, from before the commit-graph hook came.
10 days	Drop config comments that restate their line	Bryce Kwon	-7/+2
10 days	Say each routing fact once in the server configs	Bryce Kwon	-20/+16
10 days	Leave the filter prefixes to the filter preamble	Bryce Kwon	-12/+7
	The preamble above the filters explains lua: and exec:, and the repo.* filter entries already read "Value is a command."
10 days	Say minutes once in the cache ttl comments	Bryce Kwon	-12/+9
10 days	Drop the filter note from the cgitrc header	Bryce Kwon	-4/+0
	The filter section names about-render.lua and the source-filter itself.
10 days	Name the guarded settings in one place	Bryce Kwon	-5/+4
10 days	Trim the header notes in the server configs	Bryce Kwon	-23/+7
	Each config listed every header cgit sends, where only its own nosniff and strict policy on raw bytes bear on the headers set there. The list also missed Vary, and the Apache one called Apache a proxy.
10 days	Say each css and js line holds one url	Bryce Kwon	-3/+3
10 days	Drop the snapshot format from the query comment	Bryce Kwon	-1/+1
	A snapshot's format comes from the suffix of its filename in the path, not from the query string.
10 days	Name every default asset link in the configs	Bryce Kwon	-11/+11
	The nginx sub-path recipe moved only the stylesheet and the logo, and left the script and the icon pointing at the domain root.
10 days	Say which versions enable-version-info names	Bryce Kwon	-4/+3
	Only the footer carries the git version. The reason the versions stay out by default is left to MANUAL, which already gives it.
10 days	Document virtual-root's default of SCRIPT_NAME	Bryce Kwon	-2/+2
	cgit falls back to SCRIPT_NAME followed by a slash when virtual-root is unset, so its links always take the path form and none take the ?url= form the docs described.
10 days	Move scan-path below the settings it inherits	Bryce Kwon	-4/+5
	The quick start says to uncomment scan-path, and in its old place a scanned repository missed every setting below it, among them the filters, the snapshots and the enable flags.
10 days	Keep the age hook quiet when it cannot write	Bryce Kwon	-5/+7
11 days	Keep the commit-graph current in an example hook	Bryce Kwon	-0/+34
	cgit's log, blame and graph pages read commits from the commit-graph when a repository has one, and its changed path filters let a walk limited to one file skip the commits that never touched it. git gc writes a graph only now and then and starts those filters only when a write asks for them, so the hook writes a split layer with them after each push.
11 days	Drop only the cache a push makes stale	Bryce Kwon	-11/+104
	The hook cleared every slot on a push to any repository. cgit writes the request a slot answers at its head, so the hook now reads it back and drops only the pushed repository's pages and the index. It finds the repository's url from scan-path or hooks.cgiturl, and with neither it clears everything as before.
11 days	Pin the server configs to the releases they suit	Bryce Kwon	-1/+7
	Each release named is the one its project's own site listed as current on 2026-10-29.
12 days	Render the man pages that generators write	Bryce Kwon	-52/+188
	DocBook, pod2man and hand written pages leaked roff onto the page. Font escapes inside no fill blocks, comments, layout escapes such as \% and \c, the colours and half line moves around DocBook's links, and the requests and macro definitions their preambles open with all showed through. Those now draw nothing, the common named characters and strings render, .EX and pod2man's .Vb read as code, a .TP tag takes a line of its own and the alternating font macros switch fonts between their arguments. Anything rarer still falls back to its text.
12 days	Render more of the markdown seen in readmes	Bryce Kwon	-19/+105
	A line of equals signs or dashes under a paragraph now makes a heading of it, as on GitHub, instead of running into its text, and any other rule ends the paragraph. Four spaces or a tab start a code block, and an escaped pipe stays in its table cell. A link opening with two slashes or backslashes in any mix leads to another site, so it renders as text like the plain scheme relative one already did.
12 days	Keep a readme whole past a NUL byte	Bryce Kwon	-2/+20
	cgit takes filter output through a C string sink that stops at the first NUL, so a readme holding one lost everything after it. Each NUL now shows as U+FFFD, as a browser would show it.
12 days	Offer the versions as an option	Bryce Kwon	-0/+6
	enable-version-info brings back the cgit and git versions that 872bd7c took off the footer and the generator tag, for a site that wants them, and the version f7d2b83 put on the signature of patches now follows it too. It stays off by default for the reason 872bd7c gave.
13 days	Load the scripts with defer	Bryce Kwon	-2/+3
	A plain script in the head held up parsing until it had downloaded and run, though cgit.js only acts once the document is ready. Deferred scripts still run in the order given and before DOMContentLoaded, so a site script after cgit.js can still call window.cgit.
2026-10-24	Say when a login fails, and line up the form	Bryce Kwon	-16/+44
	A wrong password sent the reader back to the same empty form, which looked no different from a crash. The redirect now carries a flag the form reads, the same for an unknown user as for a wrong password, and the form leaves the flag out of the way back it signs.
2026-10-24	Colour css properties and pseudo-classes	Bryce Kwon	-14/+17
	Scintillua's css lexer tags them with names the map had no row for, so they came out as plain text.
2026-10-22	Escape the same characters in the highlighter	Bryce Kwon	-6/+39
	A lexer may hand back the bytes of one separator, or the CR and LF of a line ending, in different tokens, so line endings become line feeds before lexing and the separators are escaped once the tokens are joined.
2026-10-10	Read a negative ref count as no limit	Bryce Kwon	-4/+6
	summary-branches, summary-tags and max-ref-count already listed every ref at 0, but a negative value reached qsort as a count and crashed the summary and refs pages, and emptied the branch switcher.
2026-10-07	Claim and test Lua 5.5 for every extension	Bryce Kwon	-13/+13
	luaossl from release 20260910 and luaposix load under Lua 5.5, and cgit renders the same pages under it as under LuaJIT. Running the suites there already caught a write to a for loop's control variable, which 5.5 makes read-only.
2026-10-05	Drop the highlighter's stale guard and dead branch	Bryce Kwon	-11/+2
	cgit runs as a CGI, so no interpreter outlives its request, and the lexers load once per process. The loop below already wrote nothing for an empty blob.
2026-10-05	Find a script's lexer from its shebang line	Bryce Kwon	-3/+5
	Scintillua's detect reads the first line as well as the name, and without it hooks, bin scripts and anything else lacking an extension stayed plain.
2026-10-05	Ship the example tracker links commented out	Bryce Kwon	-5/+8
	An unedited copy sent every #123, Closes: and Bug: mark to bugs.example.com, a link that is wrong for every site.
2026-10-05	Say that a protected repository stays on the index	Bryce Kwon	-0/+8