Age	Commit message (Collapse)	Author	Lines
18 hours	Abandon a fill whose last flush fails to write	Bryce Kwon	-2/+4
	The slot being filled was forgotten before the page's final flush, so a write that failed there, on a full disk for one, could not abandon the fill: cgit died into the lock file instead and the visitor got nothing. The mid-page path already delivered the page from the lock file.
18 hours	Widen the cache ttl before multiplying it	Bryce Kwon	-1/+3
	A ttl in the tens of millions of minutes overflowed the int it was multiplied in.
38 hours	Read and write slot keys and pages in full	Bryce Kwon	-2/+2
	xread and xwrite may move fewer bytes than asked. A short write of the key left a slot that could never match, a short read of it reported a collision, and a page write that moved nothing looped for ever.
38 hours	Stop the sendfile loop at the end of a short slot	Bryce Kwon	-0/+4
	sendfile returns zero at the end of the file, and the loop only ended once the offset reached the size recorded when the slot was opened, so a slot cut shorter in between spun the request forever. Only Linux builds this path. A stand-in header type checked it here.
2026-10-01	End a request quietly when the client has gone	Bryce Kwon	-1/+2
	A write that failed with EPIPE on an uncached page died into an error page, which died again at exit when the page could not be sent either, and git logged a recursion warning on every dropped connection. A filter that exits early fails a write the same way, so the quiet exit is kept for writes that reach the client itself.
2026-10-01	Keep clone files and oversized responses out of the cache	Bryce Kwon	-3/+22
	The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. `cache-max-slot-size`, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced.
2026-09-22	Align with spaces instead of tabs	Bryce Kwon	-7/+7
2026-09-21	Harden the request path, scan and error recovery	Bryce Kwon	-22/+49
2026-09-21	Log a cache slot that cannot be published	Bryce Kwon	-2/+14
2026-09-21	Fail cleanly when a filter cannot run	Bryce Kwon	-0/+3
	A filter program that could not be run answered with two responses, and a filter that exited without reading its input ended cgit with the page half written.
2026-09-06	Clean up the whole tree	Bryce Kwon	-34/+29
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-24/+14
2026-08-23	Log scan lock failures that are not contention	Bryce Kwon	-7/+7
2026-08-23	Give up a scan or slot whose lock file was renamed	Bryce Kwon	-0/+13
2026-08-23	Serve nothing further once a fill is abandoned	Bryce Kwon	-3/+34
2026-08-22	Log when a cache slot is claimed by a colliding key	Bryce Kwon	-0/+8
2026-08-12	Restyle the sources and fix the audit's findings	Bryce Kwon	-218/+246
2026-08-08	Bound the search and cache key a request can ask	Bryce Kwon	-0/+15
2026-08-08	Gather page output into one buffer	Bryce Kwon	-0/+1
2026-08-06	Settle the names, types and layout of the sources	Bryce Kwon	-10/+9
2026-07-25	Bound the cache listing key output	Bryce Kwon	-2/+9
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-1/+1
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-15	Reorganize into source, assets and libraries	Bryce Kwon	-0/+475
	The C sources move to source/, the served files to assets/, the bundled Git submodule to libraries/git and the filter scripts to extensions/. Everything the build generates now lands in build/, so a clean is a single remove and the tree stays clean.