Age	Commit message (Collapse)	Author	Lines
19 hours	Report a max-stats value that names no period	Bryce Kwon	-2/+27
	A value cgit does not know as a period turns the statistics page off, so a typo such as "decade" read the same as leaving stats off on purpose. The empty value stays quiet because a cached repolist writes it for a repository that turned stats off.
4 days	Answer an empty repository's feed with a feed	Bryce Kwon	-0/+4
4 days	Keep a repository's own settings in a cached scan	Bryce Kwon	-12/+33
	A scanned repository is read back from the cached list under the global settings, so a setting that only differed from them by being off, or by naming the default value, came back as the global one. branch-sort was written only for age, per-path module links not at all, and a filter a repository turned off left no line behind. Writing an empty value for a filter turned off makes the list depend on whether each global filter is set, so the scan key names that too.
4 days	Keep the placeholder out of a cached scan	Bryce Kwon	-2/+9
	The cached list wrote "[no description]" like any other description, so once read back it no longer counted as the placeholder and became the meta description of every repository without one. Repositories read back from the list are also marked as having had their description file read, since the scan already did, so the index does not open those files again on every request.
4 days	Leave the scan uncached with a negative cache-size	Bryce Kwon	-1/+1
	The page cache counts a cache-size of 0 or less as off, but scan-path cached its list for any value other than 0, so a negative one still wrote a list into cache-root.
7 days	Lead an error page's title with the error	Bryce Kwon	-3/+0
	The config error page had a title of its own, in the reverse order, and now takes the same one as any other 404, since its message already says the repository failed to open.
8 days	Log the path of a repository that will not open	Bryce Kwon	-0/+9
	The 404 page names only the repository and nothing reached the log, so a mistyped repo.path left no trace of the path cgit had tried.
8 days	Read the description file without repo.desc	Bryce Kwon	-0/+1
	Only a scanned repository fell back to its description file, so one listed in cgitrc without repo.desc showed "[no description]" however its file read. repo.desc may follow repo.path, so the file is read where a page shows the description, which also spares every other request the reads.
8 days	Report a word where cgitrc expects a number	Bryce Kwon	-67/+67
	atoi reads "yes" or "true" as 0, so repo.hide=yes, or cgit.hide true in a scanned repository's git config, silently did nothing. The values keep that meaning, since honouring them now would hide repositories on upgrade, but each one is logged with its file and line.
8 days	Report a cgitrc or include that cannot be read	Bryce Kwon	-2/+20
	A missing or unreadable cgitrc left only "No repositories found" and an empty log, the commonest first mistake with no trace of its cause. A scanned repository's own cgitrc stays quiet, since most have none.
8 days	Keep a scan with a negative ttl for good	Bryce Kwon	-1/+2
	"The cache" promises that a negative ttl never expires, but no age was ever below a negative cache-scan-ttl, so every request started a background rescan.
8 days	List scanned repositories in path order	Bryce Kwon	-0/+1
	readdir hands entries back in whatever order the filesystem keeps them, so proj111 could come before proj105 and a section could start twice. section-sort is off by default to keep the order written in cgitrc, and a scan has none to keep.
8 days	Key the cached scan on every setting it uses	Bryce Kwon	-5/+57
	Two cgitrc files sharing a cache-root read one list, so strict-export and trust-scan-config set in one applied to the other, and a changed setting stayed stale until the list expired. The first request after an upgrade scans again, and the files under the old names are never read.
8 days	Reset the repository title before reusing it	Bryce Kwon	-1/+3
8 days	Keep the repository title in one static buffer	Bryce Kwon	-2/+6
8 days	Drop a query value check that cannot fire	Bryce Kwon	-3/+0
8 days	Share one lock-file helper between the caches	Bryce Kwon	-35/+3
8 days	Keep the script name local to prepare_context	Bryce Kwon	-4/+1
9 days	Move cgit.c's own helpers out of shared.c	Bryce Kwon	-6/+78
9 days	Spell the version banner cgit	Bryce Kwon	-1/+1
9 days	Drop ui-blob's constant file_only arguments	Bryce Kwon	-1/+1
9 days	Keep the query string parser beside its one caller	Bryce Kwon	-0/+17
9 days	Open and close each page through the layout calls	Bryce Kwon	-8/+4
9 days	Sort with git's QSORT	Bryce Kwon	-1/+1
	QSORT skips a list of fewer than two entries, so an empty list's null base never reaches qsort, which is what cgit_qsort was written for.
9 days	Allocate formatted strings with git's xstrfmt	Bryce Kwon	-4/+4
9 days	Lock the cached repolist with flock	Bryce Kwon	-9/+4
	The slot lock has to be an flock, since an exec filter drops a record lock when it closes the stdout a fill writes through. The scan only got by with fcntl because nothing reopens its file while it runs. One kind of lock lets the two share their code, and on Linux, where the kinds never see each other, an flock on the scan's file now holds a scan off like any other.
9 days	Open the lock files close-on-exec	Bryce Kwon	-1/+1
	Each exec filter and snapshot compressor a fill runs inherited the slot's lock descriptor beside the stdout it writes into. An flock lasts until its last copy closes and nothing waits for a process a filter leaves behind, so a fill killed before its rename could leave the slot locked, and served stale or uncached, for as long as such a process lived. The scan holds its lock across no exec and opens the same way so that the two stay alike.
9 days	Use the parser's INT_MAX for every snapshot format	Bryce Kwon	-5/+1
	The snapshots parser already answers all with INT_MAX, so cgit.c needed no value of its own for the same mask.
9 days	Hand back the fallback branch rather than a copy	Bryce Kwon	-13/+4
9 days	Drop dead checks and a repeated filter cleanup	Bryce Kwon	-12/+7
	build_snapshot_setting always returns a buffer, both commit-sort values are tested on their own, authenticate_post ends the process, and the filters are cleaned up by the atexit handler once cmd_main returns.
9 days	Cap the search with xstrndup alone	Bryce Kwon	-4/+1
9 days	Rename prepare_repo_env to open_repo	Bryce Kwon	-2/+2
	It opens the repository and loads its notes, while cgit_prepare_repo_env exports the CGIT_REPO_ variables, and the two names were one prefix apart.
9 days	Explain the notes setup in one comment	Bryce Kwon	-4/+3
9 days	Let scan_tree choose the project list itself	Bryce Kwon	-12/+3
	Three callers wrote out the same choice, and the header already says a scan visits only the listed paths when a project list is set.
9 days	Drop the command line switches the query covers	Bryce Kwon	-11/+0
	--repo= only stored the name, so it never selected a repository, and --query= already reaches what the other four set, with the offset clamped the way a request's is.
9 days	Drop the defaults the memset already sets	Bryce Kwon	-17/+0
	prepare_context zeroes the whole context first, and the repository list is a global, so neither needs its zeros written out again.
9 days	Mark the static pages in the command table	Bryce Kwon	-28/+2
	The table already records what each page needs, and a second list of page names in cgit.c had to be kept in step with it by hand.
9 days	Set the virtual root from SCRIPT_NAME up front	Bryce Kwon	-6/+5
	The script name always holds a value, so the fallback after parsing fired whenever cgitrc left virtual-root unset. The root is now set with the other defaults, for cgitrc to replace. A die while cgitrc is read is the one change, and its page now links the root with the trailing slash every other page has.
12 days	Offer the versions as an option	Bryce Kwon	-0/+2
	enable-version-info brings back the cgit and git versions that 872bd7c took off the footer and the generator tag, for a site that wants them, and the version f7d2b83 put on the signature of patches now follows it too. It stays off by default for the reason 872bd7c gave.
13 days	Name the page first in every title	Bryce Kwon	-1/+1
	Summary, about, log, refs, tag and stats pages shared one title, so tabs, history and search results could not tell them apart. Titles now read page, repository and site, with root-title as the site, and the description stays in the meta description, where search engines read it.
2026-10-22	Sign patches with the cgit version	Bryce Kwon	-0/+2
	git format-patch ends each patch with the version of git that wrote it, and the bare "cgit" that 872bd7c left in its place said less. The version is written as git writes its own, without the v of the tag, so a release build signs with "cgit 2.9.0". The footer and the generator tag still leave versions out.
2026-10-17	Isolate git from HOME before git's own setup	Bryce Kwon	-3/+5
	Git reads the global config for its trace settings before cmd_main is reached, so the isolation there came too late and every request probed $HOME/.gitconfig. The home-access test had passed only because access is not a syscall of its own everywhere, so it now traces every call that takes a path.
2026-10-16	Sort an empty list without handing qsort a null	Bryce Kwon	-1/+1
	Every list sorted here is null until its first entry, and C leaves a null base undefined even with nothing to sort. glibc declares it nonnull, and a UBSan build aborted the stats page of a repository with no commits in the window.
2026-10-15	Pass over a notes ref that names no tree	Bryce Kwon	-3/+14
	A pusher can point refs/notes/commits or a signature notes ref at any object, and git dies loading one that is no tree, which ended every page of the repository, the dumb transport included.
2026-09-27	Keep string literals behind const pointers	Bryce Kwon	-1/+1
	Git's DEVELOPER=1 build turns on -Wwrite-strings as an error, and the literals stored through plain char pointers failed cgit's own objects there. The exec filter's argv takes the cast execvp needs once, the way git's run-command does.
2026-09-27	Remove what the version removal left behind	Bryce Kwon	-2/+0
2026-09-27	Cache every branch page under cache-dynamic-ttl	Bryce Kwon	-7/+2
	The dynamic ttl only applied when the url named a branch with h=, so the log, tree and refs of the default branch, which never carry one, fell back to cache-summary-ttl. The manual already gives each ttl the scope the code now uses.
2026-09-27	Gate a readme ending in a colon like a disk path	Bryce Kwon	-4/+2
	trust-scan-config passed any readme holding a colon as a tracked file, while the parser takes one only when a path follows the colon, so a scanned repository could still name a file on disk outside itself.
2026-09-24	End a request quietly when the client has gone	Bryce Kwon	-1/+3
	A write that failed with EPIPE on an uncached page died into an error page, which died again at exit when the page could not be sent either, and git logged a recursion warning on every dropped connection. A filter that exits early fails a write the same way, so the quiet exit is kept for writes that reach the client itself.
2026-09-22	Stop caching clone files and oversized responses	Bryce Kwon	-1/+19
	The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. cache-max-slot-size, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced.