Age	Commit message (Collapse)	Author	Lines
20 hours	Diff without asking xdiff for a minimal result	Bryce Kwon	-1/+3
	XDF_NEED_MINIMAL turns off the cost limit in xdiff, so a file whose lines were reordered took time quadratic in its length: 2.1 s for one of 40000 lines, now 38 ms. Git leaves it off by default as well.
24 hours	Hold object sizes in size_t as git 2.55 does	Bryce Kwon	-4/+4
	Git 2.55 moved object sizes from unsigned long to size_t. The two are the same type on 64-bit hosts, but not on a 32-bit one, where GCC 14 rejects the mismatched pointers, so cgit stopped compiling there.
39 hours	Share the max-blob-size check and its refusal	Bryce Kwon	-3/+6
	Five copies of the test and four of the error page had to agree by hand. The new check pins the four refusals, which no test covered.
39 hours	Mark the parameters callbacks leave unused	Bryce Kwon	-1/+1
	With these and the two changes before them, cgit builds under git's DEVELOPER=1 settings, which also annotate their own callbacks this way.
39 hours	Pass callbacks to git by address	Bryce Kwon	-4/+4
	ISO C has no conversion between a function pointer and void *, so the callbacks handed through git's data pointers and the write found by dlsym stopped the pedantic half of a DEVELOPER=1 build.
39 hours	Keep string literals behind const pointers	Bryce Kwon	-1/+1
	Git's DEVELOPER=1 build turns on -Wwrite-strings as an error, and the literals stored through plain char pointers failed cgit's own objects there. The exec filter's argv takes the cast execvp needs once, the way git's run-command does.
39 hours	Skip an indented comment in the mimetype file	Bryce Kwon	-3/+1
	Only a hash in the first column marked a comment, so an indented one was read as the type "#" for every word after it. The manual already describes comments by their first non-blank character.
39 hours	Keep date-format=local-local from failing pages	Bryce Kwon	-1/+8
	The guard took local as a name that may carry the -local suffix, but git reads local only as a whole alias of default-local and dies on anything after it, so that one value turned every page into a 500.
39 hours	Gate a readme ending in a colon like a disk path	Bryce Kwon	-0/+7
	trust-scan-config passed any readme holding a colon as a tracked file, while the parser takes one only when a path follows the colon, so a scanned repository could still name a file on disk outside itself. The two now share one test.
39 hours	Keep a repository with an empty url ignored	Bryce Kwon	-1/+0
	The field resets at the end of cgit_add_repo cleared the ignore flag that the empty url branch had just set, so such a repository was listed on the index and selectable with ?r=, where every link to it read the byte before its url.
2026-10-01	Replace the stray bytes of text that is not UTF-8	Bryce Kwon	-0/+49
	A commit whose encoding header names something iconv cannot convert, or whose text is labelled UTF-8 without being it, reached a page declared UTF-8 with its bytes untouched. The atom feed already replaced them, so its UTF-8 reader moves to shared.c and every ident, subject, message and tag text passes through it.
2026-10-01	Limit rawdiff to the requested path	Bryce Kwon	-11/+16
	The diff and patch pages honour the path in the url, which the parameter table documents for every page, but rawdiff never handed it to git and answered with the whole diff.
2026-09-27	Rename enable-trailers to enable-commit-trailers	Bryce Kwon	-1/+1
2026-09-21	Harden the request path, scan and error recovery	Bryce Kwon	-26/+79
2026-09-15	Apply the mailmap at HEAD to every ident	Bryce Kwon	-0/+1
2026-09-15	Split trailers out of the commit message	Bryce Kwon	-0/+2
2026-09-06	Clean up the whole tree	Bryce Kwon	-30/+17
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-15/+9
2026-09-06	Rename the inconsistent config keys	Bryce Kwon	-1/+1
	noplainemail enable-plain-email noheader enable-header cache-root-ttl cache-index-ttl cache-repo-ttl cache-summary-ttl cache-scanrc-ttl cache-scan-ttl agefile age-file renamelimit rename-limit extra-head-content head-content
2026-09-06	Fold `enable-stats` back into `max-stats`	Bryce Kwon	-1/+0
	A `max-stats` period enables the page again, as it did before v2.2.0, so one key does both jobs.
2026-08-24	Resolve submodule links from `.gitmodules`	Bryce Kwon	-0/+1
2026-08-23	Log scan lock failures that are not contention	Bryce Kwon	-2/+3
2026-08-14	Remove the repository homepage feature	Bryce Kwon	-1/+0
2026-08-12	Restyle the sources and fix the audit's findings	Bryce Kwon	-317/+303
2026-08-06	Settle the names, types and layout of the sources	Bryce Kwon	-34/+36
2026-08-01	Add `enable-relative-dates` and `date-format`	Bryce Kwon	-0/+33
2026-07-25	Cap diff blobs by `max-blob-size`	Bryce Kwon	-3/+22
	The diff family inflated a blob of any size just to render it. A file over the limit is reported as binary instead.
2026-07-25	Skip a ref whose object cannot be parsed	Bryce Kwon	-1/+7
	A dangling or unreadable ref was described through a null object.
2026-07-20	Gate the stats page and add a language breakdown	Bryce Kwon	-0/+1
	`max-stats` only bounds the selectable periods now and no longer doubles as the enable switch. The tree walk runs before the history walk on purpose. Releasing commit memory while walking history resets each commit slab index, and a commit graph lookup afterwards would read another commit slot and walk the wrong tree. The stats fixture writes a commit graph so the tests cover that path. The history walk bounds the window in process rather than passing a formatted since date to `setup_revisions`, and parses each commit once.
2026-07-19	Remove the owner filter hook	Bryce Kwon	-1/+0
2026-07-16	Point the fork's links and credits at itself	Bryce Kwon	-1/+1
	AUTHORS now records the upstream developers as the project's history rather than as maintainers of the fork.
2026-07-15	Bail out on a read error in `read_first_line`	Bryce Kwon	-2/+11
	`read_in_full` returns a signed -1 on error, which became SIZE_MAX once stored in the size_t length and then wrote a terminator far out of bounds.
2026-07-15	Tolerate a missing or empty repository URL	Bryce Kwon	-1/+2
	`trim_end()` returns NULL when a repo url is empty or all slashes and the later newline trim dereferenced it. The legacy `r=` and `p=about` path also read the last byte of the url without checking it was set.
2026-07-15	Reorganize into source, assets and libraries	Bryce Kwon	-0/+595
	The C sources move to source/, the served files to assets/, the bundled Git submodule to libraries/git and the filter scripts to extensions/. Everything the build generates now lands in build/, so a clean is a single remove and the tree stays clean.