Age	Commit message (Collapse)	Author	Lines
4 days	Keep a repository's own settings in a cached scan	Bryce Kwon	-0/+47
	A scanned repository is read back from the cached list under the global settings, so a setting that only differed from them by being off, or by naming the default value, came back as the global one. branch-sort was written only for age, per-path module links not at all, and a filter a repository turned off left no line behind. Writing an empty value for a filter turned off makes the list depend on whether each global filter is set, so the scan key names that too.
4 days	Keep the placeholder out of a cached scan	Bryce Kwon	-0/+12
	The cached list wrote "[no description]" like any other description, so once read back it no longer counted as the placeholder and became the meta description of every repository without one. Repositories read back from the list are also marked as having had their description file read, since the scan already did, so the index does not open those files again on every request.
4 days	Leave the scan uncached with a negative cache-size	Bryce Kwon	-0/+15
	The page cache counts a cache-size of 0 or less as off, but scan-path cached its list for any value other than 0, so a negative one still wrote a list into cache-root.
8 days	Keep a scan with a negative ttl for good	Bryce Kwon	-0/+21
	"The cache" promises that a negative ttl never expires, but no age was ever below a negative cache-scan-ttl, so every request started a background rescan.
8 days	Key the cached scan on every setting it uses	Bryce Kwon	-3/+19
	Two cgitrc files sharing a cache-root read one list, so strict-export and trust-scan-config set in one applied to the other, and a changed setting stayed stale until the list expired. The first request after an upgrade scans again, and the files under the old names are never read.
8 days	Test a lock won after its file became the slot	Bryce Kwon	-1/+29
8 days	Add the shared config writers and cgit_rc	Bryce Kwon	-23/+23
	The helpers are named by kind. cgitrc_repo and cgitrc_copy write the config file named first, and cgit_url, cgit_query and cgit_rc run cgit, each named after what it is handed first. A repository copies its defaults from the globals read before its repo.url, so cgitrc_repo places every setting itself, and a global can no longer land where it silently stops applying. The t00xx and t01xx files move to them here.
9 days	Share one lock-file helper between the caches	Bryce Kwon	-0/+25
9 days	Let go of a slot lock that cannot take its key	Bryce Kwon	-0/+15
	A failed truncate or key write returned with the descriptor still open, so the lock was held while the page rendered uncached and the file was left behind. It is removed before its last close, as every holder does.
9 days	Keep lock contention out of the error log	Bryce Kwon	-2/+20
	process_slot logged every failure to lock, so each request that found its slot being filled left a line, while refresh_slot logged none, so an expired slot in a directory the server cannot write was served stale for good without a word. lock_slot now logs the step that failed, as the scan does, and leaves out only another request at work.
9 days	Lock the cached repolist with flock	Bryce Kwon	-0/+38
	The slot lock has to be an flock, since an exec filter drops a record lock when it closes the stdout a fill writes through. The scan only got by with fcntl because nothing reopens its file while it runs. One kind of lock lets the two share their code, and on Linux, where the kinds never see each other, an flock on the scan's file now holds a scan off like any other.
9 days	Open the lock files close-on-exec	Bryce Kwon	-0/+27
	Each exec filter and snapshot compressor a fill runs inherited the slot's lock descriptor beside the stdout it writes into. An flock lasts until its last copy closes and nothing waits for a process a filter leaves behind, so a fill killed before its rename could leave the slot locked, and served stale or uncached, for as long as such a process lived. The scan holds its lock across no exec and opens the same way so that the two stay alike.
9 days	Tidy the cache test's helpers and outputs	Bryce Kwon	-24/+18
	The header's last sentence named two of the many later subjects, so it goes too. The second request's stderr is still kept, for the lock tests that come next.
9 days	Use test_dir_is_empty for the empty cache checks	Bryce Kwon	-16/+8
	The library's check also lists whatever was left behind when it fails.
2026-10-16	Lock a cache slot with flock	Bryce Kwon	-0/+38
	The slot lock was a POSIX record lock, which a process loses the moment any descriptor on the file closes, and the fill puts the lock file on stdout, which every exec filter and snapshot compressor closes with its dup2. A second request on the slot could then rebuild it under the first and splice the two pages. An flock holds until the last descriptor goes.
2026-10-16	Abandon a fill whose last flush fails to write	Bryce Kwon	-0/+16
	The slot being filled was forgotten before the page's final flush, so a write that failed there, on a full disk for one, could not abandon the fill. cgit died into the lock file instead and the visitor got nothing. The mid-page path already delivered the page from the lock file.
2026-10-03	Compare the cached and uncached pages whole	Bryce Kwon	-5/+1
	The footer lost the time it was generated at, and both runs come from the same binary, so the two pages have nothing to differ in.
2026-09-27	Cache every branch page under cache-dynamic-ttl	Bryce Kwon	-0/+19
	The dynamic ttl only applied when the url named a branch with h=, so the log, tree and refs of the default branch, which never carry one, fell back to cache-summary-ttl. The manual already gives each ttl the scope the code now uses.
2026-09-22	Stop caching clone files and oversized responses	Bryce Kwon	-0/+43
	The dumb transport reads files that already sit on the disk, so a pack copied into a slot cost that disk twice and the request a second write of every byte. A snapshot took a slot whatever its size, so a visitor naming distinct refs and ids could fill the cache root with archives. cache-max-slot-size, 64 MB unless set, now serves a larger response from the lock file and drops it, along with any expired copy it would have replaced.
2026-09-15	Test the hardening pass	Bryce Kwon	-5/+4
2026-09-07	Clean up the whole tree	Bryce Kwon	-4/+2
2026-09-06	Trim the comments and dead code across the tree	Bryce Kwon	-6/+4
2026-08-24	Deduplicate the cache test request lists	Bryce Kwon	-48/+25
2026-08-23	Renumber the test scripts into themed ranges	Bryce Kwon	-0/+0
	The numbering walks outward from the ground the suite stands on. - t000x for the git version, html validity and the cache - t01xx for page content, one script per page - t02xx for filters, submodule links, dates and limits, which cut across pages - t03xx for defence, the security regressions and the $HOME promise - t04xx for the helper tools under tools/