@@ -40,6 +40,9 @@ UI, Workflows & Features
4040   questioning.  Now it asks for confirmation when the answer looks
4141   too short to be a valid encoding name.
4242
43+  * When "git apply --whitespace=fix" fixed whitespace errors in the
44+    common context lines, the command reports that it did so.
45+ 
4346
4447Performance, Internal Implementation, Development Support etc.
4548
@@ -222,3 +225,24 @@ notes for details).
222225 * "update-index --refresh" used to leak when an entry cannot be
223226   refreshed for whatever reason.
224227   (merge bc1c2ca sb/plug-leak-in-make-cache-entry later to maint).
228+ 
229+  * The "interpolated-path" option of "git daemon" inserted any string
230+    client declared on the "host=" capability request without checking.
231+    Sanitize and limit %H and %CH to a saner and a valid DNS name.
232+    (merge b485373 jk/daemon-interpolate later to maint).
233+ 
234+  * "git daemon" looked up the hostname even when "%CH" and "%IP"
235+    interpolations are not requested, which was unnecessary.
236+    (merge dc8edc8 rs/daemon-interpolate later to maint).
237+ 
238+  * Even though we officially haven't dropped Perl 5.8 support, the
239+    Getopt::Long package that came with it does not support "--no-"
240+    prefix to negate a boolean option; manually add support to help
241+    people with older Getopt::Long package.
242+    (merge f471494 km/send-email-getopt-long-workarounds later to maint).
243+ 
244+  * "git apply" was not very careful about reading from, removing,
245+    updating and creating paths outside the working tree (under
246+    --index/--cached) or the current directory (when used as a
247+    replacement for GNU patch).
248+    (merge e0d201b jc/apply-beyond-symlink later to maint).
0 commit comments