Fixes [CVE-2026-0810]. The `gix` crates require updating due to the security vulnerability above. They require updating together in lock-step so both `radicle-fetch` and `radicle-oid` are affected. `radicle-oid` handles the non-exhaustive nature of `ObjectId`. `radicle-fetch` updates to the new API types, however, this comes with some updates to the `ls_refs` protocol. A regression is documented in [gitoxide issue 2429]. The regression highlighted that it is the duty of the caller to also filter the outcome of ls-refs, and `ref-prefix` is simply an optimisation. The ls-refs code is refactored to better represent and handle this operation. [CVE-2026-0810]: https://www.cve.org/CVERecord?id=CVE-2026-0810 [gitoxide issue 2429]: https://github.com/GitoxideLabs/gitoxide/issues/2429 |
||
|---|---|---|
| .. | ||
| src | ||
| Cargo.toml | ||