Several vulnerabilities were found in the gix packages[^1][^2][^3]. Update the packages to their latest versions which include the fixes. The only required change is in `ls_refs`. `RefPrefixes` was introduced and this fixes the issue with `ref-prefix`. This should now improve the ls-refs stage and only return references that the client is asking for, as opposed to all references. [^1]: https://github.com/radicle-dev/heartwood/security/dependabot/38 [^2]: https://github.com/radicle-dev/heartwood/security/dependabot/39 [^3]: https://github.com/radicle-dev/heartwood/security/dependabot/36 |
||
|---|---|---|
| .. | ||
| fetch.rs | ||
| ls_refs.rs | ||