-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathReleaseNotes.html
More file actions
3458 lines (2573 loc) · 240 KB
/
Copy pathReleaseNotes.html
File metadata and controls
3458 lines (2573 loc) · 240 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=UTF-8">
<link rel="stylesheet"
href="usr/share/git/ReleaseNotes.css">
</head>
<body class="details">
<div class="links">
<ul>
<li><a href="https://gitforwindows.org/">homepage</a></li>
<li><a href="https://github.com/git-for-windows/git/wiki/FAQ">faq</a></li>
<li><a href="https://gitforwindows.org/#contribute">contribute</a></li>
<li><a href="https://gitforwindows.org/#contribute">bugs</a></li>
<li><a href="mailto:git@vger.kernel.org">questions</a></li>
</ul>
<div id="git-for-windows-logo">
<div id="left-pane"></div>
<div id="top-pane"></div>
<div id="right-pane"></div>
<div id="bottom-pane"></div>
<div id="diagonal-pipe"></div>
<div id="vertical-pipe"></div>
<div id="top-ball"></div>
<div id="bottom-ball"></div>
<div id="right-ball"></div>
</div>
</div>
<div class="content">
<h1>Git for Windows v2.41.0 Release Notes</h1>
<p>Latest update: June 1st 2023</p>
<h2>Introduction</h2>
<p>These release notes describe issues specific to the Git for Windows release. The release notes covering the history of the core git commands can be found <a href="https://github.com/git/git/tree/HEAD/Documentation/RelNotes">in the Git project</a>.</p>
<p>See <a href="http://git-scm.com/">http://git-scm.com/</a> for further details about Git including ports to other operating systems. Git for Windows is hosted at <a href="https://gitforwindows.org/">https://gitforwindows.org/</a>.</p>
<h1 id="known-issues" class="collapsible">Known issues</h1>
<ul>
<li>On Windows 10 before 1703, or when Developer Mode is turned off, special permissions are required when cloning repositories with symbolic links, therefore support for symbolic links is disabled by default. Use <code>git clone -c core.symlinks=true <URL></code> to enable it, see details <a href="https://github.com/git-for-windows/git/wiki/Symbolic-Links">here</a>.</li>
<li>If configured to use Plink, you will have to connect with <a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/">putty</a> first and accept the host key.</li>
<li>Some console programs, most notably non-MSYS2 Python, PHP, Node and OpenSSL, interact correctly with MinTTY only when called through <code>winpty</code> (e.g. the Python console needs to be started as <code>winpty python</code> instead of just <code>python</code>).</li>
<li><p>If you specify command-line options starting with a slash, POSIX-to-Windows path conversion will kick in converting e.g. "<code>/usr/bin/bash.exe</code>" to "<code>C:\Program Files\Git\usr\bin\bash.exe</code>". When that is not desired -- e.g. "<code>--upload-pack=/opt/git/bin/git-upload-pack</code>" or "<code>-L/regex/</code>" -- you need to set the environment variable <code>MSYS_NO_PATHCONV</code> temporarily, like so:</p>
<blockquote>
<p><code>MSYS_NO_PATHCONV=1 git blame -L/pathconv/ msys2_path_conv.cc</code></p>
</blockquote>
<p>Alternatively, you can double the first slash to avoid POSIX-to-Windows path conversion, e.g. "<code>//usr/bin/bash.exe</code>".</p></li>
<li>Windows drives are normally recognized within the POSIX path as <code>/c/path/to/dir/</code> where <code>/c/</code> (or appropriate drive letter) is equivalent to the <code>C:\</code> Windows prefix to the <code>\path\to\dir</code>. If this is not recognized, revert to the <code>C:\path\to\dir</code> Windows style.</li>
<li>Git for Windows will not allow commits containing DOS-style truncated 8.3-format filenames ending with a tilde and digit, such as <code>mydocu~1.txt</code>. A workaround is to call <code>git config core.protectNTFS false</code>, which is not advised. Instead, add a rule to .gitignore to ignore the file(s), or rename the file(s).</li>
<li>Many Windows programs (including the Windows Explorer) have problems with directory trees nested so deeply that the absolute path is longer than 260 characters. Therefore, Git for Windows refuses to check out such files by default. You can overrule this default by setting <code>core.longPaths</code>, e.g. <code>git clone -c core.longPaths=true ...</code>.</li>
<li>Some commands are not yet supported on Windows and excluded from the installation.</li>
<li>As Git for Windows is shipped without Python support, <code>git p4</code> (which is backed by a Python script) is not supported.</li>
<li>The Quick Launch icon will only be installed for the user running setup (typically the Administrator). This is a technical restriction and will not change.</li>
<li>Older versions of the Windows Explorer do <em>not</em> calculate Git for Windows' on-disk size correctly, as it is unaware of hard links. Therefore, it might look like Git for Windows takes up 1.5GB when in reality it is about a third of that.</li>
<li>Git command hints are designed for a POSIX shell, this can lead to issues when using them <strong>as is</strong> in non-POSIX shells like PowerShell, <a href="https://github.com/git-for-windows/git/issues/2785">such as this ticket</a>.</li>
<li>When pushing via the <code>git://</code> protocol, Git for Windows may hang indefinitely. The last console output in this case is typically <code>Writing objects: 100%</code>. Until issue <a href="https://github.com/git-for-windows/git/issues/907">#907</a> is addressed, run this command once as a work-around: <code>git config sendpack.sideband false</code>.</li>
<li><p>Git for Windows executables linked to <code>msys-2.0.dll</code> are not compatible with Mandatory ASLR and may crash if system-wide Mandatory ASLR is enabled in Windows Exploit protection. A workaround is to disable ASLR for all executables in <code>C:\Program Files\Git\usr\bin</code>, run in administrator powershell (replace <code>$_.Name</code> with <code>$_</code> to use full path to executable instead of name):</p>
<blockquote>
<p><code>Get-Item -Path "C:\Program Files\Git\usr\bin\*.exe" | %{ Set-ProcessMitigation -Name $_.Name -Disable ForceRelocateImages }</code></p>
</blockquote>
<p>Alternatively, you can disable Mandatory ASLR completely in Windows Exploit protection.</p></li>
</ul>
<p>Should you encounter other problems, please first search <a href="https://github.com/git-for-windows/git/issues">the bug tracker</a> (also look at the closed issues) and <a href="http://groups.google.com/group/git-for-windows">the mailing list</a>, chances are that the problem was reported already. Also make sure that you use an up to date Git for Windows version (or a <a href="https://wingit.blob.core.windows.net/files/index.html">current snapshot build</a>). If it has not been reported, please follow <a href="https://github.com/git-for-windows/git/wiki/Issue-reporting-guidelines">our bug reporting guidelines</a> and <a href="https://github.com/git-for-windows/git/issues/new">report the bug</a>.</p>
<h2 id="licenses" class="collapsible">Licenses</h2><div>
<p>Git is licensed under the GNU General Public License version 2.</p>
<p>Git for Windows also contains Embedded CAcert Root Certificates. For more information please go to <a href="https://www.cacert.org/policy/RootDistributionLicense.php">https://www.cacert.org/policy/RootDistributionLicense.php</a>.</p>
<p>This package contains software from a number of other projects including Bash, zlib, curl, tcl/tk, perl, MSYS2 and a number of libraries and utilities from the GNU project, licensed under the GNU General Public License. Likewise, it contains Perl which is dual licensed under the GNU General Public License and the Artistic License.</p>
</div><h2 id="v2.41.0" nr="1" class="collapsible"> <a name="latest">Changes in v2.41.0</a><br /><small>since v2.40.1 (April 25th 2023)</h2></small><div>
<p>As announced previously, Git for Windows will drop support for Windows 7 and for Windows 8 in one of the next versions, following <a href="https://www.msys2.org/docs/windows_support/">Cygwin's and MSYS2's lead</a> (Git for Windows relies on MSYS2 for components such as Bash and Perl).</p>
<p>Following the footsteps of the MSYS2 and Cygwin projects on which Git for Windows depends, the 32-bit variant of Git for Windows <a href="https://gitforwindows.org/32-bit.html">is being phased out</a>. As of Git for Windows v2.41.0, the 32-bit variant of the POSIX emulation layer (known as "MSYS2 runtime", powering Git Bash among other components shipped with Git for Windows) is in maintenance mode and will only see security bug fixes (if any). Users relying on 32-bit Git for Windows are highly encouraged to switch to the 64-bit version whenever possible.</p>
<p>Please also note that the code-signing certificate used to sign Git for Windows' executables was renewed and may cause Smart Screen to show a warning until the certificate has gained a certain minimum reputation.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.41.0/Documentation/RelNotes/2.41.0.txt">Git v2.41.0</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-9.3">OpenSSH v9.3p1</a></li>
<li>Comes with <a href="https://github.com/mintty/mintty/releases/tag/3.6.4">MinTTY v3.6.4</a>.</li>
<li>The Git for Windows installer now <a href="https://github.com/git-for-windows/build-extra/pull/491">also includes</a> the Git LFS documentation (i.e. <code>git help git-lfs</code> now works).</li>
<li>Comes with <a href="http://search.cpan.org/dist/perl-5.36.1/pod/perldelta.pod">Perl v5.36.1</a>.</li>
<li>Comes with <a href="https://dev.gnupg.org/source/gnupg/browse/STABLE-BRANCH-2-2/NEWS;gnupg-2.2.41?blame=off">GNU Privacy Guard v2.2.41</a>.</li>
<li>Comes with <a href="https://github.com/git-ecosystem/git-credential-manager/releases/tag/v2.1.2">Git Credential Manager v2.1.2</a>.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://inbox.sourceware.org/cygwin-announce/20230214142733.1052688-1-corinna-cygwin@cygwin.com/">Cygwin 3.4.6</a>. (This does not extend to 32-bit Git for Windows, which <a href="https://github.com/git-for-windows/git/issues/4279">is stuck with v3.3.* of the MSYS2 runtime forever</a>.)</li>
<li>To help with Git for Windows' release mechanics, Git for Windows now ships <a href="https://github.com/git-for-windows/git/pull/4410">with two variants of <code>libcurl</code></a>.</li>
<li>Comes with <a href="https://curl.se/changes.html#8_1_2">cURL v8.1.2</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1u</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Git GUI's <code>Repository>Explore Working Copy</code> <a href="https://github.com/git-for-windows/git/issues/4356">was broken since v2.39.1</a>, which has been fixed.</li>
<li>The MSYS2 runtime was adjusted to <a href="https://github.com/git-for-windows/git/issues/4429">prepare for an upcoming Windows version</a>.</li>
</ul>
</div><h2 id="v2.40.1" nr="2" class="collapsible"> Changes in v2.40.1<br /><small>since v2.40.0 (March 14th 2023)</h2></small><div>
<p>This is a security release, addressing <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-gq5x-v87v-8f7g">CVE-2023-29012</a>, <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-g4fv-xjqw-q7jm">CVE-2023-29011</a>, <a href="https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844">CVE-2023-29007</a>, <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-9w66-8mq8-5vm8">CVE-2023-25815</a> and <a href="https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx">CVE-2023-25652</a>.</p>
<p>As announced previously, Git for Windows will drop support for Windows 7 and for Windows 8 in one of the next versions, following <a href="https://www.msys2.org/docs/windows_support/">Cygwin's and MSYS2's lead</a> (Git for Windows relies on MSYS2 for components such as Bash and Perl).</p>
<p>Also following the footsteps of the MSYS2 and Cygwin projects on which Git for Windows depends, the 32-bit variant of Git for Windows <a href="https://gitforwindows.org/32-bit.html">is nearing its end of support</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.40.1/Documentation/RelNotes/2.40.1.txt">Git v2.40.1</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-gq5x-v87v-8f7g">CVE-2023-29012</a>, a vulnerability where starting Git CMD would execute <code>doskey.exe</code> in the current directory, if it exists.</li>
<li>Addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-g4fv-xjqw-q7jm">CVE-2023-29011</a>, a vulnerability where the SOCKS5 proxy called <code>connect.exe</code> is susceptible to picking up an untrusted configuration on multi-user machines.</li>
<li>Addresses <a href="https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844">CVE-2023-29007</a>, a vulnerability where <code>git submodule deinit</code> can inadvertently introduce malicious changes into the Git config file.</li>
<li>Addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-9w66-8mq8-5vm8">CVE-2023-25815</a>, a vulnerability where Git can unexpectedly show crafted "localized" messages written by another user on a multi-user machine.</li>
<li>Addresses <a href="https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx">CVE-2023-25652</a>, a vulnerability where <code>git apply --reject</code> could follow symbolic links to write files outside the worktree.</li>
</ul>
</div><h2 id="v2.40.0" nr="3" class="collapsible"> Changes in v2.40.0<br /><small>since v2.39.2 (February 14th 2023)</h2></small><div>
<p>As announced previously, Git for Windows will drop support for Windows 7 and for Windows 8 in one of the next versions, following <a href="https://www.msys2.org/docs/windows_support/">Cygwin's and MSYS2's lead</a> (Git for Windows relies on MSYS2 for components such as Bash and Perl).</p>
<p>Also following the footsteps of the MSYS2 and Cygwin projects on which Git for Windows depends, the 32-bit variant of Git for Windows <a href="https://gitforwindows.org/32-bit.html">is nearing its end of support</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.40.0/Documentation/RelNotes/2.40.0.txt">Git v2.40.0</a>.</li>
<li>In the olden Git days, there were "dashed" Git commands (e.g. <code>git-commit</code> instead of <code>git commit</code>). These haven't been supported for interactive use in a really, really long time. But they still worked in Git aliases and hooks ("scripts"). Since Git v1.5.4 (released on February 2nd, 2008), it was discouraged/deprecated to use dashed Git commands even in scripts. As of this version, Git for Windows <a href="https://github.com/git-for-windows/git/pull/4252">no longer supports these dashed commands</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.8">tig v2.5.8</a>.</li>
<li>Comes with <a href="https://tiswww.case.edu/php/chet/bash/NEWS">Bash v5.2 patchlevel 15</a>.</li>
<li>Comes with <a href="https://github.com/openssl/openssl/releases/tag/OpenSSL_1_1_1t">OpenSSL v1.1.1t</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnutls-help/2023-February/004816.html">GNU TLS v3.8.0</a>.</li>
<li>Comes with <a href="https://github.com/curl/curl/releases/tag/curl-7_88_1">cURL v7.88.1</a>.</li>
<li>Comes with <a href="https://github.com/Yubico/libfido2/releases/tag/1.13.0">libfido2 v1.13.0</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.935">Git Credential Manager v2.0.935</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Some commands mishandled absolute paths near the drive root (e.g. <a href="https://github.com/git-for-windows/git/issues/4200"><code>scalar unregister C:/foo</code></a>), which has been <a href="https://github.com/git-for-windows/git/pull/4253">fixed</a>.</li>
<li>When trying to call Cygwin (or for that matter, MSYS2) programs from Git Bash, users would frequently be greeted with <a href="https://github.com/git-for-windows/git/issues/4255">cryptic error messages about a "cygheap"</a> or even just an even more puzzling exit code 127. Many of these calls <a href="https://github.com/git-for-windows/msys2-runtime/pull/48">now</a> <a href="https://github.com/git-for-windows/msys2-runtime/pull/49">succeed</a>, allowing basic interactions. While it is still not possible for, say, Cygwin's <code>vim.exe</code> to interact with the Git Bash's terminal window, it <em>is</em> now possible for Cygwin's <code>zstd.exe</code> in conjuction with Git for Windows' <code>tar.exe</code> to handle <code>.tar.zst</code> archives. </li>
</ul>
</div><h2 id="v2.39.2" nr="4" class="collapsible"> Changes in v2.39.2<br /><small>since v2.39.1 (January 17th 2023)</h2></small><div>
<p>This is a security release, addressing <a href="https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q">CVE-2023-22490</a>, <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-p2x9-prp4-8gvq">CVE-2023-22743</a>, <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-wxwv-49qw-35pm">CVE-2023-23618</a> and <a href="https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh">CVE-2023-23946</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.39.2/Documentation/RelNotes/2.39.2.txt">Git v2.39.2</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-p2x9-prp4-8gvq">CVE-2023-22743</a>, a vulnerability rated "high" making the Git for Windows' installer susceptible to DLL side-loading attacks.</li>
<li>Addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-wxwv-49qw-35pm">CVE-2023-23618</a>, a vulnerability rated "high" where <code>gitk</code> would inadvertently execute programs placed in the worktree.</li>
<li>Addresses <a href="https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q">CVE-2023-22490</a>, a moderate vulnerability allowing for data exfiltration in local clones.</li>
<li>Addresses <a href="https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh">CVE-2023-23946</a>, a moderate vulnerability that would allow crafted patches to trick <code>git apply</code> into writing into files outside the current directory.</li>
</ul>
</div><h2 id="v2.39.1" nr="5" class="collapsible"> Changes in v2.39.1<br /><small>since v2.39.0(2) (December 21st 2022)</h2></small><div>
<p>This is a security release, addressing <a href="https://github.com/git/git/security/advisories/GHSA-475x-2q3q-hvwq">CVE-2022-41903</a>, <a href="https://github.com/git/git/security/advisories/GHSA-c738-c5qq-xg89">CVE-2022-23521</a> and <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-v4px-mx59-w99c">CVE-2022-41953</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.39.1/Documentation/RelNotes/2.39.1.txt">Git v2.39.1</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Addresses <a href="https://github.com/git/git/security/advisories/GHSA-c738-c5qq-xg89">CVE-2022-23521</a>, a critical vulnerability in the <code>.gitattributes</code> parsing that potentially allows malicious code to be executed while cloning.</li>
<li>Addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-v4px-mx59-w99c">CVE-2022-41953</a>, a vulnerability that makes Git GUI's <code>Clone</code> function susceptible to Remote Code Execution attacks.</li>
<li>Addresses <a href="https://github.com/git/git/security/advisories/GHSA-475x-2q3q-hvwq">CVE-2022-41903</a>, a vulnerability that may allow heap overflows and code to be executed inadvertently during a <code>git archive</code> invocation.</li>
<li>A <a href="https://github.com/git-for-windows/git/issues/4194">regression introduced in Git for Windows v2.39.0(2)</a> that prevented cloning from Bitbucket <a href="https://github.com/git-for-windows/MINGW-packages/pull/64">was fixed</a>.</li>
</ul>
</div><h2 id="v2.39.0(2)" nr="6" class="collapsible"> Changes in v2.39.0(2)<br /><small>since v2.39.0 (December 12th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.42">PCRE2 v10.42</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.886">Git Credential Manager v2.0.886</a>.</li>
<li>Comes with <a href="https://github.com/mintty/mintty/releases/tag/3.6.3">MinTTY v3.6.3</a>.</li>
<li>Comes with <a href="https://github.com/curl/curl/releases/tag/curl-7_87_0">cURL v7.87.0</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The installer is expected to stop GPG agents automatically, but there was <a href="https://github.com/git-for-windows/git/issues/4172">a bug</a> that prevented that from working, which <a href="https://github.com/git-for-windows/build-extra/pull/453">has been fixed</a>.</li>
<li>A <a href="https://github.com/git-for-windows/git/issues/4171">regression</a> that caused <code>no_proxy</code> to be ignored was fixed by <a href="https://github.com/git-for-windows/git/issues/4191">upgrading libcurl</a>.</li>
<li>The Git Credential Manager version shipped with Git for Windows v2.39.0 <a href="https://github.com/git-for-windows/git/issues/4165">could not always find its UI helper</a> which was fixed by <a href="https://github.com/git-for-windows/git/issues/4166">upgrading to a fixed version</a>.</li>
<li>A bug in MinTTY caused it to throw a Critical Error when the printer spool service was not started, which was fixed by <a href="https://github.com/git-for-windows/git/issues/4182">upgrading MinTTY</a>.</li>
</ul>
</div><h2 id="v2.39.0" nr="7" class="collapsible"> Changes in v2.39.0<br /><small>since v2.38.1 (October 18th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.39.0/Documentation/RelNotes/2.39.0.txt">Git v2.39.0</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1s</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_86_0">cURL v7.86.0</a>.</li>
<li>The Portable Git edition (which comes as a self-extracting 7-Zip archive) <a href="https://github.com/git-for-windows/build-extra/commit/0240a09014a4fcfd9f487e50d7a09464a2e428b8">now uses the latest 7-Zip version to self-extract</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-9.1">OpenSSH v9.1p1</a>.</li>
<li>It <a href="https://github.com/git-for-windows/MSYS2-packages/commit/6823ee7b329b53f38747f64db8fb8d6de077a0e4">is now possible</a> to generate and use <a href="https://man.openbsd.org/ssh-keygen#FIDO_AUTHENTICATOR">SSH keys protected by security keys</a> (AKA FIDO devices) via Windows Hello, e.g. via <code>ssh-keygen.exe -t ecdsa-sk</code>.</li>
<li>Portable Git no longer configures <code>color.diff</code>, <code>color.status</code> and <code>color.branch</code> individually, but <a href="https://github.com/git-for-windows/build-extra/pull/442">configures <code>color.ui</code> instead</a>, which makes it easier to override the default.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnutls-help/2022-September/004765.html">GNU TLS v3.7.8</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.877">Git Credential Manager Core v2.0.877</a>.</li>
<li>Comes with <a href="https://github.com/mintty/mintty/releases/tag/3.6.2">MinTTY v3.6.2</a>.</li>
<li>Comes with <a href="https://tiswww.case.edu/php/chet/bash/NEWS">Bash v5.2 patchlevel 12</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0">Git LFS v3.3.0</a>.</li>
<li>Comes with <a href="https://github.com/PCRE2Project/pcre2/blob/pcre2-10.41/ChangeLog">PCRE2 v10.41</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The Git executables (e.g. <code>git.exe</code> itself) used to have incomplete version information recorded in their resources, which <a href="https://github.com/git-for-windows/git/pull/4092">has been fixed</a>.</li>
<li>A <a href="https://github.com/git-for-windows/git/issues/4052">regression</a> introduced in Git for Windows v2.38.0 that prevented <code>git.exe</code> from running in Windows Nano Server containers <a href="https://github.com/git-for-windows/git/pull/4074">was fixed</a>.</li>
</ul>
</div><h2 id="v2.38.1" nr="8" class="collapsible"> Changes in v2.38.1<br /><small>since v2.38.0 (October 3rd 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.38.1/Documentation/RelNotes/2.38.1.txt">Git v2.38.1</a>.</li>
</ul>
</div><h2 id="v2.38.0" nr="9" class="collapsible"> Changes in v2.38.0<br /><small>since v2.37.3 (August 30th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.38.0/Documentation/RelNotes/2.38.0.txt">Git v2.38.0</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_85_0">cURL v7.85.0</a>.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2022-September/010707.html">Cygwin 3.3.6</a>.</li>
<li>Comes with <a href="https://github.com/git-for-windows/busybox-w32/commit/985b51cf7">BusyBox v1.34.0.19688.985b51cf7</a>.</li>
<li>The <code>scalar</code> command is now included. <a href="https://github.com/microsoft/git/blob/vfs-2.37.3/contrib/scalar/docs/philosophy.md">Scalar</a> is a helper to automatically configure your (large) Git repositories to take advantage of the latest and greatest features. Note: If you work with repositories hosted on Azure Repos, use <a href="https://github.com/microsoft/git/releases/latest">Microsoft's fork of Git</a> for the best user experience.</li>
</ul>
</div><h2 id="v2.37.3" nr="10" class="collapsible"> Changes in v2.37.3<br /><small>since v2.37.2(2) (August 11th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.37.3/Documentation/RelNotes/2.37.3.txt">Git v2.37.3</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.7">tig v2.5.7</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Git for Windows <a href="https://github.com/git-for-windows/build-extra/pull/432">now correctly handles <code>.doc</code> files that are not Word Documents</a>.</li>
</ul>
</div><h2 id="v2.37.2(2)" nr="11" class="collapsible"> Changes in v2.37.2(2)<br /><small>since v2.37.1 (July 12th 2022)</h2></small><div>
<h3>(Upcoming) breaking changes</h3>
<p>We updated the included Bash to version 5.1 (previously 4.4). Please check your shell scripts for potential compatibility issues.</p>
<p>Also, as previously announced, Git for Windows dropped support for Windows Vista.</p>
<p>Around the beginning of 2023, Git for Windows will drop support for Windows 7 and for Windows 8, following <a href="https://www.msys2.org/docs/windows_support/">Cygwin's and MSYS2's lead</a> (Git for Windows relies on MSYS2 for components such as Bash and Perl).</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.37.2/Documentation/RelNotes/2.37.2.txt">Git v2.37.2</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.6">tig v2.5.6</a>.</li>
<li>Comes with <a href="https://tiswww.case.edu/php/chet/bash/NEWS">Bash v5.1 patchlevel 016 </a>.</li>
<li>Comes with <a href="http://search.cpan.org/dist/perl-5.36.0/pod/perldelta.pod">Perl v5.36.0</a>.</li>
<li>Git's executables are <a href="https://github.com/git-for-windows/build-extra/pull/429">now</a> marked <a href="https://github.com/git-for-windows/git/pull/3942">Terminal Server-aware</a>, meaning: Git will be slightly faster when being run using Remote Desktop Services.</li>
<li><code>git svn</code> is now based on <a href="https://svn.apache.org/repos/asf/subversion/tags/1.14.2/CHANGES">subversion v1.14.2</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html">GNU TLS v3.7.7</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Git for Windows <a href="https://github.com/git-for-windows/build-extra/pull/430">now ships without the <code>zmore</code> and <code>bzmore</code> utilities</a> (which were broken and included only inadvertently).</li>
<li>A <a href="https://github.com/git-for-windows/git/issues/3945">regression in the <code>vimdiff</code> mode of <code>git mergetool</code></a> has been <a href="https://github.com/git-for-windows/git/pull/3960">fixed</a>.</li>
<li>With certain network drives, <a href="https://github.com/git-for-windows/git/issues/3727">it was reported</a> that some attributes associated with caching confused Git for Windows. This <a href="https://github.com/git-for-windows/git/pull/3753">was fixed</a>.</li>
</ul>
</div><h2 id="v2.37.1" nr="12" class="collapsible"> Changes in v2.37.1<br /><small>since v2.37.0 (June 27th 2022)</h2></small><div>
<p>This release addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-gjrj-fxvp-hjj2">CVE-2022-31012</a> and <a href="https://github.com/git/git/security/advisories/GHSA-j342-m5hw-rr3v">CVE-2022-29187</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.37.1/Documentation/RelNotes/2.37.1.txt">Git v2.37.1</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1q</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.785">Git Credential Manager Core v2.0.785</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.5">tig v2.5.5</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Pasting large amounts of text in Git for Windows' Bash when running inside Windows Terminal <a href="https://github.com/git-for-windows/git/issues/3936">often resulted in garbled text</a>, which has been fixed.</li>
<li>The Perl module <a href="https://metacpan.org/source/ATOOMIC/Clone-0.45/Changes">perl-Clone</a> which linked to a non-existing DLL was rebuilt to fix the issue.</li>
<li>The Git for Windows installer can no longer be tricked into running an untrusted <code>git.exe</code> in elevated mode (<a href="https://github.com/git-for-windows/git/security/advisories/GHSA-gjrj-fxvp-hjj2">CVE-2022-31012</a>).</li>
<li>When running Git in a world-writable directory owned by the current user (think <code>C:\Windows\Temp</code>, when running under the <code>SYSTEM</code> account), the checks for dubious ownership of the <code>.git</code> directory now detect this situation properly (<a href="https://github.com/git/git/security/advisories/GHSA-j342-m5hw-rr3v">CVE-2022-29187</a>).</li>
</ul>
</div><h2 id="v2.37.0" nr="13" class="collapsible"> Changes in v2.37.0<br /><small>since v2.36.1 (May 9th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.37.0/Documentation/RelNotes/2.37.0.txt">Git v2.37.0</a>.</li>
<li>Many anti-malware products seem to have problems with our MSYS2 runtime, leading to problems running e.g. <code>git subtree</code>. We <a href="https://github.com/git-for-windows/msys2-runtime/pull/37">added a workaround</a> that hopefully helps in most of these scenarios.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2022-May/010565.html">Cygwin 3.3.5</a>.</li>
<li>Comes with <a href="https://raw.githubusercontent.com/PCRE2Project/pcre2/pcre2-10.40/ChangeLog">PCRE2 v10.40</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v3.2.0">Git LFS v3.2.0</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnutls-help/2022-May/004744.html">GNU TLS v3.7.6</a>.</li>
<li>SSH's CBC ciphers, which were re-enabled in 2017 to better support Azure Repos <a href="https://github.com/git-for-windows/build-extra/pull/421">have again been disabled by default</a> because Azure Repos does not require them any longer.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1p</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.779">Git Credential Manager Core v2.0.779</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_84_0">cURL v7.84.0</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The Git for Windows-only <code>--show-ignored-directory</code> option of <code>git status</code>, which was deprecated a long time ago, <a href="https://github.com/git-for-windows/git/pull/2067">was finally removed</a>.</li>
<li>A crash when running Git for Windows in Wine <a href="https://github.com/git-for-windows/git/pull/3875">was fixed</a>.</li>
<li>A bug in the interaction between FSCache and parallel checkout <a href="https://github.com/git-for-windows/git/pull/3909">was fixed</a>.</li>
<li>Cloning to network shares failed on some network file systems, which was <a href="https://github.com/git-for-windows/git/pull/3646">fixed</a>.</li>
<li>When Git indicates an unsafe directory due to the file system (e.g. FAT32) being unable to record ownership, Git <a href="https://github.com/git-for-windows/git/pull/3887">now gives better hints</a>.</li>
</ul>
</div><h2 id="v2.36.1" nr="14" class="collapsible"> Changes in v2.36.1<br /><small>since v2.36.0 (April 20th 2022)</h2></small><div>
<h3>Upcoming breaking changes</h3>
<p>We plan to update the included bash to version 5.1 (currently 4.4) soon after Git for Windows 2.36.0 is released. Please check your shell scripts for potential compatibility issues.</p>
<p>Git for Windows will also stop supporting Windows Vista soon after Git for Windows 2.36.0 is released. Around the beginning of 2023, Git for Windows will drop support for Windows 7 and for Windows 8, following <a href="https://www.msys2.org/docs/windows_support/">Cygwin's and MSYS2's lead</a> (Git for Windows relies on MSYS2 for components such as Bash and Perl).</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.36.1/Documentation/RelNotes/2.36.1.txt">Git v2.36.1</a>.</li>
<li>On newer Windows versions, Git <a href="https://github.com/git-for-windows/git/pull/3751">now assumes a Win32 Console with full color capabilities</a>. This helps e.g. when NeoVIM is configured as Git's editor.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-9.0">OpenSSH v9.0p1</a>.</li>
<li>When <code>git clean</code> fails due to long paths, <a href="https://github.com/git-for-windows/git/pull/3817">Git now advises the user to set <code>core.longPaths</code></a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_83_0">cURL v7.83.0</a>.</li>
<li>Git Credential Manager's binaries <a href="https://github.com/git-for-windows/build-extra/pull/406">are no longer installed in the same location as core Git's own dashed programs</a>. This separates more clearly the core Git executables from the Git executables provided by third-parties.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.696">Git Credential Manager Core v2.0.696</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1o</a>.</li>
<li>Comes with <a href="https://github.com/git-for-windows/msys2-runtime/commit/d72d5e8aeb7df99c55bdc438fb71fdeffd2bd1e5">patch level 4</a> of the MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2022-January/010438.html">Cygwin 3.3.4</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>A regression introduced in Git for Windows v2.36.0 where GPG in 32-bit versions simply would not work <a href="https://github.com/git-for-windows/MSYS2-packages/commit/002b641e4409ce76709419e835e1fb2a6de14e7c">was fixed</a>.</li>
<li>The <code>proxy-lookup</code> helper <a href="https://github.com/git-for-windows/git/issues/3818">only reported the first letter of the proxy</a>, which was fixed.</li>
<li>The installer <a href="https://github.com/git-for-windows/build-extra/pull/329">now verifies that .NET Framework 4.7.2 is available</a> before offering Git Credential Manager (GCM) as an option (because it is required for GCM to work).</li>
<li>A bug introduced into v2.36.0 where <a href="https://github.com/git-for-windows/git/issues/3825">shell scripts failed to run on some network shares with the error "Too many levels of symbolic links"</a> was fixed.</li>
</ul>
</div><h2 id="v2.36.0" nr="15" class="collapsible"> Changes in v2.36.0<br /><small>since v2.35.3 (April 15th 2022)</h2></small><div>
<p>This version includes Git LFS v3.1.4, addressing <a href="https://github.com/git-lfs/git-lfs/security/advisories/GHSA-6rw3-3whw-jvjj">CVE-2022-24826</a> (if you use Git LFS with <a href="https://github.com/git-for-windows/git/wiki/MinGit">MinGit</a>, you will want to upgrade).</p>
<h3>Upcoming breaking changes</h3>
<p>We plan to update the included bash to version 5.1 (currently 4.4) soon after Git for Windows 2.36.0 is released. Please check your shell scripts for potential compatibility issues.</p>
<p>Git for Windows will also stop supporting Windows Vista soon after Git for Windows 2.36.0 is released. Around the beginning of 2023, Git for Windows will drop support for Windows 7 and for Windows 8, following <a href="https://www.msys2.org/docs/windows_support/">Cygwin's and MSYS2's lead</a> (Git for Windows relies on MSYS2 for components such as Bash and Perl).</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.36.0/Documentation/RelNotes/2.36.0.txt">Git v2.36.0</a>.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2022-January/010438.html">Cygwin 3.3.4</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.9">OpenSSH v8.9p1</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_82_0">cURL v7.82.0</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1n</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.696">Git Credential Manager Core v2.0.696</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnutls-help/2022-March/004738.html">GNU TLS v3.7.4</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v3.1.4">Git LFS v3.1.4</a>.</li>
</ul>
</div><h2 id="v2.35.3" nr="16" class="collapsible"> Changes in v2.35.3<br /><small>since v2.35.2 (April 12th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.35.3/Documentation/RelNotes/2.35.3.txt">Git v2.35.3</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The advice indicating how to use the <code>%(prefix)</code> with a network share path <a href="https://github.com/git-for-windows/git/pull/3790">was updated</a> to use the appropriate number of slashes.</li>
<li><a href="https://github.com/git-for-windows/git/pull/3791">Various fixes</a> for usage of the <code>safe.directory</code> and <code>%(prefix)</code> when using Windows Subsystem for Linux (WSL).</li>
</ul>
</div><h2 id="v2.35.2" nr="17" class="collapsible"> Changes in v2.35.2<br /><small>since v2.35.1(2) (February 1st 2022)</h2></small><div>
<p>This version addresses <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-vw2c-22j4-2fh2">CVE-2022-24765</a> and <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-gf48-x3vr-j5c3">CVE-2022-24767</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.35.2/Documentation/RelNotes/2.35.2.txt">Git v2.35.2</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The uninstaller was hardened to <a href="https://github.com/git-for-windows/git/security/advisories/GHSA-gf48-x3vr-j5c3">avoid a vulnerability when running under the SYSTEM account</a>, addressing CVE-2022-24767.</li>
</ul>
</div><h2 id="v2.35.1(2)" nr="18" class="collapsible"> Changes in v2.35.1(2)<br /><small>since v2.35.1 (January 29th 2022)</h2></small><div>
<h3>Bug Fixes</h3>
<ul>
<li>A <a href="https://github.com/git-for-windows/git/issues/3674">bug</a> in FSCache that triggered by a patch that made it into Git for Windows v2.35.0 <a href="https://github.com/git-for-windows/git/pull/3678">was fixed</a>.</li>
</ul>
</div><h2 id="v2.35.1" nr="19" class="collapsible"> Changes in v2.35.1<br /><small>since v2.35.0 (January 24th 2022)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.35.1/Documentation/RelNotes/2.35.1.txt">Git v2.35.1</a>.</li>
</ul>
</div><h2 id="v2.35.0" nr="20" class="collapsible"> Changes in v2.35.0<br /><small>since v2.34.1 (November 25th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.35.0/Documentation/RelNotes/2.35.0.txt">Git v2.35.0</a>.</li>
<li>Comes with a version of the MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2021-December/010338.html">Cygwin 3.3.3</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1m</a>.</li>
<li>Comes with <a href="https://github.com/GitCredentialManager/git-credential-manager/releases/tag/v2.0.632">Git Credential Manager Core v2.0.632.34631</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_81_0">cURL v7.81.0</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.5">tig v2.5.5</a>.</li>
<li>Comes with <a href="https://github.com/git-for-windows/msys2-runtime/commit/b600e8ead500aef55e23810c2e630d9be46f3a4c">patch level 4</a> of the MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2021-December/010338.html">Cygwin 3.3.3</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>A <a href="https://github.com/git-for-windows/git/issues/3624">bug</a> which caused crashes when running <code>git log</code> with custom date formats in 32-bit builds was fixed.</li>
</ul>
</div><h2 id="v2.34.1" nr="21" class="collapsible"> Changes in v2.34.1<br /><small>since v2.34.0 (November 15th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.34.1/Documentation/RelNotes/2.34.1.txt">Git v2.34.1</a>.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.605">Git Credential Manager Core v2.0.605.12951</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_80_0">cURL v7.80.0</a>.</li>
</ul>
</div><h2 id="v2.34.0" nr="22" class="collapsible"> Changes in v2.34.0<br /><small>since v2.33.1 (October 13th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.34.0/Documentation/RelNotes/2.34.0.txt">Git v2.34.0</a>.</li>
<li>Config settings referring to paths relative to where Git is installed <a href="https://github.com/git-for-windows/git/pull/3472">now have to be marked via <code>%(prefix)/</code> instead of the now-deprecated leading slash</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v3.0.2">Git LFS v3.0.2</a>.</li>
<li>Contains <a href="https://github.com/git-for-windows/git/pull/3492">new, experimental support for <code>core.fsyncObjectFiles=batch</code></a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Configuring a system-wide VS Code as Git's editor <a href="https://github.com/git-for-windows/git/issues/3471">was broken</a>, which has been fixed.</li>
<li>It is <a href="https://github.com/git-for-windows/git/pull/3487">now possible</a> to clone files larger than 4GB as long as they are transferred via <a href="https://git-lfs.github.io/">Git LFS</a>.</li>
<li>Git now works around <a href="https://github.com/microsoft/terminal/issues/9359">an issue with <code>vi</code> and incorrect line breaks in the Windows Terminal</a>.</li>
</ul>
</div><h2 id="v2.33.1" nr="23" class="collapsible"> Changes in v2.33.1<br /><small>since v2.33.0(2) (August 24th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.33.1/Documentation/RelNotes/2.33.1.txt">Git v2.33.1</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1l</a>.</li>
<li>The included <code>git svn</code> now uses <a href="https://svn.apache.org/repos/asf/subversion/tags/1.14.1/CHANGES">subversion v1.14.1</a> internally.</li>
<li><a href="https://github.com/microsoft/Git-Credential-Manager-for-Windows">Git Credential Manager for Windows</a> (which was superseded by <a href="https://aka.ms/gcmcore">Git Credential Manager Core</a>, and was deprecated for a long time now, and no longer succeeds to authenticate with GitHub) is <a href="https://github.com/git-for-windows/build-extra/pull/377">no longer included in Git for Windows</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_79_1">cURL v7.79.1</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.8">OpenSSH v8.8p1</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v3.0.1">Git LFS v3.0.1</a>.</li>
<li>The built-in filesystem watcher ("FSMonitor") <a href="https://github.com/git-for-windows/git/pull/3447">has been updated to the latest version</a>.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.567">Git Credential Manager Core v2.0.567.18224</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Wordpad <a href="https://github.com/git-for-windows/build-extra/pull/378">can be configured as Git's preferred editor</a> again.</li>
<li>A bug where Git's garbage collection during a <code>git pull</code> failed to delete obsolete files <a href="https://github.com/git-for-windows/git/pull/3415">was fixed</a>.</li>
<li>The <code>git svn</code> command, <a href="https://github.com/git-for-windows/git/issues/3392">which was broken in Git for Windows v2.33.0(2)</a>, has been fixed.</li>
<li>The password prompt when cloning via SSH <a href="https://github.com/git-for-windows/build-extra/pull/381">works again</a>.</li>
<li>The MSYS2 runtime <a href="https://github.com/git-for-windows/msys2-runtime/pull/33">no longer complains about FAST_CWD on Windows/ARM64</a>.</li>
<li>When VS Code is configured as editor, <a href="https://github.com/git-for-windows/git/issues/3452">it no longer needs the window to be closed, just the tab</a>.</li>
<li>The 32-bit versions of Git for Windows included outdated versions of <code>ca-certificates</code> and <code>less</code>, <a href="https://github.com/git-for-windows/MSYS2-packages/pull/49">which has been rectified</a>.</li>
</ul>
</div><h2 id="v2.33.0(2)" nr="24" class="collapsible"> Changes in v2.33.0(2)<br /><small>since v2.33.0 (August 17th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_78_0">cURL v7.78.0</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.7">OpenSSH v8.7p1</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>A <a href="https://github.com/git-for-windows/git/issues/3368">bug</a> affecting older Windows versions that caused the installer to show the error message "Could not call proc" <a href="https://github.com/git-for-windows/build-extra/pull/374">was fixed</a>.</li>
</ul>
</div><h2 id="v2.33.0" nr="25" class="collapsible"> Changes in v2.33.0<br /><small>since v2.32.0(2) (July 6th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.33.0/Documentation/RelNotes/2.33.0.txt">Git v2.33.0</a>.</li>
<li>Comes with <a href="http://search.cpan.org/dist/perl-5.34.0/pod/perldelta.pod">Perl v5.34.0</a> (and some updated Perl modules).</li>
<li>It is <a href="https://github.com/git-for-windows/build-extra/pull/367">now possible</a> to ask Git for Windows to use an SSH found on the <code>PATH</code> instead of its bundled OpenSSH executable.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.498">Git Credential Manager Core v2.0.498.54650</a>.</li>
<li>The experimental FSMonitor patches were replaced with <a href="https://github.com/git-for-windows/git/pull/3350">a newer version</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2021q3/000461.html">GNU Privacy Guard v2.2.29</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The installer no longer <a href="https://github.com/git-for-windows/git/issues/3312">shows an error dialog</a> when upgrading while the Windows Terminal Profile option is checked.</li>
<li>Interaction with <a href="https://gerrit.googlesource.com/git-repo/">the <code>git repo</code> tool</a> was <a href="https://github.com/git-for-windows/git/pull/3328">improved</a>.</li>
<li>The version of GNU Privacy Guard (GPG) bundled in Git for Windows <a href="https://github.com/git-for-windows/git/issues/2888">did not work in 64-bit setups</a>, which <a href="https://github.com/git-for-windows/MSYS2-packages/pull/46">was fixed</a>.</li>
</ul>
</div><h2 id="v2.32.0(2)" nr="26" class="collapsible"> Changes in v2.32.0(2)<br /><small>since v2.32.0 (June 7th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>The Windows Terminal profile is now identified <a href="https://github.com/git-for-windows/build-extra/pull/356">by a GUID</a>, for more robust customization.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2021q2/000460.html">GNU Privacy Guard v2.2.28</a>.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.475">Git Credential Manager Core v2.0.475.64295</a>.</li>
<li>Access to remote HTTPS repositories that requires client certificates <a href="https://github.com/git-for-windows/git/issues/3292">can be enabled</a>. This is now necessary because <a href="https://github.com/curl/curl/commit/54e747501626b81149b1b44949119d365db82004">cURL no longer sends client certificates by default</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The built-in file system watcher could hang in some scenarios. <a href="https://github.com/git-for-windows/git/pull/3263">This was fixed</a>.</li>
<li>Remote HTTPS repositories <a href="https://github.com/git-for-windows/git/issues/3266">could not be accessed from within portable Git installed into a network share</a>. This <a href="https://github.com/git-for-windows/MINGW-packages/pull/51">has been fixed</a>.</li>
<li>When scrolling in the pager (e.g. in the output of <code>git log</code>), <a href="https://github.com/git-for-windows/git/issues/3235">lines were duplicated by mistake</a>. This was fixed.</li>
<li>The <code>git subtree</code> command was <a href="https://github.com/git-for-windows/git/issues/3260">completely broken in the previous release</a>, and was fixed.</li>
<li>A bug was fixed where remote operations <a href="https://github.com/git-for-windows/git/issues/3268">appeared to hang</a> (but were waiting for user feedback on a hidden Console).</li>
<li>A bug was fixed where the experimental built-in file system watcher had <a href="https://github.com/git-for-windows/git/issues/3262">a problem with worktrees whose paths had non-ASCII characters</a>.</li>
</ul>
</div><h2 id="v2.32.0" nr="27" class="collapsible"> Changes in v2.32.0<br /><small>since v2.31.1 (March 27th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.32.0/Documentation/RelNotes/2.32.0.txt">Git v2.32.0</a>.</li>
<li>The installer now offers to install <a href="https://github.com/git-for-windows/build-extra/pull/339">a Windows Terminal profile</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_77_0">cURL v7.77.0</a>.</li>
<li>Comes with <a href="https://pcre.org/news.txt">PCRE2 v10.37</a>.</li>
<li>The experimental, built-in <a href="https://github.com/git-for-windows/git/discussions/3251">file system monitor</a> is now <a href="https://github.com/git-for-windows/build-extra/pull/351">featured as an experimental option in the installer</a>.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.474">Git Credential Manager Core v2.0.474.41365</a>.</li>
<li>Sublime Text 4 <a href="https://github.com/git-for-windows/build-extra/pull/355">now gets detected by the installer</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.4">tig v2.5.4</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>When testing a custom editor in the installer, <a href="https://github.com/git-for-windows/git/issues/3155">we now spawn it in non-elevated mode</a>, fixing e.g. Atom when an instance is already running.</li>
<li>The meta credential-helper used by the Portable Git edition of Git for Windows <a href="https://github.com/git-for-windows/git/issues/3196">sometimes crashed</a>, which has been fixed.</li>
<li>The auto-updater <a href="https://github.com/git-for-windows/build-extra/pull/347">no longer suggests to downgrade from -rc0 versions</a>.</li>
</ul>
</div><h2 id="v2.31.1" nr="28" class="collapsible"> Changes in v2.31.1<br /><small>since v2.31.0 (March 15th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.31.1/Documentation/RelNotes/2.31.1.txt">Git v2.31.1</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000452.html">GNU Privacy Guard v2.2.27</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1k</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.13.3">Git LFS v2.13.3</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>It <a href="https://github.com/git-for-windows/git/issues/2675">is now possible</a> to execute the Windows Store version of <code>python3.exe</code> from Git Bash.</li>
</ul>
</div><h2 id="v2.31.0" nr="29" class="collapsible"> Changes in v2.31.0<br /><small>since v2.30.2 (March 9th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.31.0/Documentation/RelNotes/2.31.0.txt">Git v2.31.0</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.5">OpenSSH v8.5p1</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.3">tig v2.5.3</a>.</li>
<li>Git for Windows now ships with <a href="https://github.com/git-for-windows/git/pull/3082">an experimental built-in file-system monitor</a>, without the need to install Watchman and setting <code>core.fsmonitor</code>. It can be turned on by setting both <code>feature.manyFiles=true</code> <em>and</em> <code>feature.experimental=true</code> (or directly, via <code>core.useBuiltinFSMonitor=true</code>).</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.394-beta">Git Credential Manager Core v2.0.394.50751</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnutls-help/2021-March/004698.html">GNU TLS v3.7.1</a>.</li>
</ul>
</div><h2 id="v2.30.2" nr="30" class="collapsible"> Changes in v2.30.2<br /><small>since v2.30.1 (February 9th 2021)</h2></small><div>
<p>This version addresses CVE-2021-21300 (a bug that allows code injection during a clone from an untrusted source).</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.30.2/Documentation/RelNotes/2.30.2.txt">Git v2.30.2</a>.</li>
<li>Comes with <a href="https://pcre.org/news.txt">PCRE2 v10.36</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.2">tig v2.5.2</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1j</a>.</li>
</ul>
</div><h2 id="v2.30.1" nr="31" class="collapsible"> Changes in v2.30.1<br /><small>since v2.30.0(2) (January 14th 2021)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.30.1/Documentation/RelNotes/2.30.1.txt">Git v2.30.1</a>.</li>
<li>Comes with <a href="http://search.cpan.org/dist/perl-5.32.1/pod/perldelta.pod">Perl v5.32.1</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_75_0">cURL v7.75.0</a>.</li>
</ul>
</div><h2 id="v2.30.0(2)" nr="32" class="collapsible"> Changes in v2.30.0(2)<br /><small>since v2.30.0 (December 28th 2020)</h2></small><div>
<p>This version includes <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2">Git LFS v2.13.2</a>, addressing CVE-2021-21237.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.318-beta">Git Credential Manager Core v2.0.318.44100</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2">Git LFS v2.13.2</a>.</li>
</ul>
</div><h2 id="v2.30.0" nr="33" class="collapsible"> Changes in v2.30.0<br /><small>since v2.29.2(3) (December 8th 2020)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.30.0/Documentation/RelNotes/2.30.0.txt">Git v2.30.0</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1i</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_74_0">cURL v7.74.0</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.13.1">Git LFS v2.13.1</a>.</li>
<li>Notepad and Wordpad are <a href="https://github.com/git-for-windows/build-extra/pull/304">now supported</a> as editors without manual configuration.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The auto-updater <a href="https://github.com/git-for-windows/build-extra/pull/318">now shows the progress while installing</a>.</li>
<li>The credential-helper selector (which is the default credential helper in the Portable version of Git for Windows) <a href="https://github.com/git-for-windows/build-extra/pull/319">now handles paths with spaces correctly</a>.</li>
</ul>
</div><h2 id="v2.29.2(3)" nr="34" class="collapsible"> Changes in v2.29.2(3)<br /><small>since v2.29.2(2) (November 4th 2020)</h2></small><div>
<p>This version updates Git Credential Manager Core to address <a href="https://github.com/microsoft/Git-Credential-Manager-Core/security/advisories/GHSA-2gq7-ww4j-3m76">CVE-2020-26233</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2020q4/000450.html">GNU Privacy Guard v2.2.25</a>.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.289-beta">Git Credential Manager Core v2.0.289.48418</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Beyond Compare 4 <a href="https://github.com/git-for-windows/git/issues/2893">can be configured as difftool <code>bc4</code> again</a>.</li>
</ul>
</div><h2 id="v2.29.2(2)" nr="35" class="collapsible"> Changes in v2.29.2(2)<br /><small>since v2.29.2 (October 30th 2020)</h2></small><div>
<p>This version includes a new Git LFS version to fix <a href="https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m">CVE-2020-27955</a>.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.280-beta">Git Credential Manager Core v2.0.280.19487</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.12.1">Git LFS v2.12.1</a>.</li>
</ul>
</div><h2 id="v2.29.2" nr="36" class="collapsible"> Changes in v2.29.2<br /><small>since v2.29.1 (October 23rd 2020)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.29.2/Documentation/RelNotes/2.29.2.txt">Git v2.29.2</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The recent regression where OpenSSH's <code>copy-ssh-id</code> <a href="https://github.com/git-for-windows/git/issues/2873">failed to work correctly</a>, was <a href="https://github.com/git-for-windows/MSYS2-packages/pull/40">fixed</a>.</li>
<li>A <a href="https://github.com/git-for-windows/git/issues/2874">regression preventing <code>/usr/bin/update-ca-trust</code> from working</a> was fixed.</li>
</ul>
</div><h2 id="v2.29.1" nr="37" class="collapsible"> Changes in v2.29.1<br /><small>since v2.29.0 (October 19th 2020)</h2></small><div>
<p>Important note: v2.29.0 and v2.29.1 upgrade existing users of <a href="https://github.com/microsoft/Git-Credential-Manager-for-Windows/">Git Credential Manager for Windows</a> (which was just deprecated) to <a href="https://github.com/microsoft/Git-Credential-Manager-Core">Git Credential Manager Core</a> ("GCM Core", which is the designated successor of the former). This is necessary because <a href="https://github.blog/changelog/2019-08-08-password-based-http-basic-authentication-deprecation-and-removal/">GitHub deprecated password-based authentication</a> and intends to remove support for it soon, and GCM Core is prepared for this change.</p>
<p>Also, as of v2.29.0, the option to override the branch name used by <code>git init</code> for the initial branch is <a href="https://github.com/git-for-windows/build-extra/pull/307">featured prominently</a> in the installer.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.29.1/Documentation/RelNotes/2.29.1.txt">Git v2.29.1</a>.</li>
<li>The MSYS2 runtime <a href="https://github.com/msys2/msys2-runtime/pull/16">now optionally supports creating Cygwin-style symbolic links</a> (via setting the environment variable <code>MSYS=winsymlinks:sysfile</code>).</li>
</ul>
</div><h2 id="v2.29.0" nr="38" class="collapsible"> Changes in v2.29.0<br /><small>since v2.28.0 (July 28th 2020)</h2></small><div>
<p>This version upgrades existing users of <a href="https://github.com/microsoft/Git-Credential-Manager-for-Windows/">Git Credential Manager for Windows</a> (which was just deprecated) to <a href="https://github.com/microsoft/Git-Credential-Manager-Core">Git Credential Manager Core</a> ("GCM Core", which is the designated successor of the former). This is necessary because <a href="https://github.blog/changelog/2019-08-08-password-based-http-basic-authentication-deprecation-and-removal/">GitHub deprecated password-based authentication</a> and intends to remove support for it soon, and GCM Core is prepared for this change.</p>
<p>Also, the option to override the branch name used by <code>git init</code> for the initial branch is now <a href="https://github.com/git-for-windows/build-extra/pull/307">featured prominently</a> in the installer.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.29.0/Documentation/RelNotes/2.29.0.txt">Git v2.29.0</a>.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2020-August/009678.html">Cygwin 3.1.7</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.12.0">Git LFS v2.12.0</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000448.html">GNU Privacy Guard v2.2.23</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1h</a>.</li>
<li>Comes with <a href="https://github.com/PJK/libcbor/releases/tag/0.8.0">libcbor v0.8.0</a>.</li>
<li>Comes with <a href="https://github.com/Yubico/libfido2/releases/tag/1.5.0">libfido2 v1.5.0</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.4">OpenSSH v8.4p1</a>.</li>
<li>Comes with <a href="https://github.com/microsoft/git-credential-manager-core/releases/tag/v2.0.252-beta">Git Credential Manager Core v2.0.252.766</a>.</li>
<li>Existing Git Credential Manager for Windows users are now <a href="https://github.com/git-for-windows/build-extra/pull/305">automatically upgraded</a> to <a href="https://github.com/microsoft/git-credential-manager-core/">Git Credential Manager Core</a>.</li>
<li>Git for Windows' installer learned to <a href="https://github.com/git-for-windows/build-extra/pull/307">let users override the default branch used by <code>git init</code></a>.</li>
<li><a href="https://github.com/git-for-windows/build-extra/pull/309">The installer size was reduced</a> by dropping a couple unneeded <code>.dll</code> files.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_73_0">cURL v7.73.0</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The credential helper selector (used as default credential helper in the Portable Git) <a href="https://github.com/git-for-windows/git/issues/2776">now persists the users choice correctly again</a>.</li>
<li>The full command-lines of MSYS2 processes (such as <code>cp.exe</code>) spawned from Git's Bash <a href="https://github.com/git-for-windows/git/issues/2756">can now be seen in <code>sysmon</code>, <code>wmic</code> etc</a> by default.</li>
<li>A <a href="https://github.com/git-for-windows/git/issues/2738">bug</a> preventing Unicode characters from being used in the window title of Git Bash was fixed.</li>
<li>OpenSSH was patched to no longer <a href="https://github.com/git-for-windows/git/issues/2743">warn about an "invalid format"</a> when private and public keys are stored separately.</li>
<li>Non-ASCII output of paged Git commands <a href="https://github.com/git-for-windows/git/pull/2834">is now rendered correctly in Windows Terminal</a>.</li>
<li>It is <a href="https://github.com/git-for-windows/build-extra/pull/303">now possible</a> to use <code>wordpad.exe</code> as Git's editor of choice.</li>
<li>When using Git via the "Run As..." function, <a href="https://github.com/git-for-windows/git/pull/2725">it now uses the correct home directory</a>.</li>
<li>The Git Bash prompt <a href="https://github.com/git-for-windows/git/pull/2800">now works even after calling <code>set -u</code></a>.</li>
<li>Git for Windows <a href="https://github.com/git-for-windows/build-extra/pull/312">can now be installed</a> even with stale <code>AutoRun</code> registry entries (e.g. left-overs from a Miniconda installation).</li>
</ul>
</div><h2 id="v2.28.0" nr="39" class="collapsible"> Changes in v2.28.0<br /><small>since v2.27.0 (June 1st 2020)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.28.0/Documentation/RelNotes/2.28.0.txt">Git v2.28.0</a>.</li>
<li>Comes with <a href="https://svn.apache.org/repos/asf/subversion/tags/1.14.0/CHANGES">subversion v1.14.0</a>.</li>
<li><a href="https://github.com/git-for-windows/build-extra/pull/294">Comes with the designated successor</a> of Git Credential Manager for Windows (GCM for Windows), <a href="https://github.com/microsoft/git-credential-manager-core">the cross-platform Git Credential Manager Core</a>. For now, this is opt-in, with the idea of eventually retiring GCM for Windows.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_71_1">cURL v7.71.1</a>.</li>
<li>Comes with <a href="http://search.cpan.org/dist/perl-5.32.0/pod/perldelta.pod">Perl v5.32.0</a>.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/pipermail/cygwin-announce/2020-July/009605.html">Cygwin 3.1.6</a> (including the improvements of <a href="https://cygwin.com/pipermail/cygwin-announce/2020-June/009561.html">Cygwin 3.1.5</a>).</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2020q3/000446.html">GNU Privacy Guard v2.2.21</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>A typo <a href="https://github.com/git-for-windows/build-extra/pull/291">was fixed</a> in the installer.</li>
<li>The new <code>git pull</code> behavior option <a href="https://github.com/git-for-windows/build-extra/pull/292">now records the <code>fast-forward</code> choice correctly</a>.</li>
<li>In v2.27.0, <a href="https://github.com/git-for-windows/git/issues/2649"><code>git svn</code> was broken completely</a>, which has been fixed.</li>
<li>Some Git operations <a href="https://github.com/git-for-windows/git/issues/2653">could end up with bogus modified symbolic links</a> (where <code>git status</code> would report changes but <code>git diff</code> would not), which is now fixed.</li>
<li>When reinstalling (or upgrading) Git for Windows, <a href="https://github.com/git-for-windows/build-extra/pull/295">the "Pseudo Console Support" choice is now remembered correctly</a>.</li>
<li>Under certain circumstances, the Git Bash window (MinTTY) <a href="https://github.com/git-for-windows/git/issues/2687">would crash frequently</a>, which has been addressed.</li>
<li>When pseudo console support is enabled, <a href="https://github.com/git-for-windows/git/issues/2689">the VIM editor sometimes had troubles accepting certain keystrokes</a>, which was fixed.</li>
<li>Due to a bug, it was not possible to disable Pseudo Console support by reinstalling with the checkbox turned off, <a href="https://github.com/git-for-windows/build-extra/pull/299">which has been fixed</a>.</li>
<li>A bug with enabled Pseudo Console support, where <code>git add -i</code> <a href="https://github.com/git-for-windows/git/issues/2729">would not quit the file selection mode upon an empty input</a>, has been fixed.</li>
<li>The cleanup mode called "scissors" in <code>git commit</code> <a href="https://github.com/git-for-windows/git/pull/2714">now handles CR/LF line endings correctly</a>.</li>
<li>When cloning into an existing directory, under certain circumstances, the <code>core.worktree</code> option was set unnecessarily. <a href="https://github.com/git-for-windows/git/pull/2731">This has been fixed</a>.</li>
</ul>
</div><h2 id="v2.27.0" nr="40" class="collapsible"> Changes in v2.27.0<br /><small>since v2.26.2 (April 20th 2020)</h2></small><div>
<p>Due to <a href="https://github.com/git-for-windows/git/pull/2637">a bug when handling symbolic links that was fixed in this version</a>, <code>git status</code> will show symbolic links as modified even as <code>git diff</code> won't report any changes. The quickest work-around is to call <code>git add -u</code> which lets Git realize that nothing changed, actually.</p>
<p>This release comes with a Git Bash that optionally uses <a href="https://devblogs.microsoft.com/commandline/windows-command-line-introducing-the-windows-pseudo-console-conpty/">Windows-native pseudo consoles</a>. Meaning: finally, Git Bash can accommodate console programs like <code>node.exe</code>, Python or PHP, without using the <code>winpty</code> helper (see <a href="#known-issues"><em>Known Issues</em> above</a>). Note that this is still a very new feature and is therefore known to have some corner-case bugs.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.27.0/Documentation/RelNotes/2.27.0.txt">Git v2.27.0</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1g</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_70_0">cURL v7.70.0</a>.</li>
<li>Comes with <a href="https://svn.apache.org/repos/asf/subversion/tags/1.13.0/CHANGES">subversion v1.13.0</a>.</li>
<li>Comes with MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/ml/cygwin-announce/2020-02/msg00006.html">Cygwin 3.1.4</a>.</li>
<li>The release notes <a href="https://github.com/git-for-windows/build-extra/pull/281">have been made a bit more readable and are now linked from the Start Menu group</a>.</li>
<li>The Frequently Asked Questions (FAQ) <a href="https://github.com/git-for-windows/build-extra/pull/283">are now linked in a Start Menu item</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.11.0">Git LFS v2.11.0</a>.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.3">OpenSSH v8.3p1</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Some Perl packages (e.g. <code>Net::SSLeay</code>) that <a href="https://github.com/git-for-windows/git/issues/2598">had been broken recently</a> have been fixed.</li>
<li>Git for Windows and WSL Git <a href="https://github.com/git-for-windows/git/pull/2637">now have the same idea of symbolic links' length</a>, i.e. <code>git status</code> will no longer mark them as modified in Git for Windows after checking them out in WSL.</li>
</ul>
</div><h2 id="v2.26.2" nr="41" class="collapsible"> Changes in v2.26.2<br /><small>since v2.26.1 (April 9th 2020)</h2></small><div>
<p>Yet another security fix release: With a crafted URL that contains a newline or empty host, or lacks a scheme, the credential helper machinery can be fooled into providing credential information that is not appropriate for the protocol in use and host being contacted (CVE-2020-11008).</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.26.2/Documentation/RelNotes/2.26.2.txt">Git v2.26.2</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.1">tig v2.5.1</a>.</li>
<li>Worktree updates (e.g. <code>git checkout</code>, <code>git reset --hard</code>) <a href="https://github.com/git-for-windows/git/pull/2589">got a performance boost in sparse checkouts</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>A recent regression in <code>gitk</code> that prevented it from running in bare repositories <a href="https://github.com/git-for-windows/git/pull/2549">has been fixed</a>.</li>
</ul>
</div><h2 id="v2.26.1" nr="42" class="collapsible"> Changes in v2.26.1<br /><small>since v2.26.0 (March 23rd 2020)</h2></small><div>
<p>This includes a fix for CVE-2020-5260.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.26.1/Documentation/RelNotes/2.26.1.txt">Git v2.26.1</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1f</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Git <a href="https://github.com/git-for-windows/git/pull/2574">now accepts more date formats</a> such as <code>%g</code> and <code>%V</code>.</li>
</ul>
</div><h2 id="v2.26.0" nr="43" class="collapsible"> Changes in v2.26.0<br /><small>since v2.25.1 (February 19th 2020)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.26.0/Documentation/RelNotes/2.26.0.txt">Git v2.26.0</a>.</li>
<li>Git for Windows' OpenSSH <a href="https://github.com/git-for-windows/git/issues/2525">now can use USB security tokens</a> (e.g. Yubikeys).</li>
<li>The native Windows HTTPS backend (Secure Channel) <a href="https://github.com/git-for-windows/git/pull/2535">has learned to work gracefully with Fiddler and corporate proxies</a>.</li>
<li>Git for Windows' release notes <a href="https://github.com/git-for-windows/build-extra/commit/3b89da01f46dc03417329c3702fc233622313397">have been made a bit easier to read/navigate</a>.</li>
<li>The Free/Libre <a href="https://vscodium.com/">VSCodium</a> version of <a href="https://code.visualstudio.com">Visual Studio Code</a> is now <a href="https://github.com/git-for-windows/build-extra/pull/278">also detected</a> as an option for the default Git editor.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_69_1">cURL v7.69.1</a>.</li>
<li>Comes with <a href="https://www.openssl.org/news/openssl-1.1.1-notes.html">OpenSSL v1.1.1e</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2020q1/000444.html">GNU Privacy Guard v2.2.20</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Git for Windows <a href="https://github.com/git-for-windows/git/pull/2533">can now clone into directories the current user can write to, even if they lack permission to even read the parent directory</a>.</li>
<li>When asking for a password via Git GUI, <a href="https://github.com/git-for-windows/git/issues/2215">non-ASCII characters are now handled correctly</a>.</li>
<li><code>git update-git-for-windows -y</code> <a href="https://github.com/git-for-windows/build-extra/pull/279">now is fully automatable</a>.</li>
</ul>
</div><h2 id="v2.25.1" nr="44" class="collapsible"> Changes in v2.25.1<br /><small>since v2.25.0 (January 13th 2020)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.25.1/Documentation/RelNotes/2.25.1.txt">Git v2.25.1</a>.</li>
<li>The Portable version of Git for Windows <a href="https://github.com/git-for-windows/git/issues/2467">now defaults to turning on the FSCache</a> just like the installer does.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.10.0">Git LFS v2.10.0</a>.</li>
<li>Portable Git <a href="https://github.com/git-for-windows/git/issues/2493">can now be run from a RAM disk</a>, too.</li>
<li>The deprecation of <code>Git CMD</code> <a href="https://github.com/git-for-windows/build-extra/pull/275">has been reverted</a>: the security issue (<code>git show</code> would execute a <code>git</code> executable or script in the current directory instead of the intended <code>git.exe</code>) was fixed already in v2.20.0.</li>
<li>Comes with <a href="https://www.openssh.com/txt/release-8.2">OpenSSH v8.2p1</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Some corner-case bugs in the built-in <code>git add -i</code> <a href="https://github.com/git-for-windows/git/issues/2466">were fixed</a>.</li>
<li>The file name <code>COM0</code> <a href="https://github.com/git-for-windows/git/issues/2470">is no longer mistaken for a reserved file name</a>.</li>
<li>The <code>curl.exe</code> included in Git for Windows <a href="https://github.com/git-for-windows/git/issues/2491">can access SFTP/SSH hosts again</a>.</li>
</ul>
</div><h2 id="v2.25.0" nr="45" class="collapsible"> Changes in v2.25.0<br /><small>since v2.24.1(2) (December 10th 2019)</h2></small><div>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.25.0/Documentation/RelNotes/2.25.0.txt">Git v2.25.0</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2019q4/000443.html">GNU Privacy Guard v2.2.19</a>.</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.9.2">Git LFS v2.9.2</a>.</li>
<li>When upgrading Git for Windows, by default the installer <a href="https://github.com/git-for-windows/build-extra/pull/270">now only shows pages with previously-unseen options</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_68_0">cURL v7.68.0</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>The startup file for GNU nano, which had been included with DOS line endings (and therefore upset <code>nano</code>) <a href="https://github.com/git-for-windows/git/issues/2429">is now included with Unix line endings again</a>.</li>
<li>Git for Windows now <a href="https://github.com/git-for-windows/git/pull/2440">fails as expected</a> when trying to check out files with illegal characters in their file names.</li>
<li>Git <a href="https://github.com/git-for-windows/git/pull/2449">now works properly</a> when inside a symlinked work tree.</li>
<li>Repositories with old commits containing backslashes in file names <a href="https://github.com/git-for-windows/git/pull/2437">can now be fetched/cloned again</a> (but Git will still refuse to check out files with backslashes in their file names).</li>
<li>Git GUI <a href="https://github.com/git-for-windows/git/pull/2452">can now deal with uninitialized submodules</a> (this was a Windows-specific bug).</li>
<li>It is <a href="https://github.com/git-for-windows/git/issues/2435">again possible</a> to clone repositories where <em>some</em> past revision contained file names containing backslashes (Git will of course still refuse to check out such revisions).</li>
</ul>
</div><h2 id="v2.24.1(2)" nr="46" class="collapsible"> Changes in v2.24.1(2)<br /><small>since v2.24.0(2) (November 6th 2019)</h2></small><div>
<p>This is a security bug release that fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354, CVE-2019-1387, and CVE-2019-19604.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.24.1/Documentation/RelNotes/2.24.1.txt">Git v2.24.1</a>.</li>
<li>Comes with <a href="https://github.com/jonas/tig/releases/tag/tig-2.5.0">tig v2.5.0</a>.</li>
<li>Comes with <a href="https://github.com/git-for-windows/msys2-runtime/commit/1bfdf956dae03d59bfe44b1e5882403ab803a67b">patch level 4</a> of the MSYS2 runtime (Git for Windows flavor) based on <a href="https://cygwin.com/ml/cygwin-announce/2019-04/msg00030.html">Cygwin 3.0.7</a>.</li>
<li>The command-line options of <code>git-bash.exe</code> <a href="https://github.com/git-for-windows/MINGW-packages/pull/36">are now documented</a> (call <code>git help git-bash</code>).</li>
<li>Comes with <a href="https://github.com/git-lfs/git-lfs/releases/tag/v2.9.1">Git LFS v2.9.1</a>.</li>
<li>Comes with <a href="https://curl.haxx.se/changes.html#7_67_0">cURL v7.67.0</a>.</li>
<li>Comes with <a href="https://lists.gnupg.org/pipermail/gnupg-announce/2019q4/000442.html">GNU Privacy Guard v2.2.18</a>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>MinGit <a href="https://github.com/git-for-windows/build-extra/pull/267">no longer overrides an installed Git for Windows' system gitconfig</a>.</li>
<li>The "Check daily for updates" feature <a href="https://github.com/git-for-windows/build-extra/pull/268">uses the Action Center again</a>.</li>
<li>When associating <code>.sh</code> files with Git Bash to allow running them by double-clicking them in the Windows Explorer, shell scripts with non-ASCII characters in their file name <a href="https://github.com/git-for-windows/git/issues/2189">are now supported</a>.</li>
</ul>
</div><h2 id="v2.24.0(2)" nr="47" class="collapsible"> Changes in v2.24.0(2)<br /><small>since v2.24.0 (November 4th 2019)</h2></small><div>
<h3>Bug Fixes</h3>
<ul>
<li>Using <code>http.extraHeader</code> <a href="https://github.com/gitgitgadget/git/pull/453">no longer results in spurious crashes</a>.</li>
<li>The <code>/proc/{stdin,stdout,stderr}</code> pseudo-symlinks <a href="https://github.com/git-for-windows/build-extra/pull/265">are now installed properly even with non-US locales</a>.</li>
<li>A bug <a href="https://github.com/git-for-windows/git/pull/2391">was fixed</a> that prevented <code>gitk</code> from refreshing after new changes were committed.</li>
<li>A bug in cURL v7.67.0 that caused <code>SSL_read: No error</code> with some servers <a href="https://github.com/git-for-windows/MINGW-packages/commit/7b39ea818c014bafcd7c75f6aefd614fef756164">was fixed</a>.</li>
</ul>
</div><h2 id="v2.24.0" nr="48" class="collapsible"> Changes in v2.24.0<br /><small>since v2.23.0 (August 17th 2019)</h2></small><div>
<p>Note! As a consequence of making <code>git config --system</code> work as expected, the location of the system config is now <code>C:\Program Files\Git\etc\gitconfig</code> (no longer split between <code>C:\Program Files\Git\mingw64\etc\gitconfig</code> and <code>C:\ProgramData\Git\config</code>), and likewise the location of the system gitattributes is now <code>C:\Program Files\Git\etc\gitattributes</code> (no longer <code>C:\Program Files\Git\mingw64\etc\gitattributes</code>). Any manual modifications to <code>C:\ProgramData\Git\config</code> need to be ported manually.</p>
<h3>New Features</h3>
<ul>
<li>Comes with <a href="https://github.com/git/git/blob/v2.24.0/Documentation/RelNotes/2.24.0.txt">Git v2.24.0</a>.</li>