Skip to content

Bump pygit2 from 1.19.3 to 1.20.0 - #122

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pygit2-1.20.0
Open

Bump pygit2 from 1.19.3 to 1.20.0#122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pygit2-1.20.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps pygit2 from 1.19.3 to 1.20.0.

Release notes

Sourced from pygit2's releases.

1.20.0 (2026-08-08)

  • New RemoteCallbacks.custom_headers() #1465

  • New rebase API: Repository.rebase_init(...), Repository.rebase_open(...), Rebase, and RebaseOperation #1483

  • Fix Config.snapshot() for non-repository configs, allow PathLike in Config.__init__(), and improve config documentation #1468

  • Fix UnicodeDecodeError with non-UTF-8 file paths in Repository.status(), DiffFile.path, index paths, checkout callbacks, and related APIs #1451 #1469

  • Fix enums.CheckoutStrategy.CONFLICT_STYLE_ZDIFF3, which was mistakenly bound to the DIFF3 constant #1483

  • Fix crashes and reference-lifetime bugs in custom refdb backends #1471 #1474 #1475 #1476

  • Update wheels to libgit2 1.9.6 and OpenSSL 3.5.7

  • Add riscv64 wheels #1463

Breaking changes:

  • Remove deprecated pygit2.legacyenums module and GIT_* constants, use pygit2.enums instead

  • Remove deprecated support for passing str to Repository.merge(...), pass a Commit, Oid, or Reference object instead

  • Repository.merge_file_from_index(...) now returns MergeFileResult by default; pass use_deprecated=True for the previous string return, now deprecated.

  • Remove deprecated Remote.ls_remotes(...), use Remote.list_heads(...) instead

  • Remove pygit2.to_bytes(...) and pygit2.to_str(...); they were undocumented accidental public APIs

Changelog

Sourced from pygit2's changelog.

1.20.0 (2026-08-08)

  • New RemoteCallbacks.custom_headers() #1465

  • New rebase API: Repository.rebase_init(...), Repository.rebase_open(...), Rebase, and RebaseOperation #1483

  • Fix Config.snapshot() for non-repository configs, allow PathLike in Config.__init__(), and improve config documentation #1468

  • Fix UnicodeDecodeError with non-UTF-8 file paths in Repository.status(), DiffFile.path, index paths, checkout callbacks, and related APIs #1451 #1469

  • Fix enums.CheckoutStrategy.CONFLICT_STYLE_ZDIFF3, which was mistakenly bound to the DIFF3 constant #1483

  • Fix crashes and reference-lifetime bugs in custom refdb backends #1471 #1474 #1475 #1476

  • Update wheels to libgit2 1.9.6 and OpenSSL 3.5.7

  • Add riscv64 wheels #1463

Breaking changes:

  • Remove deprecated pygit2.legacyenums module and GIT_* constants, use pygit2.enums instead

  • Remove deprecated support for passing str to Repository.merge(...), pass a Commit, Oid, or Reference object instead

  • Repository.merge_file_from_index(...) now returns MergeFileResult by default; pass use_deprecated=True for the previous string return, now deprecated.

  • Remove deprecated Remote.ls_remotes(...), use Remote.list_heads(...) instead

  • Remove pygit2.to_bytes(...) and pygit2.to_str(...); they were undocumented accidental public APIs

Commits
  • ba21cf5 Release 1.20.0
  • 28be4b8 Fix refcount test failing under pytest assertion rewriting
  • 007c562 Fix NULL dereference in refdb backend exists callback
  • 5878864 Fix ownership and lifetime bugs in refdb backend callbacks
  • 2efb706 Update wheels to OpenSSL 3.5.7
  • cc48ea6 Fix ownership and error handling bugs in refdb backend callbacks
  • 997c65b Fix the refdb backend rename callback
  • eb512d2 Fix refcounting bugs in the refdb backend write callback
  • 258bf55 chore(CI): bump actions/setup-python from 6 to 7 in the actions group
  • b7fdcd6 encoding: drop public to_str, rename internal helper to path_to_str
  • Additional commits viewable in compare view

codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/uv/pygit2-1.20.0 branch from 11e023c to e0a9e7d Compare August 17, 2026 03:18
codescene-access[bot]

This comment was marked as outdated.

Bumps [pygit2](https://github.com/libgit2/pygit2) from 1.19.3 to 1.20.0.
- [Release notes](https://github.com/libgit2/pygit2/releases)
- [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md)
- [Commits](libgit2/pygit2@v1.19.3...v1.20.0)

---
updated-dependencies:
- dependency-name: pygit2
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/pygit2-1.20.0 branch from e0a9e7d to d9d8f6f Compare August 18, 2026 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants