Check bounds and type for HTTP Content-length header. Also reject reply with two different Content-Length values.
From libfossil. (tags: trunk) #SoftwareDevelopment #OpenSource #Security
When connecting via a proxy, use the server's own host name, without its port, in the CONNECT
request, TLS server name, certificate check etc. (tags: trunk) #SoftwareDevelopment #OpenSource #Networking
Check the certificate of an https server given by IP address against the certificate's IP
addresses. Don't send a TLS server name for an IP address or a non-ASCII host name. (tags: trunk) #SoftwareDevelopment #OpenSource #Security
Keep [square brackets] for IPv6 addresses at all times in url_parse_local().
From libfossil. (tags: trunk) #SoftwareDevelopment #OpenSource #Programming
URL @ parsing fix: Do not connect to evil.example when given
https://good.example?x=a@evil.example/r . From libfossil. (tags: trunk) #SoftwareDevelopment #OpenSource #Security
Update the change log. (tags: trunk) #SoftwareDevelopment #VersionControl #OpenSource
Adjust foci's xBestIndex() cost from 1 to 100 to address the performance regression report in [forum:2d15009e0e|forum post 2026-10-07T16:33:27Z]. A value of 10 performed equivalently to 1. (tags: trunk) #SoftwareDevelopment #OpenSource #Performance
Replace an errant free() with a fossil_free(). Teach (uv export) to create the directory parts of uv names if needed, and fix what appeared to be a memleak when skipping overwriting of a file. (tags: trunk) #OpenSource #DevTools #SoftwareDevelopment
Enhance the 'uv export' subcommand to make it easier to bulk export unversioned files. (tags: trunk) #SoftwareDevelopment #VersionControl #OpenSource
Update the built-in SQLite to the 3.54.0 release candidate for final testing. (tags: trunk) #OpenSource #SoftwareDevelopment #DevOps
Slight re-parenthesizing of the previous commit's query to avoid a corner case of picking up a non-technote artifact, as reported in [forum:59014563bd|forum post 2026-10-08T09:35:25Z]. (tags: trunk) #SoftwareDevelopment #VersionControl #OpenSource
A very slight query reformulation in (wiki create --technote) which speeds it up by orders of magnitude on large repos. Bug report and suggested fix in [forum:a3f7ddbe2fdb45d7|forum post 2026-10-07T13:56:00Z]. (tags: trunk) #SoftwareDevelopment #OpenSource #Performance
Update the built-in SQLite to a new 3.54.0 beta after some important fixes,
for testing. (tags: trunk) #SoftwareDevelopment #OpenSource #DevTools
Allow building on Windows under the MINGW64 shell. Multiple changes needed:
* pacman command in the build doc was performing a search, not a
"sync", what other package systems call install; thus, no-op
* configure was presuming presence of /dev/null meant "not MinGW";
doubtless there are MinGW setups where this is the case, but the
modern MinGW64 terminal is not one of these
* the guards against trying to use linenoise on Windows weren't
triggered for this type of build, causing link failures (tags: trunk) #SoftwareDevelopment #OpenSource #DevOps
Update the built-in SQLite to the latest 3.54.0 beta, for testing. (tags: trunk) #SoftwareDevelopment #OpenSource #VersionControl
Correct the var deref for cscope's path in the configure script. Reported by by Brick Viking in /chat. (Edit: re-attribute this to brickviking.) (tags: trunk) #SoftwareDevelopment #OpenSource #DevOps
Dropped the "container" namespace verb from $(CENGINE) in the
container-* targets so that it will work under Apple Container, which
uses the legacy scheme, doubtless to avoid having silly-looking
"container container" commands. Podman and Docker still support
that syntax; it was added to separate these subcommands out, a
practice we adopted to make our example commands clear. Broader
engine compatibility is more important.
Also dropped the "build buildx" thing, as that also doesn't work on
Apple Container, and it doesn't buy us anything we still need under
Docker Engine, as long as you're on 23 or later. Podman never cared. (tags: trunk) #SoftwareDevelopment #OpenSource #DevOps
Provide more options on the "2-way diff" drop-down menu on the
"fossil merge-info --tk" GUI. (tags: trunk) #SoftwareDevelopment #VersionControl #OpenSource
Update the built-in SQLite to the latest trunk version for beta testing. (tags: trunk) #SoftwareDevelopment #OpenSource #VersionControl
Improved throw-away cache speedup test scripts. (tags: cache-speedups) #SoftwareDevelopment #Performance #OpenSource
Fix a corner case of the import command which could leave behind a phantom. Based on [forum:2629a1deaa9|bug report 2026-09-28T10:22:05Z]. (tags: trunk) #SoftwareDevelopment #OpenSource #BugFix
Set the default wiki editor mimetype to markdown in two spots. (tags: trunk) #SoftwareDevelopment #VersionControl #OpenSource