| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: git-lfs | Distribution: openSUSE Tumbleweed |
| Version: 3.8.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri Aug 28 10:25:26 2026 |
| Group: Development/Tools/Version Control | Build host: reproducible |
| Size: 14501763 | Source RPM: git-lfs-3.8.0-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/git-lfs/git-lfs | |
| Summary: Git extension for versioning large files | |
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.
MIT
* Fri Aug 28 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 3.8.0:
This release is a feature release which adds support for
zstd-compressed object downloads and introduces several new
options, including the ability to fetch Git LFS objects for a
list of references piped to standard input and the ability to
limit how long Git LFS will wait when instructed by a server to
retry an HTTP request.
Git LFS now determines the case sensitivity of filesystems from
the core.ignoreCase Git configuration option, respects global and
system-wide Git attribute files when migrating repositories, and
tries the default Git LFS HTTP URL derived from an SSH URL when
HTTP authentication via SSH is not available.
This Git LFS release improves SSH session reuse, parses invalid
custom transfer adapter configurations and invalid Git attribute
patterns without crashing, handles file deletion conflicts on
Windows in the same manner as Git, resolves remote-tracking
branches for downloads correctly, avoids re-reading working tree
files during clean filter operations since the files may be in an
inconsistent state, and terminates lengthy or endless HTTP
authentication sequences after a limited number of requests.
Note that we now provide official packages and support for
versions of Linux distributions based on Debian 13 ("trixie"). We
also now provide a source code package with all of our Go module
dependencies in a vendor directory.
* Features
- Enhance LFS transfer retries with maximum retry time limit
[#6304]
- fall back to guessed endpoint when git-lfs-authenticate is
unavailable #6286
- add lfs.httpDownloadEncoding with zstd and gzip support #6196
- Use core.ignorecase to determine case sensitivity #6212
- Full support of special attributes in migrate #6170
- feat: git lfs pointer support extensions #6093
- fetch: allow providing refs via stdin #6088
* Bugs
- gitattr: handle invalid wildmatch patterns #6324
- filter-process: Ignore file size in working copy when
cleaning #6011
- Handle unknown object sizes in progress log and fix
throttling #6288
- Fix standalone adapter crash and ignore invalid custom
adapter names #6252
- Reuse SSH sessions when possible and only close at client
exit #6266
- locking: ignore missing files after unlock #6244
- Fix remote ref resolution for download operations #6250
- Fix concurrent map/struct races in sshCache and lazyManifest
[#6243]
- Fix --remote option when a git push remote is set #6228
- Fix adapter reuse when server returns empty transfer adapter
name #6240
- commands: fix format string type mismatch in lockverifier
[#6237]
- Fix extra header duplication on retry #6204
- tools: add RobustRemove() for Windows to handle file lock
errors #6221
- transform DoWithAuth from recursive to loop approach to
prevent endless authentication attempts #6018
- lfshttp: fix auth response ExpiresIn data type #6200
- commands: show root help for -h #6172
- Handle git lfs checkout merge conflict option file paths
correctly #6136
- Support Macro in migrate --fixup #6126
* Misc
- Add missing patch version entries in primary change log #6334
- Update Linux distributions and include Debian ARM64 links in
releases #6333
- Upgrade to Go v1.27 #6332
- Remove stale Linux distributions before v3.8.0 release #6291
- t/t-pre-push.sh: use calc_oid_file in URL optimization test
[#6287]
- Update tests to dynamically match internal program limits
[#6285]
- Update Go modules and Dependabot configuration #6278
- Add corrupt object download tests #6274
- Fix and revise chunked transfer encoding test #6273
- Temporarily restore concurrency limit to historical fixed
default #6258
- Simplify client structure initializations #6254
- Use consistent exit functions for all commands #6255
- Add --add-i386 option to RPM build script #6251
- Update Linux distribution package list for v3.8.0 release
[#6248]
- Scale default concurrent transfers by CPU count #6241
- Fix and refactor HTTP encoding and retry tests #6207
- Update Windows release signing action #6222
- Simplify object storage directory traversals #6223
- Upgrade to Go v1.26 and build separate Windows resource files
on 386 and amd64 platforms #6220
- Various gopls lint cleanups for package git #6211
- Log additional HTTP request headers when tracing #6195
- Docs: recommend bracket-glob patterns for cross-platform case
safety in FAQ (refs #6187) #6192
- Improve formatting of manual page synopses #6188
- docs(README): add mise alternative method installation #6169
- Makefile,script: add vendored source release asset #6159
- Correct and improve grep -v and grep -c usage in tests #6151
- Add missing backticks around --no-modify-attrs #6154
- Add missing options to manual pages and make JSON options
consistent #6152
- Detect invalid object IDs and repo names in test functions
[#6142]
- Use relative paths exclusively for internal checkout and pull
operations #6140
- Fix manual page formatting errors from AsciiDoc conversion
[#6138]
- Add a FAQ entry re memory usage by Git when cloning #6137
- docs: Provide clearer instructions for non destructive
imports #6111
- Upgrade to Go 1.25 #6116
- commands: use Exit() function to exit with a warning message
[#6095]
* Fri Oct 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 3.7.1: (boo#1252259 CVE-2025-26625)
This release introduces security fixes for Linux, macOS, and
Windows systems, which have been collectively assigned
CVE-2025-26625.
When populating a Git repository's working tree with the contents
of Git LFS objects, certain Git LFS commands may write to files
visible outside the current Git working tree if symbolic or hard
links exist which collide with the paths of files tracked by Git
LFS.
Git LFS has resolved this problem by revising the git lfs
checkout and git lfs pull commands so that they check for
symbolic links in the same manner as performed by Git before
writing to files in the working tree. These commands now also
remove existing files in the working tree before writing new
files in their place.
As well, Git LFS has resolved a problem whereby the git lfs
checkout and git lfs pull commands, when run in a bare
repository, could write to files visible outside the repository.
While a specific and relatively unlikely set of conditions were
required for this to occur, it is no longer possible under any
circumstances.
We would like to extend a special thanks to the following
open-source contributors:
Apple Product Security for reporting this to us responsibly
* Bugs
- Detect symbolic links on checkout and pull (@chrisd8088)
* Misc
- Upgrade to Go 1.25 (@chrisd8088)
* Fri Jun 27 2025 Marcus Rueckert <mrueckert@suse.de>
- update to 3.7.0
This release is a feature release which introduces several new options
for fetching Git LFS objects, such as the ability to force objects
to be re-downloaded and the capacity to output object URLs and HTTP
metadata in JSON for external tools to consume. This release also
adds a configurable in-memory cache of file path pattern matches,
which along with other changes can help reduce the time required to
migrate large repositories to Git LFS.
Git LFS now supports the same .netrc files on Windows as Git and
curl, retries appropriately after all 429 status code HTTP
responses, permits the use of symbolic links to Git's object
storage during Git LFS migrations
- Features
- Cache a file path filter match result #6047 (@alexkad0)
- Add --refetch option to fetch #5975 (@redsun82)
- Add --json option to fetch #5974 (@redsun82)
- Add --dry-run option to fetch #5973 (@redsun82)
- Bugs
- Verify TLS/SSL certificates using default Go support for
macOS system root CAs #6049 (@chrisd8088)
- Prefer .netrc on windows if present #6055 (@johanvdw)
- Fix migrations where .git/objects is a symlink #6042
(@bk2204)
- Honour 429 object transfer response Retry-After headers #6014
(@chrisd8088)
- Misc
- Update Linux distribution package list for v3.7.0 release
(@chrisd8088)
- Report missing objects consistently when pushing #6027
(@chrisd8088)
- Use a git-update-ref script to update references #6048
(@alexkad0)
- Drop unused generic stub function for cloning files #6050
(@chrisd8088)
- Prevent conflicting curl macros in early Git version CI jobs
[#6040] (@chrisd8088)
- pull: improve error message on failing checkout #5629
(@bk2204)
- Fix language in code snippets in API docs #6035
(@slonopotamus)
- build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0
[#6034] (@dependabot[bot])
- Use single-target Makefile patterns for manual pages #6032
(@chrisd8088)
- use direct value nil for error #6024 (@alingse)
- Update minimum required Git version checks #6028
(@chrisd8088)
- build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0
[#6012] (@dependabot[bot])
- Upgrading x/crypto to v0.35.0 to solve CVE-2025-22869 #5997
(@gergelyfabian)
- Upgrade to Go 1.24 #6013 (@chrisd8088)
- Use constant format strings and fix HTTP error messages #5998
(@chrisd8088)
- Remove command name prefixes from progress messages #5995
(@chrisd8088)
- doc: Add missing "--to" argument in git-lfs-checkout example
[#6005] (@DarkDefender)
- Replace min/max helpers with built-in min/max #5999
(@Juneezee)
- Add security patch release process documentation #5987
(@chrisd8088)
- Replace unused debug mode with trace logging #5989
(@chrisd8088)
- Use default Ruby provided by Actions runners #5984
(@chrisd8088)
- build(deps): bump azure/trusted-signing-action from 0.5.0 to
0.5.1 #5981 (@dependabot[bot])
- Update workflows to use ARM runners and new Apple signing
certificate #5977 (@chrisd8088)
- docs/man/git-lfs-prune.adoc: fix --(no-)verify-unreachable
description #5959 (@m3ka24)
- docs/man/git-lfs-migrate.adoc: remove duplicate flag #5944
(@fedirz)
- Upgrade golang.org/x/net from 0.23.0 to 0.33.0 #5940
(@gergelyfabian)
- build(deps): bump golang.org/x/crypto from 0.21.0 to 0.31.0
[#5935] (@dependabot[bot])
- Simplify macOS CI jobs and specify Go toolchain version #5931
(@chrisd8088)
- Tighten security of Actions workflows #5930 (@bk2204)
- Corrected Pop!_OS naming #5929 (@LucasDondo)
- Update release process documentation and scripts #5920
(@chrisd8088)
- Update license copyright dates and minimum supported Git
version #5921 (@chrisd8088)
* Wed Jan 15 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 3.6.1: (boo#1235876)
This release introduces a security fix for all platforms, which
has been assigned CVE-2024-53263.
When requesting credentials from Git for a remote host, prior
versions of Git LFS passed portions of the host's URL to the
git-credential(1) command without checking for embedded
line-ending control characters, and then sent any credentials
received back from the Git credential helper to the remote host.
By inserting URL-encoded control characters such as line feed
(LF) or carriage return (CR) characters into the URL, an attacker
might have been able to retrieve a user's Git credentials.
Git LFS now prevents bare line feed (LF) characters from being
included in the values sent to the git-credential(1) command, and
also prevents bare carriage return (CR) characters from being
included unless the credential.protectProtocol configuration
option is set to a value equivalent to false.
* Bugs
- Reject bare line-ending control characters in Git credential
requests (@chrisd8088)
* Thu Nov 21 2024 Marcus Rueckert <mrueckert@suse.de>
- update to version 3.6.0:
https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0
* Sat Mar 16 2024 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 3.5.1:
* Build release assets with Go 1.21 #5668 (@bk2204)
* script/packagecloud: instantiate distro map properly #5662
(@bk2204)
* Install msgfmt on Windows in CI and release workflows
[#5666] (@chrisd8088)
* Sat Mar 16 2024 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 3.5.0:
no changelog available
- rework package to use obscpio
* Thu Dec 14 2023 Marcus Rueckert <mrueckert@suse.de>
- update to version 3.4.1:
https://github.com/git-lfs/git-lfs/releases/tag/v3.4.1
* Thu Jul 27 2023 Johannes Kastl <kastl@b1-systems.de>
- update to version 3.4.0:
https://github.com/git-lfs/git-lfs/releases/tag/v3.4.0
* Tue Dec 06 2022 Marcus Rueckert <mrueckert@suse.de>
- Update to version 3.3.0:
https://github.com/git-lfs/git-lfs/releases/tag/v3.3.0
- drop 5054.patch:
included in update
- we need a vendor tarball now
/usr/bin/git-lfs /usr/share/doc/packages/git-lfs /usr/share/doc/packages/git-lfs/CHANGELOG.md /usr/share/doc/packages/git-lfs/CODE-OF-CONDUCT.md /usr/share/doc/packages/git-lfs/CONTRIBUTING.md /usr/share/doc/packages/git-lfs/INSTALLING.md /usr/share/doc/packages/git-lfs/README.md /usr/share/licenses/git-lfs /usr/share/licenses/git-lfs/LICENSE.md /usr/share/man/man1/git-lfs-checkout.1.gz /usr/share/man/man1/git-lfs-clean.1.gz /usr/share/man/man1/git-lfs-clone.1.gz /usr/share/man/man1/git-lfs-completion.1.gz /usr/share/man/man1/git-lfs-dedup.1.gz /usr/share/man/man1/git-lfs-env.1.gz /usr/share/man/man1/git-lfs-ext.1.gz /usr/share/man/man1/git-lfs-fetch.1.gz /usr/share/man/man1/git-lfs-filter-process.1.gz /usr/share/man/man1/git-lfs-fsck.1.gz /usr/share/man/man1/git-lfs-install.1.gz /usr/share/man/man1/git-lfs-lock.1.gz /usr/share/man/man1/git-lfs-locks.1.gz /usr/share/man/man1/git-lfs-logs.1.gz /usr/share/man/man1/git-lfs-ls-files.1.gz /usr/share/man/man1/git-lfs-merge-driver.1.gz /usr/share/man/man1/git-lfs-migrate.1.gz /usr/share/man/man1/git-lfs-pointer.1.gz /usr/share/man/man1/git-lfs-post-checkout.1.gz /usr/share/man/man1/git-lfs-post-commit.1.gz /usr/share/man/man1/git-lfs-post-merge.1.gz /usr/share/man/man1/git-lfs-pre-push.1.gz /usr/share/man/man1/git-lfs-prune.1.gz /usr/share/man/man1/git-lfs-pull.1.gz /usr/share/man/man1/git-lfs-push.1.gz /usr/share/man/man1/git-lfs-smudge.1.gz /usr/share/man/man1/git-lfs-standalone-file.1.gz /usr/share/man/man1/git-lfs-status.1.gz /usr/share/man/man1/git-lfs-track.1.gz /usr/share/man/man1/git-lfs-uninstall.1.gz /usr/share/man/man1/git-lfs-unlock.1.gz /usr/share/man/man1/git-lfs-untrack.1.gz /usr/share/man/man1/git-lfs-update.1.gz /usr/share/man/man1/git-lfs.1.gz /usr/share/man/man5/git-lfs-config.5.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Sep 1 22:38:03 2026