#git
-
Lexifina builds a "git" for the US Code
Lexifina has reconstructed the change history of the US Code the way git tracks code: every phrase is tied to the law that wrote it and the date it took effect. The motivation is that lawyers and language models alike confuse old and current versions of the law.
-
Migrating Git Repos to SHA-256: An Adventure With Submodules
A hands-on account of moving a Git repository to the SHA-256 object format — and why the official documentation turns into meaningless soup the moment submodules enter the picture.
-
A fake gig and a git hook: an attempt to steal developer credentials
REVSYS founder Frank Wiles describes how a supposed client tried to run arbitrary code on his laptop through an innocent-looking git repository.
-
Git 2.56 released: safer conflict resolution and new commands
Junio C. Hamano has announced Git 2.56, bundling 748 commits from 104 developers, 39 of them first-timers. The headline changes touch merge-conflict handling, reference management, and history rewriting.
-
Git 2.56-rc0 Released: Swift Support and Updated Contributor Guidelines
A test build of Git 2.56-rc0 is now available. The release hardens the ORT merge engine, adds diff patterns for Swift and updates the project's contribution guidelines — all on the road to the upcoming Git 3.0.
-
Forgejo Patches Critical Remote Code Execution Vulnerability
The Forgejo project has released versions 16.0.4 and 15.0.8, fixing two vulnerabilities, including a critical RCE flaw in the mechanism for creating repositories from templates.
-
Scrapers are eating git.kernel.org: bots load the servers harder than live humans
Konstantin Ryabitsev explained that rendering commits for search and AI bots costs the Linux kernel infrastructure more than all legitimate traffic combined.
-
A malicious .git turns AI agents into runners of someone else's code
Manifold Security has disclosed eight vulnerabilities in seven console AI coding agents: the repository itself slips in a command that the agent runs on the developer's machine — outside the sandbox and with no confirmation prompt.
-
Claude Code Adds a Session Link to Commits — Users Want It Off by Default
A request has been filed in the Claude Code tracker asking to make the insertion of a session URL into commit messages and PR descriptions optional. Right now the feature is on by default, and people only find out about it after the fact.
-
Codeberg Bans Cryptocurrency Projects
The community behind the nonprofit forge Codeberg has voted for an amendment to its rules that classifies cryptocurrency projects as content harmful to the platform's reputation. The decision sparked debate among users.
-
A Test Assignment with a Surprise: How a Recruiter Sent a Developer Malware in Git Hooks
An Indian developer received a tempting job offer paying $10–15K a month — and along with it, a test project laced with hidden malware. A breakdown of the attack revealed an entire multi-stage operation.
-
Cursor Vulnerability: A Cloned Repository Can Run Code on Windows
A vulnerability has been found in the Cursor code editor on Windows: if a file named git.exe sits in the project root, the editor runs it with no warning and no confirmation. The malicious file then gains access to the user's SSH keys, cloud tokens and source code.
-
Article's author calls for more frequent use of the git history command
Hacker News is discussing a piece arguing that the capabilities of the git history command undeservedly remain in the shadow of other Git tools. The post drew 179 points and 109 comments.
-
Hackers Are Attacking a Critical Vulnerability in the Gitea Docker Image
Attackers are actively exploiting a critical vulnerability in the official Docker image of the self-hosted Gitea service that allows them to impersonate any user, including administrators.
-
Developers Are Leaving GitHub for Codeberg and Self-Hosted Solutions
Hacker News is buzzing with debate about the trend of moving away from GitHub in favor of Codeberg and self-hosted alternatives. The post drew 180 points and sparked 134 comments.