[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
git (changelog)	"< 6.0.0" → "< 6.0.1"

---

Release Notes

ruby-git/ruby-git (git)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• Git::Repository no longer defines object_contents, object_size, object_type, commit_data, tag_data, revparse, namerev, or diff_name_status. Call cat_file_contents, cat_file_size, cat_file_type, cat_file_commit, cat_file_tag, rev_parse, name_rev, and diff_path_status instead.
• errors: the minimum activesupport version is now 7.0.9 (was 5.0).
• deprecation: Git::Deprecation.deprecation_horizon is now "in a future major release" (was "6.0.0"). Code that parses it as a version raises.
• factories: raise ArgumentError when Git.init receives an unknown option key
• factories: raise ArgumentError when Git.open or Git.bare receives an unknown option key
• factories: Git.init and Git.clone expand a ~-prefixed directory and a ~-prefixed :repository option to the home directory instead of passing the literal ~ to git. Git.clone also expands a ~-prefixed :chdir option.
• path_resolver: a relative :repository or :index option passed to a factory method is expanded against the process working directory instead of the working directory or git directory. Callers who relied on the old expansion pass the joined path explicitly.
• repository: Git::Repository#archive raises Git::Error instead of a Zlib::Error subclass when gzip compression fails; the Zlib::Error is available through cause.
• stash: Git::Repository#stash_store raises Git::UnexpectedResultError instead of returning nil when the stored commit is missing from the stash list.
• tag: Git::Repository#tag_create raises Git::UnexpectedResultError instead of returning nil when the tag it created is missing from the tag list.
• remote: Git::Remote is removed and referencing it raises NameError; Git::Repository no longer defines remote or config_remote. Use Git::Repository#remote_list, which returns ArrayGit::RemoteInfo, and the name-based remote operations; filter Git::Repository#config_list on the "remote.." key prefix for entries Git::RemoteInfo does not model.
• branch: Git::Branch and Git::Branches are removed and referencing them raises NameError; Git::Repository no longer defines branch or branches, and Git::Remote no longer defines branch. Use Git::Repository#branch_list, which returns ArrayGit::BranchInfo, and the name-based branch operations.
• worktree: Git::Worktree, Git::Worktrees, Git::Repository#worktree, Git::Repository#worktrees, and Git::Repository#worktrees_all are removed. Git::Repository#worktree_add returns a Git::WorktreeInfo instead of the git worktree add output String.
• stash: Git::Stash, Git::Stashes, Git::Repository#stashes_all, and Git::Repository#stash_save are removed. Git::Repository#stash_list returns ArrayGit::StashInfo, newest first, instead of a String; stash_infos remains as an alias.
• status: Git::Status and Git::Status::StatusFile are removed and referencing them raises NameError; Git::Repository no longer defines status. Use Git::Repository#status_info, which returns Git::StatusInfo holding one
• author: Git::Author is removed; referencing it raises NameError. Use
• Git::Repository no longer defines remotes; call remote_list (or remote_names) instead. Git::Branch no longer defines stashes; call Git::Repository#stash_infos instead. Git::Commands::CatFile::Raw no longer accepts the allow_unknown_type option and raises ArgumentError when it is passed; there is no replacement.
• Git::Repository#config, Git::Repository#global_config, Git.global_config, and the config and global_config instance methods of the Git module no longer exist. Use config_get, config_set, and config_list (with
• log: Git::Log no longer includes Enumerable or defines each, size, to_s, first, last, or []. Call Git::Log#execute and use the Git::Log::Result it returns. Git::Object::Commit no longer defines set_commit; call from_data instead.
• repository: Git::Repository no longer defines empty?, reset_hard, conflicts, is_local_branch?, is_remote_branch?, is_branch?, or branches_all. Call no_commits?, reset(commitish, hard: true), each_conflict, local_branch?, remote_branch?, branch?, and branch_list instead.
• repository: Git::Repository#clean no longer accepts :ff or :force_force, diff_path_status no longer accepts :path, and commit no longer accepts :add_all; each raises ArgumentError. set_working and set_index no longer take a positional check argument. Use force: 2, :path_limiter, :all, and must_exist: instead.
• repository: with_index, with_temp_index, with_working, and with_temp_working raise ArgumentError when called without a block or with a block that declares no positional parameter. Declare the parameter and call methods on it. See UPGRADING.md.
• repository: with_index, with_temp_index, with_working, and with_temp_working yield a separate Git::Repository bound to the temporary index or working tree instead of rebinding the receiver. Code that ignores the block parameter and calls the outer repository inside the block now runs against the original index or working tree; use the block parameter. See UPGRADING.md.
• export: Git.export(url, dir, remote: name) raises ArgumentError instead of silently ignoring the option. Delete the option from the call; there is no replacement because the remote name was never observable in the exported tree.
• Git.clone no longer accepts :path, :recursive, or :remote and raises ArgumentError when given one. Use :chdir, :recurse_submodules, and :origin instead.
• Git.binary_version no longer exists; use Git.git_version (call .to_a for the legacy Array). Git.ls_remote(nil) raises ArgumentError; omit the argument or pass '.'.
• The Git::Base constant no longer exists, so is_a?(Git::Base) checks and monkeypatches of Git::Base raise NameError. Include an application-owned module into Git::Repository instead.
• Git::Repository#lib no longer exists. Call the facade method directly on the repository object.
• Git::CommandLineResult no longer exists. Use
• Git::Object::Tag no longer exists, Git::Repository no longer defines tag, tags, or tag_add, and Git::Object.new no longer accepts an is_tag argument. Use tag_list and tag_create on Git::Repository, which return
• Git::Repository no longer defines add_remote, remove_remote, set_remote_url, add_tag, or delete_tag. Call remote_add, remote_remove, remote_set_url, tag_create, and tag_delete instead.
• addressable 2.9.0 or later is required. Applications whose bundle caps addressable below 2.9.0 must update that dependency or stay on the latest v5.x release.
• git 2.43.0 or later is required. Ubuntu 22.04 users must install a newer git or stay on v5.x.
• Ruby 3.3.0 or later is required. Applications on Ruby 3.2 must upgrade Ruby or stay on the latest v5.x release.

Features

• author: Remove Git::Author (315eec2), closes #​1728
• branch: Remove Git::Branch and Git::Branches (bbe3a83), closes #​1723 #​1631
• export: Reject the :remote option to Git.export (6d46862), closes #​1820
• factories: Accept an :index option in Git.bare (333d609), closes #​1868
• factories: Raise ArgumentError when Git.init receives an unknown option key (0ffc8cd), closes #​1913 #​1869
• factories: Raise ArgumentError when Git.open or Git.bare receives an unknown option key (3991893), closes #​1869
• log: Remove the Git::Log Enumerable interface and Commit#set_commit (a2d2934), closes #​1775
• Raise the minimum supported git version to 2.43.0 (103a8da), closes #​1140
• remote: Remove Git::Remote and Git::Repository#config_remote (39ee9c5), closes #​1724
• Remove Git::CommandLineResult (cff038a), closes #​1770
• Remove Git::Object::Tag (d826a0a), closes #​1726
• Remove Git::Repository#lib (5778196), closes #​1769
• Remove Git::Repository#remotes, Git::Branch#stashes, and allow_unknown_type (b3353d3), closes #​1725
• Remove Git.binary_version and the Git.ls_remote(nil) shim (a31e9db), closes #​1773
• Remove the eight renamed facade aliases (0fb37d7), closes #​1924
• Remove the five renamed facade methods (bde6f52), closes #​1772
• Remove the Git::Base compatibility shim (70d3e27), closes #​1768
• Remove the Git.clone legacy options (:path, :recursive, :remote) (bde02ee), closes #​1774
• Remove the v4.x-style configuration API (b5dd9ba), closes #​1771
• repository: Deprecate Git::Repository#set_index and #set_working (7f7511d), closes #​1833
• repository: Remove the seven renamed Git::Repository methods (ae1fecf), closes #​1777
• repository: Remove the v4.x option shims from clean, diff_path_status, commit, and set_* (65fed59), closes #​1776
• repository: Require a block parameter on the with_* context helpers (6f7776e)
• stash: Remove the legacy stash API and return StashInfo from stash_list (f73c0bc), closes #​1634
• status: Remove Git::Status and Git::Status::StatusFile (51cb33f), closes #​1727
• worktree: Remove the legacy worktree API and return WorktreeInfo from worktree_add (a7a87b7), closes #​1635

Bug Fixes

• commands: Close the stdin pipe's write end when the writer thread cannot start (8667db2), closes #​1860
• commands: Raise Git::Error when the stdin writer thread cannot be started (a61eafc), closes #​1860
• commands: Raise Git::Error when with_stdin cannot create a pipe (e5d0c04), closes #​1811
• Declare logger as a runtime dependency (d38b4c1)
• deprecation: Load what the log, notify, and report behaviors need (5cb1db3)
• Detect a missing lychee without a shell probe (f3bf20f)
• encoding: Scrub lines whose detected encoding has no Ruby converter (517cd99), closes #​1810
• errors: Make the Git::GitExecuteError warning follow the deprecation policy (e16a405), closes #​1908
• errors: Raise Git::Error instead of a bare SystemCallError from filesystem calls (c6aa107), closes #​1804
• export: Drop the redundant checkout that broke Git.export for tags (5b444b4), closes #​1815
• export: Say what the destination holds when removing .git fails (510713d)
• factories: Make ~ mean the home directory in every factory path (b03cfcc), closes #​1873
• path_resolver: Expand relative :repository and :index against the process cwd (5196d8e), closes #​1871
• repository: Raise Git::Error when archive gzip compression fails (f21c895), closes #​1812
• stash: Raise UnexpectedResultError when stash_store cannot find the stored entry (64486c7), closes #​1855
• tag: Raise UnexpectedResultError when tag_create cannot find the new tag (de6c8d8), closes #​1849

Other Changes

• branch: Follow up on the review of the branch and remote removal (7aa2f18), closes #​1851
• Clarify v5.x option validation scope (0d15421)
• commands: Drop version gates below the 2.43.0 floor (bd97b2f)
• Comment the hooks that mutate ENV and the working directory (ea4c197)
• deprecation: Retire the version horizon as a source of warning text (137e5b7), closes #​1908
• Describe the with_* helpers in ADR-0009 as yielding a derived repository (f99194c), closes #​1830
• export: Cover the state Git.export leaves when removing .git fails (8fe1fdd)
• export: Describe what a failed .git removal leaves behind (7995d83)
• fsck: Correct command integration spec (e550f72)
• Make test:gem load the gem from an isolated install (4709a13), closes #​1882
• Name Git::CommandLine::Result in spec descriptions (406b396)
• Name the 5.x maintenance branch alongside 4.x (f264747)
• Name the removal horizon in every @​deprecated YARD tag (9cfd7cf), closes #​1917
• Name the restore checkout in the failure-state notes (bec03f8)
• path_resolver: Remove the unreachable git-binary-not-found rescue (3623f59)
• Raise required_ruby_version to 3.3 and drop the Ruby 3.3 gates on yard-lint (a551fb4), closes #​1722
• readme: Announce the 5.x branch and the v6.0.0 line on main (4510e7d)
• readme: Announce the deletion of the v1 and master branches (6c8251f), closes #​1786
• readme: Derive the JRuby and TruffleRuby floors from the MRI floor (16558cf)
• readme: Replace the v5.0.0 release banner with a v6.0.0 development note (6bb4e80)
• readme: Replace the v6.0.0 development note with the release banner (adf27e7)
• readme: State that deprecation warnings fire on every call (f1426f4), closes #​1909
• Record ADR-0008 on converting errors from outside the gem at the boundary (64344da)
• Record ADR-0009 on what a failed operation leaves behind (1cedde3)
• Reject BREAKING CHANGE footers that release-please would truncate (84ca7ba)
• Release v6.0.0 as the next version from main (dbee8b9)
• Remove git version skips at or below 2.43.0 (61a87b1)
• Remove the diff fixture's submodule setup, which always failed (8240b30)
• Replace Ruby 3.2 with 3.3 in the CI and cache-warming matrices (6970c25)
• Replace the release-as config pin with a Release-As commit footer (ebb7605)
• repository: State the failure state of in_branch and merge_into in a note tag (a4a5059)
• repository: Yield a derived repository from the with_* context helpers (56e7a35), closes #​1830
• Require addressable 2.9 or later (e790d13), closes #​1221
• Restructure the diff fixture so it needs no rubocop disables (85158af)
• Review the prose in README.md and UPGRADING.md (be7f48c)
• Rework ADR-0009 after review and link it from the facade skills (44c41f5)
• skills: Add an rspec-integration-testing-standards override (bb97e0a), closes #​1874
• skills: Add the README banner swaps to the release checklists (54ed695)
• skills: Add the sections every skill is required to have (8a0c878)
• skills: Add the testing-guide override skill (54818b7)
• skills: Check the failure-state note before flagging a missing restore (b18e1f1)
• skills: Make rspec-unit-testing-standards a thin override of the plugin skill (aa41348)
• skills: Make tdd-refactor-step a thin override of the plugin skill (8977ac8)
• skills: Make test-debugging a thin override of the plugin skill (8323c10)
• skills: Prefer not touching global state over restoring it (784d4d4)
• skills: Record the Git::CommandLineResult removal in the skill references (070c73b)
• skills: Record the Git::Object::Tag removal in the skill references (6503b7a)
• skills: Record the Release-As pin and two-PR shape of a maintenance branch cut (4db3834)
• skills: Update the tag example in the facade-implementation guardrail (3a9f1a0)
• State the Ruby 3.3 floor in UPGRADING.md, CONTRIBUTING.md, and the agent skills (00ecc30)
• State what a failure leaves behind for the operations ADR-0009 covers (a136d72), closes #​1831
• upgrading: Name the v5.x APIs that validate option names (acbe015)
• upgrading: Name the v6 section by series (d3ad986)
• upgrading: Organize the v6.x section around what the reader has to do (1f6eace)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 55887c2a-3b25-4166-9942-f73159fd9d58

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	gem/​git@​5.7.1 ⏵ 6.0.0	+1

View full report

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 0c3cb8a.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
rubygems/git	6.0.0	🟢 4.6	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 0 Found 2/21 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• Gemfile.lock

[github-actions]

Code Coverage (app)

Total Project Coverage	20.65%

[github-actions]

Code Coverage (IAN/grid)

Total Project Coverage	100.00%	✅

[github-actions]

Code Coverage (IAN/util)

Total Project Coverage	100.00%	✅

[github-actions]

Code Coverage (IAN/world)

Total Project Coverage	99.45%	✅

[github-actions]

Code Coverage (IAN/listener)

Total Project Coverage	100.00%	✅

[github-actions]

Code Coverage (IAN/enums)

Total Project Coverage	100.00%	✅

[github-actions]

Code Coverage (IAN/vesseldata)

Total Project Coverage	98.91%	✅

[github-actions]

Code Coverage (IAN)

Total Project Coverage	99.43%	✅

[github-actions]

Code Coverage (IAN/udp)

Total Project Coverage	100.00%	✅

[github-actions]

Code Coverage (IAN/packets)

Total Project Coverage	99.67%	✅

[github-actions]

Total Code Coverage

Total Project Coverage	32.97%	❌

[github-actions]

Unit Test Results

  128 files    128 suites   14m 45s ⏱️
1 621 tests 1 621 ✅ 0 💤 0 ❌
3 343 runs  3 343 ✅ 0 💤 0 ❌

Results for commit 0c3cb8a.

[github-actions]

Konsist Test Results

 14 files   14 suites   35s ⏱️
153 tests 153 ✅ 0 💤 0 ❌
532 runs  532 ✅ 0 💤 0 ❌

Results for commit 0c3cb8a.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 6.x releases. But if you manually upgrade to 6.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.