Git for Windows v2.48.1

Changes since Git for Windows v2.47.1(2) (January 14th 2025)

Git for Windows v2.48.1 is the last version to ship with the i686
("32-bit") variant of the installer, portable Git and archive. Only
32-bit MinGit will be built for future versions, until April 2029.

Due to persistent maintenance challenges and the community's limited
engagement and usage, git svn support in Git for Windows will be phased
out over the next few months.

New Features

  * Comes with Git v2.48.1.
  * Comes with MinTTY v3.7.7.
  * New Git for Windows installation now default to the Windows-native
    HTTPS transport backend.
  * Comes with the MSYS2 runtime (Git for Windows flavor) based on
    Cygwin v3.5.7 (Git for Windows skipped v3.5.5 because it failed to
    pass Git's test suite, and Cygwin v3.5.6 was superseded too
    quickly).
  * Comes with Tig v2.5.12.
  * Comes with cURL v8.12.1.
  * Comes with OpenSSL v3.2.4.

Bug Fixes

  * The installer now correctly blocks the installation on Windows 7
    and Windows 8 as these versions of Windows are no longer supported
    since Git for Windows v2.47.0
  * When using the cache credential helper, it could error out with
    "fatal: unable to connect to cache daemon: Unknown error" under
    certain circumstances; This was fixed.
  * Git for Windows used to issue a misleading warning when .gitignore
    was a directory, which has been fixed.

Git for Windows v2.48.0-rc2

Changes since Git for Windows v2.47.1 (November 25th 2024)

New Features

  * Comes with Git v2.48.0-rc2.
  * Comes with cURL v8.11.1.
  * Comes with MinTTY v3.7.7.
  * New Git for Windows installation now default to the Windows-native
    HTTPS transport backend.

Bug Fixes

  * The installer now correctly blocks the installation on Windows 7
    and Windows 8 as these versions of Windows are no longer supported
    since Git for Windows v2.47.0
  * When using the cache credential helper, it could error out with
    "fatal: unable to connect to cache daemon: Unknown error" under
    certain circumstances; This was fixed.

Git for Windows v2.48.0-rc1

Changes since Git for Windows v2.47.1 (November 25th 2024)

New Features

  * Comes with Git v2.48.0-rc1.
  * Comes with cURL v8.11.1.
  * Comes with MinTTY v3.7.7.
  * Comes with the MSYS2 runtime (Git for Windows flavor) based on
    Cygwin v3.5.5.

Bug Fixes

  * The installer now correctly blocks the installation on Windows 7
    and Windows 8 as these versions of Windows are no longer supported
    since Git for Windows v2.47.0

Git for Windows v2.48.0-rc0

Changes since Git for Windows v2.47.1 (November 25th 2024)

New Features

  * Comes with Git v2.48.0-rc0.
  * Comes with cURL v8.11.1.

Bug Fixes

  * The installer now correctly blocks the installation on Windows 7
    and Windows 8 as these versions of Windows are no longer supported
    since Git for Windows v2.47.0

Git for Windows v2.47.1(2)

Changes since Git for Windows v2.47.1 (November 25th 2024):

New Features

  * Comes with Git Credential Manager v2.6.1, addressing
    CVE-2024-50338.
  * Comes with Git LFS v3.6.1, addressing CVE-2024-53263.

Bug Fixes

  * CVE-2024-50338: Git Credential Manager can be tricked to exfiltrate
    credentials for a trusted site to an untrusted site. Since the URLs
    needed for such an attack look suspicious, this usually requires a
    recursive clone or fetch.
  * CVE-2024-53263: In conjunction with CVE-2024-52006, Git LFS can be
    tricked to exfiltrate credentials for a trusted site to an
    untrusted site.
  * CVE-2024-50349: When prompting the user for a password in the
    terminal, Git does not neutralize control characters.
  * CVE-2024-52005: The sideband channel does not neutralize control
    characters.
  * CVE-2024-52006: Similar to CVE-2020-5260, affecting credential
    helpers that interpret Carriage Returns as newlines.

MinGit for Windows v2.46.2(2)

Changes since Git for Windows v2.46.2 (September 24th 2024):

New Features

  * Comes with Git Credential Manager v2.6.1, addressing
    CVE-2024-50338.

Bug Fixes

  * CVE-2024-50338: Git Credential Manager can be tricked to exfiltrate
    credentials for a trusted site to an untrusted site. Since the URLs
    needed for such an attack look suspicious, this usually requires a
    recursive clone or fetch.
  * CVE-2024-50349: When prompting the user for a password in the
    terminal, Git does not neutralize control characters.
  * CVE-2024-52005: The sideband channel does not neutralize control
    characters.
  * CVE-2024-52006: Similar to CVE-2020-5260, affecting credential
    helpers that interpret Carriage Returns as newlines.

MinGit for Windows v2.45.2(2)

Changes since Git for Windows v2.45.2 (June 3rd 2024):

New Features

  * Comes with Git Credential Manager v2.6.1, addressing
    CVE-2024-50338.

Bug Fixes

  * CVE-2024-50338: Git Credential Manager can be tricked to exfiltrate
    credentials for a trusted site to an untrusted site. Since the URLs
    needed for such an attack look suspicious, this usually requires a
    recursive clone or fetch.
  * CVE-2024-50349: When prompting the user for a password in the
    terminal, Git does not neutralize control characters.
  * CVE-2024-52005: The sideband channel does not neutralize control
    characters.
  * CVE-2024-52006: Similar to CVE-2020-5260, affecting credential
    helpers that interpret Carriage Returns as newlines.

Git for Windows v2.47.1

Changes since Git for Windows v2.47.0(2) (October 22nd 2024)

This release comes with the first early native support of Windows/ARM64
, ready for testing. Please report any issues!

New Features

  * Comes with Git v2.47.1.
  * Comes with cURL v8.11.0.
  * Comes with Git LFS v3.6.0.

Bug Fixes

  * Due to a bug introduced in the v2.47 cycle, the installer showed an
    empty "experimental options" page, which was fixed.
  * A potential crash in Git Bash on Insider versions of Windows/ARM64
    was fixed.
  * On Windows/ARM64, running the 64-bit version of Git for Windows
    could infrequently cause deadlocked threads (see e.g. this report
    or this one), which was addressed.

Git for Windows v2.47.0(2)

Changes since Git for Windows v2.47.0 (October 8th 2024)

Bug Fixes

  * A regression in v2.47.0 where git maintenance start crashed
    immediately was fixed.
  * A regression where clones, fetches and pushes via SSH would
    dead-lock was fixed.
  * As of Git for Windows v2.47.0, Scalar was supposed to enable an
    optimized push algorithm, but for a typo didn't, which was fixed.
  * A few documentation and other, minor bug fixes from upstream Git
    were integrated into Git for Windows early.

Git for Windows v2.47.0

Changes since Git for Windows v2.46.2 (September 24th 2024)

Git for Windows for Windows v2.47 drops support for Windows 7 and for
Windows 8, as announced previously.

Please also note that the 32-bit variant of Git for Windows is
deprecated; Its last official release is planned for 2025.

New Features

  * Comes with Git v2.47.0.
  * Comes with the MSYS2 runtime (Git for Windows flavor) based on
    Cygwin v3.5.4, which drops Windows 7 and Windows 8 support.
  * The new, experimental git backfill command was added: It helps
    fetching relevant Git objects smartly in a partial, sparse clone.
  * The new, experimental git survey command was added. This command is
    designed to help identify less-than-ideal data shape in monorepos,
    and it will likely see highly active development. Stay tuned!
  * Comes with Git Credential Manager v2.6.0.