Fossil

Timeline
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

50 most recent check-ins

2026-10-14
16:23
Document the --ii flag on "fossil bisect run" (leaf check-in: 2355d14ec5 ... user: drh tags: trunk)
14:08
Fix crash in the 'zip', 'tarball' and 'sqlar' commands when a manifest entry for a file has no hash (e.g. after a deletion). Reported off-list by Dan Mestas. (check-in: 4886b7de6d ... user: danield tags: trunk)
2026-10-13
20:17
Add the "remote-permalink" setting, which if set causes the "Permalink" hyperlink on the submenu of the "bisect" timeline to reference the remote repository that was most recently synced, rather than the local repository (which is probably a pop-up using "fossil bisect ui"). (check-in: afe6484378 ... user: drh tags: trunk)
2026-10-12
11:19
After the port number in a URL, now accept '?' and '#' as well as '/' (RFC 3986 section 3.2). From libfossil. (check-in: 36beb09dd5 ... user: danshearer tags: trunk)
11:08
An empty line after an interim 1xx reply, eg 100 Continue, does not end headers. Skip up to 4 empty lines directly after an interim reply. From libfossil. (check-in: 973e3e9720 ... user: danshearer tags: trunk)
11:00
Only decode '%' in urls if followed by exactly 2 hex digits, eg '%zz' mid-url no longer decoded as null. From libfossil. (check-in: 399a624524 ... user: danshearer tags: trunk)
10:54
Drop URL fragments ('#', typically an HTML anchor) from address specifiers for http/s and ssh. From libfossil. (check-in: 7e13ac5c4e ... user: danshearer tags: trunk)
09:54
Minor hardening against malformed and oversized deltas. Based on an off-list report from Dan Mestas. (check-in: 76922609df ... user: stephan tags: trunk)
08:16
Have test-delta-apply fail fatally if application of the input delta fails, rather that write out a zero-byte file. Reported off-list by Dan Mestas. (check-in: 54a0b17bb1 ... user: stephan tags: trunk)
08:12
When emitting a ci-lock-fail sync card ensure that the login name is not empty, otherwise we emit a malformed card (short by one token) which the remote ignores. Reported off-list by Dan Mestas. (check-in: 8d0de9d3da ... user: stephan tags: trunk)
08:03
Update deltafunc.c's deltaGetInt() to match the copy from delta.c (applied in [60c7b5f423] and in sqlite's counterpart copy). Reported by Dan Mestas. (check-in: 21d8fadb30 ... user: stephan tags: trunk)
08:00
Reject obsolete folded chunked http headers, and multiple chunk request. From libfossil. (check-in: c272f25079 ... user: danshearer tags: trunk)
07:53
When a sync-received file card does not hash to what it claims to, skip storing of the content to avoid that the otherwise-queued blob inevitably triggers fossil_fatal() via the verify-before-commit checks. Reported by Dan Mestas. (check-in: 9954612742 ... user: stephan tags: trunk)
07:36
During sync, only respond to uvgimme cards if the user has read permissions. All other paths to /uv content require that permission. Reported by Dan Mestas. (check-in: 54efccf708 ... user: stephan tags: trunk)
07:28
Add extension validity checks. RFC 9112: A recipient MUST ignore unrecognized chunk extensions, etc. From libfossil. (check-in: 2343135ec9 ... user: danshearer tags: trunk)
06:59
The chunk size is authoritative, so if more data than that is supplied we should not read it. From libfossil. (check-in: e288a41b3b ... user: danshearer tags: trunk)
06:53
Strip trailing dots on hostnames, which are valid hostnames but not accepted as TLS or certificate hostnames. from libfossil. (check-in: 6362cc0666 ... user: danshearer tags: trunk)
06:39
URL schemes are case insensitive, ie HTTP, HttP, http etc. From libfossil. (check-in: 629d4ece0e ... user: danshearer tags: trunk)
2026-10-11
22:51
Fix http_build_header() so /my%20repo stops sending 'POST /my repo', etc. Percent encode everything that RFC 3986 says MUST NOT be in a path, giving eg send POST /my%20repo. Ported from libfossil. (check-in: c4dec3a6ec ... user: danshearer tags: trunk)
22:29
Check bounds and type for HTTP Content-length header. Also reject reply with two different Content-Length values. From libfossil. (check-in: 4df4f6c1df ... user: danshearer tags: trunk)
22:21
When connecting via a proxy, use the server's own host name, without its port, in the CONNECT request, TLS server name, certificate check etc. (check-in: 33118a37bd ... user: danshearer tags: trunk)
21:20
Check the certificate of an https server given by IP address against the certificate's IP addresses. Don't send a TLS server name for an IP address or a non-ASCII host name. (check-in: 6753e74e26 ... user: danshearer tags: trunk)
21:12
Keep [square brackets] for IPv6 addresses at all times in url_parse_local(). From libfossil. (check-in: af496edce5 ... user: danshearer tags: trunk)
21:07
URL @ parsing fix: Do not connect to evil.example when given https://good.example?x=a@evil.example/r . From libfossil. (check-in: c6fbe0c05a ... user: danshearer tags: trunk)
13:51
Update the change log. (check-in: b0fad57ecb ... user: danield tags: trunk)
12:12
Adjust foci's xBestIndex() cost from 1 to 100 to address the performance regression report in forum post 2026-10-07T16:33:27Z. A value of 10 performed equivalently to 1. (check-in: 06ef844171 ... user: stephan tags: trunk)
2026-10-10
10:33
Replace an errant free() with a fossil_free(). Teach (uv export) to create the directory parts of uv names if needed, and fix what appeared to be a memleak when skipping overwriting of a file. (check-in: 9be336524c ... user: stephan tags: trunk)
09:04
Enhance the 'uv export' subcommand to make it easier to bulk export unversioned files. (check-in: 9d310a5eb2 ... user: danield tags: trunk)
2026-10-09
14:14
Update the built-in SQLite to the 3.54.0 release candidate for final testing. (check-in: 40c5397698 ... user: drh tags: trunk)
2026-10-08
09:51
Slight re-parenthesizing of the previous commit's query to avoid a corner case of picking up a non-technote artifact, as reported in forum post 2026-10-08T09:35:25Z. (check-in: 349f1a8eab ... user: stephan tags: trunk)
08:00
A very slight query reformulation in (wiki create --technote) which speeds it up by orders of magnitude on large repos. Bug report and suggested fix in forum post 2026-10-07T13:56:00Z. (check-in: ffc9cab3ac ... user: stephan tags: trunk)
2026-10-06
18:57
Update the built-in SQLite to a new 3.54.0 beta after some important fixes, for testing. (check-in: 2d6bfabc9e ... user: drh tags: trunk)
2026-10-05
23:01
Allow building on Windows under the MINGW64 shell. Multiple changes needed:
  • pacman command in the build doc was performing a search, not a "sync", what other package systems call install; thus, no-op
  • configure was presuming presence of /dev/null meant "not MinGW"; doubtless there are MinGW setups where this is the case, but the modern MinGW64 terminal is not one of these
  • the guards against trying to use linenoise on Windows weren't triggered for this type of build, causing link failures
(check-in: ddba8ea243 ... user: wyoung tags: trunk)
14:36
Update the built-in SQLite to the latest 3.54.0 beta, for testing. (check-in: e6e6a32c2c ... user: drh tags: trunk)
2026-10-04
07:49
Correct the var deref for cscope's path in the configure script. Reported by by Brick Viking in /chat. (Edit: re-attribute this to brickviking.) (check-in: e31cb3a70f ... user: brickviking tags: trunk)
2026-10-03
04:12
Dropped the "container" namespace verb from $(CENGINE) in the container-* targets so that it will work under Apple Container, which uses the legacy scheme, doubtless to avoid having silly-looking "container container" commands. Podman and Docker still support that syntax; it was added to separate these subcommands out, a practice we adopted to make our example commands clear. Broader engine compatibility is more important.

Also dropped the "build buildx" thing, as that also doesn't work on Apple Container, and it doesn't buy us anything we still need under Docker Engine, as long as you're on 23 or later. Podman never cared. (check-in: be50695420 ... user: wyoung tags: trunk)

2026-10-01
19:39
Provide more options on the "2-way diff" drop-down menu on the "fossil merge-info --tk" GUI. (check-in: 90742e4c7e ... user: drh tags: trunk)
12:01
Update the built-in SQLite to the latest trunk version for beta testing. (check-in: 51267fb4c3 ... user: drh tags: trunk)
2026-09-29
08:26
Improved throw-away cache speedup test scripts. (leaf check-in: 2266da94ef ... user: danshearer tags: cache-speedups)
2026-09-28
16:40
Fix a corner case of the import command which could leave behind a phantom. Based on bug report 2026-09-28T10:22:05Z. (check-in: 7f366c872c ... user: stephan tags: trunk)
15:54
Set the default wiki editor mimetype to markdown in two spots. (check-in: bf0daf0796 ... user: stephan tags: trunk)
12:48
Update cache-speedups to latest trunk for testing (check-in: 62e4b3a879 ... user: danshearer tags: cache-speedups)
2026-09-27
18:41
Fix incorrect detection of fossil.exe with an appended database. Forum 2026-09-27T08:05:34Z. (check-in: 76742655f0 ... user: drh tags: trunk)
18:40
Add the win/build64-debug.bat script, which builds fossil.exe suitable for debugging with VisualStudio on Windows. (check-in: bfb11d30b6 ... user: drh tags: trunk)
2026-09-25
20:37
In is_a_leaf(), count_nonbranch_children(), and leaf_rebuild(), ensure that cancel tags are filtered out. This corner case was pointed out by Dan Shearer via LLM analysis of libfossil, which unsurprisingly shares these same queries. (check-in: a822071af8 ... user: stephan tags: trunk)
19:26
Moved the mTLS section of www/ssl.wiki down into the server-side configuration as one motivating example of why you'd still want to run Fossil behind a TLS-aware RP. Clarified how all this works without duplicating the RP-specific details. (check-in: 3506473c27 ... user: wyoung tags: trunk)
18:58
Clarified the early parts of www/ssl.wiki. (check-in: df389b91f1 ... user: wyoung tags: trunk)
2026-09-24
10:59
Port in https://sqlite.org/src/info/0f5ddd0041: when reading UTF-8 chararacter-by-chararacter, allow U+fffe and U+fffd to pass through unchanged. (check-in: 9ce7e77d98 ... user: stephan tags: trunk)
2026-09-17
20:08
Fix undo to revert all changes after performing a merge with multiple versions specified. (check-in: 3c8d90873e ... user: mgagnon tags: trunk)
2026-08-28
11:49
Documentation improvements for /forumthread and /forumpost. (check-in: d04ad10377 ... user: drh tags: trunk)