git

CVE-2026-3854 let any authenticated user run code on GitHub's backend with a single git push. GitHub patched github.com in two hours on March 4; public disclosure on April 28 found most Enterprise Server instances still vulnerable.

Git 2.54, released April 20, introduces a new history-editing command inspired by Jujutsu, config-based hooks, geometric repacking by default, and a pluggable object database built over two years and roughly 400 commits.

Forgejo 15.0 lands as the project's new LTS release with repository-scoped access tokens, reusable workflow expansion, OpenID Connect support, and ephemeral runners.

Git 2.53 defaults Rust support in both build systems and unlocks geometric repacking for partial clones, setting the stage for a Git 3.0 release by late 2026.