Eclipse JGit: Java implementation of Git 7.0.1

Improvements

• Support built-in diff drivers for hunk header function names
• Add numberOfObjectsSinceBitmap to RepoStatistics
• Add `numberOfPackFilesAfterBitmap` to RepoStatistics
• ResolveMerger: Allow setting the TreeWalk AttributesNodeProvider
• Add Union merge strategy support in .gitattributes files

Performance improvements

• Do not load bitmap indexes during directory scans
• RevWalk: Add an isMergedIntoAnyCommit() method
• Pack: separate an open/close accounting lock
• WindowCache: share removal work among multiple threads
• Optionally.Hard: avoid Optional creation on every use
• WindowCache: add bulk purge(), call from bulk sites
• Replace custom encoder Constants#encodeASCII by JDK implementation
• Replace custom encoder `Constants#encode` by JDK implementation

Bug fixes

• jgit-140 Fix calculation of pack files and objects since bitmap
• Pack: fix threading bug getting idx
• Fix potential NPE in TreeWalk#getFilterCommandDefinition
• jgit-118 Advertise "agent" capability when using protocol v2
• FileSnapshot: silence "Stale file handle" exceptions
• FileSnapshot: silence "Not a Directory" exceptions
• Fix potential NPE in ResolveMerger#getAttributesContentMergeStrategy
• Fix NPE in DiffFormatter#getDiffDriver
• Pack: ensure packfile is still valid while still recoverable
• PackDirectory: Filter out tmp GC pack files
• jgit-68 Align SHA request policies with CGit
• DiffDriver: fix formatting of javadoc
• Don't fail when trying to prune pack which is already gone
• Pack.java: Recover more often in Pack.copyAsIs2()
• jgit-48 AdvertisedRequestValidator: fix WantNotValidException caused by race in fetch protocol v2

Security fixes

The following changes fix CVE-2025-4949:

• ManifestParser: Do not accept DOCTYPE and entities to harden XML parser
• AmazonS3: Do not accept DOCTYPE and entities to harden XML parser

Kudos to Simon Gerst for reporting this vulnerability.

Build and Release Engineering

• Update target platform version in maven build to 4.32 (2024-06)
• Update Apache sshd to 2.14.0