Releases: git-ecosystem/git-credential-manager
GCM 2.0.452
Changes:
- Add preliminary support for OAuth with GitHub AE (requires server support/changes) (#343)
- Add workaround for Windows Broker (WAM) running as admin (#344)
- Consume new MSAL library versions (#346)
Set MSAL embedded webview window title to give more context to the user (#347, #239)Not working currently (see here)
GCM 2.0.435-beta
Changes:
- Add support for the Windows authentication broker - Windows Hello support (default off) (#323)
- Pass parent window handle information to MSAL (#306)
- Fix computation of installation path on Linux/single-file publish (#310)
- Fix Windows user-only installer configuration bug (#335)
- Run postinstall actions as the current user, not root - stop changing ownership of ~/.gitconfig on macOS (#308)
- Avoid using the newer --show-scope Git config option - work with downlevel Git versions (#318)
- Fix winget publishing (#332, #338)
- Reduce warnings from tests (#337)
- Documentation fixes (#333)
Thanks to our contributors ❤️:
GCM 2.0.394-beta
GCM 2.0.374-beta
Changes:
- Move to .NET Framework 4.7.2 on Windows (#283)
- Move to .NET 5.0 on macOS and Linux (#288)
- Auto-detect on-premises/self-hosted providers via HTTP headers (#262)
- Use the user's default web browser for Microsoft authentication on macOS and drop the native helper (#274, #277)
- Trivially fix the macOS native helper crashes by deleting it 😅 (#264)
- Share the MSAL token cache with Microsoft developer tools on macOS as we already do on Windows (#275)
- Support
git-credential-cache
as a credential backing store on Linux (#287) - Support for the
NO_PROXY
option to bypass the proxy for certain addresses (#299, #297) - Use
System.CommandLine
to handle our command line parsing and allow host providers to offer custom commands (#273) - Fix a bug with host provider disposal (#272)
- Fix problems with resolving the executable file path on Linux (#298, #229, #252)
- Documentation fixes and improvements (#278, #265, #263)
Thanks to our contributors ❤️:
GCM 2.0.318-beta
Changes:
- Add explicit PAT authentication mode for the GitHub Provider (#236, #259)
- Auto-detect GHES instances that have a "github." URL prefix (#241)
- Allow use of older versions of libsecret such as in Ubuntu 18.04 (#244)
- Fix bug in Git config matching due due case sensitivity (#234)
- Ensure the /usr/local/bin directory exists on install (#257)
- Remove use of box drawing characters in warning output (#243)
Thanks to our contributors ❤️:
GCM 2.0.289-beta
Security Fixes:
- Patched an issue whereby cloning malicious repository on Windows could result in execution of an unverified executable
(CVE-2020-26233)
Changes:
GCM 2.0.280-beta
Changes:
- Fix a bug where Windows Integrated Authentication would be disabled by default (#194)
- Set the full path to standalone GCM Core installs, enabling overriding of bundled versions (#188, #199)
- Split the Windows installer into user- and system-wide 'flavours' (#197)
- Fix a bug with the GitHub provider on Windows in launching the auth UI with a username (#205)
Thanks to our contributors ❤️:
GCM 2.0.252-beta
Changes:
- Fixed a where a deadlock would occur when reading very large Git config files (#183)
GCM 2.0.249-beta
Changes:
- Fixed a bug on Linux were launching a browser would print out text to the terminal and fail authentication (#178)
GCM 2.0.246-beta
Changes:
- Very early support for Linux (#135)
- Remove username/password authentication for github.com (#171)
- Enables support for multiple users for GitHub, Bitbucket, and Azure Repos (when using the
*.visualstudio.com
URLs) (#160) - Fixes bug where the username was required in the remote URL for basic auth (#142)
- Fixes bug where port numbers in remote URLs were not parsed correctly (#156)
The Linux support has currently only been tested on Ubuntu 18.04 and 20.04 on 64-bit Intel processors. The provided Debian package is not yet signed. Due to the varied nature of Linux distributions, you will need to select and configure a credential storage system manually – see more here: https://aka.ms/gcmcore-linuxcredstores.
Now that OAuth has been fully adopted for github.com and works for all users (personal and organizational alike), the username/password option has been removed. The username/password option will soon be removed from the server-side anyway – see more here: https://github.blog/changelog/2019-08-08-password-based-http-basic-authentication-deprecation-and-removal/.