[dependabot]

Bumps the cargo group with 1 update in the /fuzz directory: gix.
Bumps the cargo group with 1 update in the /git-morph directory: gix-packetline.
Bumps the cargo group with 1 update in the /tui directory: gix.

Updates gix from 0.88.0 to 0.89.0

Release notes

Sourced from gix's releases.

gix v0.89.0

Reverted (BREAKING)

• replace fs with gix-fs

  gix-fs already provides the filesystem helpers and recursive walkers. Keeping their duplicate implementation in gix-features adds unnecessary filesystem dependencies to the foundational feature crate.

  Remove the fs module and the walkdir and fs-read-dir features. Migrate workspace callers to gix_fs, move traversal requests to gix-fs/walkdir, and update the manifests, lockfile, traversal documentation, and feature check script together.

Changed (BREAKING)

• use gix::Result throughout the public API

  The error migration left public gix methods, iterators, callbacks, and configuration validators returning a mixture of exceptions, I/O errors, custom error enums, and even the rejected input itself. Callers still had to adapt these separately despite the common gix::Error boundary.

  Use the crate-level Result throughout APIs defined by gix, including fallible configuration inputs and owned TryFrom implementations. Keep underlying causes, classifications, and diagnostic metadata available through gix::Error. Configuration adapters accept arbitrary caller errors without panicking or losing their causes. Object kind conversions report validation errors. Re-exported plumbing APIs and error types required by external traits retain their existing contracts.

  Adapt gitoxide-core and gix-tix callers in the same breaking change, removing explicit conversions that became identities.

New Features

• remove linked worktrees safely

  Expose safe linked-worktree removal through gix, using the gix-worktree removal plumbing. Validate the selected worktree, inspect dirty and locked states, and preserve the checkout unless the requested removal policy permits deleting it.

  Enable removal through worktree-mutation and report progress and cleanup outcomes to callers. Keep branch deletion explicit, adding compare-and-swap branch removal for callers that have already inspected a target so concurrent branch changes are not lost. Cover porcelain removal behavior and conditional branch deletion in disposable repositories.

• add and check out linked worktrees

... (truncated)

Commits

• 0115e90 Release gix-error v0.5.0, gix-date v0.18.0, gix-actor v0.44.0, gix-trace v0.3...
• 794eeef prepare changelogs prior to release
• fd88555 Merge pull request #3043 from cruessler/run-gix-transport-tests-with-sha-256
• c2f1925 Merge pull request #3042 from cruessler/branch-9
• d78005a Merge pull request #3038 from cruessler/run-gix-discover-tests
• 248186c review
• 951b9fc Make first gix-transport test GIX_TEST_FIXTURE_HASH-aware
• b9093f8 review
• e6fb2ad change(gix-status)!: Remove unnecessary object_hash from Options
• 9572ce0 Add test for detached HEAD discovery
• Additional commits viewable in compare view

Updates gix-packetline from 0.21.3 to 0.22.2

Changelog

Sourced from gix-packetline's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Headline benefits of this extra-curricular release are various security improvements, and greatly improved error handling and consisstency. Plumbing crates for instance will now use a standard std::error::Error compatible error type.

Besides that, the tracing of all commands was greatly improved.

Changed (BREAKING)

• remove full-screen progress mode

  Full-screen progress required separate command and UI threads plus channel coordination, while line progress already covers long-running commands and works with independently buffered tracing.

  Remove --progress, --progress-keep-open, and the prodash-render-tui feature. Keep synchronous line progress as the only progress UI.

New Features

• make trace output independently configurable

  Quick review only, as it's mostly about tracing and gix which both aren't super important, and are seemingly working well. An extra agent-review couldn't find anything either.

  Replace the old boolean trace switch with a bounded -t/--trace counter: forest INFO and DEBUG at one or two occurrences, then flat DEBUG and TRACE at three or four. Keep --threads long-only and route tracing independently of verbose and progress rendering, including commands with bespoke execution paths and corpus runs.

  Initialize display tracing once before repository discovery, buffer it outside prodash, and emit it after command and progress teardown. Format forest and flat output with ANSI, then adapt the final stderr write so terminals get color while pipes and NO_COLOR remain plain.

  Corpus worker subscribers share that sink while retaining their complete JSON trace storage, and flat modes include completed spans. gix tix remains delegated to Tix so it installs only one subscriber.

• add and remove linked worktrees from the CLI

... (truncated)

Commits

• 3ebca8b Release gix-packetline v0.22.2, gix-worktree-stream v0.36.1, gix-archive v0.3...
• 209fb85 feat(gix-macros): replace the withdrawn bisync dependency (#2939)
• 2825d97 Merge pull request #2937 from SebTardif/fix/conflict-skip-consecutive-path
• 6be36bc review
• 4fa211d Merge pull request #2936 from GitoxideLabs/fixup-pack-creation
• 251e0f5 fix: skip only consecutive same-path conflict stages
• 4009a9a fix(gix-pack): retain additions from all merge parents (#2935)
• 0f837c0 Merge pull request #2931 from cruessler/make-slider-test-more-granular
• 169ae96 review
• 7192d9a add optional detailed report to slider test
• Additional commits viewable in compare view

Updates gix from 0.88.0 to 0.89.0

Release notes

Sourced from gix's releases.

gix v0.89.0

Reverted (BREAKING)

• replace fs with gix-fs

  gix-fs already provides the filesystem helpers and recursive walkers. Keeping their duplicate implementation in gix-features adds unnecessary filesystem dependencies to the foundational feature crate.

  Remove the fs module and the walkdir and fs-read-dir features. Migrate workspace callers to gix_fs, move traversal requests to gix-fs/walkdir, and update the manifests, lockfile, traversal documentation, and feature check script together.

Changed (BREAKING)

• use gix::Result throughout the public API

  The error migration left public gix methods, iterators, callbacks, and configuration validators returning a mixture of exceptions, I/O errors, custom error enums, and even the rejected input itself. Callers still had to adapt these separately despite the common gix::Error boundary.

  Use the crate-level Result throughout APIs defined by gix, including fallible configuration inputs and owned TryFrom implementations. Keep underlying causes, classifications, and diagnostic metadata available through gix::Error. Configuration adapters accept arbitrary caller errors without panicking or losing their causes. Object kind conversions report validation errors. Re-exported plumbing APIs and error types required by external traits retain their existing contracts.

  Adapt gitoxide-core and gix-tix callers in the same breaking change, removing explicit conversions that became identities.

New Features

• remove linked worktrees safely

  Expose safe linked-worktree removal through gix, using the gix-worktree removal plumbing. Validate the selected worktree, inspect dirty and locked states, and preserve the checkout unless the requested removal policy permits deleting it.

  Enable removal through worktree-mutation and report progress and cleanup outcomes to callers. Keep branch deletion explicit, adding compare-and-swap branch removal for callers that have already inspected a target so concurrent branch changes are not lost. Cover porcelain removal behavior and conditional branch deletion in disposable repositories.

• add and check out linked worktrees

... (truncated)

Commits

• 0115e90 Release gix-error v0.5.0, gix-date v0.18.0, gix-actor v0.44.0, gix-trace v0.3...
• 794eeef prepare changelogs prior to release
• fd88555 Merge pull request #3043 from cruessler/run-gix-transport-tests-with-sha-256
• c2f1925 Merge pull request #3042 from cruessler/branch-9
• d78005a Merge pull request #3038 from cruessler/run-gix-discover-tests
• 248186c review
• 951b9fc Make first gix-transport test GIX_TEST_FIXTURE_HASH-aware
• b9093f8 review
• e6fb2ad change(gix-status)!: Remove unnecessary object_hash from Options
• 9572ce0 Add test for detached HEAD discovery
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: a38f15c7-16ce-4473-a9ba-c5c020cb6161

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-28T12:51:32.913853Z	b4f919d	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud