@foss.global/gitmanager 2.8.0 → 2.10.0

package/.smartconfig.json

@@ -36,7 +36,7 @@
     },
     "schemaVersion": 2
   },
-  "@git.zone/tsrust": {
+  "@git.zone/rsrepo": {
     "rustflags": ["-Cstrip=symbols"],
     "targets": [
       "linux_amd64",

package/changelog.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 2026-11-11 - 2.10.0
+
+### Features
+
+- `listRepositoryLfsPointers()` throws a `GitManagerError` with the new code `lfsScanLimitExceeded` when its scan exceeds a bound, instead of a plain error.
+  - Every bound carries the code: 250,000 reachable objects, 100,000 pointer candidates, 64 MiB of object listing or metadata and 128 MiB of candidate content. The message names the bound; the object and candidate messages are unchanged, and a byte bound's message now ends with it (`...: git stdout exceeded maximum of 67108864 bytes`) where before it ended at the step. Other scan failures stay plain errors with unchanged messages.
+  - Callers branch on the code instead of the message: a repository too large to scan has an unknown pointer set, not an empty one.
+  - Minor release. Upgrade: `TGitManagerErrorCode` gains `lfsScanLimitExceeded`; an exhaustive `switch` over the codes needs the new case. Rollback below this release throws the plain error again; a consumer that relies on the code (the foss.global website S6 verifier, which reports the LFS class `unread`) must be rolled back with it.
+
+### Maintenance
+
+- Update release tooling: @git.zone/tsrepo 2.0.0 replaces the deprecated tsbuild, tstest, tsrun and tsdoc, and @git.zone/rsrepo 1.3.0 replaces the deprecated tsrust (scripts, test imports and the `.smartconfig.json` key `@git.zone/rsrepo`); @types/node 26.6.6, pnpm 12.17.0.
+  - The native notices are regenerated with rsrepo, which lists only the Cargo packages a build compiles: `aho-corasick` is no longer among them (103 packages per target instead of 104).
+
+## 2026-10-14 - 2.9.0
+
+### Features
+
+- `setDefaultBranch()` accepts `allowUnborn: true` and then points HEAD at a branch that does not exist yet.
+  - HEAD names the branch unborn, as in a new repository, until a push creates it. Without the flag a missing branch is still refused and HEAD stays unchanged; the name is validated either way.
+  - receive-pack refuses to delete the branch HEAD names, which fails a whole atomic push. A push that renames the default branch, creating the new one and deleting the old one, passes once HEAD names the new one. A refused push leaves HEAD unborn, and `setDefaultBranch()` without the flag to an existing branch points it back. A test pins all three over Smart HTTP.
+  - Upgrade: requires `@foss.global/interfaces` ^2.4.0 for `allowUnborn`; the field is optional and additive. Rollback below this release refuses `allowUnborn` as an unknown field; a consumer that sends it (the foss.global website release that moves HEAD before a push deleting the default branch) must be rolled back with it.
+
 ## 2026-10-14 - 2.8.0
 
 ### Features