@foss.global/interfaces 2.1.0 → 2.1.1

package/changelog.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 2026-10-13 - 2.1.1
+
+### Fixes
+
+- Correct the atomic push contract docs: `http` push remotes must be loopback IP literals (`127.0.0.0/8`, `[::1]`), never `localhost`; a ref already at `newObjectId` reports `ok` without a lease check
+
 ## 2026-10-13 - 2.1.0
 
 ### Features

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@foss.global/interfaces',
-    version: '2.1.0',
+    version: '2.1.1',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the foss.global Git platform ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx5QkFBeUI7SUFDL0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHFHQUFxRztDQUNuSCxDQUFBIn0=

package/dist_ts/data/gitmanager.d.ts

@@ -83,11 +83,13 @@ export interface IGitManagerAtomicPushRefUpdate {
  * before any ref is sent and never falls back to ref-by-ref updates.
  *
  * `remoteUrl` is used for this push only and is never stored in the
- * repository. It must be `https`, or `http` to a loopback host
- * (`127.0.0.0/8`, `::1` or `localhost`); `ssh`, `git`, `file` and scp-like
- * URLs are refused. Transfer options behave as for `importMirror`, except
- * that a push credential is also accepted for `http` to a loopback host, which
- * never leaves the machine; the URL must not carry user information.
+ * repository. It must be `https`, or `http` to a loopback IP address
+ * (`127.0.0.0/8` or `[::1]`); host names such as `localhost` are refused for
+ * `http` because their resolution is not checked. `ssh`, `git`, `file` and
+ * scp-like URLs are refused. Transfer options behave as for `importMirror`,
+ * except that a push credential is also accepted for `http` to a loopback IP
+ * address, which never leaves the machine; the URL must not carry user
+ * information.
  */
 export interface IGitManagerAtomicPushRequest extends IGitManagerRepositorySelector, IGitManagerRemoteTransferOptions {
     remoteUrl: string;
@@ -96,7 +98,11 @@ export interface IGitManagerAtomicPushRequest extends IGitManagerRepositorySelec
 }
 /**
  * Outcome of one ref as the remote reported it. `stale` means the lease
- * failed: the remote ref did not point at the expected object. `rejected`
+ * failed: the remote ref did not point at the expected object. A ref that
+ * already points at `newObjectId` is reported `ok` without its lease being
+ * checked, because git skips it as up to date before the lease check; such a
+ * ref is not changed, so an `ok` result never overwrote an object the caller
+ * did not expect. `rejected`
  * covers every other refusal, such as a hook or ref protection, and also the
  * refs the remote refused only because another ref of the same atomic push
  * failed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foss.global/interfaces",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the foss.global Git platform ecosystem.",
   "exports": {

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@foss.global/interfaces',
-  version: '2.1.0',
+  version: '2.1.1',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the foss.global Git platform ecosystem.'
 }

package/ts/data/gitmanager.ts

@@ -104,11 +104,13 @@ export interface IGitManagerAtomicPushRefUpdate {
  * before any ref is sent and never falls back to ref-by-ref updates.
  *
  * `remoteUrl` is used for this push only and is never stored in the
- * repository. It must be `https`, or `http` to a loopback host
- * (`127.0.0.0/8`, `::1` or `localhost`); `ssh`, `git`, `file` and scp-like
- * URLs are refused. Transfer options behave as for `importMirror`, except
- * that a push credential is also accepted for `http` to a loopback host, which
- * never leaves the machine; the URL must not carry user information.
+ * repository. It must be `https`, or `http` to a loopback IP address
+ * (`127.0.0.0/8` or `[::1]`); host names such as `localhost` are refused for
+ * `http` because their resolution is not checked. `ssh`, `git`, `file` and
+ * scp-like URLs are refused. Transfer options behave as for `importMirror`,
+ * except that a push credential is also accepted for `http` to a loopback IP
+ * address, which never leaves the machine; the URL must not carry user
+ * information.
  */
 export interface IGitManagerAtomicPushRequest extends IGitManagerRepositorySelector, IGitManagerRemoteTransferOptions {
   remoteUrl: string;
@@ -118,7 +120,11 @@ export interface IGitManagerAtomicPushRequest extends IGitManagerRepositorySelec
 
 /**
  * Outcome of one ref as the remote reported it. `stale` means the lease
- * failed: the remote ref did not point at the expected object. `rejected`
+ * failed: the remote ref did not point at the expected object. A ref that
+ * already points at `newObjectId` is reported `ok` without its lease being
+ * checked, because git skips it as up to date before the lease check; such a
+ * ref is not changed, so an `ok` result never overwrote an object the caller
+ * did not expect. `rejected`
  * covers every other refusal, such as a hook or ref protection, and also the
  * refs the remote refused only because another ref of the same atomic push
  * failed.