Gerrit 2.10 Release | Gerrit Code Review

Release Highlights

Support for externally loaded plugins.

Plugins can be implemented in Scala or Groovy using the Groovy provider and Scala provider plugins.
Customizable My menu.

Users can customize the contents of the My menu in the top menu. Administrators can configure the default contents of the menu.
For full details please refer to the release notes on the old site.

Issue 10262: Fix validation of wants in git-upload-pack for protocol v0 stateless transports.

See the following section for details.
Upgrade JGit to 4.5.5.201812240535-r.

This upgrade includes several major versions since 4.0.0 used in Gerrit version 2.10.7. Important fixes are summarized below. Please refer to the corresponding JGit release notes for full details.
- JGit 4.5.5:
  - Issue 10262: Fix validation of wants in git-upload-pack for protocol v0 stateless transports.
    
    AdvertiseRefsHook was not called for git-upload-pack in protocol v0 stateless transports, meaning that wants were not validated and a user could fetch anything that is pointed to by any ref (using fetch-by-sha1), as long as they could guess the object name.
- JGit 4.5.4:
  - Fix LockFile semantics when running on NFS.
  - Honor trustFolderStats also when reading packed-refs.
- JGit 4.5.3:
  - Fix exception handling for opening bitmap index files.
- JGit 4.5.2:
  - Fix pack marked as corrupted even if it isn’t.
- JGit 4.5.1:
  - Don’t remove Pack when FileNotFoundException is transient.
- JGit 4.1.0:
  - Handle stale NFS file handles on packed-refs file.
  - Use java.io.File instead of NIO to check existence of loose objects in ObjectDirectory to speed up inserting of loose objects.
  - Reduce memory consumption when creating bitmaps during writing pack files.