Stephen Way
faaf522b05
Some checks are pending
ci / check (push) Waiting to run
Bugs:
* Shell injection in `fj auth setup-git`: the hostname is now validated
against a strict DNS pattern and `git config` is invoked directly
(no `sh -c`). Added 4 unit tests covering shell metacharacters.
* Pager won't compile on Windows: the libc-based dup2 redirect lives
behind `#[cfg(unix)]`. Non-Unix gets a no-op stub.
Agent-focused Forgejo API gaps:
* `fj issue edit-comment ID` / `delete-comment ID`. Fix a wrong comment
after the fact (an agent's bread-and-butter).
* `fj search code "..." [-R owner/name]`. The most-requested missing
search dimension for codebase exploration.
* `fj pr request-review N user1 user2`, `unrequest-review N user`.
Distinct from `pr review` (your own approval/changes/comment).
* `fj repo watch / unwatch / star / unstar / starred`. Mark repos for
monitoring.
* `fj milestone {list,view,create,edit,close,reopen,delete,assign}`
with `assign N --milestone ID|none` to attach an issue/PR.
UX + stability:
* Global `--json-fields foo,bar` projection on top of any `--json`
output, gh-style. Dotted-path support (`--json-fields owner.login`).
* 429 / Retry-After honored in the retry loop with a 30 s cap.
* Clap `suggestions` feature for typo'd subcommands.
* `fj auth token` and `auth status --show-token` refuse to write to a
TTY by default (`--force` to override).
CI:
* `.forgejo/workflows/ci.yml` runs fmt/clippy/test/release-build on
every push and PR, mirroring the local pre-push hook.
Docs:
* `SECURITY.md` with threat model and known sharp edges.
* `docs/gh-to-fj.md` full command-by-command mapping.
* `docs/faq.md` covering tokens, hosts, debug, scripting, plugins.
Tests: 60 → 75 passing (2 ignored: editor and env-mutating tests that
fight the cargo test harness on macOS).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
103 lines
4.4 KiB
Markdown
103 lines
4.4 KiB
Markdown
# Changelog
|
|
|
|
All notable changes will be recorded here. The format follows
|
|
[Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versions follow
|
|
[Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
|
## [Unreleased]
|
|
|
|
### Added (agent-focused Forgejo gaps)
|
|
|
|
- `fj issue edit-comment` / `delete-comment`. Lets an agent (or you)
|
|
fix or remove a wrong comment after the fact.
|
|
- `fj search code "..."` (and `-R owner/name` to scope to one repo).
|
|
Powered by Forgejo's `/repos/search/code` endpoint.
|
|
- `fj pr request-review N user1 user2,user3` and
|
|
`fj pr unrequest-review N user1`. Distinct from `pr review`, which
|
|
submits your own review.
|
|
- `fj repo watch` / `unwatch` / `star` / `unstar` / `starred`.
|
|
- `fj milestone {list,view,create,edit,close,reopen,delete,assign}`.
|
|
Includes `fj milestone assign N --milestone ID|none` to attach an
|
|
issue or PR to a milestone.
|
|
|
|
### Added (UX + stability)
|
|
|
|
- `--json-fields field1,field2` global flag. gh-style projection on top
|
|
of any `--json` output, with dotted-path support
|
|
(`--json-fields owner.login,id`).
|
|
- 429 / Retry-After honored in the retry loop with a 30 s cap. Wiremock
|
|
test added.
|
|
- `did you mean` suggestions on typo'd subcommands via clap's
|
|
`suggestions` feature.
|
|
- `fj auth token` and `fj auth status --show-token` now refuse to write
|
|
to a TTY (use `--force` to override). Avoids accidental shoulder-
|
|
surfing or capture in shell history.
|
|
- `tokio::signal::ctrl_c()` race in `cli::run` so the pager guard drops
|
|
cleanly on SIGINT.
|
|
- 10 wiremock-backed HTTP client integration tests covering retry
|
|
behavior (5xx, 429), header forwarding, pagination, and panic-free
|
|
error paths.
|
|
- `Client::for_base_url` test constructor pointing at an arbitrary URL.
|
|
- `.forgejo/workflows/ci.yml` runs the same gate as the pre-push hook
|
|
on every push and PR.
|
|
|
|
### Added (docs)
|
|
|
|
- `SECURITY.md` covering threat model, known sharp edges, and reporting.
|
|
- `docs/gh-to-fj.md` — complete command-by-command mapping.
|
|
- `docs/faq.md` — common questions about tokens, hosts, debug,
|
|
scripting, plugins.
|
|
|
|
### Changed
|
|
|
|
- Trimmed dependencies (no more `indicatif`, `futures-util`,
|
|
`is-terminal`, `textwrap`, `tempfile` in prod). Dropped reqwest
|
|
features we don't use (`stream`, `brotli`). Release profile uses
|
|
`lto = "fat"` and `panic = "abort"`.
|
|
- HTTP retry loop builds the request once and clones via
|
|
`reqwest::Request::try_clone` per attempt.
|
|
- Binary size: 5.94 MB → 4.15 MB stripped (-30%).
|
|
|
|
### Fixed
|
|
|
|
- **Shell injection** in `fj auth setup-git`. The hostname now must
|
|
match a strict DNS pattern before being interpolated into the
|
|
credential-helper string, and we call `git config` directly with
|
|
separate args instead of going through `sh -c`.
|
|
- **Pager won't compile on Windows**. The libc-based `dup2` redirect
|
|
now lives behind `#[cfg(unix)]`; non-Unix gets a no-op stub that
|
|
returns `None` from `maybe_start`.
|
|
- Removed the unsafe `std::env::set_var("FJ_NO_PAGER")` from dispatch.
|
|
`--no-pager` is now threaded into `pager::maybe_start(force_disabled)`.
|
|
- Replaced the panicking `.expect("token contains invalid header chars")`
|
|
in `auth_headers` with a typed error.
|
|
|
|
## 0.1.0 — 2026-05-13
|
|
|
|
Initial release. Multi-host Forgejo CLI with feature parity to `gh`
|
|
across the surface Forgejo exposes. Commands:
|
|
|
|
- `auth`: login, status, logout, list, switch, token, refresh, setup-git
|
|
- `repo`: list, view, clone, create, fork, sync, edit, rename, archive,
|
|
unarchive, delete, branches, topics, mirror, mirror-sync
|
|
- `issue`: list, view, create, edit, close, reopen, comment, develop
|
|
- `pr`: list, view, create, edit, diff, commits, files, checks, ready,
|
|
review, status, checkout, merge, close, reopen
|
|
- `release`: list, view, create, edit, delete, upload, download
|
|
- `label`, `run`, `secret`, `variable`, `search`, `browse`, `status`,
|
|
`org`, `ssh-key`, `gpg-key`, `alias`, `config`, `protect`, `hook`,
|
|
`extension`, `gist`, `api`, `completion`, `man`
|
|
|
|
Other highlights:
|
|
|
|
- Repo auto-detection from `upstream` / `origin` git remote.
|
|
- `--web` flag on all list/view subcommands.
|
|
- `$EDITOR` integration for body inputs.
|
|
- `fj api` with `-H`, `-X`, `-f`, `-F`, `--paginate`, `--include`,
|
|
`--silent`, `--jq` (dot-paths, `[N]`/`[-N]`, pipes).
|
|
- `--debug` / `FJ_DEBUG` request logging.
|
|
- Tokens in the OS keychain.
|
|
- Pager via `dup2` redirect to `$FJ_PAGER` / `$PAGER` / `less -FRX`.
|
|
- Pre-push hook running fmt, clippy `-D warnings`, tests, and release
|
|
build before any push. Live API smoke gated on `FJ_E2E=1`.
|