Jeremy Rose 7ada37a15e Reject implicitly discovered bare Git repositories (#36924) ...

## Why

A repository can contain a tracked directory that Git implicitly treats as a bare
repository. Its configuration may select helpers such as `core.fsmonitor`, causing
Codex Git operations in that directory to execute repository-controlled code.

## What changed

- Pass `-c safe.bareRepository=explicit` to Codex-managed Git commands so they
  reject implicitly discovered bare repositories.
- Continue to support repositories explicitly selected with `--git-dir` or
  `GIT_DIR`.

## Testing

Add a regression test that clones a repository containing a tracked embedded Git
repository and verifies that guarded Git inspection rejects it without running
its configured filesystem monitor.

GitOrigin-RevId: 344b5bc1e0ffa94f2a1b788488aa653222da10f3

2026-08-04 16:53:33 +00:00

..

src

Reject implicitly discovered bare Git repositories (#36924)

2026-08-04 16:53:33 +00:00

tests

cloud-tasks: split the mock client out of cloud-tasks-client (#16456)

2026-04-01 12:09:14 -07:00

BUILD.bazel

Wire realtime WebRTC native media into Bazel (#17145)

2026-04-08 15:15:55 -07:00

Cargo.toml

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00