{"entries":[{"lastCommit":{"author":{"email":"blaz@mxxn.io","name":"Blaž Hrastnik","when":"2026-06-20T19:41:46.000000+09:00"},"committer":{"email":"noreply@github.com","name":"GitHub","when":"2026-06-20T19:41:46.000000+09:00"},"hash":"2d903f82ba83b5345888acc8461e8837c6b24668","message":"workspace trust: v2 (#15857)\n\n* workspace trust: v2\n\nSimplifies the previous implementation: user is prompted to either trust\nor deny, esc skips the prompt for now. Less choice fatigue and matches\nother implementations.\n\nUnlike other editors, we follow direnv implementation: .helix/ contents\nare hashed and a change to the config requires the user to re-approve.\nThis avoids attack vectors where the user trusts the workspace but pulls\nin an untrusted PR branch. To make the hashing safe I had to pull in\nsha2, we could in practice use sha1 that's already in the dependency\ntree via gix, but that seems like a bad cryptographic choice in 2026.\n\nThe on-disk file layout changed to use a directory with a file per\nfilepath, this avoids concurrent conflicts if you have multiple different\neditor instances writing to the trust config.\n\nIf the workspace is running in untrusted mode and trusting would make a\nmeaningful change (local config exists, or in level=none a language\nserver would start), then we show an indicator on the bottom corner of\nthe editor.\n\nThere's still a problem with git config: smudge filters still get\nexecuted and disabling that in untrusted mode would break autocrlf diffs.\nSince we only leverage gix for diffing, I'm hoping upstream could\nconsider a patch for this.\n\n* Address lints\n\n* Address clippy lint\n\n* Break doc links to private items\n\nShould get the lints CI green\n\n* fix: gix regression\n\n* Rename all to insecure, reintroduce globs\n\n* fix lint\n\n* Remove unused function\n\n---------\n\nCo-authored-by: Michael Davis ","tree":"0407587bbe15ce52bd52daf43303aa95941d3965"},"mode":"0100644","name":"config.rs","size":1340},{"lastCommit":{"author":{"email":"blaz@mxxn.io","name":"Blaž Hrastnik","when":"2026-06-20T19:41:46.000000+09:00"},"committer":{"email":"noreply@github.com","name":"GitHub","when":"2026-06-20T19:41:46.000000+09:00"},"hash":"2d903f82ba83b5345888acc8461e8837c6b24668","message":"workspace trust: v2 (#15857)\n\n* workspace trust: v2\n\nSimplifies the previous implementation: user is prompted to either trust\nor deny, esc skips the prompt for now. Less choice fatigue and matches\nother implementations.\n\nUnlike other editors, we follow direnv implementation: .helix/ contents\nare hashed and a change to the config requires the user to re-approve.\nThis avoids attack vectors where the user trusts the workspace but pulls\nin an untrusted PR branch. To make the hashing safe I had to pull in\nsha2, we could in practice use sha1 that's already in the dependency\ntree via gix, but that seems like a bad cryptographic choice in 2026.\n\nThe on-disk file layout changed to use a directory with a file per\nfilepath, this avoids concurrent conflicts if you have multiple different\neditor instances writing to the trust config.\n\nIf the workspace is running in untrusted mode and trusting would make a\nmeaningful change (local config exists, or in level=none a language\nserver would start), then we show an indicator on the bottom corner of\nthe editor.\n\nThere's still a problem with git config: smudge filters still get\nexecuted and disabling that in untrusted mode would break autocrlf diffs.\nSince we only leverage gix for diffing, I'm hoping upstream could\nconsider a patch for this.\n\n* Address lints\n\n* Address clippy lint\n\n* Break doc links to private items\n\nShould get the lints CI green\n\n* fix: gix regression\n\n* Rename all to insecure, reintroduce globs\n\n* fix lint\n\n* Remove unused function\n\n---------\n\nCo-authored-by: Michael Davis ","tree":"0407587bbe15ce52bd52daf43303aa95941d3965"},"mode":"0100644","name":"grammar.rs","size":23654},{"lastCommit":{"author":{"email":"blaz@mxxn.io","name":"Blaž Hrastnik","when":"2026-06-20T19:41:46.000000+09:00"},"committer":{"email":"noreply@github.com","name":"GitHub","when":"2026-06-20T19:41:46.000000+09:00"},"hash":"2d903f82ba83b5345888acc8461e8837c6b24668","message":"workspace trust: v2 (#15857)\n\n* workspace trust: v2\n\nSimplifies the previous implementation: user is prompted to either trust\nor deny, esc skips the prompt for now. Less choice fatigue and matches\nother implementations.\n\nUnlike other editors, we follow direnv implementation: .helix/ contents\nare hashed and a change to the config requires the user to re-approve.\nThis avoids attack vectors where the user trusts the workspace but pulls\nin an untrusted PR branch. To make the hashing safe I had to pull in\nsha2, we could in practice use sha1 that's already in the dependency\ntree via gix, but that seems like a bad cryptographic choice in 2026.\n\nThe on-disk file layout changed to use a directory with a file per\nfilepath, this avoids concurrent conflicts if you have multiple different\neditor instances writing to the trust config.\n\nIf the workspace is running in untrusted mode and trusting would make a\nmeaningful change (local config exists, or in level=none a language\nserver would start), then we show an indicator on the bottom corner of\nthe editor.\n\nThere's still a problem with git config: smudge filters still get\nexecuted and disabling that in untrusted mode would break autocrlf diffs.\nSince we only leverage gix for diffing, I'm hoping upstream could\nconsider a patch for this.\n\n* Address lints\n\n* Address clippy lint\n\n* Break doc links to private items\n\nShould get the lints CI green\n\n* fix: gix regression\n\n* Rename all to insecure, reintroduce globs\n\n* fix lint\n\n* Remove unused function\n\n---------\n\nCo-authored-by: Michael Davis ","tree":"0407587bbe15ce52bd52daf43303aa95941d3965"},"mode":"0100644","name":"lib.rs","size":12404},{"lastCommit":{"author":{"email":"RoloEdits@gmail.com","name":"RoloEdits","when":"2026-05-21T22:08:28.000000-07:00"},"committer":{"email":"noreply@github.com","name":"GitHub","when":"2026-05-22T14:08:28.000000+09:00"},"hash":"26a2d55dec9a52de1d6915bc2f4fd7e9e907ead7","message":"refactor: no longer bail on error fetching/building grammars (#15548)","tree":"6f8ed2d8efb63808bcc729a64eb223dd9a64bf58"},"mode":"0100644","name":"main.rs","size":282},{"lastCommit":{"author":{"email":"49699333+dependabot[bot]@users.noreply.github.com","name":"dependabot[bot]","when":"2026-07-04T16:04:39.000000-05:00"},"committer":{"email":"noreply@github.com","name":"GitHub","when":"2026-07-04T16:04:39.000000-05:00"},"hash":"d89c936036450cb864d26f4657873ceeb801cd0d","message":"build(deps): bump sha2 from 0.10.9 to 0.11.0 (#15960)\n\n* build(deps): bump sha2 from 0.10.9 to 0.11.0\n\nBumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0.\n- [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.10.9...sha2-v0.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: sha2\n dependency-version: 0.11.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \n\n* workspace trust: Explicitly hex_encode digests\n\nThe new sha2 version does not explicitly implement LowerHex, so we have\nto hex encode explicitly.\n\n---------\n\nSigned-off-by: dependabot[bot] \nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Michael Davis ","tree":"cf8c7466ff8485a96b1c0d9aa90e1b4cfdab4ea5"},"mode":"0100644","name":"workspace_trust.rs","size":31499}],"lastCommit":{"author":{"email":"49699333+dependabot[bot]@users.noreply.github.com","name":"dependabot[bot]","when":"2026-07-04T16:04:39.000000-05:00"},"committer":{"email":"noreply@github.com","name":"GitHub","when":"2026-07-04T16:04:39.000000-05:00"},"hash":"d89c936036450cb864d26f4657873ceeb801cd0d","message":"build(deps): bump sha2 from 0.10.9 to 0.11.0 (#15960)\n\n* build(deps): bump sha2 from 0.10.9 to 0.11.0\n\nBumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0.\n- [Commits](https://github.com/RustCrypto/hashes/compare/sha2-v0.10.9...sha2-v0.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: sha2\n dependency-version: 0.11.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \n\n* workspace trust: Explicitly hex_encode digests\n\nThe new sha2 version does not explicitly implement LowerHex, so we have\nto hex encode explicitly.\n\n---------\n\nSigned-off-by: dependabot[bot] \nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Michael Davis ","tree":"cf8c7466ff8485a96b1c0d9aa90e1b4cfdab4ea5"}}