chore: release main

[git-quickbeam]

Release Notes

git-vendor: 1.0.0-alpha.1

1.0.0-alpha.1 (2026-05-19)

Features

• Add Error::InvalidName (e535fcf)
• Add Error::InvalidUrl and Error::Fetch variants (b9d4407)
• Add VendorName validated newtype (e535fcf)
• Add DepotRepository trait and VendorEntry (24f21a7)
• Add Error type with thiserror and impl_gix_from! macro (24f21a7)
• Add exe module with VendorWorktree trait (checkout/track/untrack/sync) (1da7741)
• Add explicit ours commit parameter to VendorRepository::vendor_paths (a5c94e6)
• Add gix tree-editor and traverse error conversions to Error (f7fe174)
• Add PatternMapping, VendorStatus, VendorMerge, VendorConfig types (1da7741)
• Add VendorConfig::open_from_bytes (33cd3ba)
• Define DepotRepository trait and Error type (24f21a7)
• Derive Error::Config for invalid vendor glob patterns (f7fe174)
• Enable gix blocking-network-client feature (b9d4407)
• Enforce vendor name invariant via validated VendorName newtype (e535fcf)
• Filter and remap upstream blobs into local path space in upstream_tree (f7fe174)
• Implement base_tree as upstream_tree at the recorded base (e1c0593)
• Implement fetch_vendor for gix::Repository (b9d4407)
• Implement fetch_vendor with anonymous remote fetch and ref projection (b9d4407)
• Implement upstream_tree pattern filtering and remapping (f7fe174)
• Implement vendor_tip via try_find_reference (e1c0593)
• Implement PatternMapping and VendorConfig (33cd3ba)
• Implement VendorConfig and PatternMapping with tests (33cd3ba)

Bug Fixes

• Error when all configured patterns are invalid instead of silently emptying the tree (6561041)
• Harden upstream_tree glob matching and path remapping (3caa4ac)
• Harden upstream_tree pattern indexing, path safety, and traversal (6561041)
• Pair compiled globs with their PatternMapping to prevent index desync (6561041)
• Reject escaping or empty synthesized local paths via gix::validate::path::component (6561041)
• Report Error::Config when a pattern maps to an empty local path (3caa4ac)
• Use gitignore-like glob semantics in upstream_tree so * no longer crosses / (3caa4ac)

---

This release was generated with Release Please.