git-credential-manager

Changes:

• Show the terminal/TTY based prompts when there is no desktop/GUI sessions present for GitHub (#453, #538)
• Copy Debian package files to correct directory (#545, #566, #569, #539)

Changes:

• Remove noisy messages during auto-detection (#492, #494)
• Improve proxy environment variable handling (#497, #501, #503)
• Update MSAL; set MS auth embedded window title (#239, #512)
• Fix missing dependencies in Debian package (#506, #514, #528)
• Persist auto-detected provider setting (#507, #517)
• Refactor namespace, assembly and project names (#500)
• Support the wslview command to open the browser (#529)
• Update System.CommandLine and fix some bugs (#531)
• Fix a bug to prevent setting credential.provider when it wasn't needed (Only set credential.provider for dynamic matches #535)

Changes:

• Remove noisy messages during auto-detection (#492, #494)
• Improve proxy environment variable handling (#497, #501, #503)
• Update MSAL; set MS auth embedded window title (#239, #512)
• Fix missing dependencies in Debian package (#506, #514, #528)
• Persist auto-detected provider setting (#507, #517)
• Refactor namespace, assembly and project names (#500)
• Support the wslview command to open the browser (#529)
• Update System.CommandLine and fix some bugs (#531)

Changes:

• Include UI helpers in Debian package for Linux release; move GCM symlink to /usr/local/bin (#405)
• Respect http.sslCAInfo settings (#242, #411)
• Fix bug with enumerating Azure Repos bindings outside of a repository (#416, #417)
• Allow forcing OAuth authentication with Bitbucket host provider (#329, #401)
• Stop echoing password on Linux in basic credentials prompt (#432, #436)
• Return non-zero code for UI helpers on error (#440, #441)
• Use native Git path interpolation for config values (#439)
• Allow hostname-specific proxy override to use no proxy (#442, #449)
• Future proof Windows broker "WAM" version detection (#465)
• Add support for using WSL Git configuration (#461)
• Add new diagnose command to help debug problems in the wild (#463)
• Add option to use the new DPAPI-based credential store on Windows (#464)
• Add explicit device code authentication for GitHub (#478)
• Fix WSL configuration instructions (#479)
• Improve host provider auto-detection logic (#384, #481)

Changes:

• Autodetect Bitbucket DC instances (#373)
• Create Linux plaintext store with safer directory permissions (#397)
• Add ability to read GCM default settings from the Windows Registry (#404)
• Allow users to specify path to GPG executable for gpg credential store on Linux (#406)

Thanks to our contributors ❤️:

• @vdye
• @hickford
• @garvit-joshi
• @mminns
• @ldennington

Changes:

• Fix bug where GUI prompts would not be shown on Windows (#374)

Changes:

• Fix bug in GitHub x-platform UI where the browser/OAuth option is not shown (#360)

From previous release:

• UI on macOS and Linux thanks to AvaloniaUI 🎉 (#336)
• GHES OAuth support (#354)
• More winget publishing fixes (#353)
• Fix release builds .NET SDK version (#358)

Changes:

• UI on macOS and Linux thanks to AvaloniaUI 🎉 (#336)
• GHES OAuth support (#354)
• More winget publishing fixes (#353)
• Fix release builds .NET SDK version (#358)

Changes:

• Add preliminary support for OAuth with GitHub AE (requires server support/changes) (#343)
• Add workaround for Windows Broker (WAM) running as admin (#344)
• Consume new MSAL library versions (#346)
• Set MSAL embedded webview window title to give more context to the user (#347, #239) Not working currently (see here)

Changes:

• Add support for the Windows authentication broker - Windows Hello support (default off) (#323)
• Pass parent window handle information to MSAL (#306)
• Fix computation of installation path on Linux/single-file publish (#310)
• Fix Windows user-only installer configuration bug (#335)
• Run postinstall actions as the current user, not root - stop changing ownership of ~/.gitconfig on macOS (#308)
• Avoid using the newer --show-scope Git config option - work with downlevel Git versions (#318)
• Fix winget publishing (#332, #338)
• Reduce warnings from tests (#337)
• Documentation fixes (#333)

Thanks to our contributors ❤️:

• @ldennington
• @WormJim

Changes:

• Experimental support for not using PATs for Azure Repos - default disabled (#294) (read more here)
• Better warning messages on macOS when there are Keychain issues (#305)

Changes:

• Move to .NET Framework 4.7.2 on Windows (#283)
• Move to .NET 5.0 on macOS and Linux (#288)
• Auto-detect on-premises/self-hosted providers via HTTP headers (#262)
• Use the user's default web browser for Microsoft authentication on macOS and drop the native helper (#274, #277)
• Trivially fix the macOS native helper crashes by deleting it 😅 (#264)
• Share the MSAL token cache with Microsoft developer tools on macOS as we already do on Windows (#275)
• Support git-credential-cache as a credential backing store on Linux (#287)
• Support for the NO_PROXY option to bypass the proxy for certain addresses (#299, #297)
• Use System.CommandLine to handle our command line parsing and allow host providers to offer custom commands (#273)
• Fix a bug with host provider disposal (#272)
• Fix problems with resolving the executable file path on Linux (#298, #229, #252)
• Documentation fixes and improvements (#278, #265, #263)

Thanks to our contributors ❤️:

• @4brunu
• @AlexanderLanin
• @johnemau
• @NN---

Changes:

• Add explicit PAT authentication mode for the GitHub Provider (#236, #259)
• Auto-detect GHES instances that have a "github." URL prefix (#241)
• Allow use of older versions of libsecret such as in Ubuntu 18.04 (#244)
• Fix bug in Git config matching due due case sensitivity (#234)
• Ensure the /usr/local/bin directory exists on install (#257)
• Remove use of box drawing characters in warning output (#243)

Thanks to our contributors ❤️:

• @AlexanderLanin

Security Fixes:

• Patched an issue whereby cloning malicious repository on Windows could result in execution of an unverified executable
  (CVE-2020-26233)

Changes:

• Fix NTLM proxy authentication (#216)
• Fix reading empty Git configuration entry values (#215)
• Allow users to select the type of interactive authentication flow for the Microsoft auth stack (#210)

Changes:

• Fix a bug where Windows Integrated Authentication would be disabled by default (#194)
• Set the full path to standalone GCM Core installs, enabling overriding of bundled versions (#188, #199)
• Split the Windows installer into user- and system-wide 'flavours' (#197)
• Fix a bug with the GitHub provider on Windows in launching the auth UI with a username (#205)

Thanks to our contributors ❤️:

• @mastercoms

Changes:

• Fixed a where a deadlock would occur when reading very large Git config files (#183)

Changes:

• Fixed a bug on Linux were launching a browser would print out text to the terminal and fail authentication (#178)

Changes:

• Very early support for Linux (#135)
• Remove username/password authentication for GitHub.com (#171)
• Enables support for multiple users for GitHub, Bitbucket, and Azure Repos (when using the *.visualstudio.com URLs) (#160)
• Fixes bug where the username was required in the remote URL for basic auth (#142)
• Fixes bug where port numbers in remote URLs were not parsed correctly (#156)

The Linux support has currently only been tested on Ubuntu 18.04 and 20.04 on 64-bit Intel processors. The provided Debian package is not yet signed. Due to the varied nature of Linux distributions, you will need to select and configure a credential storage system manually – see more here: https://aka.ms/gcmcore-linuxcredstores.

Now that OAuth has been fully adopted for GitHub.com and works for all users (personal and organizational alike), the username/password option has been removed. The username/password option will soon be removed from the server-side anyway – see more here: https://github.blog/changelog/2019-08-08-password-based-http-basic-authentication-deprecation-and-removal/.

Changes:

• Support "SSO" PATs for GitHub (#133, #134)
• Bitbucket Server support (#140, #141)
• OAuth Device Authorization Grant support for GitHub (#147)
• Fix a bug with using Microsoft Accounts with Azure Repos (#143, #148)

Changes:

• Fix a bug in parsing Bitbucket 2FA responses (#128, #126)
• Target 32-bit on Windows (#112)