Changelog

0.4.0 (2026-11-11)

⚠ BREAKING CHANGES

• github: request read-only contents permission for clone tokens (#33)

Bug Fixes

• github: request read-only contents permission for clone tokens (#33) (31df03a)

0.3.7 (2026-10-29)

Bug Fixes

• gitlab: download archives from Node by sending the request in same-origin mode (#31) (fa32d49)

0.3.6 (2026-10-29)

Bug Fixes

• pass errors thrown by the caller’s tokenProvider through untouched (#25) (781d768)

0.3.5 (2026-10-25)

Bug Fixes

• fail with invalid_response when a provider response has an unexpected shape (#23) (a343287)
• reject dot segments and reserved characters in request paths (#22) (140ba04)

0.3.4 (2026-10-14)

Bug Fixes

• github: validate repository ids before minting an installation token (#20) (a2fae83)

0.3.3 (2026-10-14)

Features

• github: scope app installation tokens by repository id (#18) (3f2a2c8)

0.3.2 (2026-10-10)

Bug Fixes

• throw RepoError with code invalid_response for non-JSON responses (#16) (c7bafa2)

0.3.1 (2026-09-04)

Features

• github: restrict app installation tokens to selected repositories (#14) (960f1f9)

0.3.0 (2026-09-04)

⚠ BREAKING CHANGES

• getCloneCredentials is a new required method on the RepoProvider interface. Custom provider implementations must add it; the built-in providers already do. getCloneUrl can be derived from it with toCloneUrl semantics: embed username and password as percent-encoded userinfo in url.

Features

• add repos.getCloneCredentials (#12) (08bdb50)

0.2.2 (2026-08-29)

Bug Fixes

• github: list installation repositories for namespace-scoped listing under app auth (deeaec7)

0.2.1 (2026-07-30)

Features

• github: add listInstallationRequests standalone export (#9) (8a1b3f7)

0.2.0 (2026-07-26)

⚠ BREAKING CHANGES

• azure-devops: CloneUrl no longer has a headers field; getCloneUrl always embeds the credential in the URL for every provider.

Features

• docs: git-derived lastModified for sitemap and page stamps (#7) (d4fc718)

Bug Fixes

• azure-devops: embed tokenProvider tokens in the clone URL (6a47808)

0.1.4 (2026-07-23)

Bug Fixes

• bitbucket: adapt to CHANGE-2770 removal of cross-workspace APIs (d5b3b6e)

0.1.3 (2026-07-23)

Features

• add listUserInstallations to the github subpath (b2cf80d)

Bug Fixes

• github: call fetch detached to avoid Illegal invocation on workerd (b495fdc)
• http: send default repo-sdk User-Agent on all requests (ed126d0)

0.1.2 (2026-07-20)

Features

• accept fully-qualified refs in refs.resolve, add RefMatch.ref, resolve full SHAs commit-first (205f0b8)

0.1.1 (2026-07-20)

Features

• add git-http provider for generic smart-HTTP remotes (0aca86d)
• add refs.resolve, branches.get, and tags.get (958b4b2)

0.1.0 (2026-07-19)

Features

• add branch listing and ref search (c337f25)
• add commit author user refs and namespace avatars (9c10ff5)
• add Gitea provider (d40ceb6)
• add users.me() for the authenticated user profile (e15bd4b)
• expand webhook parsing, Azure DevOps auth, and commit URL helpers (0cf6fba)
• github: expose installation tokens via getInstallationToken (54938a7)
• github: resolve app installation by owner (4b3f971)
• guarantee Repository.urls.web is always present (ed6aadb)
• initial repo-sdk implementation (ee2b6dd)
• resolve hidden account emails via users.me includeEmail (1404c06)
• support async token providers for all providers (e025a42)
• testing: allow configuring provider name and capabilities (e43ddf3)
• webhooks: add detectWebhookProvider helper (19668b6)

Bug Fixes

• build: add unrun devDependency so tsdown loads its config on Node 20 (9a58902)
• docs: correct footer spacing and rework attribution line (28d5099)
• docs: repair MDX comment mangled by prettier and ignore mdx files (2213258)
• docs: restore readable accent foreground in dark mode (063c53c)
• type-check custom pages against Blume’s Astro config (fdf1f7b)