Bump git from 4.3.2 to 5.0.2

[dependabot]

Bumps git from 4.3.2 to 5.0.2.

Release notes

Sourced from git's releases.

v5.0.2

5.0.2 (2026-08-02)

Bug Fixes

• Add bin/build-git-versions and bin/test-git-versions scripts (3314503)

Other Changes

• Align CONTRIBUTING.md with current architecture and testing conventions (60ac8e9)
• Allow disabling SimpleCov via COVERAGE=false env var (3788418)
• Allow disabling SimpleCov via COVERAGE=false env var (3788418)
• Avoid git-version-dependent all-zero SHA in stash store integration spec (82a15e5)
• Make 5.0.0 release more prominent in README (2c8c42d)
• Move Git::Repository::Factories and PathResolver to Git namespace (dd0ae7b)
• Update README badges (079a121)

v5.0.1

5.0.1 (2026-07-30)

Other Changes

• Review and streamline AI agent instructions (536eb86)
• Summarize v5.0.0 as architectural redesign in CHANGELOG (712c93e)

v5.0.0

5.0.0 (2026-07-28)

� BREAKING CHANGES

• Git::Base and Git::Lib are removed. All public API is now surfaced through Git::Repository (for repo-bound operations) and the Git module-level methods (Git.open, .clone, .init, .bare, .default_branch, .git_version). Internal command execution goes through Git::Commands::* and Git::ExecutionContext, not Git::Lib.
• Git.open, Git.bare, Git.clone, and Git.init now return Git::Repository instead of Git::Base. Code that depends on the Git::Base return type must be updated to use Git::Repository. Git::Repository provides all the same public API methods as Git::Base.
• arguments: flag_option :foo, negatable: true no longer accepts false to emit --no-foo. Before: bind(foo: false) => ["--no-foo"]. After: register two entries; bind(no_foo: true) => ["--no-foo"]. Callers passing foo: false expecting --no-foo will silently get nothing emitted.

Features

• Add branch_current delegator to Git::Base (8b92b54)
• Add deprecated config_get/list/set aliases to Git::Repository::Configuring (fb964d3)
• Add deprecated conflicts wrapper on Git::Repository::Merging (cc3907d)
• Add deprecated empty? wrapper on Git::Repository::StatusOperations (e0dbd1c)
• Add deprecated Git::Repository::Stashing#stash_list facade (9e532bd)
• Add Git::Base compatibility shim with deprecation warnings (d37710b)
• Add Git::MINIMUM_GIT_VERSION constant (d5c8604)
• Add Git::Repository remote_names facade method (4f52a7b)
• Add Git::Repository::Branching#change_head_branch facade (e8d6af6)
• Add Git::Repository::Branching#current_branch_state facade (fa798a7)

... (truncated)

Changelog

Sourced from git's changelog.

5.0.2 (2026-08-02)

Bug Fixes

• Add bin/build-git-versions and bin/test-git-versions scripts (3314503)

Other Changes

• Align CONTRIBUTING.md with current architecture and testing conventions (60ac8e9)
• Allow disabling SimpleCov via COVERAGE=false env var (3788418)
• Allow disabling SimpleCov via COVERAGE=false env var (3788418)
• Avoid git-version-dependent all-zero SHA in stash store integration spec (82a15e5)
• Make 5.0.0 release more prominent in README (2c8c42d)
• Move Git::Repository::Factories and PathResolver to Git namespace (dd0ae7b)
• Update README badges (079a121)

5.0.1 (2026-07-30)

Other Changes

• Review and streamline AI agent instructions (536eb86)
• Summarize v5.0.0 as architectural redesign in CHANGELOG (712c93e)

5.0.0 (2026-07-28)

v5.0.0 is a complete architectural redesign of the git gem. The monolithic Git::Base and Git::Lib classes have been replaced by a layered design: Git::Commands::* for git command execution, Git::Repository as the public API surface, and dedicated parser classes. Most v4.x code requires no changes — compatibility shims emit deprecation warnings pointing to the v5.x equivalents.

For a full migration guide, including deprecated method renames and code examples, see https://github.com/ruby-git/ruby-git/blob/main/UPGRADING.md.

⚠ BREAKING CHANGES

• Git::Base class removed; constant remains as a deprecated shim. Git::Base.new raises an error and require 'git/base' raises LoadError. The Git::Base constant still exists as a deprecated module included in Git::Repository, so is_a?(Git::Base) checks and monkeypatches continue to work but emit deprecation warnings. Update explicit Git::Base class references to use Git::Repository; the shim is removed in v6.0.0.
• Git::Lib removed. Calling #lib on a repository object returns self with a deprecation warning (forwarding to Git::Repository methods where possible), but Git::Lib itself no longer exists. Methods unique to Git::Lib with no Git::Repository counterpart raise NoMethodError.

... (truncated)

Commits

• 4266902 chore: release v5.0.2
• 3788418 test: allow disabling SimpleCov via COVERAGE=false env var
• 3314503 fix: add bin/build-git-versions and bin/test-git-versions scripts
• 82a15e5 test: avoid git-version-dependent all-zero SHA in stash store integration spec
• 60ac8e9 docs: align CONTRIBUTING.md with current architecture and testing conventions
• dd0ae7b refactor: move Git::Repository::Factories and PathResolver to Git namespace
• 2c8c42d docs: make 5.0.0 release more prominent in README
• 079a121 docs: update README badges
• 358f8d5 chore: release v5.0.1
• 536eb86 docs: review and streamline AI agent instructions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)