tree e330aa5dc77320ca23b5afcd392d0eee38620e7e
parent 4a3c2d14caa7355cf9b12a14ff931bab29b539dc
author David Ostrovsky <david@ostrovsky.org> 1545946749 +0100
committer David Pursehouse <dpursehouse@collab.net> 1546816881 +0900

Upgrade JGit to 4.5.5.201812240535-r

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I5c1af5c7c549e1796fe6347c1ec08797471393a1