commit - 8180d9b1ef7b97e0adfbcee6809c3512d98da79f
commit + f19045181ed6c21f7161a48e014de2b76e839646
blob - 1f587aa8a7f2fed691836ae62b45550fbc7f0b6a
blob + 58f795232ac2368b2a82a22ce980897b95b04b38
--- CHANGES
+++ CHANGES
@@ -1,3 +1,15 @@
+* got 0.118; 2025-09-09
+- security fix for -portable: gotwebd can be tricked into reading repositories
+  outside its repos_path; bug introduced in got-0.111; OpenBSD is not affected
+- make 'tog diff' show the repository name in names of patches written to /tmp
+- plug memory leaks which were making gotwebd regress tests fail
+- fix parallel processing of requests in gotwebd, improving responsiveness
+- set gotwebd pledges according to address families of listening sockets
+- run gotwebd fcgi parameter parsing in a dedicated process under pledge "stdio"
+- make gotd commit notifications only show history which is unique to the branch
+- enable sftp/scp support in the sshd_config file generated by gotsysd
+- make gotsysd-managed repositories readable for the _gotd group
+
 * got 0.117; 2025-08-17
 - regress: replace "sed -i" with ed(1) for portable in-place editing
 - ensure that error messages from gotsysd libexec helpers get logged