# What changed in isomorphic-git

> 16 changes in isomorphic-git 1 from its official release notes, upgrade guides and advisories: 1 security, 2 new APIs and options. Each one cited. Sources checked 2026-10-21. HTML: https://unstale.sh/npm/isomorphic-git/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## isomorphic-git 1

### Security

- Remote refs are sanitized. (1.42.2) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.2)

### New APIs and options

- Adds an author filter to log so developers can filter log entries by author. (1.44.0) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.44.0)
- remove accepts an array of filepaths, allowing multiple files to be removed in one call. (1.43.0) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.43.0)

### Performance

- The index is written once per walk instead of once per file, reducing index writes during a walk. (1.42.7) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.7)
- Avoids reading a packed parent during commit. (1.42.3) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.3)

### Fixes and other changes

- Read and readdir errors other than file-not-found are now rethrown. (1.44.3) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.44.3)
- Pako decompression errors are preserved when reading objects, making the original decompression failure available to callers. (1.44.2) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.44.2)
- status returns absent for case-mismatched paths on case-insensitive filesystems. (1.44.1) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.44.1)
- Each packfile checksum is verified once under concurrent reads. (1.43.3) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.43.3)
- Config variable names containing digits are now parsed correctly when tabs surround the equal sign. (1.43.2) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.43.2)
- Checkout, branch, merge, and commit now peel annotated tags to commits. (1.43.1) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.43.1)
- Refuses to cherry-pick over local changes, preventing local work from being overwritten. (1.42.6) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.6)
- Paths are sorted by UTF-8 bytes, matching Git’s ordering. (1.42.5) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.5)
- Patterns in .git/info/exclude are anchored to the working directory. (1.42.4) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.4)
- Fixes an issue involving an incorrect ref. (1.42.2) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.2)
- Restores PushRejectedError when pushing against an advanced remote. (1.42.1) — [release notes](https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.1)