openSUSE-SU-2021:2555-1

This update for git fixes the following issues:

Update from version 2.26.2 to version 2.31.1 (jsc#SLE-18152)

Security fixes:

• CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could run remote code during a clone. (bsc#1183026)

Non security changes:

• Add sysusers file to create git-daemon user.
• Remove perl-base and openssh-server dependency on git-coreand provide a perl-Git package. (jsc#SLE-17838)
• fsmonitor bug fixes
• Fix git bisect to take an annotated tag as a good/bad endpoint
• Fix a corner case in git mv on case insensitive systems
• Require only openssh-clients where possible (like Tumbleweed or SUSE Linux Enterprise >= 15 SP3). (bsc#1183580)
• Drop rsync requirement, not necessary anymore.
• Use of pack-redundant command is discouraged and will trigger a warning. The replacement is repack -d.
• The --format=%(trailers) mechanism gets enhanced to make it easier to design output for machine consumption.
• No longer give message to choose between rebase or merge upon pull if the history fast-forwards.
• The configuration variable core.abbrev can be set to no to force no abbreviation regardless of the hash algorithm
• git rev-parse can be explicitly told to give output as absolute or relative path with the --path-format=(absolute|relative) option.
• Bash completion update to make it easier for end-users to add completion for their custom git subcommands.
• git maintenance learned to drive scheduled maintenance on platforms whose native scheduling methods are not 'cron'.
• After expiring a reflog and making a single commit, the reflog for the branch would record a single entry that knows both @{0} and @{1}, but we failed to answer 'what commit were we on?', i.e. @{1}
• git bundle learns --stdin option to read its refs from the standard input.
  Also, it now does...