generated: '2026-09-22'
method: searched
generator: extract-docs-artifacts.py (local)
source: https://fossil-scm.org/home/doc/trunk/www/changes.wiki
sources:
- https://fossil-scm.org/home/doc/trunk/www/changes.wiki
entries:
- breaking: false
  highlights:
  - Enhance the /ci_edit web page to show more context of the check-in being edited.
  - Honor the NO_COLOR environment variable in the " fossil sys ls " command.
  - Add the ".m4a" and ".otf" mimetypes.
  - Forum post editing and replying was overhauled with a new UI.
- breaking: false
  highlights:
  - 'Improvements to anti-robot defenses : The default configuration now allows robots to download any tarball or similar, to better support of
    automated build systems.'
  - New special tag "zipX" for the robot-restrict setting blocks robot access to tarballs, but with exceptions to support automated build systems.
  - 'Simplified access to tarballs and ZIPs: When in the code browser at the top-level, a new "Download" submenu option is available to take the
    user to a page where he can download a tarball or ZIP archive.'
  - New " fossil get " command downloads and unpacks a specific check-in without having to clone the repository.
  date: '2026-03-11'
- breaking: false
  highlights:
  - Close a potential Denial-of-Service attack against any public-facing Fossil server involving exponential behavior in Fossil's regexp implementation.
  - Fix a SQL injection on the /file page . Thanks to additional defenses built into Fossil, this injection is not exploitable for either data
    exfiltration or privilege escalation.
  - Strengthen robot defenses to help prevent public-facing servers from being overwhelmed by the latest generation of AI spiders.
  - New javascript captcha used to restrict access by user "nobody" to pages listed in the robot-restrict setting.
  date: '2025-09-30'
- breaking: false
  highlights:
  - The argument to the --from option can be a directory name, causing Fossil to use files under that directory as the baseline for the diff.
  - For "gdiff", if no gdiff-command setting is defined, Fossil tries to do a --tk diff if "tclsh" and "wish" are available, or a --by diff if
    not.
  - The "Reload" button is added to --tk diffs, to bring the displayed diff up to date with the latest changes on disk.
  - Added the /ckout web page to provide information about pending changes in a working check-out.
  date: '2025-04-30'
current_version: '2.29'
note: Versioning scheme follows numeric major.minor releases.
docs: https://fossil-scm.org/home/doc/trunk/www/changes.wiki