# [PATCH] replay: do not copy "gpgsign-sha256" header 4 messages from 2025-11-26 to 2025-12-01. Participants: Phillip Wood, Junio C Hamano, Elijah Newren, Patrick Steinhardt. Thread: https://gitlist.dev/t/64536 ## Phillip Wood, 2025-11-26 14:33 Subject: [PATCH] replay: do not copy "gpgsign-sha256" header Message-ID: <4f04af5790353b074cf122c450c1cd3f8d1cecf3.1764167611.git.phillip.wood@dunelm.org.uk> URL: https://gitlist.dev/e/4f04af5790353b074cf122c450c1cd3f8d1cecf3.1764167611.git.phillip.wood%40dunelm.org.uk ``` From: Phillip Wood When "git replay" replays a commit it copies the extended headers across from the original commit. However, if the original commit was signed, we do not want to copy the header associated with the signature is it wont be valid for the new commit. The code already knows to avoid coping the "gpgsig" header but does not know to avoid copying the "gpgsig-sha256" header. Add that header to the list of exclusions to match what "git commit --amend" does. Signed-off-by: Phillip Wood --- We should perhaps think about how we can centralize this list of exclusions as we now have three copies of it in builtin/commit.c, builtin/replay.c and sequencer.c. This patch is based on maint to make it easier to backport. Unfortunately that means it conflicts with ps/history which moves the code that's changed here to a new file. I'm happy to rebase on on top of that branch if we decide it is not worth backporting this. Base-Commit: 9a2fb147f2c61d0cab52c883e7e26f5b7948e3ed Published-As: https://github.com/phillipwood/git/releases/tag/pw%2Freplay-do-not-copy-gpgsig-sha256-header%2Fv1 View-Changes-At: https://github.com/phillipwood/git/compare/9a2fb147f...4f04af579 Fetch-It-Via: git fetch https://github.com/phillipwood/git pw/replay-do-not-copy-gpgsig-sha256-header/v1 builtin/replay.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/builtin/replay.c b/builtin/replay.c index 6172c8aacc9..d12e4d54872 100644 --- a/builtin/replay.c +++ b/builtin/replay.c @@ -67,7 +67,7 @@ static struct commit *create_commit(struct repository *repo, const char *message = repo_logmsg_reencode(repo, based_on, NULL, out_enc); const char *orig_message = NULL; - const char *exclude_gpgsig[] = { "gpgsig", NULL }; + const char *exclude_gpgsig[] = { "gpgsig", "gpgsig-sha256", NULL }; commit_list_insert(parent, &parents); extra = read_commit_extra_headers(based_on, exclude_gpgsig); -- 2.52.0.362.g884e03848a9 ``` ## Junio C Hamano, 2025-11-26 17:32 Subject: Re: [PATCH] replay: do not copy "gpgsign-sha256" header Message-ID: URL: https://gitlist.dev/e/xmqqh5ugog2l.fsf%40gitster.g In-Reply-To: <4f04af5790353b074cf122c450c1cd3f8d1cecf3.1764167611.git.phillip.wood@dunelm.org.uk> ``` Phillip Wood writes: > From: Phillip Wood > > When "git replay" replays a commit it copies the extended headers > across from the original commit. However, if the original commit > was signed, we do not want to copy the header associated with the > signature is it wont be valid for the new commit. The code already > knows to avoid coping the "gpgsig" header but does not know to avoid > copying the "gpgsig-sha256" header. Add that header to the list of > exclusions to match what "git commit --amend" does. > > Signed-off-by: Phillip Wood > --- > We should perhaps think about how we can centralize this list of > exclusions as we now have three copies of it in builtin/commit.c, > builtin/replay.c and sequencer.c. > > This patch is based on maint to make it easier to backport. > Unfortunately that means it conflicts with ps/history which moves the > code that's changed here to a new file. I'm happy to rebase on on top > of that branch if we decide it is not worth backporting this. I'd rather give priority to fixes over new development. Thanks. > > Base-Commit: 9a2fb147f2c61d0cab52c883e7e26f5b7948e3ed > Published-As: https://github.com/phillipwood/git/releases/tag/pw%2Freplay-do-not-copy-gpgsig-sha256-header%2Fv1 > View-Changes-At: https://github.com/phillipwood/git/compare/9a2fb147f...4f04af579 > Fetch-It-Via: git fetch https://github.com/phillipwood/git pw/replay-do-not-copy-gpgsig-sha256-header/v1 > > builtin/replay.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/builtin/replay.c b/builtin/replay.c > index 6172c8aacc9..d12e4d54872 100644 > --- a/builtin/replay.c > +++ b/builtin/replay.c > @@ -67,7 +67,7 @@ static struct commit *create_commit(struct repository *repo, > const char *message = repo_logmsg_reencode(repo, based_on, > NULL, out_enc); > const char *orig_message = NULL; > - const char *exclude_gpgsig[] = { "gpgsig", NULL }; > + const char *exclude_gpgsig[] = { "gpgsig", "gpgsig-sha256", NULL }; > > commit_list_insert(parent, &parents); > extra = read_commit_extra_headers(based_on, exclude_gpgsig); ``` ## Elijah Newren, 2025-11-26 17:36 Subject: Re: [PATCH] replay: do not copy "gpgsign-sha256" header Message-ID: URL: https://gitlist.dev/e/CABPp-BHLYBAkhJpmEkxWj%2BujHkdb-h-8qAoWMFAe19FNSA%2BKfA%40mail.gmail.com In-Reply-To: <4f04af5790353b074cf122c450c1cd3f8d1cecf3.1764167611.git.phillip.wood@dunelm.org.uk> ``` On Wed, Nov 26, 2025 at 6:33 AM Phillip Wood wrote: > > From: Phillip Wood > > When "git replay" replays a commit it copies the extended headers > across from the original commit. However, if the original commit > was signed, we do not want to copy the header associated with the > signature is it wont be valid for the new commit. The code already > knows to avoid coping the "gpgsig" header but does not know to avoid > copying the "gpgsig-sha256" header. Add that header to the list of > exclusions to match what "git commit --amend" does. > > Signed-off-by: Phillip Wood > --- > We should perhaps think about how we can centralize this list of > exclusions as we now have three copies of it in builtin/commit.c, > builtin/replay.c and sequencer.c. > > This patch is based on maint to make it easier to backport. > Unfortunately that means it conflicts with ps/history which moves the > code that's changed here to a new file. I'm happy to rebase on on top > of that branch if we decide it is not worth backporting this. > > Base-Commit: 9a2fb147f2c61d0cab52c883e7e26f5b7948e3ed > Published-As: https://github.com/phillipwood/git/releases/tag/pw%2Freplay-do-not-copy-gpgsig-sha256-header%2Fv1 > View-Changes-At: https://github.com/phillipwood/git/compare/9a2fb147f...4f04af579 > Fetch-It-Via: git fetch https://github.com/phillipwood/git pw/replay-do-not-copy-gpgsig-sha256-header/v1 > > builtin/replay.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/builtin/replay.c b/builtin/replay.c > index 6172c8aacc9..d12e4d54872 100644 > --- a/builtin/replay.c > +++ b/builtin/replay.c > @@ -67,7 +67,7 @@ static struct commit *create_commit(struct repository *repo, > const char *message = repo_logmsg_reencode(repo, based_on, > NULL, out_enc); > const char *orig_message = NULL; > - const char *exclude_gpgsig[] = { "gpgsig", NULL }; > + const char *exclude_gpgsig[] = { "gpgsig", "gpgsig-sha256", NULL }; > > commit_list_insert(parent, &parents); > extra = read_commit_extra_headers(based_on, exclude_gpgsig); > -- > 2.52.0.362.g884e03848a9 Good catch, thanks. ``` ## Patrick Steinhardt, 2025-12-01 09:18 Subject: Re: [PATCH] replay: do not copy "gpgsign-sha256" header Message-ID: URL: https://gitlist.dev/e/aS1dcz6i5_phTUEG%40pks.im In-Reply-To: ``` On Wed, Nov 26, 2025 at 09:32:18AM -0800, Junio C Hamano wrote: > Phillip Wood writes: > > > From: Phillip Wood > > > > When "git replay" replays a commit it copies the extended headers > > across from the original commit. However, if the original commit > > was signed, we do not want to copy the header associated with the > > signature is it wont be valid for the new commit. The code already > > knows to avoid coping the "gpgsig" header but does not know to avoid > > copying the "gpgsig-sha256" header. Add that header to the list of > > exclusions to match what "git commit --amend" does. > > > > Signed-off-by: Phillip Wood > > --- > > We should perhaps think about how we can centralize this list of > > exclusions as we now have three copies of it in builtin/commit.c, > > builtin/replay.c and sequencer.c. Yeah, that would make sense indeed. We've currently got three different versions of this array in "builtin/replay.c", "builtin/commit.c" and in "sequencer.c". Furthermore, we've got `gpg_sig_headers` declared as a variable in `commit.c`, but that one is a bit different. Anyway, the patch itself is an obvious improvement and bug fixg, so improving the maintainability is certainly something we can leave for a future patch series. #leftoverbits > > This patch is based on maint to make it easier to backport. > > Unfortunately that means it conflicts with ps/history which moves the > > code that's changed here to a new file. I'm happy to rebase on on top > > of that branch if we decide it is not worth backporting this. > > I'd rather give priority to fixes over new development. I'll make sure to rebase git-history(1) on top of your patch in the next version. Thanks! Patrick ```