Announcement: TortoiseGit 2.19 released

[Sven Strickroth]

Hi,

we're pround to announce TortoiseGit 2.19.

We thank all bug reporters, testers and translators for their help!

You can check for updates using the settings or the about dialog
(recommended) - or you can download the release here:
https://tortoisegit.org/download/

This release contains several security fixes as well as performance
improvements.

== Features ==
* Update pcre2 to version 10.47
* Update SimpleIni to version 4.26
* Update OGDF to 2025.10 (Foxglove) plus some recent commits
* Fixed issue #4271: Add support for Relative Worktrees
Update libgit2 to version 1.9.4
* Update zlib to 1.3.2
* Update hunspell to version 1.7.3
* Update Scintilla to 5.6.3 and Lexilla to 5.5.0
* Updated libgit to version 2.53.0 based on Git for Windows sources
* Update editorconfig to 0.12.11
* Update TortoiseGitPlink to PuTTY Plink 0.84
* Update shipped PuTTY binaries to 0.84
* Significantly improved performance of ProgressDlg for larger output
* Fixed issue #4267: Migrate VBScript diff scripts to JavaScript
Microsoft deprecates VBScript (cf.

<https://techcommunity.microsoft.com/blog/windows-itpro-blog/vbscript-deprecation-timelines-and-next-steps/4148301>)
* Fixed issue #4263: Add support for `/*` wildcard in safe.directory
checks
* Various smaller code and performance improvements

== Bug Fixes ==
* Fix possible crash when parent window is closed before push/pull
* TGitCache: Several performance improvements that reduce CPU usage and
disk access
* TGitCache: Improve handling of changes to .gitignore
* TGitCache: Only crawl non-recursively when DirectoryWatcher detects
changes to improve performance
* TGitCache: Add shortcut for ignored folders
* Fixed issue #4003: TortoiseGitCache slows down deleting folders with
many subfolders
* Fixed issue #4251: Installer complains to require Windows >= 10 on
Windows 11 if AlwaysInstallElevated is set
* Fixed issue #4262: LogDlg: Improve startup performance with many
branches
* Fixed possible NTLM leak if .git-file points to a remote server
(issue pointed out by Gabriele Paris of NATO Cyber Security Centre)
Worktree's on network network shares referenced using UNC paths now
need to be explicitly allowed using safe.directory configuration.
* Fixed issue #4269: Possible arbitrary file write in TortoiseGitBlame
if "Blame previous version" is used on a file with a specially
crafted filename in Git history due to argument injection
(CVE-2026-11968, issue pointed out by Gabriele Paris of NATO Cyber
Security Centre)
* ProgressDlg: Limit line length to 8 KiB. This fixes a possible denial
of service due to excessive memory usage when a remote server sends
arbitrary lone lines (issue pointed out by Gabriele Paris of NATO
Cyber Security Centre)
* Improved prevention of possible injections into git.exe parameters
* Fixed issue #4270: Allow references to be trees instead of just
commits

== Known issues ==
* Issue #4013: Incorrect info displayed in title bar of Windows
Explorer windows
At the moment the numbers are only updated when the index or the
current branch change.

--
Best regards,
Sven Strickroth
PGP key id F5A9D4C4 @ any key-server