Release Notes

Features and bugfixes in our latest releases. Please see the Download page for links to source and binaries.

Note that Mercurial follows a time-based release plan with major releases every three months and minor (bugfix) releases on the first of every month (see TimeBasedReleasePlan).

{i} Be sure to read the upgrade notes when upgrading.

(See the archive for older versions)

1. Mercurial 4.3 (2017-08-10)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

1.1. Notable changes

1.2. CVE-2017-1000115

Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository.

1.3. CVE-2017-1000116

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks on clients by specifying a hostname starting with -oProxyCommand. This is also present in Git (CVE-2017-1000117) and Subversion (CVE-2017-9800), so please patch those tools as well if you have them installed.

2. Mercurial 4.2.3 (2017-08-10)

This was an out-of-cycle backport of security fixes from 4.3 for users stuck on Python 2.6.

3. Mercurial 4.2.2 (2017-07-05)

This is a regularly-scheduled bugfix release.

4. Mercurial 4.2.1 (2017-6-4)

This is a regularly-scheduled bugfix release.

5. Mercurial 4.2 (2017-5-2)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

5.1. Notable changes

5.2. commands

5.3. core

5.4. extensions

5.5. hgweb

5.6. Behavior changes

5.7. Internal API changes

6. Mercurial 4.1.3 (2017-4-18)

This is an out of cycle release to address a security issue:

7. Mercurial 4.1.2 (2017-4-3)

This is a regularly-scheduled bugfix release.

8. Mercurial 4.1.1 (2017-3-2)

This is a regularly-scheduled bugfix release.

9. Mercurial 4.1 (2017-2-1)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

9.1. commands

9.2. core

9.3. extensions

9.4. hgweb

9.5. chg

9.6. Behavior Changes

9.7. Internal API Changes

10. Mercurial 4.0.2 (2017-01-04)

This is a regularly-scheduled bugfix release.

11. Mercurial 4.0.1 (2016-12-1)

This is a regularly-scheduled bugfix release.

12. Mercurial 4.0 (2016-11-1)

An overview of new features available. This is a regularly-scheduled quarterly feature release. Unlike other 4.0 software releases, this is simply 3.9 + .1, so it should be the usual pain-free upgrade.

12.1. commands

12.2. core

12.3. extensions

12.4. hgweb

13. Mercurial 3.9.2 (2016-10-1)

This is a regularly-scheduled bugfix release.

14. Mercurial 3.9.1 (2016-9-1)

This is a regularly-scheduled bugfix release.

15. Mercurial 3.9 (2016-8-1)

An overview of new features available.

15.1. commands

15.2. core

15.3. extensions

15.4. unsorted

16. Mercurial 3.8.4 (2016-7-01)

This is a regularly-scheduled bugfix release.

17. Mercurial 3.8.3 (2016-6-01)

This is a regularly-scheduled bugfix release.

18. Mercurial 3.8.2 (2016-5-16)

This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation warning that was only intended for Mercurial developers, sorry.

19. Mercurial 3.8 / 3.8.1 (2016-5-1)

(3.8.1 was released immediately after 3.8 to fix a release oversight.)

Regularly scheduled feature release. This release contains a low-priority security fix for:

CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos

There's also an overview of new features available.

19.1. commands

19.2. core

19.3. extensions

19.4. hgweb

19.5. unsorted

20. Mercurial 3.7.3 (2016-3-29)

This is an out of cycle release to address three security issues:

CVE-2016-3630 Mercurial: remote code execution in binary delta decoding

CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos

CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos

21. Mercurial 3.7.2 (2016-3-1)

This is a regularly-scheduled bugfix release.

22. Mercurial 3.7.1 (2016-2-3)

This addresses an urgent regression in compilation on Solaris and metadata handling for conversions.

23. Mercurial 3.7 (2016-2-1)

Regularly scheduled feature release. There's also an overview of new features available.

23.1. commands

23.2. core

23.3. extensions

23.4. hgweb

23.5. unsorted

24. Mercurial 3.6.3 (2016-1-1)

This is a regularly-scheduled bugfix release.

25. Mercurial 3.6.2 (2015-12-1)

This is a regularly-scheduled bugfix release.

26. Mercurial 3.6.1 (2015-11-9)

This is an out-of-cycle bugfix release for issues related to hooks.

27. Mercurial 3.6 (2015-11-1)

Regularly scheduled feature release.

27.1. commands

27.2. core

27.3. extensions

27.4. hgweb

27.5. unsorted

28. Mercurial 3.5.2 (2015-10-01)

Regularly-scheduled bugfix release.

29. Mercurial 3.5.1 (2015-09-01)

Regularly-scheduled bugfix release.

30. Mercurial 3.5 (2015-07-31)

Regularly-scheduled feature release.

30.1. commands

30.2. core

30.3. extensions

30.4. hgweb

30.5. unsorted

31. Mercurial 3.4.2 (2015-07-01)

32. Mercurial 3.4.1 (2015-06-01)

This is a regularly-scheduled bugfix release.

33. Mercurial 3.4 (2015-05-01)

This is a regularly-scheduled feature release.

33.1. commands

33.2. core

33.3. extensions

33.4. hgweb

33.5. unsorted