Release Notes

Features and bugfixes in our latest releases. Please see the Download page for links to source and binaries.

Note that Mercurial follows a time-based release plan with major releases every three months and minor (bugfix) releases on the first of every month (see TimeBasedReleasePlan).

{i} Be sure to read the upgrade notes when upgrading.

(See the archive for older versions)

1. Mercurial 4.3.2 (2017-09-18)

2. Mercurial 4.3 / 4.3.1 (2017-08-10)

(4.3.1 was released immediately after 4.3 to fix a release oversight.)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

2.1. Notable changes

2.2. CVE-2017-1000115

Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository.

2.3. CVE-2017-1000116

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks on clients by specifying a hostname starting with -oProxyCommand. This is also present in Git (CVE-2017-1000117) and Subversion (CVE-2017-9800), so please patch those tools as well if you have them installed.

3. Mercurial 4.2.3 (2017-08-10)

This was an out-of-cycle backport of security fixes from 4.3 for users stuck on Python 2.6.

4. Mercurial 4.2.2 (2017-07-05)

This is a regularly-scheduled bugfix release.

5. Mercurial 4.2.1 (2017-6-4)

This is a regularly-scheduled bugfix release.

6. Mercurial 4.2 (2017-5-2)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

6.1. Notable changes

6.2. commands

6.3. core

6.4. extensions

6.5. hgweb

6.6. Behavior changes

6.7. Internal API changes

7. Mercurial 4.1.3 (2017-4-18)

This is an out of cycle release to address a security issue:

8. Mercurial 4.1.2 (2017-4-3)

This is a regularly-scheduled bugfix release.

9. Mercurial 4.1.1 (2017-3-2)

This is a regularly-scheduled bugfix release.

10. Mercurial 4.1 (2017-2-1)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

10.1. commands

10.2. core

10.3. extensions

10.4. hgweb

10.5. chg

10.6. Behavior Changes

10.7. Internal API Changes

11. Mercurial 4.0.2 (2017-01-04)

This is a regularly-scheduled bugfix release.

12. Mercurial 4.0.1 (2016-12-1)

This is a regularly-scheduled bugfix release.

13. Mercurial 4.0 (2016-11-1)

An overview of new features available. This is a regularly-scheduled quarterly feature release. Unlike other 4.0 software releases, this is simply 3.9 + .1, so it should be the usual pain-free upgrade.

13.1. commands

13.2. core

13.3. extensions

13.4. hgweb

14. Mercurial 3.9.2 (2016-10-1)

This is a regularly-scheduled bugfix release.

15. Mercurial 3.9.1 (2016-9-1)

This is a regularly-scheduled bugfix release.

16. Mercurial 3.9 (2016-8-1)

An overview of new features available.

16.1. commands

16.2. core

16.3. extensions

16.4. unsorted

17. Mercurial 3.8.4 (2016-7-01)

This is a regularly-scheduled bugfix release.

18. Mercurial 3.8.3 (2016-6-01)

This is a regularly-scheduled bugfix release.

19. Mercurial 3.8.2 (2016-5-16)

This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation warning that was only intended for Mercurial developers, sorry.

20. Mercurial 3.8 / 3.8.1 (2016-5-1)

(3.8.1 was released immediately after 3.8 to fix a release oversight.)

Regularly scheduled feature release. This release contains a low-priority security fix for:

CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos

There's also an overview of new features available.

20.1. commands

20.2. core

20.3. extensions

20.4. hgweb

20.5. unsorted

21. Mercurial 3.7.3 (2016-3-29)

This is an out of cycle release to address three security issues:

CVE-2016-3630 Mercurial: remote code execution in binary delta decoding

CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos

CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos

22. Mercurial 3.7.2 (2016-3-1)

This is a regularly-scheduled bugfix release.

23. Mercurial 3.7.1 (2016-2-3)

This addresses an urgent regression in compilation on Solaris and metadata handling for conversions.

24. Mercurial 3.7 (2016-2-1)

Regularly scheduled feature release. There's also an overview of new features available.

24.1. commands

24.2. core

24.3. extensions

24.4. hgweb

24.5. unsorted

25. Mercurial 3.6.3 (2016-1-1)

This is a regularly-scheduled bugfix release.

26. Mercurial 3.6.2 (2015-12-1)

This is a regularly-scheduled bugfix release.

27. Mercurial 3.6.1 (2015-11-9)

This is an out-of-cycle bugfix release for issues related to hooks.

28. Mercurial 3.6 (2015-11-1)

Regularly scheduled feature release.

28.1. commands

28.2. core

28.3. extensions

28.4. hgweb

28.5. unsorted

29. Mercurial 3.5.2 (2015-10-01)

Regularly-scheduled bugfix release.

30. Mercurial 3.5.1 (2015-09-01)

Regularly-scheduled bugfix release.

31. Mercurial 3.5 (2015-07-31)

Regularly-scheduled feature release.

31.1. commands

31.2. core

31.3. extensions

31.4. hgweb

31.5. unsorted

32. Mercurial 3.4.2 (2015-07-01)

33. Mercurial 3.4.1 (2015-06-01)

This is a regularly-scheduled bugfix release.

34. Mercurial 3.4 (2015-05-01)

This is a regularly-scheduled feature release.

34.1. commands

34.2. core

34.3. extensions

34.4. hgweb

34.5. unsorted