Release Notes

Features and bugfixes in our latest releases. Please see the Download page for links to source and binaries.

Note that Mercurial follows a time-based release plan with major releases every three months and minor (bugfix) releases on the first of every month (see TimeBasedReleasePlan).

{i} Be sure to read the upgrade notes when upgrading.

(See the archive for older versions)

1. Mercurial 4.3.3 (2017-10-01)

2. Mercurial 4.3.2 (2017-09-18)

3. Mercurial 4.3 / 4.3.1 (2017-08-10)

(4.3.1 was released immediately after 4.3 to fix a release oversight.)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

3.1. Notable changes

3.2. CVE-2017-1000115

Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository.

3.3. CVE-2017-1000116

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks on clients by specifying a hostname starting with -oProxyCommand. This is also present in Git (CVE-2017-1000117) and Subversion (CVE-2017-9800), so please patch those tools as well if you have them installed.

4. Mercurial 4.2.3 (2017-08-10)

This was an out-of-cycle backport of security fixes from 4.3 for users stuck on Python 2.6.

5. Mercurial 4.2.2 (2017-07-05)

This is a regularly-scheduled bugfix release.

6. Mercurial 4.2.1 (2017-6-4)

This is a regularly-scheduled bugfix release.

7. Mercurial 4.2 (2017-5-2)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

7.1. Notable changes

7.2. commands

7.3. core

7.4. extensions

7.5. hgweb

7.6. Behavior changes

7.7. Internal API changes

8. Mercurial 4.1.3 (2017-4-18)

This is an out of cycle release to address a security issue:

9. Mercurial 4.1.2 (2017-4-3)

This is a regularly-scheduled bugfix release.

10. Mercurial 4.1.1 (2017-3-2)

This is a regularly-scheduled bugfix release.

11. Mercurial 4.1 (2017-2-1)

An overview of new features available. This is a regularly-scheduled quarterly feature release.

11.1. commands

11.2. core

11.3. extensions

11.4. hgweb

11.5. chg

11.6. Behavior Changes

11.7. Internal API Changes

12. Mercurial 4.0.2 (2017-01-04)

This is a regularly-scheduled bugfix release.

13. Mercurial 4.0.1 (2016-12-1)

This is a regularly-scheduled bugfix release.

14. Mercurial 4.0 (2016-11-1)

An overview of new features available. This is a regularly-scheduled quarterly feature release. Unlike other 4.0 software releases, this is simply 3.9 + .1, so it should be the usual pain-free upgrade.

14.1. commands

14.2. core

14.3. extensions

14.4. hgweb

15. Mercurial 3.9.2 (2016-10-1)

This is a regularly-scheduled bugfix release.

16. Mercurial 3.9.1 (2016-9-1)

This is a regularly-scheduled bugfix release.

17. Mercurial 3.9 (2016-8-1)

An overview of new features available.

17.1. commands

17.2. core

17.3. extensions

17.4. unsorted

18. Mercurial 3.8.4 (2016-7-01)

This is a regularly-scheduled bugfix release.

19. Mercurial 3.8.3 (2016-6-01)

This is a regularly-scheduled bugfix release.

20. Mercurial 3.8.2 (2016-5-16)

This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation warning that was only intended for Mercurial developers, sorry.

21. Mercurial 3.8 / 3.8.1 (2016-5-1)

(3.8.1 was released immediately after 3.8 to fix a release oversight.)

Regularly scheduled feature release. This release contains a low-priority security fix for:

CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos

There's also an overview of new features available.

21.1. commands

21.2. core

21.3. extensions

21.4. hgweb

21.5. unsorted

22. Mercurial 3.7.3 (2016-3-29)

This is an out of cycle release to address three security issues:

CVE-2016-3630 Mercurial: remote code execution in binary delta decoding

CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos

CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos

23. Mercurial 3.7.2 (2016-3-1)

This is a regularly-scheduled bugfix release.

24. Mercurial 3.7.1 (2016-2-3)

This addresses an urgent regression in compilation on Solaris and metadata handling for conversions.

25. Mercurial 3.7 (2016-2-1)

Regularly scheduled feature release. There's also an overview of new features available.

25.1. commands

25.2. core

25.3. extensions

25.4. hgweb

25.5. unsorted

26. Mercurial 3.6.3 (2016-1-1)

This is a regularly-scheduled bugfix release.

27. Mercurial 3.6.2 (2015-12-1)

This is a regularly-scheduled bugfix release.

28. Mercurial 3.6.1 (2015-11-9)

This is an out-of-cycle bugfix release for issues related to hooks.

29. Mercurial 3.6 (2015-11-1)

Regularly scheduled feature release.

29.1. commands

29.2. core

29.3. extensions

29.4. hgweb

29.5. unsorted

30. Mercurial 3.5.2 (2015-10-01)

Regularly-scheduled bugfix release.

31. Mercurial 3.5.1 (2015-09-01)

Regularly-scheduled bugfix release.

32. Mercurial 3.5 (2015-07-31)

Regularly-scheduled feature release.

32.1. commands

32.2. core

32.3. extensions

32.4. hgweb

32.5. unsorted

33. Mercurial 3.4.2 (2015-07-01)

34. Mercurial 3.4.1 (2015-06-01)

This is a regularly-scheduled bugfix release.

35. Mercurial 3.4 (2015-05-01)

This is a regularly-scheduled feature release.

35.1. commands

35.2. core

35.3. extensions

35.4. hgweb

35.5. unsorted