chore(deps): Bump gix from 0.86.0 to 0.87.0

[dependabot]

Bumps gix from 0.86.0 to 0.87.0.

Release notes

Sourced from gix's releases.

gix v0.87.0

Bug Fixes (BREAKING)

• remove need-more-recent-msrv as it's not required anymore It was mostly meant to be internal, but the name didn't indicate this, hence the breaking change.

Test

• assert fetched pack contents rather than pack checksums fetch_pack and fetch_pack_without_local_destination asserted the data_hash/index_hash of a pack produced by the host git. Those cover the pack's compressed bytes, so they silently encode which zlib implementation that git is linked against: with a zlib-ng-linked git (Arch, among others) the 219-byte commit in that pack deflates to 152 bytes where stock zlib produces 153, making the pack 268 bytes instead of 269 and changing both checksums.

  Nothing about the fetch itself differs — re-deflating the very same object payloads with stock zlib and re-hashing reproduces the expected checksum byte for byte, and every other assertion in both tests already passes.

  Assert the pack's object ids instead, read back from the index that was just written. They hash uncompressed content, so they are identical on every host, and they are what the checksums were standing in for. num_objects, pack_version and index_version are untouched; Entry::crc32 is deliberately not used, as it too is computed over compressed bytes.

New Features (BREAKING)

• add Git-compatible commit signature verification with Commit::verify() Breaking because it also adds config::tree::Key::default_value(), which gives Any a default_value field.

  Expose repository-aware verification on commits while delegating verifier execution and result parsing to gix-object plumbing. Resolve supported signature formats, configured programs, trust thresholds, SSH allowed signers and revocations, repository-relative paths, and commit verification time according to Git configuration.

• add commit::Info::generation That way it's evident if a commit-graph was present for this node. Breaking, as it adds a new public field to a structure.

Changed (BREAKING)

• remove the tree-editor feature toggle The workspace MSRV now exceeds Rust 1.75, which stabilized the language feature that originally required tree editing to be gated.

... (truncated)

Commits

• 0c541c7 Release gix-note v0.1.0, gix-pack v0.74.0, gix-odb v0.84.0, gix-refspec v0.45...
• 94aa28e Make gix-note compile on docs.rs
• d2af4ed Release gix-error v0.3.0, gix-date v0.16.0, gix-actor v0.42.0, gix-validate v...
• ebe9095 update manifests prior to release
• 68c263b report proofing
• 0d8bd1d Report August 2026
• 7424676 Merge pull request #2930 from GitoxideLabs/gix-notes
• 5c8d935 thanks clippy
• d934f5b feat: expose git notes in gix::Repository
• dc556e4 feat(gix-glob): add Pattern::has_wildcard()
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[automate-by-sierra-softworks]

This pull request has been automatically approved because it was raised by a trusted account.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.83%. Comparing base (f2f030b) to head (f1dccb6).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #665   +/-   ##
=======================================
  Coverage   76.83%   76.83%           
=======================================
  Files          31       31           
  Lines        2612     2612           
=======================================
  Hits         2007     2007           
  Misses        605      605           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.