Changes from v1: - merged last 2 patches - patch 1: - updated advertisePushOptions doc to say "False by default" - patch 2 (formerly 2-3): - reject mismatching push options (similar to how a pre-receive hook can reject a push) instead of merely reporting it - added test to check failure (in addition to success) - modified pack-protocol.txt to describe new behavior Jonathan Tan (2): docs: correct receive.advertisePushOptions default receive-pack: verify push options in cert Documentation/config.txt | 5 ++- Documentation/technical/pack-protocol.txt | 32 +++++++++++++++---- builtin/receive-pack.c | 51 +++++++++++++++++++++++++++++-- t/t5534-push-signed.sh | 37 ++++++++++++++++++++++ 4 files changed, 114 insertions(+), 11 deletions(-) -- 2.13.0.rc1.294.g07d810a77f-goog