packaging: update dulwich to drop the certifi dependency on Windows The presence of `certifi` causes the system certificate store to be ignored, which was reported as a bug against TortoiseHg[1]. It was only pulled in on Windows because of `dulwich`, which was copied from the old TortoiseHg install scripts, in order to support `hg-git`. This version of `dulwich` raises the minimum `urllib3` to a version (1.25) that does certificate verification by default, without the help of `certifi`[2]. We already bundle a newer version of `urllib3`. Note that `certifi` can still be imported from the user site directory, if installed there. But the installer no longer disables the system certificates by default. [1] https://foss.heptapod.net/mercurial/tortoisehg/thg/-/issues/5825 [2] https://github.com/jelmer/dulwich/issues/1025

     1

Address commentary in manifest.excludedmanifestrevlog.add -

     2

specifically we should improve the collaboration with core so that

     3

add() never gets called on an excluded directory and we can improve

     4

the stand-in to raise a ProgrammingError.

     5

     6

Reason more completely about rename-filtering logic in

     7

narrowfilelog. There could be some surprises lurking there.

     8

     9

Formally document the narrowspec format. For bonus points, unify with the

    10

server-specified narrowspec format.

    11

    12

narrowrepo.setnarrowpats() or narrowspec.save() need to make sure

    13

they're holding the wlock.

    14

    15

The follinwg places do an unrestricted dirstate walk (including files outside the

    16

narrowspec). Some of them should perhaps not do that.

    17

    18

 * debugfileset

    19

 * perfwalk

    20

 * sparse (but restricted to sparse config)

    21

 * largefiles