checkout_index: handle other stages

ignore: don't leak rules into higher directores

Threading and crypto libraries

remote: check for the validity of the refspec when updating FETCH_HEAD

A rule "src" in src/.gitignore must only match subdirectories of
src/. The current code does not include this context in the match rule
and would thus consider this rule to match the top-level src/ directory
instead of the intended src/src/.

Keep track fo the context in which the rule was defined so we can
perform a prefix match.

When we mention "src" in src/.gitignore, we wrongly consider src/ itself
to be ignored.

ignore: consider files with a CR in their names

We currently consider CR to start the end of the line, but that means
that we miss cases with CR CR LF which can be used with git to match
files whose names have CR at the end of their names.

The fix from the patch comes from Russell's comment in the issue.

This fixes #2536.

Propogate GIT_ENOTFOUND from git_remote_rename

Make config reading continue after hitting a missing include file.

Before trying to rtransform using the given refspec to figure out what
the name of the upstream branch is on the remote, we must make sure that
the target of the refspec applies to the current branch's upstream.

Changed context_lines and interhunk_lines to uint32_t to match struct s_xdemitconf

remote: unify the creation code

netops: return GIT_ECERTIFICATE when it fails the basic tests

Fix segmentation fault observed on OpenBSD/sparc64

Make the Visual Studio compiler happy

A non-readable mapping of a file causes an access violation in
the pack tests. Always use PROT_READ to work around this.

* Error-handling is cleaned up to only let a file-not-found error
  through, not other sorts of errors.  And when a file-not-found
  error happens, we clean up the error.
* Test now checks that file-not-found introduces no error.  And
  other minor cleanups.

The create function with default refspec is the same as the one with a
custom refspec, but it has the default refspec, so we can create the one
on top of the other.

An anonymous remote wouldn't create remote-tracking branches, so testing
we don't create them for TAGS_ALL is nonsensical. Furthermore, the name
of the supposed remote-tracking branch was also not one which would have
been created had it had a name.

Give the remote a name and test that we only create the tags when we
pass TAGS_ALL and that we do create the remote-branch branch when given
TAGS_AUTO.

When we update FETCH_HEAD we check whether the remote is the current
branch's upstream remote. The code does not check whether the current
refspec is relevant for this reference but always tries to perform the
reverse transformation, which causes it to error out if the refspec
doesn't match the reference.

Thanks to Pierre-Olivier Latour for the reproduction recipe.

Since it's not necessarily obvious, mention the merging state and how to
clear it.

When we first ask OpenSSL to verify the certfiicate itself (rather
than the HTTPS specifics), we should also return
GIT_ECERTIFICATE. Otherwise, the caller would consider this as a failed
operation rather than a failed validation and not call the user's own
validation.

For example, if you have

[include]
path = foo

and foo didn't exist, git_config_open_ondisk() would just give up
on the rest of the file.  Now it ignores the unresolved include
without error and continues reading the rest of the file.

Talk about sharing objects and error messages; but the most important
part is about what to do with the cryptographic libraries, which sadly
have to become to responsibility of the application.

Extract the lock-setting functions into their own, as we cannot assume
that it's ok for us to set this unconditionally.

We're freeing the memory which holds the locks so we must make sure that
the locking function doesn't try to use it.

revert tests: always use core.autocrlf=false in tests

Fixed the most obvious Clang static analyzer warnings

Flip THREADSAFE's default to ON

Threads are here to stay; and for a while now, users have had to call
the initialization function which sets up threads and crypto regardless
of whether the library was built threadsafe or not.