Git’s reported roadmap for version 3.0 would make SHA-256 and reftable the defaults, while requiring Rust as a dependency. The changes could reshape assumptions for developers and organisations that build on or operate the version-control system, though the plans are not presented as a final release specification.
Watch Desk analysis
What happened
GitLab’s 28 September account of discussions at Git Merge 2026 says Git 3.0 releases are planned for late 2026 and spring 2027. It says the roadmap includes making SHA-256 and reftable defaults and making Rust a required dependency. Read GitLab’s account of the roadmap.
That account does not give migration instructions or a detailed schedule for those changes. They are roadmap items, not a checklist that Git users need to act on today.
Why it matters
Git sits underneath a great deal of software development. Changes to its default object format and reference storage could matter to the tools and workflows built around it; a required Rust dependency could also affect people building or packaging Git. The practical questions are how the transition will work and what compatibility support will look like.
Our read
This is a roadmap worth watching, not a cue to start rearranging repositories this afternoon. The combination of format defaults and a new build dependency is substantial enough that maintainers should want a clear migration story before Git 3.0 arrives. GitLab’s account describes discussions and plans, not a final specification, so the details still matter.
What to watch
- Whether the Git project publishes a detailed Git 3.0 plan and schedule.
- How repositories and surrounding tools will handle SHA-256 and reftable as defaults.
- What requiring Rust means for building, packaging and distributing Git.
Discussion spark: Should Git make SHA-256 and reftable defaults in a major release, or should users opt in until the migration path is clearer?
Sources and evidence
- What's new in Git 2.56.0? (28 September 2026, 18:08 UTC)
Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.