[dependabot]

Bumps gitpython from 3.1.58 to 3.1.62.

Release notes

Sourced from gitpython's releases.

3.1.62

What's Changed

• prepare next release by @​Byron in gitpython-developers/GitPython#2222
• Keep bare-repository worktrees non-bare by @​Byron in gitpython-developers/GitPython#2224
• Reject unsafe submodule checkout paths by @​Byron in gitpython-developers/GitPython#2225
• build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.5 in the pre-commit group by @​dependabot[bot] in gitpython-developers/GitPython#2226
• fix: join backslash line continuations when reading config values by @​nkbeast in gitpython-developers/GitPython#2227

New Contributors

• @​nkbeast made their first contribution in gitpython-developers/GitPython#2227

Full Changelog: gitpython-developers/GitPython@3.1.61...3.1.62

3.1.61

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

• Fix repository discovery precedence by @​Byron in gitpython-developers/GitPython#2218
• fix: wait for git daemon to listen before connecting by @​Vogtinator in gitpython-developers/GitPython#2219
• fix: restore Actor.name_email_regex by @​Byron in gitpython-developers/GitPython#2221

New Contributors

• @​Vogtinator made their first contribution in gitpython-developers/GitPython#2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

3.1.60 Security

What's Changed

• prepare changelog prior to release by @​Byron in gitpython-developers/GitPython#2212
• Preserve Git config escape semantics by @​Byron in gitpython-developers/GitPython#2213
• Harden diff path and actor identity parsing by @​Byron in gitpython-developers/GitPython#2215
• Require explicit opt-in for filesystem diffs by @​Byron in gitpython-developers/GitPython#2217

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

3.1.59 - Security

What's Changed

• prepare changelog for upcoming release by @​Byron in gitpython-developers/GitPython#2207
• Block file-reading Git options by @​Byron in gitpython-developers/GitPython#2208
• index: write blobs via git hash-object, not gitdb's odb.store by @​caroescm in gitpython-developers/GitPython#2209
• Block separate git directories during clone by @​Byron in gitpython-developers/GitPython#2210
• fix: harden config parsing boundaries by @​Byron in gitpython-developers/GitPython#2211
• repo.index.add() now respects worktree filters gitpython-developers/GitPython#2209

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

Changelog

Sourced from gitpython's changelog.

3.1.62

Security fixes for

• GHSA-59cr-6r3x-644w

If you can, also try and provide feedback on the upcoming v4 branch gitpython-developers/GitPython#2274 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.62

3.1.61

A fixup release to avoid accidental removal of public class regex on Actor. It's now deprecated instead.

If you can, also try and provide feedback on the upcoming v4 branch gitpython-developers/GitPython#2274 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.61

3.1.60

Security fixes for

• GHSA-g5vv-9gxw-82hx
• GHSA-whh4-5q6c-9v3x
• GHSA-239g-whfq-7xj9

If you can, also try and provide feedback on the upcoming v4 branch gitpython-developers/GitPython#2274 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.60

3.1.59

Security fixes for

• GHSA-5xxx-qhh7-9287
• GHSA-3wxw-xv34-2frg
• GHSA-8mcc-hrx5-hvxc
• GHSA-284h-m62q-gf8w
• GHSA-7833-fr7j-v32q

... (truncated)

Commits

• 1ed0ebc Reject submodule checkout paths outside the repository
• 5346d1b prepare next release
• c7cf4d1 fix: prefer .git during repository discovery
• 09f2cf3 fix: require opt-in for no-index diffs
• 751473a fix: parse actor identities without regular expressions
• 66340d7 prepare changelog prior to release
• ce9d8e8 prepare next release
• See full diff in compare view

[amrit110]

Automated fix applied and PR merged

The agentic fix loop successfully fixed this PR and merged it.

✓ Successfully fixed merge_only failures - Modified 0 files - Executed 69 agent actions - (22 info, 18 tool_call, 17 tool_result, 3 error, 9 reasoning)

View PR history on dashboard

AI Engineering Maintenance Bot

[amrit110]

Automated fix applied and PR merged

The agentic fix loop successfully fixed this PR and merged it.

✓ Successfully fixed build failures - Modified 0 files - Executed 42 agent actions - (16 info, 11 tool_call, 10 tool_result, 3 reasoning, 2 error)

View PR history on dashboard

AI Engineering Maintenance Bot