Update dependency GitPython to v3.1.61 by renovate[bot] · Pull Request #40 · Rubix982/open-concept-lab

renovate · 2026-07-26T04:44:00Z

This PR contains the following updates:

Package	Change	Age	Confidence
GitPython	`==3.1.45` → `==3.1.61`
GitPython	`==3.1.50` → `==3.1.61`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

gitpython-developers/GitPython (GitPython)

`v3.1.61`

Compare Source

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

Fix repository discovery precedence by @Byron in #2218
fix: wait for git daemon to listen before connecting by @Vogtinator in #2219
fix: restore Actor.name_email_regex by @Byron in #2221

New Contributors

@Vogtinator made their first contribution in #2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

`v3.1.60`

Compare Source

`v3.1.59`: - Security

Compare Source

What's Changed

prepare changelog for upcoming release by @Byron in #2207
Block file-reading Git options by @Byron in #2208
index: write blobs via git hash-object, not gitdb's odb.store by @caroescm in #2209
Block separate git directories during clone by @Byron in #2210
fix: harden config parsing boundaries by @Byron in #2211
repo.index.add() now respects worktree filters #2209

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

`v3.1.58`: Security and Fixes

Compare Source

What's Changed

test: allow Python startup before timeout by @Byron in #2195
Resolve Windows hook Bash through PATH by @Byron in #2199
Revert "Resolve Windows hook Bash through PATH" by @Byron in #2200
test: focus pytest summary on unexpected failures by @raisulchowdhury in #2203
Validate submodule names before filesystem operations by @Byron in #2202
Handle invalid submodule names during recursive updates by @Byron in #2205
Fix Windows path handling on Python 3.13+ by @Byron in #2196
fixup 2202 by @Byron in #2206
Correct Windows hook Bash precedence by @Byron in #2201
Harden config and Git option validation by @Byron in #2204
Skip tests that need symlink privileges instead of erroring by @Cyrus580529 in #2197

New Contributors

@raisulchowdhury made their first contribution in #2203
@Cyrus580529 made their first contribution in #2197

Full Changelog: gitpython-developers/GitPython@3.1.57...3.1.58

`v3.1.57`: - Security and Fixes

Compare Source

What's Changed

Merge gitdb and smmap into the GitPython repository by @Byron in #2179
build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #2185
build(deps): bump the pre-commit group with 2 updates by @dependabot[bot] in #2186
Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @dependabot[bot] in #2124
Render protected Traversable methods in the reference by @pick7 in #2192
Use standard prefixes for parsed patch diffs by @pick7 in #2191
Honor kill_after_timeout with output streams by @pick7 in #2189
Redact Authorization extra headers from command errors by @pick7 in #2188
Improve RemoteProgress parse return typing by @pick7 in #2187
Adopt basedpyright with a legacy baseline by @Byron in #2194
Block unsafe Git file and URL options by @Byron in #2193

New Contributors

@pick7 made their first contribution in #2192

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

`v3.1.56`: - SECURITY

Compare Source

What's Changed

Add support for Python 3.15 by @hugovk in #2183
fix: reject unsafe output options in Commit.count by @Byron in #2184

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

`v3.1.55`: - Security

Compare Source

What's Changed

fix: prevent environment expansion in remote URLs by @Byron in #2181

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

`v3.1.54`: - Security

Compare Source

What's Changed

Harden unsafe Git option validation by @Byron in #2180

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

`v3.1.53`: - Security

Compare Source

What's Changed

feat(submodule): add deinit method to Submodule (#2014) by @mvanhorn in #2129
typing: introduce sensible basedpyright defaults by @Byron in #2174
fix: make submodule.update() after submodule.deinit() work by @Byron in #2175
Fix commit hooks respecting core.hooksPath by @Siesta0217 in #2159
fix: validate config section delimiters by @Byron in #2176

New Contributors

@Siesta0217 made their first contribution in #2159

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

`v3.1.52`: Security

Compare Source

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Skip cross-drive relative config test on Windows by @Byron in #2171
fix: preserve literal clone URLs by @Byron in #2172

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

`v3.1.51`: - Security

Compare Source

What's Changed

Add AI-disclosure and quality requirements to the contribution guidelines by @Byron in #2143
docs(cmd): clarify Git.execute() string vs list command argument by @mvanhorn in #2144
Rewrite Git.execute() command parameter docstring per #2146 by @EliahKagan in #2147
Document init script behavior with multiple master remotes by @EliahKagan in #2148
Bump git/ext/gitdb from 335c0f6 to 0a019a2 by @dependabot[bot] in #2149
Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by @elovelan in #2151
Defer xfail condition evaluation with xfail_if_raises context manager by @elovelan in #2153
Run more submodule tests on Cygwin (fix flaky xfails) by @EliahKagan in #2154
Cut xtrace noise from POSIX-ownership diagnostic steps by @EliahKagan in #2156
Support index diffs against the empty tree by @puneetdixit200 in #2155
refactor: seperate out Progress type by @LoeschMaximilian in #2157
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.15 in the pre-commit group by @dependabot[bot] in #2160
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2164
Bump git/ext/gitdb from 0a019a2 to 4950ea9 by @dependabot[bot] in #2165
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.20 in the pre-commit group by @dependabot[bot] in #2166
Add Commit.is_shallow property; document stats() limitation at shallow boundary by @harshitayadavv in #2167
Allow relative config paths with includes by @Byron in #2169
Reject abbreviated forms of unsafe git options by @Byron in #2168
guard unsafe git command options by @Byron in #2163

New Contributors

@elovelan made their first contribution in #2151
@puneetdixit200 made their first contribution in #2155
@LoeschMaximilian made their first contribution in #2157
@harshitayadavv made their first contribution in #2167

Full Changelog: gitpython-developers/GitPython@3.1.50...3.1.51

`v3.1.50`

Compare Source

What's Changed

Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.8 to 0.15.12 in the pre-commit group by @dependabot[bot] in #2140
Bump git/ext/gitdb from 335c0f6 to 53c94d6 by @dependabot[bot] in #2141
Fix Repo() autodiscovery in linked worktrees when GIT_DIR is set by @meliezer in #2128
Validate config key names before writing by @Byron in #2142

New Contributors

@meliezer made their first contribution in #2128

Full Changelog: gitpython-developers/GitPython@3.1.49...3.1.50

`v3.1.49`: - Security

Compare Source

What's Changed

reject control chars in written values in configuration by @Byron in #2137
Improve pure Python rev-parse coverage and behavior by @Copilot in #2136

Full Changelog: gitpython-developers/GitPython@3.1.48...3.1.49

`v3.1.48`: - Security

Compare Source

Accidentally deleted the previous GH release, it did mention the advisory this fixes.

What's Changed

prevent out-of-repo access when manipulating references. by @Byron in #2134

Full Changelog: gitpython-developers/GitPython@3.1.47...3.1.48

`v3.1.47`: - with security fixes

Compare Source

Advisories

What's Changed

Prepare next release by @Byron in #2095
Bump git/ext/gitdb from 335c0f6 to 4c63ee6 by @dependabot[bot] in #2096
DOC: README Add urls and updated a relative url by @Timour-Ilyas in #2098
Fix GitConfigParser ignoring multiple [include] path entries by @daniel7an in #2100
Switch back from Alpine to Debian for WSL by @EliahKagan in #2108
Bump git/ext/gitdb from 4c63ee6 to 5c1b303 by @dependabot[bot] in #2106
Run gc.collect() twice in test_rename on Python 3.12 by @EliahKagan in #2109
fix: guard AutoInterrupt terminate during interpreter shutdown by @lweyrich1 in #2105
Improve CI infrastructure for pre-commit by @EliahKagan in #2110
Bump the pre-commit group with 5 updates by @dependabot[bot] in #2111
Upgrade Sphinx for 3.14 support; drop doc build support on 3.8; test 3.14 by @EliahKagan in #2112
Fix Repo.active_branch resolution for reftable-backed repositories by @Copilot in #2114
docs: warn about GitDB performance with large commits by @mvanhorn in #2115
cmd: fix kwarg formatting in docstring example by @UweSchwaeke in #2117
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.5 to 0.15.8 in the pre-commit group by @dependabot[bot] in #2122
Add trailer support for commit creation by @Krishnachaitanyakc in #2116
Harden commit trailer subprocess handling and align trailer I/O paths by @Copilot in #2125
git.cmd.Git.execute(..): fix with_stdout=False by @ngie-eign in #2126
Make sure that multi-options are checked after splitting them with shlex by @Byron in #2130
Block unsafe underscored git kwargs / Fix for GHSA-rpm5-65cw-6hj4 by @WesR in #2131

New Contributors

@Timour-Ilyas made their first contribution in #2098
@daniel7an made their first contribution in #2100
@lweyrich1 made their first contribution in #2105
@Copilot made their first contribution in #2114
@mvanhorn made their first contribution in #2115
@UweSchwaeke made their first contribution in #2117
@Krishnachaitanyakc made their first contribution in #2116
@ngie-eign made their first contribution in #2126
@WesR made their first contribution in #2131

Full Changelog: gitpython-developers/GitPython@3.1.46...3.1.47

`v3.1.46`

Compare Source

What's Changed

Prepare a new release by @Byron in #2063
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #2067
Bump git/ext/gitdb from 335c0f6 to 39d7dbf by @dependabot[bot] in #2068
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #2070
Bump git/ext/gitdb from 39d7dbf to f8fdfec by @dependabot[bot] in #2071
Fix type hint for SymbolicReference.reference property by @emmanuel-ferdman in #2074
feat: Add support for hasconfig git rule. by @bvanelli in #2075
Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2076
Use actual return type in annotation for method submodule_update by @extrwi in #2078
Bump git/ext/gitdb from f8fdfec to 65321a2 by @dependabot[bot] in #2082
Preliminary support for index format v3 by @blahgeek in #2081
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #2084
Pin mypy==1.18.2 by @George-Ogden in #2087
Respect os.Pathlike by @George-Ogden in #2086
Bump git/ext/gitdb from 65321a2 to 4c63ee6 by @dependabot[bot] in #2093
Join Pathlike Object to Tree by @George-Ogden in #2094

New Contributors

@emmanuel-ferdman made their first contribution in #2074
@bvanelli made their first contribution in #2075
@extrwi made their first contribution in #2078
@blahgeek made their first contribution in #2081
@George-Ogden made their first contribution in #2087

Full Changelog: gitpython-developers/GitPython@3.1.45...3.1.46

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

guardrails · 2026-07-26T04:44:51Z

⚠️ We detected 1 security issue in this pull request:

Vulnerable Libraries (1)

Severity	Details
Low	pkg:pypi/pygments@2.19.2 (t) - no patch available

More info on how to fix Vulnerable Libraries in Python.

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

renovate Bot force-pushed the renovate/gitpython-3.x branch from ea036b8 to 28ee4c1 Compare July 26, 2026 09:54

renovate Bot changed the title ~~Update dependency GitPython to v3.1.56~~ Update dependency GitPython to v3.1.57 Jul 26, 2026

renovate Bot force-pushed the renovate/gitpython-3.x branch from 28ee4c1 to 2592bbf Compare August 4, 2026 21:11

renovate Bot changed the title ~~Update dependency GitPython to v3.1.57~~ Update dependency GitPython to v3.1.58 Aug 4, 2026

renovate Bot force-pushed the renovate/gitpython-3.x branch from 2592bbf to 4756ef5 Compare August 10, 2026 14:13

renovate Bot changed the title ~~Update dependency GitPython to v3.1.58~~ Update dependency GitPython to v3.1.59 Aug 10, 2026

renovate Bot force-pushed the renovate/gitpython-3.x branch from 4756ef5 to 26234c0 Compare August 12, 2026 04:12

renovate Bot changed the title ~~Update dependency GitPython to v3.1.59~~ Update dependency GitPython to v3.1.60 Aug 25, 2026

renovate Bot force-pushed the renovate/gitpython-3.x branch from 26234c0 to c34b69d Compare August 25, 2026 23:27

Update dependency GitPython to v3.1.61

f3e9ac7

renovate Bot force-pushed the renovate/gitpython-3.x branch from c34b69d to f3e9ac7 Compare August 28, 2026 12:52

renovate Bot changed the title ~~Update dependency GitPython to v3.1.60~~ Update dependency GitPython to v3.1.61 Aug 28, 2026

Navigation Menu

Update dependency GitPython to v3.1.61 - #40

Update dependency GitPython to v3.1.61#40
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gitpython-3.x

renovate Bot commented Jul 26, 2026 •

edited

Loading

Uh oh!

guardrails Bot commented Jul 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.1.61

What's Changed

New Contributors

v3.1.60

v3.1.59: - Security

What's Changed

v3.1.58: Security and Fixes

What's Changed

New Contributors

v3.1.57: - Security and Fixes

What's Changed

New Contributors

v3.1.56: - SECURITY

What's Changed

v3.1.55: - Security

What's Changed

v3.1.54: - Security

What's Changed

v3.1.53: - Security

What's Changed

New Contributors

v3.1.52: Security

What's Changed

v3.1.51: - Security

What's Changed

New Contributors

v3.1.50

What's Changed

New Contributors

v3.1.49: - Security

What's Changed

v3.1.48: - Security

What's Changed

v3.1.47: - with security fixes

Advisories

What's Changed

New Contributors

v3.1.46

What's Changed

New Contributors

Configuration

Uh oh!

guardrails Bot commented Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 26, 2026 •

edited

Loading

`v3.1.61`

`v3.1.60`

`v3.1.59`: - Security

`v3.1.58`: Security and Fixes

`v3.1.57`: - Security and Fixes

`v3.1.56`: - SECURITY

`v3.1.55`: - Security

`v3.1.54`: - Security

`v3.1.53`: - Security

`v3.1.52`: Security

`v3.1.51`: - Security

`v3.1.50`

`v3.1.49`: - Security

`v3.1.48`: - Security

`v3.1.47`: - with security fixes

`v3.1.46`

guardrails Bot commented Jul 26, 2026 •

edited

Loading