Skip to content

Bump gitpython from 3.1.50 to 3.1.55 - #84

Merged
sankalps0549 merged 2 commits into
mainfrom
dependabot/pip/gitpython-3.1.54
Jul 30, 2026
Merged

Bump gitpython from 3.1.50 to 3.1.55#84
sankalps0549 merged 2 commits into
mainfrom
dependabot/pip/gitpython-3.1.54

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps gitpython from 3.1.50 to 3.1.55.

Release notes

Sourced from gitpython's releases.

3.1.54 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

3.1.52 Security

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

3.1.51 - Security

What's Changed

... (truncated)

Commits
  • e59d9ba prepare next release
  • a4dc70d Merge pull request #2180 from gitpython-developers/single-char-kwarg
  • 1d51b89 fix: guard diff output options
  • ffcb535 fix: reject unsafe clone templates
  • e8d0fbf fix: validate split short-option values
  • faf3c09 prepare for security fix
  • 6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
  • 1ed1b92 fix: validate config section delimiters
  • 354eb2f Merge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks
  • 9bc287a Address review feedback about hook resolution
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.50 to 3.1.54.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.54)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.54
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 29, 2026
Comment thread requirements.txt Outdated
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@sankalps0549
sankalps0549 requested a review from Copilot July 29, 2026 04:56

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@sankalps0549

Copy link
Copy Markdown
Collaborator

@dependabot upgrade gitpython to 3.1.55

@sankalps0549

Copy link
Copy Markdown
Collaborator

@copilot upgrade gitpython to 3.1.55

Copilot AI commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

@copilot upgrade gitpython to 3.1.55

Updated gitpython to 3.1.55 in requirements.txt (commit Bump gitpython from 3.1.54 to 3.1.55).

Copilot AI requested a review from sankalps0549 July 29, 2026 06:47
@sankalps0549 sankalps0549 changed the title Bump gitpython from 3.1.50 to 3.1.54 Bump gitpython from 3.1.50 to 3.1.55 Jul 29, 2026
@sankalps0549
sankalps0549 requested a review from osinjoku July 29, 2026 06:52
@sankalps0549
sankalps0549 merged commit 3930358 into main Jul 30, 2026
22 checks passed
@sankalps0549
sankalps0549 deleted the dependabot/pip/gitpython-3.1.54 branch July 30, 2026 04:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants