Update dependency GitPython to v3.2.0 by renovate[bot] · Pull Request #31 · ngmisl/snapshot_tool

renovate · 2026-09-01T12:16:25Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
GitPython	`==3.1.31` → `==3.2.0`

Release Notes

gitpython-developers/GitPython (GitPython)

`v3.2.0`: - Security

Compare Source

What's Changed

test: cover subdirectory discovery and pathspec commands in bare-repository worktrees by @christianvuerings in #2228
Read git's yes/no and on/off booleans in get_value by @rawsun007 in #2229
Clarify detached HEAD access and isolate test branch state by @Byron in #2231
Reject submodule move destinations through intermediate symlinks by @Byron in #2232
fix: validate checkout positional reference options by @Byron in #2233
Fix timeout child-process lookup on non-GNU systems by @aprylewu in #2236
Preserve implicit boolean config keys by @Byron in #2238
Reject comments after implicit boolean config keys by @Byron in #2239
Fix case-insensitive Git config name matching by @Byron in #2241
Move project metadata to pyproject.toml by @mwtoews in #2242
Move [doc] extra to a PEP 735 dependency group; add uv-sync CI check by @mwtoews in #2243
fix: strip inline config comments the way git does by @rawsun007 in #2245
Drop Python 3.7 by @mwtoews in #2246
fix: preserve positional operands in high-level Git commands by @Byron in #2247
submodule: option to update without fetching by @jeffro256 in #2244
bump minor version to indicate drop of python 3.7 support by @Byron in #2248
fix: skip a UTF-8 BOM when reading config files by @geek-alpha in #2249
fix: complete safety checks in Git command wrappers by @Byron in #2251
build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 by @dependabot[bot] in #2252
fix: bound actor and date parsing by @Byron in #2253
fix(repo): preserve literal separate Git directory paths by @Byron in #2255
fix: validate object types when loading binary SHAs by @Byron in #2256
fix(commit): bound co_authors trailer parsing by @Keerthana-64 in #2257
various fixes by @Byron in #2258
fix(config): bound option-line parsing by @radhika1314 in #2259

New Contributors

@christianvuerings made their first contribution in #2228
@rawsun007 made their first contribution in #2229
@aprylewu made their first contribution in #2236
@mwtoews made their first contribution in #2242
@jeffro256 made their first contribution in #2244
@geek-alpha made their first contribution in #2249
@Keerthana-64 made their first contribution in #2257
@radhika1314 made their first contribution in #2259

Full Changelog: gitpython-developers/GitPython@3.1.62...3.2.0

`v3.1.62`

Compare Source

What's Changed

prepare next release by @Byron in #2222
Keep bare-repository worktrees non-bare by @Byron in #2224
Reject unsafe submodule checkout paths by @Byron in #2225
build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.5 in the pre-commit group by @dependabot[bot] in #2226
fix: join backslash line continuations when reading config values by @nkbeast in #2227

New Contributors

@nkbeast made their first contribution in #2227

Full Changelog: gitpython-developers/GitPython@3.1.61...3.1.62

`v3.1.61`

Compare Source

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

Fix repository discovery precedence by @Byron in #2218
fix: wait for git daemon to listen before connecting by @Vogtinator in #2219
fix: restore Actor.name_email_regex by @Byron in #2221

New Contributors

@Vogtinator made their first contribution in #2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

`v3.1.60`: Security

Compare Source

What's Changed

prepare changelog prior to release by @Byron in #2212
Preserve Git config escape semantics by @Byron in #2213
Harden diff path and actor identity parsing by @Byron in #2215
Require explicit opt-in for filesystem diffs by @Byron in #2217

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

`v3.1.59`: - Security

Compare Source

What's Changed

prepare changelog for upcoming release by @Byron in #2207
Block file-reading Git options by @Byron in #2208
index: write blobs via git hash-object, not gitdb's odb.store by @caroescm in #2209
Block separate git directories during clone by @Byron in #2210
fix: harden config parsing boundaries by @Byron in #2211
repo.index.add() now respects worktree filters #2209

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

`v3.1.58`: Security and Fixes

Compare Source

What's Changed

test: allow Python startup before timeout by @Byron in #2195
Resolve Windows hook Bash through PATH by @Byron in #2199
Revert "Resolve Windows hook Bash through PATH" by @Byron in #2200
test: focus pytest summary on unexpected failures by @raisulchowdhury in #2203
Validate submodule names before filesystem operations by @Byron in #2202
Handle invalid submodule names during recursive updates by @Byron in #2205
Fix Windows path handling on Python 3.13+ by @Byron in #2196
fixup 2202 by @Byron in #2206
Correct Windows hook Bash precedence by @Byron in #2201
Harden config and Git option validation by @Byron in #2204
Skip tests that need symlink privileges instead of erroring by @Cyrus580529 in #2197

New Contributors

@raisulchowdhury made their first contribution in #2203
@Cyrus580529 made their first contribution in #2197

Full Changelog: gitpython-developers/GitPython@3.1.57...3.1.58

`v3.1.57`: - Security and Fixes

Compare Source

What's Changed

Merge gitdb and smmap into the GitPython repository by @Byron in #2179
build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #2185
build(deps): bump the pre-commit group with 2 updates by @dependabot[bot] in #2186
Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @dependabot[bot] in #2124
Render protected Traversable methods in the reference by @pick7 in #2192
Use standard prefixes for parsed patch diffs by @pick7 in #2191
Honor kill_after_timeout with output streams by @pick7 in #2189
Redact Authorization extra headers from command errors by @pick7 in #2188
Improve RemoteProgress parse return typing by @pick7 in #2187
Adopt basedpyright with a legacy baseline by @Byron in #2194
Block unsafe Git file and URL options by @Byron in #2193

New Contributors

@pick7 made their first contribution in #2192

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

`v3.1.56`: - SECURITY

Compare Source

What's Changed

Add support for Python 3.15 by @hugovk in #2183
fix: reject unsafe output options in Commit.count by @Byron in #2184

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

`v3.1.55`: - Security

Compare Source

What's Changed

fix: prevent environment expansion in remote URLs by @Byron in #2181

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

`v3.1.54`: - Security

Compare Source

What's Changed

Harden unsafe Git option validation by @Byron in #2180

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

`v3.1.53`: - Security

Compare Source

What's Changed

feat(submodule): add deinit method to Submodule (#2014) by @mvanhorn in #2129
typing: introduce sensible basedpyright defaults by @Byron in #2174
fix: make submodule.update() after submodule.deinit() work by @Byron in #2175
Fix commit hooks respecting core.hooksPath by @Siesta0217 in #2159
fix: validate config section delimiters by @Byron in #2176

New Contributors

@Siesta0217 made their first contribution in #2159

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

`v3.1.52`: Security

Compare Source

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Skip cross-drive relative config test on Windows by @Byron in #2171
fix: preserve literal clone URLs by @Byron in #2172

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

`v3.1.51`: - Security

Compare Source

What's Changed

Add AI-disclosure and quality requirements to the contribution guidelines by @Byron in #2143
docs(cmd): clarify Git.execute() string vs list command argument by @mvanhorn in #2144
Rewrite Git.execute() command parameter docstring per #2146 by @EliahKagan in #2147
Document init script behavior with multiple master remotes by @EliahKagan in #2148
Bump git/ext/gitdb from 335c0f6 to 0a019a2 by @dependabot[bot] in #2149
Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by @elovelan in #2151
Defer xfail condition evaluation with xfail_if_raises context manager by @elovelan in #2153
Run more submodule tests on Cygwin (fix flaky xfails) by @EliahKagan in #2154
Cut xtrace noise from POSIX-ownership diagnostic steps by @EliahKagan in #2156
Support index diffs against the empty tree by @puneetdixit200 in #2155
refactor: seperate out Progress type by @LoeschMaximilian in #2157
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.15 in the pre-commit group by @dependabot[bot] in #2160
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2164
Bump git/ext/gitdb from 0a019a2 to 4950ea9 by @dependabot[bot] in #2165
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.20 in the pre-commit group by @dependabot[bot] in #2166
Add Commit.is_shallow property; document stats() limitation at shallow boundary by @harshitayadavv in #2167
Allow relative config paths with includes by @Byron in #2169
Reject abbreviated forms of unsafe git options by @Byron in #2168
guard unsafe git command options by @Byron in #2163

New Contributors

@elovelan made their first contribution in #2151
@puneetdixit200 made their first contribution in #2155
@LoeschMaximilian made their first contribution in #2157
@harshitayadavv made their first contribution in #2167

Full Changelog: gitpython-developers/GitPython@3.1.50...3.1.51

`v3.1.50`

Compare Source

What's Changed

Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.8 to 0.15.12 in the pre-commit group by @dependabot[bot] in #2140
Bump git/ext/gitdb from 335c0f6 to 53c94d6 by @dependabot[bot] in #2141
Fix Repo() autodiscovery in linked worktrees when GIT_DIR is set by @meliezer in #2128
Validate config key names before writing by @Byron in #2142

New Contributors

@meliezer made their first contribution in #2128

Full Changelog: gitpython-developers/GitPython@3.1.49...3.1.50

`v3.1.49`: - Security

Compare Source

What's Changed

reject control chars in written values in configuration by @Byron in #2137
Improve pure Python rev-parse coverage and behavior by @Copilot in #2136

Full Changelog: gitpython-developers/GitPython@3.1.48...3.1.49

`v3.1.48`: - Security

Compare Source

Accidentally deleted the previous GH release, it did mention the advisory this fixes.

What's Changed

prevent out-of-repo access when manipulating references. by @Byron in #2134

Full Changelog: gitpython-developers/GitPython@3.1.47...3.1.48

`v3.1.47`: - with security fixes

Compare Source

Advisories

What's Changed

Prepare next release by @Byron in #2095
Bump git/ext/gitdb from 335c0f6 to 4c63ee6 by @dependabot[bot] in #2096
DOC: README Add urls and updated a relative url by @Timour-Ilyas in #2098
Fix GitConfigParser ignoring multiple [include] path entries by @daniel7an in #2100
Switch back from Alpine to Debian for WSL by @EliahKagan in #2108
Bump git/ext/gitdb from 4c63ee6 to 5c1b303 by @dependabot[bot] in #2106
Run gc.collect() twice in test_rename on Python 3.12 by @EliahKagan in #2109
fix: guard AutoInterrupt terminate during interpreter shutdown by @lweyrich1 in #2105
Improve CI infrastructure for pre-commit by @EliahKagan in #2110
Bump the pre-commit group with 5 updates by @dependabot[bot] in #2111
Upgrade Sphinx for 3.14 support; drop doc build support on 3.8; test 3.14 by @EliahKagan in #2112
Fix Repo.active_branch resolution for reftable-backed repositories by @Copilot in #2114
docs: warn about GitDB performance with large commits by @mvanhorn in #2115
cmd: fix kwarg formatting in docstring example by @UweSchwaeke in #2117
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.5 to 0.15.8 in the pre-commit group by @dependabot[bot] in #2122
Add trailer support for commit creation by @Krishnachaitanyakc in #2116
Harden commit trailer subprocess handling and align trailer I/O paths by @Copilot in #2125
git.cmd.Git.execute(..): fix with_stdout=False by @ngie-eign in #2126
Make sure that multi-options are checked after splitting them with shlex by @Byron in #2130
Block unsafe underscored git kwargs / Fix for GHSA-rpm5-65cw-6hj4 by @WesR in #2131

New Contributors

@Timour-Ilyas made their first contribution in #2098
@daniel7an made their first contribution in #2100
@lweyrich1 made their first contribution in #2105
@Copilot made their first contribution in #2114
@mvanhorn made their first contribution in #2115
@UweSchwaeke made their first contribution in #2117
@Krishnachaitanyakc made their first contribution in #2116
@ngie-eign made their first contribution in #2126
@WesR made their first contribution in #2131

Full Changelog: gitpython-developers/GitPython@3.1.46...3.1.47

`v3.1.46`

Compare Source

What's Changed

Prepare a new release by @Byron in #2063
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #2067
Bump git/ext/gitdb from 335c0f6 to 39d7dbf by @dependabot[bot] in #2068
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #2070
Bump git/ext/gitdb from 39d7dbf to f8fdfec by @dependabot[bot] in #2071
Fix type hint for SymbolicReference.reference property by @emmanuel-ferdman in #2074
feat: Add support for hasconfig git rule. by @bvanelli in #2075
Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2076
Use actual return type in annotation for method submodule_update by @extrwi in #2078
Bump git/ext/gitdb from f8fdfec to 65321a2 by @dependabot[bot] in #2082
Preliminary support for index format v3 by @blahgeek in #2081
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #2084
Pin mypy==1.18.2 by @George-Ogden in #2087
Respect os.Pathlike by @George-Ogden in #2086
Bump git/ext/gitdb from 65321a2 to 4c63ee6 by @dependabot[bot] in #2093
Join Pathlike Object to Tree by @George-Ogden in #2094

New Contributors

@emmanuel-ferdman made their first contribution in #2074
@bvanelli made their first contribution in #2075
@extrwi made their first contribution in #2078
@blahgeek made their first contribution in #2081
@George-Ogden made their first contribution in #2087

Full Changelog: gitpython-developers/GitPython@3.1.45...3.1.46

`v3.1.45`

Compare Source

What's Changed

Fix various version-related CI breakages by @EliahKagan in #1987
Do some CI cleanup to make reports clearer and future changes easier by @EliahKagan in #1989
Affirm that gitdb and smmap advisories can also be created by @EliahKagan in #1991
Fix links to gitdb and smmap SECURITY.md files by @EliahKagan in #1992
Test Python 3.13 regularly on Ubuntu and macOS on CI by @EliahKagan in #1990
Repo.rev_parse: Handle ^{commit} correctly by @flichtenheld in #1996
Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling by @DaveLak in #1997
Work around Cygwin CI failure #2004, except for test_installation by @EliahKagan in #2007
Mark test_installation xfail on Cygwin CI by @EliahKagan in #2009
IndexFile._to_relative_path - fix case where absolute path gets stripped of trailing slash by @kamilkozik7 in #2012
Use WSL1 on CI by @EliahKagan in #2010
Test free-threaded Python (but only on Linux) by @EliahKagan in #2011
Use property decorator to support typing by @Andrej730 in #2015
Fix some incorrect sphinx markups in the docstrings by @koyuki7w in #2018
replace quansight-labs/setup-python with actions/setup-python by @ngoldbaum in #2019
remove type assertions from util.py by @gcmarx in #2028
correctly handle uname-cmd that doesn't point to an executable file by @gcmarx in #2026
Use newer ruff style by @EliahKagan in #2031
Have CodeQL scan GitHub Actions workflows as well as Python code by @EliahKagan in #2032
Specify explicit contents: read workflow permissions by @EliahKagan in #2033
Fix GitConfigParser not removing quotes from values by @betaboon in #2035
Preserve quoted leading and trailing single-line config var whitespace by @EliahKagan in #2036
Refactor Git.{AutoInterrupt,CatFileContentStream} nesting by @EliahKagan in #2037
Fix Git.{AutoInterrupt,CatFileContentStream} static typing by @EliahKagan in #2039
Fix CI mypy command on free-threaded Python by @EliahKagan in #2040
Split Cygwin CI into non-performance and performance test jobs by @EliahKagan in #2042
Express conditional setuptools requirement statically by @EliahKagan in #2043
Fix ambiguous _safer_popen_windows comment by @EliahKagan in #2044
Clarify USE_SHELL warning helper signature by @EliahKagan in #2045
Test ConfigParser with whitespace outside the value by @EliahKagan in #2046
Remove explicit empty "" handling in ConfigParser by @EliahKagan in #2047
Various style improvements by @EliahKagan in #2049
Don't remove quotes if \ or " are present inside by @EliahKagan in #2048
fix updating submodules with relative urls by @david0 in #2051
Run cat_file.py fixture without site customizations by @EliahKagan in #2052
Fix Cygwin installation on CI for pip by @EliahKagan in #2053
Fail test_installation on warnings, and remove deprecated license classifier by @EliahKagan in #2054
Add clearer error version for unsupported index error by @tombedor in #2055
Fix name collision by @NMertsch in #2060
Allow relative path url in submodules for submodule_update by @t-webber in #2062

New Contributors

@flichtenheld made their first contribution in #1996
@kamilkozik7 made their first contribution in #2012
@koyuki7w made their first contribution in #2018
@ngoldbaum made their first contribution in #2019
@gcmarx made their first contribution in #2028
@betaboon made their first contribution in #2035
@david0 made their first contribution in #2051
@tombedor made their first contribution in #2055
@NMertsch made their first contribution in #2060
@t-webber made their first contribution in #2062

Full Changelog: gitpython-developers/GitPython@3.1.44...3.1.45

`v3.1.44`

Compare Source

What's Changed

Fix typo in _get_exe_extensions PATHEXT fallback by @EliahKagan in #1890
Don't suppress pytest warning summaries by @EliahKagan in #1892
Update the comment about --mixed and paths by @EliahKagan in #1894
Fixed an error updating shallow submodules by @EduardTalanov in #1899
Initial Migration of Fuzz Tests & Integration Scripts From the OSS-Fuzz Project Repo by @DaveLak in #1901
Fuzzer Migration Follow-ups by @DaveLak in #1903
Dockerize "Direct Execution of Fuzz Targets" by @DaveLak in #1904
Fix Fuzzer Crash in ClusterFuzz Due to Missing Git Executable by @DaveLak in #1906
Add GitPython's Standard License Header Comments to Shell Scripts by @DaveLak in #1907
Fix IndexError in GitConfigParser When a Quoted Config Value Contains a Trailing New Line by @DaveLak in #1908
Attempt 2 - Fix Missing Git Executable Causing ClusterFuzz Crash by @DaveLak in #1909
Replace the Suboptimal fuzz_tree.py Harness With a Better Alternative by @DaveLak in #1910
Add git.Blob Fuzz Target by @DaveLak in #1911
lint: switch order Ruff's hooks fix -> format by @Borda in #1912
Update OSS-Fuzz Scripts to Use New QA-Assets Repo Structure by @DaveLak in #1913
Add Diff Fuzz Target by @DaveLak in #1914
Instrument test utility functions to increase fuzzer efficiency by @DaveLak in #1915
Add the .git subdir as another safe.directory on Cygwin CI by @EliahKagan in #1916
Bump Vampire/setup-wsl from 3.0.0 to 3.1.0 by @dependabot in #1917
Add Submodules Fuzz Target by @DaveLak in #1919
Add graceful handling of expected exceptions in fuzz_submodule.py by @DaveLak in #1922
precommit: enable validate-pyproject by @Borda in #1921
typing fixes - DiffIndex generic type and IndexFile items by @Andrej730 in #1925
Fix Improper Import Order Breaking fuzz_submodule Fuzzer by @DaveLak in #1926
Fix iter_change_type diff renamed property to prevent warning by @kamilkrzyskow in #1918
fixed doc to not faulty do #1924 by @zerothi in #1932
fix: fix incoherent beginning whitespace by [@cardoeng](h

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot force-pushed the renovate/gitpython-3.x branch from 3b10c34 to 6c17b05 Compare September 7, 2026 06:37

renovate Bot changed the title ~~Update dependency GitPython to v3.1.61~~ Update dependency GitPython to v3.1.62 Sep 7, 2026

Update dependency GitPython to v3.2.0

e3c05b5

renovate Bot force-pushed the renovate/gitpython-3.x branch from 6c17b05 to e3c05b5 Compare September 30, 2026 11:10

renovate Bot changed the title ~~Update dependency GitPython to v3.1.62~~ Update dependency GitPython to v3.2.0 Sep 30, 2026

Navigation Menu

Uh oh!

Update dependency GitPython to v3.2.0 - #31

Update dependency GitPython to v3.2.0#31
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gitpython-3.x

renovate Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.2.0: - Security

What's Changed

New Contributors

v3.1.62

What's Changed

New Contributors

v3.1.61

What's Changed

New Contributors

v3.1.60: Security

What's Changed

v3.1.59: - Security

What's Changed

v3.1.58: Security and Fixes

What's Changed

New Contributors

v3.1.57: - Security and Fixes

What's Changed

New Contributors

v3.1.56: - SECURITY

What's Changed

v3.1.55: - Security

What's Changed

v3.1.54: - Security

What's Changed

v3.1.53: - Security

What's Changed

New Contributors

v3.1.52: Security

What's Changed

v3.1.51: - Security

What's Changed

New Contributors

v3.1.50

What's Changed

New Contributors

v3.1.49: - Security

What's Changed

v3.1.48: - Security

What's Changed

v3.1.47: - with security fixes

Advisories

What's Changed

New Contributors

v3.1.46

What's Changed

New Contributors

v3.1.45

What's Changed

New Contributors

v3.1.44

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 1, 2026 •

edited

Loading

`v3.2.0`: - Security

`v3.1.62`

`v3.1.61`

`v3.1.60`: Security

`v3.1.59`: - Security

`v3.1.58`: Security and Fixes

`v3.1.57`: - Security and Fixes

`v3.1.56`: - SECURITY

`v3.1.55`: - Security

`v3.1.54`: - Security

`v3.1.53`: - Security

`v3.1.52`: Security

`v3.1.51`: - Security

`v3.1.50`

`v3.1.49`: - Security

`v3.1.48`: - Security

`v3.1.47`: - with security fixes

`v3.1.46`

`v3.1.45`

`v3.1.44`