chore(deps): bump gitpython from 3.1.44 to 3.1.57 in /services/apps/git_integration - #4435
Conversation
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.44 to 3.1.57. - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.44...3.1.57) --- updated-dependencies: - dependency-name: gitpython dependency-version: 3.1.57 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
PR SummaryLow Risk Overview The lockfile also adjusts Upstream 3.1.44 → 3.1.57 brings several security-oriented GitPython releases (e.g. stricter unsafe Git option/URL handling, redacted auth headers in errors). No service source files are modified in this PR. Reviewed by Cursor Bugbot for commit cdc85b1. Bugbot is set up for automated code reviews on this repo. Configure here. |
|
|
|
Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability. Example:
Projects:
Please add a Jira issue key to your PR title. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
2 participants
Bumps gitpython from 3.1.44 to 3.1.57.
Release notes
Sourced from gitpython's releases.
... (truncated)
Commits
ccbd573prepare for new released1a631dMerge pull request #2193 from gitpython-developers/more-unsafe-optionsab33e33Merge pull request #2194 from gitpython-developers/fix-basedpyright52199b3address review comments60dec71Adopt basedpyright with a legacy baseline7a4f5dcBlock unsafe archive additions and bundle URI3af0c25Block unsafe checkout-index and tag file optionsfb5d584Merge pull request #2187 from pick7/codex/remote-progress-return-type951cc44Merge pull request #2188 from pick7/codex/redact-http-extraheader2e5b13fMerge pull request #2189 from pick7/codex/output-stream-timeoutDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.