Security release: reject persistent git config invocations prefixed by the value-taking --attr-source or --shallow-file global options. These parser mismatches could bypass the existing policy and persist an executable Git alias.
Affected versions: <= 1.1.11. Upgrade to 1.1.12 or later.
Advisory: GHSA-7v25-vcp6-4hcr