chore(deps): bump gitpython from 3.1.44 to 3.1.54 in /services/apps/git_integration#4399
Conversation
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.44 to 3.1.54. - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.44...3.1.54) --- updated-dependencies: - dependency-name: gitpython dependency-version: 3.1.54 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
PR SummaryLow Risk Overview The newer release line includes security hardening around unsafe Git options, clone URL handling, and config validation—relevant because this service depends on GitPython for repository operations. Reviewed by Cursor Bugbot for commit 22a6c6e. Bugbot is set up for automated code reviews on this repo. Configure here. |
|
|
|
Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability. Example:
Projects:
Please add a Jira issue key to your PR title. |
1 participant
Bumps gitpython from 3.1.44 to 3.1.54.
Release notes
Sourced from gitpython's releases.
... (truncated)
Commits
e59d9baprepare next releasea4dc70dMerge pull request #2180 from gitpython-developers/single-char-kwarg1d51b89fix: guard diff output optionsffcb535fix: reject unsafe clone templatese8d0fbffix: validate split short-option valuesfaf3c09prepare for security fix6a5eb6aMerge pull request #2176 from gitpython-developers/fix-config-injection1ed1b92fix: validate config section delimiters354eb2fMerge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks9bc287aAddress review feedback about hook resolutionDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.