Skip to content

chore(deps): bump gitpython from 3.1.47 to 3.1.49#2139

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/gitpython-3.1.49
Open

chore(deps): bump gitpython from 3.1.47 to 3.1.49#2139
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/gitpython-3.1.49

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps gitpython from 3.1.47 to 3.1.49.

Release notes

Sourced from gitpython's releases.

3.1.49 - Security

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.48...3.1.49

3.1.48 - Security

Accidentally deleted the previous GH release, it did mention the advisory this fixes.

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.47...3.1.48

Commits
  • aee2fd5 bump version to 3.1.49
  • 1c4ea96 Merge pull request #2136 from gitpython-developers/copilot/create-reproducing...
  • 6cf7ac3 Address rev-parse review feedback
  • b049a13 Merge pull request #2137 from gitpython-developers/fix-config-injection
  • bdbdf4b Fix rev-parse CI issues
  • d7ce6fc Improve pure Python rev-parse coverage and behavior (#2135)
  • 8e24503 avoid duplicate validation in set_value
  • c417af4 reject control chars in written values in configuration
  • 5a15361 a new release with safer reference creation
  • dbfa264 Merge pull request #2134 from gitpython-developers/validate-ref-creation
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 7, 2026
@dependabot dependabot Bot requested a review from KRRT7 as a code owner May 7, 2026 12:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 7, 2026
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.47 to 3.1.49.
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.47...3.1.49)

---
updated-dependencies:
- dependency-name: gitpython
  dependency-version: 3.1.49
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/gitpython-3.1.49 branch from 2367104 to d49df16 Compare May 7, 2026 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant