chore(deps): update dependency gitpython to v3.1.55 - autoclosed

[marwin1991]

This PR contains the following updates:

Package	Change	Age	Confidence
GitPython	==3.1.50 → ==3.1.55

---

Release Notes

gitpython-developers/GitPython (GitPython)

v3.1.55: - SECURITY

Compare Source

What's Changed

• fix: prevent environment expansion in remote URLs by @​Byron in #​2181

Full Changelog: gitpython-developers/GitPython@3.1.54...3.1.55

v3.1.54: - SECURITY

Compare Source

What's Changed

• Harden unsafe Git option validation by @​Byron in #​2180

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

v3.1.53: - Security

Compare Source

What's Changed

• feat(submodule): add deinit method to Submodule (#​2014) by @​mvanhorn in #​2129
• typing: introduce sensible basedpyright defaults by @​Byron in #​2174
• fix: make submodule.update() after submodule.deinit() work by @​Byron in #​2175
• Fix commit hooks respecting core.hooksPath by @​Siesta0217 in #​2159
• fix: validate config section delimiters by @​Byron in #​2176

New Contributors

• @​Siesta0217 made their first contribution in #​2159

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

v3.1.52: Security

Compare Source

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

• Skip cross-drive relative config test on Windows by @​Byron in #​2171
• fix: preserve literal clone URLs by @​Byron in #​2172

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

v3.1.51: - Security

Compare Source

What's Changed

• Add AI-disclosure and quality requirements to the contribution guidelines by @​Byron in #​2143
• docs(cmd): clarify Git.execute() string vs list command argument by @​mvanhorn in #​2144
• Rewrite Git.execute() command parameter docstring per #​2146 by @​EliahKagan in #​2147
• Document init script behavior with multiple master remotes by @​EliahKagan in #​2148
• Bump git/ext/gitdb from 335c0f6 to 0a019a2 by @​dependabot[bot] in #​2149
• Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by @​elovelan in #​2151
• Defer xfail condition evaluation with xfail_if_raises context manager by @​elovelan in #​2153
• Run more submodule tests on Cygwin (fix flaky xfails) by @​EliahKagan in #​2154
• Cut xtrace noise from POSIX-ownership diagnostic steps by @​EliahKagan in #​2156
• Support index diffs against the empty tree by @​puneetdixit200 in #​2155
• refactor: seperate out Progress type by @​LoeschMaximilian in #​2157
• Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.15 in the pre-commit group by @​dependabot[bot] in #​2160
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2164
• Bump git/ext/gitdb from 0a019a2 to 4950ea9 by @​dependabot[bot] in #​2165
• Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.20 in the pre-commit group by @​dependabot[bot] in #​2166
• Add Commit.is_shallow property; document stats() limitation at shallow boundary by @​harshitayadavv in #​2167
• Allow relative config paths with includes by @​Byron in #​2169
• Reject abbreviated forms of unsafe git options by @​Byron in #​2168
• guard unsafe git command options by @​Byron in #​2163

New Contributors

• @​elovelan made their first contribution in #​2151
• @​puneetdixit200 made their first contribution in #​2155
• @​LoeschMaximilian made their first contribution in #​2157
• @​harshitayadavv made their first contribution in #​2167

Full Changelog: gitpython-developers/GitPython@3.1.50...3.1.51

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!