[musicinmybrain]

https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0

Tests still pass, and this release includes a number of significant security fixes:

GHSA-gq48-pqfc-9p58
GHSA-23mf-xhv8-69c2
GHSA-f9j4-qggq-h239
GHSA-w8jc-g24h-crhw
GHSA-m64x-33q8-m5h7
GHSA-fx3j-rwgx-fr94

While we’re at it, is there a particular reason this needed to be pinned to the minor version? Can we just say "GitPython>=3.1.45,<4"?

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.16%. Comparing base (ea396d0) to head (5f538d8).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #460   +/-   ##
=======================================
  Coverage   83.16%   83.16%           
=======================================
  Files          11       11           
  Lines         784      784           
  Branches      133      133           
=======================================
  Hits          652      652           
  Misses         86       86           
  Partials       46       46           

Flag	Coverage Δ
unittests	83.16% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Guts]

Sorry for the delay, I quite forogot about this project for a few months but https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576 remembered me that I've something to maintain.

Thanks @musicinmybrain for your PR. I suggest to pin to the current version as minimal since it's fully compatible. For the upper version, I'm not sure. Maybe in a next PR!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud