Releases: gitpython-developers/GitPython
Releases · gitpython-developers/GitPython
Release list
3.1.61
Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.
What's Changed
- Fix repository discovery precedence by @Byron in #2218
- fix: wait for git daemon to listen before connecting by @Vogtinator in #2219
- fix: restore Actor.name_email_regex by @Byron in #2221
New Contributors
- @Vogtinator made their first contribution in #2219
Full Changelog: 3.1.60...3.1.61
3.1.60 Security
3.1.59 - Security
What's Changed
- prepare changelog for upcoming release by @Byron in #2207
- Block file-reading Git options by @Byron in #2208
- index: write blobs via git hash-object, not gitdb's odb.store by @caroescm in #2209
- Block separate git directories during clone by @Byron in #2210
- fix: harden config parsing boundaries by @Byron in #2211
repo.index.add()now respects worktree filters #2209
Full Changelog: 3.1.58...3.1.59
3.1.58 - Security and Fixes
What's Changed
- test: allow Python startup before timeout by @Byron in #2195
- Resolve Windows hook Bash through PATH by @Byron in #2199
- Revert "Resolve Windows hook Bash through PATH" by @Byron in #2200
- test: focus pytest summary on unexpected failures by @raisulchowdhury in #2203
- Validate submodule names before filesystem operations by @Byron in #2202
- Handle invalid submodule names during recursive updates by @Byron in #2205
- Fix Windows path handling on Python 3.13+ by @Byron in #2196
- fixup 2202 by @Byron in #2206
- Correct Windows hook Bash precedence by @Byron in #2201
- Harden config and Git option validation by @Byron in #2204
- Skip tests that need symlink privileges instead of erroring by @Cyrus580529 in #2197
New Contributors
- @raisulchowdhury made their first contribution in #2203
- @Cyrus580529 made their first contribution in #2197
Full Changelog: 3.1.57...3.1.58
3.1.57 - Security and Fixes
What's Changed
- Merge gitdb and smmap into the GitPython repository by @Byron in #2179
- build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #2185
- build(deps): bump the pre-commit group with 2 updates by @dependabot[bot] in #2186
- Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @dependabot[bot] in #2124
- Render protected Traversable methods in the reference by @pick7 in #2192
- Use standard prefixes for parsed patch diffs by @pick7 in #2191
- Honor kill_after_timeout with output streams by @pick7 in #2189
- Redact Authorization extra headers from command errors by @pick7 in #2188
- Improve RemoteProgress parse return typing by @pick7 in #2187
- Adopt basedpyright with a legacy baseline by @Byron in #2194
- Block unsafe Git file and URL options by @Byron in #2193
New Contributors
Full Changelog: 3.1.56...3.1.57
3.1.56 - SECURITY
What's Changed
- Add support for Python 3.15 by @hugovk in #2183
- fix: reject unsafe output options in Commit.count by @Byron in #2184
Full Changelog: 3.1.55...3.1.56
3.1.55 - Security
What's Changed
Full Changelog: 3.1.54...3.1.55
3.1.54 - Security
What's Changed
Full Changelog: 3.1.53...3.1.54
3.1.53 - Security
What's Changed
- feat(submodule): add deinit method to Submodule (#2014) by @mvanhorn in #2129
- typing: introduce sensible basedpyright defaults by @Byron in #2174
- fix: make
submodule.update()aftersubmodule.deinit()work by @Byron in #2175 - Fix commit hooks respecting core.hooksPath by @Siesta0217 in #2159
- fix: validate config section delimiters by @Byron in #2176
New Contributors
- @Siesta0217 made their first contribution in #2159
Full Changelog: 3.1.52...3.1.53
3.1.52 Security
GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
What's Changed
- Skip cross-drive relative config test on Windows by @Byron in #2171
- fix: preserve literal clone URLs by @Byron in #2172
Full Changelog: 3.1.51...3.1.52