Skip to content

deps: bump GitPython to 3.1.61 in space base requirements - #1423

Open
katsugtgz wants to merge 1 commit into
OpenCSGs:mainfrom
katsugtgz:deps/gitpython-3.1.61
Open

deps: bump GitPython to 3.1.61 in space base requirements#1423
katsugtgz wants to merge 1 commit into
OpenCSGs:mainfrom
katsugtgz:deps/gitpython-3.1.61

Conversation

@katsugtgz

Copy link
Copy Markdown
Contributor

Updates GitPython to address PYSEC-2026-3785, PYSEC-2026-3786, PYSEC-2026-3787, PYSEC-2026-3788.

Evidence:

  • docker/spaces/space/base_requirements.txt referenced GitPython==3.1.58
  • osv-scanner reported PYSEC-2026-3785, PYSEC-2026-3786, PYSEC-2026-3787, PYSEC-2026-3788 before the update
  • updated version: 3.1.61

Validation:

  • osv-scanner no longer reports those advisories after the update
  • pip install GitPython==3.1.61 and import git succeed

Scope: dependency update only.

Clears PYSEC-2026-3785, PYSEC-2026-3786, PYSEC-2026-3787, PYSEC-2026-3788
reported for GitPython 3.1.58.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant