From 4f7290d32f0746593c5a3952c15ba4009190cc5b Mon Sep 17 00:00:00 2001 From: Nathy MacKinlay <61921733+waninggibbon@users.noreply.github.com> Date: Fri, 23 Oct 2026 15:09:53 -0700 Subject: [PATCH] chore(deps): require GitPython >= 3.2.1 for release tooling Signed-off-by: Nathy MacKinlay <61921733+waninggibbon@users.noreply.github.com> --- requirements-release.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements-release.txt b/requirements-release.txt index d0465bcf..92e5ac84 100644 --- a/requirements-release.txt +++ b/requirements-release.txt @@ -1,2 +1,3 @@ python-semantic-release == 10.6.* -GitPython == 3.1.62 \ No newline at end of file +# Floor past the GitPython RCE fixes (GHSA-f9j4-qggq-h239, GHSA-83vg-56qc-22m7). +GitPython >= 3.2.1