dependabot[bot] opened a new pull request, #8813: URL: https://github.com/apache/hbase/pull/8813
Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.62 to 3.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/releases";>gitpython's releases</a>.</em></p> <blockquote> <h2>3.2.1</h2> <h2>What's Changed</h2> <ul> <li>prepare for next release, v3.2 by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2260";>gitpython-developers/GitPython#2260</a></li> <li>objects: decode a byte mode before reading its digits by <a href="https://github.com/SashaMIT";><code>@SashaMIT</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2261";>gitpython-developers/GitPython#2261</a></li> <li>build(deps): bump <a href="https://github.com/astral-sh/ruff-pre-commit";>https://github.com/astral-sh/ruff-pre-commit</a> from v0.16.5 to 0.16.9 in the pre-commit group by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2263";>gitpython-developers/GitPython#2263</a></li> <li>fix(submodule): validate destinations before mutation by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2264";>gitpython-developers/GitPython#2264</a></li> <li>fix(util): create lock files in one exclusive step by <a href="https://github.com/radhika1314";><code>@radhika1314</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2267";>gitpython-developers/GitPython#2267</a></li> <li>fix(commit): accumulate gpgsig continuation lines in linear time by <a href="https://github.com/Keerthana-64";><code>@Keerthana-64</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2268";>gitpython-developers/GitPython#2268</a></li> <li>fix(index): accept a single PathLike in checkout by <a href="https://github.com/kokotatan";><code>@kokotatan</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2269";>gitpython-developers/GitPython#2269</a></li> <li>fix(util): redact URL credentials without corrupting the host by <a href="https://github.com/yunaremaia";><code>@yunaremaia</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2270";>gitpython-developers/GitPython#2270</a></li> <li>change line for changelogs by <a href="https://github.com/CrowZhen";><code>@CrowZhen</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2272";>gitpython-developers/GitPython#2272</a></li> <li>fix(commit): reject identity fields that alter commit headers by <a href="https://github.com/Keerthana-64";><code>@Keerthana-64</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2271";>gitpython-developers/GitPython#2271</a></li> <li>fix: stop stalled remote commands when their timeout expires by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2277";>gitpython-developers/GitPython#2277</a></li> <li>fix(util): reject symbolic links that alias <code>.gitmodules</code> by <a href="https://github.com/Keerthana-64";><code>@Keerthana-64</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2278";>gitpython-developers/GitPython#2278</a></li> <li>fix: send one object name or path per git stdin record by <a href="https://github.com/Keerthana-64";><code>@Keerthana-64</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2279";>gitpython-developers/GitPython#2279</a></li> <li>fix(stats): preserve whitespace in filenames by <a href="https://github.com/v1shay";><code>@v1shay</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2280";>gitpython-developers/GitPython#2280</a></li> <li>fix(config): preserve exact large integer values by <a href="https://github.com/xiehuanyi";><code>@xiehuanyi</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2281";>gitpython-developers/GitPython#2281</a></li> <li>fix: resolve IterableList names independently of list attributes by <a href="https://github.com/FanWu-ai";><code>@FanWu-ai</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2283";>gitpython-developers/GitPython#2283</a></li> <li>fix relative blocking lock 20261011 by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2284";>gitpython-developers/GitPython#2284</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SashaMIT";><code>@SashaMIT</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2261";>gitpython-developers/GitPython#2261</a></li> <li><a href="https://github.com/kokotatan";><code>@kokotatan</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2269";>gitpython-developers/GitPython#2269</a></li> <li><a href="https://github.com/yunaremaia";><code>@yunaremaia</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2270";>gitpython-developers/GitPython#2270</a></li> <li><a href="https://github.com/CrowZhen";><code>@CrowZhen</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2272";>gitpython-developers/GitPython#2272</a></li> <li><a href="https://github.com/v1shay";><code>@v1shay</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2280";>gitpython-developers/GitPython#2280</a></li> <li><a href="https://github.com/xiehuanyi";><code>@xiehuanyi</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2281";>gitpython-developers/GitPython#2281</a></li> <li><a href="https://github.com/FanWu-ai";><code>@FanWu-ai</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2283";>gitpython-developers/GitPython#2283</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.2.0...3.2.1";>https://github.com/gitpython-developers/GitPython/compare/3.2.0...3.2.1</a></p> <h2>3.2.0 - Security</h2> <h2>What's Changed</h2> <ul> <li>test: cover subdirectory discovery and pathspec commands in bare-repository worktrees by <a href="https://github.com/christianvuerings";><code>@christianvuerings</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2228";>gitpython-developers/GitPython#2228</a></li> <li>Read git's yes/no and on/off booleans in get_value by <a href="https://github.com/rawsun007";><code>@rawsun007</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2229";>gitpython-developers/GitPython#2229</a></li> <li>Clarify detached HEAD access and isolate test branch state by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2231";>gitpython-developers/GitPython#2231</a></li> <li>Reject submodule move destinations through intermediate symlinks by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2232";>gitpython-developers/GitPython#2232</a></li> <li>fix: validate checkout positional reference options by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2233";>gitpython-developers/GitPython#2233</a></li> <li>Fix timeout child-process lookup on non-GNU systems by <a href="https://github.com/aprylewu";><code>@aprylewu</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2236";>gitpython-developers/GitPython#2236</a></li> <li>Preserve implicit boolean config keys by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2238";>gitpython-developers/GitPython#2238</a></li> <li>Reject comments after implicit boolean config keys by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2239";>gitpython-developers/GitPython#2239</a></li> <li>Fix case-insensitive Git config name matching by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2241";>gitpython-developers/GitPython#2241</a></li> <li>Move project metadata to pyproject.toml by <a href="https://github.com/mwtoews";><code>@mwtoews</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2242";>gitpython-developers/GitPython#2242</a></li> <li>Move [doc] extra to a PEP 735 dependency group; add uv-sync CI check by <a href="https://github.com/mwtoews";><code>@mwtoews</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2243";>gitpython-developers/GitPython#2243</a></li> <li>fix: strip inline config comments the way git does by <a href="https://github.com/rawsun007";><code>@rawsun007</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2245";>gitpython-developers/GitPython#2245</a></li> <li>Drop Python 3.7 by <a href="https://github.com/mwtoews";><code>@mwtoews</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2246";>gitpython-developers/GitPython#2246</a></li> <li>fix: preserve positional operands in high-level Git commands by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2247";>gitpython-developers/GitPython#2247</a></li> <li>submodule: option to update without fetching by <a href="https://github.com/jeffro256";><code>@jeffro256</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2244";>gitpython-developers/GitPython#2244</a></li> <li>bump minor version to indicate drop of python 3.7 support by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2248";>gitpython-developers/GitPython#2248</a></li> <li>fix: skip a UTF-8 BOM when reading config files by <a href="https://github.com/geek-alpha";><code>@geek-alpha</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2249";>gitpython-developers/GitPython#2249</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst";>gitpython's changelog</a>.</em></p> <blockquote> <h1>3.2.1</h1> <p>Security fixes for</p> <ul> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7</a></li> </ul> <p>If you can, also try and provide feedback on the upcoming v4 branch <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2274";>gitpython-developers/GitPython#2274</a> - patches welcome.</p> <p>See the following for all changes. <a href="https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1";>https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1</a></p> <h1>3.2.0</h1> <p>Drops support for Python 3.7 (5 years after its EOL).</p> <p>Security fixes for</p> <ul> <li>Deprecate the pure-Python <code>GitDB</code> object database backend due to security and performance issues. Selecting it or a subclass through <code>odbt</code> now emits a <code>DeprecationWarning</code>. Remove <code>odbt=GitDB</code> to use <code>GitCmdObjectDB</code>, the existing default, or select <code>odbt=GitCmdObjectDB</code> explicitly. The <code>gitdb</code> package remains a dependency for shared types and utilities.</li> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58</a></li> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2</a></li> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239</a></li> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw</a></li> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7</a></li> <li><a href="https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94";>https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94</a></li> </ul> <p>If you can, also try and provide feedback on the upcoming v4 branch <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2274";>gitpython-developers/GitPython#2274</a> - patches welcome.</p> <p>See the following for all changes. <a href="https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0";>https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gitpython-developers/GitPython/commit/c179357b38a8962f1c8e33153ac58b5ac0e6e96a";><code>c179357</code></a> prepare changelog prior to release</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697";><code>97eadb8</code></a> fix(submodule): validate destinations before mutation</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/6a7180a9dfcb276755a8af99dd78155f775a6b14";><code>6a7180a</code></a> prepare for next release, v3.2</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/0b64501a081de8018983c3f464c16b36ddd64353";><code>0b64501</code></a> refactor(db): deprecate the pure-Python <code>GitDB</code> backend</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/9349ff58ee00c9fb14d515c8e693f33b2144b238";><code>9349ff5</code></a> fix(repo): preserve literal separate Git directory paths</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/8290c98d35465a38090cdcc1b17be69967092a15";><code>8290c98</code></a> fix: bound actor and date parsing</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/9ad28cc4c7176d22cd6181d69805058a719dd03b";><code>9ad28cc</code></a> fix: complete safety checks in Git command wrappers</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/ce2093b9569242c35afc7433355df9766c7ac8d3";><code>ce2093b</code></a> bump minor version to indicate drop of python 3.7 support</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/dafafff7e5438879d0167c17008342231f7af314";><code>dafafff</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2247";>#2247</a> from gitpython-developers/pos-arg-sanitization</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/790bb3164948625ffb043d2a162425d55923fe9a";><code>790bb31</code></a> fix(remote): reject option-shaped pull operands</li> <li>Additional commits viewable in <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.62...3.2.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/hbase/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
