[dependabot]

Bumps gitpython from 3.1.58 to 3.1.59.

Release notes

Sourced from gitpython's releases.

3.1.59 - Security

What's Changed

• prepare changelog for upcoming release by @​Byron in gitpython-developers/GitPython#2207
• Block file-reading Git options by @​Byron in gitpython-developers/GitPython#2208
• index: write blobs via git hash-object, not gitdb's odb.store by @​caroescm in gitpython-developers/GitPython#2209
• Block separate git directories during clone by @​Byron in gitpython-developers/GitPython#2210
• fix: harden config parsing boundaries by @​Byron in gitpython-developers/GitPython#2211
• repo.index.add() now respects worktree filters gitpython-developers/GitPython#2209

Full Changelog: gitpython-developers/GitPython@3.1.58...3.1.59

Commits

• 66340d7 prepare changelog prior to release
• a5e047d Merge pull request #2211 from gitpython-developers/config-sanitize-more
• ef7568e fix: ignore includes in submodule configuration
• 4b4e47f fix: preserve multiline config values when writing
• b473abb Merge pull request #2210 from gitpython-developers/fix-clone-unsafe-option
• 5ff52cc Merge pull request #2209 from caroescm/fix-index-add-chmod
• b68afff Block separate git directories during clone
• 93677a0 fix: index.add() now supports filters (#2021)
• 9729ed3 Merge pull request #2208 from gitpython-developers/security-fixes
• ce9d8e8 prepare next release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[frankbria]

@dependabot rebase

[frankbria]

Dependabot Triage — PR #1204: gitpython 3.1.58 → 3.1.59

Classification

• Update type: Security
• Security urgency: High
• Supply-chain risk: Low

Key observations

• 3.1.59 is the first patched version for five GitHub advisories published 2026-09-08, all <= 3.1.58: GHSA-284h-m62q-gf8w (critical, dormant multi-line git-config values rewritten into live directives such as core.hooksPath on any GitConfigParser write → RCE), GHSA-8mcc-hrx5-hvxc (high, clone/clone_from omit --separate-git-dir from the unsafe-option denylist), GHSA-7833-fr7j-v32q (high, [include] in untrusted .gitmodules reads arbitrary local files), plus two medium (Repo.blame --contents, TagReference.create --file). Verified via gh api /advisories.
• Codeframe uses GitPython in codeframe/core/git.py (status, diff, index.add, commit). No config_writer, clone, blame, submodule, or tag-creation calls in codeframe/, so the directly reachable exposure is low; the fix is still the right thing to carry, since agents run against arbitrary user repos.
• Diff is uv.lock only: the gitpython version/hash bump plus uv marker normalisation on httpcore2 and importlib-metadata (no version change on either). No manifest change; pyproject.toml floor >=3.1.50 already admits it.
• Version age: 3.1.59 published to PyPI 2026-08-10 (over five weeks of ecosystem exposure). Same maintainers (Sebastian Thiel, Michael Trier), same repo.
• CI: every job green. The one red claude-review is the pre-[P3.11] claude-review fails on every Dependabot PR — the credential can never be present there #1189 credential preflight on bot PRs (run from 2026-09-08, before that fix); it now skips on bot PRs.

Recommendation

Merge now.

A critical config-write RCE plus two highs against a library we ship, fixed by a lockfile-only patch that has been public for five weeks with no red flags. Nothing about the diff raises supply-chain concern; delay only extends exposure.

Follow-up actions

• Branch is BEHIND main (strict protection): rebase, wait for green, merge.

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.