chore(deps): bump gitpython from 3.1.54 to 3.1.58

[dependabot]

Bumps gitpython from 3.1.54 to 3.1.58.

Release notes

Sourced from gitpython's releases.

Security and Fixes

What's Changed

• test: allow Python startup before timeout by @​Byron in gitpython-developers/GitPython#2195
• Resolve Windows hook Bash through PATH by @​Byron in gitpython-developers/GitPython#2199
• Revert "Resolve Windows hook Bash through PATH" by @​Byron in gitpython-developers/GitPython#2200
• test: focus pytest summary on unexpected failures by @​raisulchowdhury in gitpython-developers/GitPython#2203
• Validate submodule names before filesystem operations by @​Byron in gitpython-developers/GitPython#2202
• Handle invalid submodule names during recursive updates by @​Byron in gitpython-developers/GitPython#2205
• Fix Windows path handling on Python 3.13+ by @​Byron in gitpython-developers/GitPython#2196
• fixup 2202 by @​Byron in gitpython-developers/GitPython#2206
• Correct Windows hook Bash precedence by @​Byron in gitpython-developers/GitPython#2201
• Harden config and Git option validation by @​Byron in gitpython-developers/GitPython#2204
• Skip tests that need symlink privileges instead of erroring by @​Cyrus580529 in gitpython-developers/GitPython#2197

New Contributors

• @​raisulchowdhury made their first contribution in gitpython-developers/GitPython#2203
• @​Cyrus580529 made their first contribution in gitpython-developers/GitPython#2197

Full Changelog: gitpython-developers/GitPython@3.1.57...3.1.58

3.1.57 - Security and Fixes

What's Changed

• Merge gitdb and smmap into the GitPython repository by @​Byron in gitpython-developers/GitPython#2179
• build(deps): bump actions/setup-python from 6 to 7 by @​dependabot[bot] in gitpython-developers/GitPython#2185
• build(deps): bump the pre-commit group with 2 updates by @​dependabot[bot] in gitpython-developers/GitPython#2186
• Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @​dependabot[bot] in gitpython-developers/GitPython#2124
• Render protected Traversable methods in the reference by @​pick7 in gitpython-developers/GitPython#2192
• Use standard prefixes for parsed patch diffs by @​pick7 in gitpython-developers/GitPython#2191
• Honor kill_after_timeout with output streams by @​pick7 in gitpython-developers/GitPython#2189
• Redact Authorization extra headers from command errors by @​pick7 in gitpython-developers/GitPython#2188
• Improve RemoteProgress parse return typing by @​pick7 in gitpython-developers/GitPython#2187
• Adopt basedpyright with a legacy baseline by @​Byron in gitpython-developers/GitPython#2194
• Block unsafe Git file and URL options by @​Byron in gitpython-developers/GitPython#2193

New Contributors

• @​pick7 made their first contribution in gitpython-developers/GitPython#2192

Full Changelog: gitpython-developers/GitPython@3.1.56...3.1.57

3.1.56 - SECURITY

What's Changed

• Add support for Python 3.15 by @​hugovk in gitpython-developers/GitPython#2183
• fix: reject unsafe output options in Commit.count by @​Byron in gitpython-developers/GitPython#2184

Full Changelog: gitpython-developers/GitPython@3.1.55...3.1.56

3.1.55 - Security

What's Changed

• fix: prevent environment expansion in remote URLs by @​Byron in gitpython-developers/GitPython#2181

... (truncated)

Commits

• 30be45d prepare changelog for upcoming release
• fc2f02c Merge pull request #2197 from Cyrus580529/shared-symlink-guard
• b10e250 test: use the shared guard instead of local copies
• e3e5da8 test: skip tests that need symlink privileges
• 30d05e3 test: add a shared symlink capability guard
• 9a8f6fe Merge pull request #2204 from gitpython-developers/security-fixes
• f2550b6 Guard pathspec file inputs in high-level commands
• d9ddb55 Guard unsafe git init options
• 9b5dcaf Guard read-tree index output paths
• 96a888f Check joined short-option values before Git execution
• Additional commits viewable in compare view

[frankbria]

Dependabot Triage — PR #1119: GitPython 3.1.54 → 3.1.58

Classification

• Update type: Security update (patch-level, within 3.1.x)
• Security urgency: High
• Supply-chain risk: Low

Key observations

• Verified five advisories, all first patched in 3.1.58 — four HIGH, one medium:
  • GHSA-wvpp-8hx9-p66j (high) — unsafe git option guard bypass via split_single_c…
  • GHSA-jm78-9fvv-mhgr (high) — git-config OPTION-name injection via =/#/whitespace
  • GHSA-hmq2-w58f-27jc (high) — arbitrary git repository creation outside the worktree
  • GHSA-9rj7-rf2p-w77r (high) — unguarded git option forwarding in Repo.init
  • GHSA-hh9p-6wh2-4mfc (medium) — arbitrary file read via --pathspec-from-file
• The repo is on 3.1.54, inside every vulnerable range.
• Directly in this project's threat model. CodeFRAME drives git against user-supplied repositories and paths; "arbitrary repo creation outside the worktree" and git option injection are precisely the primitives this codebase hands untrusted input to.
• Diff is 1 file / 30 lines, uv.lock only. No new packages, no lifecycle scripts added.
• 3.1.58 published 2026-08-04 — 6 days of ecosystem exposure.

Recommendation

Merge now

Four HIGH advisories in a library this project uses to execute git against untrusted input, fixed by a patch-level bump with a 30-line lockfile diff and no new packages. There is no meaningful supply-chain exposure to weigh against that.

Follow-up actions

• The only failing check is claude-review, which cannot authenticate on Dependabot PRs (they run without secrets). Not a code signal and not a required check.

---

_{Supply-chain triage per the reviewing-dependabot-prs skill. Advisories verified via gh api /advisories/; action SHA pins verified by dereferencing the annotated tag to its commit. Green CI is a functional gate, not a supply-chain signal — a malicious lifecycle script passes CI happily, so the diff was scanned for one separately.}

[frankbria]

@dependabot rebase