build: bump gitpython from 3.1.61 to 3.1.62 in /requirements - #846
Merged
cigamit merged 1 commit intoSep 7, 2026
Merged
Conversation
Released 2026-09-07, after ctrliq#834 took the tree to 3.1.61. Three changes, one of which matters here: - Reject unsafe submodule checkout paths (GitPython #2225). Project sync clones repositories AWX does not control, and submodule handling acts on whatever those repositories declare, so this is the relevant one. - Keep bare-repository worktrees non-bare (#2224). - Join backslash line continuations when reading config values (#2227). No GHSA is assigned to any of them at the time of writing. The six advisories named in the GitPython>=3.1.58 floor comment all patch at 3.1.58 or earlier, so that comment stays accurate and is left alone. One line: gitdb and smmap do not move.
cigamit
approved these changes
Sep 7, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps gitpython from 3.1.61 to 3.1.62.
Released 2026-09-07, so it landed just after #834 took the tree to 3.1.61.
What is in it
(#2225). This
is the one that matters here: project sync clones repositories AWX does not
control, and submodule handling acts on whatever those repositories declare.
(#2224).
(#2227).
No GHSA is assigned to any of these at the time of writing, so I am not
claiming this is a security fix. The six advisories named in the
GitPython>=3.1.58floor comment inrequirements.inall patch at 3.1.58 orearlier, so that comment stays accurate and is untouched.
Scope
One line.
gitdbandsmmapdo not move.Checks
Full
TEST_DIRSrun: 3984 passed, 6 skipped.Branched from
94c8b3386b, so the run does not include #822, #828 or #830,which merged while it was running. Only #822 touches Python among those.