search

cjolowicz / nox-poetry

Use Poetry inside Nox sessions
https://nox-poetry.readthedocs.io/
MIT License
163 stars 16 forks source link

⬆️ [dev]: Bump gitpython from 3.1.31 to 3.1.35 #1191

Closed dependabot[bot] closed 10 months ago

dependabot[bot] commented 10 months ago

Bumps gitpython from 3.1.31 to 3.1.35.

Release notes

Sourced from gitpython's releases.

3.1.35 - a fix for CVE-2023-41040

What's Changed

New Contributors

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.34...3.1.35

3.1.34 - fix resource leaking

What's Changed

New Contributors

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.33...3.1.34

v3.1.33 - with security fix

What's Changed

New Contributors

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.32...3.1.33

v3.1.32 - with another security update

What's Changed

... (truncated)

Commits
  • c8e303f prepare next release
  • 09e1b3d Merge pull request #1650 from EliahKagan/envcase
  • 8017421 Merge pull request #1647 from CosmosAtlas/master
  • fafb4f6 updated docs to better describe testing procedure with new repo
  • 9da24d4 add test for submodule path not owned by submodule case
  • eebdb25 Eliminate duplication of git.util.cwd logic
  • c7fad20 Fix Windows env var upcasing regression
  • 7296e5c Make test helper script a file, for readability
  • d88372a Add test for Windows env var upcasing regression
  • 11839ab Merge pull request #1648 from EliahKagan/file-protocol
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 10 months ago

Superseded by #1201.