CVS commit: pkgsrc/devel/py-gitpython

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Jul 16 12:51:18 UTC 2026

Modified Files:
        pkgsrc/devel/py-gitpython: Makefile distinfo

Log Message:
py-gitpython: updated to 3.1.52

3.1.52

A security fix for
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573.

3.1.51

This is primarily a security release. It prevents additional argument-injection
paths that could allow execution of arbitrary commands or writing to arbitrary
files through unsafe Git options (GHSA-956x-8gvw-wg5v), and closes bypasses of
the existing protections using abbreviated long options or joined short options
(GHSA-2f96-g7mh-g2hx).

The release also improves support for relative worktree paths and diffs against
the empty tree, preserves stderr from failed diff processes, supports relative
configuration include paths, and includes assorted documentation, typing, test,
and CI improvements.


To generate a diff of this commit:
cvs rdiff -u -r1.33 -r1.34 pkgsrc/devel/py-gitpython/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/devel/py-gitpython/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/py-gitpython/Makefile
diff -u pkgsrc/devel/py-gitpython/Makefile:1.33 pkgsrc/devel/py-gitpython/Makefile:1.34
--- pkgsrc/devel/py-gitpython/Makefile:1.33     Wed May  6 10:05:26 2026
+++ pkgsrc/devel/py-gitpython/Makefile  Thu Jul 16 12:51:18 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.33 2026/05/06 10:05:26 adam Exp $
+# $NetBSD: Makefile,v 1.34 2026/07/16 12:51:18 adam Exp $
 
-DISTNAME=      gitpython-3.1.50
+DISTNAME=      gitpython-3.1.52
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    devel python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=g/gitpython/}

Index: pkgsrc/devel/py-gitpython/distinfo
diff -u pkgsrc/devel/py-gitpython/distinfo:1.29 pkgsrc/devel/py-gitpython/distinfo:1.30
--- pkgsrc/devel/py-gitpython/distinfo:1.29     Wed May  6 10:05:26 2026
+++ pkgsrc/devel/py-gitpython/distinfo  Thu Jul 16 12:51:18 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.29 2026/05/06 10:05:26 adam Exp $
+$NetBSD: distinfo,v 1.30 2026/07/16 12:51:18 adam Exp $
 
-BLAKE2s (gitpython-3.1.50.tar.gz) = 544fe022ec9828a098466eb106c692d88a0b46fe802bcb9afbc916add2fcf251
-SHA512 (gitpython-3.1.50.tar.gz) = f5233ddd8eec95673df7ec035bc17c0f320277fa1392dff43e44f6781954d7e8d017832ae5e7b166bce094a16859468cbe0cef65ad40b13d75b77ab9a166c7f1
-Size (gitpython-3.1.50.tar.gz) = 219798 bytes
+BLAKE2s (gitpython-3.1.52.tar.gz) = 0967cc981ff56275255010da40084429a40792ba94a768ee2e3b8c33594b2ded
+SHA512 (gitpython-3.1.52.tar.gz) = 5cdf0dd635a30a516ae28400ce4267b809e9f9512594136f08a5b503dd2ffbc173f524ec48cc2e88948d638f82a2ced5c39d61e4d64923e278d5d8889346e4c9
+Size (gitpython-3.1.52.tar.gz) = 223726 bytes