PyPI · #172 most downloaded on PyPI

gitpython

3.2.0160M downloads/mogitpython-developers/GitPython ↗New releases in your daily digest, changelog included.

GitPython is a Python library used to interact with Git repositories

Last release 4 days ago
30 Sep 2026
Release timing varies
gaps range from 8 days to 9 months
Nearly every release is documented
notes for 59 of the last 60 stable releases
8 versions withdrawn
withdrawn after publishing
17 years old
116 releases · first in 2010

Release timeline

116 releases since 2010

2010201220142016

Releases

3.2.030 Sept 2026
test: cover subdirectory discovery and pathspec commands in bare-repository worktrees by @christianvuerings in #2228
What's Changed

test: cover subdirectory discovery and pathspec commands in bare-repository worktrees by @christianvuerings in #2228

Read git's yes/no and on/off booleans in get_value by @rawsun007 in #2229

Clarify detached HEAD access and isolate test branch state by @Byron in #2231

Reject submodule move destinations through intermediate symlinks by @Byron in #2232

fix: validate checkout positional reference options by @Byron in #2233

Fix timeout child-process lookup on non-GNU systems by @aprylewu in #2236

Preserve implicit boolean config keys by @Byron in #2238

Reject comments after implicit boolean config keys by @Byron in #2239

Fix case-insensitive Git config name matching by @Byron in #2241

Move project metadata to pyproject.toml by @mwtoews in #2242

Move [doc] extra to a PEP 735 dependency group; add uv-sync CI check by @mwtoews in #2243

fix: strip inline config comments the way git does by @rawsun007 in #2245

Drop Python 3.7 by @mwtoews in #2246

fix: preserve positional operands in high-level Git commands by @Byron in #2247

submodule: option to update without fetching by @jeffro256 in #2244

bump minor version to indicate drop of python 3.7 support by @Byron in #2248

fix: skip a UTF-8 BOM when reading config files by @geek-alpha in #2249

fix: complete safety checks in Git command wrappers by @Byron in #2251

build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 by @dependabot[bot] in #2252

fix: bound actor and date parsing by @Byron in #2253

fix(repo): preserve literal separate Git directory paths by @Byron in #2255

fix: validate object types when loading binary SHAs by @Byron in #2256

fix(commit): bound co_authors trailer parsing by @Keerthana-64 in #2257

various fixes by @Byron in #2258

fix(config): bound option-line parsing by @radhika1314 in #2259

New Contributors

@christianvuerings made their first contribution in #2228

@rawsun007 made their first contribution in #2229

@aprylewu made their first contribution in #2236

@mwtoews made their first contribution in #2242

@jeffro256 made their first contribution in #2244

@geek-alpha made their first contribution in #2249

@Keerthana-64 made their first contribution in #2257

@radhika1314 made their first contribution in #2259

Full Changelog: 3.1.62...3.2.0

One column per quarter.

Additional notes2 sources agree

Drops support for Python 3.7 (5 years after its EOL).

Security fixes for

Deprecate the pure-Python GitDB object database backend due to security and performance issues. Selecting it or a subclass through odbt now emits a DeprecationWarning. Remove odbt=GitDB to use GitCmdObjectDB, the existing default, or select odbt=GitCmdObjectDB explicitly. The gitdb package remains a dependency for shared types and utilities.
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0

Open source →

3.1.627 Sept 2026

prepare next release by @Byron in #2222

What's Changed

prepare next release by @Byron in #2222
Keep bare-repository worktrees non-bare by @Byron in #2224
Reject unsafe submodule checkout paths by @Byron in #2225
build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.5 in the pre-commit group by @dependabot[bot] in #2226
fix: join backslash line continuations when reading config values by @nkbeast in #2227

New Contributors

@nkbeast made their first contribution in #2227

Full Changelog: 3.1.61...3.1.62

Open source →

Additional notes2 sources agree

Security fixes for

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-59cr-6r3x-644w

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.62

Open source →

3.1.6128 Aug 2026Deprecated

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

Fix repository discovery precedence by @Byron in #2218
fix: wait for git daemon to listen before connecting by @Vogtinator in #2219
fix: restore Actor.name_email_regex by @Byron in #2221

New Contributors

@Vogtinator made their first contribution in #2219

Full Changelog: 3.1.60...3.1.61

Open source →

Additional notes2 sources agree

A fixup release to avoid accidental removal of public class regex on Actor. It's now deprecated instead.

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.61

Open source →

3.1.6025 Aug 2026

prepare changelog prior to release by @Byron in #2212

What's Changed

prepare changelog prior to release by @Byron in #2212
Preserve Git config escape semantics by @Byron in #2213
Harden diff path and actor identity parsing by @Byron in #2215
Require explicit opt-in for filesystem diffs by @Byron in #2217

Full Changelog: 3.1.59...3.1.60

Open source →

Additional notes2 sources agree

Security fixes for

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.60

Open source →

3.1.5910 Aug 2026

prepare changelog for upcoming release by @Byron in #2207

What's Changed

prepare changelog for upcoming release by @Byron in #2207
Block file-reading Git options by @Byron in #2208
index: write blobs via git hash-object, not gitdb's odb.store by @caroescm in #2209
Block separate git directories during clone by @Byron in #2210
fix: harden config parsing boundaries by @Byron in #2211
repo.index.add() now respects worktree filters #2209

Full Changelog: 3.1.58...3.1.59

Open source →

Additional notes

What's Changed

prepare changelog for upcoming release by @Byron in https://github.com/gitpython-developers/GitPython/pull/2207
Block file-reading Git options by @Byron in https://github.com/gitpython-developers/GitPython/pull/2208
index: write blobs via git hash-object, not gitdb's odb.store by @caroescm in https://github.com/gitpython-developers/GitPython/pull/2209
Block separate git directories during clone by @Byron in https://github.com/gitpython-developers/GitPython/pull/2210
fix: harden config parsing boundaries by @Byron in https://github.com/gitpython-developers/GitPython/pull/2211
repo.index.add() now respects worktree filters https://github.com/gitpython-developers/GitPython/pull/2209

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.58...3.1.59

Open source →

Additional notes2 sources agree

Security fixes for

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.59

Open source →

3.1.584 Aug 2026

test: allow Python startup before timeout by @Byron in #2195

What's Changed

test: allow Python startup before timeout by @Byron in #2195
Resolve Windows hook Bash through PATH by @Byron in #2199
Revert "Resolve Windows hook Bash through PATH" by @Byron in #2200
test: focus pytest summary on unexpected failures by @raisulchowdhury in #2203
Validate submodule names before filesystem operations by @Byron in #2202
Handle invalid submodule names during recursive updates by @Byron in #2205
Fix Windows path handling on Python 3.13+ by @Byron in #2196
fixup 2202 by @Byron in #2206
Correct Windows hook Bash precedence by @Byron in #2201
Harden config and Git option validation by @Byron in #2204
Skip tests that need symlink privileges instead of erroring by @Cyrus580529 in #2197

New Contributors

@raisulchowdhury made their first contribution in #2203
@Cyrus580529 made their first contribution in #2197

Full Changelog: 3.1.57...3.1.58

Open source →

Additional notes

What's Changed

test: allow Python startup before timeout by @Byron in https://github.com/gitpython-developers/GitPython/pull/2195
Resolve Windows hook Bash through PATH by @Byron in https://github.com/gitpython-developers/GitPython/pull/2199
Revert "Resolve Windows hook Bash through PATH" by @Byron in https://github.com/gitpython-developers/GitPython/pull/2200
test: focus pytest summary on unexpected failures by @raisulchowdhury in https://github.com/gitpython-developers/GitPython/pull/2203
Validate submodule names before filesystem operations by @Byron in https://github.com/gitpython-developers/GitPython/pull/2202
Handle invalid submodule names during recursive updates by @Byron in https://github.com/gitpython-developers/GitPython/pull/2205
Fix Windows path handling on Python 3.13+ by @Byron in https://github.com/gitpython-developers/GitPython/pull/2196
fixup 2202 by @Byron in https://github.com/gitpython-developers/GitPython/pull/2206
Correct Windows hook Bash precedence by @Byron in https://github.com/gitpython-developers/GitPython/pull/2201
Harden config and Git option validation by @Byron in https://github.com/gitpython-developers/GitPython/pull/2204
Skip tests that need symlink privileges instead of erroring by @Cyrus580529 in https://github.com/gitpython-developers/GitPython/pull/2197

New Contributors

@raisulchowdhury made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2203
@Cyrus580529 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2197

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.57...3.1.58

Open source →

Additional notes2 sources agree

Security fixes for

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58

Open source →

3.1.5726 Jul 2026

Merge gitdb and smmap into the GitPython repository by @Byron in #2179

What's Changed

Merge gitdb and smmap into the GitPython repository by @Byron in #2179
build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #2185
build(deps): bump the pre-commit group with 2 updates by @dependabot[bot] in #2186
Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @dependabot[bot] in #2124
Render protected Traversable methods in the reference by @pick7 in #2192
Use standard prefixes for parsed patch diffs by @pick7 in #2191
Honor kill_after_timeout with output streams by @pick7 in #2189
Redact Authorization extra headers from command errors by @pick7 in #2188
Improve RemoteProgress parse return typing by @pick7 in #2187
Adopt basedpyright with a legacy baseline by @Byron in #2194
Block unsafe Git file and URL options by @Byron in #2193

New Contributors

@pick7 made their first contribution in #2192

Full Changelog: 3.1.56...3.1.57

Open source →

Additional notes

What's Changed

Merge gitdb and smmap into the GitPython repository by @Byron in https://github.com/gitpython-developers/GitPython/pull/2179
build(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2185
build(deps): bump the pre-commit group with 2 updates by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2186
Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2124
Render protected Traversable methods in the reference by @pick7 in https://github.com/gitpython-developers/GitPython/pull/2192
Use standard prefixes for parsed patch diffs by @pick7 in https://github.com/gitpython-developers/GitPython/pull/2191
Honor kill_after_timeout with output streams by @pick7 in https://github.com/gitpython-developers/GitPython/pull/2189
Redact Authorization extra headers from command errors by @pick7 in https://github.com/gitpython-developers/GitPython/pull/2188
Improve RemoteProgress parse return typing by @pick7 in https://github.com/gitpython-developers/GitPython/pull/2187
Adopt basedpyright with a legacy baseline by @Byron in https://github.com/gitpython-developers/GitPython/pull/2194
Block unsafe Git file and URL options by @Byron in https://github.com/gitpython-developers/GitPython/pull/2193

New Contributors

@pick7 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2192

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.56...3.1.57

Open source →

Additional notes2 sources agree

A security fix for

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.57

Open source →

3.1.5625 Jul 2026

Add support for Python 3.15 by @hugovk in #2183

What's Changed

Add support for Python 3.15 by @hugovk in #2183
fix: reject unsafe output options in Commit.count by @Byron in #2184

Full Changelog: 3.1.55...3.1.56

Open source →

Additional notes

What's Changed

Add support for Python 3.15 by @hugovk in https://github.com/gitpython-developers/GitPython/pull/2183
fix: reject unsafe output options in Commit.count by @Byron in https://github.com/gitpython-developers/GitPython/pull/2184

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.55...3.1.56

Open source →

Additional notes2 sources agree

A security fix for

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-p538-c434-8v24

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.56

Open source →

3.1.5523 Jul 2026

fix: prevent environment expansion in remote URLs by @Byron in #2181

What's Changed

fix: prevent environment expansion in remote URLs by @Byron in #2181

Full Changelog: 3.1.54...3.1.55

Open source →

Additional notes

What's Changed

fix: prevent environment expansion in remote URLs by @Byron in https://github.com/gitpython-developers/GitPython/pull/2181

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.54...3.1.55

Open source →

Additional notes2 sources agree

A security fix for

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.55

Open source →

3.1.5422 Jul 2026

Harden unsafe Git option validation by @Byron in #2180

What's Changed

Harden unsafe Git option validation by @Byron in #2180

Full Changelog: 3.1.53...3.1.54

Open source →

Additional notes

What's Changed

Harden unsafe Git option validation by @Byron in https://github.com/gitpython-developers/GitPython/pull/2180

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.53...3.1.54

Open source →

Additional notes2 sources agree

A security fix for

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54

Open source →

3.1.5320 Jul 2026

feat(submodule): add deinit method to Submodule ( #2014 ) by @mvanhorn in #2129

What's Changed

feat(submodule): add deinit method to Submodule (#2014) by @mvanhorn in #2129
typing: introduce sensible basedpyright defaults by @Byron in #2174
fix: make submodule.update() after submodule.deinit() work by @Byron in #2175
Fix commit hooks respecting core.hooksPath by @Siesta0217 in #2159
fix: validate config section delimiters by @Byron in #2176

New Contributors

@Siesta0217 made their first contribution in #2159

Full Changelog: 3.1.52...3.1.53

Open source →

Additional notes

What's Changed

feat(submodule): add deinit method to Submodule (#2014) by @mvanhorn in https://github.com/gitpython-developers/GitPython/pull/2129
typing: introduce sensible basedpyright defaults by @Byron in https://github.com/gitpython-developers/GitPython/pull/2174
fix: make submodule.update() after submodule.deinit() work by @Byron in https://github.com/gitpython-developers/GitPython/pull/2175
Fix commit hooks respecting core.hooksPath by @Siesta0217 in https://github.com/gitpython-developers/GitPython/pull/2159
fix: validate config section delimiters by @Byron in https://github.com/gitpython-developers/GitPython/pull/2176

New Contributors

@Siesta0217 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2159

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.52...3.1.53

Open source →

Additional notes2 sources agree

A security fix for https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2

If you can, also try and provide feedback on the upcoming v4 branch https://github.com/gitpython-developers/GitPython/pull/2177 - patches welcome.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.53

Open source →

3.1.5216 Jul 2026

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars()

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Skip cross-drive relative config test on Windows by @Byron in https://github.com/gitpython-developers/GitPython/pull/2171
fix: preserve literal clone URLs by @Byron in https://github.com/gitpython-developers/GitPython/pull/2172

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.51...3.1.52

Open source →

Additional notes

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Skip cross-drive relative config test on Windows by @Byron in #2171
fix: preserve literal clone URLs by @Byron in #2172

Full Changelog: 3.1.51...3.1.52

Open source →

Additional notes2 sources agree

A security fix for https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.52

Open source →

3.1.5112 Jul 2026

Add AI-disclosure and quality requirements to the contribution guidelines by @Byron in https://github.com/gitpython-developers/GitPython/pull/2143

What's Changed

Add AI-disclosure and quality requirements to the contribution guidelines by @Byron in https://github.com/gitpython-developers/GitPython/pull/2143
docs(cmd): clarify Git.execute() string vs list command argument by @mvanhorn in https://github.com/gitpython-developers/GitPython/pull/2144
Rewrite Git.execute() command parameter docstring per #2146 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2147
Document init script behavior with multiple master remotes by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2148
Bump git/ext/gitdb from 335c0f6 to 0a019a2 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2149
Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by @elovelan in https://github.com/gitpython-developers/GitPython/pull/2151
Defer xfail condition evaluation with xfail_if_raises context manager by @elovelan in https://github.com/gitpython-developers/GitPython/pull/2153
Run more submodule tests on Cygwin (fix flaky xfails) by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2154
Cut xtrace noise from POSIX-ownership diagnostic steps by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2156
Support index diffs against the empty tree by @puneetdixit200 in https://github.com/gitpython-developers/GitPython/pull/2155
refactor: seperate out Progress type by @LoeschMaximilian in https://github.com/gitpython-developers/GitPython/pull/2157
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.15 in the pre-commit group by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2160
Bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2164
Bump git/ext/gitdb from 0a019a2 to 4950ea9 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2165
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.20 in the pre-commit group by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2166
Add Commit.is_shallow property; document stats() limitation at shallow boundary by @harshitayadavv in https://github.com/gitpython-developers/GitPython/pull/2167
Allow relative config paths with includes by @Byron in https://github.com/gitpython-developers/GitPython/pull/2169
Reject abbreviated forms of unsafe git options by @Byron in https://github.com/gitpython-developers/GitPython/pull/2168
guard unsafe git command options by @Byron in https://github.com/gitpython-developers/GitPython/pull/2163

New Contributors

@elovelan made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2151
@puneetdixit200 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2155
@LoeschMaximilian made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2157
@harshitayadavv made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2167

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.50...3.1.51

Open source →

Additional notes

What's Changed

Add AI-disclosure and quality requirements to the contribution guidelines by @Byron in #2143
docs(cmd): clarify Git.execute() string vs list command argument by @mvanhorn in #2144
Rewrite Git.execute() command parameter docstring per #2146 by @EliahKagan in #2147
Document init script behavior with multiple master remotes by @EliahKagan in #2148
Bump git/ext/gitdb from 335c0f6 to 0a019a2 by @dependabot[bot] in #2149
Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by @elovelan in #2151
Defer xfail condition evaluation with xfail_if_raises context manager by @elovelan in #2153
Run more submodule tests on Cygwin (fix flaky xfails) by @EliahKagan in #2154
Cut xtrace noise from POSIX-ownership diagnostic steps by @EliahKagan in #2156
Support index diffs against the empty tree by @puneetdixit200 in #2155
refactor: seperate out Progress type by @LoeschMaximilian in #2157
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.15 in the pre-commit group by @dependabot[bot] in #2160
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2164
Bump git/ext/gitdb from 0a019a2 to 4950ea9 by @dependabot[bot] in #2165
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.20 in the pre-commit group by @dependabot[bot] in #2166
Add Commit.is_shallow property; document stats() limitation at shallow boundary by @harshitayadavv in #2167
Allow relative config paths with includes by @Byron in #2169
Reject abbreviated forms of unsafe git options by @Byron in #2168
guard unsafe git command options by @Byron in #2163

New Contributors

@elovelan made their first contribution in #2151
@puneetdixit200 made their first contribution in #2155
@LoeschMaximilian made their first contribution in #2157
@harshitayadavv made their first contribution in #2167

Full Changelog: 3.1.50...3.1.51

Additional notes2 sources agree

This is primarily a security release. It prevents additional argument-injection paths that could allow execution of arbitrary commands or writing to arbitrary files through unsafe Git options (GHSA-956x-8gvw-wg5v), and closes bypasses of the existing protections using abbreviated long options or joined short options (GHSA-2f96-g7mh-g2hx).

The release also improves support for relative worktree paths and diffs against the empty tree, preserves stderr from failed diff processes, supports relative configuration include paths, and includes assorted documentation, typing, test, and CI improvements.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51

Open source →

3.1.506 May 2026

Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.8 to 0.15.12 in the pre-commit group by @dependabot [bot] in #2140

What's Changed

Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.8 to 0.15.12 in the pre-commit group by @dependabot[bot] in #2140
Bump git/ext/gitdb from 335c0f6 to 53c94d6 by @dependabot[bot] in #2141
Fix Repo() autodiscovery in linked worktrees when GIT_DIR is set by @meliezer in #2128
Validate config key names before writing by @Byron in #2142

New Contributors

@meliezer made their first contribution in #2128

Full Changelog: 3.1.49...3.1.50

Open source →

Additional notes2 sources agree

Save setting of configuration values, this time sections as well, as follow-up to 3.1.49.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.50

Open source →

3.1.4929 Apr 2026

reject control chars in written values in configuration by @Byron in https://github.com/gitpython-developers/GitPython/pull/2137

What's Changed

reject control chars in written values in configuration by @Byron in https://github.com/gitpython-developers/GitPython/pull/2137
Improve pure Python rev-parse coverage and behavior by @Copilot in https://github.com/gitpython-developers/GitPython/pull/2136

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.48...3.1.49

Open source →

Additional notes2 sources agree

Save setting of configuration values, which could be used to inject other more configuration.

Also more conforming rev-parse implementation.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49

Open source →

3.1.4828 Apr 2026

Accidentally deleted the previous GH release, it did mention the advisory this fixes.

What's Changed

prevent out-of-repo access when manipulating references. by @Byron in https://github.com/gitpython-developers/GitPython/pull/2134

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.47...3.1.48

Open source →

Additional notes2 sources agree

Safe reference creation in the face of untrusted input.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48

Open source →

3.1.4722 Apr 2026

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4

Advisories

https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485

What's Changed

Prepare next release by @Byron in https://github.com/gitpython-developers/GitPython/pull/2095
Bump git/ext/gitdb from 335c0f6 to 4c63ee6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2096
DOC: README Add urls and updated a relative url by @Timour-Ilyas in https://github.com/gitpython-developers/GitPython/pull/2098
Fix GitConfigParser ignoring multiple [include] path entries by @daniel7an in https://github.com/gitpython-developers/GitPython/pull/2100
Switch back from Alpine to Debian for WSL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2108
Bump git/ext/gitdb from 4c63ee6 to 5c1b303 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2106
Run gc.collect() twice in test_rename on Python 3.12 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2109
fix: guard AutoInterrupt terminate during interpreter shutdown by @lweyrich1 in https://github.com/gitpython-developers/GitPython/pull/2105
Improve CI infrastructure for pre-commit by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2110
Bump the pre-commit group with 5 updates by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2111
Upgrade Sphinx for 3.14 support; drop doc build support on 3.8; test 3.14 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2112
Fix Repo.active_branch resolution for reftable-backed repositories by @Copilot in https://github.com/gitpython-developers/GitPython/pull/2114
docs: warn about GitDB performance with large commits by @mvanhorn in https://github.com/gitpython-developers/GitPython/pull/2115
cmd: fix kwarg formatting in docstring example by @UweSchwaeke in https://github.com/gitpython-developers/GitPython/pull/2117
Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.5 to 0.15.8 in the pre-commit group by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2122
Add trailer support for commit creation by @Krishnachaitanyakc in https://github.com/gitpython-developers/GitPython/pull/2116
Harden commit trailer subprocess handling and align trailer I/O paths by @Copilot in https://github.com/gitpython-developers/GitPython/pull/2125
git.cmd.Git.execute(..): fix with_stdout=False by @ngie-eign in https://github.com/gitpython-developers/GitPython/pull/2126
Make sure that multi-options are checked after splitting them with shlex by @Byron in https://github.com/gitpython-developers/GitPython/pull/2130
Block unsafe underscored git kwargs / Fix for GHSA-rpm5-65cw-6hj4 by @WesR in https://github.com/gitpython-developers/GitPython/pull/2131

New Contributors

@Timour-Ilyas made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2098
@daniel7an made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2100
@lweyrich1 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2105
@Copilot made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2114
@mvanhorn made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2115
@UweSchwaeke made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2117
@Krishnachaitanyakc made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2116
@ngie-eign made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2126
@WesR made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2131

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.46...3.1.47

Open source →

Additional notes2 sources agree

Address various security issues related to bypassing injection-protection of unsafe Git flags.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47

Open source →

3.1.461 Jan 2026

Prepare a new release by @Byron in https://github.com/gitpython-developers/GitPython/pull/2063

What's Changed

Prepare a new release by @Byron in https://github.com/gitpython-developers/GitPython/pull/2063
Bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2067
Bump git/ext/gitdb from 335c0f6 to 39d7dbf by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2068
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2070
Bump git/ext/gitdb from 39d7dbf to f8fdfec by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2071
Fix type hint for SymbolicReference.reference property by @emmanuel-ferdman in https://github.com/gitpython-developers/GitPython/pull/2074
feat: Add support for hasconfig git rule. by @bvanelli in https://github.com/gitpython-developers/GitPython/pull/2075
Bump github/codeql-action from 3 to 4 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2076
Use actual return type in annotation for method submodule_update by @extrwi in https://github.com/gitpython-developers/GitPython/pull/2078
Bump git/ext/gitdb from f8fdfec to 65321a2 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2082
Preliminary support for index format v3 by @blahgeek in https://github.com/gitpython-developers/GitPython/pull/2081
Bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2084
Pin mypy==1.18.2 by @George-Ogden in https://github.com/gitpython-developers/GitPython/pull/2087
Respect os.Pathlike by @George-Ogden in https://github.com/gitpython-developers/GitPython/pull/2086
Bump git/ext/gitdb from 65321a2 to 4c63ee6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2093
Join Pathlike Object to Tree by @George-Ogden in https://github.com/gitpython-developers/GitPython/pull/2094

New Contributors

@emmanuel-ferdman made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2074
@bvanelli made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2075
@extrwi made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2078
@blahgeek made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2081
@George-Ogden made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2087

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.45...3.1.46

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.46

Open source →

3.1.4524 Jul 2025Deprecated

Fail test_installation on warnings, and remove deprecated license classifier by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/…

What's Changed

Fix various version-related CI breakages by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1987
Do some CI cleanup to make reports clearer and future changes easier by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1989
Affirm that gitdb and smmap advisories can also be created by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1991
Fix links to gitdb and smmap SECURITY.md files by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1992
Test Python 3.13 regularly on Ubuntu and macOS on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1990
Repo.rev_parse: Handle <tag>^{commit} correctly by @flichtenheld in https://github.com/gitpython-developers/GitPython/pull/1996
Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1997
Work around Cygwin CI failure #2004, except for test_installation by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2007
Mark test_installation xfail on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2009
IndexFile._to_relative_path - fix case where absolute path gets stripped of trailing slash by @kamilkozik7 in https://github.com/gitpython-developers/GitPython/pull/2012
Use WSL1 on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2010
Test free-threaded Python (but only on Linux) by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2011
Use property decorator to support typing by @Andrej730 in https://github.com/gitpython-developers/GitPython/pull/2015
Fix some incorrect sphinx markups in the docstrings by @koyuki7w in https://github.com/gitpython-developers/GitPython/pull/2018
replace quansight-labs/setup-python with actions/setup-python by @ngoldbaum in https://github.com/gitpython-developers/GitPython/pull/2019
remove type assertions from util.py by @gcmarx in https://github.com/gitpython-developers/GitPython/pull/2028
correctly handle uname-cmd that doesn't point to an executable file by @gcmarx in https://github.com/gitpython-developers/GitPython/pull/2026
Use newer ruff style by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2031
Have CodeQL scan GitHub Actions workflows as well as Python code by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2032
Specify explicit contents: read workflow permissions by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2033
Fix GitConfigParser not removing quotes from values by @betaboon in https://github.com/gitpython-developers/GitPython/pull/2035
Preserve quoted leading and trailing single-line config var whitespace by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2036
Refactor Git.{AutoInterrupt,CatFileContentStream} nesting by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2037
Fix Git.{AutoInterrupt,CatFileContentStream} static typing by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2039
Fix CI mypy command on free-threaded Python by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2040
Split Cygwin CI into non-performance and performance test jobs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2042
Express conditional setuptools requirement statically by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2043
Fix ambiguous _safer_popen_windows comment by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2044
Clarify USE_SHELL warning helper signature by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2045
Test ConfigParser with whitespace outside the value by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2046
Remove explicit empty "" handling in ConfigParser by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2047
Various style improvements by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2049
Don't remove quotes if \ or " are present inside by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2048
fix updating submodules with relative urls by @david0 in https://github.com/gitpython-developers/GitPython/pull/2051
Run cat_file.py fixture without site customizations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2052
Fix Cygwin installation on CI for pip by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2053
Fail test_installation on warnings, and remove deprecated license classifier by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2054
Add clearer error version for unsupported index error by @tombedor in https://github.com/gitpython-developers/GitPython/pull/2055
Fix name collision by @NMertsch in https://github.com/gitpython-developers/GitPython/pull/2060
Allow relative path url in submodules for submodule_update by @t-webber in https://github.com/gitpython-developers/GitPython/pull/2062

New Contributors

@flichtenheld made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1996
@kamilkozik7 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2012
@koyuki7w made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2018
@ngoldbaum made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2019
@gcmarx made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2028
@betaboon made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2035
@david0 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2051
@tombedor made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2055
@NMertsch made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2060
@t-webber made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2062

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.44...3.1.45

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.45

Open source →

3.1.442 Jan 2025

Fix typo in _get_exe_extensions PATHEXT fallback by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1890

What's Changed

Fix typo in _get_exe_extensions PATHEXT fallback by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1890
Don't suppress pytest warning summaries by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1892
Update the comment about --mixed and paths by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1894
Fixed an error updating shallow submodules by @EduardTalanov in https://github.com/gitpython-developers/GitPython/pull/1899
Initial Migration of Fuzz Tests & Integration Scripts From the OSS-Fuzz Project Repo by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1901
Fuzzer Migration Follow-ups by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1903
Dockerize "Direct Execution of Fuzz Targets" by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1904
Fix Fuzzer Crash in ClusterFuzz Due to Missing Git Executable by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1906
Add GitPython's Standard License Header Comments to Shell Scripts by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1907
Fix IndexError in GitConfigParser When a Quoted Config Value Contains a Trailing New Line by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1908
Attempt 2 - Fix Missing Git Executable Causing ClusterFuzz Crash by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1909
Replace the Suboptimal fuzz_tree.py Harness With a Better Alternative by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1910
Add git.Blob Fuzz Target by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1911
lint: switch order Ruff's hooks fix -> format by @Borda in https://github.com/gitpython-developers/GitPython/pull/1912
Update OSS-Fuzz Scripts to Use New QA-Assets Repo Structure by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1913
Add Diff Fuzz Target by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1914
Instrument test utility functions to increase fuzzer efficiency by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1915
Add the .git subdir as another safe.directory on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1916
Bump Vampire/setup-wsl from 3.0.0 to 3.1.0 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1917
Add Submodules Fuzz Target by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1919
Add graceful handling of expected exceptions in fuzz_submodule.py by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1922
precommit: enable validate-pyproject by @Borda in https://github.com/gitpython-developers/GitPython/pull/1921
typing fixes - DiffIndex generic type and IndexFile items by @Andrej730 in https://github.com/gitpython-developers/GitPython/pull/1925
Fix Improper Import Order Breaking fuzz_submodule Fuzzer by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1926
Fix iter_change_type diff renamed property to prevent warning by @kamilkrzyskow in https://github.com/gitpython-developers/GitPython/pull/1918
fixed doc to not faulty do #1924 by @zerothi in https://github.com/gitpython-developers/GitPython/pull/1932
fix: fix incoherent beginning whitespace by @cardoeng in https://github.com/gitpython-developers/GitPython/pull/1933
Change aliases to work around mypy issue. by @PatrickMassot in https://github.com/gitpython-developers/GitPython/pull/1935
precommit: enable end-of-file-fixer by @Borda in https://github.com/gitpython-developers/GitPython/pull/1920
lint: add typos check by @Borda in https://github.com/gitpython-developers/GitPython/pull/1888
Add type of change to files_dict of a commit by @JonasScharpf in https://github.com/gitpython-developers/GitPython/pull/1943
Enable Python 3.8 and 3.9 on M1 runners by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1944
Use Alpine Linux in WSL on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1945
Remove the non-ARM macOS CI jobs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1946
Fix Several Bugs in the fuzz_submodule Causing a lot of False Alarms in the OSS-Fuzz Bug Tracker by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1950
Gracefully handle PermissionError exceptions that crash fuzzer by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1951
Fuzzing: Gracefully Handle Uninteresting Error to Fix OSS-Fuzz Issue by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1952
Update and adjust pre-commit hooks by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1953
Upgrade sphinx to ~7.1.2 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1954
Don't support building documentation on Python 3.7 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1956
_to_relative_path to support mixing slashes and backslashes by @Andrej730 in https://github.com/gitpython-developers/GitPython/pull/1961
Update base.py by @alex20230721 in https://github.com/gitpython-developers/GitPython/pull/1965
Fix Fetch progress bar by @fvalette-ledger in https://github.com/gitpython-developers/GitPython/pull/1971

New Contributors

@EduardTalanov made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1899
@DaveLak made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1901
@Andrej730 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1925
@kamilkrzyskow made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1918
@zerothi made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1932
@cardoeng made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1933
@PatrickMassot made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1935
@JonasScharpf made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1943
@alex20230721 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1965
@fvalette-ledger made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1971

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.43...3.1.44

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.44

Open source →

3.1.4331 Mar 2024Deprecated

Issue and test deprecation warnings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1886

Particularly Important Changes

These are likely to affect you, please do take a careful look.

Issue and test deprecation warnings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1886
Fix version_info cache invalidation, typing, parsing, and serialization by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1838
Document manual refresh path treatment by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1839
Improve static typing and docstrings related to git object types by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1859

Other Changes

Test in Docker with Alpine Linux on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1826
Build online docs (RTD) with -W and dependencies by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1843
Suggest full-path refresh() in failure message by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1844
repo.blame and repo.blame_incremental now accept None as the rev parameter. by @Gaubbe in https://github.com/gitpython-developers/GitPython/pull/1846
Make sure diff always uses the default diff driver when create_patch=True by @can-taslicukur in https://github.com/gitpython-developers/GitPython/pull/1832
Revise docstrings, comments, and a few messages by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1850
Expand what is included in the API Reference by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1855
Restore building of documentation downloads by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1856
Revise type annotations slightly by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1860
Updating regex pattern to handle unicode whitespaces. by @jcole-crowdstrike in https://github.com/gitpython-developers/GitPython/pull/1853
Use upgraded pip in test fixture virtual environment by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1864
lint: replace flake8 with ruff check by @Borda in https://github.com/gitpython-developers/GitPython/pull/1862
lint: switch Black with ruff-format by @Borda in https://github.com/gitpython-developers/GitPython/pull/1865
Update readme and tox.ini for recent tooling changes by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1868
Split tox lint env into three envs, all safe by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1870
Slightly broaden Ruff, and update and clarify tool configuration by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1871
Add a "doc" extra for documentation build dependencies by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1872
Describe Submodule.__init__ parent_commit parameter by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1877
Include TagObject in git.types.Tree_ish by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1878
Improve Sphinx role usage, including linking Git manpages by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1879
Replace all wildcard imports with explicit imports by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1880
Clarify how tag objects are usually tree-ish and commit-ish by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1881

New Contributors

@Gaubbe made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1846
@can-taslicukur made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1832
@jcole-crowdstrike made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1853
@Borda made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1862

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.42...3.1.43

Open source →

Additional notes2 sources agree

A major visible change will be the added deprecation- or user-warnings, and greatly improved typing.

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.43

Open source →

3.1.4215 Feb 2024Deprecated

Remove deprecated section in README.md by @marcm-ml in https://github.com/gitpython-developers/GitPython/pull/1823

What's Changed

Fix release link in changelog by @PeterJCLaw in https://github.com/gitpython-developers/GitPython/pull/1795
Remove test dependency on sumtypes library by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1798
Pin Sphinx plugins to compatible versions by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1803
fix: treeNotSorted issue by @et-repositories in https://github.com/gitpython-developers/GitPython/pull/1799
Remove git.util.NullHandler by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1807
Clarify why GIT_PYTHON_GIT_EXECUTABLE may be set on failure by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1810
Report actual attempted Git command when Git.refresh fails by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1812
Don't suppress messages when logging is not configured by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1813
Pin Python 3.9.16 on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1814
Have initial refresh use a logger to warn by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1815
Omit warning prefix in "Bad git executable" message by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1816
Test with M1 macOS CI runner by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1817
Bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1818
Bump Vampire/setup-wsl from 2.0.2 to 3.0.0 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1819
Remove deprecated section in README.md by @marcm-ml in https://github.com/gitpython-developers/GitPython/pull/1823
Keep temp files out of project dir and improve cleanup by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1825

New Contributors

@PeterJCLaw made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1795
@et-repositories made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1799
@marcm-ml made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1823

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.41...3.1.42

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.42

Open source →

3.1.4110 Jan 2024Deprecated

Deprecate compat.is_ , rewriting all uses by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1732

The details about the Windows security issue can be found in this advisory.

Special thanks go to @EliahKagan who reported the issue and fixed it in a single stroke, while being responsible for an incredible amount of improvements that he contributed over the last couple of months ❤️.

What's Changed

Add __all__ in git.exc by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1719
Set submodule update cadence to weekly by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1721
Never modify sys.path by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1720
Bump git/ext/gitdb from 8ec2390 to ec58b7e by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1722
Revise comments, docstrings, some messages, and a bit of code by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1725
Use zero-argument super() by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1726
Remove obsolete note in _iter_packed_refs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1727
Reorganize test_util and make xfail marks precise by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1729
Clarify license and make module top comments more consistent by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1730
Deprecate compat.is_<platform>, rewriting all uses by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1732
Revise and restore some module docstrings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1735
Make the rmtree callback Windows-only by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1739
List all non-passing tests in test summaries by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1740
Document some minor subtleties in test_util.py by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1749
Always read metadata files as UTF-8 in setup.py by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1748
Test native Windows on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1745
Test macOS on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1752
Let close_fds be True on all platforms by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1753
Fix IndexFile.from_tree on Windows by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1751
Remove unused TASKKILL fallback in AutoInterrupt by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1754
Don't return with operand when conceptually void by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1755
Group .gitignore entries by purpose by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1758
Adding dubious ownership handling by @marioaag in https://github.com/gitpython-developers/GitPython/pull/1746
Avoid brittle assumptions about preexisting temporary files in tests by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1759
Overhaul noqa directives by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1760
Clarify some Git.execute kill_after_timeout limitations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1761
Bump actions/setup-python from 4 to 5 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1763
Don't install black on Cygwin by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1766
Extract all "import gc" to module level by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1765
Extract remaining local "import gc" to module level by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1768
Replace xfail with gc.collect in TestSubmodule.test_rename by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1767
Enable CodeQL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1769
Replace some uses of the deprecated mktemp function by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1770
Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1773
Run some Windows environment variable tests only on Windows by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1774
Fix TemporaryFileSwap regression where file_path could not be Path by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1776
Improve hooks tests by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1777
Fix if items of Index is of type PathLike by @stegm in https://github.com/gitpython-developers/GitPython/pull/1778
Better document IterableObj.iter_items and improve some subclasses by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1780
Revert "Don't install black on Cygwin" by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1783
Add missing pip in $PATH on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1784
Shorten Iterable docstrings and put IterableObj first by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1785
Fix incompletely revised Iterable/IterableObj docstrings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1786
Pre-deprecate setting Git.USE_SHELL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1782
Deprecate Git.USE_SHELL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1787
In handle_process_output don't forward finalizer result by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1788
Fix mypy warning "Missing return statement" by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1789
Fix two remaining Windows untrusted search path cases by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1792

New Contributors

@marioaag made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1746
@stegm made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1778

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.40...3.1.41

Open source →

Additional notes2 sources agree

This release is relevant for security as it fixes a possible arbitrary code execution on Windows.

See this PR for details: https://github.com/gitpython-developers/GitPython/pull/1792 An advisory is available soon at: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2mqj-m65w-jghx

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.41

Open source →

3.1.4018 Oct 2023

Add missing info in Submodule.remove docstring by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1714

What's Changed

Add missing info in Submodule.remove docstring by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1714
Have init script clone submodules unconditionally by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1715

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.38...3.1.40

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.40

Open source →

3.1.3817 Oct 2023

Add missing assert keywords by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1678

What's Changed

Add missing assert keywords by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1678
Make clear every test's status in every CI run by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1679
Fix new link to license in readme by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1680
Drop unneeded flake8 suppressions by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1681
Update instructions and test helpers for git-daemon by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1684
Fix Git.execute shell use and reporting bugs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1687
No longer allow CI to select a prerelease for 3.12 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1689
Clarify Git.execute and Popen arguments by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1688
Ask git where its daemon is and use that by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1697
Fix bugs affecting exception wrapping in rmtree callback by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1700
Fix dynamically-set all variable by @DeflateAwning in https://github.com/gitpython-developers/GitPython/pull/1659
Fix small #1662 regression due to #1659 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1701
Drop obsolete info on yanking from security policy by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1703
Have Dependabot offer submodule updates by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1702
Bump git/ext/gitdb from 49c3178 to 8ec2390 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1704
Bump git/ext/gitdb from 8ec2390 to 6a22706 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1705
Update readme for milestone-less releasing by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1707
Run Cygwin CI workflow commands in login shells by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1709

New Contributors

@DeflateAwning made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1659

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.37...3.1.38

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/GitPython/releases/tag/3.1.38

Open source →

3.1.3722 Sept 2023Deprecated

Improve Python version and OS compatibility, fixing deprecations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1654

What's Changed

Improve Python version and OS compatibility, fixing deprecations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1654
Better document env_case test/fixture and cwd by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1657
Remove spurious executable permissions by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1658
Fix up checks in Makefile and make them portable by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1661
Fix URLs that were redirecting to another license by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1662
Assorted small fixes/improvements to root dir docs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1663
Use venv instead of virtualenv in test_installation by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1664
Omit py_modules in setup by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1665
Don't track code coverage temporary files by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1666
Configure tox by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1667
Format tests with black and auto-exclude untracked paths by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1668
Upgrade and broaden flake8, fixing style problems and bugs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1673
Fix rollback bug in SymbolicReference.set_reference by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1675
Remove @NoEffect annotations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1677
Add more checks for the validity of refnames by @facutuesca in https://github.com/gitpython-developers/GitPython/pull/1672

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.36...3.1.37

Open source →

Additional notes2 sources agree

This release contains another security fix that further improves validation of symbolic references and thus properly fixes this CVE: https://github.com/advisories/GHSA-cwvm-v4w8-q58c .

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/67?closed=1

Open source →

3.1.3612 Sept 20232 sources agree

Note that this release should be a no-op, it's mainly for testing the changed release-process.

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/66?closed=1

Open source →

3.1.357 Sept 2023Security

Fix CVE-2023-41040 by @facutuesca in https://github.com/gitpython-developers/GitPython/pull/1644

What's Changed

Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1643
Fix 'Tree' object has no attribute '_name' when submodule path is normal path by @CosmosAtlas in https://github.com/gitpython-developers/GitPython/pull/1645
Fix CVE-2023-41040 by @facutuesca in https://github.com/gitpython-developers/GitPython/pull/1644
Only make config more permissive in tests that need it by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1648
Added test for PR #1645 submodule path by @CosmosAtlas in https://github.com/gitpython-developers/GitPython/pull/1647
Fix Windows environment variable upcasing bug by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1650

New Contributors

@CosmosAtlas made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1645
@facutuesca made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1644

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.34...3.1.35

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/65?closed=1

Open source →

3.1.342 Sept 2023

util: close lockfile after opening successfully by @skshetry in https://github.com/gitpython-developers/GitPython/pull/1639

What's Changed

util: close lockfile after opening successfully by @skshetry in https://github.com/gitpython-developers/GitPython/pull/1639

New Contributors

@skshetry made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1639

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.33...3.1.34

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/64?closed=1

Open source →

3.1.331 Sept 2023Security

Fix CVE-2023-40590 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1636

What's Changed

WIP Quick doc by @LeoDaCoda in https://github.com/gitpython-developers/GitPython/pull/1608
Partial clean up wrt mypy and black by @bodograumann in https://github.com/gitpython-developers/GitPython/pull/1617
Disable merge_includes in config writers by @bodograumann in https://github.com/gitpython-developers/GitPython/pull/1618
feat: full typing for "progress" parameter in Repo class by @madebylydia in https://github.com/gitpython-developers/GitPython/pull/1634
Fix CVE-2023-40590 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1636
#1566 Creating a lock now uses python built-in "open()" method to work arou… by @HageMaster3108 in https://github.com/gitpython-developers/GitPython/pull/1619

New Contributors

@LeoDaCoda made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1608
@bodograumann made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1617
@EliahKagan made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1636
@HageMaster3108 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1619

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.32...3.1.33

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/63?closed=1

Open source →

3.1.3210 Jul 2023

Bump cygwin/cygwin-install-action from 3 to 4 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1572

What's Changed

Bump cygwin/cygwin-install-action from 3 to 4 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1572
Fix up the commit trailers functionality by @itsluketwist in https://github.com/gitpython-developers/GitPython/pull/1576
Name top-level exceptions as private variables by @Hawk777 in https://github.com/gitpython-developers/GitPython/pull/1590
fix pypi long description by @eUgEntOptIc44 in https://github.com/gitpython-developers/GitPython/pull/1603
Don't rely on del by @r-darwish in https://github.com/gitpython-developers/GitPython/pull/1606
Block insecure non-multi options in clone/clone_from by @Beuc in https://github.com/gitpython-developers/GitPython/pull/1609

New Contributors

@Hawk777 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1590
@eUgEntOptIc44 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1603
@r-darwish made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1606
@Beuc made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1609

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.31...3.1.32

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/62?closed=1

Open source →

3.1.3116 Feb 2023

Fix Sphinx rendering errors by @stephan-cr in https://github.com/gitpython-developers/GitPython/pull/1524

What's Changed

Fix Sphinx rendering errors by @stephan-cr in https://github.com/gitpython-developers/GitPython/pull/1524
tests: Use command -v instead of third-party which program by @mgorny in https://github.com/gitpython-developers/GitPython/pull/1525
fix/add allow_unsafe_* params in docstrings + fix typo by @obfusk in https://github.com/gitpython-developers/GitPython/pull/1530
use tempfile.TemporaryDirectory & fix clone_from_unsafe_protocol tests by @obfusk in https://github.com/gitpython-developers/GitPython/pull/1531
Fix some resource leaks by open file handles by @marlamb in https://github.com/gitpython-developers/GitPython/pull/1532
fix files list on file rename by @teknoraver in https://github.com/gitpython-developers/GitPython/pull/1537
Declare support for Python 3.11 by @hugovk in https://github.com/gitpython-developers/GitPython/pull/1541
Fix ignored by @Lightborne in https://github.com/gitpython-developers/GitPython/pull/1545
Fix timezone parsing functions for non-hour timezones by @jcowgill in https://github.com/gitpython-developers/GitPython/pull/1547
Enable user to override default diff -M arg by @mellowed100 in https://github.com/gitpython-developers/GitPython/pull/1551
Remove optional from two member variables by @Sineaggi in https://github.com/gitpython-developers/GitPython/pull/1550
Fix RecursionError when iterating streams by @eric-wieser in https://github.com/gitpython-developers/GitPython/pull/1554
Fix get_values() so it correctly loads section names by @Codym48 in https://github.com/gitpython-developers/GitPython/pull/1555

New Contributors

@stephan-cr made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1524
@obfusk made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1530
@marlamb made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1532
@teknoraver made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1537
@Lightborne made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1545
@jcowgill made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1547
@mellowed100 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1551
@Sineaggi made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1550
@Codym48 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1555

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.30...3.1.31

Open source →

Additional notes2 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/61?closed=1

Open source →

3.1.3029 Dec 2022

See https://github.com/gitpython-developers/GitPython/issues/1515 for details.

What's Changed

Add datetime.datetime type to commit_date and author_date by @SergeantMenacingGarlic in https://github.com/gitpython-developers/GitPython/pull/1501
Bump cygwin/cygwin-install-action from 2 to 3 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1514
Fix command injection by @stsewd in https://github.com/gitpython-developers/GitPython/pull/1518
Document PushInfoList by @skinitimski in https://github.com/gitpython-developers/GitPython/pull/1522
Fix type hint on create_tag by @drewcassidy in https://github.com/gitpython-developers/GitPython/pull/1523
Block insecure options and protocols by default by @stsewd in https://github.com/gitpython-developers/GitPython/pull/1521

New Contributors

@SergeantMenacingGarlic made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1501
@skinitimski made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1522
@drewcassidy made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1523

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.29...3.1.30

Open source →

Additional notes2 sources agree

Make injections of command-invocations harder or impossible for clone and others. See https://github.com/gitpython-developers/GitPython/pull/1518 for details. Note that this might constitute a breaking change for some users, and if so please let us know and we add an opt-out to this.
Prohibit insecure options and protocols by default, which is potentially a breaking change, but a necessary fix for https://github.com/gitpython-developers/GitPython/issues/1515. Please take a look at the PR for more information and how to bypass these protections in case they cause breakage: https://github.com/gitpython-developers/GitPython/pull/1521.

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/60?closed=1

Open source →

3.1.2910 Oct 20222 sources agree

Make the git.__version__ re-appear.

Make the git.__version__ re-appear.

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/59?closed=1

Open source →

3.1.287 Oct 20222 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/58?closed=1

Open source →

3.1.2720 Feb 20222 sources agree

Reduced startup time due to optimized imports.

Reduced startup time due to optimized imports.
Fix a vulenerability that could cause great slowdowns when encountering long remote path names when pulling/fetching.

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/57?closed=1

Open source →

3.1.2610 Jan 20222 sources agree

Fixes a leaked file descriptor when reading the index, which would cause make writing a previously read index on windows impossible. See https://githu

Fixes a leaked file descriptor when reading the index, which would cause make writing a previously read index on windows impossible. See https://github.com/gitpython-developers/GitPython/issues/1395 for details.

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/56?closed=1

Open source →

3.1.257 Jan 20222 sources agree

See the following for all changes. https://github.com/gitpython-developers/gitpython/milestone/55?closed=1

Open source →

3.1.2418 Sept 20212 sources agree

Newly added timeout flag is not be enabled by default, and was renamed to kill_after_timeout

Newly added timeout flag is not be enabled by default, and was renamed to kill_after_timeout

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/54?closed=1 https://github.com/gitpython-developers/gitpython/milestone/53?closed=1

Open source →

3.1.2310 Sept 2021withdrawn: Aggressive unconditional timeout will fail long-running git operationsDeprecated2 sources agree

Remove distutils ahead of deprecation in standard library.

This is the second typed release with a lot of improvements under the hood.
General:
- Remove python 3.6 support
- Remove distutils ahead of deprecation in standard library.
- Update sphinx to 4.1.12 and use autodoc-typehints.
- Include README as long_description on PyPI
- Test against earliest and latest minor version available on Github Actions (e.g. 3.9.0 and 3.9.7)
Typing:
- Add types to ALL functions.
- Ensure py.typed is collected.
- Increase mypy strictness with disallow_untyped_defs, warn_redundant_casts, warn_unreachable.
- Use typing.NamedTuple and typing.OrderedDict now 3.6 dropped.
- Make Protocol classes ABCs at runtime due to new behaviour/bug in 3.9.7 & 3.10.0-rc1
- Remove use of typing.TypeGuard until later release, to allow dependent libs time to update.
- Tracking issue: https://github.com/gitpython-developers/GitPython/issues/1095
Runtime improvements:
- Add clone_multi_options support to submodule.add()
- Delay calling get_user_id() unless essential, to support sand-boxed environments.
- Add timeout to handle_process_output(), in case thread.join() hangs.

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/53?closed=1

Open source →

3.1.2210 Sept 2021withdrawn: Should have been 3.1.21

Nothing published for this version

3.1.2028 Jul 2021withdrawn: Issues with typing of ordered dict

Fix Py.typed discovery by @Yobmod in https://github.com/gitpython-developers/GitPython/pull/1297

What's Changed

Fix Py.typed discovery by @Yobmod in https://github.com/gitpython-developers/GitPython/pull/1297
Revert use of Typeguard and therefore typing-extensions==3.10.0.0 by @Yobmod in https://github.com/gitpython-developers/GitPython/pull/1298
Added support of spaces for clone multi_options by @ilakhtenkov in https://github.com/gitpython-developers/GitPython/pull/1299

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.19...3.1.20

Open source →

Additional notes2 sources agree

This is the second typed release with a lot of improvements under the hood. * Tracking issue: https://github.com/gitpython-developers/GitPython/issues/1095

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/52?closed=1

Open source →

3.1.1923 Jul 2021withdrawn: 3.1.19wrong version for typing break installation 2 sources agree

This is the second typed release with a lot of improvements under the hood.

This is the second typed release with a lot of improvements under the hood. * Tracking issue: https://github.com/gitpython-developers/GitPython/issues/1095

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/51?closed=1

Open source →

3.1.1818 Jun 20212 sources agree

drop support for python 3.5 to reduce maintenance burden on typing. Lower patch levels of python 3.5 would break, too.

drop support for python 3.5 to reduce maintenance burden on typing. Lower patch levels of python 3.5 would break, too.

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/50?closed=1

Open source →

3.1.1714 May 2021withdrawn: Breaks older versions of python 3.5, 3.5.2 notably, due to typing2 sources agree

Fix issues from 3.1.16 (see https://github.com/gitpython-developers/GitPython/issues/1238)

Fix issues from 3.1.16 (see https://github.com/gitpython-developers/GitPython/issues/1238)
Fix issues from 3.1.15 (see https://github.com/gitpython-developers/GitPython/issues/1223)
Add more static typing information

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/49?closed=1

Open source →

3.1.1613 May 2021withdrawn: breakage due to new types2 sources agree

Fix issues from 3.1.15 (see https://github.com/gitpython-developers/GitPython/issues/1223)

Fix issues from 3.1.15 (see https://github.com/gitpython-developers/GitPython/issues/1223)
Add more static typing information

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/48?closed=1

Open source →

3.1.1521 Apr 2021withdrawn: too buggyDeprecated2 sources agree

add deprecation warning for python 3.5

add deprecation warning for python 3.5

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/47?closed=1

Open source →

3.1.1428 Feb 20212 sources agree

git.Commit objects now have a replace method that will return a copy of the commit with modified attributes.

git.Commit objects now have a replace method that will return a copy of the commit with modified attributes.
Add python 3.9 support
Drop python 3.4 support

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/46?closed=1

Open source →

3.1.139 Feb 20212 sources agree

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/45?closed=1

Open source →

3.1.126 Jan 20212 sources agree

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/44?closed=1

Open source →

3.1.1123 Oct 20202 sources agree

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/43?closed=1

Fixes regression of 3.1.10.

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/43?closed=1

Open source →

3.1.1023 Oct 20202 sources agree

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/42?closed=1

Open source →

3.1.91 Oct 20202 sources agree

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/41?closed=1

Open source →

3.1.84 Sept 20202 sources agree

support for 'includeIf' in git configuration files

support for 'includeIf' in git configuration files
tests are now excluded from the package, making it conisderably smaller

See the following for more details: https://github.com/gitpython-developers/gitpython/milestone/40?closed=1

Open source →

3.1.713 Jul 20202 sources agree

Fix tutorial examples, which disappeared in 3.1.6 due to a missed path change.

Fix tutorial examples, which disappeared in 3.1.6 due to a missed path change.

Open source →

3.1.613 Jul 20202 sources agree

Greatly reduced package size, see https://github.com/gitpython-developers/GitPython/pull/1031

Greatly reduced package size, see https://github.com/gitpython-developers/GitPython/pull/1031

Open source →

3.1.512 Jul 20202 sources agree

rollback: package size was reduced significantly not placing tests into the package anymore. See https://github.com/gitpython-developers/GitPython/iss

rollback: package size was reduced significantly not placing tests into the package anymore. See https://github.com/gitpython-developers/GitPython/issues/1030

Open source →

3.1.412 Jul 2020withdrawn: broken2 sources agree

all exceptions now keep track of their cause

all exceptions now keep track of their cause
package size was reduced significantly not placing tests into the package anymore.

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/39?closed=1

Open source →

3.1.331 May 20202 sources agree

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/38?closed=1

Open source →

3.1.25 May 20202 sources agree

Re-release of 3.1.1, with known signature

Re-release of 3.1.1, with known signature

See the following for details: https://github.com/gitpython-developers/gitpython/milestone/37?closed=1

Open source →

Your coding agent can read these notes before it upgrades. Set up the MCP server →