What’s Changed

• reject control chars in written values in configuration by @Byron in https://github.com/gitpython-developers/GitPython/pull/2137
• Improve pure Python rev-parse coverage and behavior by @Copilot in https://github.com/gitpython-developers/GitPython/pull/2136

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.48...3.1.49

Accidentally deleted the previous GH release, it did mention the advisory this fixes.

What’s Changed

• prevent out-of-repo access when manipulating references. by @Byron in https://github.com/gitpython-developers/GitPython/pull/2134

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.47...3.1.48

Fixes https://github.com/gitpython-developers/GitPython/pull/2134

What’s Changed

• prevent out-of-repo access when manipulating references. by @Byron in https://github.com/gitpython-developers/GitPython/pull/2134

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.47...3.1.48

Advisories

• https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4
• https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485

What’s Changed

• Prepare next release by @Byron in https://github.com/gitpython-developers/GitPython/pull/2095
• Bump git/ext/gitdb from 335c0f6 to 4c63ee6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2096
• DOC: README Add urls and updated a relative url by @Timour-Ilyas in https://github.com/gitpython-developers/GitPython/pull/2098
• Fix GitConfigParser ignoring multiple [include] path entries by @daniel7an in https://github.com/gitpython-developers/GitPython/pull/2100
• Switch back from Alpine to Debian for WSL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2108
• Bump git/ext/gitdb from 4c63ee6 to 5c1b303 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2106
• Run gc.collect() twice in test_rename on Python 3.12 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2109
• fix: guard AutoInterrupt terminate during interpreter shutdown by @lweyrich1 in https://github.com/gitpython-developers/GitPython/pull/2105
• Improve CI infrastructure for pre-commit by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2110
• Bump the pre-commit group with 5 updates by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2111
• Upgrade Sphinx for 3.14 support; drop doc build support on 3.8; test 3.14 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2112
• Fix Repo.active_branch resolution for reftable-backed repositories by @Copilot in https://github.com/gitpython-developers/GitPython/pull/2114
• docs: warn about GitDB performance with large commits by @mvanhorn in https://github.com/gitpython-developers/GitPython/pull/2115
• cmd: fix kwarg formatting in docstring example by @UweSchwaeke in https://github.com/gitpython-developers/GitPython/pull/2117
• Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.5 to 0.15.8 in the pre-commit group by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2122
• Add trailer support for commit creation by @Krishnachaitanyakc in https://github.com/gitpython-developers/GitPython/pull/2116
• Harden commit trailer subprocess handling and align trailer I/O paths by @Copilot in https://github.com/gitpython-developers/GitPython/pull/2125
• git.cmd.Git.execute(..): fix with_stdout=False by @ngie-eign in https://github.com/gitpython-developers/GitPython/pull/2126
• Make sure that multi-options are checked after splitting them with shlex by @Byron in https://github.com/gitpython-developers/GitPython/pull/2130
• Block unsafe underscored git kwargs / Fix for GHSA-rpm5-65cw-6hj4 by @WesR in https://github.com/gitpython-developers/GitPython/pull/2131

New Contributors

• @Timour-Ilyas made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2098
• @daniel7an made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2100
• @lweyrich1 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2105
• @Copilot made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2114
• @mvanhorn made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2115
• @UweSchwaeke made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2117
• @Krishnachaitanyakc made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2116
• @ngie-eign made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2126
• @WesR made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2131

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.46...3.1.47

What’s Changed

• Prepare a new release by @Byron in https://github.com/gitpython-developers/GitPython/pull/2063
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2067
• Bump git/ext/gitdb from 335c0f6 to 39d7dbf by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2068
• Bump actions/setup-python from 5 to 6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2070
• Bump git/ext/gitdb from 39d7dbf to f8fdfec by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2071
• Fix type hint for SymbolicReference.reference property by @emmanuel-ferdman in https://github.com/gitpython-developers/GitPython/pull/2074
• feat: Add support for hasconfig git rule. by @bvanelli in https://github.com/gitpython-developers/GitPython/pull/2075
• Bump github/codeql-action from 3 to 4 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2076
• Use actual return type in annotation for method submodule_update by @extrwi in https://github.com/gitpython-developers/GitPython/pull/2078
• Bump git/ext/gitdb from f8fdfec to 65321a2 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2082
• Preliminary support for index format v3 by @blahgeek in https://github.com/gitpython-developers/GitPython/pull/2081
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2084
• Pin mypy==1.18.2 by @George-Ogden in https://github.com/gitpython-developers/GitPython/pull/2087
• Respect os.Pathlike by @George-Ogden in https://github.com/gitpython-developers/GitPython/pull/2086
• Bump git/ext/gitdb from 65321a2 to 4c63ee6 by @dependabot[bot] in https://github.com/gitpython-developers/GitPython/pull/2093
• Join Pathlike Object to Tree by @George-Ogden in https://github.com/gitpython-developers/GitPython/pull/2094

New Contributors

• @emmanuel-ferdman made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2074
• @bvanelli made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2075
• @extrwi made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2078
• @blahgeek made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2081
• @George-Ogden made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2087

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.45...3.1.46

What’s Changed

• Fix various version-related CI breakages by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1987
• Do some CI cleanup to make reports clearer and future changes easier by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1989
• Affirm that gitdb and smmap advisories can also be created by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1991
• Fix links to gitdb and smmap SECURITY.md files by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1992
• Test Python 3.13 regularly on Ubuntu and macOS on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1990
• Repo.rev_parse: Handle ^{commit} correctly by @flichtenheld in https://github.com/gitpython-developers/GitPython/pull/1996
• Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1997
• Work around Cygwin CI failure #2004, except for test_installation by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2007
• Mark test_installation xfail on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2009
• IndexFile._to_relative_path - fix case where absolute path gets stripped of trailing slash by @kamilkozik7 in https://github.com/gitpython-developers/GitPython/pull/2012
• Use WSL1 on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2010
• Test free-threaded Python (but only on Linux) by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2011
• Use property decorator to support typing by @Andrej730 in https://github.com/gitpython-developers/GitPython/pull/2015
• Fix some incorrect sphinx markups in the docstrings by @koyuki7w in https://github.com/gitpython-developers/GitPython/pull/2018
• replace quansight-labs/setup-python with actions/setup-python by @ngoldbaum in https://github.com/gitpython-developers/GitPython/pull/2019
• remove type assertions from util.py by @gcmarx in https://github.com/gitpython-developers/GitPython/pull/2028
• correctly handle uname-cmd that doesn’t point to an executable file by @gcmarx in https://github.com/gitpython-developers/GitPython/pull/2026
• Use newer ruff style by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2031
• Have CodeQL scan GitHub Actions workflows as well as Python code by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2032
• Specify explicit contents: read workflow permissions by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2033
• Fix GitConfigParser not removing quotes from values by @betaboon in https://github.com/gitpython-developers/GitPython/pull/2035
• Preserve quoted leading and trailing single-line config var whitespace by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2036
• Refactor Git.{AutoInterrupt,CatFileContentStream} nesting by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2037
• Fix Git.{AutoInterrupt,CatFileContentStream} static typing by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2039
• Fix CI mypy command on free-threaded Python by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2040
• Split Cygwin CI into non-performance and performance test jobs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2042
• Express conditional setuptools requirement statically by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2043
• Fix ambiguous _safer_popen_windows comment by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2044
• Clarify USE_SHELL warning helper signature by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2045
• Test ConfigParser with whitespace outside the value by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2046
• Remove explicit empty "" handling in ConfigParser by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2047
• Various style improvements by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2049
• Don’t remove quotes if \ or " are present inside by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2048
• fix updating submodules with relative urls by @david0 in https://github.com/gitpython-developers/GitPython/pull/2051
• Run cat_file.py fixture without site customizations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2052
• Fix Cygwin installation on CI for pip by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2053
• Fail test_installation on warnings, and remove deprecated license classifier by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/2054
• Add clearer error version for unsupported index error by @tombedor in https://github.com/gitpython-developers/GitPython/pull/2055
• Fix name collision by @NMertsch in https://github.com/gitpython-developers/GitPython/pull/2060
• Allow relative path url in submodules for submodule_update by @t-webber in https://github.com/gitpython-developers/GitPython/pull/2062

New Contributors

• @flichtenheld made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1996
• @kamilkozik7 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2012
• @koyuki7w made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2018
• @ngoldbaum made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2019
• @gcmarx made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2028
• @betaboon made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2035
• @david0 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2051
• @tombedor made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2055
• @NMertsch made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2060
• @t-webber made their first contribution in https://github.com/gitpython-developers/GitPython/pull/2062

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.44...3.1.45

What’s Changed

• Fix typo in _get_exe_extensions PATHEXT fallback by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1890
• Don’t suppress pytest warning summaries by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1892
• Update the comment about --mixed and paths by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1894
• Fixed an error updating shallow submodules by @EduardTalanov in https://github.com/gitpython-developers/GitPython/pull/1899
• Initial Migration of Fuzz Tests & Integration Scripts From the OSS-Fuzz Project Repo by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1901
• Fuzzer Migration Follow-ups by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1903
• Dockerize “Direct Execution of Fuzz Targets” by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1904
• Fix Fuzzer Crash in ClusterFuzz Due to Missing Git Executable by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1906
• Add GitPython’s Standard License Header Comments to Shell Scripts by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1907
• Fix IndexError in GitConfigParser When a Quoted Config Value Contains a Trailing New Line by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1908
• Attempt 2 - Fix Missing Git Executable Causing ClusterFuzz Crash by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1909
• Replace the Suboptimal fuzz_tree.py Harness With a Better Alternative by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1910
• Add git.Blob Fuzz Target by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1911
• lint: switch order Ruff’s hooks fix -> format by @Borda in https://github.com/gitpython-developers/GitPython/pull/1912
• Update OSS-Fuzz Scripts to Use New QA-Assets Repo Structure by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1913
• Add Diff Fuzz Target by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1914
• Instrument test utility functions to increase fuzzer efficiency by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1915
• Add the .git subdir as another safe.directory on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1916
• Bump Vampire/setup-wsl from 3.0.0 to 3.1.0 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1917
• Add Submodules Fuzz Target by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1919
• Add graceful handling of expected exceptions in fuzz_submodule.py by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1922
• precommit: enable validate-pyproject by @Borda in https://github.com/gitpython-developers/GitPython/pull/1921
• typing fixes - DiffIndex generic type and IndexFile items by @Andrej730 in https://github.com/gitpython-developers/GitPython/pull/1925
• Fix Improper Import Order Breaking fuzz_submodule Fuzzer by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1926
• Fix iter_change_type diff renamed property to prevent warning by @kamilkrzyskow in https://github.com/gitpython-developers/GitPython/pull/1918
• fixed doc to not faulty do #1924 by @zerothi in https://github.com/gitpython-developers/GitPython/pull/1932
• fix: fix incoherent beginning whitespace by @cardoeng in https://github.com/gitpython-developers/GitPython/pull/1933
• Change aliases to work around mypy issue. by @PatrickMassot in https://github.com/gitpython-developers/GitPython/pull/1935
• precommit: enable end-of-file-fixer by @Borda in https://github.com/gitpython-developers/GitPython/pull/1920
• lint: add typos check by @Borda in https://github.com/gitpython-developers/GitPython/pull/1888
• Add type of change to files_dict of a commit by @JonasScharpf in https://github.com/gitpython-developers/GitPython/pull/1943
• Enable Python 3.8 and 3.9 on M1 runners by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1944
• Use Alpine Linux in WSL on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1945
• Remove the non-ARM macOS CI jobs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1946
• Fix Several Bugs in the fuzz_submodule Causing a lot of False Alarms in the OSS-Fuzz Bug Tracker by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1950
• Gracefully handle PermissionError exceptions that crash fuzzer by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1951
• Fuzzing: Gracefully Handle Uninteresting Error to Fix OSS-Fuzz Issue by @DaveLak in https://github.com/gitpython-developers/GitPython/pull/1952
• Update and adjust pre-commit hooks by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1953
• Upgrade sphinx to ~7.1.2 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1954
• Don’t support building documentation on Python 3.7 by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1956
• _to_relative_path to support mixing slashes and backslashes by @Andrej730 in https://github.com/gitpython-developers/GitPython/pull/1961
• Update base.py by @alex20230721 in https://github.com/gitpython-developers/GitPython/pull/1965
• Fix Fetch progress bar by @fvalette-ledger in https://github.com/gitpython-developers/GitPython/pull/1971

New Contributors

• @EduardTalanov made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1899
• @DaveLak made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1901
• @Andrej730 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1925
• @kamilkrzyskow made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1918
• @zerothi made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1932
• @cardoeng made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1933
• @PatrickMassot made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1935
• @JonasScharpf made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1943
• @alex20230721 made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1965
• @fvalette-ledger made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1971

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.43...3.1.44

Particularly Important Changes

These are likely to affect you, please do take a careful look.

• Issue and test deprecation warnings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1886
• Fix version_info cache invalidation, typing, parsing, and serialization by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1838
• Document manual refresh path treatment by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1839
• Improve static typing and docstrings related to git object types by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1859

Other Changes

• Test in Docker with Alpine Linux on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1826
• Build online docs (RTD) with -W and dependencies by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1843
• Suggest full-path refresh() in failure message by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1844
• repo.blame and repo.blame_incremental now accept None as the rev parameter. by @Gaubbe in https://github.com/gitpython-developers/GitPython/pull/1846
• Make sure diff always uses the default diff driver when create_patch=True by @can-taslicukur in https://github.com/gitpython-developers/GitPython/pull/1832
• Revise docstrings, comments, and a few messages by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1850
• Expand what is included in the API Reference by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1855
• Restore building of documentation downloads by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1856
• Revise type annotations slightly by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1860
• Updating regex pattern to handle unicode whitespaces. by @jcole-crowdstrike in https://github.com/gitpython-developers/GitPython/pull/1853
• Use upgraded pip in test fixture virtual environment by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1864
• lint: replace flake8 with ruff check by @Borda in https://github.com/gitpython-developers/GitPython/pull/1862
• lint: switch Black with ruff-format by @Borda in https://github.com/gitpython-developers/GitPython/pull/1865
• Update readme and tox.ini for recent tooling changes by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1868
• Split tox lint env into three envs, all safe by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1870
• Slightly broaden Ruff, and update and clarify tool configuration by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1871
• Add a “doc” extra for documentation build dependencies by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1872
• Describe Submodule.__init__ parent_commit parameter by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1877
• Include TagObject in git.types.Tree_ish by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1878
• Improve Sphinx role usage, including linking Git manpages by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1879
• Replace all wildcard imports with explicit imports by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1880
• Clarify how tag objects are usually tree-ish and commit-ish by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1881

New Contributors

• @Gaubbe made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1846
• @can-taslicukur made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1832
• @jcole-crowdstrike made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1853
• @Borda made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1862

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.42...3.1.43

What’s Changed

• Fix release link in changelog by @PeterJCLaw in https://github.com/gitpython-developers/GitPython/pull/1795
• Remove test dependency on sumtypes library by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1798
• Pin Sphinx plugins to compatible versions by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1803
• fix: treeNotSorted issue by @et-repositories in https://github.com/gitpython-developers/GitPython/pull/1799
• Remove git.util.NullHandler by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1807
• Clarify why GIT_PYTHON_GIT_EXECUTABLE may be set on failure by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1810
• Report actual attempted Git command when Git.refresh fails by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1812
• Don’t suppress messages when logging is not configured by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1813
• Pin Python 3.9.16 on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1814
• Have initial refresh use a logger to warn by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1815
• Omit warning prefix in “Bad git executable” message by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1816
• Test with M1 macOS CI runner by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1817
• Bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1818
• Bump Vampire/setup-wsl from 2.0.2 to 3.0.0 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1819
• Remove deprecated section in README.md by @marcm-ml in https://github.com/gitpython-developers/GitPython/pull/1823
• Keep temp files out of project dir and improve cleanup by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1825

New Contributors

• @PeterJCLaw made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1795
• @et-repositories made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1799
• @marcm-ml made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1823

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.41...3.1.42

The details about the Windows security issue can be found in this advisory.

Special thanks go to @EliahKagan who reported the issue and fixed it in a single stroke, while being responsible for an incredible amount of improvements that he contributed over the last couple of months ❤️.

What’s Changed

• Add __all__ in git.exc by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1719
• Set submodule update cadence to weekly by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1721
• Never modify sys.path by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1720
• Bump git/ext/gitdb from 8ec2390 to ec58b7e by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1722
• Revise comments, docstrings, some messages, and a bit of code by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1725
• Use zero-argument super() by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1726
• Remove obsolete note in _iter_packed_refs by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1727
• Reorganize test_util and make xfail marks precise by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1729
• Clarify license and make module top comments more consistent by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1730
• Deprecate compat.is_, rewriting all uses by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1732
• Revise and restore some module docstrings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1735
• Make the rmtree callback Windows-only by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1739
• List all non-passing tests in test summaries by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1740
• Document some minor subtleties in test_util.py by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1749
• Always read metadata files as UTF-8 in setup.py by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1748
• Test native Windows on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1745
• Test macOS on CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1752
• Let close_fds be True on all platforms by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1753
• Fix IndexFile.from_tree on Windows by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1751
• Remove unused TASKKILL fallback in AutoInterrupt by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1754
• Don’t return with operand when conceptually void by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1755
• Group .gitignore entries by purpose by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1758
• Adding dubious ownership handling by @marioaag in https://github.com/gitpython-developers/GitPython/pull/1746
• Avoid brittle assumptions about preexisting temporary files in tests by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1759
• Overhaul noqa directives by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1760
• Clarify some Git.execute kill_after_timeout limitations by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1761
• Bump actions/setup-python from 4 to 5 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1763
• Don’t install black on Cygwin by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1766
• Extract all “import gc” to module level by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1765
• Extract remaining local “import gc” to module level by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1768
• Replace xfail with gc.collect in TestSubmodule.test_rename by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1767
• Enable CodeQL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1769
• Replace some uses of the deprecated mktemp function by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1770
• Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/gitpython-developers/GitPython/pull/1773
• Run some Windows environment variable tests only on Windows by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1774
• Fix TemporaryFileSwap regression where file_path could not be Path by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1776
• Improve hooks tests by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1777
• Fix if items of Index is of type PathLike by @stegm in https://github.com/gitpython-developers/GitPython/pull/1778
• Better document IterableObj.iter_items and improve some subclasses by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1780
• Revert “Don’t install black on Cygwin” by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1783
• Add missing pip in $PATH on Cygwin CI by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1784
• Shorten Iterable docstrings and put IterableObj first by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1785
• Fix incompletely revised Iterable/IterableObj docstrings by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1786
• Pre-deprecate setting Git.USE_SHELL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1782
• Deprecate Git.USE_SHELL by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1787
• In handle_process_output don’t forward finalizer result by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1788
• Fix mypy warning “Missing return statement” by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1789
• Fix two remaining Windows untrusted search path cases by @EliahKagan in https://github.com/gitpython-developers/GitPython/pull/1792

New Contributors

• @marioaag made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1746
• @stegm made their first contribution in https://github.com/gitpython-developers/GitPython/pull/1778

Full Changelog: https://github.com/gitpython-developers/GitPython/compare/3.1.40...3.1.41