From b723c7863f95cd8bb55688131ab88ce755aa5df3 Mon Sep 17 00:00:00 2001
From: Pawel Lebioda <pawel.lebioda@percona.com>
Date: Mon, 10 Aug 2026 16:33:45 +0200
Subject: [PATCH] Bump GitPython to 3.1.59 to fix security scan

pip-audit flagged 5 known vulnerabilities in GitPython 3.1.57
(GHSA-9rj7-rf2p-w77r, GHSA-4gmw-gg2m-w46p, GHSA-hh9p-6wh2-4mfc,
GHSA-wvpp-8hx9-p66j, GHSA-jm78-9fvv-mhgr), all fixed in 3.1.58.
Pin to the latest 3.1.59.
---
 pyproject.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pyproject.toml b/pyproject.toml
index 2219975..14c3c8f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ dependencies = [
     "click==8.3.3",
     "PyYAML>=6.0.0",
     "jinja2==3.1.6",
-    "GitPython==3.1.57",
+    "GitPython==3.1.59",
     "python-dotenv>=1.2.2,<2",
     "rich==14.2.0",
     "pygithub==2.8.1",