Skip to content

feat: bump GitPython to 3.1.58 (fix high GHSA-3f7w-8rr8-f37f) (backport #2879) - #2880

Merged
thebaptiste merged 2 commits into
release_2.3from
mergify/bp/release_2.3/pr-2879
Aug 7, 2026
Merged

feat: bump GitPython to 3.1.58 (fix high GHSA-3f7w-8rr8-f37f) (backport #2879)#2880
thebaptiste merged 2 commits into
release_2.3from
mergify/bp/release_2.3/pr-2879

Conversation

@mergify

@mergify mergify Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Also fixed moderate GHSA-539m-9xh6-q6rr and GHSA-p538-c434-8v24


This is an automatic backport of pull request #2879 done by Mergify.

Also fixed moderate GHSA-539m-9xh6-q6rr and GHSA-p538-c434-8v24

(cherry picked from commit d4ded7b)

# Conflicts:
#	.metwork-framework/components.md
@mergify mergify Bot added the conflicts label Aug 6, 2026
@mergify

mergify Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Cherry-pick of d4ded7b has failed:

On branch mergify/bp/release_2.3/pr-2879
Your branch is up to date with 'origin/release_2.3'.

You are currently cherry-picking commit d4ded7b.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   layers/layer7_python3_devtools/0500_extra_python_packages/requirements3.txt

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   .metwork-framework/components.md

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

@sonarqubecloud

sonarqubecloud Bot commented Aug 6, 2026

Copy link
Copy Markdown

@thebaptiste
thebaptiste merged commit 5b6f1ba into release_2.3 Aug 7, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant