Update dependency gitpython to v3.1.62

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
gitpython	3.1.59 → 3.1.62

---

Release Notes

gitpython-developers/GitPython (gitpython)

v3.1.62

Compare Source

What's Changed

• prepare next release by @​Byron in #​2222
• Keep bare-repository worktrees non-bare by @​Byron in #​2224
• Reject unsafe submodule checkout paths by @​Byron in #​2225
• build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.5 in the pre-commit group by @​dependabot[bot] in #​2226
• fix: join backslash line continuations when reading config values by @​nkbeast in #​2227

New Contributors

• @​nkbeast made their first contribution in #​2227

Full Changelog: gitpython-developers/GitPython@3.1.61...3.1.62

v3.1.61

Compare Source

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

• Fix repository discovery precedence by @​Byron in #​2218
• fix: wait for git daemon to listen before connecting by @​Vogtinator in #​2219
• fix: restore Actor.name_email_regex by @​Byron in #​2221

New Contributors

• @​Vogtinator made their first contribution in #​2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

v3.1.60: Security

Compare Source

What's Changed

• prepare changelog prior to release by @​Byron in #​2212
• Preserve Git config escape semantics by @​Byron in #​2213
• Harden diff path and actor identity parsing by @​Byron in #​2215
• Require explicit opt-in for filesystem diffs by @​Byron in #​2217

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[simu]

As far as I can tell, the root cause for the test failures is that GitPython >= 3.1.60 doesn't correctly handle config option core.bare for a bare repo with additional worktrees. According to the git worktree docs (cf. https://git-scm.com/docs/git-worktree#_configuration_file), the core.bare config option should only be applied to the main worktree, but GitPython (cf. https://github.com/gitpython-developers/GitPython/blob/589d8afd0f8e23665f471ac3425a533cbed38801/git/repo/base.py#L382-L387) unconditionally uses that repo-level config option when initializing a git.Repo() instance for any worktree.

[simu]

As far as I can tell, the root cause for the test failures is that GitPython >= 3.1.60 doesn't correctly handle config option core.bare for a bare repo with additional worktrees. According to the git worktree docs (cf. https://git-scm.com/docs/git-worktree#_configuration_file), the core.bare config option should only be applied to the main worktree, but GitPython (cf. https://github.com/gitpython-developers/GitPython/blob/589d8afd0f8e23665f471ac3425a533cbed38801/git/repo/base.py#L382-L387) unconditionally uses that repo-level config option when initializing a git.Repo() instance for any worktree.

Underlying issue fixed in GitPython 3.1.62, the remaining broken test case is a bug in the test.