Iris Clawd 8cc6e5d225 fix(deps): bump gitpython to >=3.1.60 for PYSEC-2026-3785–3788 ...

Raise gitpython floor from >=3.1.58 to >=3.1.60 in both the workspace
override and crewai-tools[github] to clear pip-audit findings on
PYSEC-2026-3785 through PYSEC-2026-3788 (.gitmodules include disclosure,
config-injection RCE, --separate-git-dir clone, Repo.blame file read).

Drop the gitpython exclude-newer-package cutoff (3.1.60+ is older than
the global 3-day window). Lock resolves to 3.1.61.

Co-authored-by: Vidit Ostwal <viditostwal@gmail.com>

2026-09-04 08:12:43 +00:00

..

cli

Validate JSON crews in project environments (#7171)

2026-09-01 16:00:59 +00:00

crewai

fix: append trailing user turn in native Gemini provider (#6973)

2026-09-03 16:26:44 +05:30

crewai-core

[OSS-149] Accept 1/yes/on on telemetry disable flags (#7185)

2026-09-01 11:41:20 -07:00

crewai-files

fix: bump pypdf to 6.16.2 for GHSA-jp53-mhqp-8xcg (#7200)

2026-09-02 10:38:33 -03:00

crewai-tools

fix(deps): bump gitpython to >=3.1.60 for PYSEC-2026-3785–3788

2026-09-04 08:12:43 +00:00

devtools

feat: bump versions to 1.15.18 (#7136)

2026-08-27 18:00:28 +00:00