Rip&Tear fc1cc1dd78 fix(deps): bump gitpython to 3.1.58 in crewai-tools[github] ...

gitpython 3.1.57 has GHSA-9rj7-rf2p-w77r, GHSA-4gmw-gg2m-w46p,
GHSA-hh9p-6wh2-4mfc, GHSA-wvpp-8hx9-p66j and GHSA-jm78-9fvv-mhgr
(further unguarded git option forwarding / arbitrary file read via
--pathspec-from-file). All are fixed in 3.1.58, which the root
override-dependencies already require; align the crewai-tools github
extra with it and regenerate the lockfile.

2026-08-09 22:30:48 +08:00

1.6 MiB

Raw Blame History

View Raw