Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: gitpython-developers/GitPython
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 3.1.47
Choose a base ref
...
head repository: gitpython-developers/GitPython
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 3.1.48
Choose a head ref
  • 4 commits
  • 7 files changed
  • 2 contributors

Commits on Apr 28, 2026

  1. prevent out-of-repo access when manipulating references. 

    This previously made it possible to create, modify and delete files outside outside
of the repository, which is a problem if inputs aren't trusted.

Co-authored-by: Sebastian Thiel <sebastian.thiel@icloud.com>
    @codex @Byron
    codex and Byron committed Apr 28, 2026
    Configuration menu
    Copy the full SHA
    25ba54d View commit details
    Browse the repository at this point in the history

  2. address review feedback and CI failures 

    Consolidate follow-up fixes from review and CI:

- fix lint and mypy issues in reference log path handling
- validate remote reference paths before invoking git branch deletion
- add symlink escape coverage where realpath resolves symlinks
- ensure temporary test repositories release git resources during cleanup

Co-authored-by: Sebastian Thiel <sebastian.thiel@icloud.com>
    @codex @Byron
    codex and Byron committed Apr 28, 2026
    Configuration menu
    Copy the full SHA
    4af8463 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #2134 from gitpython-developers/validate-ref-creation 

    prevent out-of-repo access when manipulating references.
    @Byron
    Byron authored Apr 28, 2026
    Configuration menu
    Copy the full SHA
    dbfa264 View commit details
    Browse the repository at this point in the history

  4. a new release with safer reference creation

    @Byron
    Byron committed Apr 28, 2026
    Configuration menu
    Copy the full SHA
    5a15361 View commit details
    Browse the repository at this point in the history
Loading