From 2a529b4f158cb4be3b0c3d700b795b2375c615c3 Mon Sep 17 00:00:00 2001
From: Muhammad Naufal Mahdi <053792227@ecampus.ut.ac.id>
Date: Thu, 6 Aug 2026 01:06:33 +0700
Subject: [PATCH] Update gitpython to 3.1.58 for security patches

Bumps gitpython from 3.1.45 to 3.1.58.

Fixed vulnerabilities:
- GHSA-rpm5-65cw-6hj4 / PYSEC-2026-2160 / CVE-2026-42215: Command injection via Git options bypass (CVSS 8.8)
- GHSA-x2qx-6953-8485: Unsafe option check validates multi_options before shlex.split (CVSS 9.8)
- GHSA-v87r-6q3f-2j67 / PYSEC-2026-2163: Newline injection in config_writer enables RCE (CVSS 7.8)
- GHSA-7545-fcxq-7j24 / PYSEC-2026-2162: Path traversal in reference APIs (CVSS 7.8)
- GHSA-2f96-g7mh-g2hx: Command injection via long-option prefix abbreviation bypass (CVSS 8.8)
- GHSA-3f7w-8rr8-f37f: Unguarded git option forwarding in IndexFile.checkout() (CVSS 8.1)
- GHSA-3rp5-jjmw-4wv2: git-config section-name injection enables arbitrary config (CVSS 7.0)
- GHSA-539m-9xh6-q6rr: Incomplete unsafe_git_archive_options denylist (CVSS 6.5)
- GHSA-6p8h-3wgx-97gf: Incomplete unsafe_git_clone_options denylist omits --template (CVSS 7.5)
- GHSA-94p4-4cq8-9g67: Environment-variable exfiltration via Repo.create_remote() (CVSS 7.5)
- GHSA-956x-8gvw-wg5v: Command injection via unguarded options in Repo.archive() (CVSS 8.4)
- GHSA-fjr4-x663-mwxc: Arbitrary file overwrite via git diff --output injection (CVSS 8.1)
- GHSA-mv93-w799-cj2w: Newline injection in config_writer section parameter (CVSS 7.0)
- GHSA-p538-c434-8v24: Arbitrary file truncation via git rev-list --output injection (CVSS 5.4)
- GHSA-r9mr-m37c-5fr3: Unsafe git option guard bypass via single-char token smuggling (CVSS 8.8)
- GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars (CVSS 7.5)

Verified with osv-scanner: all 16 gitpython advisories cleared after update.
Only gitpython version changed; no other dependency modifications.
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 4098f5e754..f708adb454 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -20,7 +20,7 @@ dnspython
 editor==1.6.6
 eventlet==0.40.3
 gitdb==4.0.12
-gitpython==3.1.45
+gitpython==3.1.58
 greenlet==3.1.1
 gunicorn<26
 importlib-metadata