Commits on Apr 28, 2026

1. prevent out-of-repo access when manipulating references. …

   This previously made it possible to create, modify and delete files outside outside
   of the repository, which is a problem if inputs aren't trusted.
   
   Co-authored-by: Sebastian Thiel <sebastian.thiel@icloud.com>

   

   codex and Byron committed Apr 28, 2026
   Configuration menu

   Copy the full SHA

   View commit details

   Browse the repository at this point in the history

2. address review feedback and CI failures …

   Consolidate follow-up fixes from review and CI:
   
   - fix lint and mypy issues in reference log path handling
   - validate remote reference paths before invoking git branch deletion
   - add symlink escape coverage where realpath resolves symlinks
   - ensure temporary test repositories release git resources during cleanup
   
   Co-authored-by: Sebastian Thiel <sebastian.thiel@icloud.com>

   

   codex and Byron committed Apr 28, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for 4af8463
   • Browse repository at this point

   Copy the full SHA

   4af8463 View commit details

3. Merge pull request #2134 from gitpython-developers/validate-ref-creation …

   prevent out-of-repo access when manipulating references.

   

   Byron authored Apr 28, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for dbfa264
   • Browse repository at this point

   Copy the full SHA

   dbfa264 View commit details

   Browse the repository at this point in the history

4. a new release with safer reference creation

   

   Byron committed Apr 28, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for 5a15361
   • Browse repository at this point

   Copy the full SHA

   5a15361 View commit details

   Browse the repository at this point in the history