WSL/tools/devops at f69bb9336308054575a12f8676beef38aa464fda - WSL

mirror of https://github.com/microsoft/WSL.git synced 2026-05-31 05:47:06 -05:00

Files

Ben Hillis f69bb93363 Bump GitPython to 3.1.49 to fix Dependabot alerts (#40472 )

Addresses CVEs in GitPython <= 3.1.48:

- Path traversal in reference APIs (patched in 3.1.48)

- Newline injection in config_writer().set_value() enabling RCE via core.hooksPath (patched in 3.1.49)

Co-authored-by: Ben Hillis <benhill@ntdev.microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-05-08 23:46:53 +00:00

create-change.py

Update localization and notice scripts to target the branch that the pipeline is running on (#14492 )

2026-03-20 13:46:49 -07:00

create-release.py

Fix UnicodeEncodeError in create-release.py on cp1252 consoles (#40127 )

2026-04-07 19:11:27 +00:00

find-release.py

Remove explicit '--tags' argument from find-release.py (#13481 )

2025-09-17 11:27:21 -07:00

requirements.txt

Bump GitPython to 3.1.49 to fix Dependabot alerts (#40472 )