diff --git a/requirements-release.txt b/requirements-release.txt index e1454d3a..92e5ac84 100644 --- a/requirements-release.txt +++ b/requirements-release.txt @@ -1,7 +1,3 @@ python-semantic-release == 10.6.* -# GitPython 3.1.60 dropped Actor.name_email_regex, which python-semantic-release -# 10.6.1 still references; the release bump dies with -# "type object 'Actor' has no attribute 'name_email_regex'" before it does any -# git work. PSR depends on `gitpython~=3.0`, so the bad version floats in on a -# fresh install. Unpin once PSR ships a release compatible with 3.1.60+. -GitPython == 3.1.59 +# Floor past the GitPython RCE fixes (GHSA-f9j4-qggq-h239, GHSA-83vg-56qc-22m7). +GitPython >= 3.2.1