From d7071572a8aaee49ee0d9bdc714883069c995d51 Mon Sep 17 00:00:00 2001
From: Nathy MacKinlay <61921733+waninggibbon@users.noreply.github.com>
Date: Fri, 23 Oct 2026 15:09:53 -0700
Subject: [PATCH] chore(deps): require GitPython >= 3.2.1 for release tooling

Signed-off-by: Nathy MacKinlay <61921733+waninggibbon@users.noreply.github.com>
---
 requirements-release.txt | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/requirements-release.txt b/requirements-release.txt
index e1454d3a..92e5ac84 100644
--- a/requirements-release.txt
+++ b/requirements-release.txt
@@ -1,7 +1,3 @@
 python-semantic-release == 10.6.*
-# GitPython 3.1.60 dropped Actor.name_email_regex, which python-semantic-release
-# 10.6.1 still references; the release bump dies with
-# "type object 'Actor' has no attribute 'name_email_regex'" before it does any
-# git work. PSR depends on `gitpython~=3.0`, so the bad version floats in on a
-# fresh install. Unpin once PSR ships a release compatible with 3.1.60+.
-GitPython == 3.1.59
+# Floor past the GitPython RCE fixes (GHSA-f9j4-qggq-h239, GHSA-83vg-56qc-22m7).
+GitPython >= 3.2.1