codeflash-ai/codeflash-agent
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
codeflash-agent/packages/codeflash-python/changelogs/fix-dependabot-python-version.md
Kevin Turcios 1e8cbbede4
Fix Dependabot resolver and bump GitPython for security (#42) 
* Fix Dependabot security updates and bump GitPython to 3.1.47+

Dependabot's uv ecosystem resolver was inferring Python 3.9 from the
workspace root's requires-python, then failing because sub-packages
require >=3.12. Adding .python-version=3.12 tells the resolver to use
a compatible Python. Also bumps gitpython>=3.1.47 to resolve the two
open security advisories (GHSA unsafe option check, command injection).

* Bump codeflash-core and codeflash-python versions for release
2026-04-28 20:28:42 -05:00

108 B
Raw Blame History

Fixes

  • Bump gitpython>=3.1.47 to resolve security advisories (unsafe option check, command injection)