fix: update gitpython dependency to 3.1.60

[pb82]

SUMMARY

Updating GitPython to 3.1.60

ISSUE TYPE

• Bug, Docs Fix or other nominal change

COMPONENT NAME

• API

STEPS TO REPRODUCE AND EXTRA INFO

devel

Summary by CodeRabbit

• Chores

  • Updated the minimum GitPython requirement and locked version.
  • Added pinned nh3 and regex packages required by application components.
  • Simplified package source annotations in the locked requirements file.

• Documentation

  • Added license documentation for the newly included packages.
  • Included MIT licensing details for nh3 and Apache 2.0 and related attribution information for regex.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 14ce6756-2c49-4583-9c80-b0c18812c855

📥 Commits

Reviewing files that changed from the base of the PR and between 9d758f0 and 6e7defa.

📒 Files selected for processing (2)

• requirements/requirements.in
• requirements/requirements.txt

Included review availability: Your plan provides up to 10 included reviews per hour; 8 remain after this review.

---

📝 Walkthrough

Walkthrough

The requirements update raises the minimum GitPython version, refreshes the locked GitPython version, adds two pinned dependencies, simplifies a lockfile comment, and adds license notices for the new dependencies.

Changes

Dependency and license refresh

Layer / File(s)	Summary
Requirements updates requirements/requirements.in, requirements/requirements.txt	The minimum GitPython constraint changes to >=3.1.60 with a CVE annotation. The lockfile updates GitPython to 3.1.62, adds nh3==0.3.7 and regex==2026.9.10, and simplifies the python-daemon source comment.
Dependency license notices licenses/nh3.txt, licenses/regex.txt	Adds the MIT license notice for nh3 and license documentation for regex, including its source and Apache 2.0 licensing details.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: stevensonmichel

Merge Risk: ⚪ Minimal · up to 6e7de

The dependency constraints, lockfile versions, and license notices are aligned, so the change is ready to merge with normal checks.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the main change: updating the GitPython dependency to version 3.1.60.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch update-gitpython-3.1.60

---

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud