From c37edfa53b593cd7d9f33b60fbb13816d4d1c090 Mon Sep 17 00:00:00 2001
From: bjk7119 <jaekwon.bang@lge.com>
Date: Mon, 14 Sep 2026 10:42:12 +0900
Subject: [PATCH] chore(dependencies): constrain gitpython to secure versions

---
 pyproject.toml       | 1 +
 requirements-dev.txt | 1 +
 2 files changed, 2 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index 46051b5..67d12c6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,6 +37,7 @@ dependencies = [
     "XlsxWriter",
     "PyYAML",
     "fosslight_util>=2.2.12",
+    "GitPython>=3.1.62,<3.2",
     "truststore",
     "python-magic-bin; sys_platform == 'win32'",
     "python-magic; 'darwin' in sys_platform",
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 957a6ca..1840b84 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -5,3 +5,4 @@ pytest-cov
 pytest-xdist
 flake8
 chardet<5.0.0
+GitPython>=3.1.62,<3.2