gitpython-developers/GitPython 3.1.62 (published 2026-09-07T02:58Z) merges #2225, rejecting unsafe submodule checkout paths — the path-traversal class that lets a crafted `.gitmodules` write outside the repository, and directly relevant to any agent that clones untrusted repos to read them. #2224 keeps worktrees created from a bare repository non-bare, and #2227 (a first-time contributor's fix) joins backslash line continuations when reading config values, which previously truncated multi-line git config entries.