Update GitPython to 3.1.58 to address security vulnerabilities

[amazon-q-developer]

Summary

Updates GitPython minimum version from 3.1.54 to 3.1.58 to address nine GitHub Dependabot security advisories (6 high severity, 3 medium severity).

Changes

• Updated packages/extended-data/pyproject.toml to require gitpython>=3.1.58

Security Context

All reported Dependabot advisories list fixed versions at or below 3.1.58. This change raises the minimum required version to ensure no vulnerable versions can be installed.

Testing

The declared validation suite should be run via CI:

• Lint checks (ruff)
• Type checking (mypy)
• Security audit (pip-audit)
• Tests across Python 3.11-3.14
• Example validation
• Documentation validation
• Package build validation

Lockfile Update Required

After approval, the lockfile should be updated with:

uv lock --upgrade-package gitpython

Notes

• This PR is intentionally assigned to the repository automation lane
• Dependabot alerts will auto-close upon merge; do not manually dismiss
• This is a security-focused minimum version bump with no breaking changes expected

[amazon-q-developer]

Resolves Issue #65

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[jbdevprimary]

Superseded by the reviewed and released GitPython floor update in #79 (now published in extended-data 8.5.4).