Bump gitpython to 3.1.62 and soupsieve to 2.9.2

The pip-audit step in the Unit Tests job has been failing on main since
2.9.1. Three advisories landed against the pinned gitpython 3.1.59
(CVE-2026-87817/87818/87819, all fixed in 3.1.60) and two against the
transitive soupsieve 2.8.4 (fixed in 2.9).

Also normalize the gitpython requirement to its lowercase PEP 503 name.
It was the only mixed-case pin in pyproject.toml, and Dependabot's uv
updater has been failing on it with dependency_file_content_not_changed
while successfully updating every other dependency in the same run --
which is why this wave never produced an automated bump PR.

Author: lelia

CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 2.9.5
+
+### Changed: bump pinned gitpython to 3.1.62 and soupsieve to 2.9.2
+
+- Bumped `gitpython` from `3.1.59` to `3.1.62`, picking up the fixes for
+  CVE-2026-87817, CVE-2026-87818 and CVE-2026-87819. Of the three, only the
+  `Actor.name_email_regex` denial of service is reachable from this CLI, which
+  reads commit author and committer fields on every scan; the other two require
+  GitPython APIs the CLI does not call.
+- Bumped the transitive `soupsieve` pin from `2.8.4` to `2.9.2`, clearing
+  GHSA-gjv8-xp57-g29c and GHSA-j934-xhv5-fg8f.
+- Normalized the `gitpython` requirement in `pyproject.toml` to its lowercase
+  PEP 503 name. It was the only mixed-case pin in the project, and Dependabot's
+  uv updater had been failing on it with `dependency_file_content_not_changed`
+  while updating every other dependency in the same run.
+
 ## 2.9.4
 
 ### Changed: bump pinned @coana-tech/cli to 15.10.46

pyproject.toml

@@ -6,14 +6,14 @@ build-backend = "hatchling.build"
 
 [project]
 name = "socketsecurity"
-version = "2.9.4"
+version = "2.9.5"
 requires-python = ">= 3.11"
 license = {"file" = "LICENSE"}
 dependencies = [
     "requests==2.34.2",
     "mdutils==1.8.1",
     "prettytable==3.18.0",
-    "GitPython==3.1.59",
+    "gitpython==3.1.62",
     "packaging==26.3",
     "python-dotenv==1.2.3",
     "socketdev==3.6.0",

socketsecurity/__init__.py

@@ -1,3 +1,3 @@
 __author__ = 'socket.dev'
-__version__ = '2.9.4'
+__version__ = '2.9.5'
 USER_AGENT = f'SocketPythonCLI/{__version__}'