chore(deps): update GitPython to 3.2.0

[landrisek-r7]

What

Updates the GitPython dependency to the latest release and aligns the pin across both manifests.

Package	Was	Now
GitPython	3.1.59 (requirements.txt), 3.1.50 (setup.py)	3.2.0

Why

GitPython was declared in two places with different exact pins — requirements.txt (3.1.59) and setup.py install_requires (3.1.50). Both were bumped to 3.2.0 (the current latest) so the runtime and install-time dependency sets stay consistent.

GitPython is used only in version_bump_validator.py (Repo(), remote().refs, tree traversal, blob.data_stream). The 3.2.0 changelog's only breaking changes are dropping Python 3.7 support and deprecating the odbt=GitDB backend — neither applies here (CI runs Python 3.11 and the code never passes odbt).

Verification

• CI green on the current commit: build, Python lint, unit tests, secret scanning, and Cortex/Renovate config checks all pass.
• Only the GitPython pin changed, in both requirements.txt and setup.py; version bumped to 2.47.35 with a changelog entry.

Fixes: SOAR-22160 | SOAR-22161 | SOAR-22162

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[joneill-r7]

in order to release this you need a version bump in the _init_.py and a changelog entry. this has an example #218

[landrisek-r7]

Addressed review feedback: bumped VERSION to 2.47.35 in icon_validator/__init__.py and added a changelog entry in README.md (following the pattern from #218). Ready for re-review, @joneill-r7.

[igorski-r7]

Let's not mention vulnerabilities etc as its public library 😃

Suggested change

	* 2.47.35 - Updated dependencies to resolve Snyk vulnerabilities (`GitPython` 3.1.60)
	* 2.47.35 - Updated dependencies (`GitPython` 3.1.60)

[lcwiklinski-r7]

How about bumping it to at least 3.1.62?

[lcwiklinski-r7]

Since it's a public repo I would suggest to use just a Updated dependencies or similarly like in https://github.com/rapid7/icon-integrations-validators/pull/220/changes#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5L66

[igorski-r7]

LGTM, but probably worth testing with building it locally and running over an example plugin 😃

[landrisek-r7]

@lcwiklinski-r7 both points addressed in the latest commit: bumped GitPython to 3.2.0 (above the suggested 3.1.62) and simplified the changelog wording to just "Updated dependencies". Mind converting to an approval if it looks good? 🙏

[lcwiklinski-r7]

lgtm, make sure to align description and test it