Git security vulnerabilities announced

[Bakermg]

Discussed in https://github.com/orgs/chocolatey-community/discussions/2619

^{Originally posted by Bakermg February 5, 2025}
Is there a planned date to make available the latest git version 2.48.1. It is advised here to upgrade to this latest version to protect against the vulnerability.

[github-actions]

Thanks for raising this issue!

The packages within this repository are maintained by a small team of volunteer Community Maintainers, in their own time. Their time, like yours is important. Please help them by not wasting it.

This is a community repository where the expectation is that everybody will get involved by raising pull requests to fix problems they find. This will also allow that problem to be fixed more quickly as you don't have to wait for a member of the Community Maintainer Team to pick it up.

If you are unable to fix the issue yourself, the Community Maintainers Team will look at it when time allows. There are no service level agreements, nor should there be any expectation on when people can resolve issues in their own time.

A few dos and don'ts:

• Do provide as much information as you can in any issue that you raise.
• Don't complain that an issue has not yet been picked up or resolved. You are expected to help out in this community maintained repository. If you are unable to do so, don't complain when others don't adhere to your timelines. There is no SLA nor should you have any expectation of one.
• Do read the CONTRIBUTING and COMMITTERS documentation before raising a pull request as it contains valuable information on what automation is used in this repository.
• Do read the Code of Conduct.
• Don't post your frustration in comments. The Community Maintainers Team are not a punching bag for your frustration. You will only end up banned from the repository.

Thank you.
(Automatically posted message)

[corbob]

I've answered this on the discussion here: https://github.com/orgs/chocolatey-community/discussions/2619#discussioncomment-12073508. As the package is not out of date as there is currently no version for Windows, I'll go ahead and close this issue.