Bump pinned GitPython to 3.1.59

GitPython 3.1.57 is affected by six advisories fixed in 3.1.58
(published 2026-08-07) and five more fixed in 3.1.59 (published
2026-08-10). Pin the latest so the pip-audit gate stays green once the
newer advisories propagate to the audit databases. None of the affected
GitPython APIs are used by this CLI.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>

Author: lelia

CHANGELOG.md

@@ -8,6 +8,12 @@
   `15.10.13`. See the [Coana changelogs](https://docs.coana.tech/changelogs) for
   engine changes.
 
+### Changed: bump pinned GitPython to 3.1.59
+
+- Bumped `GitPython` from `3.1.57` to `3.1.59`, picking up the security fixes
+  released in GitPython 3.1.58 and 3.1.59. None of the affected GitPython APIs
+  are used by this CLI.
+
 ## 2.6.3
 
 ### Fixed: SBOM fetch failures no longer produce empty reports

pyproject.toml

@@ -13,7 +13,7 @@ dependencies = [
     "requests==2.34.2",
     "mdutils==1.8.1",
     "prettytable==3.18.0",
-    "GitPython==3.1.57",
+    "GitPython==3.1.59",
     "packaging==26.2",
     "python-dotenv==1.2.2",
     "socketdev==3.5.0",