build(deps): bump pygit2 from 1.19.3 to 1.20.0 in /scripts/git-review-rebase

[dependabot]

Bumps pygit2 from 1.19.3 to 1.20.0.

Release notes

Sourced from pygit2's releases.

1.20.0 (2026-08-08)

• New RemoteCallbacks.custom_headers() #1465

• New rebase API: Repository.rebase_init(...), Repository.rebase_open(...), Rebase, and RebaseOperation #1483

• Fix Config.snapshot() for non-repository configs, allow PathLike in Config.__init__(), and improve config documentation #1468

• Fix UnicodeDecodeError with non-UTF-8 file paths in Repository.status(), DiffFile.path, index paths, checkout callbacks, and related APIs #1451 #1469

• Fix enums.CheckoutStrategy.CONFLICT_STYLE_ZDIFF3, which was mistakenly bound to the DIFF3 constant #1483

• Fix crashes and reference-lifetime bugs in custom refdb backends #1471 #1474 #1475 #1476

• Update wheels to libgit2 1.9.6 and OpenSSL 3.5.7

• Add riscv64 wheels #1463

Breaking changes:

• Remove deprecated pygit2.legacyenums module and GIT_* constants, use pygit2.enums instead

• Remove deprecated support for passing str to Repository.merge(...), pass a Commit, Oid, or Reference object instead

• Repository.merge_file_from_index(...) now returns MergeFileResult by default; pass use_deprecated=True for the previous string return, now deprecated.

• Remove deprecated Remote.ls_remotes(...), use Remote.list_heads(...) instead

• Remove pygit2.to_bytes(...) and pygit2.to_str(...); they were undocumented accidental public APIs

Changelog

Sourced from pygit2's changelog.

1.20.0 (2026-08-08)

• New RemoteCallbacks.custom_headers() #1465

• New rebase API: Repository.rebase_init(...), Repository.rebase_open(...), Rebase, and RebaseOperation #1483

• Fix Config.snapshot() for non-repository configs, allow PathLike in Config.__init__(), and improve config documentation #1468

• Fix UnicodeDecodeError with non-UTF-8 file paths in Repository.status(), DiffFile.path, index paths, checkout callbacks, and related APIs #1451 #1469

• Fix enums.CheckoutStrategy.CONFLICT_STYLE_ZDIFF3, which was mistakenly bound to the DIFF3 constant #1483

• Fix crashes and reference-lifetime bugs in custom refdb backends #1471 #1474 #1475 #1476

• Update wheels to libgit2 1.9.6 and OpenSSL 3.5.7

• Add riscv64 wheels #1463

Breaking changes:

• Remove deprecated pygit2.legacyenums module and GIT_* constants, use pygit2.enums instead

• Remove deprecated support for passing str to Repository.merge(...), pass a Commit, Oid, or Reference object instead

• Repository.merge_file_from_index(...) now returns MergeFileResult by default; pass use_deprecated=True for the previous string return, now deprecated.

• Remove deprecated Remote.ls_remotes(...), use Remote.list_heads(...) instead

• Remove pygit2.to_bytes(...) and pygit2.to_str(...); they were undocumented accidental public APIs

Commits

• ba21cf5 Release 1.20.0
• 28be4b8 Fix refcount test failing under pytest assertion rewriting
• 007c562 Fix NULL dereference in refdb backend exists callback
• 5878864 Fix ownership and lifetime bugs in refdb backend callbacks
• 2efb706 Update wheels to OpenSSL 3.5.7
• cc48ea6 Fix ownership and error handling bugs in refdb backend callbacks
• 997c65b Fix the refdb backend rename callback
• eb512d2 Fix refcounting bugs in the refdb backend write callback
• 258bf55 chore(CI): bump actions/setup-python from 6 to 7 in the actions group
• b7fdcd6 encoding: drop public to_str, rename internal helper to path_to_str
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)