3.1.35 - a fix for CVE-2023-41040

What's Changed

• Bump actions/checkout from 3 to 4 by @dependabot in #1643
• Fix 'Tree' object has no attribute '_name' when submodule path is normal path by @CosmosAtlas in #1645
• Fix CVE-2023-41040 by @facutuesca in #1644
• Only make config more permissive in tests that need it by @EliahKagan in #1648
• Added test for PR #1645 submodule path by @CosmosAtlas in #1647
• Fix Windows environment variable upcasing bug by @EliahKagan in #1650

New Contributors

• @CosmosAtlas made their first contribution in #1645
• @facutuesca made their first contribution in #1644

Full Changelog: 3.1.34...3.1.35