Along with gitpython-developers/smmap#59
and a forthcoming related PR in GitPython, this will fix #116.

Add SECURITY.md, referencing GitPython's

Bumps [gitdb/ext/smmap](https://github.com/gitpython-developers/smmap) from `f31bfa3` to `8f82e6c`.
- [Release notes](https://github.com/gitpython-developers/smmap/releases)
- [Commits](gitpython-developers/smmap@f31bfa3...8f82e6c)

---
updated-dependencies:
- dependency-name: gitdb/ext/smmap
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

…es/gitdb/ext/smmap-8f82e6c

Bump gitdb/ext/smmap from `f31bfa3` to `8f82e6c`

The sequence of backoff wait times used in `gitdb.db.loose` is
quadratic rather than exponential, as discussed in:
#115 (comment)

This corrects the variable name by making it more general, and the
comment by having it explicitly describe the backoff as quadratic.

This is conceptually related to GitoxideLabs/gitoxide#1815, but
this is a non-breaking change, as no interfaces are affected: only
a local variable and comment.

Improve description of backoff sequence in `db.loose`

This change is analogous to gitpython-developers/GitPython#2033.
See also gitpython-developers/smmap#60.

Specify explicit `contents: read` workflow permissions

See gitpython-developers/GitPython#2005.

The rationale is that, while this is probably less important to do
in gitdb and smmap, any failure that arises for this in GitPython
would likely raise the question of whether a correspond problem has
begun to occur in gitdb and smmap. (Both gitdb and smmap provide
helpers used in GitPython even when the in-memory object database
is not used, and failures may plausibly occur for reasons other
than code changes because of the finicky nature of concurrency bugs
and the potential for interactions affected by the runner image.)

Add CI test job for no-GIL ("threaded") Python 3.13

Bumps [gitdb/ext/smmap](https://github.com/gitpython-developers/smmap) from `8f82e6c` to `c6b53d3`.
- [Release notes](https://github.com/gitpython-developers/smmap/releases)
- [Commits](gitpython-developers/smmap@8f82e6c...c6b53d3)

---
updated-dependencies:
- dependency-name: gitdb/ext/smmap
  dependency-version: c6b53d35deb82a38d5d07ca7712c1334a7a10c10
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

…es/gitdb/ext/smmap-c6b53d3

Bump gitdb/ext/smmap from `8f82e6c` to `c6b53d3`