Bump pygit2 from 1.17.0 to 1.18.1

[dependabot]

Bumps pygit2 from 1.17.0 to 1.18.1.

Changelog

Sourced from pygit2's changelog.

1.18.1 (2025-07-26)

• Update wheels to libgit2 1.9.1 and OpenSSL 3.3

• New Index.remove_directory(...) #1377

• New Index.add_conflict(...) #1382

• Now Repository.merge_file_from_index(...) returns a MergeFileResult object when called with use_deprecated=False #1376

• Typing improvements #1369 #1370 #1371 #1373 #1384 #1386

Deprecations:

• Update your code:

  # Before
  contents = Repository.merge_file_from_index(...)
  Now
  result = Repository.merge_file_from_index(..., use_deprecated=False)
  
  contents = result.contents
  
  

  At some point in the future use_deprecated=False will be the default.

1.18.0 (2025-04-24)

• Upgrade Linux Glibc wheels to manylinux_2_28

• Add RemoteCallbacks.push_transfer_progress(...) callback #1345

• New bool(oid) #1347

• Now Repository.merge(...) accepts a commit or reference object #1348

• New threads optional argument in Remote.push(...)

... (truncated)

Commits

• ffe28ac Release 1.18.1
• 1978e14 add mypy ci step
• 7fbdc1d fix typing in pygit2/init.py
• 4503f5a fix typing in pygit2/blob.py
• 5911b0c typing: ignore some errors
• 650141d fix mypy issue in pygit2/filter.py
• 0e95587 fix and silence typing in repository
• 0df1e17 typing: submodules
• 570cdef improve typing: add constants
• 867a065 test_add_conflict xfail in macos
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)