[fix] Fixed releaser to only commit tracked files #552

The releaser tool was using 'git add .' which dangerously adds all files
including potentially private ones. Changed to only add files which
are already tracked and modified during the release process.

Fixes #552

Author: Srinath0916

openwisp_utils/releaser/release.py

@@ -358,8 +358,8 @@ def main():
         ["git", "checkout", "-b", release_branch], check=True, capture_output=True
     )
 
-    print("Adding all changed files to git...")
-    subprocess.run(["git", "add", "."], check=True, capture_output=True)
+    print("Adding tracked changes to git...")
+    subprocess.run(["git", "add", "-u"], check=True, capture_output=True)
 
     commit_message = f"{new_version} release"
     subprocess.run(