fix(refs): keep branch and tag operands out of option parsing

<!-- agent -->
A leading-dash name could change the operation requested by a high-level
API. In particular, `delete_head("--force", branch, force=False)` deleted
an unmerged branch, and renaming a `Head` named `--force` renamed the
current branch instead of rejecting the missing source.

Terminate options before names in branch deletion and rename, remote
reference deletion, and tag creation and deletion. Keep explicit keyword
options and the existing unsafe-option checks. This protects operands as
a class instead of enumerating individual dangerous flags.

Git reference: `builtin/branch.c` and `builtin/tag.c` use `parse_options()`
with support for `--` at Git commit
`12cb6293d6288865c1a133cf22accbaf99d13eb6`.

Assisted-by: GPT 6.0
Co-authored-by: GPT 6.0 <codex@openai.com>

Author: Byron

git/refs/head.py

@@ -166,7 +166,7 @@ def delete(cls, repo: "Repo", *heads: "Union[Head, str]", force: bool = False, *
         flag = "-d"
         if force:
             flag = "-D"
-        repo.git.branch(flag, *heads)
+        repo.git.branch(flag, "--", *heads)
 
     def set_tracking_branch(self, remote_reference: Union["RemoteReference", None]) -> "Head":
         """Configure this branch to track the given remote reference. This will
@@ -241,7 +241,7 @@ def rename(self, new_path: PathLike, force: bool = False) -> "Head":
         if force:
             flag = "-M"
 
-        self.repo.git.branch(flag, self, new_path)
+        self.repo.git.branch(flag, "--", self, new_path)
         self.path = "%s/%s" % (self._common_path_default, new_path)
         return self
 

git/refs/remote.py

@@ -61,7 +61,7 @@ def delete(cls, repo: "Repo", *refs: "RemoteReference", **kwargs: Any) -> None:
         for ref in refs:
             cls._check_ref_name_valid(ref.path)
 
-        repo.git.branch("-d", "-r", *refs)
+        repo.git.branch("-d", "-r", "--", *refs)
         # The official deletion method will ignore remote symbolic refs - these are
         # generally ignored in the refs/ folder. We don't though and delete remainders
         # manually.

git/refs/tag.py

@@ -155,15 +155,15 @@ def create(
         if force:
             kwargs["f"] = True
 
-        args = (path, reference)
+        args = ("--", path, reference)
 
         repo.git.tag(*args, **kwargs)
         return TagReference(repo, "%s/%s" % (cls._common_path_default, path))
 
     @classmethod
     def delete(cls, repo: "Repo", *tags: "TagReference") -> None:  # type: ignore[override]
         """Delete the given existing tag or tags."""
-        repo.git.tag("-d", *tags)
+        repo.git.tag("-d", "--", *tags)
 
 
 # Provide an alias.

test/test_positional_args.py

@@ -4,7 +4,7 @@
 
 import pytest
 
-from git import Git, Remote, Repo
+from git import Actor, Git, GitCommandError, Head, Remote, RemoteReference, Repo, TagReference
 from git.exc import UnsafeOptionError
 
 
@@ -40,3 +40,43 @@ def test_pull_preserves_operand_and_explicit_option_values(tmp_path):
         remote.pull("refs/heads/topic", upload_pack="helper with spaces", allow_unsafe_options=True)
     assert run.call_args[0] == ("pull", "--", remote, ["refs/heads/topic"])
     assert run.call_args[1]["upload_pack"] == "helper with spaces"
+
+
+def test_delete_head_cannot_override_force(tmp_path):
+    repo = Repo.init(tmp_path)
+    actor = Actor("Test", "test@example.com")
+    initial = repo.index.commit("initial", author=actor, committer=actor)
+    branch = repo.create_head("unmerged", initial)
+    branch.commit = repo.index.commit("unmerged", head=False, author=actor, committer=actor)
+    with pytest.raises(GitCommandError):
+        repo.delete_head("--force", branch, force=False)
+    assert branch.is_valid()
+    repo.delete_head(branch, force=True)
+    assert not branch.is_valid()
+
+
+def test_rename_head_cannot_select_current_branch(tmp_path):
+    repo = Repo.init(tmp_path)
+    actor = Actor("Test", "test@example.com")
+    repo.index.commit("initial", author=actor, committer=actor)
+    original = repo.active_branch.name
+    with pytest.raises(GitCommandError):
+        Head(repo, "refs/heads/--force").rename("renamed")
+    assert repo.active_branch.name == original
+
+
+def test_tag_operands_follow_option_terminator(tmp_path):
+    repo = Repo.init(tmp_path)
+    with mock.patch.object(Git, "_call_process") as run:
+        TagReference.create(repo, "topic", "HEAD")
+        assert run.call_args[0] == ("tag", "--", "topic", "HEAD")
+        TagReference.delete(repo, "--list")
+        assert run.call_args[0] == ("tag", "-d", "--", "--list")
+
+
+def test_remote_ref_delete_preserves_operand(tmp_path):
+    repo = Repo.init(tmp_path)
+    ref = RemoteReference(repo, "refs/remotes/--force")
+    with mock.patch.object(Git, "_call_process") as run:
+        RemoteReference.delete(repo, ref)
+    assert run.call_args[0] == ("branch", "-d", "-r", "--", ref)