chore(deps): update dependency jinja2 to v3.1.6
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| Jinja2 (changelog) | patch |
==3.1.3 -> ==3.1.6
|
Release Notes
pallets/jinja (Jinja2)
v3.1.6
Released 2025-03-05
- The
|attrfilter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7
v3.1.5
Released 2024-12-21
- The sandboxed environment handles indirect calls to
str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h - Escape template name before formatting it into error messages, to avoid
issues with names that contain f-string syntax.
:issue:
1792, :ghsa:gmj6-6f8f-6699 - Sandbox does not allow
clearandpopon known mutable sequence types. :issue:2032 - Calling sync
renderfor an async template usesasyncio.run.🇵🇷 1952 - Avoid unclosed
auto_aiterwarnings.🇵🇷 1960 - Return an
aclose-ableAsyncGeneratorfromTemplate.generate_async.🇵🇷 1960 - Avoid leaving
root_render_func()unclosed inTemplate.generate_async.🇵🇷 1960 - Avoid leaving async generators unclosed in blocks, includes and extends.
🇵🇷 1960 - The runtime uses the correct
concatfunction for the current environment when calling block references. :issue:1701 - Make
|uniqueasync-aware, allowing it to be used after another async-aware filter. :issue:1781 -
|intfilter handlesOverflowErrorfrom scientific notation. :issue:1921 - Make compiling deterministic for tuple unpacking in a
{% set ... %}call. :issue:2021 - Fix dunder protocol (
copy/pickle/etc) interaction withUndefinedobjects. :issue:2025 - Fix
copy/picklesupport for the internalmissingobject. :issue:2027 -
Environment.overlay(enable_async)is applied correctly.🇵🇷 2061 - The error message from
FileSystemLoaderincludes the paths that were searched. :issue:1661 -
PackageLoadershows a clearer error message when the package does not contain the templates directory. :issue:1705 - Improve annotations for methods returning copies.
🇵🇷 1880 -
urlizedoes not addmailto:to values like@a@b.🇵🇷 1870 - Tests decorated with
@pass_context`` can be used with the ``|select`` filter. :issue:1624` - Using
setfor multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. :issue:1413 - Using
setin all branches of{% if %}{% elif %}{% else %}blocks does not cause the variable to be considered initially undefined. :issue:1253
v3.1.4
Released 2024-05-05
- The
xmlattrfilter does not allow keys with/solidus,>greater-than sign, or=equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. :ghsa:h75v-3vvj-5mfj
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.
Edited by Perun-GitLab Service Account