search

olympus-fergus / dvpwa

Damn Vulnerable Python Web App
MIT License
0 stars 1 forks source link

Bump jinja2 from 2.10 to 3.0.2 #25

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps jinja2 from 2.10 to 3.0.2.

Release notes

Sourced from jinja2's releases.

3.0.2

3.0.1

3.0.0

New major versions of all the core Pallets libraries, including Jinja 3.0, have been released! :tada:

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

3.0.0rc2

Fixes an issue with the deprecated Markup subclass, #1401.

3.0.0rc1

2.11.3

This contains a fix for a speed issue with the urlize filter. urlize is likely to be called on untrusted user input. For certain inputs some of the regular expressions used to parse the text could take a very long time due to backtracking. As part of the fix, the email matching became slightly stricter. The various speedups apply to urlize in general, not just the specific input cases.

2.11.2

2.11.1

This fixes an issue in async environment when indexing the result of an attribute lookup, like {{ data.items[1:] }}.

2.11.0

This is the last version to support Python 2.7 and 3.5. The next version will be Jinja 3.0 and will support Python 3.6 and newer.

2.10.3

2.10.2

... (truncated)

Changelog

Sourced from jinja2's changelog.

Version 3.0.2

Released 2021-10-04

  • Fix a loop scoping bug that caused assignments in nested loops to still be referenced outside of it. :issue:1427
  • Make compile_templates deterministic for filter and import names. :issue:1452, 1453
  • Revert an unintended change that caused Undefined to act like StrictUndefined for the in operator. :issue:1448
  • Imported macros have access to the current template globals in async environments. :issue:1494
  • PackageLoader will not include a current directory (.) path segment. This allows loading templates from the root of a zip import. :issue:1467

Version 3.0.1

Released 2021-05-18

  • Update MarkupSafe dependency to >= 2.0. :pr:1418
  • Mark top-level names as exported so type checking understands imports in user projects. :issue:1426
  • Fix some types that weren't available in Python 3.6.0. :issue:1433
  • The deprecation warning for unneeded autoescape and with_ extensions shows more relevant context. :issue:1429
  • Fixed calling deprecated jinja2.Markup without an argument. Use markupsafe.Markup instead. :issue:1438
  • Calling sync render for an async template uses asyncio.run on Python >= 3.7. This fixes a deprecation that Python 3.10 introduces. :issue:1443

Version 3.0.0

Released 2021-05-11

  • Drop support for Python 2.7 and 3.5.
  • Bump MarkupSafe dependency to >=1.1.
  • Bump Babel optional dependency to >=2.1.
  • Remove code that was marked deprecated.
  • Add type hinting. :pr:1412
  • Use :pep:451 API to load templates with :class:~loaders.PackageLoader. :issue:1168
  • Fix a bug that caused imported macros to not have access to the current template's globals. :issue:688

... (truncated)

Commits
  • b7d12b6 Merge pull request #1506 from pallets/release-3.0.2
  • 76c9cf8 release version 3.0.2
  • 28ef40c Merge pull request #1505 from pallets/package-loader-path
  • 8931077 omit curdir from PackageLoader root path
  • 355ef53 Merge pull request #1495 from daniel-stoneuk/patch-async-globals
  • baff54f imported macros can access template globals in async mode
  • fb9cac6 Merge pull request #1504 from pallets/update-requirements
  • ad1ebe3 apply pyupgrade
  • c287f61 update pre-commit hooks
  • 28c7d49 update requirements
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #31.