← Back to issue list

chore(autogen): bump jinja2

View original Github issue

Metadata

Project
craft-application
Number
#678
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #678 updated Jinja2 to 3.1.6 to address an OSV; resolving commit: 2832f51f.

Resolution: closed resolved

Reason: The dependency update was approved and merged, with commit 2832f51f updating Jinja2 to resolve the reported vulnerability.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? - [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)? --- Resolves an OSV.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #678 updated Jinja2 to 3.1.6 to address an OSV; resolving commit: 2832f51f.
stealth/space-bunny-alpha — closed resolved Merged craft-parts PR #1034 as commit 841a79aa, bumping Jinja2 in two files to resolve an OSV; the update was approved by two reviewers.
stealth/space-bunny-alpha — closed resolved Merged canonical/craft-application#678, updating Jinja2 to resolve an OSV. Approved by two reviewers, with no unresolved review comments.
qwen/qwen3.6-35b-a3b — — Merged a dependency update bumping jinja2 to resolve an OSV. Approved by two reviewers, passed CI, and modified two files with a ten-line change.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#111 chore(autogen): bump jinja2 craft-platforms merged Merged PR #111 bumped Jinja2 in autogen to resolve an OSV; commit 707c3d2 landed the dependency update.
94%
#275 chore(autogen): bump jinja2 craft-store merged Merged PR #275 (commit c9378f7) bumped jinja2 to 3.1.6 in uv.lock to resolve an OSV advisory. Unrelated minimum-deps test failure fixed separately in #276.
92%
#1034 chore: bump jinja2 craft-parts merged Merged in commit 841a79aa, updating Jinja2 in uv.lock to resolve an OSV CI error.
88%
#155 chore: bump jinja2 craft-archives merged Merged PR #155 in commit becbf29, bumping Jinja2 to resolve an OSV advisory.
88%
#1670 chore(deps): update dependency jinja2 to v3.1.4 [security] - autoclosed charmcraft closed Renovate autoclosed unmerged Jinja2 3.1.4 PR #1670; it was superseded by merged Jinja2 3.1.5 PR #2064 (979176de).
81%
#4789 chore(deps): update dependency jinja2 to v3.1.4 [security] snapcraft merged Merged PR #4789 as commit 3869f7517, upgrading Jinja2 from 3.1.3 to 3.1.4 to remediate CVE-2024-34064.
80%
#1486 chore(deps): update bugfixes charmcraft merged Merged PR #1486 as commit b6e26ca8, updating 12 pinned Python dependencies, including Jinja2 3.1.3, cryptography 41.0.7, lxml 4.9.4, and pytest 7.4.4.
74%
#907 chore(merge): 2.1.3 into main craft-parts merged Merged release 2.1.3 into main via #907 at commit 37dd40cb, including the version bump prepared in #906.
70%
#944 chore(merge): 1.19.8 into main craft-parts merged Merged 1.19.8 into main via PR #944 (commit 617aecbc), folding in the 1.19 hotfix branch and its dependency and Python compatibility updates.
70%