chore: bump jinja2
Metadata
Current evaluation
Merged PR #155 in commit becbf29, bumping Jinja2 to resolve an OSV advisory.
Resolution: closed resolved
Reason: The maintainer dependency update was approved and merged into the main project as commit becbf29, addressing the reported OSV.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
---
Resolves an OSV.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #155 in commit becbf29, bumping Jinja2 to resolve an OSV advisory. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/craft-archives#155, bumping Jinja2 in one file to resolve an OSV. Approved by two reviewers with no unresolved review comments. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a jinja2 dependency bump to resolve an OSV security vulnerability. The update passed all lint and test checks, received approval from two reviewers, and modified a single file with minimal changes. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1034 chore: bump jinja2 | craft-parts | merged | Merged in commit 841a79aa, updating Jinja2 in uv.lock to resolve an OSV CI error. | |
| #275 chore(autogen): bump jinja2 | craft-store | merged | Merged PR #275 (commit c9378f7) bumped jinja2 to 3.1.6 in uv.lock to resolve an OSV advisory. Unrelated minimum-deps test failure fixed separately in #276. | |
| #678 chore(autogen): bump jinja2 | craft-application | merged | Merged PR #678 updated Jinja2 to 3.1.6 to address an OSV; resolving commit: 2832f51f. | |
| #111 chore(autogen): bump jinja2 | craft-platforms | merged | Merged PR #111 bumped Jinja2 in autogen to resolve an OSV; commit 707c3d2 landed the dependency update. | |
| #4789 chore(deps): update dependency jinja2 to v3.1.4 [security] | snapcraft | merged | Merged PR #4789 as commit 3869f7517, upgrading Jinja2 from 3.1.3 to 3.1.4 to remediate CVE-2024-34064. | |
| #1670 chore(deps): update dependency jinja2 to v3.1.4 [security] - autoclosed | charmcraft | closed | Renovate autoclosed unmerged Jinja2 3.1.4 PR #1670; it was superseded by merged Jinja2 3.1.5 PR #2064 (979176de). | |
| #106 build(deps): bump jinja2 from 3.1.5 to 3.1.6 | imagecraft | merged | Merged as commit 4844f1d, upgrading Jinja2 from 3.1.5 to 3.1.6 to address GHSA-cpwx-vrp4-4pq7. | |
| #897 chore: bump gevent dependency | rockcraft | merged | Merged PR #897 as commit 7b5c9e16, bumping the gevent dependency to address an OSV security finding; all listed CI checks passed. |