← Back to issue list

chore: bump jinja2

View original Github issue

Metadata

Project
craft-parts
Number
#1034
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged in commit 841a79aa, updating Jinja2 in uv.lock to resolve an OSV CI error.

Resolution: closed resolved

Reason: After approval by two reviewers, PR #1034 was merged as commit 841a79aa. The lockfile-only Jinja2 upgrade cleared the reported OSV CI failure.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [x] Have you added an entry to the changelog (`docs/reference/changelog.rst`)? ----- This PR is just the result of `uv lock --upgrade-package jinja2`. Resolves an OSV CI error.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged in commit 841a79aa, updating Jinja2 in uv.lock to resolve an OSV CI error.
stealth/space-bunny-alpha — closed resolved Merged canonical/craft-archives#155, upgrading Jinja2 via uv lock to resolve an OSV CI error.
qwen/qwen3.6-35b-a3b — — Merged a dependency update to bump jinja2, resolving an OSV CI error. The change was generated via uv lock --upgrade-package jinja2, approved by two reviewers, passed all CI checks, and modified two files.
qwen3.6-35b-a3b-mtp-q6 — — Merged a dependency update that bumps jinja2 to resolve an OSV CI error. The change was generated via uv lock --upgrade-package jinja2 and includes required changelog and CLA acknowledgments.

Update history

No update history recorded yet.

Related work

Related issues

Issue Project State Summary Similarity
#275 chore(autogen): bump jinja2 craft-store merged Merged PR #275 (commit c9378f7) bumped jinja2 to 3.1.6 in uv.lock to resolve an OSV advisory. Unrelated minimum-deps test failure fixed separately in #276.
90%
#155 chore: bump jinja2 craft-archives merged Merged PR #155 in commit becbf29, bumping Jinja2 to resolve an OSV advisory.
90%
#678 chore(autogen): bump jinja2 craft-application merged Merged PR #678 updated Jinja2 to 3.1.6 to address an OSV; resolving commit: 2832f51f.
88%
#111 chore(autogen): bump jinja2 craft-platforms merged Merged PR #111 bumped Jinja2 in autogen to resolve an OSV; commit 707c3d2 landed the dependency update.
85%
#1670 chore(deps): update dependency jinja2 to v3.1.4 [security] - autoclosed charmcraft closed Renovate autoclosed unmerged Jinja2 3.1.4 PR #1670; it was superseded by merged Jinja2 3.1.5 PR #2064 (979176de).
75%
#4789 chore(deps): update dependency jinja2 to v3.1.4 [security] snapcraft merged Merged PR #4789 as commit 3869f7517, upgrading Jinja2 from 3.1.3 to 3.1.4 to remediate CVE-2024-34064.
74%
#987 chore: fix CI lint/test blockers and refresh uv.lock craft-providers closed Merged PR #987 refreshed uv.lock and removed duplicate intersphinx overrides from docs/conf.py, fixing docs lint/linkcheck failures and keeping CI green.
70%