← Back to issue list

chore(autogen): bump jinja2

View original Github issue

Metadata

Project
craft-platforms
Number
#111
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #111 bumped Jinja2 in autogen to resolve an OSV; commit 707c3d2 landed the dependency update.

Resolution: closed resolved

Reason: The approved dependency update was merged as commit 707c3d2, resolving the Jinja2-related OSV.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you followed the guidelines for contributing? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [x] Have you successfully run `make lint && make test`? ----- Resolves an OSV.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #111 bumped Jinja2 in autogen to resolve an OSV; commit 707c3d2 landed the dependency update.
stealth/space-bunny-alpha — closed resolved Merged PR #111 in commit 707c3d2, bumping the autogen Jinja2 dependency in uv.lock to 3.1.6 to resolve an OSV advisory.
qwen/qwen3.6-35b-a3b — closed resolved Merged PR to bump jinja2 dependency in autogen to resolve an OSV security vulnerability. Approved by 2 reviewers with passing CI.

Update history

Date Change
created

Related issues

Issue Project State Summary Similarity
#678 chore(autogen): bump jinja2 craft-application merged Merged PR #678 updated Jinja2 to 3.1.6 to address an OSV; resolving commit: 2832f51f.
94%
#275 chore(autogen): bump jinja2 craft-store merged Merged PR #275 (commit c9378f7) bumped jinja2 to 3.1.6 in uv.lock to resolve an OSV advisory. Unrelated minimum-deps test failure fixed separately in #276.
91%
#155 chore: bump jinja2 craft-archives merged Merged PR #155 in commit becbf29, bumping Jinja2 to resolve an OSV advisory.
87%
#1034 chore: bump jinja2 craft-parts merged Merged in commit 841a79aa, updating Jinja2 in uv.lock to resolve an OSV CI error.
85%
#1670 chore(deps): update dependency jinja2 to v3.1.4 [security] - autoclosed charmcraft closed Renovate autoclosed unmerged Jinja2 3.1.4 PR #1670; it was superseded by merged Jinja2 3.1.5 PR #2064 (979176de).
79%
#4789 chore(deps): update dependency jinja2 to v3.1.4 [security] snapcraft merged Merged PR #4789 as commit 3869f7517, upgrading Jinja2 from 3.1.3 to 3.1.4 to remediate CVE-2024-34064.
76%
#1486 chore(deps): update bugfixes charmcraft merged Merged PR #1486 as commit b6e26ca8, updating 12 pinned Python dependencies, including Jinja2 3.1.3, cryptography 41.0.7, lxml 4.9.4, and pytest 7.4.4.
70%