chore(autogen): bump jinja2
Metadata
Current evaluation
Merged PR #275 (commit c9378f7) bumped jinja2 to 3.1.6 in uv.lock to resolve an OSV advisory. Unrelated minimum-deps test failure fixed separately in #276.
Resolution: closed resolved
Reason: The PR was merged into main as commit c9378f7 ('chore(autogen): bump jinja2 (#275)'), updating jinja2 to 3.1.6 in uv.lock to fix the OSV. The author confirmed the unrelated minimum-deps test failure was handled in follow-up PR #276.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
-----
Resolves an OSV.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #275 (commit c9378f7) bumped jinja2 to 3.1.6 in uv.lock to resolve an OSV advisory. Unrelated minimum-deps test failure fixed separately in #276. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged craft-store#275 as commit c9378f7, bumping jinja2 to address an OSV. PR #276 separately fixed the minimum-dependency test failure noted during review. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a jinja2 dependency bump to resolve an OSV security vulnerability. Approved by two reviewers, passed CI checks, and modified one file. Related test failures were addressed separately. |
Update history
No update history recorded yet.
Related work
-
Related To:
craft-store#276
(confidence 95%)
Merged follow-up constraining sphinx-rtd-theme's minimum version; lengau noted it resolves the minimum-deps test failure seen in #275.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #678 chore(autogen): bump jinja2 | craft-application | merged | Merged PR #678 updated Jinja2 to 3.1.6 to address an OSV; resolving commit: 2832f51f. | |
| #111 chore(autogen): bump jinja2 | craft-platforms | merged | Merged PR #111 bumped Jinja2 in autogen to resolve an OSV; commit 707c3d2 landed the dependency update. | |
| #1034 chore: bump jinja2 | craft-parts | merged | Merged in commit 841a79aa, updating Jinja2 in uv.lock to resolve an OSV CI error. | |
| #155 chore: bump jinja2 | craft-archives | merged | Merged PR #155 in commit becbf29, bumping Jinja2 to resolve an OSV advisory. | |
| #1670 chore(deps): update dependency jinja2 to v3.1.4 [security] - autoclosed | charmcraft | closed | Renovate autoclosed unmerged Jinja2 3.1.4 PR #1670; it was superseded by merged Jinja2 3.1.5 PR #2064 (979176de). | |
| #4789 chore(deps): update dependency jinja2 to v3.1.4 [security] | snapcraft | merged | Merged PR #4789 as commit 3869f7517, upgrading Jinja2 from 3.1.3 to 3.1.4 to remediate CVE-2024-34064. | |
| #1486 chore(deps): update bugfixes | charmcraft | merged | Merged PR #1486 as commit b6e26ca8, updating 12 pinned Python dependencies, including Jinja2 3.1.3, cryptography 41.0.7, lxml 4.9.4, and pytest 7.4.4. |