Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update jinja2 requirement from ~=2.11 to >=2.11,<4.0 #753

Merged
merged 1 commit into from Jun 7, 2021

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 22, 2021

Updates the requirements on jinja2 to permit the latest version.

Release notes

Sourced from jinja2's releases.

3.0.1

Changelog

Sourced from jinja2's changelog.

Version 3.0.1

Released 2021-05-18

  • Update MarkupSafe dependency to >= 2.0. :pr:1418
  • Mark top-level names as exported so type checking understands imports in user projects. :issue:1426
  • Fix some types that weren't available in Python 3.6.0. :issue:1433
  • The deprecation warning for unneeded autoescape and with_ extensions shows more relevant context. :issue:1429
  • Fixed calling deprecated jinja2.Markup without an argument. Use markupsafe.Markup instead. :issue:1438
  • Calling sync render for an async template uses asyncio.run on Python >= 3.7. This fixes a deprecation that Python 3.10 introduces. :issue:1443

Version 3.0.0

Released 2021-05-11

  • Drop support for Python 2.7 and 3.5.
  • Bump MarkupSafe dependency to >=1.1.
  • Bump Babel optional dependency to >=2.1.
  • Remove code that was marked deprecated.
  • Add type hinting. :pr:1412
  • Use :pep:451 API to load templates with :class:~loaders.PackageLoader. :issue:1168
  • Fix a bug that caused imported macros to not have access to the current template's globals. :issue:688
  • Add ability to ignore trim_blocks using +%}. :issue:1036
  • Fix a bug that caused custom async-only filters to fail with constant input. :issue:1279
  • Fix UndefinedError incorrectly being thrown on an undefined variable instead of Undefined being returned on NativeEnvironment on Python 3.10. :issue:1335
  • Blocks can be marked as required. They must be overridden at some point, but not necessarily by the direct child. :issue:1147
  • Deprecate the autoescape and with extensions, they are built-in to the compiler. :issue:1203
  • The urlize filter recognizes mailto: links and takes extra_schemes (or env.policies["urlize.extra_schemes"]) to recognize other schemes. It tries to balance parentheses within a URL instead of ignoring trailing characters. The parsing in general has been updated to be more efficient and match more cases. URLs without a scheme are linked as https:// instead of http://. :issue:522, 827, 1172, :pr:1195
  • Filters that get attributes, such as map and groupby, can

... (truncated)

Commits
  • 3b3e16f Merge pull request #1445 from pallets/release-3.0.1
  • 4d23bfb release version 3.0.1
  • 77674b9 Merge pull request #1444 from pallets/event-loop
  • 7d0b7ac use asyncio.run
  • 94a6423 Merge pull request #1442 from dannysepler/use-pathlib-in-places
  • 06c646d Use pathlib in some test places
  • 9f5db9a Merge pull request #1440 from pallets/deprecated-markup
  • f562a4f fix deprecated Markup subclass
  • fb564a8 Merge pull request #1436 from pallets/deprecated-extensions
  • b4d31e7 show context for deprecated extensions
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 22, 2021
@dependabot dependabot bot force-pushed the dependabot/pip/master/jinja2-gte-2.11-and-lt-4.0 branch from 528a647 to 11dcd0e Compare June 3, 2021 20:55
@Glandos
Copy link
Member

Glandos commented Jun 3, 2021

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/pip/master/jinja2-gte-2.11-and-lt-4.0 branch from 11dcd0e to f5f771c Compare June 3, 2021 21:22
@Glandos
Copy link
Member

Glandos commented Jun 7, 2021

@dependabot rebase

Updates the requirements on [jinja2](https://github.com/pallets/jinja) to permit the latest version.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@2.11.0...3.0.1)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/master/jinja2-gte-2.11-and-lt-4.0 branch from f5f771c to 75b2b21 Compare June 7, 2021 21:15
@Glandos Glandos merged commit 7f695ca into master Jun 7, 2021
@Glandos Glandos deleted the dependabot/pip/master/jinja2-gte-2.11-and-lt-4.0 branch June 7, 2021 21:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant