Pin markupsafe to prevent CI failures

[tunetheweb]

Brief summary of the change made

Fixes #2684

Are there any other side effects of this change that we should be aware of?

Should unpin when dependencies update

Pull Request checklist

• Please confirm you have completed any of the necessary steps below.

• Included test cases to demonstrate any code changes, which may be one or more of the following:

  • .yml rule test cases in test/fixtures/rules/std_rule_cases.
  • .sql/.yml parser test cases in test/fixtures/dialects (note YML files can be auto generated with tox -e generate-fixture-yml).
  • Full autofix test cases in test/fixtures/linter/autofix.
  • Other.

• Added appropriate documentation for the change.

• Created GitHub issues for any relevant followup/future enhancements if appropriate.

[codecov]

Codecov Report

Merging #2685 (c059835) into main (f600224) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##              main     #2685   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files          163       163           
  Lines        12023     12023           
=========================================
  Hits         12023     12023           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f600224...c059835. Read the comment docs.

[barrywhart]

I'm unclear: what code is using markup_safe and soft_unicode? I searched our code and didn't find any usage, so I assume it's a second-level dependency?

[tunetheweb]

A little package called Jinja2. And the fact DBT is using a really old version of it!

Any chatter on dbt slack on this?

[tunetheweb]

dbt-labs/dbt-core#4746

[barrywhart]

I don't see anything on Slack, but I'm only in a few channels. I'll try a search.