Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 7, 2021

Updates the requirements on jinja2 to permit the latest version.

Release notes

Sourced from jinja2's releases.

3.0.1

Changelog

Sourced from jinja2's changelog.

Version 3.0.1

Released 2021-05-18

  • Update MarkupSafe dependency to >= 2.0. :pr:1418
  • Mark top-level names as exported so type checking understands imports in user projects. :issue:1426
  • Fix some types that weren't available in Python 3.6.0. :issue:1433
  • The deprecation warning for unneeded autoescape and with_ extensions shows more relevant context. :issue:1429
  • Fixed calling deprecated jinja2.Markup without an argument. Use markupsafe.Markup instead. :issue:1438
  • Calling sync render for an async template uses asyncio.run on Python >= 3.7. This fixes a deprecation that Python 3.10 introduces. :issue:1443

Version 3.0.0

Released 2021-05-11

  • Drop support for Python 2.7 and 3.5.
  • Bump MarkupSafe dependency to >=1.1.
  • Bump Babel optional dependency to >=2.1.
  • Remove code that was marked deprecated.
  • Add type hinting. :pr:1412
  • Use :pep:451 API to load templates with :class:~loaders.PackageLoader. :issue:1168
  • Fix a bug that caused imported macros to not have access to the current template's globals. :issue:688
  • Add ability to ignore trim_blocks using +%}. :issue:1036
  • Fix a bug that caused custom async-only filters to fail with constant input. :issue:1279
  • Fix UndefinedError incorrectly being thrown on an undefined variable instead of Undefined being returned on NativeEnvironment on Python 3.10. :issue:1335
  • Blocks can be marked as required. They must be overridden at some point, but not necessarily by the direct child. :issue:1147
  • Deprecate the autoescape and with extensions, they are built-in to the compiler. :issue:1203
  • The urlize filter recognizes mailto: links and takes extra_schemes (or env.policies["urlize.extra_schemes"]) to recognize other schemes. It tries to balance parentheses within a URL instead of ignoring trailing characters. The parsing in general has been updated to be more efficient and match more cases. URLs without a scheme are linked as https:// instead of http://. :issue:522, 827, 1172, :pr:1195
  • Filters that get attributes, such as map and groupby, can

... (truncated)

Commits
  • 3b3e16f Merge pull request #1445 from pallets/release-3.0.1
  • 4d23bfb release version 3.0.1
  • 77674b9 Merge pull request #1444 from pallets/event-loop
  • 7d0b7ac use asyncio.run
  • 94a6423 Merge pull request #1442 from dannysepler/use-pathlib-in-places
  • 06c646d Use pathlib in some test places
  • 9f5db9a Merge pull request #1440 from pallets/deprecated-markup
  • f562a4f fix deprecated Markup subclass
  • fb564a8 Merge pull request #1436 from pallets/deprecated-extensions
  • b4d31e7 show context for deprecated extensions
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [jinja2](https://github.com/pallets/jinja) to permit the latest version.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@2.0rc1...3.0.1)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 7, 2021
@codecov-commenter
Copy link

Codecov Report

Merging #414 (285f704) into main (9ba5eaf) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #414   +/-   ##
=======================================
  Coverage   89.69%   89.69%           
=======================================
  Files          39       39           
  Lines        5209     5209           
=======================================
  Hits         4672     4672           
  Misses        537      537           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9ba5eaf...285f704. Read the comment docs.

@duckontheweb duckontheweb mentioned this pull request Jun 8, 2021
4 tasks
@duckontheweb
Copy link
Contributor

Superseded by #424

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 9, 2021

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/pip/jinja2-lt-4.0 branch June 9, 2021 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants