- update to 3.1.4 (bsc#1223980, CVE-2024-34064):
  * The xmlattr filter does not allow keys with / solidus, >
    greater-than sign, or = equals sign, in addition to disallowing
    spaces. Regardless of any validation done by Jinja, user input
    should never be used as keys to this filter, or must be separately
    validated first.

• Files Changed
• Browse Source

- Disable broken test with latest version of MarkupSafe (2.1.4)
  (gh#pallets/jinja#1930, gh#pallets/markupsafe#417)

• Files Changed
• Browse Source

- update to 3.1.3 (bsc#1218722, CVE-2024-22195):
  * Fix compiler error when checking if required blocks in parent
    templates are xmlattr filter does not allow keys with spaces.
  * Make error messages stemming from invalid nesting of {% trans
    %} blocks more helpful. :pr:`1916`

  - Security issue: Corrected the security fix for the cache folder.
- avoid rebuildcycle with vim
- Add suggests for vim and emacs in their respective

• Files Changed
• Browse Source

- update to 2.11.3
  * Improve the speed of the urlize filter by reducing regex backtracking.
    and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
- drops CVE-2020-28493.patch in older dists

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- update to 3.1.2:
  * Add parameters to ``Environment.overlay`` to match ``__init__``.
  * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`
- specfile:
  * update copyright year
  * require python-base >= 3.7
- update to version 3.1.1:
  * The template filename on Windows uses the primary path separator.
    :issue:`1637`
- changes from version 3.1.0:
  * Drop support for Python 3.6. :pr:`1534`
  * Remove previously deprecated code. :pr:`1544`
    + "WithExtension" and "AutoEscapeExtension" are built-in now.
    + "contextfilter" and "contextfunction" are replaced by
        "pass_context". "evalcontextfilter" and "evalcontextfunction"
        are replaced by "pass_eval_context".  "environmentfilter" and
        "environmentfunction" are replaced by "pass_environment".
    + "Markup" and "escape" should be imported from MarkupSafe.
    + Compiled templates from very old Jinja versions may need to be
        recompiled.
    + Legacy resolve mode for "Context" subclasses is no longer
        supported. Override "resolve_or_missing" instead of "resolve".
    + "unicode_urlencode" is renamed to "url_quote".
  * Add support for native types in macros. :issue:`1510`
  * The "{% trans %}" tag can use "pgettext" and "npgettext" by
      passing a context string as the first token in the tag, like "{%
      trans "title" %}". :issue:`1430`
  * Update valid identifier characters from Python 3.6 to 3.7.
      :pr:`1571`
  * Filters and tests decorated with "@async_variant" are pickleable.
      :pr:`1612`
  * Add "items" filter. :issue:`1561`
  * Subscriptions ("[0]", etc.) can be used after filters, tests, and
      calls when the environment is in async mode. :issue:`1573`
  * The "groupby" filter is case-insensitive by default, matching
      other comparison filters. Added the "case_sensitive" parameter
      to control this. :issue:`1463`
  * Windows drive-relative path segments in template names will not
      result in "FileSystemLoader" and "PackageLoader" loading from
      drive-relative paths. :pr:`1621`

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add no-warnings-as-errors.patch:
  * Do not treat warnings as errors until upstream fix using async loops.

• Files Changed
• Browse Source

- Babel is not required

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Enable testing on other archs again
- Do not pull in py2 package on vim syntax

• Files Changed
• Browse Source

- disable tests on 32bit archs

 
- update to 2.11.1
 * Fix a bug that prevented looking up a key after an attribute
   ({{ data.items[1:] }}) in an async template
 * Drop support for Python 2.6, 3.3, and 3.4. This will be the last version
   to support Python 2.7 and 3.5.
 * Added a new ChainableUndefined class to support getitem and getattr
   on an undefined object.
 * Allow {%+ syntax (with NOP behavior) when lstrip_blocks is disabled.
 * Added a default parameter for the map filter.
 * Exclude environment globals from meta.find_undeclared_variables().
 * Float literals can be written with scientific notation, like 2.56e-3.
 * Int and float literals can be written with the ‘_’ separator
   for legibility, like 12_345.
 * Fix a bug causing deadlocks in LRUCache.setdefault
 * The trim filter takes an optional string of characters to trim.
 * A new jinja2.ext.debug extension adds a {% debug %} tag to quickly dump
   the current context and available filters and tests.
 * Lexing templates with large amounts of whitespace is much faster.
 * Parentheses around comparisons are preserved, so {{ 2 * (3 < 5) }} outputs
   “2” instead of “False”.
 * Add new boolean, false, true, integer and float tests.
 * The environment’s finalize function is only applied to the output of expressions
   (constant or not), not static template data.
 * When providing multiple paths to FileSystemLoader, a template can have
   the same name as a directory.
 * Always return Undefined when omitting the else clause in a {{ 'foo' if bar }}
   expression, regardless of the environment’s undefined class. Omitting

• Files Changed
• Browse Source

- Update to 2.10.3:
  * Fix Python 3.7 deprecation warnings.
  * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933`
  * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050`
  * Fix a typo in Babel entry point in setup.py that was preventing installation.
- Remove merged python38.patch

• Files Changed
• Browse Source

- Add patch to work with python 3.8:
  * python38.patch

• Files Changed
• Browse Source

- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
- Update to 2.9.5 (bsc#1132174, CVE-2016-10745)

• Files Changed
• Browse Source

• Files Changed
• Browse Source