Skip to content

Commit 5b46888

Browse files
build(deps): 2024-01-11 address vulnerabilities in docs (#386)
* build(deps): bump jinja2 from 2.11.3 to 3.1.3 in /docs Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.3 to 3.1.3. - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.11.3...3.1.3) --- updated-dependencies: - dependency-name: jinja2 dependency-type: direct:production ... UPDATE After dependabot opened PR to bump Jinja the build broke due to other dependencies. I ended up bumping: - sphinx-js - parsimonious - Sphinx To get readthedocs building successfully again --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Abdirahim Musse <33973272+abmusse@users.noreply.github.com>
1 parent 4d61c98 commit 5b46888

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

docs/requirements.txt

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,19 +16,19 @@ idna==3.4
1616
imagesize==1.4.1
1717
# Pin Jinja2 and markupsafe versions
1818
# https://github.com/mozilla/sphinx-js/issues/190
19-
Jinja2==2.11.3
19+
Jinja2==3.1.3
2020
MarkupSafe==2.0.1
2121
packaging==21.3
22-
parsimonious==0.7.0
22+
parsimonious>=0.10.0,<0.11.0
2323
Pygments==2.16.1
2424
pyparsing==3.0.9
2525
pytz==2022.5
2626
requests==2.31.0
2727
six==1.16.0
2828
snowballstemmer==2.2.0
29-
# Use same sphinx version required by sphinx-js 3.1.2
30-
Sphinx==3.5.4
31-
sphinx-js==3.1.2
29+
# Use same sphinx version required by sphinx-js 3.2.1
30+
Sphinx<6.0.0,>=4.1.0
31+
sphinx-js==3.2.1
3232
sphinx-rtd-theme==1.0.0
3333
sphinxcontrib-applehelp==1.0.2
3434
sphinxcontrib-devhelp==1.0.2

0 commit comments

Comments
 (0)