Safety issues up to 2024-02-18

Signed-off-by: Andreas Maier <[email protected]>
zhmcclient · Feb 18, 2024 · 8d53f6b · 8d53f6b
1 parent 241132d
commit 8d53f6b
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 3 deletions.
diff --git a/.safety-policy.yml b/.safety-policy.yml
@@ -46,6 +46,8 @@ security:
             reason: Fixed GitPython version 3.1.35 requires Python>=3.7 and is used there
         62044:
             reason: Fixed pip version 23.3 requires Python>=3.7 and is used there
+        64227:
+            reason: Fixed Jinja2 version 3.1.3 requires Python>=3.7 and is used there
 
     # Continue with exit code 0 when vulnerabilities are found.
     continue-on-vulnerability-error: False
diff --git a/docs/changes.rst b/docs/changes.rst
@@ -28,7 +28,7 @@ Released: not yet
 
 **Bug fixes:**
 
-* Addressed safety issues up to 2024-02-11.
+* Addressed safety issues up to 2024-02-18.
 
 * Docs: Increased minimum Sphinx versions to 7.1.0 on Python 3.8 and to 7.2.0 on
   Python >=3.9 and adjusted dependent package versions in order to fix a version

diff --git a/minimum-constraints.txt b/minimum-constraints.txt
@@ -48,7 +48,8 @@ urllib3==1.26.18
 jsonschema==3.2.0
 six==1.14.0; python_version <= '3.9'
 six==1.16.0; python_version >= '3.10'
-Jinja2==3.0.0
+Jinja2==3.0.3; python_version == '3.6'
+Jinja2==3.1.3; python_version >= '3.7'
 # PyYAML is also used by dparse
 PyYAML==5.3.1
 

diff --git a/requirements.txt b/requirements.txt
@@ -16,7 +16,8 @@ prometheus-client>=0.19.0; python_version >= '3.8'
 
 urllib3>=1.25.18
 jsonschema>=3.2.0
-Jinja2>=3.0.0
+Jinja2>=3.0.3; python_version == '3.6'
+Jinja2>=3.1.3; python_version >= '3.7'
 
 # PyYAML 5.3.x has wheel archives for Python 2.7, 3.5 - 3.9
 # PyYAML 5.4.x has wheel archives for Python 2.7, 3.6 - 3.9