Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update jinja2 per CVE-2024-22195 #9619

Merged
merged 1 commit into from
Jan 18, 2024
Merged

update jinja2 per CVE-2024-22195 #9619

merged 1 commit into from
Jan 18, 2024

Conversation

geekosaur
Copy link
Collaborator

As reported via dependabot.

Template Β: This PR does not modify cabal behaviour (documentation, tests, refactoring, etc.)

Include the following checklist in your PR:

@geekosaur
Copy link
Collaborator Author

Should this be backported?

@Kleidukos
Copy link
Member

It looks reasonable for backport, since we still maintain the 3.10 branch of the documentation.

@geekosaur
Copy link
Collaborator Author

@mergify backport 3.10

Copy link
Contributor

mergify bot commented Jan 16, 2024

backport 3.10

✅ Backports have been created

@geekosaur geekosaur added merge me Tell Mergify Bot to merge and removed attention: needs-review labels Jan 16, 2024
@mergify mergify bot added the merge delay passed Applied (usually by Mergify) when PR approved and received no updates for 2 days label Jan 18, 2024
@mergify mergify bot merged commit 9712115 into master Jan 18, 2024
13 checks passed
@mergify mergify bot deleted the cve-2024-22195 branch January 18, 2024 23:05
mergify bot added a commit that referenced this pull request Jan 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
merge delay passed Applied (usually by Mergify) when PR approved and received no updates for 2 days merge me Tell Mergify Bot to merge
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants