Merge pull request #1049 from dbt-labs/update-jinja-dep

Update Jinja2 dependency to >= 3.1.3
dbt-labs · Feb 27, 2024 · 945d0ba · 945d0ba
2 parents 07322ca + 459c585
commit 945d0ba
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.changes/unreleased/Dependencies-20240226-171347.yaml b/.changes/unreleased/Dependencies-20240226-171347.yaml
@@ -0,0 +1,6 @@
+kind: Dependencies
+body: Update Jinja2 past 3.1.3 to resolve CVE-2024-22195
+time: 2024-02-26T17:13:47.285191-08:00
+custom:
+  Author: tlento
+  Issue: "1049"
diff --git a/pyproject.toml b/pyproject.toml
@@ -25,7 +25,7 @@ classifiers = [
   "Programming Language :: Python :: Implementation :: PyPy",
 ]
 dependencies = [
-  "Jinja2>=2.11.3",
+  "Jinja2>=3.1.3",
   "PyYAML~=6.0",
   "click>=7.1.2",
   "dbt-core~=1.7.0",