From b68ac99074515f8da503202ae9c3a1046fe6ab68 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 11 Jan 2024 17:29:23 +0000 Subject: [PATCH 1/2] Bump jinja2 from 2.11.3 to 3.1.3 Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.3 to 3.1.3. - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/jinja/compare/2.11.3...3.1.3) --- updated-dependencies: - dependency-name: jinja2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 73f6257b..e65ea06d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,7 +8,7 @@ docutils==0.16 GDAL==2.3.1 idna==2.10 imagesize==1.2.0 -Jinja2==2.11.3 +Jinja2==3.1.3 lxml>=4.6.3 MarkupSafe==1.1.1 openpyxl==3.0.9 From 8fd07f6f496e843a0ac2b2e4071d82e725b99335 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 11 Apr 2024 21:44:01 +0000 Subject: [PATCH 2/2] Bump idna from 2.10 to 3.7 Bumps [idna](https://github.com/kjd/idna) from 2.10 to 3.7. - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](https://github.com/kjd/idna/compare/v2.10...v3.7) --- updated-dependencies: - dependency-name: idna dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index e65ea06d..a5fe8205 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,7 +6,7 @@ chardet==3.0.4 Deprecated==1.2.10 docutils==0.16 GDAL==2.3.1 -idna==2.10 +idna==3.7 imagesize==1.2.0 Jinja2==3.1.3 lxml>=4.6.3