jinja2 (3.1.6-3) unstable; urgency=medium

  * Team upload.
  * Test !nodoc & !nocheck profiles with Salsa CI
  * d/rules: guard call to "make docs" in a if-block
  * Mark python3-pallets-sphinx-themes as <!nodoc>
  * Update standards version to 4.7.4, no changes needed.
  * Use dh-sequence-* build dependencies instead of dh --with: sphinxdoc.
  * Add debian/upstream/metadata

 -- Alexandre Detiste <tchet@debian.org>  Wed, 24 Jun 2026 10:54:19 +0200

jinja2 (3.1.6-2) unstable; urgency=medium

  * Team upload.
  * Remove ancient Python 3.6-era debian/python3-jinja2.bcep
  * Disable useless Salsa CI jobs
  * Bump Standards-Version to 4.7.3, drop Priority: tag
  * Tag python3-trio dependency as <!nocheck>

  [ Bastian Germann ]
  * d/copyright: Use machine-readable format

 -- Alexandre Detiste <tchet@debian.org>  Mon, 16 Mar 2026 21:00:10 +0100

jinja2 (3.1.6-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - CVE-2025-27516: The |attr filter does not bypass the environment's
      attribute lookup, allowing the sandbox to apply its checks (closes:
      #1099690).

 -- Colin Watson <cjwatson@debian.org>  Tue, 25 Mar 2025 22:31:52 +0000

jinja2 (3.1.5-2) unstable; urgency=medium

  * Team upload.
  * Drop old dependency on setuptools & pkg_resources:
    packages now uses "flit.

 -- Alexandre Detiste <tchet@debian.org>  Mon, 03 Feb 2025 00:49:36 +0100

jinja2 (3.1.5-1) unstable; urgency=high

  * Team upload.
  * New upstream release
    - CVE-2024-56201: Compiler sandbox escape (Closes: #1091329)
    - CVE-2024-56326: Compiler sandbox escape (Closes: #1091331).
  * Update path to examples, examples/* -> docs/examples/*.
  * Stop trying to install CHANGES.rst, which has gone.
  * Add build-deps on flit, pybuild-plugin-pyproject.
  * Add autopkgtest dep on python3-all given use of 'py3versions -s'.
  * Drop backported upstream commits included in this release.
  * Refresh remaining patches.

 -- Sean Whitton <spwhitton@spwhitton.name>  Wed, 22 Jan 2025 12:55:28 +0000

jinja2 (3.1.3-2) unstable; urgency=medium

  * Team upload.
  * Fix d/watch for new PyPi archive naming policy

 -- Alexandre Detiste <tchet@debian.org>  Tue, 07 Jan 2025 22:44:21 +0100

jinja2 (3.1.3-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Backport fixes for FTBFS with Python 3.13. (Closes: #1088325)
  * CVE-2024-34064: HTML attribute injection (Closes: #1070712)

 -- Adrian Bunk <bunk@debian.org>  Sun, 08 Dec 2024 07:59:01 +0200

jinja2 (3.1.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 3.1.3 (Closes: #1060748)
  * CVE-2024-22195: HTML attribute injection when passing user input as
    keys to xmlattr filter

 -- Hans-Christoph Steiner <hans@eds.org>  Tue, 05 Mar 2024 09:32:06 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python3-jinja2`.
