jinja2 (3.1.6-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - CVE-2025-27516: The |attr filter does not bypass the environment's
      attribute lookup, allowing the sandbox to apply its checks (closes:
      #1099690).

 -- Colin Watson <cjwatson@debian.org>  Tue, 25 Mar 2025 22:31:52 +0000

jinja2 (3.1.5-2) unstable; urgency=medium

  * Team upload.
  * Drop old dependency on setuptools & pkg_resources:
    packages now uses "flit.

 -- Alexandre Detiste <tchet@debian.org>  Mon, 03 Feb 2025 00:49:36 +0100

jinja2 (3.1.5-1) unstable; urgency=high

  * Team upload.
  * New upstream release
    - CVE-2024-56201: Compiler sandbox escape (Closes: #1091329)
    - CVE-2024-56326: Compiler sandbox escape (Closes: #1091331).
  * Update path to examples, examples/* -> docs/examples/*.
  * Stop trying to install CHANGES.rst, which has gone.
  * Add build-deps on flit, pybuild-plugin-pyproject.
  * Add autopkgtest dep on python3-all given use of 'py3versions -s'.
  * Drop backported upstream commits included in this release.
  * Refresh remaining patches.

 -- Sean Whitton <spwhitton@spwhitton.name>  Wed, 22 Jan 2025 12:55:28 +0000

jinja2 (3.1.3-2) unstable; urgency=medium

  * Team upload.
  * Fix d/watch for new PyPi archive naming policy

 -- Alexandre Detiste <tchet@debian.org>  Tue, 07 Jan 2025 22:44:21 +0100

jinja2 (3.1.3-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Backport fixes for FTBFS with Python 3.13. (Closes: #1088325)
  * CVE-2024-34064: HTML attribute injection (Closes: #1070712)

 -- Adrian Bunk <bunk@debian.org>  Sun, 08 Dec 2024 07:59:01 +0200

jinja2 (3.1.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 3.1.3 (Closes: #1060748)
  * CVE-2024-22195: HTML attribute injection when passing user input as
    keys to xmlattr filter

 -- Hans-Christoph Steiner <hans@eds.org>  Tue, 05 Mar 2024 09:32:06 +0100

jinja2 (3.1.2-1) unstable; urgency=medium

  [ Thomas Goirand ]
  * Add python3-pytest as build-depends (now run tests at build time).
  * Add autopkgtest.

  [ Piotr Ożarowski ]
  * New upstream release (closes: 1025808, 1023637)
  * Add 0003-fix-nose-leftovers patch
  * Bump minimum required python3-pallets-sphinx-themes build dependency
    (closes: 1005864)

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 24 Feb 2023 16:15:45 +0100

jinja2 (3.0.3-2) unstable; urgency=medium

  * Team upload.
  * Downgrading python3-babel from depends to recommends (Closes: #1019580).

 -- Thomas Goirand <zigo@debian.org>  Tue, 13 Sep 2022 10:26:29 +0200

jinja2 (3.0.3-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 11 Feb 2022 13:50:47 +0100

jinja2 (3.0.1-2) unstable; urgency=medium

  * Uploading to unstable.

 -- Thomas Goirand <zigo@debian.org>  Fri, 01 Oct 2021 11:22:02 +0200

jinja2 (3.0.1-1) experimental; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since stretch:
    + Build-Depends: Drop versioned constraint on python-setuptools.

  [ Thomas Goirand ]
  * Team upload.
  * New upstream release.
  * Ran wrap-and-sort -bastk.
  * Fixed (build-)depends for this release.
  * Killed the python2 package.
  * Rebase patches:
    - re-wrote py3.9-fix-collections-import.patch
    - refreshed 0002-docs-disable-sphinxcontrib.log_cabinet.patch
  * Use debian/jinja.vim instead of the one upstream, gone in this version.

 -- Thomas Goirand <zigo@debian.org>  Fri, 17 Sep 2021 23:25:00 +0200

jinja2 (2.11.3-1) unstable; urgency=medium

  * Team upload.

  [ Ondřej Nový ]
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Debian Janitor ]
  * Apply multi-arch hints.
    + python-jinja2-doc: Add Multi-Arch: foreign.

  [ Sandro Tosi ]
  * Use the new Debian Python Team contact name and address

  [ Hans-Christoph Steiner ]
  * New upstream release

 -- Hans-Christoph Steiner <hans@eds.org>  Mon, 01 Mar 2021 12:05:52 +0100

jinja2 (2.11.2-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Thu, 04 Jun 2020 19:31:21 +0200

jinja2 (2.11.1-1) unstable; urgency=medium

  [ Thomas Goirand ]
  * py3.9-fix-collections-import.patch: correctly "except ImportError:"
    everywhere in the patch.

  [ Salman Mohammadi ]
  * d/control: change python-jinja2-doc to recommend python3-jinja2
    (closes: 951672)


  [ Piotr Ożarowski ]
  * New upstream release
  * Add python3-pallets-sphinx-themes and python3-sphinx-issues to Build-Depends
  * Add patch to disable sphinxcontrib.log_cabinet for now as it's not
    packaged in Debian yet (versionadded, versionchanged, deprecated
    directives in changelog will not be used)
  * Move Vim syntax files to python3-jinja2 package
  * Standards-version bumped to 4.5.0 (no other changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Thu, 02 Apr 2020 13:35:21 +0200

jinja2 (2.10.1-2) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.1.

  [ Thomas Goirand ]
  * Team upload.
  * Add py3.9-fix-collections-import.patch (Closes: #949018).

 -- Thomas Goirand <zigo@debian.org>  Thu, 27 Feb 2020 11:49:32 +0100

jinja2 (2.10.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org
  * d/changelog: Remove trailing whitespaces
  * d/control: Remove ancient X-Python-Version field
  * d/control: Remove ancient X-Python3-Version field
  * Convert git repository from git-dpm to gbp layout

  [ Piotr Ożarowski ]
  * New upstream release
  * Standards-version bumped to 4.4.0 (no other changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Wed, 10 Jul 2019 22:34:15 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-jinja2-doc`.
