[dependabot]

Bumps minijinja from 3.0.5 to 3.1.0.

Changelog

Sourced from minijinja's changelog.

3.1.0

This release adds output spans and memory limits through fuel, and fixes many differences to Jinja2 in both Rust and Go. Fuel now also accounts for memory and work done in filters and operators, so templates consume more fuel than before and fuel budgets might need adjusting. In Go, maps created by templates now keep the type of their keys and their insertion order; Value.Raw returns a *value.Map for them and Value.AsMap returns a copy with keys converted to strings.

• Fuel now also limits memory and the work done inside filters and operators, not just the number of instructions. Templates consume somewhat more fuel than before, so budgets might need adjusting. #483
• Added State::consume_fuel in Rust and State.ConsumeFuel in Go so that custom filters and functions can charge fuel. #483
• Added Template::render_with_spans in Rust and Template.RenderWithSpans in Go to map rendered output back to the template source. #1004
• Added the count argument to the replace filter for Jinja2 compatibility in Rust. #1013
• The datetime filters in minijinja-contrib now fall back to jiff's bundled time zone database for names missing from the system database. #1008
• Fixed booleans sorting separately from numbers. They now compare, sort and hash like 0 and 1 in Rust and Go.
• Fixed max and groupby returning the last of multiple equal items instead of the first for Jinja2 compatibility in Rust and Go.
• Fixed ~ and + double escaping safe strings or not escaping unsafe ones when combining them with auto escaping enabled in Rust and Go.
• Fixed first, last, length, count, items, reverse, join and groupby handling none and undefined values differently from Jinja2 in Rust and Go.
• Fixed final sigma, titlecase and special case mappings in the upper, lower, capitalize and title filters in Rust and Go.
• Fixed reverse and last not reversing maps and other reversible iterables. last now also works on maps.
• Fixed repeating strings and sequences a negative number of times failing instead of producing an empty result, and repeating safe strings losing their safety.
• Fixed integer math between 2**127 and 2**128, negating the smallest 128-bit integer and divisibleby with a zero divisor in Rust and Go.
• Fixed the even and odd tests for big integers and floats with an integer value.
• Fixed super() panicking at the top level of an included template and loop(...) misbehaving in included templates, blocks and macros.
• Fixed slicing with a negative step panicking on empty values and returning wrong items for some bounds.
• Fixed split(none, n) returning trailing whitespace as an extra item.
• Errors raised while writing the value of {{ ... }} now point to the whole expression.
• Constant folding no longer creates strings or sequences larger than 1KB at compile time.
• Improved the performance of string slicing, string concatenation and the title filter.
• Go: maps now keep the type of their keys and their insertion order like in Rust. The new value.Map type gives access to such maps; Value.AsMap converts their keys to strings.
• Go: added support for integers outside the 64-bit range to arithmetic, comparisons, tojson, the int, float and round filters and the even, odd and integer tests.
• Go: maps can now be compared and sorted, and == no longer rounds integers to floats.
• Go: fixed caller, super(), loop(x), macro auto escaping, blocks of included templates, the template reported for code in blocks and macros and filter chains in {% filter %} blocks to behave like in Rust.
• Go: fixed operators and the string, safe, sum and indent filters accepting undefined values with strict undefined behavior.
• Go: fixed many filters (batch, slice, length, first, last, abs, items, split, attr and others) silently accepting invalid values or arguments instead of failing like in Rust.
• Go: fixed in on strings, + on iterables, chain results, groupby groups, namespaces, unsigned 64-bit integers and float literals such as 1e400 to behave like in Rust.

Commits

• 92956d0 chore(release): 3.1.0
• f488d94 Keep the signature of filters::replace
• 485e392 Compact the unreleased changelog
• 713cb01 fix(go): keep map keys as values in insertion order like Rust (#1022)
• 8267a6d Fix integer math between 2127 and 2128, negating the smallest i128, and 1...
• c8911a4 Fix final sigma, titlecase and special casing in case filters (#1024)
• 414ab0f Align none and undefined handling of sequence filters with Jinja2 (#1023)
• 0b3884d Escape the unsafe side when concatenating safe strings (#1020)
• cbf2737 Return the first of equal items from max and label groupby groups with the fi...
• c15e947 fix(go): handle integers outside the 64-bit range in the even, odd and intege...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​minijinja@​3.0.5 ⏵ 3.1.0

View full report

[dependabot]

Looks like minijinja is up-to-date now, so this is no longer needed.