Merge pull request #10038 from haskell/mergify/bp/3.12/pr-10030

mergify[bot] · web-flow · commit 934f084a589f · 2024-05-21T16:49:04.000Z
update jinja2 per CVE-2024-34064 (backport #10030)
diff --git a/doc/requirements.in b/doc/requirements.in
@@ -8,7 +8,7 @@ Pygments >= 2.7.4
 certifi >= 2023.07.22
 # CVE-2023-45803
 urllib3 >= 2.0.7
-# CVE-2024-22195
-jinja2 == 3.1.3
+# CVE-2024-34064
+jinja2 >= 3.1.4
 # CVE-2024-3651
 idna >= 3.7
diff --git a/doc/requirements.txt b/doc/requirements.txt
@@ -25,7 +25,7 @@ idna==3.7
     #   requests
 imagesize==1.4.1
     # via sphinx
-jinja2==3.1.3
+jinja2==3.1.4
     # via
     #   -r requirements.in
     #   sphinx
