update jinja2 per CVE-2024-22195 (backport #9619)

[mergify]

This is an automatic backport of pull request #9619 done by Mergify.
Cherry-pick of f190828 has failed:

On branch mergify/bp/3.10/pr-9619
Your branch is up to date with 'origin/3.10'.

You are currently cherry-picking commit f1908283c.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   doc/requirements.in
	both modified:   doc/requirements.txt

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

---

Mergify commands and options

More conditions and actions can be found in the documentation.

You can also trigger Mergify actions by commenting on this pull request:

• @Mergifyio refresh will re-evaluate the rules
• @Mergifyio rebase will rebase this PR on its base branch
• @Mergifyio update will merge the base branch into this PR
• @Mergifyio backport <destination> will backport this PR on <destination> branch

Additionally, on Mergify dashboard you can:

• look at your merge queues
• generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com

[geekosaur]

FWIW I included another security update that hadn't been backported, that was the cause of the merge conflict.

[ulysses4ever]

Thank you for taking this on!

[geekosaur]

Do we need that many reviewers for a backport?

[ulysses4ever]

Oh, my bad, one should be enough.