[scarthgap,1/1] python3-jinja2: upgrade 3.1.4 -> 3.1.6

From: Soumya Sambu <soumya.sambu@windriver.com>

Includes fix for - CVE-2024-56326, CVE-2025-27516, CVE-2024-56201

Changelog:
https://github.com/pallets/jinja/blob/3.1.6/CHANGES.rst
https://github.com/pallets/jinja/blob/3.1.5/CHANGES.rst

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
---
 .../python/{python3-jinja2_3.1.4.bb => python3-jinja2_3.1.6.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-jinja2_3.1.4.bb => python3-jinja2_3.1.6.bb} (91%)

Unfortunately there were python3-jinja2 ptest errors in autobuilder testing:

AssertionError:
Failed ptests:
{'python3-jinja2': 'START: ptest-runner\n'
'2025-04-09T14:59\n'
'\n'
'ImportError while importing test module '
"'/usr/lib/python3-jinja2/ptest/tests/test_async.py'.\n"
'Hint: make sure your test modules/packages have valid '
'Python names.\n'
'Traceback:\n'
'../../python3.12/importlib/__init__.py:90: in '
'import_module\n'
' return _bootstrap._gcd_import(name[level:], package, '
'level)\n'
'tests/test_async.py:4: in <module>\n'
' import trio\n'
"E ModuleNotFoundError: No module named 'trio'\n"
'ERROR: tests/test_async.py:tests/test_async.py\n'
'\n'
'ImportError while importing test module '
"'/usr/lib/python3-jinja2/ptest/tests/test_async_filters.py'.\n"
'Hint: make sure your test modules/packages have valid '
'Python names.\n'
'Traceback:\n'
'../../python3.12/importlib/__init__.py:90: in '
'import_module\n'
' return _bootstrap._gcd_import(name[level:], package, '
'level)\n'
'tests/test_async_filters.py:6: in <module>\n'
' import trio\n'
"E ModuleNotFoundError: No module named 'trio'\n"
'ERROR: '
'tests/test_async_filters.py:tests/test_async_filters.py\n'
'============================================================================\n'
'Testsuite summary\n'
'# TOTAL: 2\n'
'# PASS: 0\n'
'# SKIP: 0\n'
'# XFAIL: 0\n'
'# FAIL: 0\n'
'# XPASS: 0\n'
'# ERROR: 2\n'
'\n'
'ERROR: Exit status is 2\n'
'DURATION: 2\n'}
ptests which had no test results:
['python3-jinja2']

Links to the builds:

https://autobuilder.yoctoproject.org/valkyrie/#/builders/61/builds/1289/steps/12/logs/stdio
https://autobuilder.yoctoproject.org/valkyrie/#/builders/73/builds/1289/steps/12/logs/stdio

Steve

On Wed, Apr 9, 2025 at 5:54 AM Soumya via lists.openembedded.org
<soumya.sambu=windriver.com@lists.openembedded.org> wrote:
>
> From: Soumya Sambu <soumya.sambu@windriver.com>
>
> Includes fix for - CVE-2024-56326, CVE-2025-27516, CVE-2024-56201
>
> Changelog:
> https://github.com/pallets/jinja/blob/3.1.6/CHANGES.rst
> https://github.com/pallets/jinja/blob/3.1.5/CHANGES.rst
>
> Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
> ---
>  .../python/{python3-jinja2_3.1.4.bb => python3-jinja2_3.1.6.bb} | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-devtools/python/{python3-jinja2_3.1.4.bb => python3-jinja2_3.1.6.bb} (91%)
>
> diff --git a/meta/recipes-devtools/python/python3-jinja2_3.1.4.bb b/meta/recipes-devtools/python/python3-jinja2_3.1.6.bb
> similarity index 91%
> rename from meta/recipes-devtools/python/python3-jinja2_3.1.4.bb
> rename to meta/recipes-devtools/python/python3-jinja2_3.1.6.bb
> index 2c02037011..4e185f4abd 100644
> --- a/meta/recipes-devtools/python/python3-jinja2_3.1.4.bb
> +++ b/meta/recipes-devtools/python/python3-jinja2_3.1.6.bb
> @@ -4,7 +4,7 @@ HOMEPAGE = "https://pypi.org/project/Jinja2/"
>  LICENSE = "BSD-3-Clause"
>  LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=5dc88300786f1c214c1e9827a5229462"
>
> -SRC_URI[sha256sum] = "4a3aee7acbbe7303aede8e9648d13b8bf88a429282aa6122a993f0ac800cb369"
> +SRC_URI[sha256sum] = "0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d"
>
>  PYPI_PACKAGE = "jinja2"
>
> --
> 2.40.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#214588): https://lists.openembedded.org/g/openembedded-core/message/214588
> Mute This Topic: https://lists.openembedded.org/mt/112171235/3620601
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [steve@sakoman.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>