Upgrade Jinja to fix a security vulnerability (#1684)

Vulnerability context here https://github.com/dbt-labs/metricflow-server/security/dependabot/42
dbt-labs · Mar 10, 2025 · c00a1df · c00a1df
1 parent 9042655
commit c00a1df
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/dbt-metricflow/extra-hatch-configuration/requirements-cli.txt b/dbt-metricflow/extra-hatch-configuration/requirements-cli.txt
@@ -5,7 +5,7 @@ dbt-core>=1.9.0, <1.10.0
 dbt-semantic-interfaces
 
 # CLI-related
-Jinja2>=3.1.3
+Jinja2>=3.1.6, <3.7.0
 halo>=0.0.31, <0.1.0
 update-checker>=0.18.0, <0.19.0
 

diff --git a/extra-hatch-configuration/requirements.txt b/extra-hatch-configuration/requirements.txt
@@ -1,4 +1,4 @@
-Jinja2>=3.1.3
+Jinja2>=3.1.6, <3.7.0
 dbt-semantic-interfaces==0.8.3
 more-itertools>=8.10.0, <10.2.0
 pydantic>=1.10.0, <3.0