Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps minijinja from 2.8.0 to 2.12.0.

Release notes

Sourced from minijinja's releases.

2.12.0

Release Notes

  • Item or attribute lookup will no longer swallow all errors in Python. #814
  • Added |zip filter. #818
  • Fix break_on_hyphens for the |wordwrap filter. #823
  • Prefer error message from unknown_method_callback. #824
  • Ignore .jinja and .jinja2 as extensions in auto escape. #832

Install minijinja-cli 2.12.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/mitsuhiko/minijinja/releases/download/2.12.0/minijinja-cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/mitsuhiko/minijinja/releases/download/2.12.0/minijinja-cli-installer.ps1 | iex"

Download minijinja-cli 2.12.0

File Platform Checksum
minijinja-cli-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
minijinja-cli-x86_64-apple-darwin.tar.xz Intel macOS checksum
minijinja-cli-i686-pc-windows-msvc.zip x86 Windows checksum
minijinja-cli-x86_64-pc-windows-msvc.zip x64 Windows checksum
minijinja-cli-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
minijinja-cli-i686-unknown-linux-gnu.tar.xz x86 Linux checksum
minijinja-cli-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
minijinja-cli-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
minijinja-cli-i686-unknown-linux-musl.tar.xz x86 MUSL Linux checksum
minijinja-cli-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

2.11.0

Release Notes

  • Fixed incorrect joining of leading undefineds or empty strings in the |join filter. This was inconsistent with Jinja2 and the filter itself for undefineds in other positions. #794
  • Allow negative arguments to range function and change range to isize. #799
  • Allow isize as argument type. #799
  • MiniJinja now correctly handles \x escape sequences in strings as well as octals. #805

... (truncated)

Changelog

Sourced from minijinja's changelog.

2.12.0

  • Item or attribute lookup will no longer swallow all errors in Python. #814
  • Added |zip filter. #818
  • Fix break_on_hyphens for the |wordwrap filter. #823
  • Prefer error message from unknown_method_callback. #824
  • Ignore .jinja and .jinja2 as extensions in auto escape. #832

2.11.0

  • Fixed incorrect joining of leading undefineds or empty strings in the |join filter. This was inconsistent with Jinja2 and the filter itself for undefineds in other positions. #794
  • Allow negative arguments to range function and change range to isize. #799
  • Allow isize as argument type. #799
  • MiniJinja now correctly handles \x escape sequences in strings as well as octals. #805
  • Added a new |chain filter. #807

2.10.2

  • Fixed an issue with the function bounds that caused the next-generation trait resolver to fail. #787

2.10.1

  • Re-release of 2.10.0 because of a broken release process.

2.10.0

  • Fix incorrect permissions when --output is used in the CLI. #772
  • Added mj_err_get_debug_info to the C-ABI. #775
  • Modules now capture their output like they do in Jinja2. This means that if you do {% import 'template.j2' as x %} and you then render {{ x }} the output of template.j2 is rendered as if it was included. #778
  • Improved compatibility with Jinja2 for slicing. Negative steps are now correctly handled. Additionally slicing on bytes now correctly handles steps other than 1. #781

2.9.0

  • Do not panic if too large templates (too many lines or too many columns) are loaded. The error reporting will be wrong in those cases but the templates will load. #742
  • Fixed a bug that caused unknown method callbacks to not get proper error reporting if they cannot find a method. #743
  • Added merge_maps which is a dynamic version of the context!

... (truncated)

Commits
  • 50d24fb 2.12.0
  • b6e0417 Switch to regular cargo-dist
  • b808ef9 Added .jinja and .jinja2 as ignored extensions (#832)
  • 27b1d0e fix: mixed up example names, "object-using-async" and "function-using-async" ...
  • 891aa60 Improve documentation of 'trim' filter (#829)
  • 16cfc39 Add changelog entry
  • 5c91137 Prefer error message from unknown_method_callback (#824)
  • 7ebd538 Fix WASI doctest failure in Object trait (#830)
  • 31331bb Fix some clippy warnings
  • 513f6f2 fix: wrong slicing with negative indices which overflow range bounds (#822)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 29, 2025
@b1rger
Copy link
Owner

b1rger commented Oct 20, 2025

@dependabot rebase

Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.8.0 to 2.12.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](mitsuhiko/minijinja@2.8.0...2.12.0)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/cargo/minijinja-2.12.0 branch from a542b33 to ade791d Compare October 20, 2025 16:58
@b1rger b1rger merged commit c7eb846 into main Oct 20, 2025
9 checks passed
@dependabot dependabot bot deleted the dependabot/cargo/minijinja-2.12.0 branch October 20, 2025 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant