Merge branch 'dependabot/fix-ninja' into 'main'

dependencies: bump jinja2 from 3.1.4 to 3.1.5 to fix vulnarabilities See merge request app-frameworks/esp-matter!1027
espressif · Jan 29, 2025 · 68a489b · 68a489b
2 parents 23a9466 + 89c2b43
commit 68a489b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -2,7 +2,7 @@
 lark==1.1.2
 stringcase==1.2.0
 # jinja2 is removed in IDF v5.0 environment, but it is required for matter building
-jinja2==3.1.4
+jinja2==3.1.5
 
 # https://github.com/psf/requests/blob/main/HISTORY.md#2300-2023-05-03
 urllib3<2

diff --git a/requirements_idf_v4.4.txt b/requirements_idf_v4.4.txt
@@ -1,7 +1,9 @@
 # matter idl
 lark==1.1.2
 stringcase==1.2.0
-# jinja2 is removed in IDF v5.0 environment, but it is required for matter building
+
+# esp-idf v4.4 is not compatible with newer version of jinja2,
+# so pinning it to 3.0.1
 jinja2==3.0.1
 
 # https://github.com/psf/requests/blob/main/HISTORY.md#2300-2023-05-03