diff --git a/CHANGES.rst b/CHANGES.rst index ba3b2244e..860c439fb 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -3,13 +3,13 @@ Version 3.1.4 ------------- -Unreleased +Released 2024-05-05 - The ``xmlattr`` filter does not allow keys with ``/`` solidus, ``>`` greater-than sign, or ``=`` equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. - GHSA-h75v-3vvj-5mfj + :ghsa:`h75v-3vvj-5mfj` Version 3.1.3 @@ -19,7 +19,7 @@ Released 2024-01-10 - Fix compiler error when checking if required blocks in parent templates are empty. :pr:`1858` -- ``xmlattr`` filter does not allow keys with spaces. GHSA-h5c8-rqwp-cp95 +- ``xmlattr`` filter does not allow keys with spaces. :ghsa:`h5c8-rqwp-cp95` - Make error messages stemming from invalid nesting of ``{% trans %}`` blocks more helpful. :pr:`1918` diff --git a/src/jinja2/__init__.py b/src/jinja2/__init__.py index 551a8b669..2f0b5b286 100644 --- a/src/jinja2/__init__.py +++ b/src/jinja2/__init__.py @@ -35,4 +35,4 @@ from .utils import pass_eval_context as pass_eval_context from .utils import select_autoescape as select_autoescape -__version__ = "3.1.4.dev" +__version__ = "3.1.4"