summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorOlivier Dony <odo@odoo.com>2019-04-10 17:45:04 +0000
committerParth Choksi <pch@odoo.com>2019-05-07 07:04:34 +0000
commite554ce345fb1ffcf41c571f461b680e1e7199a1d (patch)
tree8455cbe2774f76726151ae97c6a4971a33652155
parenta6ee929bb1a3ab01552ac90e21f72d41e344b36c (diff)
[FIX] requirements: bump up jinja2 reqs
Recommended by GitHub's repository alerts. We normally stick as close as possible to the version we depend on in the official DEB packages. This in turn depends on the version of Debian stable at the time of release - for 11.0 that would be Debian 9 (stretch) and thus Jinja 2.8 (with security backports). However Jinja2 before 2.10.1 suffers from a few issues that could lead to crashes of Odoo processes. It seems it's worth an exception to our rule for pip users, similarly to previous bump up at d2605bccdba1838db5700a6ae0dd12ca9f9b20c7. closes odoo/odoo#32601 Signed-off-by: Christophe Simonis <chs@odoo.com>
-rw-r--r--requirements.txt3
-rw-r--r--setup/win32/winpy_requirements.txt2
2 files changed, 2 insertions, 3 deletions
diff --git a/requirements.txt b/requirements.txt
index 96cd5c7852b..927036d5e22 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,8 +9,7 @@ gevent==1.3.4 ; sys_platform != 'win32' and python_version >= '3.7'
greenlet==0.4.10 ; python_version < '3.7'
greenlet==0.4.13 ; python_version >= '3.7'
html2text==2016.9.19
-Jinja2==2.8.1
-libsass==0.12.3
+Jinja2==2.10.1
lxml==3.7.1 ; sys_platform != 'win32' and python_version < '3.7'
lxml==4.2.3 ; sys_platform != 'win32' and python_version >= '3.7'
lxml ; sys_platform == 'win32'
diff --git a/setup/win32/winpy_requirements.txt b/setup/win32/winpy_requirements.txt
index c086ad3d823..41d3fd5adff 100644
--- a/setup/win32/winpy_requirements.txt
+++ b/setup/win32/winpy_requirements.txt
@@ -6,7 +6,7 @@ feedparser==5.2.1
gevent>=1.1.2
greenlet>=0.4.10
html2text==2016.9.19
-Jinja2==2.8
+Jinja2==2.10.1
lxml>=3.5.0
Mako==1.0.4
MarkupSafe==0.23