Skip to content

chore(deps): bump copier from 9.15.1 to 9.15.2 - #199

Merged
charlesthomas merged 2 commits into
mainfrom
dependabot/pip/copier-9.15.2
Jun 15, 2026
Merged

chore(deps): bump copier from 9.15.1 to 9.15.2#199
charlesthomas merged 2 commits into
mainfrom
dependabot/pip/copier-9.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps copier from 9.15.1 to 9.15.2.

Release notes

Sourced from copier's releases.

v9.15.2 (2026-06-12)

Fix

  • report template path for Jinja errors in path segments (#2686)
  • fix answers file override/setting to use full path and not only filename
  • treat blank boolean strings as false (#2675)
  • updating: don't skip gitignored .rej files when converting to inline conflict markers (#2668)

Refactor

  • deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

  • prevent trust bypass via path traversal in trusted template URLs
Changelog

Sourced from copier's changelog.

v9.15.2 (2026-06-12)

Fix

  • report template path for Jinja errors in path segments (#2686)
  • fix answers file override/setting to use full path and not only filename
  • treat blank boolean strings as false (#2675)
  • updating: don't skip gitignored .rej files when converting to inline conflict markers (#2668)

Refactor

  • deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

  • prevent trust bypass via path traversal in trusted template URLs
Commits
  • a90729e bump: version 9.15.1 → 9.15.2
  • f4fb6ef fix: prevent trust bypass via path traversal in trusted template URLs
  • 67e8f80 build(deps): update dependency ruff to v0.15.17
  • 20fcd22 build(deps): update dependency plumbum to v2
  • 1686a3f build(deps): update dependency devbox to v0.17.3
  • 149a575 build(deps): update codecov/codecov-action action to v7
  • c0fc442 build(deps): update dependency inline-snapshot to v0.34.1
  • eaf35d7 build(deps): update dependency uv to v0.11.17
  • 9beb006 build(deps): update astral-sh/setup-uv action to v8.2.0
  • e5b8d32 build(deps): update dependency rumdl to v0.2.13
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/copier-9.15.2 branch 2 times, most recently from 2ddc617 to 57728ec Compare June 15, 2026 14:02
Bumps [copier](https://github.com/copier-org/copier) from 9.15.1 to 9.15.2.
- [Release notes](https://github.com/copier-org/copier/releases)
- [Changelog](https://github.com/copier-org/copier/blob/master/CHANGELOG.md)
- [Commits](copier-org/copier@v9.15.1...v9.15.2)

---
updated-dependencies:
- dependency-name: copier
  dependency-version: 9.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/copier-9.15.2 branch from 57728ec to b6ad7f4 Compare June 15, 2026 14:05
@charlesthomas
charlesthomas merged commit 5660902 into main Jun 15, 2026
1 check passed
@charlesthomas
charlesthomas deleted the dependabot/pip/copier-9.15.2 branch June 15, 2026 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant