Skip to content

build(packaging): raise jinja2 floor to 3.1.6#27552

Merged
yuneng-berri merged 1 commit into
litellm_internal_stagingfrom
litellm_/charming-sammet-8d77c3
May 9, 2026
Merged

build(packaging): raise jinja2 floor to 3.1.6#27552
yuneng-berri merged 1 commit into
litellm_internal_stagingfrom
litellm_/charming-sammet-8d77c3

Conversation

@yuneng-berri

Copy link
Copy Markdown
Collaborator

Summary

Bumps the declared jinja2 floor in [project.dependencies] from >=3.1.0 to >=3.1.6.

Our uv.lock already resolves jinja2 to 3.1.6, so Docker images and CI installs already pick it up. The pyproject.toml floor was lagging at 3.1.0, which means downstream consumers using --resolution=lowest-direct or older constraint files can land on 3.1.03.1.5 instead of the version our test matrix exercises.

This brings the declared floor in line with the resolved version so external installers see the same baseline we test against.

Scope

  • pyproject.toml: 1 line changed (jinja2>=3.1.0,<4.0jinja2>=3.1.6,<4.0)
  • uv.lock: 1 line changed (mirrored requires-dist entry; no resolved-version drift)

Test plan

  • uv lock regenerates as a metadata-only diff — no resolved versions or hashes change
  • CI green
  • Will be backported to litellm_1.84.0rc2 in a separate PR after merge

Our `uv.lock` already resolves jinja2 to 3.1.6, so Docker / CI installs
get that version. The `pyproject.toml` floor was lagging at 3.1.0,
which means downstream consumers using `--resolution=lowest-direct` or
older constraint files can land on 3.1.0-3.1.5 instead of the version
we actually test against.

Aligns the declared floor with the resolved version so external
installers see the same baseline our test matrix exercises.

`uv lock` diff is metadata-only (no resolved-version drift).
@greptile-apps

greptile-apps Bot commented May 9, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR tightens the declared Jinja2 minimum version from >=3.1.0 to >=3.1.6 to match the version already pinned in uv.lock, closing the gap that could allow downstream consumers using lowest-direct resolution to install older patch releases that the project's test matrix never exercises.

  • pyproject.toml: single-line floor bump for the jinja2 dependency specifier.
  • uv.lock: matching update to the requires-dist metadata entry; no resolved version or hash drift occurs.

Confidence Score: 5/5

Safe to merge — a narrowing of an existing version range with no resolved-version drift.

Both changed lines are metadata-only: the floor on the Jinja2 constraint moves from 3.1.0 to 3.1.6, matching the version already resolved and tested in CI. No application logic, test coverage, or dependency graph is altered beyond tightening what installers are allowed to pick.

No files require special attention.

Important Files Changed

Filename Overview
pyproject.toml Bumps the Jinja2 minimum version from 3.1.0 to 3.1.6, aligning the declared floor with the already-resolved lockfile version.
uv.lock Mirrors the pyproject.toml constraint update in the requires-dist metadata entry; no resolved version or hash changes.

Reviews (1): Last reviewed commit: "build(packaging): raise jinja2 floor to ..." | Re-trigger Greptile

@codecov

codecov Bot commented May 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@yuneng-berri yuneng-berri merged commit 936ada2 into litellm_internal_staging May 9, 2026
109 of 111 checks passed
@yuneng-berri yuneng-berri deleted the litellm_/charming-sammet-8d77c3 branch May 9, 2026 20:59
yuneng-berri added a commit that referenced this pull request May 10, 2026
build(packaging): raise jinja2 floor to 3.1.6 (rc2 backport of #27552)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants