[Build/CI] Upgrade jinja2 to get 3 moderate CVE fixes (vllm-project#14839)

russellb · web-flow · commit ee3778d5fc0a · 2025-03-15T05:38:19.000Z
Signed-off-by: Russell Bryant &lt;rbryant@redhat.com&gt;
diff --git a/requirements/build.txt b/requirements/build.txt
@@ -6,4 +6,4 @@ setuptools>=61
 setuptools-scm>=8
 torch==2.6.0
 wheel
-jinja2
+jinja2>=3.1.6
diff --git a/requirements/rocm-build.txt b/requirements/rocm-build.txt
@@ -11,5 +11,5 @@ packaging
 setuptools>=61
 setuptools-scm>=8
 wheel
-jinja2
+jinja2>=3.1.6
 amdsmi==6.2.4
diff --git a/requirements/test.txt b/requirements/test.txt
@@ -181,7 +181,7 @@ iniconfig==2.0.0
     # via pytest
 isort==5.13.2
     # via datamodel-code-generator
-jinja2==3.1.4
+jinja2==3.1.6
     # via
     #   datamodel-code-generator
     #   torch
diff --git a/requirements/tpu.txt b/requirements/tpu.txt
@@ -6,7 +6,7 @@ cmake>=3.26
 packaging
 setuptools-scm>=8
 wheel
-jinja2
+jinja2>=3.1.6
 ray[default]
 ray[data]
 
diff --git a/requirements/xpu.txt b/requirements/xpu.txt
@@ -7,7 +7,7 @@ packaging
 setuptools-scm>=8
 setuptools>=75.8.0
 wheel
-jinja2
+jinja2>=3.1.6
 datasets # for benchmark scripts
 
 torch==2.6.0+xpu
