Skip to content

chore(deps): bump copier from 9.5.0 to 9.15.2 in /python/create-onchain-agent - #1457

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/create-onchain-agent/copier-9.15.2
Open

chore(deps): bump copier from 9.5.0 to 9.15.2 in /python/create-onchain-agent#1457
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/create-onchain-agent/copier-9.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps copier from 9.5.0 to 9.15.2.

Release notes

Sourced from copier's releases.

v9.15.2 (2026-06-12)

Fix

  • report template path for Jinja errors in path segments (#2686)
  • fix answers file override/setting to use full path and not only filename
  • treat blank boolean strings as false (#2675)
  • updating: don't skip gitignored .rej files when converting to inline conflict markers (#2668)

Refactor

  • deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

  • prevent trust bypass via path traversal in trusted template URLs

v9.15.1 (2026-05-13)

Fix

  • enrich invalid choice error message with variable name and valid choices (#2662)
  • restore support for copier copy when git is not available

v9.15.0 (2026-04-30)

Feat

  • add support for enabling StrictUndefined in Jinja environment (#2587)

Fix

  • clean up temporary clone directory when internal git clone is interrupted
  • avoid double-escaping backslashes in Git paths with PathSpec v1.1.0+
  • updating: propagate executable-bit changes even when Git ignores file mode changes

v9.14.3 (2026-04-10)

Fix

  • vcs: fix Git tag lookup for template SSH URLs without ssh:// scheme

v9.14.2 (2026-04-09)

Fix

  • vcs: fix Git tag lookup for relative local template paths
  • vcs: support git worktrees in is_git_repo_root (#2586)
  • migrations: use configurable Jinja delimiters for default migration condition

v9.14.1 (2026-03-31)

Refactor

  • make YieldExtension self-contained

... (truncated)

Changelog

Sourced from copier's changelog.

v9.15.2 (2026-06-12)

Fix

  • report template path for Jinja errors in path segments (#2686)
  • fix answers file override/setting to use full path and not only filename
  • treat blank boolean strings as false (#2675)
  • updating: don't skip gitignored .rej files when converting to inline conflict markers (#2668)

Refactor

  • deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

  • prevent trust bypass via path traversal in trusted template URLs

v9.15.1 (2026-05-13)

Fix

  • enrich invalid choice error message with variable name and valid choices (#2662)
  • restore support for copier copy when git is not available

v9.15.0 (2026-04-30)

Feat

  • add support for enabling StrictUndefined in Jinja environment (#2587)

Fix

  • clean up temporary clone directory when internal git clone is interrupted
  • avoid double-escaping backslashes in Git paths with PathSpec v1.1.0+
  • updating: propagate executable-bit changes even when Git ignores file mode changes

v9.14.3 (2026-04-10)

Fix

  • vcs: fix Git tag lookup for template SSH URLs without ssh:// scheme

v9.14.2 (2026-04-09)

Fix

  • vcs: fix Git tag lookup for relative local template paths
  • vcs: support git worktrees in is_git_repo_root (#2586)
  • migrations: use configurable Jinja delimiters for default migration condition

... (truncated)

Commits
  • a90729e bump: version 9.15.1 → 9.15.2
  • f4fb6ef fix: prevent trust bypass via path traversal in trusted template URLs
  • 67e8f80 build(deps): update dependency ruff to v0.15.17
  • 20fcd22 build(deps): update dependency plumbum to v2
  • 1686a3f build(deps): update dependency devbox to v0.17.3
  • 149a575 build(deps): update codecov/codecov-action action to v7
  • c0fc442 build(deps): update dependency inline-snapshot to v0.34.1
  • eaf35d7 build(deps): update dependency uv to v0.11.17
  • 9beb006 build(deps): update astral-sh/setup-uv action to v8.2.0
  • e5b8d32 build(deps): update dependency rumdl to v0.2.13
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [copier](https://github.com/copier-org/copier) from 9.5.0 to 9.15.2.
- [Release notes](https://github.com/copier-org/copier/releases)
- [Changelog](https://github.com/copier-org/copier/blob/master/CHANGELOG.md)
- [Commits](copier-org/copier@v9.5.0...v9.15.2)

---
updated-dependencies:
- dependency-name: copier
  dependency-version: 9.15.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from murrlincoln as a code owner August 19, 2026 19:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 19, 2026
@cb-heimdall

Copy link
Copy Markdown

🟡 Heimdall Review Status

Requirement Status More Info
Reviews 🟡 0/1
Denominator calculation
Show calculation
1 if user is bot 0
1 if user is external 0
2 if repo is sensitive 0
From .codeflow.yml 1
Additional review requirements
Show calculation
Max 0
0
From CODEOWNERS 0
Global minimum 0
Max 1
1
1 if commit is unverified 0
Sum 1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Development

Successfully merging this pull request may close these issues.

1 participant