Bump jinja2 from 2.11.2 to 2.11.3 (CTFd#1838)

* Bump jinja2 from 2.11.2 to 2.11.3

Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.2 to 2.11.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/master/CHANGES.rst)
- [Commits](pallets/jinja@2.11.2...2.11.3)

Signed-off-by: dependabot[bot] <[email protected]>

* Run pip-compile our way

* Add newline

* Update CHANGELOG

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kevin Chung <[email protected]>
Co-authored-by: Kevin Chung <[email protected]>

CHANGELOG.md

@@ -53,6 +53,7 @@
 - Install `python3-dev` instead of `python-dev` in apt
 - Require `pybluemonday` as pip dependency
 - Remove `lxml` and `html5lib` from pip dependencies
+- Bump `Jinja2` to 2.11.3
 - Bump pip-compile to 5.4.0
 
 **Miscellaneous**

requirements.in

@@ -1,6 +1,6 @@
 Flask==1.1.2
 Werkzeug==1.0.1
-Jinja2==2.11.2
+Jinja2==2.11.3
 Flask-SQLAlchemy==2.4.3
 Flask-Caching==1.8.0
 Flask-Migrate==2.5.3

requirements.txt

@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile
 # To update, run:
 #
-#    pip-compile
+#    ./scripts/pip-compile.sh
 #
 alembic==1.4.3            # via dataset, flask-migrate
 aniso8601==8.0.0          # via flask-restx
@@ -28,9 +28,9 @@ gevent==20.9.0            # via -r requirements.in
 greenlet==0.4.17          # via gevent
 gunicorn==20.0.4          # via -r requirements.in
 idna==2.10                # via requests
-importlib-metadata==2.0.0  # via jsonschema
+importlib-metadata==3.7.3  # via jsonschema
 itsdangerous==1.1.0       # via -r requirements.in, flask
-jinja2==2.11.2            # via -r requirements.in, flask
+jinja2==2.11.3            # via -r requirements.in, flask
 jmespath==0.10.0          # via boto3, botocore
 jsonschema==3.2.0         # via flask-restx
 mako==1.1.3               # via alembic
@@ -56,10 +56,11 @@ six==1.15.0               # via bcrypt, flask-marshmallow, flask-restx, jsonsche
 sqlalchemy-utils==0.36.6  # via -r requirements.in
 sqlalchemy==1.3.17        # via -r requirements.in, alembic, dataset, flask-sqlalchemy, marshmallow-sqlalchemy, sqlalchemy-utils
 tenacity==6.2.0           # via -r requirements.in
+typing-extensions==3.7.4.3  # via importlib-metadata
 urllib3==1.25.11          # via botocore, requests
 werkzeug==1.0.1           # via -r requirements.in, flask, flask-restx
 wtforms==2.3.1            # via -r requirements.in
-zipp==3.4.0               # via importlib-metadata
+zipp==3.4.1               # via importlib-metadata
 zope.event==4.5.0         # via gevent
 zope.interface==5.2.0     # via gevent
 

scripts/pip-compile.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+# Script to pin Python requirements in a Docker container
+ROOTDIR=`pwd -P`
+docker run \
+    --rm \
+    --entrypoint bash \
+    -v $ROOTDIR:/mnt/CTFd \
+    -e CUSTOM_COMPILE_COMMAND='./scripts/pip-compile.sh' \
+    -it python:3.7 \
+    -c 'cd /mnt/CTFd && pip install pip-tools==5.4.0 && pip-compile'