build: bump mako from 1.2.2 to 1.3.11 (#44286)
Bumps mako from 1.2.2 to 1.3.11.
Release notes
Sourced from mako's releases.
1.3.11
Released: Tue Apr 14 2026
bug
[bug] [template] Fixed issue in
TemplateLookupwhere a URI with a double-slash prefix (e.g.//../../) could bypass the directory traversal check inTemplate, allowing reads of arbitrary files outside of the template directory. The issue was caused by an inconsistency in how leading slashes were stripped betweenTemplateLookup.get_template()andTemplateinitialization.References: #434
1.3.10
Released: Thu Apr 10 2025
bug
[bug] [lexer] Fix undefined variable errors when
strict_undefined=Truewhen using a nested list comprehension. Pull request courtesy Sébastien Granjoux.References: #418
1.3.9
Released: Tue Feb 4 2025
bug
[bug] [tests] Fixed test suite to not rely upon ancient "future division" statement to test the
Template.future_importsfeature. The test is replaced with one that tests only the rendering, not the ultimate effect.References: #408
1.3.8
Released: Sat Dec 7 2024
bug
- [bug] [lexer] Reverted the fix for #140 released in Mako 1.3.7 as it produced regressions in existing user code.
... (truncated)
Commits
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don’t alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.Signed-off-by: dependabot[bot] support@github.com Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
版权所有:中国计算机学会技术支持:开源发展技术委员会
京ICP备13000930号-9
京公网安备 11010802032778号
The Servo Parallel Browser Engine Project
Servo is a prototype web browser engine written in the Rust language. It is currently developed on 64-bit macOS, 64-bit Linux, 64-bit Windows, 64-bit OpenHarmony, and Android.
Servo welcomes contribution from everyone. Check out:
Coordination of Servo development happens:
Getting started
For more detailed build instructions, see the Servo Book under Getting the Code and Building Servo.
macOS
brew.uv:curl -LsSf https://astral.sh/uv/install.sh | shrustup:curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | shcargois available./mach bootstrap./mach buildLinux
curl:sudo pacman -S --needed curlsudo apt install curlsudo dnf install curlsudo emerge net-misc/curluv:curl -LsSf https://astral.sh/uv/install.sh | shrustup:curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | shcargois available./mach bootstrap./mach buildWindows
uv,choco, andrustupMicrosoft.VisualStudio.Component.Windows{10, 11}SDK.{>=19041})Microsoft.VisualStudio.Component.VC.Tools.x86.x64)Microsoft.VisualStudio.Component.VC.ATL)cargois available.\mach bootstrap.\mach buildAndroid
ANDROID_SDK_ROOTANDROID_NDK_ROOT:$ANDROID_SDK_ROOT/ndk/28.2.13676358/ANDROID_SDK_ROOTcan be any directory (such as~/android-sdk). All of the Android build dependencies will be installed there.$ANDROID_SDK_ROOT/cmdline-tools/latest.OpenHarmony
HarmonyOS NEXTvs pureOpenHarmony) the build configuration will differ slightly.DEVECO_SDK_HOME(Required when targetingHarmonyOS NEXT)OHOS_BASE_SDK_HOME(Required when targetingOpenHarmony)OHOS_SDK_NATIVE(e.g.${DEVECO_SDK_HOME}/default/openharmony/nativeor${OHOS_BASE_SDK_HOME}/${API_VERSION}/native)SERVO_OHOS_SIGNING_CONFIG: Path to json file containing a valid signing configuration for the demo app.--flavor=<default|harmonyos>tomach <build|package|install>.