GeezerVison

Sourced from copier's releases.

v9.15.2 (2026-06-12)

Fix

• report template path for Jinja errors in path segments (#2686)
• fix answers file override/setting to use full path and not only filename
• treat blank boolean strings as false (#2675)
• updating: don't skip gitignored .rej files when converting to inline conflict markers (#2668)

Refactor

• deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

• prevent trust bypass via path traversal in trusted template URLs

v9.15.1 (2026-05-13)

Fix

• enrich invalid choice error message with variable name and valid choices (#2662)
• restore support for copier copy when git is not available

v9.15.0 (2026-04-30)

Feat

• add support for enabling StrictUndefined in Jinja environment (#2587)

Fix

• clean up temporary clone directory when internal git clone is interrupted
• avoid double-escaping backslashes in Git paths with PathSpec v1.1.0+
• updating: propagate executable-bit changes even when Git ignores file mode changes

v9.14.3 (2026-04-10)

Fix

• vcs: fix Git tag lookup for template SSH URLs without ssh:// scheme

v9.14.2 (2026-04-09)

Fix

• vcs: fix Git tag lookup for relative local template paths
• vcs: support git worktrees in is_git_repo_root (#2586)
• migrations: use configurable Jinja delimiters for default migration condition

v9.14.1 (2026-03-31)

Refactor

• make YieldExtension self-contained

... (truncated)

Sourced from copier's changelog.

v9.15.2 (2026-06-12)

Fix

• report template path for Jinja errors in path segments (#2686)
• fix answers file override/setting to use full path and not only filename
• treat blank boolean strings as false (#2675)
• updating: don't skip gitignored .rej files when converting to inline conflict markers (#2668)

Refactor

• deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

• prevent trust bypass via path traversal in trusted template URLs

v9.15.1 (2026-05-13)

Fix

• enrich invalid choice error message with variable name and valid choices (#2662)
• restore support for copier copy when git is not available

v9.15.0 (2026-04-30)

Feat

• add support for enabling StrictUndefined in Jinja environment (#2587)

Fix

• clean up temporary clone directory when internal git clone is interrupted
• avoid double-escaping backslashes in Git paths with PathSpec v1.1.0+
• updating: propagate executable-bit changes even when Git ignores file mode changes

v9.14.3 (2026-04-10)

Fix

• vcs: fix Git tag lookup for template SSH URLs without ssh:// scheme

v9.14.2 (2026-04-09)

Fix

• vcs: fix Git tag lookup for relative local template paths
• vcs: support git worktrees in is_git_repo_root (#2586)
• migrations: use configurable Jinja delimiters for default migration condition

... (truncated)

• a90729e bump: version 9.15.1 → 9.15.2
• f4fb6ef fix: prevent trust bypass via path traversal in trusted template URLs
• 67e8f80 build(deps): update dependency ruff to v0.15.17
• 20fcd22 build(deps): update dependency plumbum to v2
• 1686a3f build(deps): update dependency devbox to v0.17.3
• 149a575 build(deps): update codecov/codecov-action action to v7
• c0fc442 build(deps): update dependency inline-snapshot to v0.34.1
• eaf35d7 build(deps): update dependency uv to v0.11.17
• 9beb006 build(deps): update astral-sh/setup-uv action to v8.2.0
• e5b8d32 build(deps): update dependency rumdl to v0.2.13
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.