This PR contains the following updates:

Release Notes

v9.17.1

Compare Source

Security

• prevent code execution via Jinja finalizer by disallowing YAML tags
• prevent code execution via Jinja sandbox escape through path and settings objects

v9.17.0

Compare Source

Feat

• add --ask flag to force prompting of selected questions (#​2705)

Security

• prevent trust bypass via encoded URL traversal

v9.16.0

Compare Source

Feat

• cache remote git templates as local mirrors with worktrees (#​2720)

Fix

• updating: preserve and update template-managed gitignored files (#​2730)

v9.15.2

Compare Source

Fix

• report template path for Jinja errors in path segments (#​2686)
• fix answers file override/setting to use full path and not only filename
• treat blank boolean strings as false (#​2675)
• updating: don't skip gitignored .rej files when converting to inline conflict
  markers (#​2668)

Refactor

• deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

• prevent trust bypass via path traversal in trusted template URLs

v9.15.1

Compare Source

Fix

• enrich invalid choice error message with variable name and valid choices (#​2662)
• restore support for copier copy when git is not available

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, between day 1 and 7 of the month ( * 0-3 1-7 * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM, between day 1 and 7 of the month ( * 0-3 1-7 * * ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

• If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.