all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fea5:b1da
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 3237c0c2-eb37-47bf-8e06-89f6333d1be1
        host_id: 82101243836454d7401d5893feae9e2c5df7cc291646d8a99b33b53b
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fea5:b1da
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.110
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.138
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fea5:b1da
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job mypy explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#42>'
      - '<Job openstack-project-manager-mypy explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/openstack-project-manager/.zuul.yaml@main#2>'
      - '<Job openstack-project-manager-mypy explicit: None implied: None source:
        osism/openstack-project-manager/.zuul.yaml@main#14>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 4b34823864ce4adc8bdb69ecca4c1640
      build_refs:
      - branch: main
        change: '271'
        change_message: "Update dependency dynaconf to v3.2.13 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [dynaconf](https://redirect.github.com/dynaconf/dynaconf) | `==3.2.12` \u2192
          `==3.2.13` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/dynaconf/3.2.13?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/dynaconf/3.2.12/3.2.13?slim=true)
          |\n\n### GitHub Vulnerability Alerts\n\n#### [CVE-2026-33154](https://redirect.github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p)\n\n###
          Summary\nDynaconf is vulnerable to Server-Side Template Injection (SSTI)
          due to unsafe template evaluation in the @&#8203;jinja resolver.\nWhen the
          jinja2 package is installed, Dynaconf evaluates template expressions embedded
          in configuration values without a sandboxed environment.\n\nIf an attacker
          can influence configuration sources such as:\nenvironment variables\n.env
          files\ncontainer environment configuration\nCI/CD secrets\nthey can execute
          arbitrary OS commands on the host system.\nIn addition, the @&#8203;format
          resolver allows object graph traversal, which may expose sensitive runtime
          objects and environment variables.\n\n### Details\nThe vulnerability arises
          because Dynaconf's string resolvers lack proper security boundaries.\n\n1.
          @&#8203;jinja Resolver\nThe @&#8203;jinja resolver renders templates using
          full Jinja2 evaluation.\nHowever, the rendering context is not sandboxed,
          which allows attackers to access Python's internal attributes.\nUsing objects
          such as cycler, attackers can reach Python's __globals__ and import the
          os module.\n\nExample attack path\ncycler\n \u2192 __init__\n \u2192 __globals__\n
          \u2192 os\n \u2192 popen()\nThis leads to arbitrary command execution.\n\n2.
          @&#8203;format Resolver\nThe @&#8203;format resolver performs Python string
          formatting using internal objects.\nThis allows attackers to traverse Python's
          object graph and access sensitive runtime objects.\nExample traversal:\n{this.__class__.__init__.__globals__[os].environ}\nThis
          can expose\n- API keys\n- database credentials\n- internal service tokens\n-
          environment secrets\n\n### PoC\n```\nimport os\nfrom dynaconf import Dynaconf\n\n#
          Malicious configuration injection\nos.environ[\"DYNACONF_RCE\"] = \"@&#8203;jinja
          {{ cycler.__init__.__globals__.os.popen('id').read() }}\"\nsettings = Dynaconf()\nprint(\"[!]
          Command Execution Result:\")\nprint(settings.RCE)\n```\n\n### Impact\nSuccessful
          exploitation allows attackers to:\n- Execute arbitrary OS commands on the
          host system\n- Access sensitive environment variables\n- Compromise application
          secrets\n- Fully compromise the running application process\nBecause configuration
          values may originate from CI/CD pipelines, container orchestration systems,
          or environment injection, this vulnerability can become remotely exploitable
          in real-world deployments.\n\n### Remediation / Mitigation (Examples)\n\n1.
          Use Jinja2 sandbox for template rendering\n```\nfrom jinja2.sandbox import
          SandboxedEnvironment\nenv = SandboxedEnvironment()\ntemplate = env.from_string(\"{{
          config_value }}\")\nsafe_value = template.render(config_value=user_input)```\n```\n2.
          Restrict @&#8203;format usage to trusted values\n```\nsafe_value = \"{name}\".format(name=trusted_name)\n```\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>dynaconf/dynaconf (dynaconf)</summary>\n\n###
          [`v3.2.13`](https://redirect.github.com/dynaconf/dynaconf/releases/tag/3.2.13)\n\n[Compare
          Source](https://redirect.github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13)\n\n####
          What's Changed\n\n##### Bug Fixes\n\n- Fix `@jinja` and `@format` templating
          vulnerabilities. \\*By [@&#8203;pedro-psb](https://redirect.github.com/pedro-psb)
          \\*.\n- Fix failing `@get` converter. \\*By [@&#8203;rochacbruno](https://redirect.github.com/rochacbruno)
          \\*\n\n**Full Changelog**: <https://github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - \"\" (UTC),
          Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you
          want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/openstack-project-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/openstack-project-manager/pull/271
        commit_id: e04d852dfe271f29dcc17568a8aeea346aac9742
        patchset: 0c3b80b93a0cb0474add48403d848ccc0c8f1cbf
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-project-manager
          name: osism/openstack-project-manager
          short_name: openstack-project-manager
        src_dir: src/github.com/osism/openstack-project-manager
        topic: null
      buildset: 7da82e8ebe094aa8823af2d9adeaa501
      buildset_refs:
      - branch: main
        change: '271'
        change_message: "Update dependency dynaconf to v3.2.13 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [dynaconf](https://redirect.github.com/dynaconf/dynaconf) | `==3.2.12` \u2192
          `==3.2.13` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/dynaconf/3.2.13?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/dynaconf/3.2.12/3.2.13?slim=true)
          |\n\n### GitHub Vulnerability Alerts\n\n#### [CVE-2026-33154](https://redirect.github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p)\n\n###
          Summary\nDynaconf is vulnerable to Server-Side Template Injection (SSTI)
          due to unsafe template evaluation in the @&#8203;jinja resolver.\nWhen the
          jinja2 package is installed, Dynaconf evaluates template expressions embedded
          in configuration values without a sandboxed environment.\n\nIf an attacker
          can influence configuration sources such as:\nenvironment variables\n.env
          files\ncontainer environment configuration\nCI/CD secrets\nthey can execute
          arbitrary OS commands on the host system.\nIn addition, the @&#8203;format
          resolver allows object graph traversal, which may expose sensitive runtime
          objects and environment variables.\n\n### Details\nThe vulnerability arises
          because Dynaconf's string resolvers lack proper security boundaries.\n\n1.
          @&#8203;jinja Resolver\nThe @&#8203;jinja resolver renders templates using
          full Jinja2 evaluation.\nHowever, the rendering context is not sandboxed,
          which allows attackers to access Python's internal attributes.\nUsing objects
          such as cycler, attackers can reach Python's __globals__ and import the
          os module.\n\nExample attack path\ncycler\n \u2192 __init__\n \u2192 __globals__\n
          \u2192 os\n \u2192 popen()\nThis leads to arbitrary command execution.\n\n2.
          @&#8203;format Resolver\nThe @&#8203;format resolver performs Python string
          formatting using internal objects.\nThis allows attackers to traverse Python's
          object graph and access sensitive runtime objects.\nExample traversal:\n{this.__class__.__init__.__globals__[os].environ}\nThis
          can expose\n- API keys\n- database credentials\n- internal service tokens\n-
          environment secrets\n\n### PoC\n```\nimport os\nfrom dynaconf import Dynaconf\n\n#
          Malicious configuration injection\nos.environ[\"DYNACONF_RCE\"] = \"@&#8203;jinja
          {{ cycler.__init__.__globals__.os.popen('id').read() }}\"\nsettings = Dynaconf()\nprint(\"[!]
          Command Execution Result:\")\nprint(settings.RCE)\n```\n\n### Impact\nSuccessful
          exploitation allows attackers to:\n- Execute arbitrary OS commands on the
          host system\n- Access sensitive environment variables\n- Compromise application
          secrets\n- Fully compromise the running application process\nBecause configuration
          values may originate from CI/CD pipelines, container orchestration systems,
          or environment injection, this vulnerability can become remotely exploitable
          in real-world deployments.\n\n### Remediation / Mitigation (Examples)\n\n1.
          Use Jinja2 sandbox for template rendering\n```\nfrom jinja2.sandbox import
          SandboxedEnvironment\nenv = SandboxedEnvironment()\ntemplate = env.from_string(\"{{
          config_value }}\")\nsafe_value = template.render(config_value=user_input)```\n```\n2.
          Restrict @&#8203;format usage to trusted values\n```\nsafe_value = \"{name}\".format(name=trusted_name)\n```\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>dynaconf/dynaconf (dynaconf)</summary>\n\n###
          [`v3.2.13`](https://redirect.github.com/dynaconf/dynaconf/releases/tag/3.2.13)\n\n[Compare
          Source](https://redirect.github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13)\n\n####
          What's Changed\n\n##### Bug Fixes\n\n- Fix `@jinja` and `@format` templating
          vulnerabilities. \\*By [@&#8203;pedro-psb](https://redirect.github.com/pedro-psb)
          \\*.\n- Fix failing `@get` converter. \\*By [@&#8203;rochacbruno](https://redirect.github.com/rochacbruno)
          \\*\n\n**Full Changelog**: <https://github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - \"\" (UTC),
          Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you
          want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/openstack-project-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/openstack-project-manager/pull/271
        commit_id: e04d852dfe271f29dcc17568a8aeea346aac9742
        patchset: 0c3b80b93a0cb0474add48403d848ccc0c8f1cbf
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-project-manager
          name: osism/openstack-project-manager
          short_name: openstack-project-manager
        src_dir: src/github.com/osism/openstack-project-manager
        topic: null
      change: '271'
      change_message: "Update dependency dynaconf to v3.2.13 [SECURITY]\n\nThis PR
        contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [dynaconf](https://redirect.github.com/dynaconf/dynaconf) | `==3.2.12` \u2192
        `==3.2.13` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/dynaconf/3.2.13?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/dynaconf/3.2.12/3.2.13?slim=true)
        |\n\n### GitHub Vulnerability Alerts\n\n#### [CVE-2026-33154](https://redirect.github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p)\n\n###
        Summary\nDynaconf is vulnerable to Server-Side Template Injection (SSTI) due
        to unsafe template evaluation in the @&#8203;jinja resolver.\nWhen the jinja2
        package is installed, Dynaconf evaluates template expressions embedded in
        configuration values without a sandboxed environment.\n\nIf an attacker can
        influence configuration sources such as:\nenvironment variables\n.env files\ncontainer
        environment configuration\nCI/CD secrets\nthey can execute arbitrary OS commands
        on the host system.\nIn addition, the @&#8203;format resolver allows object
        graph traversal, which may expose sensitive runtime objects and environment
        variables.\n\n### Details\nThe vulnerability arises because Dynaconf's string
        resolvers lack proper security boundaries.\n\n1. @&#8203;jinja Resolver\nThe
        @&#8203;jinja resolver renders templates using full Jinja2 evaluation.\nHowever,
        the rendering context is not sandboxed, which allows attackers to access Python's
        internal attributes.\nUsing objects such as cycler, attackers can reach Python's
        __globals__ and import the os module.\n\nExample attack path\ncycler\n \u2192
        __init__\n \u2192 __globals__\n \u2192 os\n \u2192 popen()\nThis leads to
        arbitrary command execution.\n\n2. @&#8203;format Resolver\nThe @&#8203;format
        resolver performs Python string formatting using internal objects.\nThis allows
        attackers to traverse Python's object graph and access sensitive runtime objects.\nExample
        traversal:\n{this.__class__.__init__.__globals__[os].environ}\nThis can expose\n-
        API keys\n- database credentials\n- internal service tokens\n- environment
        secrets\n\n### PoC\n```\nimport os\nfrom dynaconf import Dynaconf\n\n# Malicious
        configuration injection\nos.environ[\"DYNACONF_RCE\"] = \"@&#8203;jinja {{
        cycler.__init__.__globals__.os.popen('id').read() }}\"\nsettings = Dynaconf()\nprint(\"[!]
        Command Execution Result:\")\nprint(settings.RCE)\n```\n\n### Impact\nSuccessful
        exploitation allows attackers to:\n- Execute arbitrary OS commands on the
        host system\n- Access sensitive environment variables\n- Compromise application
        secrets\n- Fully compromise the running application process\nBecause configuration
        values may originate from CI/CD pipelines, container orchestration systems,
        or environment injection, this vulnerability can become remotely exploitable
        in real-world deployments.\n\n### Remediation / Mitigation (Examples)\n\n1.
        Use Jinja2 sandbox for template rendering\n```\nfrom jinja2.sandbox import
        SandboxedEnvironment\nenv = SandboxedEnvironment()\ntemplate = env.from_string(\"{{
        config_value }}\")\nsafe_value = template.render(config_value=user_input)```\n```\n2.
        Restrict @&#8203;format usage to trusted values\n```\nsafe_value = \"{name}\".format(name=trusted_name)\n```\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>dynaconf/dynaconf (dynaconf)</summary>\n\n###
        [`v3.2.13`](https://redirect.github.com/dynaconf/dynaconf/releases/tag/3.2.13)\n\n[Compare
        Source](https://redirect.github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13)\n\n####
        What's Changed\n\n##### Bug Fixes\n\n- Fix `@jinja` and `@format` templating
        vulnerabilities. \\*By [@&#8203;pedro-psb](https://redirect.github.com/pedro-psb)
        \\*.\n- Fix failing `@get` converter. \\*By [@&#8203;rochacbruno](https://redirect.github.com/rochacbruno)
        \\*\n\n**Full Changelog**: <https://github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13>\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - \"\" (UTC), Automerge
        - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled
        by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
        Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
        **Ignore**: Close this PR and you won't be reminded about these updates again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/openstack-project-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/osism/openstack-project-manager/pull/271
      child_jobs: []
      commit_id: e04d852dfe271f29dcc17568a8aeea346aac9742
      event_id: 042d25b0-2c66-11f1-99ac-cad8601572a7
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/4b34823864ce4adc8bdb69ecca4c1640/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/4b34823864ce4adc8bdb69ecca4c1640/work/logs
        result_data_file: /var/lib/zuul/builds/4b34823864ce4adc8bdb69ecca4c1640/work/results.json
        src_root: /var/lib/zuul/builds/4b34823864ce4adc8bdb69ecca4c1640/work/src
        work_root: /var/lib/zuul/builds/4b34823864ce4adc8bdb69ecca4c1640/work
      include_vars: []
      items:
      - branch: main
        change: '271'
        change_message: "Update dependency dynaconf to v3.2.13 [SECURITY]\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [dynaconf](https://redirect.github.com/dynaconf/dynaconf) | `==3.2.12` \u2192
          `==3.2.13` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/dynaconf/3.2.13?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/dynaconf/3.2.12/3.2.13?slim=true)
          |\n\n### GitHub Vulnerability Alerts\n\n#### [CVE-2026-33154](https://redirect.github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p)\n\n###
          Summary\nDynaconf is vulnerable to Server-Side Template Injection (SSTI)
          due to unsafe template evaluation in the @&#8203;jinja resolver.\nWhen the
          jinja2 package is installed, Dynaconf evaluates template expressions embedded
          in configuration values without a sandboxed environment.\n\nIf an attacker
          can influence configuration sources such as:\nenvironment variables\n.env
          files\ncontainer environment configuration\nCI/CD secrets\nthey can execute
          arbitrary OS commands on the host system.\nIn addition, the @&#8203;format
          resolver allows object graph traversal, which may expose sensitive runtime
          objects and environment variables.\n\n### Details\nThe vulnerability arises
          because Dynaconf's string resolvers lack proper security boundaries.\n\n1.
          @&#8203;jinja Resolver\nThe @&#8203;jinja resolver renders templates using
          full Jinja2 evaluation.\nHowever, the rendering context is not sandboxed,
          which allows attackers to access Python's internal attributes.\nUsing objects
          such as cycler, attackers can reach Python's __globals__ and import the
          os module.\n\nExample attack path\ncycler\n \u2192 __init__\n \u2192 __globals__\n
          \u2192 os\n \u2192 popen()\nThis leads to arbitrary command execution.\n\n2.
          @&#8203;format Resolver\nThe @&#8203;format resolver performs Python string
          formatting using internal objects.\nThis allows attackers to traverse Python's
          object graph and access sensitive runtime objects.\nExample traversal:\n{this.__class__.__init__.__globals__[os].environ}\nThis
          can expose\n- API keys\n- database credentials\n- internal service tokens\n-
          environment secrets\n\n### PoC\n```\nimport os\nfrom dynaconf import Dynaconf\n\n#
          Malicious configuration injection\nos.environ[\"DYNACONF_RCE\"] = \"@&#8203;jinja
          {{ cycler.__init__.__globals__.os.popen('id').read() }}\"\nsettings = Dynaconf()\nprint(\"[!]
          Command Execution Result:\")\nprint(settings.RCE)\n```\n\n### Impact\nSuccessful
          exploitation allows attackers to:\n- Execute arbitrary OS commands on the
          host system\n- Access sensitive environment variables\n- Compromise application
          secrets\n- Fully compromise the running application process\nBecause configuration
          values may originate from CI/CD pipelines, container orchestration systems,
          or environment injection, this vulnerability can become remotely exploitable
          in real-world deployments.\n\n### Remediation / Mitigation (Examples)\n\n1.
          Use Jinja2 sandbox for template rendering\n```\nfrom jinja2.sandbox import
          SandboxedEnvironment\nenv = SandboxedEnvironment()\ntemplate = env.from_string(\"{{
          config_value }}\")\nsafe_value = template.render(config_value=user_input)```\n```\n2.
          Restrict @&#8203;format usage to trusted values\n```\nsafe_value = \"{name}\".format(name=trusted_name)\n```\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>dynaconf/dynaconf (dynaconf)</summary>\n\n###
          [`v3.2.13`](https://redirect.github.com/dynaconf/dynaconf/releases/tag/3.2.13)\n\n[Compare
          Source](https://redirect.github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13)\n\n####
          What's Changed\n\n##### Bug Fixes\n\n- Fix `@jinja` and `@format` templating
          vulnerabilities. \\*By [@&#8203;pedro-psb](https://redirect.github.com/pedro-psb)
          \\*.\n- Fix failing `@get` converter. \\*By [@&#8203;rochacbruno](https://redirect.github.com/rochacbruno)
          \\*\n\n**Full Changelog**: <https://github.com/dynaconf/dynaconf/compare/3.2.12...3.2.13>\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - \"\" (UTC),
          Automerge - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about these updates again.\n\n---\n\n - [ ] <!-- rebase-check -->If you
          want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/openstack-project-manager).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/openstack-project-manager/pull/271
        commit_id: e04d852dfe271f29dcc17568a8aeea346aac9742
        patchset: 0c3b80b93a0cb0474add48403d848ccc0c8f1cbf
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-project-manager
          name: osism/openstack-project-manager
          short_name: openstack-project-manager
          src_dir: src/github.com/osism/openstack-project-manager
        topic: null
      job: openstack-project-manager-mypy
      jobtags: []
      max_attempts: 3
      message: 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
      patchset: 0c3b80b93a0cb0474add48403d848ccc0c8f1cbf
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/openstack-project-manager:
            canonical_name: github.com/osism/openstack-project-manager
            checkout: main
            commit: f2c3d8bad5db85ddd723a15089a4b973dc79f94a
          untrusted/project_1/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_2/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 4f450aa36c28b035ce97359a888edbd7599eaf31
          untrusted/project_3/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_1/github.com/osism/zuul-jobs/playbooks/mypy/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_1/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_2/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_3/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/openstack-project-manager
        name: osism/openstack-project-manager
        short_name: openstack-project-manager
        src_dir: src/github.com/osism/openstack-project-manager
      projects:
        github.com/osism/openstack-project-manager:
          canonical_hostname: github.com
          canonical_name: github.com/osism/openstack-project-manager
          checkout: main
          checkout_description: zuul branch
          commit: f2c3d8bad5db85ddd723a15089a4b973dc79f94a
          name: osism/openstack-project-manager
          required: false
          short_name: openstack-project-manager
          src_dir: src/github.com/osism/openstack-project-manager
      ref: refs/pull/271/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
