Sourced from github.com/flosch/pongo2/v6's releases.

v6.1.0 - security and bug-fix update

Changelog

All notable changes to this project will be documented in this file.

[6.1.0] - 2026-05-02

This release is primarily a security and bug-fix update. All users are encouraged to update.

Fixed

• removetags filter: tag names containing regex metacharacters no longer panic the renderer.
• {% cycle %} tag: cycle index is now tracked per template execution instead of mutated on the parsed AST node. Concurrent renders of a cached template no longer race, and sequential renders no longer leak state from a previous execution.
• {% ifchanged %} tag: lastValues/lastContent are now tracked per template execution instead of mutated on the parsed AST node, fixing both a data race under concurrent renders and state leaking between sequential renders of a cached template.
• {% ifchanged %} tag: rendering an {% ifchanged %} block without an {% else %} branch no longer crashes with a nil-pointer dereference when the watched value is unchanged. Matches Django's behavior of producing no output.
• {% filter %} tag: BanFilter is now enforced inside {% filter %} blocks.

Changed

• {% ssi %} plaintext mode now reads the included file through the configured TemplateLoader chain instead of ioutil.ReadFile, so non-filesystem loaders (FSLoader, HttpFilesystemLoader, custom) can serve SSI content.
• Template error reporting (RawLine) now reads source lines through the template's loader chain instead of opening files directly with os.Open. Error line extraction now works for any TemplateLoader.

Removed

• SandboxedFilesystemLoader and NewSandboxedFilesystemLoader have been removed. They were marked WIP, never wired into any enforcement path, and behaved as a thin pass-through to LocalFilesystemLoader. Callers should use LocalFilesystemLoader directly; sandboxing should be implemented via a custom TemplateLoader.

  Note: this is technically an API-breaking removal, but the type was unused WIP code that never provided sandboxing.

... (truncated)

Sourced from github.com/flosch/pongo2/v6's changelog.

[6.1.0] - 2026-05-02

This release is primarily a security and bug-fix update. All users are encouraged to update.

Fixed

• removetags filter: tag names containing regex metacharacters no longer panic the renderer.
• {% cycle %} tag: cycle index is now tracked per template execution instead of mutated on the parsed AST node. Concurrent renders of a cached template no longer race, and sequential renders no longer leak state from a previous execution.
• {% ifchanged %} tag: lastValues/lastContent are now tracked per template execution instead of mutated on the parsed AST node, fixing both a data race under concurrent renders and state leaking between sequential renders of a cached template.
• {% ifchanged %} tag: rendering an {% ifchanged %} block without an {% else %} branch no longer crashes with a nil-pointer dereference when the watched value is unchanged. Matches Django's behavior of producing no output.
• {% filter %} tag: BanFilter is now enforced inside {% filter %} blocks.

Changed

• {% ssi %} plaintext mode now reads the included file through the configured TemplateLoader chain instead of ioutil.ReadFile, so non-filesystem loaders (FSLoader, HttpFilesystemLoader, custom) can serve SSI content.
• Template error reporting (RawLine) now reads source lines through the template's loader chain instead of opening files directly with os.Open. Error line extraction now works for any TemplateLoader.

Removed

• SandboxedFilesystemLoader and NewSandboxedFilesystemLoader have been removed. They were marked WIP, never wired into any enforcement path, and behaved as a thin pass-through to LocalFilesystemLoader. Callers should use LocalFilesystemLoader directly; sandboxing should be implemented via a custom TemplateLoader.

  Note: this is technically an API-breaking removal, but the type was unused WIP code that never provided sandboxing.

Documentation

• Clarified that pongo2 does not provide a true sandbox. BanTag and BanFilter only refuse to compile templates that reference banned names; they do not isolate Go execution, restrict filesystem access,

... (truncated)

• 0d8aa98 chore(release): prepare v6.1.0
• 75e020c fix(ifchanged): use per-execution state instead of shared AST node state
• f468d6f fix(cycle): use per-execution state instead of shared AST node state
• dfa652d fix(ban): synchronize BanTag/BanFilter with template creation
• 07b2b10 fix(widthratio): render empty string when max is zero
• 42d30e0 fix(removetags): escape tag-name regex metacharacters
• c5cf3fc docs(readme): document that template loaders do not clamp to baseDir
• 9a92a21 fix(ifchanged): handle missing else branch without panic
• ed38d0b fix(filter): enforce BanFilter inside {% filter %} tag
• 2818c7d docs: clarify that pongo2 has no real sandbox, only banned tags/filters
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)