Bump tera from 2.1.0 to 2.3.0

[dependabot]

Bumps tera from 2.1.0 to 2.3.0.

Changelog

Sourced from tera's changelog.

2.3.0 (2026-08-26)

• Add State::{escape,autoescaping_enabled,escape_if_needed}
• Add StringInput to use for input/parameters that is safety aware and use it for built-in filters: this means you should need less | safe and that string safety is passed around correctly. Safety is dropped by filters where the changes depend on the content itself (truncate can cut anywhere) and preserved when they specify exactly what changes (trim, replace).
• Add escape filter that is safety aware (it will not escape an already safe string) and uses the current instance escape function
• Escaping included templates is now done base on where it's included rather than the included template itself: for example a .txt included in a .html will now be autoescaped if Tera autoescapes on .html.
• Fix double escape of filter/set blocks

2.2.0 (2026-08-20)

• Do not reserialize existing Value when serializing to a Value
• Error on content in children templates that would have been ignored
• Allows blocks inside if/elif/else again like in v1
• Allows the indentation character of the indent filter to be configured
• Add chained filter sections

2.1.1 (2026-08-11)

• Fix component default value not allowing negative numbers
• Fix component default value not checking whether default value matches expected type

Commits

• 32c5669 Bump things
• a0d9ad6 Add back locale to date filter (#1026)
• 93a4704 Escaping (#1024)
• dce5070 stop pre-sizing vecs in state
• b7a28b3 DRY writing values in interpreter with fast path for strings
• a460e07 Mention ignore missing in migration
• 747136e Mention jiff format link in migration
• 1c9848a Avoid huge dump in the terminal on sort/group_by error (#1023)
• cd9c2dd Expose escape fn on State (#1019)
• ca78425 Ready for release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)