[Snyk] Security upgrade jinja2 from 3.0.3 to 3.1.5 #7

	name: Test UBSan

	on:
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]
	paths-ignore:
	- .mailmap
	- '**.md'
	- AUTHORS
	- doc/**
	- .github/**
	- '!.github/workflows/test-ubsan.yml'
	push:
	branches:
	- main
	- canary
	- v[0-9]+.x-staging
	- v[0-9]+.x
	paths-ignore:
	- .mailmap
	- '**.md'
	- AUTHORS
	- doc/**
	- .github/**
	- '!.github/workflows/test-ubsan.yml'

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	env:
	PYTHON_VERSION: '3.11'
	FLAKY_TESTS: keep_retrying

	permissions:
	contents: read

	jobs:
	test-ubsan:
	if: github.event.pull_request.draft == false
	runs-on: ubuntu-20.04
	env:
	CC: gcc
	CXX: g++
	LINK: g++
	CONFIG_FLAGS: --enable-ubsan
	steps:
	- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	with:
	persist-credentials: false
	- name: Store suppressions path
	run: \|
	echo "UBSAN_OPTIONS=suppressions=$GITHUB_WORKSPACE/suppressions.supp" >> $GITHUB_ENV
	- name: Set up Python ${{ env.PYTHON_VERSION }}
	uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
	with:
	python-version: ${{ env.PYTHON_VERSION }}
	- name: Environment Information
	run: npx envinfo
	- name: Build
	run: make build-ci -j2 V=1
	- name: Test
	run: make run-ci -j2 V=1 TEST_CI_ARGS="-p actions --node-args='--test-reporter=spec' --node-args='--test-reporter-destination=stdout' -t 300 --measure-flakiness 9"

Provide feedback