chore: bump minijinja from 2.21.0 to 2.23.0

[dependabot]

Bumps minijinja from 2.21.0 to 2.23.0.

Changelog

Sourced from minijinja's changelog.

2.23.0

• Fixed Unicode identifiers in templates rendered through the Python bindings.

2.22.0

• Changed rendering of none and boolean values to None, True, and False for Jinja2 compatibility in Rust and Go. #913
• Added StringInput for custom Rust filters and functions that transform strings while preserving safety provenance.
• Fixed safety handling in string-transforming and composing filters to preserve safe strings and escape unsafe fragments in Rust and Go.
• Fixed the split filter to return a sequence, enabling negative indexing and slicing in Rust and Go. #909
• Fixed Python-compatible dict methods being shadowed by same-named map keys. #903
• Fixed loop-local assignments leaking into subsequent iterations in Rust and Go. #912

Commits

• 19af7d4 chore(release): 2.23.0
• 7f63616 docs(changelog): document Python Unicode identifiers
• 179652f ref: Remove CLAUDE.md
• 52b1cc6 ref: Move claude stuff
• 0d4c6f4 ref: Remove broken symlinks
• be3c6f5 fix(python): enable Unicode identifiers
• d5bf25e chore(release): 2.22.0
• cdbd4a9 docs(changelog): document unreleased filter fixes
• d715d56 fix: doc link
• cd62d8c fix(filters): preserve safety in string transformations
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
minijinja	[< 1, > 0.31.0]
minijinja	[>= 1.a, < 2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[prql-bot]

Lock-only bump, and the one place minijinja is used is unaffected: prqlc/prqlc/src/cli/jinja.rs calls minijinja::machinery::tokenize plus Token/Span/SyntaxConfig/WhitespaceConfig, so all of 2.22.0's behaviour changes (none/bool rendering, the split filter, safety provenance, dict-method shadowing, loop-local assignments) are render-side and out of the path. cargo check -p prqlc --locked and the 5 tests in that module pass against 2.23.0 — worth checking explicitly, since the Cargo.toml comment notes the lexer sits behind unstable_machinery and isn't semver-covered.

The unrelated-looking second hunk is a resolver dedup, not a stray edit: indexmap 2.11.4 moves from hashbrown 0.15.5 to 0.16.1, which was already in the lock (arrow-array, hashlink 0.11, rsqlite-vfs). cargo metadata --locked resolves clean, and both crates declare MSRVs (1.65.0, 1.70) well under the workspace's 1.81.0.

CI state

Settled green. Every check on 0aff65a passed, including test-rust with test-dbs-external,lsp, test-msrv, test-deps-min-versions, and the final check-ok-to-merge.

The check-ok-to-merge FAILURE visible earlier belonged to run 31891407305, whose own conclusion was cancelled — the concurrency cascade making an if: always() omnibus resolve red. The replacement run re-registered it as SUCCESS.

Side note for whoever tends the bot: poll-pr-checks.sh can't verify any PR in this repo — it bails with more than 100 check contexts (exit 2), because this repo's tests matrix registers more than one page of contexts.