chore(deps): update dependency copier to v9.17.1

[serious-scaffold]

This PR contains the following updates:

Package	Update	Change
copier	minor	9.11.0 -> 9.17.1

---

Release Notes

copier-org/copier (copier)

v9.17.1

Compare Source

Security

• prevent code execution via Jinja finalizer by disallowing YAML tags
• prevent code execution via Jinja sandbox escape through path and settings objects

v9.17.0

Compare Source

Feat

• add --ask flag to force prompting of selected questions (#​2705)

Security

• prevent trust bypass via encoded URL traversal

v9.16.0

Compare Source

Feat

• cache remote git templates as local mirrors with worktrees (#​2720)

Fix

• updating: preserve and update template-managed gitignored files (#​2730)

v9.15.2

Compare Source

Fix

• report template path for Jinja errors in path segments (#​2686)
• fix answers file override/setting to use full path and not only filename
• treat blank boolean strings as false (#​2675)
• updating: don't skip gitignored .rej files when converting to inline conflict
  markers (#​2668)

Refactor

• deprecate locating {{ _copier_conf.answers_file }}.jinja file in non-root directory

Security

• prevent trust bypass via path traversal in trusted template URLs

v9.15.1

Compare Source

Fix

• enrich invalid choice error message with variable name and valid choices (#​2662)
• restore support for copier copy when git is not available

v9.15.0

Compare Source

Feat

• add support for enabling StrictUndefined in Jinja environment (#​2587)

Fix

• clean up temporary clone directory when internal git clone is interrupted
• avoid double-escaping backslashes in Git paths with PathSpec v1.1.0+
• updating: propagate executable-bit changes even when Git ignores file mode changes

v9.14.3

Compare Source

Fix

• vcs: fix Git tag lookup for template SSH URLs without ssh:// scheme

v9.14.2

Compare Source

Fix

• vcs: fix Git tag lookup for relative local template paths
• vcs: support git worktrees in is_git_repo_root (#​2586)
• migrations: use configurable Jinja delimiters for default migration condition

v9.14.1

Compare Source

Refactor

• make YieldExtension self-contained

Security

• require --trust for _external_data paths outside subproject root
• disallow _subdirectory path outside template root

v9.14.0

Compare Source

Feat

• cli: add --answers-file flag to check-update command

Fix

• only warn about dirty template when checking out HEAD
• cli: show only supported flags in check-update command help output

v9.13.1

Compare Source

Fix

• vcs: make Git version parsing robust to vendor-suffixed patch versions

v9.13.0

Compare Source

Feat

• add CLI subcommand check-update to check for new template version (#​2463)

Refactor

• cli: call public run_* functions instead of internal Worker.run_* methods

v9.12.0

Compare Source

Feat

• add new settings API with minimal surface
• re-export Phase enum at package level

Fix

• updating: apply skip-if-exists patterns as gitignore-style at subproject root in
  update algorithm
• updating: anchor removed file paths to project root in update algorithm
• updating: normalize user-deleted paths before skip-if-exists pattern matching
  during updates

Refactor

• typing: use builtin types in public API signatures
• deprecate public settings module and its symbols
• replace **kwargs with explicit parameters in run_{copy,recopy,update} functions

v9.11.3

Compare Source

Fix

• updating: include non-question answers when generating fresh copy of new
  template
• updating: ignore Git hooks on internal checkout before 3-way merging file with
  conflicts (#​2432)
• avoid pattern deprecation warning for pathspec v1.0.0+

v9.11.2

Compare Source

Fix

• updating: restore support for preserved symlinks pointing outside subproject
  (#​2427)

Security

• disallow symlink-based includes outside template root
• disallow symlink-following write operations outside destination directory (#​2427)

v9.11.1

Compare Source

Fix

• updating: avoid circular reference when rendering JSON-serialized _copier_conf
  variable

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, between day 1 and 7 of the month ( * 0-3 1-7 * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM, between day 1 and 7 of the month ( * 0-3 1-7 * * ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (bc495cc) to head (1aabc40).

Additional details and impacted files

@@            Coverage Diff            @@
##            master      #236   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            3         3           
=========================================
  Hits             3         3           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.