add explanation

.github/workflows/snyk.yml

@@ -41,12 +41,18 @@ jobs:
           # Update requirements.in with the snyk fix suggestions
           python tools/snyk-update.py
 
-          # Remove unnecessary file so that it doesn't get added to the repo
-          rm scan.json
-
           # Update requirements.txt
           make update-dependencies
 
+          # Check if there are any changes
+          if [ -z "$(git status --porcelain)" ]; then 
+            echo "Found vulnerable issues but no upgrade or patch available"
+            cat scan.json | jq '[.vulnerabilities[] | .id] | unique[]'
+          else 
+            echo "changed made"
+            git diff
+          fi
+
           # Fail so that PR is created
           exit 1
       - name: Create Pull Request

ckan/requirements.in

@@ -124,4 +124,4 @@ requests==2.31.0
 importlib-resources<6.0
 gevent>=23.9.0
 cryptography>=41.0.6
-jinja2>=3.1.3
+jinja2==3.1.2

ckan/requirements.txt

@@ -1,4 +1,4 @@
-alembic==1.8.1
+aalembic==1.8.1
 async-timeout==4.0.3
 Babel==2.10.3
 Beaker==1.11.0