Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump sanitize-html, @jupyter-widgets/jupyterlab-manager, @jupyterlab/apputils, @jupyterlab/docregistry, @jupyterlab/notebook and @jupyterlab/rendermime #34

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 27, 2024

Bumps sanitize-html to 2.13.0 and updates ancestor dependencies sanitize-html, @jupyter-widgets/jupyterlab-manager, @jupyterlab/apputils, @jupyterlab/docregistry, @jupyterlab/notebook and @jupyterlab/rendermime. These dependencies need to be updated together.

Updates sanitize-html from 2.7.3 to 2.13.0

Changelog

Sourced from sanitize-html's changelog.

2.13.0 (2024-03-20)

  • Documentation update regarding minimum supported TypeScript version.

  • Added disallowedTagsMode: completelyDiscard option to remove the content also in HTML. Thanks to Gauav Kumar for this addition.

2.12.1 (2024-02-22)

  • Do not parse sourcemaps in post-css. This fixes a vulnerability in which information about the existence or non-existence of files on a server could be disclosed via properly crafted HTML input when the style attribute is allowed by the configuration. Thanks to the Snyk Security team for the disclosure and to Dylan Armstrong for the fix.

2.12.0 (2024-02-21)

  • Introduced the allowedEmptyAttributes option, enabling explicit specification of empty string values for select attributes, with the default attribute set to alt. Thanks to Na for the contribution.

  • Clarified the use of SVGs with a new test and changes to documentation. Thanks to Gauav Kumar for the contribution.

  • Do not process source maps when processing style tags with PostCSS.

2.11.0 (2023-06-21)

  • Fix to allow false in allowedClasses attributes. Thanks to Kevin Jiang for this fix!
  • Upgrade mocha version
  • Apply small linter fixes in tests
  • Add .idea temp files to .gitignore
  • Thanks to Vitalii Shpital for the updates!
  • Show parseStyleAttributes warning in browser only. Thanks to mog422 for this update!
  • Remove empty non-boolean attributes via an exhaustive, configurable list of known non-boolean attributes. Thanks to Dylan Armstrong for this update!

2.10.0 (2023-02-17)

  • Fix auto-adding escaped closing tags. In other words, do not add implied closing tags to disallowed tags when disallowedTagMode is set to any variant of escape -- just escape the disallowed tags that are present. This fixes [issue #464](apostrophecms/sanitize-html#464). Thanks to Daniel Liebner
  • Add tagAllowed() helper function which takes a tag name and checks it against options.allowedTags and returns true if the tag is allowed and false if it is not.

2.9.0 (2023-01-27)

2.8.1 (2022-12-21)

  • If the argument is a number, convert it to a string, for backwards compatibility. Thanks to Alexander Schranz.

2.8.0 (2022-12-12)

  • Upgrades htmlparser2 to new major version ^8.0.0. Thanks to Kedar Chandrayan for this contribution.
Commits

Updates @jupyter-widgets/jupyterlab-manager from 5.0.5 to 5.0.11

Commits
Maintainer changes

This version was pushed to npm by martinrenou, a new releaser for @​jupyter-widgets/jupyterlab-manager since your current version.


Updates @jupyterlab/apputils from 3.5.2 to 4.3.3

Release notes

Sourced from @​jupyterlab/apputils's releases.

v4.3.0a0

4.3.0a0

(Full Changelog)

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

  • Run Python tests on MacOS with Python 12, replace canvas with jest-canvas-mock #16314 (@​krassowski)

Contributors to this release

(GitHub contributors page for this release)

@​ajbozarth | @​brichet | @​dependabot | @​fcollonval | @​github-actions | @​itsmevichu | @​JasonWeill | @​jgoodson | @​jtpio | @​jupyterlab-probot | @​krassowski | @​Rob-P-Smith | @​welcome | @​Wzixiao

v4.2.3

... (truncated)

Changelog

Sourced from @​jupyterlab/apputils's changelog.

(changelog)=

JupyterLab Changelog

v4.2

Workspaces UI

It is now possible to switch and manage workspaces from within JupyterLab.

Recently opened/closed files

The jupyterlab-recents extension was integrated into JupyterLab.

Users are now able to:

  • re-open recently used files from the main menu:

  • re-open recently closed files from the sidebar:

  • quickly jump to open tabs/recently closed files by using a new searchable modal dialog (press Ctrl+Alt+A to open the dialog, or click on the [↗] icon in the sidebar):

Full notebook windowing mode by default

Notebooks in the full windowing mode only render the visible cells, significantly improving the performance of the application. One limitation of full mode is that the search function in your browser may produce false negatives; using the JupyterLab search function is recommended. To revert to the behaviour from JupyterLab 4.1, go to Settings → Settings Editor → Notebook, scroll to "Windowing mode", and choose defer.

Improved Shortcuts Editor

Among the numerous improvements and bug fixes for the keyboard shortcuts editor:

  • it is now possible to remove the default shortcuts,
  • shortcuts are correctly sorted when using a language pack,
  • shortcuts with different arguments are now correctly displayed as individual entries.

Dark high contrast theme

A new theme, JupyterLab Dark High Contrast, which is intended to benefit users with the need for higher contrast, following the WCAG AAA accessibility standard for color contrast. To select this theme, from the menu bar, choose Settings → Theme → JupyterLab Dark High Contrast. Please provide feedback and suggestions on further improvements to this theme.

... (truncated)

Commits
  • 1e4b637 [ci skip] Publish 4.2.3
  • b601b10 Backport PR #16526: Fix the description for the main inline completer plugin ...
  • d13971b Backport PR #16508 on branch 4.2.x (Fix inline completer configure calls not ...
  • da74d4e Backport PR #16506: Update JupyterLab 3.x maintenance announcement (#16512)
  • a9bbbd4 Backport PR #16493: Fix the lines placeholder taking up too much space (#16509)
  • 9c22b5b Backport PR #16471: Use correct hub restart URL (#16502)
  • 81549df Backport PR #16482: Fix check link CI failure in README (time zone converter ...
  • 02b336e Backport PR #16476: Fix typo in documentation - spurious single quote prefix ...
  • fec0539 Backport PR #16465: Add a notice for Windows users to activate symbolic links...
  • 57e9a2d [ci skip] Publish 4.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jupyterlab-release-bot, a new releaser for @​jupyterlab/apputils since your current version.


Updates @jupyterlab/docregistry from 3.5.2 to 4.2.3

Release notes

Sourced from @​jupyterlab/docregistry's releases.

v4.2.3

4.2.3

(Full Changelog)

Bugs fixed

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​fcollonval | @​github-actions | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​meeseeksmachine | @​Mehak261124 | @​welcome

v4.2.2

4.2.2

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

... (truncated)

Changelog

Sourced from @​jupyterlab/docregistry's changelog.

4.2.3

(Full Changelog)

Bugs fixed

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​fcollonval | @​github-actions | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​meeseeksmachine | @​Mehak261124 | @​welcome

4.2.2

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

... (truncated)

Commits
  • 1e4b637 [ci skip] Publish 4.2.3
  • b601b10 Backport PR #16526: Fix the description for the main inline completer plugin ...
  • d13971b Backport PR #16508 on branch 4.2.x (Fix inline completer configure calls not ...
  • da74d4e Backport PR #16506: Update JupyterLab 3.x maintenance announcement (#16512)
  • a9bbbd4 Backport PR #16493: Fix the lines placeholder taking up too much space (#16509)
  • 9c22b5b Backport PR #16471: Use correct hub restart URL (#16502)
  • 81549df Backport PR #16482: Fix check link CI failure in README (time zone converter ...
  • 02b336e Backport PR #16476: Fix typo in documentation - spurious single quote prefix ...
  • fec0539 Backport PR #16465: Add a notice for Windows users to activate symbolic links...
  • 57e9a2d [ci skip] Publish 4.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jupyterlab-release-bot, a new releaser for @​jupyterlab/docregistry since your current version.


Updates @jupyterlab/notebook from 3.5.2 to 4.2.3

Release notes

Sourced from @​jupyterlab/notebook's releases.

v4.2.3

4.2.3

(Full Changelog)

Bugs fixed

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​fcollonval | @​github-actions | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​meeseeksmachine | @​Mehak261124 | @​welcome

v4.2.2

4.2.2

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

... (truncated)

Changelog

Sourced from @​jupyterlab/notebook's changelog.

4.2.3

(Full Changelog)

Bugs fixed

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​fcollonval | @​github-actions | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​meeseeksmachine | @​Mehak261124 | @​welcome

4.2.2

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

... (truncated)

Commits
  • 1e4b637 [ci skip] Publish 4.2.3
  • b601b10 Backport PR #16526: Fix the description for the main inline completer plugin ...
  • d13971b Backport PR #16508 on branch 4.2.x (Fix inline completer configure calls not ...
  • da74d4e Backport PR #16506: Update JupyterLab 3.x maintenance announcement (#16512)
  • a9bbbd4 Backport PR #16493: Fix the lines placeholder taking up too much space (#16509)
  • 9c22b5b Backport PR #16471: Use correct hub restart URL (#16502)
  • 81549df Backport PR #16482: Fix check link CI failure in README (time zone converter ...
  • 02b336e Backport PR #16476: Fix typo in documentation - spurious single quote prefix ...
  • fec0539 Backport PR #16465: Add a notice for Windows users to activate symbolic links...
  • 57e9a2d [ci skip] Publish 4.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jupyterlab-release-bot, a new releaser for @​jupyterlab/notebook since your current version.


Updates @jupyterlab/rendermime from 3.5.2 to 4.2.3

Release notes

Sourced from @​jupyterlab/rendermime's releases.

v4.2.3

4.2.3

(Full Changelog)

Bugs fixed

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​fcollonval | @​github-actions | @​jtpio | @​jupyterlab-probot | @​krassowski | @​lumberbot-app | @​meeseeksmachine | @​Mehak261124 | @​welcome

v4.2.2

4.2.2

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

... (truncated)

Changelog

Sourced from @​jupyterlab/rendermime's changelog.

4.2.3

(Full Changelog)

Bugs fixed

  • Fix inline completer configure calls not being propagated correctly #16508 (

…apputils, @jupyterlab/docregistry, @jupyterlab/notebook and @jupyterlab/rendermime

Bumps [sanitize-html](https://github.com/apostrophecms/sanitize-html) to 2.13.0 and updates ancestor dependencies [sanitize-html](https://github.com/apostrophecms/sanitize-html), [@jupyter-widgets/jupyterlab-manager](https://github.com/jupyter-widgets/ipywidgets), [@jupyterlab/apputils](https://github.com/jupyterlab/jupyterlab), [@jupyterlab/docregistry](https://github.com/jupyterlab/jupyterlab), [@jupyterlab/notebook](https://github.com/jupyterlab/jupyterlab) and [@jupyterlab/rendermime](https://github.com/jupyterlab/jupyterlab). These dependencies need to be updated together.


Updates `sanitize-html` from 2.7.3 to 2.13.0
- [Changelog](https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md)
- [Commits](apostrophecms/sanitize-html@2.7.3...2.13.0)

Updates `@jupyter-widgets/jupyterlab-manager` from 5.0.5 to 5.0.11
- [Release notes](https://github.com/jupyter-widgets/ipywidgets/releases)
- [Commits](https://github.com/jupyter-widgets/ipywidgets/commits)

Updates `@jupyterlab/apputils` from 3.5.2 to 4.3.3
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/[email protected]...@jupyterlab/[email protected])

Updates `@jupyterlab/docregistry` from 3.5.2 to 4.2.3
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/@jupyterlab/[email protected]/CHANGELOG.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/[email protected]...@jupyterlab/[email protected])

Updates `@jupyterlab/notebook` from 3.5.2 to 4.2.3
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/@jupyterlab/[email protected]/CHANGELOG.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/[email protected]...@jupyterlab/[email protected])

Updates `@jupyterlab/rendermime` from 3.5.2 to 4.2.3
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/@jupyterlab/[email protected]/CHANGELOG.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/[email protected]...@jupyterlab/[email protected])

---
updated-dependencies:
- dependency-name: sanitize-html
  dependency-type: indirect
- dependency-name: "@jupyter-widgets/jupyterlab-manager"
  dependency-type: direct:production
- dependency-name: "@jupyterlab/apputils"
  dependency-type: direct:production
- dependency-name: "@jupyterlab/docregistry"
  dependency-type: direct:production
- dependency-name: "@jupyterlab/notebook"
  dependency-type: direct:production
- dependency-name: "@jupyterlab/rendermime"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants