- Update to 2.11.2: Fix GHSA-h56g-gq9v-vc8r, CVE-2023-49080,
boo#1217809
* Unhandled errors in API requests include traceback information,
which can include path information. There is no known mechanism
by which to trigger these errors without authentication, so the
paths revealed are not considered particularly sensitive, given
that the requesting user has arbitrary execution permissions
already in the same environment.
* jupyter-server no longer includes traceback information in JSON
error responses. For compatibility, the traceback field is
present, but always empty.
- Release 2.11.1
* avoid unhandled error on some invalid paths #1369 (@minrk)
* Change md5 to hash and hash_algorithm, fix incompatibility
#1367 (@Wh1isper)
OBS-URL: https://build.opensuse.org/request/show/1130946
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-jupyter-server?expand=0&rev=36
boo#1217809
* Unhandled errors in API requests include traceback information,
which can include path information. There is no known mechanism
by which to trigger these errors without authentication, so the
paths revealed are not considered particularly sensitive, given
that the requesting user has arbitrary execution permissions
already in the same environment.
* jupyter-server no longer includes traceback information in JSON
error responses. For compatibility, the traceback field is
present, but always empty.
- Release 2.11.1
* avoid unhandled error on some invalid paths #1369 (@minrk)
* Change md5 to hash and hash_algorithm, fix incompatibility
#1367 (@Wh1isper)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=79
- Update to 2.11.0
* Support get file(notebook) md5 #1363 (@Wh1isper)
- Release 2.10.1
* ContentsHandler return 404 rather than raise exc #1357
(@bloomsa)
- Release 2.10.0
* Update kernel env to reflect changes in session #1354
(@blink1073)
- Release 2.9.0
* Ability to configure cull_idle_timeout with kernelSpec #1342
(@akshaychitneni)
* Run Gateway token renewers even if the auth token is empty.
#1340 (@ojarjur)
- Release 2.8.0
* Added Logs for get_os_path closes issue #1336
(@jayeshsingh9767)
* Avoid showing "No answer for 5s" when shutdown is slow #1320
(@minrk)
OBS-URL: https://build.opensuse.org/request/show/1128961
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-jupyter-server?expand=0&rev=35
* Support get file(notebook) md5 #1363 (@Wh1isper)
- Release 2.10.1
* ContentsHandler return 404 rather than raise exc #1357
(@bloomsa)
- Release 2.10.0
* Update kernel env to reflect changes in session #1354
(@blink1073)
- Release 2.9.0
* Ability to configure cull_idle_timeout with kernelSpec #1342
(@akshaychitneni)
* Run Gateway token renewers even if the auth token is empty.
#1340 (@ojarjur)
- Release 2.8.0
* Added Logs for get_os_path closes issue #1336
(@jayeshsingh9767)
* Avoid showing "No answer for 5s" when shutdown is slow #1320
(@minrk)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=77
- Update to 2.6.0
## New features added
* Emit events from the kernels service and gateway client #1252
(@rajmusuku)
## Enhancements made
* Allows immutable cache for static files in a directory #1268
(@brichet)
* Merge the gateway handlers into the standard handlers. #1261
(@ojarjur)
* Gateway manager retry kernel updates #1256 (@ojarjur)
* Use debug-level messages for generating anonymous users #1254
(@hbcarlos)
* Define a CURRENT_JUPYTER_HANDLER context var #1251 (@Zsailer)
## Bugs fixed
* Don't instantiate an unused Future in gateway connection trait
#1276 (@minrk)
* Write server list to stdout #1275 (@minrk)
* Make the kernel_websocket_protocol flag reusable. #1264
(@ojarjur)
* Register websocket handler from same module as kernel handlers
#1249 (@kevin-bates)
* Re-enable websocket ping/pong from the server #1243 (@Zsailer)
* Fix italics in operators security sections #1242 (@kevin-bates)
* Fix calculation of schema location #1239 (@lresende)
OBS-URL: https://build.opensuse.org/request/show/1092415
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=69
- Update to 2.1.0
* Fix preferred_dir for sync contents manager #1173 (@vidartf)
* Update typing and warning handling #1174 (@blink1073)
- Release 2.0.7
* Log how long each extension module takes to import #1171
(@yuvipanda)
* Set JPY_SESSION_NAME to full notebook path. #1100 (@Carreau)
* Reapply preferred_dir fix, now with better backwards
compatability #1162 (@vidartf)
* Update example to use hatch #1169 (@blink1073)
* Clean up docs build and typing #1168 (@blink1073)
* Fix check release by ignoring duplicate file name in wheel
#1163 (@blink1073)
* Fix broken link in warning message #1158 (@consideRatio)
OBS-URL: https://build.opensuse.org/request/show/1058569
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-jupyter-server?expand=0&rev=29
* Fix preferred_dir for sync contents manager #1173 (@vidartf)
* Update typing and warning handling #1174 (@blink1073)
- Release 2.0.7
* Log how long each extension module takes to import #1171
(@yuvipanda)
* Set JPY_SESSION_NAME to full notebook path. #1100 (@Carreau)
* Reapply preferred_dir fix, now with better backwards
compatability #1162 (@vidartf)
* Update example to use hatch #1169 (@blink1073)
* Clean up docs build and typing #1168 (@blink1073)
* Fix check release by ignoring duplicate file name in wheel
#1163 (@blink1073)
* Fix broken link in warning message #1158 (@consideRatio)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=60
- Update to 2.0.6
* Iterate through set of apps in extension_manager.any_activity
method #1157 (@mahendrapaipuri)
* Handle flake8-errmsg #1155 (@blink1073)
* Add spelling and docstring enforcement #1147 (@blink1073)
- Update to 2.0.5
* Remove end kwarg after migration from print to info #1151
(@krassowski)
* Import ensure-sync directly from dependence. #1149 (@Carreau)
* Update deprecation warning #1148 (@Carreau)
- Release 2.0.4
* Fix handling of extension last activity #1145 (@blink1073)
- Release 2.0.3
* Restore default writing of browser open redirect file, add
opt-in to skip #1144 (@bollwyvl)
- Release 2.0.2
* Raise errors on individual problematic extensions when listing
extension #1139 (@Zsailer)
* Find an available port before starting event loop #1136
(@blink1073)
* only write browser files if we’re launching the browser #1133
(@hhuuggoo)
* Logging message used to list sessions fails with template error
#1132 (@vindex10)
* Include base_url at start of kernelspec resources path #1124
(@bloomsa)
- Release 2.0.1
* [Gateway] Remove redundant list kernels request during session
poll #1112 (@kevin-bates)
* Maintenance and upkeep improvements
* Fix jupyter_core pinning #1122 (@ophie200)
- Major Release 2.0.0
## Enhancements made
* Introduce ServerKernelManager class #1101 (@kevin-bates)
* New configurable/overridable kernel ZMQ+Websocket connection
API #1047 (@Zsailer)
* Pass kernel environment to cwd_for_path method #1046
(@divyansshhh)
* Better Handling of Asyncio #1035 (@blink1073)
* Add authorization to AuthenticatedFileHandler #1021
(@jiajunjie)
* [Gateway] Add support for gateway token renewal #985
(@kevin-bates)
* Make it easier to pass custom env variables to kernel #981
(@divyansshhh)
* Accept and manage cookies when requesting gateways #969 (@wjsi)
* Emit events from the Contents Service #954 (@Zsailer)
* Retry certain errors between server and gateway #944
(@kevin-bates)
* Allow new file types #895 (@davidbrochart)
* Make it easier for extensions to customize the ServerApp #879
(@minrk)
* Adds anonymous users #863 (@hbcarlos)
* switch to jupyter_events #862 (@Zsailer)
* consolidate auth config on IdentityProvider #825 (@minrk)
## Bugs fixed
* Fix kernel WebSocket protocol #1110 (@davidbrochart)
* Defer webbrowser import #1095 (@blink1073)
* Use handle_outgoing_message for ZMQ replies #1089 (@Zsailer)
* Call ports_changed on the multi-kernel-manager instead of the
kernel manager #1088 (@Zsailer)
* Add more websocket connection tests and fix bugs #1085
(@blink1073)
* Tornado WebSocketHandler fixup #1083 (@davidbrochart)
* persist userid cookie when auth is disabled #1076 (@minrk)
* Fix rename_file and delete_file to handle hidden files properly
#1073 (@yacchin1205)
* Add more coverage #1069 (@blink1073)
* Increase nbconvert and checkpoints coverage #1066 (@blink1073)
* Fix min version check again #1049 (@blink1073)
* Fallback new file type to file for contents put #1013 (@a3626a)
* Fix some typos in release instructions #1003 (@kevin-bates)
* Wrap the concurrent futures in an asyncio future #1001
(@blink1073)
* [Gateway] Fix and deprecate env whitelist handling #979
(@kevin-bates)
* fix issues with jupyter_events 0.5.0 #972 (@Zsailer)
* Correct content-type headers #965 (@epignot)
* Don’t validate certs for when stopping server #959 (@Zsailer)
* Parse list value for terminado_settings #949 (@krassowski)
* Fix bug in api/contents requests for an allowed copy #939
(@kiersten-stokes)
* Fix error that prevents posting to api/contents endpoint with
no body #937 (@kiersten-stokes)
* avoid creating asyncio.Lock at import time #935 (@minrk)
* Fix get_kernel_path for AsyncFileManagers. #929
(@thetorpedodog)
* Fix c.GatewayClient.url snippet syntax #917 (@rickwierenga)
* Add back support for kernel launch timeout pad #910
(@CiprianAnton)
* Notify ChannelQueue that the response router thread is
finishing #896 (@CiprianAnton)
* Make ChannelQueue.get_msg true async #892 (@CiprianAnton)
* Check for serverapp for reraise flag #887 (@vidartf)
## Maintenance and upkeep improvements
* Make tests less sensitive to default kernel name #1118
(@blink1073)
* Tweak codecov settings #1113 (@blink1073)
* Bump minimatch from 3.0.4 to 3.1.2 #1109 (@dependabot)
* Add skip-if-exists config #1108 (@blink1073)
* Use pytest-jupyter #1099 (@blink1073)
* Clean up release instructions and coverage handling #1098
(@blink1073)
* Import ensure_async from jupyter_core #1093 (@davidbrochart)
* Add more tests #1092 (@blink1073)
* Fix coverage upload #1091 (@blink1073)
* Add base handler tests #1090 (@blink1073)
* Add more websocket connection tests and fix bugs #1085
(@blink1073)
* Use base setup dependency type #1084 (@blink1073)
* Add more serverapp tests #1079 (@blink1073)
* Add more gateway tests #1078 (@blink1073)
* More cleanup #1077 (@blink1073)
* Fix hatch scripts and windows workflow run #1074 (@blink1073)
* use recommended github-workflows checker #1071 (@blink1073)
* Add more coverage #1069 (@blink1073)
* More coverage #1067 (@blink1073)
* Increase nbconvert and checkpoints coverage #1066 (@blink1073)
* Test downstream jupyter_server_terminals #1065 (@blink1073)
* Test notebook prerelease #1064 (@blink1073)
* MAINT: remove python 3.4 branch #1061 (@Carreau)
* Bump actions/checkout from 2 to 3 #1056 (@dependabot)
* Bump actions/setup-python from 2 to 4 #1055 (@dependabot)
* Bump pre-commit/action from 2.0.0 to 3.0.0 #1054 (@dependabot)
* Add dependabot file #1053 (@blink1073)
* Use global env for min version check #1048 (@blink1073)
* Clean up handling of synchronous managers #1044 (@blink1073)
* Clean up config files #1031 (@blink1073)
* Make node optional #1030 (@blink1073)
* Use admin github token for releaser #1025 (@blink1073)
* CI Cleanup #1023 (@blink1073)
* Use mdformat instead of prettier #1022 (@blink1073)
* Add pyproject validation #1020 (@blink1073)
* Remove hardcoded client install in CI #1019 (@blink1073)
* Handle client 8 pending kernels #1014 (@blink1073)
* Use releaser v2 tag #1010 (@blink1073)
* Use hatch environments to simplify test, coverage, and docs
build #1007 (@blink1073)
* Update to version2 releaser #1006 (@blink1073)
* Do not use dev version yet #999 (@blink1073)
* Add workflows for simplified publish #993 (@blink1073)
* Remove hardcoded client install #991 (@blink1073)
* Test with client 8 updates #988 (@blink1073)
* Switch to using hatchling version command #984 (@blink1073)
* Run downstream tests in parallel #973 (@blink1073)
* Update pytest_plugin with fixtures to test auth in core and
extensions #956 (@akshaychitneni)
* Fix docs build #952 (@blink1073)
* Fix flake8 v5 compat #941 (@blink1073)
* Improve logging of bare exceptions and other cleanups. #922
(@thetorpedodog)
* Use more explicit version template for pyproject #919
(@blink1073)
* Fix handling of dev version #913 (@blink1073)
* Fix owasp link #908 (@blink1073)
* default to system node version in precommit #906 (@dlqqq)
* Test python 3.11 on ubuntu #839 (@blink1073)
## Documentation improvements
* Remove left over from notebook #1117 (@fcollonval)
* Fix wording #1037 (@fcollonval)
* Fix GitHub actions badge link #1011 (@blink1073)
* Pin docutils to fix docs build #1004 (@blink1073)
* Update server extension disable instructions #998 (@3coins)
* Update index.rst #970 (@razrotenberg)
* Fix typo in IdentityProvider documentation #915 (@danielyahn)
* docs: document the logging_config trait #844 (@oliver-sanders)
## Deprecated features
* [Gateway] Fix and deprecate env whitelist handling #979
(@kevin-bates)
OBS-URL: https://build.opensuse.org/request/show/1046204
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-jupyter-server?expand=0&rev=28
- Update to 2.0.5
* Remove end kwarg after migration from print to info #1151
(@krassowski)
* Import ensure-sync directly from dependence. #1149 (@Carreau)
* Update deprecation warning #1148 (@Carreau)
- Release 2.0.4
* Fix handling of extension last activity #1145 (@blink1073)
- Release 2.0.3
* Restore default writing of browser open redirect file, add
opt-in to skip #1144 (@bollwyvl)
- Release 2.0.2
* Raise errors on individual problematic extensions when listing
extension #1139 (@Zsailer)
* Find an available port before starting event loop #1136
(@blink1073)
* only write browser files if we’re launching the browser #1133
(@hhuuggoo)
* Logging message used to list sessions fails with template error
#1132 (@vindex10)
* Include base_url at start of kernelspec resources path #1124
(@bloomsa)
- Release 2.0.1
* [Gateway] Remove redundant list kernels request during session
poll #1112 (@kevin-bates)
* Maintenance and upkeep improvements
* Fix jupyter_core pinning #1122 (@ophie200)
- Major Release 2.0.0
## Enhancements made
* Introduce ServerKernelManager class #1101 (@kevin-bates)
* New configurable/overridable kernel ZMQ+Websocket connection
OBS-URL: https://build.opensuse.org/request/show/1045440
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=57
- Update to version 1.21.0
* Handle client 8 pending kernels #1014 (@blink1073)
- Release 1.19.1
* Wrap the concurrent futures in an asyncio future #1000
(@blink1073)
- Release 1.19.0
* New features added
+ Backport Inject session identifier into environment variable
#920 (@vidartf)
* Enhancements made
+ Backport #981: Make it easier to pass custom env variables to
kernel #994 (@divyansshhh)
+ Retry certain errors between server and gateway #944
(@kevin-bates)
* Bugs fixed
+ Backport PR #965: Correct content-type headers #966
(@epignot)
+ avoid creating asyncio.Lock at import time #935 (@minrk)
+ Fix c.GatewayClient.url snippet syntax #917 (@rickwierenga)
+ Add back support for kernel launch timeout pad #910
(@CiprianAnton)
* Maintenance and upkeep improvements
+ Test with client 8 updates #992 (@blink1073)
+ Backport PR #922: Improve logging of bare exceptions etc.
#926 (@thetorpedodog)
+ Fix handling of dev version #913 (@blink1073)
+ Fix owasp link #908 (@blink1073)
OBS-URL: https://build.opensuse.org/request/show/1031311
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-jupyter-server?expand=0&rev=27
* Handle client 8 pending kernels #1014 (@blink1073)
- Release 1.19.1
* Wrap the concurrent futures in an asyncio future #1000
(@blink1073)
- Release 1.19.0
* New features added
+ Backport Inject session identifier into environment variable
#920 (@vidartf)
* Enhancements made
+ Backport #981: Make it easier to pass custom env variables to
kernel #994 (@divyansshhh)
+ Retry certain errors between server and gateway #944
(@kevin-bates)
* Bugs fixed
+ Backport PR #965: Correct content-type headers #966
(@epignot)
+ avoid creating asyncio.Lock at import time #935 (@minrk)
+ Fix c.GatewayClient.url snippet syntax #917 (@rickwierenga)
+ Add back support for kernel launch timeout pad #910
(@CiprianAnton)
* Maintenance and upkeep improvements
+ Test with client 8 updates #992 (@blink1073)
+ Backport PR #922: Improve logging of bare exceptions etc.
#926 (@thetorpedodog)
+ Fix handling of dev version #913 (@blink1073)
+ Fix owasp link #908 (@blink1073)
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=54
- Update to verson 1.15.6
* Missing warning when no authorizer in found ZMQ handlers #744
(@Zsailer)
- Release notes for 1.15.5
* Relax type checking on ExtensionApp.serverapp #739 (@minrk)
* raise no-authorization warning once and allow disabled
authorization #738 (@Zsailer)
- Release notes for 1.15.4
* Fix server-extension paths (3rd time's the charm) #734 (@minrk)
- Release notes for 1.15.2
* allow handlers to work without an authorizer in the Tornado
settings #717 (@Zsailer)
- Release notes for 1.15.1
* Revert "Re-use ServerApp.config_file_paths for consistency
(#715)" #728 (@blink1073)
- Release notes for 1.15.0
* Add authorization layer to server request handlers #165
(@Zsailer) Enhancements made
* Validate notebooks once per fetch or save #724 (@kevin-bates)
* Register pre/post save hooks, call them sequentially #696
(@davidbrochart)
* Implement Required Methods in Async Manner #721 (@jhamet93)
* Call pre_save_hook only on first chunk of large files #716
(@davidbrochart)
* Re-use ServerApp.config_file_paths for consistency #715
(@minrk)
* serverapp: Use .absolute() instead of .resolve() for symlinks
#712 (@EricCousineau-TRI)
* Fall back to legacy protocol if selected_subprotocol raises
exception #706 (@davidbrochart)
* Fix FilesHandler not meet RFC 6713 #701 (@Wh1isper)
OBS-URL: https://build.opensuse.org/request/show/964363
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:jupyter/python-jupyter-server?expand=0&rev=44
