chore(deps): update dependency jupyterlab to v3.6.7 [security] #37
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==3.6.1
->==3.6.7
GitHub Vulnerability Alerts
CVE-2024-22421
Impact
Users of JupyterLab who click on a malicious link may get their
Authorization
andXSRFToken
tokens exposed to a third party when running an olderjupyter-server
version.Patches
JupyterLab 4.1.0b2, 4.0.11, and 3.6.7 were patched.
Workarounds
No workaround has been identified, however users should ensure to upgrade
jupyter-server
to version 2.7.2 or newer which includes a redirect vulnerability fix.References
Vulnerability reported by user @davwwwx via the bug bounty program sponsored by the European Commission and hosted on the Intigriti platform.
Release Notes
jupyterlab/jupyterlab (jupyterlab)
v3.6.7
Compare Source
3.6.7
(Full Changelog)
Security fixes
Bugs fixed
node-gyp@^9.0.0
#15395 (@dlqqq)Maintenance and upkeep improvements
actions/labeler
to v4 to fix failing CI action #15496 (@krassowski)Contributors to this release
(GitHub contributors page for this release)
@afshin | @andrii-i | @blink1073 | @bollwyvl | @brichet | @davidbrochart | @dharmaquark | @dlqqq | @echarles | @fcollonval | @g547315 | @gabalafou | @GabrielaVives | @github-actions | @HaudinFlorence | @j264415 | @JasonWeill | @jtpio | @jupyterlab-probot | @krassowski | @lumberbot-app | @meeseeksmachine | @misterfads | @mlucool | @parmentelat | @skyetim | @tonyfast | @welcome | @Wh1isper
v3.6.6
Compare Source
3.6.6
(Full Changelog)
Maintenance and upkeep improvements
jupyter labextension list
compat message #14680 (@jtpio)Documentation improvements
jupyter_server_config.py
#13208 (@jtpio)jupyter labextension list
compat message #14680 (@jtpio)Contributors to this release
(GitHub contributors page for this release)
@afshin | @bollwyvl | @brichet | @echarles | @fcollonval | @g547315 | @github-actions | @isabela-pf | @j264415 | @jtpio | @jupyterlab-probot | @krassowski | @lumberbot-app | @meeseeksmachine | @tonyfast | @welcome
v3.6.5
Compare Source
3.6.5
(Full Changelog)
Bugs fixed
Maintenance and upkeep improvements
Contributors to this release
(GitHub contributors page for this release)
@andrii-i | @brijsiyag | @echarles | @fcollonval | @GabrielaVives | @github-actions | @JasonWeill | @jtpio | @jupyterlab-probot | @krassowski | @lumberbot-app | @meeseeksmachine | @tonyfast | @welcome
v3.6.4
Compare Source
3.6.4
(Full Changelog)
Enhancements made
Contents.ContentType
to string #12875 (@trungleduc)maxHeight
being equal tominHeight
for HoverBox's visibility #14533 (@nishikantparmariam)Bugs fixed
Maintenance and upkeep improvements
Documentation improvements
Contributors to this release
(GitHub contributors page for this release)
@andrii-i | @brichet | @ellisonbg | @fcollonval | @gabalafou | @GabrielaVives | @github-actions | @HaudinFlorence | @hbcarlos | @JasonWeill | @jtpio | @jupyterlab-probot | @krassowski | @lumberbot-app | @meeseeksmachine | @mlucool | @tonyfast | @welcome
v3.6.3
Compare Source
(Full Changelog)
Maintenance and upkeep improvements
Documentation improvements
Contributors to this release
(GitHub contributors page for this release)
@andrii-i | @bollwyvl | @brichet | @damiend97 | @fcollonval | @github-actions | @JasonWeill | @jtpio | @jupyterlab-probot | @krassowski | @welcome
v3.6.2
Compare Source
(Full Changelog)
Bugs fixed
lineWiseCopyCut
setting #14055 (@bollwyvl)Maintenance and upkeep improvements
Documentation improvements
Contributors to this release
(GitHub contributors page for this release)
@andrii-i | @blink1073 | @bollwyvl | @brichet | @bt- | @dlqqq | @domoritz | @echarles | @fcollonval | @fperez | @gabalafou | @GabrielaVives | @github-actions | @goanpeca | @HaudinFlorence | @hbcarlos | @ianhi | @jasongrout | @JasonWeill | @jtpio | @jupyterlab-dev-mode | @jupyterlab-probot | @krassowski | @meeseeksdev | @meeseeksmachine | @mlucool | @psychemedia | @telamonian | @tonyfast | @vidartf | @welcome
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.