holoviz/panel v1.7.5

Version 1.7.5

on GitHub

This patch release brings a number of important bug fixes and refinements, including improved modal behavior, Param integration fixes for ESM, and security hardening of authentication templates. Thanks to @harmvanderheijden, @MarcSkovMadsen, @maximlt, and @philippjfr for their contributions.

Enhancements

• Improve .from_param() error messages (#8047)
• Add --reuse-sessions warm option to preload and cache apps before first use (#8087)

Security

• Fix XSS vulnerabilities in login and OAuth error templates by escaping user-controlled input (#8049)

Bug Fixes

• Fix value_throttled handling in Param panes (#8057)
• Prevent AutocompleteInput from resetting when restrict=False (#8056)
• Fix callback cleanup for --reuse_sessions mode (#8052)
• Reset param.Event state on ESM components (#8054)
• Allow Player components to start upon initialization (#8058)
• Fix modal dialog stacking and focus behavior in VanillaTemplate (#8059, #8060)
• Avoid errors in Tabulator when editing DataFrames with pd.NA values (#8068)
• Add guard for undefined url in ImportedStyleSheet (#8071)
• Ensure session token payload is correctly updated when reusing sessions (#8072)
• Ensure --reuse-sessions caches the --index app correctly (#8073)
• Add debounce logic to ModelChanged events in Pyodide to improve performance and prevent redundant updates (#8077)
• Ensure Layoutable params propagate to HoloViews plots (#8078)
• Fix regression in handling param.Action in .from_param() utility (#8079)
• Ensure LoadingSpinner.visible correctly hides the component (#8081)
• Ensure JSONEditor triggers on re-ordering of nodes (#8086)
• Fix JSONEditor menu option to improve usability (#8085)

Documentation

• Add websocket communication how-to guide to documentation (#7952)
• Add note about increasing proxy buffer size for OAuth behind reverse proxies (#8084)

Maintenance

• Fix gallery deployment automation (#8055)