Changed
- Jupytext's documentation is now at https://jupytext.org! (#1538)
- We have moved Jupytext to its own Jupytext organization (#1546)
- Updated the JupyterLab extension production dependencies (12 patch updates) (#1541)
- We require
pandoc<3.10on the CI as pandoc converts the "3.10" string to a float, which then causes issues in Jupytext (#1545) - Fixed the CI so that tests also run on scheduled runs, and so that
jupyterfstests are skipped when their initialization fails (#1539) - In the CI, the extension is build using a dedicated
buildpixi environment.
Fixed
- We now support unicode characters while dumping YAML (#1542)
Added
Security
- Fixed GHSA-m22c-4q2m-m5wr: the
update-playwright-snapshotsworkflow was
triggerable by any user via anissue_commentevent. It now checks that the
comment author is an OWNER, MEMBER, or COLLABORATOR before running
(#1535) - Set
persist-credentials: falseon all workflow checkout steps as
defense-in-depth, preventing a liveGITHUB_TOKENfrom being left in
.git/configwhere attacker-controlled build hooks could read it. This is
strictly required only forupdate-playwright-snapshots(fixed above), but
applies to all workflows so they remain safe if their scope is later extended.