build(deps): bump panel from 1.6.1 to 1.7.4

[dependabot]

Bumps panel from 1.6.1 to 1.7.4.

Release notes

Sourced from panel's releases.

Version 1.7.3

This patch release includes several critical stability improvements, JavaScript race condition fixes, and developer experience enhancements. It also introduces small but helpful UI features such as exception copying and better error feedback in CLI and ESM workflows. Many thanks to contributors @​etihwo, @​bsdz, @​Coderambling, @​hoxbro, @​philippjfr, and @​MarcSkovMadsen.

Enhancements

• Add “Copy to Clipboard” button for exceptions in the UI (#8034)
• Enable MathJax rendering if the extension is available (#8004)
• Allow setting a custom title for Tabulator multi-index columns (#8008)
• Improve feedback in panel compile and reactive ESM workflows (#8012, #8010)
• Ensure exceptions are printed to the command line in development mode (#8022)

Bug Fixes

• Guard against race conditions in DeckGL during resize (#8031)
• Prevent errors when client_comm is undefined in some JS execution contexts (#8030, #8033)
• Fix dark theme background issue in MultiChoice widget (#8014)
• Avoid rendering Plotly components if container is not yet defined and prevent layout boomeranging (#8021)
• Ensure React useState callbacks are registered only once (#8023)
• Support Path objects in stylesheet definition (#8026)

Version 1.7.2

This patch release includes a number of important bug fixes, optimizations, and compatibility updates, particularly for React and ESM-based components. It also includes enhancements to the Tabulator table and more robust support for Audio/Video panes. Many thanks to @​etihwo for his continued contributions and the maintainer team @​hoxbro and @​philippjfr.

Enhancements

• Support for passing bytes and BytesIO objects to Audio and Video panes (#7963)
• Add header tooltips to Tabulator (#7988)
• Optimize layout calculations for ESM components (#7989)
• Allow nested ReactComponents to bypass Shadow DOM (#7991)
• Support --ico-path CLI option to support explicit .ico path specification (#7992)
• Loosen parameter type for ReactiveExpr.widget_layout (#7964)
• Automatically unblock Comm on WebSocket re-connect (#7986)

Bug Fixes

• Fix Tabulator fast design and fix styling issues (#7956)
• Keep reference state consistent after Pyodide syncing (#7966)
• Ensure correct model is used when determining if a link is set up (#7968)
• Do not dispatch events on hold/unhold when the document is uninitialized (#7972)
• Ensure theming does not error on PyComponent (#7975)
• Prevent stylesheet patch from dispatching during initial load (#7978)
• Fix caching issue for ESM render modules (#7990)
• Correct initialization behavior of ReactComponent (#7996)
• Fix threading race condition when applying consecutive updates to Param widgets (#8003)

Version 1.7.1

This patch release adds a new option to disable FileDropper previews and fixes a regression when updating Column children in Bokeh<3.7. Additionally, it includes a number of documentation improvements. Many thanks to our returning contributors @​dalthviz, @​emmanuel-ferdman, @​MarcSkovMadsen, and @​hoxbro

Enhancements

... (truncated)

Changelog

Sourced from panel's changelog.

Version 1.7.4

This patch release introduces small but impactful security, compatibility, and usability improvements. It enhances OAuth behavior, adds byte support for the PDF pane, and fixes several rendering and import issues across backends and components. Thanks to @​ahuang11, @​dalthviz, @​MarcSkovMadsen, and @​philippjfr for their contributions.

Enhancements

• Add support for bytes input to the PDF pane (#8044)
• Add logout_url for Auth0 to OAuth error page template (#8036)

Security

• Add authentication to files served from --static-dirs (#8042)
• Escape error messages shown on the OAuth error page fixing XSS vulnerability (#8043)

Bug Fixes

• Ensure ReactComponent forces a re-render after render step (#8037)
• Fix this.mouse bug in ECharts implementation (#8041)
• Fix incorrect import path in Django integration docs (bokehjsdir → bokehjs_path) (#8040)
• Update Bokeh/FastAPI extra dependency pin to ensure compatibility (#8039)

Version 1.7.3

This patch release includes several critical stability improvements, JavaScript race condition fixes, and developer experience enhancements. It also introduces small but helpful UI features such as exception copying and better error feedback in CLI and ESM workflows. Many thanks to contributors @​etihwo, @​bsdz, @​Coderambling, @​hoxbro, @​philippjfr, and @​MarcSkovMadsen.

Enhancements

• Add “Copy to Clipboard” button for exceptions in the UI (#8034)
• Enable MathJax rendering if the extension is available (#8004)
• Allow setting a custom title for Tabulator multi-index columns (#8008)
• Improve feedback in panel compile and reactive ESM workflows (#8012, #8010)
• Ensure exceptions are printed to the command line in development mode (#8022)

Bug Fixes

• Guard against race conditions in DeckGL during resize (#8031)
• Prevent errors when client_comm is undefined in some JS execution contexts (#8030, #8033)
• Fix dark theme background issue in MultiChoice widget (#8014)
• Avoid rendering Plotly components if container is not yet defined and prevent layout boomeranging (#8021)
• Ensure React useState callbacks are registered only once (#8023)
• Support Path objects in stylesheet definition (#8026)

Version 1.7.2

This patch release includes a number of important bug fixes, optimizations, and compatibility updates, particularly for React and ESM-based components. It also includes enhancements to the Tabulator table and more robust support for Audio/Video panes. Many thanks to @​etihwo for his continued contributions and the maintainer team @​hoxbro and @​philippjfr.

Enhancements

• Support for passing bytes and BytesIO objects to Audio and Video panes (#7963)
• Add header tooltips to Tabulator (#7988)

... (truncated)

Commits

• 0f18b3b Bump panel.js version to 1.7.4
• 60d0fe5 Add 1.7.4 CHANGELOG
• e6f154b Allow PDF pane to accept bytes (#8044)
• cb5d083 Escape error message in OAuth error page (#8043)
• 34dd041 Add authentication to static-dirs (#8042)
• 4950067 fix echarts this.mouse (#8041)
• 0e15142 Fix import path for Django docs (#8040)
• 58e3719 Update extra dependecy pin for bokeh-fastapi (#8039)
• 41e5d75 Ensure ReactComponent forces update after render (#8037)
• de3ff3b Add OAuth provider (Auth0) logout url to error template (#8036)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dagshub]

Join the discussion on DagsHub!

[github-actions]

Coverage Report

File	Stmts	Miss	Cover	Missing
src/diffannotator
__init__.py	0	0	100%
annotate.py	823	136	83%	52, 75–76, 85, 92, 108–111, 113–115, 117, 446–447, 451–452, 454, 505, 507–509, 511, 513–515, 517–518, 520–522, 631, 634, 637–638, 693, 870, 906, 959–961, 965, 1005, 1086, 1354, 1368–1371, 1373, 1377–1380, 1382, 1562, 1565, 1783, 1785, 1832, 1857–1858, 1967, 1970, 2110–2111, 2113, 2138, 2189–2190, 2209–2210, 2213, 2228, 2243–2244, 2285, 2354, 2365, 2391, 2401, 2403, 2412–2416, 2420–2424, 2426, 2461, 2557, 2571, 2573–2574, 2576–2578, 2580, 2582–2584, 2586–2587, 2589, 2591, 2605, 2608, 2623–2625, 2631, 2644, 2653, 2661, 2664, 2734, 2740, 2742–2743, 2756, 2765–2770, 2884–2885, 2888–2889, 2893, 2938
config.py	50	7	86%	55–59, 61, 104
gather_data.py	344	53	84%	61, 87, 91, 93, 101, 106, 108, 121, 129, 162, 240–241, 244–245, 248, 251, 262, 280–286, 318–319, 342–343, 366, 390, 415–416, 618, 622, 655, 790, 803, 805, 808, 812, 814, 852, 882–883, 949, 1001, 1187, 1219–1223, 1227
generate_patches.py	38	3	92%	102, 104, 126
languages.py	101	16	84%	178, 181, 184, 187, 190, 194, 225–226, 238, 257, 269, 271–272, 275, 281, 319
lexer.py	29	2	93%	102–103
src/diffannotator/utils
__init__.py	0	0	100%
git.py	487	85	82%	118, 269, 359, 361, 364–365, 367, 369–372, 374–376, 378–380, 385–386, 390, 392–393, 397–399, 401–402, 404–405, 407–408, 410, 532–533, 536, 585, 595, 598–600, 606, 637, 641, 648, 680, 693, 756, 843, 898, 905, 935, 939, 943, 990, 992, 1003, 1008, 1013, 1112–1113, 1175–1177, 1180–1181, 1224, 1228, 1305, 1310, 1312, 1315–1316, 1318, 1391–1392, 1525, 1527, 1555–1556, 1568, 1570, 1587–1588, 1628, 1642
TOTAL	1872	302	83%

Tests	Skipped	Failures	Errors	Time
81	8 💤	0 ❌	0 🔥	8.700s ⏱️

[dependabot]

Superseded by #145.