Skip to content

chore(deps-dev): bump jupytext from 1.19.4 to 1.19.5#116

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/jupytext-1.19.3
Open

chore(deps-dev): bump jupytext from 1.19.4 to 1.19.5#116
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/jupytext-1.19.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown
Contributor

Bumps jupytext from 1.19.4 to 1.19.5.

Release notes

Sourced from jupytext's releases.

Version 1.19.5

Changed

  • Harden the github action (#1569). Thanks to Peyton Murray for this PR
  • The JupyterLab extension is now built with jupyter-builder - Thanks to Mahendra Paipuri for this PR (#1590)
  • zizmor and pre-commit are now required to pass before any other CI job runs, and the extension lint is now part of pre-commit (#1594)
  • Enabled TypeScript strict null checks in the JupyterLab extension - Thanks to Michał Krassowski for this PR (#1586)

Fixed

  • Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace - Thanks to Naveed for this PR (#1582)
  • Fixed unguarded access to the languageInfo.extensions array, which could still make Jupytext show notebook icons for Python files when the kernel metadata was incomplete - Thanks to Michał Krassowski for this PR (#1584)

Security

  • marimo_py_to_notebook now reuses its secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, which removed the safe permissions and left a window for a symlink attack on shared machines (#1568). Thanks to Naveed for reporting and fixing this!
Changelog

Sourced from jupytext's changelog.

1.19.5 (2026-07-21)

Changed

  • Harden the github action (#1569). Thanks to Peyton Murray for this PR
  • The JupyterLab extension is now built with jupyter-builder - Thanks to Mahendra Paipuri for this PR (#1590)
  • zizmor and pre-commit are now required to pass before any other CI job runs, and the extension lint is now part of pre-commit (#1594)
  • Enabled TypeScript strict null checks in the JupyterLab extension - Thanks to Michał Krassowski for this PR (#1586)

Fixed

  • Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace - Thanks to Naveed for this PR (#1582)
  • Fixed unguarded access to the languageInfo.extensions array, which could still make Jupytext show notebook icons for Python files when the kernel metadata was incomplete - Thanks to Michał Krassowski for this PR (#1584)

Security

  • marimo_py_to_notebook now reuses its secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, which removed the safe permissions and left a window for a symlink attack on shared machines (#1568). Thanks to Naveed for reporting and fixing this!
Commits
  • 3132c6c Version 1.19.5
  • d8d4d14 build(deps): bump axios from 1.16.0 to 1.18.1 in /jupyterlab in the jupytext-...
  • 1a6fde9 build(deps): bump the actions-dependencies group with 3 updates
  • 0068463 build(deps): bump astro
  • 58c1eb9 build(deps): bump the jupytext-extension-dependencies group across 2 director...
  • af6134e Migrate to jupyter-builder for building frontend extension (#1590)
  • bb0de16 build(deps): bump the actions-dependencies group across 1 directory with 8 up...
  • 555b4c2 avoid quadratic backtracking in help/bash magic regex
  • f24a3b7 reuse secure temp files in marimo_py_to_notebook
  • d53e2f1 Require zizmor and precommit on ci (#1594)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 30, 2026
@dependabot
dependabot Bot requested a review from twsl as a code owner May 30, 2026 12:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 30, 2026
@github-actions

github-actions Bot commented May 30, 2026

Copy link
Copy Markdown

Code Coverage Linux 3.11

Code Coverage

Package Line Rate Branch Rate Complexity Health
. 1% 0% 0
data 95% 88% 0
mapper 72% 58% 0
models 68% 53% 0
testing 87% 100% 0
training 100% 100% 0
utils 76% 25% 0
Summary 67% (1439 / 2145) 55% (441 / 802) 0

Results for commit 1cca2dd.

@github-actions

github-actions Bot commented May 30, 2026

Copy link
Copy Markdown

Test Results Linux 3.11

153 tests   152 ✅  52s ⏱️
  1 suites    1 💤
  1 files      0 ❌

Results for commit d94287c.

♻️ This comment has been updated with latest results.

@dependabot
dependabot Bot force-pushed the dependabot/uv/jupytext-1.19.3 branch from b95b3fb to f89155f Compare June 2, 2026 07:22
@dependabot
dependabot Bot force-pushed the dependabot/uv/jupytext-1.19.3 branch 3 times, most recently from 3bbc58d to cb37319 Compare June 14, 2026 21:05
@dependabot
dependabot Bot force-pushed the dependabot/uv/jupytext-1.19.3 branch from cb37319 to d94287c Compare June 20, 2026 10:35
@twsl

twsl commented Jul 23, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [jupytext](https://github.com/jupytext/jupytext) from 1.19.4 to 1.19.5.
- [Release notes](https://github.com/jupytext/jupytext/releases)
- [Changelog](https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md)
- [Commits](jupytext/jupytext@v1.19.4...v1.19.5)

---
updated-dependencies:
- dependency-name: jupytext
  dependency-version: 1.19.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump jupytext from 1.19.1 to 1.19.3 chore(deps-dev): bump jupytext from 1.19.4 to 1.19.5 Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/jupytext-1.19.3 branch from d94287c to f1f0df1 Compare July 23, 2026 13:49
@github-actions

Copy link
Copy Markdown

Code Coverage Linux 3.12

Code Coverage

Package Line Rate Branch Rate Complexity Health
. 1% 0% 0
data 95% 88% 0
mapper 72% 58% 0
models 68% 53% 0
testing 87% 100% 0
training 100% 100% 0
utils 76% 25% 0
Summary 67% (1439 / 2145) 55% (441 / 802) 0

Results for commit 239118f.

@github-actions

Copy link
Copy Markdown

Test Results Linux 3.12

153 tests   152 ✅  57s ⏱️
  1 suites    1 💤
  1 files      0 ❌

Results for commit f1f0df1.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant