Skip to content

release_2.3

1. v2.3.7 (2026-06-23)

1.1 New Features

  • bump jupyterlab to 4.5.7 and notebook to 7.5.6 (fix high CVE-2026-40171)
  • bump jupyter_server from 2.16.0 to 2.18.2 (fix high CVEs)
  • bump mistune from 3.1.3 to 3.2.1 (fix high CVE) (backport #118) (#119)
  • bump python-multipart to 0.0.29 (fix high CVE-2026-42561) (#120)
  • bump ujson from 5.12.0 to 5.12.1 (fix high CVE-2026-44660) (backport #122) (#123)
  • bump python-multipart from 0.0.29 to 0.0.30 (fix high CVE-2026-53539) (#136)
  • bump starlette from 1.2.1 to 1.3.1 (fix high CVE-2026-54283) (backport #138) (#139)
  • bump jupyter_server to 2.20.0 (fix critical CVE-2026-44727) (backport #144) (#145)

2. v2.3.6 (2026-04-08)

2.1 New Features

  • bump ujson to 5.12.0 (fix high CVE-2026-32874 and 32875) (backport #87) (#88)
  • add package datagouv_client (backport #93) (#94)

3. v2.3.5 (2026-01-31)

3.1 New Features

  • bump pypdf from 6.2.0 to 6.4.0 (fix GHSA-m449-cwjh-6pw7) (#66)
  • bump python-multipart to 0.0.22 (fix high CVE-2026-24486) (#76)
  • bump nbconvert from 7.16.6 to 7.17.0 (fix high CVE-2025-53000) (#78)

4. v2.3.4 (2025-11-14)

4.1 New Features

  • upgrade pyxml2pdf to replace PyPDF2 by pydf (fix CVE-2023-36464) (#62)

5. v2.3.3 (2025-11-07)

5.1 New Features

  • bump starlette from 0.47.3 to 0.49.1 (fix CVE-2025-62727) (backport #60) (#61)

6. v2.3.2 (2025-08-28)

6.1 New Features

  • add pyxml2pdf and dependencies (GLPI 368072) (backport #52) (#53)
  • bump xlsxwriter from 3.2.3 (yanked) to 3.2.5 (backport #54) (#55)

7. v2.3.1 (2025-07-11)

7.1 New Features

  • add missing dependency jupyterlab_widgets (backport #44) (#45)

8. v2.3.0 (2025-05-20)

8.1 New Features

  • add python3_extratools layer (moved from repo python3_scientific)
  • bump fastjsonschema from 2.20.0 to 2.21.1
  • bump htmltools from 0.5.3 to 0.6.0
  • bump httpx from 0.27.2 to 0.28.1
  • bump ipywidgets to 8.1.7 and widgetsnbextension to 4.0.14 (#10)
  • bump json5 from 0.9.25 to 0.12.0 (#11)
  • bump jupyter-events from 0.10.0 to 0.12.0 (#12)
  • bump jupyter-server from 2.14.2 to 2.16.0 (#13)
  • bump jupyterlab to 4.4.2 and notebook to 7.4.2 (#14)
  • bump mdit-py-plugins from 0.4.1 to 0.4.2 (#15)
  • bump mistune from 3.0.2 to 3.1.3 (#16)
  • bump nbclient from 0.10.0 to 0.10.2 (#17)
  • bump nbconvert from 7.16.4 to 7.16.6 (#18)
  • bump openpyxl from 3.1.2 to 3.1.5 (#19)
  • bump prometheus-client from 0.21.0 to 0.21.1 (#20)
  • bump python-json-logger from 2.0.7 to 3.3.0 (#21)
  • bump python-lsp-server from 1.12.0 to 1.12.2 (#22)
  • bump python-multipart from 0.0.19 to 0.0.20 (#23)
  • bump shiny from 1.0.0 to 1.4.0 (#24)
  • revert "bump pyzmq from 25.1.1 to 26.4.0" (#26)
  • bump sniffio from 1.2.0 to 1.3.1
  • bump starlette from 0.41.0 to 0.46.2
  • bump starlette from 0.41.0 to 0.46.2
  • bump tinycss2 from 1.3.0 to 1.4.0
  • bump uvicorn from 0.17.5 to 0.34.2 (#30)
  • bump watchfiles from 0.24.0 to 1.0.5 (#31)
  • bump webcolors from 24.8.0 to 24.11.1 and add pdm-backend
  • bump pyzmq from 25.1.1 to 26.4.0 (finally) (#33)
  • bump websockets from 13.0.1 to 15.0.1 (#36)
  • bump XlsxWriter from 3.1.9 to 3.2.3 (#37)
  • bump nbclassic from 1.2.0 to 1.3.1 (#38)