Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-jupyter-server for
openSUSE:Factory checked in at 2026-05-06 19:18:29
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-jupyter-server (Old)
and /work/SRC/openSUSE:Factory/.python-jupyter-server.new.30200 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-jupyter-server"
Wed May 6 19:18:29 2026 rev:46 rq:1351103 version:2.18.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-jupyter-server/python-jupyter-server.changes
2025-06-23 14:57:00.441164906 +0200
+++
/work/SRC/openSUSE:Factory/.python-jupyter-server.new.30200/python-jupyter-server.changes
2026-05-06 19:20:36.651792482 +0200
@@ -1,0 +2,101 @@
+Wed May 6 05:44:42 UTC 2026 - Daniel Garcia <[email protected]>
+
+- update to 2.18.1 (bsc#1264161, CVE-2025-61669):
+ ## Bugs fixed
+ * Prevent reconnect stalls from orphaned kernel_info requests #1632
+ (@krassowski, @Copilot, @jtpio, @tonyx93)
+- update to 2.18.0:
+ ## Security patches
+ * CVE-2026-40110 GHSA-24qx-w28j-9m6p
+ * CVE-2025-61669 GHSA-qh7q-6qm3-653w
+ * CVE-2026-40934 GHSA-5mrq-x3x5-8v8f
+ * CVE-2026-35397 GHSA-5789-5fc7-67v3
+
+ ## API and Breaking Changes
+ * Add query param to sanitize HTML in GET /nbconvert/html #1618
+ * (@Yann-P, @Carreau)
+
+ ## Enhancements made
+ * Update handlers.py to fix ioloop blockers(sync file operations)
+ #1617 (@zolyfarkas-fb, @Carreau) Add resolvePath API for resolving
+ * kernel-relative paths #1331 (@krassowski, @Carreau, @blink1073)
+
+ ## Bugs fixed
+ * Move check origin into a util function and add it to websocket
+ #1630 (@Carreau, @Yann-P)
+ * Fix flaky test_restart_kernel by unsticking nudge() after
+ port-changing restart #1628 (@Carreau, @claude, @krassowski)
+ * Try to fix flaky test "test_restart_kernel" #1625 (@Carreau)
+ * Fix potential unraisable pytest error #1624 (@Carreau)
+ * fix: use %s placeholders in HTTPError to prevent Tornado from
+ doubling % in gateway URLs #1620 (@terminalchai, @krassowski,
+ @ptch314)
+ * Fix three file descriptor leaks in kernel connection lifecycle
+ (#1506) #1619 (@tonyx93, @Carreau)
+ * Use web.HTTPError for kernel restart failures #1616 (@YDawn,
+ @Carreau)
+ * Handle EADDRINUSE and EACCES in _bind_http_server_tcp #1613
+ (@YDawn, @Zsailer, @minrk)
+ * Use st_birthtime for file created timestamp on macOS/BSD #1594
+ (@ktaletsk, @krassowski, @minrk)
+ * Fix double write when refusing hidden files in contents handler
+ #1585 (@Krish-876, @minrk)
+ * Close all sockets in _find_http_port explicitly #1584
+ (@MaryushSoroka, @minrk)
+ * Fix writing on remote file systems with attribute cache #1574
+ (@krassowski, @Zsailer)
+ * Add IdentityProvider.cookie_secret_hook #1569 (@emin63, @minrk)
+ * fix context pollution #1561 (@dualc, @Zsailer)
+ * Fix gateway cookie handling #1558 (@kevin-bates, @RRosio,
+ @lresende, @minrk)
+ * fix connection exception cause high cpu load #1484 (@dualc,
+ @lresende, @minrk)
+
+ ## Maintenance and upkeep improvements
+ * Start to test on Python 3.13 and 3.14 #1623 (@Carreau)
+ * Bump actions/create-github-app-token from 2 to 3 in the actions
+ group across 1 directory #1621 (@Carreau)
+ * Bump brace-expansion from 1.1.12 to 1.1.13 #1615 (@minrk)
+ * Fix package spec for jupytext #1614 (@krassowski, @Zsailer)
+ * chore: update pre-commit hooks #1607 (@minrk)
+ * try to fix ci on windows #1600 (@minrk, @krassowski)
+ * run prerelease tests on 3.14 #1599 (@minrk)
+ * Pin sphinx to an older version (<9) to fix docs #1597
+ (@krassowski, @minrk)
+ * Restore running all tests for Windows in CI workflow #1581
+ (@krassowski, @Zsailer)
+ * Fix flaky test_execution_state test #1579 (@krassowski, @Zsailer)
+ * Fix failing link check due to a blog post referred in docs
+ changing URL format #1577 (@krassowski, @Zsailer)
+ * Fix lint on CI, pin ruff to the same version in hatch fmt and
+ pre-commit #1576 (@krassowski, @Zsailer)
+ * Bump actions/checkout from 5 to 6 in the actions group #1572
+ (@minrk)
+ * don't link check npm #1568 (@minrk, @Zsailer)
+ * Bump brace-expansion from 1.1.11 to 1.1.12 #1546 (@minrk)
+ * Replace @flaky.flaky decorate with pytest marker #1544 (@mgorny,
+ @minrk)
+ * chore: update pre-commit hooks #1449 (@minrk)
+
+ ## Documentation improvements
+ * some docs fixes #1627 (@Carreau, @krassowski)
+ * Updated dev install instructions #1622 (@bloomsa, @Carreau)
+ * Fix outdated ContentsManager testing guidance #1611
+ (@terminalchai, @Zsailer, @lresende, @minrk)
+ * add missing word 'to' #1596 (@carlfarrington, @krassowski, @minrk)
+
+-------------------------------------------------------------------
+Mon Dec 1 22:31:07 UTC 2025 - Dirk Müller <[email protected]>
+
+- update to 2.17.0:
+ * Avoid redundant call to `_get_os_path` in `_dir_model` #1547
+ * Allow specifying extra params to scrub from logs #1538
+ * Add a logger to the ExtensionPoint API #1523 (@Zsailer)
+ * Allow user to update identity values #1518 (@brichet)
+ * Fix FileNotFoundError handling in rename_file methods #1548
+ * Use stdlib override when possible #1532 (@edrogers)
+ * CORS is not checked when browsing files. check origin now
+ * Bump the actions group across 1 directory with 2 updates
+ * Fix the failing "Test Lint" check on CI #1540 (@jtpio)
+
+-------------------------------------------------------------------
Old:
----
jupyter_server-2.16.0.tar.gz
New:
----
jupyter_server-2.18.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-jupyter-server.spec ++++++
--- /var/tmp/diff_new_pack.YEKbN2/_old 2026-05-06 19:20:38.311860853 +0200
+++ /var/tmp/diff_new_pack.YEKbN2/_new 2026-05-06 19:20:38.323861347 +0200
@@ -1,7 +1,7 @@
#
# spec file for package python-jupyter-server
#
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -33,7 +33,7 @@
%{?sle15_python_module_pythons}
Name: python-jupyter-server%{psuffix}
-Version: 2.16.0
+Version: 2.18.1
Release: 0
Summary: The backend to Jupyter web applications
License: BSD-3-Clause
++++++ jupyter_server-2.16.0.tar.gz -> jupyter_server-2.18.1.tar.gz ++++++
++++ 6107 lines of diff (skipped)
