Skip to content

deps: bump jupyter_server to 2.21.0 and anyio to 4.14.2 - #10

Open
katsugtgz wants to merge 1 commit into
H-EmbodVis:mainfrom
katsugtgz:deps/jupyter-server-2.21.0-anyio-4.14.2
Open

katsugtgz wants to merge 1 commit into
H-EmbodVis:mainfrom
katsugtgz:deps/jupyter-server-2.21.0-anyio-4.14.2

Conversation

@katsugtgz

Copy link
Copy Markdown

Bumps two pins in requirements.txt to clear known advisories.

Changes:

Evidence:

  • requirements.txt pinned jupyter_server==2.20.0 and anyio==4.14.0
  • osv-scanner reported all three advisories against requirements.txt before this change

Validation:

  • osv-scanner no longer reports these advisories for either package
  • both versions resolve on PyPI; all runtime floors required by jupyter_server 2.21.0 (anyio>=3.1.0, jupyter-client>=7.4.4, jupyter-events>=0.11.0, etc.) are already satisfied by the pinned versions in this file
  • repo has no CI or test suite; requirements.txt is the documented install path in README (pip install -r requirements.txt), verified the pins resolve with pip install --dry-run

Scope: requirements.txt pin update only.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant