Skip to content

chore(deps-dev): bump jupyterlab from 4.5.6 to 4.5.7 in /python - #348

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/jupyterlab-4.5.7
Closed

chore(deps-dev): bump jupyterlab from 4.5.6 to 4.5.7 in /python#348
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/jupyterlab-4.5.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Copy link
Copy Markdown
Contributor

Bumps jupyterlab from 4.5.6 to 4.5.7.

Release notes

Sourced from jupyterlab's releases.

v4.5.7

4.5.7

(Full Changelog)

Security patches

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​Carreau (activity) | @​filipeoliveira05 (activity) | @​flaviomartins (activity) | @​itsmejay80 (activity) | @​jtpio (activity) | @​krassowski (activity) | @​martinRenou (activity) | @​MUFFANUJ (activity) | @​utsav-develops (activity)

Commits
  • f514041 [ci skip] Publish 4.5.7
  • 66fe9ad Backport PR #18652 on branch 4.5.x (Video and Audio Content Providers: Fix Ju...
  • f4455fa Fix syntax for Python 3.9 on 4.5.x branch (#18817)
  • d2322b5 Backport PR #18819 on branch 4.5.x (Fix linting issue) (#18820)
  • 5d9cb8c Merge commit from fork
  • 1de120b Merge commit from fork
  • 6926100 Backport PR #18808 on branch 4.5.x (Fix notebook hang when dropping cells) (#...
  • 67e6e88 Backport PR #18647 on branch 4.5.x (Update default font family to honor macOS...
  • bf21eb9 Backport PR #18747 on branch 4.5.x (Fix Contextual Help keyboard shortcut rel...
  • 73cafa5 Backport PR #18788 on branch 4.5.x (Fix name of option for extension manager ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [jupyterlab](https://github.com/jupyterlab/jupyterlab) from 4.5.6 to 4.5.7.
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/lsp@4.5.6...@jupyterlab/lsp@4.5.7)

---
updated-dependencies:
- dependency-name: jupyterlab
  dependency-version: 4.5.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 30, 2026
@dbmi-svc-checkmarx

Copy link
Copy Markdown

Logo
Checkmarx One – Scan Summary & Detailsa81dbe22-94bb-4627-973c-0febd81f5dbb


New Issues (9) Checkmarx found the following issues in this Pull Request
# Severity Issue Source File / Package Checkmarx Insight
1 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 36
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
2 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 16
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
3 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 76
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
4 LOW Unpinned Actions Full Length Commit SHA /build_and_deploy.yml: 23
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
5 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 26
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
6 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 46
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
7 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 68
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
8 LOW Unpinned Actions Full Length Commit SHA /ci.yml: 58
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
9 LOW Unpinned Actions Full Length Commit SHA /build_and_deploy.yml: 15
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #364.

@dependabot dependabot Bot closed this Jun 22, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python/jupyterlab-4.5.7 branch June 22, 2026 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant