Skip to content

Bump jupyter-server from 2.11.2 to 2.18.0#921

Merged
teutoburg merged 2 commits intomainfrom
dependabot/pip/jupyter-server-2.18.0
May 6, 2026
Merged

Bump jupyter-server from 2.11.2 to 2.18.0#921
teutoburg merged 2 commits intomainfrom
dependabot/pip/jupyter-server-2.18.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps jupyter-server from 2.11.2 to 2.18.0.

Release notes

Sourced from jupyter-server's releases.

v2.18.0

2.18.0

(Full Changelog)

Security patches

API and Breaking Changes

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

... (truncated)

Changelog

Sourced from jupyter-server's changelog.

2.18.0

(Full Changelog)

API and Breaking Changes

Enhancements made

Bugs fixed

... (truncated)

Commits
  • 0ceed45 Publish 2.18.0
  • 49b3439 Move check origin into a util function and add it to websocket (#1630)
  • e2e08c8 Add test case for bad next URL format
  • 624d6c0 Delete outdated patch code
  • d825b93 Apply suggestion from @​minrk
  • 789fed0 patch open redirect in /login
  • 2ee51ec fix(CVE-2026-35397): path traversal when target dir starts with root dir
  • 057869a Fix allow_origin_pat to do full matching instead of prefix matching
  • 4862199 Add resolvePath API for resolving kernel-relative paths
  • e31d514 Bump actions/create-github-app-token from 2 to 3 in the actions group across ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [jupyter-server](https://github.com/jupyter-server/jupyter_server) from 2.11.2 to 2.18.0.
- [Release notes](https://github.com/jupyter-server/jupyter_server/releases)
- [Changelog](https://github.com/jupyter-server/jupyter_server/blob/main/CHANGELOG.md)
- [Commits](jupyter-server/jupyter_server@v2.11.2...v2.18.0)

---
updated-dependencies:
- dependency-name: jupyter-server
  dependency-version: 2.18.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Related to or updating any dependencies label May 6, 2026
@teutoburg teutoburg self-assigned this May 6, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented May 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.19%. Comparing base (18b9198) to head (7afcf3e).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #921   +/-   ##
=======================================
  Coverage   75.19%   75.19%           
=======================================
  Files          70       70           
  Lines        9018     9018           
=======================================
  Hits         6781     6781           
  Misses       2237     2237           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@teutoburg teutoburg merged commit cb83801 into main May 6, 2026
26 checks passed
@teutoburg teutoburg deleted the dependabot/pip/jupyter-server-2.18.0 branch May 6, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Related to or updating any dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant