chore(deps): Bump the jupyter group across 1 directory with 2 updates by dependabot[bot] · Pull Request #458 · kangwonlee/nmisp

dependabot · 2026-06-18T15:33:05Z

Bumps the jupyter group with 2 updates in the /tests directory: jupyter-client and jupyter-server.

Updates jupyter-client from 8.8.0 to 8.9.1

Release notes

Sourced from jupyter-client's releases.

v8.9.1

8.9.1

(Full Changelog)

Bugs fixed

Fix restart with curve encryption enabled #1124 (@krassowski, @Carreau, @fleming79)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @fleming79 (activity) | @krassowski (activity)

v8.9.0

8.9.0

(Full Changelog)

Enhancements made

Add ZMQ Curve for transport encryption #1110 (@krassowski, @Carreau, @minrk)

Maintenance and upkeep improvements

Temporarily pin Python to 3.14 in pre-releases test #1118 (@krassowski, @Carreau)

CI: fix testing of nbconvert #1116 (@Carreau, @krassowski)

Update pre-commit, and fix issues #1115 (@Carreau, @krassowski)

Remove 3.14t testing until msgpack supports it #1113 (@Carreau, @krassowski)

Log environment information for docs build on CI, update comment on workaround #1112 (@krassowski, @Carreau)

Documentation improvements

Update status terminology from 'abort' to 'aborted' #1120 (@krassowski, @minrk)

Added documentation for the handshake pattern #1108 (@JohanMabille, @Carreau)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

... (truncated)

Changelog

Sourced from jupyter-client's changelog.

8.9.1

(Full Changelog)

Bugs fixed

Fix restart with curve encryption enabled #1124 (@krassowski, @Carreau, @fleming79)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @fleming79 (activity) | @krassowski (activity)

8.9.0

(Full Changelog)

Enhancements made

Add ZMQ Curve for transport encryption #1110 (@krassowski, @Carreau, @minrk)

Maintenance and upkeep improvements

Temporarily pin Python to 3.14 in pre-releases test #1118 (@krassowski, @Carreau)

CI: fix testing of nbconvert #1116 (@Carreau, @krassowski)

Update pre-commit, and fix issues #1115 (@Carreau, @krassowski)

Remove 3.14t testing until msgpack supports it #1113 (@Carreau, @krassowski)

Log environment information for docs build on CI, update comment on workaround #1112 (@krassowski, @Carreau)

Documentation improvements

Update status terminology from 'abort' to 'aborted' #1120 (@krassowski, @minrk)

Added documentation for the handshake pattern #1108 (@JohanMabille, @Carreau)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @JohanMabille (activity) | @krassowski (activity) | @minrk (activity)

Commits

e1b216e Publish 8.9.1
b4a6c0a Fix restart with curve encryption enabled (#1124)
94d7070 Publish 8.9.0
d67bf20 Add ZMQ Curve for transport encryption (#1110)
aee173f Added documentation for the handshake pattern (#1108)
ef1b4cd Update status terminology from 'abort' to 'aborted' (#1120)
f02dd2d Temporarily pin Python to 3.14 in pre-releases test (#1118)
9f29a94 Update pre-commit, and fix issues (#1115)
9fd6286 CI: fix testing of nbconvert (#1116)
eb482d8 Remove 3.14t testing until msgpack supports it (#1113)
Additional commits viewable in compare view

Updates jupyter-server from 2.19.0 to 2.20.0

Release notes

Sourced from jupyter-server's releases.

v2.20.0

2.20.0

(Full Changelog)

Security fixes

CVE-2026-44727 GHSA-fcw5-x6j4-ccmp

Enhancements made

Fix confusing terminal output when using ServerApp.ip=0.0.0.0 #1643 (@Yann-P, @minrk)

Add a toggle to enable curve encryption for all kernels that support it #1638 (@krassowski, @Carreau, @ianthomas23, @minrk)

Bugs fixed

Grab the port from bind_sockets in case its different #1651 (@choldgraf, @krassowski)

Maintenance and upkeep improvements

Fix test_authorizer having a spurious comma in params #1664 (@krassowski)

Add a reminder to merge GHSA before release #1659 (@Yann-P, @Carreau)

Exclude problematic pywinpty 3.0.4 version #1658 (@krassowski)

ci: explicitly pass base-setup inputs to fix strict validation failures #1626 (@Carreau, @Copilot)

Documentation improvements

Align docs for curve encryption with latest JEP version #1660 (@krassowski, @Carreau)

Remove PGP key from docs #1653 (@Yann-P, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @choldgraf (activity) | @Copilot (activity) | @ianthomas23 (activity) | @krassowski (activity) | @minrk (activity) | @Yann-P (activity)

Changelog

Sourced from jupyter-server's changelog.

2.20.0

(Full Changelog)

Enhancements made

Fix confusing terminal output when using ServerApp.ip=0.0.0.0 #1643 (@Yann-P, @minrk)

Add a toggle to enable curve encryption for all kernels that support it #1638 (@krassowski, @Carreau, @ianthomas23, @minrk)

Bugs fixed

Grab the port from bind_sockets in case its different #1651 (@choldgraf, @krassowski)

Maintenance and upkeep improvements

Fix test_authorizer having a spurious comma in params #1664 (@krassowski)

Add a reminder to merge GHSA before release #1659 (@Yann-P, @Carreau)

Exclude problematic pywinpty 3.0.4 version #1658 (@krassowski)

ci: explicitly pass base-setup inputs to fix strict validation failures #1626 (@Carreau, @Copilot)

Documentation improvements

Align docs for curve encryption with latest JEP version #1660 (@krassowski, @Carreau)

Remove PGP key from docs #1653 (@Yann-P, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @choldgraf (activity) | @Copilot (activity) | @ianthomas23 (activity) | @krassowski (activity) | @minrk (activity) | @Yann-P (activity)

Commits

05a78ad Publish 2.20.0
6cbee8d Merge commit from fork
333e700 Fix test_authorizer having a spurious comma in params (#1664)
cccd543 Fix CI: explicitly pass base-setup inputs to avoid strict validation failures
cd16d71 Align docs for curve encryption with latest JEP version (#1660)
e458061 Add a toggle to enable curve encryption for all kernels that support it (#1638)
0ceeb4f Add note in RELEASE.md
b13f8a2 Markdown does not work.
e885b10 Add GHSA reminder in prep-release
0e28c90 Exclude problematic pywinpty 3.0.4 version (#1658)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the jupyter group with 2 updates in the /tests directory: [jupyter-client](https://github.com/jupyter/jupyter_client) and [jupyter-server](https://github.com/jupyter-server/jupyter_server). Updates `jupyter-client` from 8.8.0 to 8.9.1 - [Release notes](https://github.com/jupyter/jupyter_client/releases) - [Changelog](https://github.com/jupyter/jupyter_client/blob/main/CHANGELOG.md) - [Commits](jupyter/jupyter_client@v8.8.0...v8.9.1) Updates `jupyter-server` from 2.19.0 to 2.20.0 - [Release notes](https://github.com/jupyter-server/jupyter_server/releases) - [Changelog](https://github.com/jupyter-server/jupyter_server/blob/main/CHANGELOG.md) - [Commits](jupyter-server/jupyter_server@v2.19.0...v2.20.0) --- updated-dependencies: - dependency-name: jupyter-client dependency-version: 8.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: jupyter - dependency-name: jupyter-server dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: jupyter ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the jupyter group across 1 directory with 2 updates#458

chore(deps): Bump the jupyter group across 1 directory with 2 updates#458
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/tests/jupyter-b3d3e2d409

dependabot Bot commented on behalf of github Jun 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 18, 2026

v8.9.1

8.9.1

Bugs fixed

Contributors to this release

v8.9.0

8.9.0

Enhancements made

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

8.9.1

Bugs fixed

Contributors to this release

8.9.0

Enhancements made

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

v2.20.0

2.20.0

Security fixes

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

2.20.0

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants