From 20f7e9e697829f07f2a71bda78a4febfd6ef35f4 Mon Sep 17 00:00:00 2001 From: Afshin Taylor Darian Date: Tue, 16 Mar 2021 12:55:48 +0000 Subject: [PATCH] Modernize Changelog (#6008) --- .gitignore | 3 + CHANGELOG.md | 1408 ++++++++++++++++++++++++++++++++++ docs/doc-requirements.txt | 1 + docs/environment.yml | 1 + docs/source/changelog.rst | 1516 ------------------------------------- docs/source/conf.py | 9 +- 6 files changed, 1421 insertions(+), 1517 deletions(-) create mode 100644 CHANGELOG.md delete mode 100644 docs/source/changelog.rst diff --git a/.gitignore b/.gitignore index 4e423996e..bfbc43d87 100644 --- a/.gitignore +++ b/.gitignore @@ -51,3 +51,6 @@ geckodriver.log *.code-workspace .history .vscode + +# copied changelog +docs/source/changelog.md diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 000000000..d87ca5b45 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,1408 @@ +# Changelog + +A summary of changes in the Jupyter notebook. For more detailed +information, see [GitHub](https://github.com/jupyter/notebook). + +Use `pip install notebook --upgrade` or `conda upgrade notebook` to +upgrade to the latest release. + +We strongly recommend that you upgrade pip to version 9+ of pip before +upgrading `notebook`. + +Use `pip install pip --upgrade` to upgrade pip. Check pip version with +`pip --version`. + + +## 6.2.0 + +## Merged PRs + +- Increase minimum tornado version ([5933](https://github.com/jupyter/notebook/pull/5933)) +- Adjust skip decorators to avoid remaining dependency on nose ([5932](https://github.com/jupyter/notebook/pull/5932)) +- Ensure that cell ids persist after save ([5928](https://github.com/jupyter/notebook/pull/5928)) +- Add reconnection to Gateway (form nb2kg) ([5924](https://github.com/jupyter/notebook/pull/5924)) +- Fix some typos ([5917](https://github.com/jupyter/notebook/pull/5917)) +- Handle TrashPermissionError, now that it exist ([5894](https://github.com/jupyter/notebook/pull/5894)) + +Thank you to all the contributors: + +- @kevin-bates +- @mishaschwartz +- @oyvsyo +- @user202729 +- @stefanor + +## 6.1.6 + +## Merged PRs + +- do not require nose for testing ([5826](https://github.com/jupyter/notebook/pull/5826)) +- [docs] Update Chinese and Hindi readme.md ([5823](https://github.com/jupyter/notebook/pull/5823)) +- Add support for creating terminals via GET ([5813](https://github.com/jupyter/notebook/pull/5813)) +- Made doc translations in Hindi and Chinese ([5787](https://github.com/jupyter/notebook/pull/5787)) + +Thank you to all the contributors: + +- @pgajdos +- @rjn01 +- @kevin-bates +- @virejdasani + +## 6.1.5 + +6.1.5 is a security release, fixing one vulnerability: + +- Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) + +## 6.1.4 + +- Fix broken links to jupyter documentation ([5686](https://github.com/jupyter/notebook/pull/5686)) +- Add additional entries to troubleshooting section ([5695](https://github.com/jupyter/notebook/pull/5695)) +- Revert change in page alignment ([5703](https://github.com/jupyter/notebook/pull/5703)) +- Bug fix: remove double encoding in download files ([5720](https://github.com/jupyter/notebook/pull/5720)) +- Fix typo for Check in zh_CN ([5730](https://github.com/jupyter/notebook/pull/5730)) +- Require a file name in the "Save As" dialog ([5733](https://github.com/jupyter/notebook/pull/5733)) + +Thank you to all the contributors: + +- bdbai +- Jaipreet Singh +- Kevin Bates +- Pavel Panchekha +- Zach Sailer + +## 6.1.3 + +- Title new buttons with label if action undefined ([5676](https://github.com/jupyter/notebook/pull/5676)) + +Thank you to all the contributors: + +- Kyle Kelley + +## 6.1.2 + +- Fix russian message format for delete/duplicate actions ([5662](https://github.com/jupyter/notebook/pull/5662)) +- Remove unnecessary import of bind_unix_socket ([5666](https://github.com/jupyter/notebook/pull/5666)) +- Tooltip style scope fix ([5672](https://github.com/jupyter/notebook/pull/5672)) + +Thank you to all the contributors: + +- Dmitry Akatov +- Kevin Bates +- Magda Stenius + +## 6.1.1 + +- Prevent inclusion of requests_unixsocket on Windows ([5650](https://github.com/jupyter/notebook/pull/5650)) + +Thank you to all the contributors: + +- Kevin Bates + +## 6.1.0 + +Please note that this repository is currently maintained by a skeleton +crew of maintainers from the Jupyter community. For our approach moving +forward, please see this +[notice](https://github.com/jupyter/notebook#notice) from the README. +Thank you. + +Here is an enumeration of changes made since the last release and +included in 6.1.0. + +- Remove deprecated encoding parameter for Python 3.9 compatibility. ([5174](https://github.com/jupyter/notebook/pull/5174)) +- Add support for async kernel management ([4479](https://github.com/jupyter/notebook/pull/4479)) +- Fix typo in password_required help message ([5320](https://github.com/jupyter/notebook/pull/5320)) +- Gateway only: Ensure launch and request timeouts are in sync ([5317](https://github.com/jupyter/notebook/pull/5317)) +- Update Markdown Cells example to HTML5 video tag ([5411](https://github.com/jupyter/notebook/pull/5411)) +- Integrated LoginWidget into edit to enable users to logout from the t... ([5406](https://github.com/jupyter/notebook/pull/5406)) +- Update message about minimum Tornado version ([5222](https://github.com/jupyter/notebook/pull/5222)) +- Logged notebook type ([5425](https://github.com/jupyter/notebook/pull/5425)) +- Added nl language ([5354](https://github.com/jupyter/notebook/pull/5354)) +- Add UNIX socket support to notebook server. ([4835](https://github.com/jupyter/notebook/pull/4835)) +- Update CodeMirror dependency ([5198](https://github.com/jupyter/notebook/pull/5198)) +- Tree added download multiple files ([5351](https://github.com/jupyter/notebook/pull/5351)) +- Toolbar buttons tooltip: show help instead of label ([5107](https://github.com/jupyter/notebook/pull/5107)) +- Remove unnecessary import of requests_unixsocket ([5451](https://github.com/jupyter/notebook/pull/5451)) +- Add ability to cull terminals and track last activity ([5372](https://github.com/jupyter/notebook/pull/5372)) +- Code refactoring notebook.js ([5352](https://github.com/jupyter/notebook/pull/5352)) +- Install terminado for docs build ([5462](https://github.com/jupyter/notebook/pull/5462)) +- Convert notifications JS test to selenium ([5455](https://github.com/jupyter/notebook/pull/5455)) +- Add cell attachments to markdown example ([5412](https://github.com/jupyter/notebook/pull/5412)) +- Add Japanese document ([5231](https://github.com/jupyter/notebook/pull/5231)) +- Migrate Move multiselection test to selenium ([5158](https://github.com/jupyter/notebook/pull/5158)) +- Use `cmdtrl-enter` to run a cell ([5120](https://github.com/jupyter/notebook/pull/5120)) +- Fix broken "Raw cell MIME type" dialog ([5385](https://github.com/jupyter/notebook/pull/5385)) +- Make a notebook writable after successful save-as ([5296](https://github.com/jupyter/notebook/pull/5296)) +- Add actual watch script ([4738](https://github.com/jupyter/notebook/pull/4738)) +- Added `--autoreload` flag to `NotebookApp` ([4795](https://github.com/jupyter/notebook/pull/4795)) +- Enable check_origin on gateway websocket communication ([5471](https://github.com/jupyter/notebook/pull/5471)) +- Restore detection of missing terminado package ([5465](https://github.com/jupyter/notebook/pull/5465)) +- Culling: ensure `last_activity` attr exists before use ([5355](https://github.com/jupyter/notebook/pull/5355)) +- Added functionality to allow filter kernels by Jupyter Enterprise Gat... ([5484](https://github.com/jupyter/notebook/pull/5484)) +- 'Play' icon for run-cell toolbar button ([2922](https://github.com/jupyter/notebook/pull/2922)) +- Bump minimum version of jQuery to 3.5.0 ([5491](https://github.com/jupyter/notebook/pull/5491)) +- Remove old JS markdown tests, add a new one in selenium ([5497](https://github.com/jupyter/notebook/pull/5497)) +- Add support for more RTL languages ([5036](https://github.com/jupyter/notebook/pull/5036)) +- Make markdown cells stay RTL in edit mode ([5037](https://github.com/jupyter/notebook/pull/5037)) +- Unforce RTL output display ([5039](https://github.com/jupyter/notebook/pull/5039)) +- Fixed multicursor backspacing ([4880](https://github.com/jupyter/notebook/pull/4880)) +- Implemented Split Cell for multicursor ([4824](https://github.com/jupyter/notebook/pull/4824)) +- Alignment issue \[FIXED\] ([3173](https://github.com/jupyter/notebook/pull/3173)) +- MathJax: Support for `\gdef` ([4407](https://github.com/jupyter/notebook/pull/4407)) +- Another (Minor) Duplicate Code Reduction ([5316](https://github.com/jupyter/notebook/pull/5316)) +- Update readme regarding maintenance ([5500](https://github.com/jupyter/notebook/pull/5500)) +- Document contents chunks ([5508](https://github.com/jupyter/notebook/pull/5508)) +- Backspace deletes empty line ([5516](https://github.com/jupyter/notebook/pull/5516)) +- The dropdown submenu at notebook page is not keyboard accessible ([4732](https://github.com/jupyter/notebook/pull/4732)) +- Tooltips visible through keyboard navigation for specified buttons ([4729](https://github.com/jupyter/notebook/pull/4729)) +- Fix for recursive symlink ([4670](https://github.com/jupyter/notebook/pull/4670)) +- Fix for the terminal shutdown issue ([4180](https://github.com/jupyter/notebook/pull/4180)) +- Add japanese translation files ([4490](https://github.com/jupyter/notebook/pull/4490)) +- Workaround for socket permission errors on Cygwin ([4584](https://github.com/jupyter/notebook/pull/4584)) +- Implement optional markdown header and footer files ([4043](https://github.com/jupyter/notebook/pull/4043)) +- Remove double link when using `custom_display_url` ([5544](https://github.com/jupyter/notebook/pull/5544)) +- Respect `cell.is_editable` during find-and-replace ([5545](https://github.com/jupyter/notebook/pull/5545)) +- Fix exception causes all over the codebase ([5556](https://github.com/jupyter/notebook/pull/5556) +- Improve login shell heuristics ([5588](https://github.com/jupyter/notebook/pull/5588)) +- Added support for `JUPYTER_TOKEN_FILE` ([5587](https://github.com/jupyter/notebook/pull/5587)) +- Kill notebook itself when server cull idle kernel ([5593](https://github.com/jupyter/notebook/pull/5593)) +- Implement password hashing with bcrypt ([3793](https://github.com/jupyter/notebook/pull/3793)) +- Fix broken links ([5600](https://github.com/jupyter/notebook/pull/5600)) +- Russian internationalization support ([5571](https://github.com/jupyter/notebook/pull/5571)) +- Add a metadata tag to override notebook direction (ltr/rtl) ([5052](https://github.com/jupyter/notebook/pull/5052)) +- Paste two images from clipboard in markdown cell ([5598](https://github.com/jupyter/notebook/pull/5598)) +- Add keyboard shortcuts to menu dropdowns ([5525](https://github.com/jupyter/notebook/pull/5525)) +- Update codemirror to `5.56.0+components1` ([5637](https://github.com/jupyter/notebook/pull/5637)) + +Thank you to all the contributors: + +- Aaron Myatt +- Adam Blake +- Afshin Taylor Darian +- Aman Bansal +- Ben Thayer +- berendjan +- Bruno P. Kinoshita +- bzinberg +- Christophe Cadilhac +- Daiki Katsuragawa +- David Lukes +- Dmitriy Q +- dmpe +- dylanzjy +- dSchurch +- E. M. Bray +- ErwinRussel +- Felix Mönckemeyer +- Grant Nestor +- Jarrad Whitaker +- Jesus Panales Castillo +- Joshua Zeltser +- Karthikeyan Singaravelan +- Kenichi Ito +- Kevin Bates +- Koki Nishihara +- Kris Wilson +- Kyle Kelley +- Laura Merlo +- levinxo +- Luciano Resende +- Luis Cabezon Manchado +- Madhusudhan Srinivasa +- Matthias Geier +- mattn +- Max Klein +- Min RK +- Mingxuan Lin +- Mohammad Mostafa Farzan +- Niko Felger +- Norah Abanumay +- Onno Broekmans +- PierreMB +- pinarkavak +- Ram Rachum +- Reece Hart +- Remi Rampin +- Rohit Sanjay +- Shane Canon +- Simon Li +- Steinar Sturlaugsson +- Steven Silvester +- taohan16 +- Thew Dhanat +- Thomas Kluyver +- Toon Baeyens +- Vidar Tonaas Fauske +- Zachary Sailer + +## 6.0.3 + +- Dependency updates to fix startup issues on Windows platform +- Add support for nbconvert 6.x +- Creation of recent tab + +Thanks for all the contributors: + +- Luciano Resende +- Kevin Bates +- ahangsleben +- Zachary Sailer +- Pallavi Bharadwaj +- Thomas Kluyver +- Min RK +- forest0 +- Bibo Hao +- Michal Charemza +- Sergey Shevelev +- Shuichiro MAKIGAKI +- krinsman +- TPartida +- Landen McDonald +- Tres DuBiel + +## 6.0.2 + +- Update JQuery dependency to version 3.4.1 to fix security vulnerability (CVE-2019-11358) +- Update CodeMirror to version 5.48.4 to fix Python formatting issues +- Continue removing obsolete Python 2.x code/dependencies +- Multiple documentation updates + +Thanks for all the contributors: + +- David Robles +- Jason Grout +- Kerwin Sun +- Kevin Bates +- Kyle Kelley +- Luciano Resende +- Marcus D Sherman +- Sasaki Takeru +- Tom Jarosz +- Vidar Tonaas Fauske +- Wes Turner +- Zachary Sailer + +## 6.0.1 + +- Attempt to re-establish websocket connection to Gateway ([4777](https://github.com/jupyter/notebook/pull/4777)) +- Add missing react-dom js to package data ([4772](https://github.com/jupyter/notebook/pull/4772)) + +Thanks for all the contributors: + +- Eunsoo Park +- Min RK + +## 6.0 + +This is the first major release of the Jupyter Notebook since version +5.0 (March 2017). + +We encourage users to start trying JupyterLab, which has just announced +it's 1.0 release in preparation for a future transition. + +- Remove Python 2.x support in favor of Python 3.5 and higher. +- Multiple accessibility enhancements and bug-fixes. +- Multiple translation enhancements and bug-fixes. +- Remove deprecated ANSI CSS styles. +- Native support to forward requests to Jupyter Gateway(s) (Embedded + NB2KG). +- Use JavaScript to redirect users to notebook homepage. +- Enhanced SSL/TLS security by using PROTOCOL_TLS which selects the + highest ssl/tls protocol version available that both the client and + server support. When PROTOCOL_TLS is not available use + PROTOCOL_SSLv23. +- Add `?no_track_activity=1` argument to allow API requests. to not be + registered as activity (e.g. API calls by external activity + monitors). +- Kernels shutting down due to an idle timeout is no longer considered + an activity-updating event. +- Further improve compatibility with tornado 6 with improved checks + for when websockets are closed. +- Launch the browser with a local file which redirects to the server + address including the authentication token. This prevents another + logged-in user from stealing the token from command line arguments + and authenticating to the server. The single-use token previously + used to mitigate this has been removed. Thanks to Dr. Owain Kenway + for suggesting the local file approach. +- Respect nbconvert entrypoints as sources for exporters +- Update to CodeMirror to 5.37, which includes f-string syntax for + Python 3.6. +- Update jquery-ui to 1.12 +- Execute cells by clicking icon in input prompt. +- New "Save as" menu option. +- When serving on a loopback interface, protect against DNS rebinding + by checking the `Host` header from the browser. This check can be + disabled if necessary by setting `NotebookApp.allow_remote_access`. (Disabled by default while we work out some Mac issues in + [3754](https://github.com/jupyter/notebook/issues/3754)). +- Add kernel_info_timeout traitlet to enable restarting slow kernels. +- Add `custom_display_host` config option to override displayed URL. +- Add /metrics endpoint for Prometheus Metrics. +- Optimize large file uploads. +- Allow access control headers to be overriden in + jupyter_notebook_config.py to support greater CORS and proxy + configuration flexibility. +- Add support for terminals on windows. +- Add a "restart and run all" button to the toolbar. +- Frontend/extension-config: allow default json files in a .d + directory. +- Allow setting token via jupyter_token env. +- Cull idle kernels using `--MappingKernelManager.cull_idle_timeout`. +- Allow read-only notebooks to be trusted. +- Convert JS tests to Selenium. + +Security Fixes included in previous minor releases of Jupyter Notebook +and also included in version 6.0. + +- Fix Open Redirect vulnerability (CVE-2019-10255) where certain + malicious URLs could redirect from the Jupyter login page to a + malicious site after a successful login. +- Contains a security fix for a cross-site inclusion (XSSI) + vulnerability (CVE-2019--9644), where files at a known URL could be + included in a page from an unauthorized website if the user is + logged into a Jupyter server. The fix involves setting the + `X-Content-Type-Options: nosniff` header, and applying CSRF checks + previously on all non-GET API requests to GET requests to API + endpoints and the /files/ endpoint. +- Check Host header to more securely protect localhost deployments + from DNS rebinding. This is a pre-emptive measure, not fixing a + known vulnerability. Use `.NotebookApp.allow_remote_access` and + `.NotebookApp.local_hostnames` to configure access. +- Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has + been assigned + [CVE-2018-14041](https://nvd.nist.gov/vuln/detail/CVE-2018-14041). +- Contains a security fix preventing malicious directory names from + being able to execute javascript. +- Contains a security fix preventing nbconvert endpoints from + executing javascript with access to the server API. CVE request + pending. + +Thanks for all the contributors: + +- AAYUSH SINHA +- Aaron Hall, MBA +- Abhinav Sagar +- Adam Rule +- Adeel Ahmad +- Alex Rothberg +- Amy Skerry-Ryan +- Anastasis Germanidis +- Andrés Sánchez +- Arjun Radhakrishna +- Arovit Narula +- Benda Xu +- Björn Grüning +- Brian E. Granger +- Carol Willing +- Celina Kilcrease +- Chris Holdgraf +- Chris Miller +- Ciaran Langton +- Damian Avila +- Dana Lee +- Daniel Farrell +- Daniel Nicolai +- Darío Hereñú +- Dave Aitken +- Dave Foster +- Dave Hirschfeld +- Denis Ledoux +- Dmitry Mikushin +- Dominic Kuang +- Douglas Hanley +- Elliott Sales de Andrade +- Emilio Talamante Lugo +- Eric Perry +- Ethan T. Hendrix +- Evan Van Dam +- Francesco Franchina +- Frédéric Chapoton +- Félix-Antoine Fortin +- Gabriel +- Gabriel Nützi +- Gabriel Ruiz +- Gestalt LUR +- Grant Nestor +- Gustavo Efeiche +- Harsh Vardhan +- Heng GAO +- Hisham Elsheshtawy +- Hong Xu +- Ian Rose +- Ivan Ogasawara +- J Forde +- Jason Grout +- Jessica B. Hamrick +- Jiaqi Liu +- John Emmons +- Josh Barnes +- Karthik Balakrishnan +- Kevin Bates +- Kirit Thadaka +- Kristian Gregorius Hustad +- Kyle Kelley +- Leo Gallucci +- Lilian Besson +- Lucas Seiki Oshiro +- Luciano Resende +- Luis Angel Rodriguez Guerrero +- M Pacer +- Maarten Breddels +- Mac Knight +- Madicken Munk +- Maitiú Ó Ciaráin +- Marc Udoff +- Mathis HAMMEL +- Mathis Rosenhauer +- Matthias Bussonnier +- Matthias Geier +- Max Vovshin +- Maxime Mouchet +- Michael Chirico +- Michael Droettboom +- Michael Heilman +- Michael Scott Cuthbert +- Michal Charemza +- Mike Boyle +- Milos Miljkovic +- Min RK +- Miro Hrončok +- Nicholas Bollweg +- Nitesh Sawant +- Ondrej Jariabka +- Park Hae Jin +- Paul Ivanov +- Paul Masson +- Peter Parente +- Pierre Tholoniat +- Remco Verhoef +- Roland Weber +- Roman Kornev +- Rosa Swaby +- Roy Hyunjin Han +- Sally +- Sam Lau +- Samar Sultan +- Shiti Saxena +- Simon Biggs +- Spencer Park +- Stephen Ward +- Steve (Gadget) Barnes +- Steven Silvester +- Surya Prakash Susarla +- Syed Shah +- Sylvain Corlay +- Thomas Aarholt +- Thomas Kluyver +- Tim +- Tim Head +- Tim Klever +- Tim Metzler +- Todd +- Tom Jorquera +- Tyler Makaro +- Vaibhav Sagar +- Victor +- Vidar Tonaas Fauske +- Vu Minh Tam +- Vít Tuček +- Will Costello +- Will Starms +- William Hosford +- Xiaohan Li +- Yuvi Panda +- ashley teoh +- nullptr + +## 5.7.8 + +- Fix regression in restarting kernels in 5.7.5. The restart handler + would return before restart was completed. +- Further improve compatibility with tornado 6 with improved checks + for when websockets are closed. +- Fix regression in 5.7.6 on Windows where .js files could have the + wrong mime-type. +- Fix Open Redirect vulnerability (CVE-2019-10255) where certain + malicious URLs could redirect from the Jupyter login page to a + malicious site after a successful login. 5.7.7 contained only a + partial fix for this issue. + +## 5.7.6 + +5.7.6 contains a security fix for a cross-site inclusion (XSSI) +vulnerability (CVE-2019--9644), where files at a known URL could be +included in a page from an unauthorized website if the user is logged +into a Jupyter server. The fix involves setting the +`X-Content-Type-Options: nosniff` header, and applying CSRF checks +previously on all non-GET API requests to GET requests to API endpoints +and the /files/ endpoint. + +The attacking page is able to access some contents of files when using +Internet Explorer through script errors, but this has not been +demonstrated with other browsers. + +## 5.7.5 + +- Fix compatibility with tornado 6 ([4392](https://github.com/jupyter/notebook/pull/4392), [4449](https://github.com/jupyter/notebook/pull/4449)). +- Fix opening integer filedescriptor during startup on Python 2 ([4349](https://github.com/jupyter/notebook/pull/4349)) +- Fix compatibility with asynchronous + [KernelManager.restart_kernel]{.title-ref} methods ([4412](https://github.com/jupyter/notebook/pull/4412)) + +## 5.7.4 + +5.7.4 fixes a bug introduced in 5.7.3, in which the +`list_running_servers()` function attempts to parse HTML files as JSON, +and consequently crashes ([4284](https://github.com/jupyter/notebook/pull/4284)). + +## 5.7.3 + +5.7.3 contains one security improvement and one security fix: + +- Launch the browser with a local file which redirects to the server + address including the authentication token ([4260](https://github.com/jupyter/notebook/pull/4260)). This prevents another logged-in user from stealing + the token from command line arguments and authenticating to the + server. The single-use token previously used to mitigate this has + been removed. Thanks to Dr. Owain Kenway for suggesting the local + file approach. +- Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has + been assigned + [CVE-2018-14041](https://nvd.nist.gov/vuln/detail/CVE-2018-14041) ([4271](https://github.com/jupyter/notebook/pull/4271)). + +## 5.7.2 + +5.7.2 contains a security fix preventing malicious directory names from +being able to execute javascript. CVE request pending. + +## 5.7.1 + +5.7.1 contains a security fix preventing nbconvert endpoints from +executing javascript with access to the server API. CVE request pending. + +## 5.7.0 + +New features: + +- Update to CodeMirror to 5.37, which includes f-string syntax for + Python 3.6 ([3816](https://github.com/jupyter/notebook/pull/3816)) +- Update jquery-ui to 1.12 ([3836](https://github.com/jupyter/notebook/pull/3836)) +- Check Host header to more securely protect localhost deployments + from DNS rebinding. This is a pre-emptive measure, not fixing a + known vulnerability ([3766](https://github.com/jupyter/notebook/pull/3766)). Use + `.NotebookApp.allow_remote_access` and + `.NotebookApp.local_hostnames` to configure access. +- Allow access-control-allow-headers to be overridden ([3886](https://github.com/jupyter/notebook/pull/3886)) +- Allow configuring max_body_size and max_buffer_size ([3829](https://github.com/jupyter/notebook/pull/3829)) +- Allow configuring get_secure_cookie keyword-args ([3778](https://github.com/jupyter/notebook/pull/3778)) +- Respect nbconvert entrypoints as sources for exporters ([3879](https://github.com/jupyter/notebook/pull/3879)) +- Include translation sources in source distributions ([3925](https://github.com/jupyter/notebook/pull/3925), [3931](https://github.com/jupyter/notebook/pull/3931)) +- Various improvements to documentation ([3799](https://github.com/jupyter/notebook/pull/3799), [3800](https://github.com/jupyter/notebook/pull/3800), + [3806](https://github.com/jupyter/notebook/pull/3806), [3883](https://github.com/jupyter/notebook/pull/3883), [3908](https://github.com/jupyter/notebook/pull/3908)) + +Fixing problems: + +- Fix breadcrumb link when running with a base url ([3905](https://github.com/jupyter/notebook/pull/3905)) +- Fix possible type error when closing activity stream ([3907](https://github.com/jupyter/notebook/pull/3907)) +- Disable metadata editing for non-editable cells ([3744](https://github.com/jupyter/notebook/pull/3744)) +- Fix some styling and alignment of prompts caused by regressions in + 5.6.0. +- Enter causing page reload in shortcuts editor ([3871](https://github.com/jupyter/notebook/pull/3871)) +- Fix uploading to the same file twice ([3712](https://github.com/jupyter/notebook/pull/3712)) + +See the 5.7 milestone on GitHub for a complete list of [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.7) +involved in this release. + +Thanks to the following contributors: + +- Aaron Hall +- Benjamin Ragan-Kelley +- Bill Major +- bxy007 +- Dave Aitken +- Denis Ledoux +- Félix-Antoine Fortin +- Gabriel +- Grant Nestor +- Kevin Bates +- Kristian Gregorius Hustad +- M Pacer +- Madicken Munk +- Maitiu O Ciarain +- Matthias Bussonnier +- Michael Boyle +- Michael Chirico +- Mokkapati, Praneet(ES) +- Peter Parente +- Sally Wilsak +- Steven Silvester +- Thomas Kluyver +- Walter Martin + +## 5.6.0 + +New features: + +- Execute cells by clicking icon in input prompt ([3535](https://github.com/jupyter/notebook/pull/3535), [3687](https://github.com/jupyter/notebook/pull/3687)) +- New "Save as" menu option ([3289](https://github.com/jupyter/notebook/pull/3289)) +- When serving on a loopback interface, protect against DNS rebinding + by checking the `Host` header from the browser ([3714](https://github.com/jupyter/notebook/pull/3714)). This check can be + disabled if necessary by setting `NotebookApp.allow_remote_access`. (Disabled by default while we work out some Mac issues in + [3754](https://github.com/jupyter/notebook/issues/3754)). +- Add kernel_info_timeout traitlet to enable restarting slow kernels ([3665](https://github.com/jupyter/notebook/pull/3665)) +- Add `custom_display_host` config option to override displayed URL ([3668](https://github.com/jupyter/notebook/pull/3668)) +- Add /metrics endpoint for Prometheus Metrics ([3490](https://github.com/jupyter/notebook/pull/3490)) +- Update to MathJax 2.7.4 ([3751](https://github.com/jupyter/notebook/pull/3751)) +- Update to jQuery 3.3 ([3655](https://github.com/jupyter/notebook/pull/3655)) +- Update marked to 0.4 ([3686](https://github.com/jupyter/notebook/pull/3686)) + +Fixing problems: + +- Don't duplicate token in displayed URL ([3656](https://github.com/jupyter/notebook/pull/3656)) +- Clarify displayed URL when listening on all interfaces ([3703](https://github.com/jupyter/notebook/pull/3703)) +- Don't trash non-empty directories on Windows ([3673](https://github.com/jupyter/notebook/pull/3673)) +- Include LICENSE file in wheels ([3671](https://github.com/jupyter/notebook/pull/3671)) +- Don't show "0 active kernels" when starting the notebook ([3696](https://github.com/jupyter/notebook/pull/3696)) + +Testing: + +- Add find replace test ([3630](https://github.com/jupyter/notebook/pull/3630)) +- Selenium test for deleting all cells ([3601](https://github.com/jupyter/notebook/pull/3601)) +- Make creating a new notebook more robust ([3726](https://github.com/jupyter/notebook/pull/3726)) + +Thanks to the following contributors: + +- Arovit Narula ([arovit](https://github.com/arovit)) +- lucasoshiro ([lucasoshiro](https://github.com/lucasoshiro)) +- M Pacer ([mpacer](https://github.com/mpacer)) +- Thomas Kluyver ([takluyver](https://github.com/takluyver)) +- Todd ([toddrme2178](https://github.com/toddrme2178)) +- Yuvi Panda ([yuvipanda](https://github.com/yuvipanda)) + +See the 5.6 milestone on GitHub for a complete list of [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.6) +involved in this release. + +## 5.5.0 + +New features: + +- The files list now shows file sizes ([3539](https://github.com/jupyter/notebook/pull/3539)) +- Add a quit button in the dashboard ([3004](https://github.com/jupyter/notebook/pull/3004)) +- Display hostname in the terminal when running remotely ([3356](https://github.com/jupyter/notebook/pull/3356), [3593](https://github.com/jupyter/notebook/pull/3593)) +- Add slides exportation/download to the menu ([3287](https://github.com/jupyter/notebook/pull/3287)) +- Add any extra installed nbconvert exporters to the "Download as" + menu ([3323](https://github.com/jupyter/notebook/pull/3323)) +- Editor: warning when overwriting a file that is modified on disk ([2783](https://github.com/jupyter/notebook/pull/2783)) +- Display a warning message if cookies are not enabled ([3511](https://github.com/jupyter/notebook/pull/3511)) +- Basic `__version__` reporting for extensions ([3541](https://github.com/jupyter/notebook/pull/3541)) +- Add `NotebookApp.terminals_enabled` config option ([3478](https://github.com/jupyter/notebook/pull/3478)) +- Make buffer time between last modified on disk and last modified on + last save configurable ([3273](https://github.com/jupyter/notebook/pull/3273)) +- Allow binding custom shortcuts for 'close and halt' ([3314](https://github.com/jupyter/notebook/pull/3314)) +- Add description for 'Trusted' notification ([3386](https://github.com/jupyter/notebook/pull/3386)) +- Add `settings['activity_sources']` ([3401](https://github.com/jupyter/notebook/pull/3401)) +- Add an `output_updated.OutputArea` event ([3560](https://github.com/jupyter/notebook/pull/3560)) + +Fixing problems: + +- Fixes to improve web accessibility ([3507](https://github.com/jupyter/notebook/pull/3507)) +- Fixed color contrast issue in tree.less ([3336](https://github.com/jupyter/notebook/pull/3336)) +- Allow cancelling upload of large files ([3373](https://github.com/jupyter/notebook/pull/3373)) +- Don't clear login cookie on requests without cookie ([3380](https://github.com/jupyter/notebook/pull/3380)) +- Don't trash files on different device to home dir on Linux ([3304](https://github.com/jupyter/notebook/pull/3304)) +- Clear waiting asterisks when restarting kernel ([3494](https://github.com/jupyter/notebook/pull/3494)) +- Fix output prompt when `execution_count` missing ([3236](https://github.com/jupyter/notebook/pull/3236)) +- Make the 'changed on disk' dialog work when displayed twice ([3589](https://github.com/jupyter/notebook/pull/3589)) +- Fix going back to root directory with history in notebook list ([3411](https://github.com/jupyter/notebook/pull/3411)) +- Allow defining keyboard shortcuts for missing actions ([3561](https://github.com/jupyter/notebook/pull/3561)) +- Prevent default on pageup/pagedown when completer is active ([3500](https://github.com/jupyter/notebook/pull/3500)) +- Prevent default event handling on new terminal ([3497](https://github.com/jupyter/notebook/pull/3497)) +- ConfigManager should not write out default values found in the .d + directory ([3485](https://github.com/jupyter/notebook/pull/3485)) +- Fix leak of iopub object in activity monitoring ([3424](https://github.com/jupyter/notebook/pull/3424)) +- Javascript lint in notebooklist.js ([3409](https://github.com/jupyter/notebook/pull/3409)) +- Some Javascript syntax fixes ([3294](https://github.com/jupyter/notebook/pull/3294)) +- Convert native for loop to `Array.forEach()` ([3477](https://github.com/jupyter/notebook/pull/3477)) +- Disable cache when downloading nbconvert output ([3484](https://github.com/jupyter/notebook/pull/3484)) +- Add missing digestmod arg to HMAC ([3399](https://github.com/jupyter/notebook/pull/3399)) +- Log OSErrors failing to create less-critical files during startup ([3384](https://github.com/jupyter/notebook/pull/3384)) +- Use powershell on Windows ([3379](https://github.com/jupyter/notebook/pull/3379)) +- API spec improvements, API handler improvements ([3368](https://github.com/jupyter/notebook/pull/3368)) +- Set notebook to dirty state after change to kernel metadata ([3350](https://github.com/jupyter/notebook/pull/3350)) +- Use CSP header to treat served files as belonging to a separate + origin ([3341](https://github.com/jupyter/notebook/pull/3341)) +- Don't install gettext into builtins ([3330](https://github.com/jupyter/notebook/pull/3330)) +- Add missing `import _` ([3316](https://github.com/jupyter/notebook/pull/3316), + [3326](https://github.com/jupyter/notebook/pull/3326)) +- Write `notebook.json` file atomically ([3305](https://github.com/jupyter/notebook/pull/3305)) +- Fix clicking with modifiers, page title updates ([3282](https://github.com/jupyter/notebook/pull/3282)) +- Upgrade jQuery to version 2.2 ([3428](https://github.com/jupyter/notebook/pull/3428)) +- Upgrade xterm.js to 3.1.0 ([3189](https://github.com/jupyter/notebook/pull/3189)) +- Upgrade moment.js to 2.19.3 ([3562](https://github.com/jupyter/notebook/pull/3562)) +- Upgrade CodeMirror to 5.35 ([3372](https://github.com/jupyter/notebook/pull/3372)) +- "Require" pyzmq\>=17 ([3586](https://github.com/jupyter/notebook/pull/3586)) + +Documentation: + +- Documentation updates and organisation ([3584](https://github.com/jupyter/notebook/pull/3584)) +- Add section in docs about privacy ([3571](https://github.com/jupyter/notebook/pull/3571)) +- Add explanation on how to change the type of a cell to Markdown ([3377](https://github.com/jupyter/notebook/pull/3377)) +- Update docs with confd implementation details ([3520](https://github.com/jupyter/notebook/pull/3520)) +- Add more information for where `jupyter_notebook_config.py` is + located ([3346](https://github.com/jupyter/notebook/pull/3346)) +- Document options to enable nbextensions in specific sections ([3525](https://github.com/jupyter/notebook/pull/3525)) +- jQuery attribute selector value MUST be surrounded by quotes ([3527](https://github.com/jupyter/notebook/pull/3527)) +- Do not execute special notebooks with nbsphinx ([3360](https://github.com/jupyter/notebook/pull/3360)) +- Other minor fixes in [3288](https://github.com/jupyter/notebook/pull/3288), + [3528](https://github.com/jupyter/notebook/pull/3528), [3293](https://github.com/jupyter/notebook/pull/3293), [3367](https://github.com/jupyter/notebook/pull/3367) + +Testing: + +- Testing with Selenium & Sauce labs ([3321](https://github.com/jupyter/notebook/pull/3321)) +- Selenium utils + markdown rendering tests ([3458](https://github.com/jupyter/notebook/pull/3458)) +- Convert insert cell tests to Selenium ([3508](https://github.com/jupyter/notebook/pull/3508)) +- Convert prompt numbers tests to Selenium ([3554](https://github.com/jupyter/notebook/pull/3554)) +- Convert delete cells tests to Selenium ([3465](https://github.com/jupyter/notebook/pull/3465)) +- Convert undelete cell tests to Selenium ([3475](https://github.com/jupyter/notebook/pull/3475)) +- More selenium testing utilities ([3412](https://github.com/jupyter/notebook/pull/3412)) +- Only check links when build is trigger by Travis Cron job ([3493](https://github.com/jupyter/notebook/pull/3493)) +- Fix Appveyor build errors ([3430](https://github.com/jupyter/notebook/pull/3430)) +- Undo patches in teardown before attempting to delete files ([3459](https://github.com/jupyter/notebook/pull/3459)) +- Get tests running with tornado 5 ([3398](https://github.com/jupyter/notebook/pull/3398)) +- Unpin ipykernel version on Travis ([3223](https://github.com/jupyter/notebook/pull/3223)) + +Thanks to the following contributors: + +- Arovit Narula ([arovit](https://github.com/arovit)) +- Ashley Teoh ([ashleytqy](https://github.com/ashleytqy)) +- Nicholas Bollweg ([bollwyvl](https://github.com/bollwyvl)) +- Alex Rothberg ([cancan101](https://github.com/cancan101)) +- Celina Kilcrease ([ckilcrease](https://github.com/ckilcrease)) +- dabuside ([dabuside](https://github.com/dabuside)) +- Damian Avila ([damianavila](https://github.com/damianavila)) +- Dana Lee ([danagilliann](https://github.com/danagilliann)) +- Dave Hirschfeld ([dhirschfeld](https://github.com/dhirschfeld)) +- Heng GAO ([ehengao](https://github.com/ehengao)) +- Leo Gallucci ([elgalu](https://github.com/elgalu)) +- Evan Van Dam ([evandam](https://github.com/evandam)) +- forbxy ([forbxy](https://github.com/forbxy)) +- Grant Nestor ([gnestor](https://github.com/gnestor)) +- Ethan T. Hendrix ([hendrixet](https://github.com/hendrixet)) +- Miro Hrončok ([hroncok](https://github.com/hroncok)) +- Paul Ivanov ([ivanov](https://github.com/ivanov)) +- Darío Hereñú ([kant](https://github.com/kant)) +- Kevin Bates ([kevin-bates](https://github.com/kevin-bates)) +- Maarten Breddels ([maartenbreddels](https://github.com/maartenbreddels)) +- Michael Droettboom ([mdboom](https://github.com/mdboom)) +- Min RK ([minrk](https://github.com/minrk)) +- M Pacer ([mpacer](https://github.com/mpacer)) +- Peter Parente ([parente](https://github.com/parente)) +- Paul Masson ([paulmasson](https://github.com/paulmasson)) +- Philipp Rudiger ([philippjfr](https://github.com/philippjfr)) +- Mac Knight ([Shels1909](https://github.com/Shels1909)) +- Hisham Elsheshtawy ([Sheshtawy](https://github.com/Sheshtawy)) +- Simon Biggs ([SimonBiggs](https://github.com/SimonBiggs)) +- Sunil Hari (`@sunilhari`) +- Thomas Kluyver ([takluyver](https://github.com/takluyver)) +- Tim Klever ([tklever](https://github.com/tklever)) +- Gabriel Ruiz ([unnamedplay-r](https://github.com/unnamedplay-r)) +- Vaibhav Sagar ([vaibhavsagar](https://github.com/vaibhavsagar)) +- William Hosford ([whosford](https://github.com/whosford)) +- Hong ([xuhdev](https://github.com/xuhdev)) + +See the 5.5 milestone on GitHub for a complete list of [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.5) +involved in this release. + +## 5.4.1 + +A security release to fix [CVE-2018-8768](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8768). + +Thanks to [Alex](https://hackerone.com/pisarenko) for identifying this +bug, and Jonathan Kamens and Scott Sanderson at Quantopian for verifying +it and bringing it to our attention. + +## 5.4.0 + +- Fix creating files and folders after navigating directories in the + dashboard ([3264](https://github.com/jupyter/notebook/pull/3264)). +- Enable printing notebooks in colour, removing the CSS that made + everything black and white ([3212](https://github.com/jupyter/notebook/pull/3212)). +- Limit the completion options displayed in the notebook to 1000, to + avoid performance issues with very long lists ([3195](https://github.com/jupyter/notebook/pull/3195)). +- Accessibility improvements in `tree.html` ([3271](https://github.com/jupyter/notebook/pull/3271)). +- Added alt-text to the kernel logo image in the notebook UI ([3228](https://github.com/jupyter/notebook/pull/3228)). +- Added a test on Travis CI to flag if symlinks are accidentally + introduced in the future. This should prevent the issue that + necessitated `release-5.3.1`{.interpreted-text role="ref"} ([3227](https://github.com/jupyter/notebook/pull/3227)). +- Use lowercase letters for random IDs generated in our Javascript ([3264](https://github.com/jupyter/notebook/pull/3264)). +- Removed duplicate code setting `TextCell.notebook` ([3256](https://github.com/jupyter/notebook/pull/3256)). + +Thanks to the following contributors: + +- Alex Soderman ([asoderman](https://github.com/asoderman)) +- Matthias Bussonnier ([Carreau](https://github.com/Carreau)) +- Min RK ([minrk](https://github.com/minrk)) +- Nitesh Sawant ([ns23](https://github.com/ns23)) +- Thomas Kluyver ([takluyver](https://github.com/takluyver)) +- Yuvi Panda ([yuvipanda](https://github.com/yuvipanda)) + +See the 5.4 milestone on GitHub for a complete list of [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.4) +involved in this release. + +## 5.3.1 + +Replaced a symlink in the repository with a copy, to fix issues +installing on Windows ([3220](https://github.com/jupyter/notebook/pull/3220)). + +## 5.3.0 + +This release introduces a couple noteable improvements, such as terminal +support for Windows and support for OS trash (files deleted from the +notebook dashboard are moved to the OS trash vs. deleted permanently). + +- Add support for terminals on windows ([3087](https://github.com/jupyter/notebook/pull/3087)). +- Add a "restart and run all" button to the toolbar ([2965](https://github.com/jupyter/notebook/pull/2965)). +- Send files to os trash mechanism on delete ([1968](https://github.com/jupyter/notebook/pull/1968)). +- Allow programmatic copy to clipboard ([3088](https://github.com/jupyter/notebook/pull/3088)). +- Use DOM History API for navigating between directories in the file + browser ([3115](https://github.com/jupyter/notebook/pull/3115)). +- Add translated files to folder(docs-translations) ([3065](https://github.com/jupyter/notebook/pull/3065)). +- Allow non empty dirs to be deleted ([3108](https://github.com/jupyter/notebook/pull/3108)). +- Set cookie on base_url ([2959](https://github.com/jupyter/notebook/pull/2959)). +- Allow token-authenticated requests cross-origin by default ([2920](https://github.com/jupyter/notebook/pull/2920)). +- Change cull_idle_timeout_minimum to 1 from 300 ([2910](https://github.com/jupyter/notebook/pull/2910)). +- Config option to shut down server after n seconds with no kernels ([2963](https://github.com/jupyter/notebook/pull/2963)). +- Display a "close" button on load notebook error ([3176](https://github.com/jupyter/notebook/pull/3176)). +- Add action to command pallette to run CodeMirror's "indentAuto" + on selection ([3175](https://github.com/jupyter/notebook/pull/3175)). +- Add option to specify extra services ([3158](https://github.com/jupyter/notebook/pull/3158)). +- Warn_bad_name should not use global name ([3160](https://github.com/jupyter/notebook/pull/3160)). +- Avoid overflow of hidden form ([3148](https://github.com/jupyter/notebook/pull/3148)). +- Fix shutdown trans loss ([3147](https://github.com/jupyter/notebook/pull/3147)). +- Find available kernelspecs more efficiently ([3136](https://github.com/jupyter/notebook/pull/3136)). +- Don't try to translate missing help strings ([3122](https://github.com/jupyter/notebook/pull/3122)). +- Frontend/extension-config: allow default json files in a .d + directory ([3116](https://github.com/jupyter/notebook/pull/3116)). +- Use [requirejs]{.title-ref} vs. [require]{.title-ref} ([3097](https://github.com/jupyter/notebook/pull/3097)). +- Fixes some ui bugs in firefox \#3044 ([3058](https://github.com/jupyter/notebook/pull/3058)). +- Compare non-specific language code when choosing to use arabic + numerals ([3055](https://github.com/jupyter/notebook/pull/3055)). +- Fix save-script deprecation ([3053](https://github.com/jupyter/notebook/pull/3053)). +- Include moment locales in package_data ([3051](https://github.com/jupyter/notebook/pull/3051)). +- Fix moment locale loading in bidi support ([3048](https://github.com/jupyter/notebook/pull/3048)). +- Tornado 5: periodiccallback loop arg will be removed ([3034](https://github.com/jupyter/notebook/pull/3034)). +- Use [/files]{.title-ref} prefix for pdf-like files ([3031](https://github.com/jupyter/notebook/pull/3031)). +- Add folder for document translation ([3022](https://github.com/jupyter/notebook/pull/3022)). +- When login-in via token, let a chance for user to set the password ([3008](https://github.com/jupyter/notebook/pull/3008)). +- Switch to jupyter_core implementation of ensure_dir_exists ([3002](https://github.com/jupyter/notebook/pull/3002)). +- Send http shutdown request on 'stop' subcommand ([3000](https://github.com/jupyter/notebook/pull/3000)). +- Work on loading ui translations ([2969](https://github.com/jupyter/notebook/pull/2969)). +- Fix ansi inverse ([2967](https://github.com/jupyter/notebook/pull/2967)). +- Add send2trash to requirements for building docs ([2964](https://github.com/jupyter/notebook/pull/2964)). +- I18n readme.md improvement ([2962](https://github.com/jupyter/notebook/pull/2962)). +- Add 'reason' field to json error responses ([2958](https://github.com/jupyter/notebook/pull/2958)). +- Add some padding for stream outputs ([3194](https://github.com/jupyter/notebook/pull/3194)). +- Always use setuptools in `setup.py` ([3206](https://github.com/jupyter/notebook/pull/3206)). +- Fix clearing cookies on logout when `base_url` is configured ([3207](https://github.com/jupyter/notebook/pull/3207)). + +Thanks to the following contributors: + +- bacboc ([bacboc](https://github.com/bacboc)) +- Steven Silvester ([blink1073](https://github.com/blink1073)) +- Matthias Bussonnier ([Carreau](https://github.com/Carreau)) +- ChungJooHo ([ChungJooHo](https://github.com/ChungJooHo)) +- edida ([edida](https://github.com/edida)) +- Francesco Franchina (`ferdas`) +- forbxy ([forbxy](https://github.com/forbxy)) +- Grant Nestor ([gnestor](https://github.com/gnestor)) +- Josh Barnes ([jcb91](https://github.com/jcb91)) +- JocelynDelalande ([JocelynDelalande](https://github.com/JocelynDelalande)) +- Karthik Balakrishnan ([karthikb351](https://github.com/karthikb351)) +- Kevin Bates ([kevin-bates](https://github.com/kevin-bates)) +- Kirit Thadaka ([kirit93](https://github.com/kirit93)) +- Lilian Besson ([Naereen](https://github.com/Naereen)) +- Maarten Breddels ([maartenbreddels](https://github.com/maartenbreddels)) +- Madhu94 ([Madhu94](https://github.com/Madhu94)) +- Matthias Geier ([mgeier](https://github.com/mgeier)) +- Michael Heilman ([mheilman](https://github.com/mheilman)) +- Min RK ([minrk](https://github.com/minrk)) +- PHaeJin ([PHaeJin](https://github.com/PHaeJin)) +- Sukneet ([Sukneet](https://github.com/Sukneet)) +- Thomas Kluyver ([takluyver](https://github.com/takluyver)) + +See the 5.3 milestone on GitHub for a complete list of [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.3) +involved in this release. + +## 5.2.1 + +- Fix invisible CodeMirror cursor at specific browser zoom levels ([2983](https://github.com/jupyter/notebook/pull/2983)). +- Fix nbconvert handler causing broken export to PDF ([2981](https://github.com/jupyter/notebook/pull/2981)). +- Fix the prompt_area argument of the output area constructor. ([2961](https://github.com/jupyter/notebook/pull/2961)). +- Handle a compound extension in new_untitled ([2949](https://github.com/jupyter/notebook/pull/2949)). +- Allow disabling offline message buffering ([2916](https://github.com/jupyter/notebook/pull/2916)). + +Thanks to the following contributors: + +- Steven Silvester ([blink1073](https://github.com/blink1073)) +- Grant Nestor ([gnestor](https://github.com/gnestor)) +- Jason Grout ([jasongrout](https://github.com/jasongrout)) +- Min RK ([minrk](https://github.com/minrk)) +- M Pacer ([mpacer](https://github.com/mpacer)) + +See the 5.2.1 milestone on GitHub for a complete list of [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.2.1) +involved in this release. + +## 5.2.0 + +- Allow setting token via jupyter_token env ([2921](https://github.com/jupyter/notebook/pull/2921)). +- Fix some errors caused by raising 403 in get_current_user ([2919](https://github.com/jupyter/notebook/pull/2919)). +- Register contents_manager.files_handler_class directly ([2917](https://github.com/jupyter/notebook/pull/2917)). +- Update viewable_extensions ([2913](https://github.com/jupyter/notebook/pull/2913)). +- Show edit shortcuts modal after shortcuts modal is hidden ([2912](https://github.com/jupyter/notebook/pull/2912)). +- Improve edit/view behavior ([2911](https://github.com/jupyter/notebook/pull/2911)). +- The root directory of the notebook server should never be hidden ([2907](https://github.com/jupyter/notebook/pull/2907)). +- Fix notebook require config to match tools/build-main ([2888](https://github.com/jupyter/notebook/pull/2888)). +- Give page constructor default arguments ([2887](https://github.com/jupyter/notebook/pull/2887)). +- Fix codemirror.less to match codemirror's expected padding layout ([2880](https://github.com/jupyter/notebook/pull/2880)). +- Add x-xsrftoken to access-control-allow-headers ([2876](https://github.com/jupyter/notebook/pull/2876)). +- Buffer messages when websocket connection is interrupted ([2871](https://github.com/jupyter/notebook/pull/2871)). +- Load locale dynamically only when not en-us ([2866](https://github.com/jupyter/notebook/pull/2866)). +- Changed key strength to 2048 bits ([2861](https://github.com/jupyter/notebook/pull/2861)). +- Resync jsversion with python version ([2860](https://github.com/jupyter/notebook/pull/2860)). +- Allow copy operation on modified, read-only notebook ([2854](https://github.com/jupyter/notebook/pull/2854)). +- Update error handling on apihandlers ([2853](https://github.com/jupyter/notebook/pull/2853)). +- Test python 3.6 on travis, drop 3.3 ([2852](https://github.com/jupyter/notebook/pull/2852)). +- Avoid base64-literals in image tests ([2851](https://github.com/jupyter/notebook/pull/2851)). +- Upgrade xterm.js to 2.9.2 ([2849](https://github.com/jupyter/notebook/pull/2849)). +- Changed all python variables named file to file_name to not override + built_in file ([2830](https://github.com/jupyter/notebook/pull/2830)). +- Add more doc tests ([2823](https://github.com/jupyter/notebook/pull/2823)). +- Typos fix ([2815](https://github.com/jupyter/notebook/pull/2815)). +- Rename and update license \[ci skip\] ([2810](https://github.com/jupyter/notebook/pull/2810)). +- Travis builds doc ([2808](https://github.com/jupyter/notebook/pull/2808)). +- Pull request i18n ([2804](https://github.com/jupyter/notebook/pull/2804)). +- Factor out output_prompt_function, as is done with input prompt ([2774](https://github.com/jupyter/notebook/pull/2774)). +- Use rfc5987 encoding for filenames ([2767](https://github.com/jupyter/notebook/pull/2767)). +- Added path to the resources metadata, the same as in + from_filename(...) in nbconvert.exporters.py ([2753](https://github.com/jupyter/notebook/pull/2753)). +- Make "extrakeys" consistent for notebook and editor ([2745](https://github.com/jupyter/notebook/pull/2745)). +- Bidi support ([2357](https://github.com/jupyter/notebook/pull/2357)). + +Special thanks to [samarsultan](https://github.com/samarsultan) and the +Arabic Competence and Globalization Center Team at IBM Egypt for adding +RTL (right-to-left) support to the notebook! + +See the 5.2 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?utf8=%E2%9C%93&q=is%3Aissue%20milestone%3A5.2) +and [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.2) +involved in this release. + +## 5.1.0 + +- Preliminary i18n implementation ([2140](https://github.com/jupyter/notebook/pull/2140)). +- Expose URL with auth token in notebook UI ([2666](https://github.com/jupyter/notebook/pull/2666)). +- Fix search background style ([2387](https://github.com/jupyter/notebook/pull/2387)). +- List running notebooks without requiring `--allow-root` ([2421](https://github.com/jupyter/notebook/pull/2421)). +- Allow session of type other than notebook ([2559](https://github.com/jupyter/notebook/pull/2559)). +- Fix search background style ([2387](https://github.com/jupyter/notebook/pull/2387)). +- Fix some Markdown styling issues ([2571](https://github.com/jupyter/notebook/pull/2571)), ([2691](https://github.com/jupyter/notebook/pull/2691)) and ([2534](https://github.com/jupyter/notebook/pull/2534)). +- Remove keymaps that conflict with non-English keyboards ([2535](https://github.com/jupyter/notebook/pull/2535)). +- Add session-specific favicons (notebook, terminal, file) ([2452](https://github.com/jupyter/notebook/pull/2452)). +- Add /api/shutdown handler ([2507](https://github.com/jupyter/notebook/pull/2507)). +- Include metadata when copying a cell ([2349](https://github.com/jupyter/notebook/pull/2349)). +- Stop notebook server from command line ([2388](https://github.com/jupyter/notebook/pull/2388)). +- Improve "View" and "Edit" file handling in dashboard ([2449](https://github.com/jupyter/notebook/pull/2449)) and ([2402](https://github.com/jupyter/notebook/pull/2402)). +- Provide a promise to replace use of the + `app_initialized.NotebookApp` event ([2710](https://github.com/jupyter/notebook/pull/2710)). +- Fix disabled collapse/expand output button ([2681](https://github.com/jupyter/notebook/pull/2681)). +- Cull idle kernels using `--MappingKernelManager.cull_idle_timeout` ([2215](https://github.com/jupyter/notebook/pull/2215)). +- Allow read-only notebooks to be trusted ([2718](https://github.com/jupyter/notebook/pull/2718)). + +See the 5.1 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?utf8=%E2%9C%93&q=is%3Aissue%20milestone%3A5.1) +and [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A5.1) +involved in this release. + +## 5.0.0 + +This is the first major release of the Jupyter Notebook since version +4.0 was created by the "Big Split" of IPython and Jupyter. + +We encourage users to start trying JupyterLab in preparation for a +future transition. + +We have merged more than 300 pull requests since 4.0. Some of the major +user-facing changes are described here. + +### File sorting in the dashboard + +Files in the dashboard may now be sorted by last modified date or name +([943](https://github.com/jupyter/notebook/pull/943)): + +![image](/_static/images/dashboard-sort.png) + +### Cell tags + +There is a new cell toolbar for adding *cell tags* +([2048](https://github.com/jupyter/notebook/pull/2048)): + +![image](/_static/images/cell-tags-toolbar.png) + +Cell tags are a lightweight way to customise the behaviour of tools +working with notebooks; we're working on building support for them into +tools like [nbconvert](https://nbconvert.readthedocs.io/en/latest/) and +[nbval](https://github.com/computationalmodelling/nbval). To start using +tags, select `Tags` in the `View > Cell Toolbar` menu in a notebook. + +The UI for editing cell tags is basic for now; we hope to improve it in +future releases. + +### Table style + +The default styling for tables in the notebook has been updated +([1776](https://github.com/jupyter/notebook/pull/1776)). + +Before: + +![image](/_static/images/table-style-before.png) + +After: + +![image](/_static/images/table-style-after.png) + +### Customise keyboard shortcuts + +You can now edit keyboard shortcuts for *Command Mode* within the UI +([1347](https://github.com/jupyter/notebook/pull/1347)): + +![image](/_static/images/shortcut-editor.png) + +See the `Help > Edit Keyboard Shortcuts` menu item and follow the +instructions. + +### Other additions + +- You can copy and paste cells between notebooks, using + `Ctrl-C`{.interpreted-text role="kbd"} and + `Ctrl-V`{.interpreted-text role="kbd"} (`Cmd-C`{.interpreted-text + role="kbd"} and `Cmd-V`{.interpreted-text role="kbd"} on Mac). +- It's easier to configure a password for the notebook with the new + `jupyter notebook password` command ([2007](https://github.com/jupyter/notebook/pull/2007)). +- The file list can now be ordered by *last modified* or by *name* ([943](https://github.com/jupyter/notebook/pull/943)). +- Markdown cells now support attachments. Simply drag and drop an + image from your desktop to a markdown cell to add it. Unlike + relative links that you enter manually, attachments are embedded in + the notebook itself. An unreferenced attachment will be + automatically scrubbed from the notebook on save ([621](https://github.com/jupyter/notebook/pull/621)). +- Undoing cell deletion now supports undeleting multiple cells. Cells + may not be in the same order as before their deletion, depending on + the actions you did on the meantime, but this should should help + reduce the impact of accidentally deleting code. +- The file browser now has *Edit* and *View* buttons. +- The file browser now supports moving multiple files at once ([1088](https://github.com/jupyter/notebook/pull/1088)). +- The Notebook will refuse to run as root unless the `--allow-root` + flag is given ([1115](https://github.com/jupyter/notebook/pull/1115)). +- Keyboard shortcuts are now declarative ([1234](https://github.com/jupyter/notebook/pull/1234)). +- Toggling line numbers can now affect all cells ([1312](https://github.com/jupyter/notebook/pull/1312)). +- Add more visible *Trusted* and *Untrusted* notifications ([1658](https://github.com/jupyter/notebook/pull/1658)). +- The favicon (browser shortcut icon) now changes to indicate when the + kernel is busy ([1837](https://github.com/jupyter/notebook/pull/1837)). +- Header and toolbar visibility is now persisted in nbconfig and + across sessions ([1769](https://github.com/jupyter/notebook/pull/1769)). +- Load server extensions with ConfigManager so that merge happens + recursively, unlike normal config values, to make it load more + consistently with frontend extensions([2108](https://github.com/jupyter/notebook/pull/2108)). +- The notebook server now supports the [bundler + API](https://jupyter-notebook.readthedocs.io/en/latest/extending/bundler_extensions.html) + from the [jupyter_cms incubator + project](https://github.com/jupyter-incubator/contentmanagement) ([1579](https://github.com/jupyter/notebook/pull/1579)). +- The notebook server now provides information about kernel activity + in its kernel resource API ([1827](https://github.com/jupyter/notebook/pull/1827)). + +Remember that upgrading `notebook` only affects the user interface. +Upgrading kernels and libraries may also provide new features, better +stability and integration with the notebook interface. + +## 4.4.0 + +- Allow override of output callbacks to redirect output messages. This + is used to implement the ipywidgets Output widget, for example. +- Fix an async bug in message handling by allowing comm message + handlers to return a promise which halts message processing until + the promise resolves. + +See the 4.4 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?utf8=%E2%9C%93&q=is%3Aissue%20milestone%3A4.4) +and [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A4.4) +involved in this release. + +## 4.3.2 + +4.3.2 is a patch release with a bug fix for CodeMirror and improved +handling of the "editable" cell metadata field. + +- Monkey-patch for CodeMirror that resolves + [\#2037](https://github.com/jupyter/notebook/issues/2037) without + breaking [\#1967](https://github.com/jupyter/notebook/issues/1967) +- Read-only (`"editable": false`) cells can be executed but cannot be + split, merged, or deleted + +See the 4.3.2 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?utf8=%E2%9C%93&q=is%3Aissue%20milestone%3A4.3.2) +and [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A4.3.2) +involved in this release. + +## 4.3.1 + +4.3.1 is a patch release with a security patch, a couple bug fixes, and +improvements to the newly-released token authentication. + +**Security fix**: + +- CVE-2016-9971. Fix CSRF vulnerability, where malicious forms could + create untitled files and start kernels (no remote execution or + modification of existing files) for users of certain browsers (Firefox, Internet Explorer / Edge). All previous notebook releases + are affected. + +Bug fixes: + +- Fix carriage return handling +- Make the font size more robust against fickle browsers +- Ignore resize events that bubbled up and didn't come from window +- Add Authorization to allowed CORS headers +- Downgrade CodeMirror to 5.16 while we figure out issues in Safari + +Other improvements: + +- Better docs for token-based authentication +- Further highlight token info in log output when autogenerated + +See the 4.3.1 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?utf8=%E2%9C%93&q=is%3Aissue%20milestone%3A4.3.1) +and [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A4.3.1) +involved in this release. + +## 4.3.0 + +4.3 is a minor release with many bug fixes and improvements. The biggest +user-facing change is the addition of token authentication, which is +enabled by default. A token is generated and used when your browser is +opened automatically, so you shouldn't have to enter anything in the +default circumstances. If you see a login page (e.g. by switching +browsers, or launching on a new port with `--no-browser`), you get a +login URL with the token from the command `jupyter notebook list`, which +you can paste into your browser. + +Highlights: + +- API for creating mime-type based renderer extensions using + `OutputArea.register_mime_type` and `Notebook.render_cell_output` + methods. See + [mimerender-cookiecutter](https://github.com/jupyterlab/mimerender-cookiecutter) + for reference implementations and cookiecutter. +- Enable token authentication by default. See + `server_security`{.interpreted-text role="ref"} for more details. +- Update security docs to reflect new signature system +- Switched from term.js to xterm.js + +Bug fixes: + +- Ensure variable is set if exc_info is falsey +- Catch and log handler exceptions in `events.trigger` +- Add debug log for static file paths +- Don't check origin on token-authenticated requests +- Remove leftover print statement +- Fix highlighting of Python code blocks +- `json_errors` should be outermost decorator on API handlers +- Fix remove old nbserver info files +- Fix notebook mime type on download links +- Fix carriage symbol behavior +- Fix terminal styles +- Update dead links in docs +- If kernel is broken, start a new session +- Include cross-origin check when allowing login URL redirects + +Other improvements: + +- Allow JSON output data with mime type `application/*+json` +- Allow kernelspecs to have spaces in them for backward compat +- Allow websocket connections from scripts +- Allow `None` for post_save_hook +- Upgrade CodeMirror to 5.21 +- Upgrade xterm to 2.1.0 +- Docs for using comms +- Set `dirty` flag when output arrives +- Set `ws-url` data attribute when accessing a notebook terminal +- Add base aliases for nbextensions +- Include `@` operator in CodeMirror IPython mode +- Extend mathjax_url docstring +- Load nbextension in predictable order +- Improve the error messages for nbextensions +- Include cross-origin check when allowing login URL redirects + +See the 4.3 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?utf8=%E2%9C%93&q=is%3Aissue%20milestone%3A4.3%20) +and [pull +requests](https://github.com/jupyter/notebook/pulls?utf8=%E2%9C%93&q=is%3Apr%20milestone%3A4.3%20) +involved in this release. + +## 4.2.3 + +4.2.3 is a small bugfix release on 4.2. + +> Highlights: + +- Fix regression in 4.2.2 that delayed loading custom.js until after + `notebook_loaded` and `app_initialized` events have fired. +- Fix some outdated docs and links. + +## 4.2.2 + +4.2.2 is a small bugfix release on 4.2, with an important security fix. +All users are strongly encouraged to upgrade to 4.2.2. + +> Highlights: + +- **Security fix**: CVE-2016-6524, where untrusted latex output could + be added to the page in a way that could execute javascript. +- Fix missing POST in OPTIONS responses. +- Fix for downloading non-ascii filenames. +- Avoid clobbering ssl_options, so that users can specify more + detailed SSL configuration. +- Fix inverted load order in nbconfig, so user config has highest + priority. +- Improved error messages here and there. + +## 4.2.1 + +4.2.1 is a small bugfix release on 4.2. Highlights: + +- Compatibility fixes for some versions of ipywidgets +- Fix for ignored CSS on Windows +- Fix specifying destination when installing nbextensions + + +## 4.2.0 + +Release 4.2 adds a new API for enabling and installing extensions. +Extensions can now be enabled at the system-level, rather than just +per-user. An API is defined for installing directly from a Python +package, as well. + +Highlighted changes: + +- Upgrade MathJax to 2.6 to fix vertical-bar appearing on some + equations. +- Restore ability for notebook directory to be root (4.1 regression) +- Large outputs are now throttled, reducing the ability of output + floods to kill the browser. +- Fix the notebook ignoring cell executions while a kernel is starting + by queueing the messages. +- Fix handling of url prefixes (e.g. JupyterHub) in terminal and edit + pages. +- Support nested SVGs in output. + +And various other fixes and improvements. + +## 4.1.0 + +Bug fixes: + +- Properly reap zombie subprocesses +- Fix cross-origin problems +- Fix double-escaping of the base URL prefix +- Handle invalid unicode filenames more gracefully +- Fix ANSI color-processing +- Send keepalive messages for web terminals +- Fix bugs in the notebook tour + +UI changes: + +- Moved the cell toolbar selector into the *View* menu. Added a button + that triggers a "hint" animation to the main toolbar so users can + find the new location. (Click here to see a + [screencast](https://cloud.githubusercontent.com/assets/335567/10711889/59665a5a-7a3e-11e5-970f-86b89592880c.gif) + ) + + > ![image](/_static/images/cell-toolbar-41.png) + +- Added *Restart & Run All* to the *Kernel* menu. Users can also bind + it to a keyboard shortcut on action + `restart-kernel-and-run-all-cells`. + +- Added multiple-cell selection. Users press `Shift-Up/Down` or + `Shift-K/J` to extend selection in command mode. Various actions + such as cut/copy/paste, execute, and cell type conversions apply to + all selected cells. + + ![image](/_static/images/multi-select-41.png) + +- Added a command palette for executing Jupyter actions by name. Users + press `Cmd/Ctrl-Shift-P` or click the new command palette icon on + the toolbar. + + ![image](/_static/images/command-palette-41.png) + +- Added a *Find and Replace* dialog to the *Edit* menu. Users can also + press `F` in command mode to show the dialog. + + ![image](/_static/images/find-replace-41.png) + +Other improvements: + +- Custom KernelManager methods can be Tornado coroutines, allowing + async operations. +- Make clearing output optional when rewriting input with + `set_next_input(replace=True)`. +- Added support for TLS client authentication via + `--NotebookApp.client-ca`. +- Added tags to `jupyter/notebook` releases on DockerHub. `latest` + continues to track the master branch. + +See the 4.1 milestone on GitHub for a complete list of +[issues](https://github.com/jupyter/notebook/issues?page=3&q=milestone%3A4.1+is%3Aclosed+is%3Aissue&utf8=%E2%9C%93) +and [pull +requests](https://github.com/jupyter/notebook/pulls?q=milestone%3A4.1+is%3Aclosed+is%3Apr) +handled. + +## 4.0.x + +### 4.0.6 + +- fix installation of mathjax support files +- fix some double-escape regressions in 4.0.5 +- fix a couple of cases where errors could prevent opening a notebook + +### 4.0.5 + +Security fixes for maliciously crafted files. + +- [CVE-2015-6938](http://www.openwall.com/lists/oss-security/2015/09/02/3): + malicious filenames +- [CVE-2015-7337](http://www.openwall.com/lists/oss-security/2015/09/16/3): + malicious binary files in text editor. + +Thanks to Jonathan Kamens at Quantopian and Juan Broullón for the +reports. + +### 4.0.4 + +- Fix inclusion of mathjax-safe extension + +### 4.0.2 + +- Fix launching the notebook on Windows +- Fix the path searched for frontend config + +### 4.0.0 + +First release of the notebook as a standalone package. diff --git a/docs/doc-requirements.txt b/docs/doc-requirements.txt index be3f35363..bb439ddcf 100644 --- a/docs/doc-requirements.txt +++ b/docs/doc-requirements.txt @@ -2,3 +2,4 @@ sphinx>=1.3.6 sphinx-rtd-theme nbsphinx sphinxcontrib_github_alt +myst_parser diff --git a/docs/environment.yml b/docs/environment.yml index 7a20ce19b..32fdc7bf5 100644 --- a/docs/environment.yml +++ b/docs/environment.yml @@ -9,6 +9,7 @@ dependencies: - ipykernel - sphinx - terminado +- myst_parser - pip: - nbsphinx - Send2Trash diff --git a/docs/source/changelog.rst b/docs/source/changelog.rst deleted file mode 100644 index a8ea38746..000000000 --- a/docs/source/changelog.rst +++ /dev/null @@ -1,1516 +0,0 @@ -.. _changelog: - -Changelog -========= - -A summary of changes in the Jupyter notebook. -For more detailed information, see -`GitHub `__. - -.. tip:: - - Use ``pip install notebook --upgrade`` or ``conda upgrade notebook`` to - upgrade to the latest release. - -.. we push for pip 9+ or it will break for Python 2 users when IPython 6 is out. - -We strongly recommend that you upgrade pip to version 9+ of pip before upgrading ``notebook``. - -.. tip:: - - Use ``pip install pip --upgrade`` to upgrade pip. Check pip version with - ``pip --version``. - - - -.. _release-6.2.0: - -6.2.0 ------ - -Merged PRs -~~~~~~~~~~ - -- Increase minimum tornado version (:ghpull:`5933`) -- Adjust skip decorators to avoid remaining dependency on nose (:ghpull:`5932`) -- Ensure that cell ids persist after save (:ghpull:`5928`) -- Add reconnection to Gateway (form nb2kg) (:ghpull:`5924`) -- Fix some typos (:ghpull:`5917`) -- Handle TrashPermissionError, now that it exists (:ghpull:`5894`) - -Thank you to all the contributors: - -- @kevin-bates -- @mishaschwartz -- @oyvsyo -- @user202729 -- @stefanor - -.. _release-6.1.6: - -6.1.6 ------ - -Merged PRs -~~~~~~~~~~ - -* do not require nose for testing (:ghpull:`5826`) -* [docs] Update Chinese and Hindi readme.md (:ghpull:`5823`) -* Add support for creating terminals via GET (:ghpull:`5813`) -* Made doc translations in Hindi and Chinese (:ghpull:`5787`) - -Thank you to all the contributors: - -- @pgajdos -- @rjn01 -- @kevin-bates -- @virejdasani - -.. _release-6.1.5: - -6.1.5 ------ - -6.1.5 is a security release, fixing one vulnerability: - -- Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) - -.. _release-6.1.4: - -6.1.4 ------ - -- Fix broken links to jupyter documentation (:ghpull:`5686`) -- Add additional entries to troubleshooting section (:ghpull:`5695`) -- Revert change in page alignment (:ghpull:`5703`) -- Bug fix: remove double encoding in download files (:ghpull:`5720`) -- Fix typo for Check in zh_CN (:ghpull:`5730`) -- Require a file name in the "Save As" dialog (:ghpull:`5733`) - -Thank you to all the contributors: - -- bdbai -- Jaipreet Singh -- Kevin Bates -- Pavel Panchekha -- Zach Sailer - - -.. _release-6.1.3: - -6.1.3 ------ - -- Title new buttons with label if action undefined (:ghpull:`5676`) - -Thank you to all the contributors: - -- Kyle Kelley - - -.. _release-6.1.2: - -6.1.2 ------ - -- Fix russian message format for delete/duplicate actions (:ghpull:`5662`) -- Remove unnecessary import of bind_unix_socket (:ghpull:`5666`) -- Tooltip style scope fix (:ghpull:`5672`) - -Thank you to all the contributors: - -- Dmitry Akatov -- Kevin Bates -- Magda Stenius - -.. _release-6.1.1: - -6.1.1 ------ - -- Prevent inclusion of requests_unixsocket on Windows (:ghpull:`5650`) - -Thank you to all the contributors: - -- Kevin Bates - - -.. _release-6.1.0: - -6.1.0 ------ -Please note that this repository is currently maintained by a skeleton crew of maintainers -from the Jupyter community. For our approach moving forward, please see this -`notice `_ from the README. Thank you. - -Here is an enumeration of changes made since the last release and included in 6.1.0. - -- Remove deprecated encoding parameter for Python 3.9 compatibility. (:ghpull:`5174`) -- Add support for async kernel management (:ghpull:`4479`) -- Fix typo in password_required help message (:ghpull:`5320`) -- Gateway only: Ensure launch and request timeouts are in sync (:ghpull:`5317`) -- Update Markdown Cells example to HTML5 video tag (:ghpull:`5411`) -- Integrated LoginWidget into edit to enable users to logout from the t… (:ghpull:`5406`) -- Update message about minimum Tornado version (:ghpull:`5222`) -- Logged notebook type (:ghpull:`5425`) -- Added nl language (:ghpull:`5354`) -- Add UNIX socket support to notebook server. (:ghpull:`4835`) -- Update CodeMirror dependency (:ghpull:`5198`) -- Tree added download multiple files (:ghpull:`5351`) -- Toolbar buttons tooltip: show help instead of label (:ghpull:`5107`) -- Remove unnecessary import of requests_unixsocket (:ghpull:`5451`) -- Add ability to cull terminals and track last activity (:ghpull:`5372`) -- Code refactoring notebook.js (:ghpull:`5352`) -- Install terminado for docs build (:ghpull:`5462`) -- Convert notifications JS test to selenium (:ghpull:`5455`) -- Add cell attachments to markdown example (:ghpull:`5412`) -- Add Japanese document (:ghpull:`5231`) -- Migrate Move multiselection test to selenium (:ghpull:`5158`) -- Use ``cmdtrl-enter`` to run a cell (:ghpull:`5120`) -- Fix broken "Raw cell MIME type" dialog (:ghpull:`5385`) -- Make a notebook writable after successful save-as (:ghpull:`5296`) -- Add actual watch script (:ghpull:`4738`) -- Added ``--autoreload`` flag to ``NotebookApp`` (:ghpull:`4795`) -- Enable check_origin on gateway websocket communication (:ghpull:`5471`) -- Restore detection of missing terminado package (:ghpull:`5465`) -- Culling: ensure ``last_activity`` attr exists before use (:ghpull:`5355`) -- Added functionality to allow filter kernels by Jupyter Enterprise Gat… (:ghpull:`5484`) -- 'Play' icon for run-cell toolbar button (:ghpull:`2922`) -- Bump minimum version of jQuery to 3.5.0 (:ghpull:`5491`) -- Remove old JS markdown tests, add a new one in selenium (:ghpull:`5497`) -- Add support for more RTL languages (:ghpull:`5036`) -- Make markdown cells stay RTL in edit mode (:ghpull:`5037`) -- Unforce RTL output display (:ghpull:`5039`) -- Fixed multicursor backspacing (:ghpull:`4880`) -- Implemented Split Cell for multicursor (:ghpull:`4824`) -- Alignment issue [FIXED] (:ghpull:`3173`) -- MathJax: Support for ``\gdef`` (:ghpull:`4407`) -- Another (Minor) Duplicate Code Reduction (:ghpull:`5316`) -- Update readme regarding maintenance (:ghpull:`5500`) -- Document contents chunks (:ghpull:`5508`) -- Backspace deletes empty line (:ghpull:`5516`) -- The dropdown submenu at notebook page is not keyboard accessible (:ghpull:`4732`) -- Tooltips visible through keyboard navigation for specified buttons (:ghpull:`4729`) -- Fix for recursive symlink (:ghpull:`4670`) -- Fix for the terminal shutdown issue (:ghpull:`4180`) -- Add japanese translation files (:ghpull:`4490`) -- Workaround for socket permission errors on Cygwin (:ghpull:`4584`) -- Implement optional markdown header and footer files (:ghpull:`4043`) -- Remove double link when using ``custom_display_url`` (:ghpull:`5544`) -- Respect ``cell.is_editable`` during find-and-replace (:ghpull:`5545`) -- Fix exception causes all over the codebase (:ghpull:`5556` -- Improve login shell heuristics (:ghpull:`5588`) -- Added support for ``JUPYTER_TOKEN_FILE`` (:ghpull:`5587`) -- Kill notebook itself when server cull idle kernel (:ghpull:`5593`) -- Implement password hashing with bcrypt (:ghpull:`3793`) -- Fix broken links (:ghpull:`5600`) -- Russian internationalization support (:ghpull:`5571`) -- Add a metadata tag to override notebook direction (ltr/rtl) (:ghpull:`5052`) -- Paste two images from clipboard in markdown cell (:ghpull:`5598`) -- Add keyboard shortcuts to menu dropdowns (:ghpull:`5525`) -- Update codemirror to ``5.56.0+components1`` (:ghpull:`5637`) - -Thank you to all the contributors: - -- Aaron Myatt -- Adam Blake -- Afshin Taylor Darian -- Aman Bansal -- Ben Thayer -- berendjan -- Bruno P. Kinoshita -- bzinberg -- Christophe Cadilhac -- Daiki Katsuragawa -- David Lukes -- Dmitriy Q -- dmpe -- dylanzjy -- dSchurch -- E\. M\. Bray -- ErwinRussel -- Felix Mönckemeyer -- Grant Nestor -- Jarrad Whitaker -- Jesus Panales Castillo -- Joshua Zeltser -- Karthikeyan Singaravelan -- Kenichi Ito -- Kevin Bates -- Koki Nishihara -- Kris Wilson -- Kyle Kelley -- Laura Merlo -- levinxo -- Luciano Resende -- Luis Cabezon Manchado -- Madhusudhan Srinivasa -- Matthias Geier -- mattn -- Max Klein -- Min RK -- Mingxuan Lin -- Mohammad Mostafa Farzan -- Niko Felger -- Norah Abanumay -- Onno Broekmans -- PierreMB -- pinarkavak -- Ram Rachum -- Reece Hart -- Remi Rampin -- Rohit Sanjay -- Shane Canon -- Simon Li -- Steinar Sturlaugsson -- Steven Silvester -- taohan16 -- Thew Dhanat -- Thomas Kluyver -- Toon Baeyens -- Vidar Tonaas Fauske -- Zachary Sailer - -.. _release-6.0.3: - -6.0.3 ------ - -- Dependency updates to fix startup issues on Windows platform -- Add support for nbconvert 6.x -- Creation of recent tab - -Thanks for all the contributors: - -- Luciano Resende -- Kevin Bates -- ahangsleben -- Zachary Sailer -- Pallavi Bharadwaj -- Thomas Kluyver -- Min RK -- forest0 -- Bibo Hao -- Michal Charemza -- Sergey Shevelev -- Shuichiro MAKIGAKI -- krinsman -- TPartida -- Landen McDonald -- Tres DuBiel - -.. _release-6.0.2: - -6.0.2 ------ - -- Update JQuery dependency to version 3.4.1 to fix security vulnerability (CVE-2019-11358) -- Update CodeMirror to version 5.48.4 to fix Python formatting issues -- Continue removing obsolete Python 2.x code/dependencies -- Multiple documentation updates - -Thanks for all the contributors: - -- David Robles -- Jason Grout -- Kerwin Sun -- Kevin Bates -- Kyle Kelley -- Luciano Resende -- Marcus D Sherman -- Sasaki Takeru -- Tom Jarosz -- Vidar Tonaas Fauske -- Wes Turner -- Zachary Sailer - -.. _release-6.0.1: - -6.0.1 ------ - -- Attempt to re-establish websocket connection to Gateway (:ghpull:`4777`) -- Add missing react-dom js to package data (:ghpull:`4772`) - -Thanks for all the contributors: - -- Eunsoo Park -- Min RK - -.. _release-6.0: - -6.0 ---- - -This is the first major release of the Jupyter Notebook since version 5.0 (March 2017). - -We encourage users to start trying JupyterLab, which has just announced it's 1.0 release in preparation -for a future transition. - -- Remove Python 2.x support in favor of Python 3.5 and higher. -- Multiple accessibility enhancements and bug-fixes. -- Multiple translation enhancements and bug-fixes. -- Remove deprecated ANSI CSS styles. -- Native support to forward requests to Jupyter Gateway(s) (Embedded NB2KG). -- Use JavaScript to redirect users to notebook homepage. -- Enhanced SSL/TLS security by using PROTOCOL_TLS which selects the highest ssl/tls - protocol version available that both the client and server support. When PROTOCOL_TLS - is not available use PROTOCOL_SSLv23. -- Add ``?no_track_activity=1`` argument to allow API requests. - to not be registered as activity (e.g. API calls by external activity monitors). -- Kernels shutting down due to an idle timeout is no longer considered - an activity-updating event. -- Further improve compatibility with tornado 6 with improved - checks for when websockets are closed. -- Launch the browser with a local file which redirects to the server address including - the authentication token. This prevents another logged-in user from stealing the token - from command line arguments and authenticating to the server. - The single-use token previously used to mitigate this has been removed. - Thanks to Dr. Owain Kenway for suggesting the local file approach. -- Respect nbconvert entrypoints as sources for exporters -- Update to CodeMirror to 5.37, which includes f-string syntax for Python 3.6. -- Update jquery-ui to 1.12 -- Execute cells by clicking icon in input prompt. -- New "Save as" menu option. -- When serving on a loopback interface, protect against DNS rebinding by - checking the ``Host`` header from the browser. - This check can be disabled if necessary by setting - ``NotebookApp.allow_remote_access``. - (Disabled by default while we work out some Mac issues in :ghissue:`3754`). -- Add kernel_info_timeout traitlet to enable restarting slow kernels. -- Add ``custom_display_host`` config option to override displayed URL. -- Add /metrics endpoint for Prometheus Metrics. -- Optimize large file uploads. -- Allow access control headers to be overriden in jupyter_notebook_config.py to support - greater CORS and proxy configuration flexibility. -- Add support for terminals on windows. -- Add a "restart and run all" button to the toolbar. -- Frontend/extension-config: allow default json files in a .d directory. -- Allow setting token via jupyter_token env. -- Cull idle kernels using ``--MappingKernelManager.cull_idle_timeout``. -- Allow read-only notebooks to be trusted. -- Convert JS tests to Selenium. - - -Security Fixes included in previous minor releases of Jupyter Notebook and also included in version 6.0. - -- Fix Open Redirect vulnerability (CVE-2019-10255) - where certain malicious URLs could redirect from the Jupyter login page - to a malicious site after a successful login. - -- Contains a security fix for a cross-site inclusion (XSSI) vulnerability (CVE-2019–9644), - where files at a known URL could be included in a page from an unauthorized website if - the user is logged into a Jupyter server. The fix involves setting the - ``X-Content-Type-Options: nosniff`` header, and applying CSRF checks previously on all - non-GET API requests to GET requests to API endpoints and the /files/ endpoint. - -- Check Host header to more securely protect localhost deployments from DNS rebinding. - This is a pre-emptive measure, not fixing a known vulnerability. - Use ``.NotebookApp.allow_remote_access`` and ``.NotebookApp.local_hostnames`` to configure - access. - -- Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been - assigned `CVE-2018-14041 `_. - -- Contains a security fix preventing malicious directory names - from being able to execute javascript. - -- Contains a security fix preventing nbconvert endpoints from executing javascript with - access to the server API. CVE request pending. - - - -Thanks for all the contributors: - -* AAYUSH SINHA -* Aaron Hall, MBA -* Abhinav Sagar -* Adam Rule -* Adeel Ahmad -* Alex Rothberg -* Amy Skerry-Ryan -* Anastasis Germanidis -* Andrés Sánchez -* Arjun Radhakrishna -* Arovit Narula -* Benda Xu -* Björn Grüning -* Brian E. Granger -* Carol Willing -* Celina Kilcrease -* Chris Holdgraf -* Chris Miller -* Ciaran Langton -* Damian Avila -* Dana Lee -* Daniel Farrell -* Daniel Nicolai -* Darío Hereñú -* Dave Aitken -* Dave Foster -* Dave Hirschfeld -* Denis Ledoux -* Dmitry Mikushin -* Dominic Kuang -* Douglas Hanley -* Elliott Sales de Andrade -* Emilio Talamante Lugo -* Eric Perry -* Ethan T. Hendrix -* Evan Van Dam -* Francesco Franchina -* Frédéric Chapoton -* Félix-Antoine Fortin -* Gabriel -* Gabriel Nützi -* Gabriel Ruiz -* Gestalt LUR -* Grant Nestor -* Gustavo Efeiche -* Harsh Vardhan -* Heng GAO -* Hisham Elsheshtawy -* Hong Xu -* Ian Rose -* Ivan Ogasawara -* J Forde -* Jason Grout -* Jessica B. Hamrick -* Jiaqi Liu -* John Emmons -* Josh Barnes -* Karthik Balakrishnan -* Kevin Bates -* Kirit Thadaka -* Kristian Gregorius Hustad -* Kyle Kelley -* Leo Gallucci -* Lilian Besson -* Lucas Seiki Oshiro -* Luciano Resende -* Luis Angel Rodriguez Guerrero -* M Pacer -* Maarten Breddels -* Mac Knight -* Madicken Munk -* Maitiú Ó Ciaráin -* Marc Udoff -* Mathis HAMMEL -* Mathis Rosenhauer -* Matthias Bussonnier -* Matthias Geier -* Max Vovshin -* Maxime Mouchet -* Michael Chirico -* Michael Droettboom -* Michael Heilman -* Michael Scott Cuthbert -* Michal Charemza -* Mike Boyle -* Milos Miljkovic -* Min RK -* Miro Hrončok -* Nicholas Bollweg -* Nitesh Sawant -* Ondrej Jariabka -* Park Hae Jin -* Paul Ivanov -* Paul Masson -* Peter Parente -* Pierre Tholoniat -* Remco Verhoef -* Roland Weber -* Roman Kornev -* Rosa Swaby -* Roy Hyunjin Han -* Sally -* Sam Lau -* Samar Sultan -* Shiti Saxena -* Simon Biggs -* Spencer Park -* Stephen Ward -* Steve (Gadget) Barnes -* Steven Silvester -* Surya Prakash Susarla -* Syed Shah -* Sylvain Corlay -* Thomas Aarholt -* Thomas Kluyver -* Tim -* Tim Head -* Tim Klever -* Tim Metzler -* Todd -* Tom Jorquera -* Tyler Makaro -* Vaibhav Sagar -* Victor -* Vidar Tonaas Fauske -* Vu Minh Tam -* Vít Tuček -* Will Costello -* Will Starms -* William Hosford -* Xiaohan Li -* Yuvi Panda -* ashley teoh -* nullptr - - - -.. _release-5.7.8: - -5.7.8 ------ - -- Fix regression in restarting kernels in 5.7.5. - The restart handler would return before restart was completed. -- Further improve compatibility with tornado 6 with improved - checks for when websockets are closed. -- Fix regression in 5.7.6 on Windows where .js files could have the wrong mime-type. -- Fix Open Redirect vulnerability (CVE-2019-10255) - where certain malicious URLs could redirect from the Jupyter login page - to a malicious site after a successful login. - 5.7.7 contained only a partial fix for this issue. - -.. _release-5.7.6: - -5.7.6 ------ - -5.7.6 contains a security fix for a cross-site inclusion (XSSI) vulnerability (CVE-2019–9644), -where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server. -The fix involves setting the ``X-Content-Type-Options: nosniff`` -header, and applying CSRF checks previously on all non-GET -API requests to GET requests to API endpoints and the /files/ endpoint. - -The attacking page is able to access some contents of files when using Internet Explorer through script errors, -but this has not been demonstrated with other browsers. - -.. _release-5.7.5: - -5.7.5 ------ - -- Fix compatibility with tornado 6 (:ghpull:`4392`, :ghpull:`4449`). -- Fix opening integer filedescriptor during startup on Python 2 (:ghpull:`4349`) -- Fix compatibility with asynchronous `KernelManager.restart_kernel` methods (:ghpull:`4412`) - -.. _release-5.7.4: - -5.7.4 ------ - -5.7.4 fixes a bug introduced in 5.7.3, in which the ``list_running_servers()`` -function attempts to parse HTML files as JSON, and consequently crashes -(:ghpull:`4284`). - -.. _release-5.7.3: - -5.7.3 ------ - -5.7.3 contains one security improvement and one security fix: - -- Launch the browser with a local file which redirects to the server address - including the authentication token (:ghpull:`4260`). - This prevents another logged-in user from stealing the token from command line - arguments and authenticating to the server. - The single-use token previously used to mitigate this has been removed. - Thanks to Dr. Owain Kenway for suggesting the local file approach. -- Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been - assigned `CVE-2018-14041 `_ - (:ghpull:`4271`). - -.. _release-5.7.2: - -5.7.2 ------ - -5.7.2 contains a security fix preventing malicious directory names -from being able to execute javascript. CVE request pending. - -.. _release-5.7.1: - -5.7.1 ------ - -5.7.1 contains a security fix preventing nbconvert endpoints from executing javascript with access to the server API. CVE request pending. - -.. _release-5.7.0: - -5.7.0 ------ - -New features: - -- Update to CodeMirror to 5.37, which includes f-string syntax for Python 3.6 (:ghpull:`3816`) -- Update jquery-ui to 1.12 (:ghpull:`3836`) -- Check Host header to more securely protect localhost deployments from DNS rebinding. - This is a pre-emptive measure, not fixing a known vulnerability (:ghpull:`3766`). - Use ``.NotebookApp.allow_remote_access`` and ``.NotebookApp.local_hostnames`` to configure - access. -- Allow access-control-allow-headers to be overridden (:ghpull:`3886`) -- Allow configuring max_body_size and max_buffer_size (:ghpull:`3829`) -- Allow configuring get_secure_cookie keyword-args (:ghpull:`3778`) -- Respect nbconvert entrypoints as sources for exporters (:ghpull:`3879`) -- Include translation sources in source distributions (:ghpull:`3925`, :ghpull:`3931`) -- Various improvements to documentation (:ghpull:`3799`, :ghpull:`3800`, - :ghpull:`3806`, :ghpull:`3883`, :ghpull:`3908`) - -Fixing problems: - -- Fix breadcrumb link when running with a base url (:ghpull:`3905`) -- Fix possible type error when closing activity stream (:ghpull:`3907`) -- Disable metadata editing for non-editable cells (:ghpull:`3744`) -- Fix some styling and alignment of prompts caused by regressions in 5.6.0. -- Enter causing page reload in shortcuts editor (:ghpull:`3871`) -- Fix uploading to the same file twice (:ghpull:`3712`) - -See the 5.7 milestone on GitHub for a complete list of -`pull requests `__ involved in this release. - -Thanks to the following contributors: - -* Aaron Hall -* Benjamin Ragan-Kelley -* Bill Major -* bxy007 -* Dave Aitken -* Denis Ledoux -* Félix-Antoine Fortin -* Gabriel -* Grant Nestor -* Kevin Bates -* Kristian Gregorius Hustad -* M Pacer -* Madicken Munk -* Maitiu O Ciarain -* Matthias Bussonnier -* Michael Boyle -* Michael Chirico -* Mokkapati, Praneet(ES) -* Peter Parente -* Sally Wilsak -* Steven Silvester -* Thomas Kluyver -* Walter Martin - -.. _release-5.6.0: - -5.6.0 ------ - -New features: - -- Execute cells by clicking icon in input prompt (:ghpull:`3535`, :ghpull:`3687`) -- New "Save as" menu option (:ghpull:`3289`) -- When serving on a loopback interface, protect against DNS rebinding by - checking the ``Host`` header from the browser (:ghpull:`3714`). - This check can be disabled if necessary by setting - ``NotebookApp.allow_remote_access``. - (Disabled by default while we work out some Mac issues in :ghissue:`3754`). -- Add kernel_info_timeout traitlet to enable restarting slow kernels (:ghpull:`3665`) -- Add ``custom_display_host`` config option to override displayed URL (:ghpull:`3668`) -- Add /metrics endpoint for Prometheus Metrics (:ghpull:`3490`) -- Update to MathJax 2.7.4 (:ghpull:`3751`) -- Update to jQuery 3.3 (:ghpull:`3655`) -- Update marked to 0.4 (:ghpull:`3686`) - -Fixing problems: - -- Don't duplicate token in displayed URL (:ghpull:`3656`) -- Clarify displayed URL when listening on all interfaces (:ghpull:`3703`) -- Don't trash non-empty directories on Windows (:ghpull:`3673`) -- Include LICENSE file in wheels (:ghpull:`3671`) -- Don't show "0 active kernels" when starting the notebook (:ghpull:`3696`) - -Testing: - -- Add find replace test (:ghpull:`3630`) -- Selenium test for deleting all cells (:ghpull:`3601`) -- Make creating a new notebook more robust (:ghpull:`3726`) - -Thanks to the following contributors: - -- Arovit Narula (`arovit `__) -- lucasoshiro (`lucasoshiro `__) -- M Pacer (`mpacer `__) -- Thomas Kluyver (`takluyver `__) -- Todd (`toddrme2178 `__) -- Yuvi Panda (`yuvipanda `__) - -See the 5.6 milestone on GitHub for a complete list of -`pull requests `__ involved in this release. - -.. _release-5.5.0: - -5.5.0 ------ - -New features: - -- The files list now shows file sizes (:ghpull:`3539`) -- Add a quit button in the dashboard (:ghpull:`3004`) -- Display hostname in the terminal when running remotely (:ghpull:`3356`, :ghpull:`3593`) -- Add slides exportation/download to the menu (:ghpull:`3287`) -- Add any extra installed nbconvert exporters to the "Download as" menu (:ghpull:`3323`) -- Editor: warning when overwriting a file that is modified on disk (:ghpull:`2783`) -- Display a warning message if cookies are not enabled (:ghpull:`3511`) -- Basic ``__version__`` reporting for extensions (:ghpull:`3541`) -- Add ``NotebookApp.terminals_enabled`` config option (:ghpull:`3478`) -- Make buffer time between last modified on disk and last modified on last save configurable (:ghpull:`3273`) -- Allow binding custom shortcuts for 'close and halt' (:ghpull:`3314`) -- Add description for 'Trusted' notification (:ghpull:`3386`) -- Add ``settings['activity_sources']`` (:ghpull:`3401`) -- Add an ``output_updated.OutputArea`` event (:ghpull:`3560`) - - -Fixing problems: - -- Fixes to improve web accessibility (:ghpull:`3507`) - - - There is more to do on this! See :ghissue:`1801`. - -- Fixed color contrast issue in tree.less (:ghpull:`3336`) -- Allow cancelling upload of large files (:ghpull:`3373`) -- Don't clear login cookie on requests without cookie (:ghpull:`3380`) -- Don't trash files on different device to home dir on Linux (:ghpull:`3304`) -- Clear waiting asterisks when restarting kernel (:ghpull:`3494`) -- Fix output prompt when ``execution_count`` missing (:ghpull:`3236`) -- Make the 'changed on disk' dialog work when displayed twice (:ghpull:`3589`) -- Fix going back to root directory with history in notebook list (:ghpull:`3411`) -- Allow defining keyboard shortcuts for missing actions (:ghpull:`3561`) -- Prevent default on pageup/pagedown when completer is active (:ghpull:`3500`) -- Prevent default event handling on new terminal (:ghpull:`3497`) -- ConfigManager should not write out default values found in the .d directory (:ghpull:`3485`) -- Fix leak of iopub object in activity monitoring (:ghpull:`3424`) -- Javascript lint in notebooklist.js (:ghpull:`3409`) -- Some Javascript syntax fixes (:ghpull:`3294`) -- Convert native for loop to ``Array.forEach()`` (:ghpull:`3477`) -- Disable cache when downloading nbconvert output (:ghpull:`3484`) -- Add missing digestmod arg to HMAC (:ghpull:`3399`) -- Log OSErrors failing to create less-critical files during startup (:ghpull:`3384`) -- Use powershell on Windows (:ghpull:`3379`) -- API spec improvements, API handler improvements (:ghpull:`3368`) -- Set notebook to dirty state after change to kernel metadata (:ghpull:`3350`) -- Use CSP header to treat served files as belonging to a separate origin (:ghpull:`3341`) -- Don't install gettext into builtins (:ghpull:`3330`) -- Add missing ``import _`` (:ghpull:`3316`, :ghpull:`3326`) -- Write ``notebook.json`` file atomically (:ghpull:`3305`) -- Fix clicking with modifiers, page title updates (:ghpull:`3282`) -- Upgrade jQuery to version 2.2 (:ghpull:`3428`) -- Upgrade xterm.js to 3.1.0 (:ghpull:`3189`) -- Upgrade moment.js to 2.19.3 (:ghpull:`3562`) -- Upgrade CodeMirror to 5.35 (:ghpull:`3372`) -- "Require" pyzmq>=17 (:ghpull:`3586`) - -Documentation: - -- Documentation updates and organisation (:ghpull:`3584`) -- Add section in docs about privacy (:ghpull:`3571`) -- Add explanation on how to change the type of a cell to Markdown (:ghpull:`3377`) -- Update docs with confd implementation details (:ghpull:`3520`) -- Add more information for where ``jupyter_notebook_config.py`` is located (:ghpull:`3346`) -- Document options to enable nbextensions in specific sections (:ghpull:`3525`) -- jQuery attribute selector value MUST be surrounded by quotes (:ghpull:`3527`) -- Do not execute special notebooks with nbsphinx (:ghpull:`3360`) -- Other minor fixes in :ghpull:`3288`, :ghpull:`3528`, :ghpull:`3293`, :ghpull:`3367` - -Testing: - -- Testing with Selenium & Sauce labs (:ghpull:`3321`) -- Selenium utils + markdown rendering tests (:ghpull:`3458`) -- Convert insert cell tests to Selenium (:ghpull:`3508`) -- Convert prompt numbers tests to Selenium (:ghpull:`3554`) -- Convert delete cells tests to Selenium (:ghpull:`3465`) -- Convert undelete cell tests to Selenium (:ghpull:`3475`) -- More selenium testing utilities (:ghpull:`3412`) -- Only check links when build is trigger by Travis Cron job (:ghpull:`3493`) -- Fix Appveyor build errors (:ghpull:`3430`) -- Undo patches in teardown before attempting to delete files (:ghpull:`3459`) -- Get tests running with tornado 5 (:ghpull:`3398`) -- Unpin ipykernel version on Travis (:ghpull:`3223`) - -Thanks to the following contributors: - -- Arovit Narula (`arovit `__) -- Ashley Teoh (`ashleytqy `__) -- Nicholas Bollweg (`bollwyvl `__) -- Alex Rothberg (`cancan101 `__) -- Celina Kilcrease (`ckilcrease `__) -- dabuside (`dabuside `__) -- Damian Avila (`damianavila `__) -- Dana Lee (`danagilliann `__) -- Dave Hirschfeld (`dhirschfeld `__) -- Heng GAO (`ehengao `__) -- Leo Gallucci (`elgalu `__) -- Evan Van Dam (`evandam `__) -- forbxy (`forbxy `__) -- Grant Nestor (`gnestor `__) -- Ethan T. Hendrix (`hendrixet `__) -- Miro Hrončok (`hroncok `__) -- Paul Ivanov (`ivanov `__) -- Darío Hereñú (`kant `__) -- Kevin Bates (`kevin-bates `__) -- Maarten Breddels (`maartenbreddels `__) -- Michael Droettboom (`mdboom `__) -- Min RK (`minrk `__) -- M Pacer (`mpacer `__) -- Peter Parente (`parente `__) -- Paul Masson (`paulmasson `__) -- Philipp Rudiger (`philippjfr `__) -- Mac Knight (`Shels1909 `__) -- Hisham Elsheshtawy (`Sheshtawy `__) -- Simon Biggs (`SimonBiggs `__) -- Sunil Hari (``@sunilhari``) -- Thomas Kluyver (`takluyver `__) -- Tim Klever (`tklever `__) -- Gabriel Ruiz (`unnamedplay-r `__) -- Vaibhav Sagar (`vaibhavsagar `__) -- William Hosford (`whosford `__) -- Hong (`xuhdev `__) - -See the 5.5 milestone on GitHub for a complete list of -`pull requests `__ involved in this release. - -.. _release-5.4.1: - -5.4.1 ------ - -A security release to fix `CVE-2018-8768 -`_. - -Thanks to `Alex `__ for identifying this bug, -and Jonathan Kamens and Scott Sanderson at Quantopian for verifying it and -bringing it to our attention. - -.. _release-5.4.0: - -5.4.0 ------ - -- Fix creating files and folders after navigating directories in the dashboard - (:ghpull:`3264`). -- Enable printing notebooks in colour, removing the CSS that made everything - black and white (:ghpull:`3212`). -- Limit the completion options displayed in the notebook to 1000, to avoid - performance issues with very long lists (:ghpull:`3195`). -- Accessibility improvements in ``tree.html`` (:ghpull:`3271`). -- Added alt-text to the kernel logo image in the notebook UI (:ghpull:`3228`). -- Added a test on Travis CI to flag if symlinks are accidentally introduced - in the future. This should prevent the issue that necessitated - :ref:`release-5.3.1` (:ghpull:`3227`). -- Use lowercase letters for random IDs generated in our Javascript - (:ghpull:`3264`). -- Removed duplicate code setting ``TextCell.notebook`` (:ghpull:`3256`). - -Thanks to the following contributors: - -- Alex Soderman (`asoderman `__) -- Matthias Bussonnier (`Carreau `__) -- Min RK (`minrk `__) -- Nitesh Sawant (`ns23 `__) -- Thomas Kluyver (`takluyver `__) -- Yuvi Panda (`yuvipanda `__) - -See the 5.4 milestone on GitHub for a complete list of -`pull requests `__ involved in this release. - -.. _release-5.3.1: - -5.3.1 ------ - -Replaced a symlink in the repository with a copy, to fix issues installing -on Windows (:ghpull:`3220`). - -.. _release-5.3.0: - -5.3.0 ------ - -This release introduces a couple noteable improvements, such as terminal support for Windows and support for OS trash (files deleted from the notebook dashboard are moved to the OS trash vs. deleted permanently). - -- Add support for terminals on windows (:ghpull:`3087`). -- Add a "restart and run all" button to the toolbar (:ghpull:`2965`). -- Send files to os trash mechanism on delete (:ghpull:`1968`). -- Allow programmatic copy to clipboard (:ghpull:`3088`). -- Use DOM History API for navigating between directories in the file browser (:ghpull:`3115`). -- Add translated files to folder(docs-translations) (:ghpull:`3065`). -- Allow non empty dirs to be deleted (:ghpull:`3108`). -- Set cookie on base_url (:ghpull:`2959`). -- Allow token-authenticated requests cross-origin by default (:ghpull:`2920`). -- Change cull_idle_timeout_minimum to 1 from 300 (:ghpull:`2910`). -- Config option to shut down server after n seconds with no kernels (:ghpull:`2963`). -- Display a "close" button on load notebook error (:ghpull:`3176`). -- Add action to command pallette to run CodeMirror's "indentAuto" on selection (:ghpull:`3175`). -- Add option to specify extra services (:ghpull:`3158`). -- Warn_bad_name should not use global name (:ghpull:`3160`). -- Avoid overflow of hidden form (:ghpull:`3148`). -- Fix shutdown trans loss (:ghpull:`3147`). -- Find available kernelspecs more efficiently (:ghpull:`3136`). -- Don\'t try to translate missing help strings (:ghpull:`3122`). -- Frontend/extension-config: allow default json files in a .d directory (:ghpull:`3116`). -- Use `requirejs` vs. `require` (:ghpull:`3097`). -- Fixes some ui bugs in firefox #3044 (:ghpull:`3058`). -- Compare non-specific language code when choosing to use arabic numerals (:ghpull:`3055`). -- Fix save-script deprecation (:ghpull:`3053`). -- Include moment locales in package_data (:ghpull:`3051`). -- Fix moment locale loading in bidi support (:ghpull:`3048`). -- Tornado 5: periodiccallback loop arg will be removed (:ghpull:`3034`). -- Use `/files` prefix for pdf-like files (:ghpull:`3031`). -- Add folder for document translation (:ghpull:`3022`). -- When login-in via token, let a chance for user to set the password (:ghpull:`3008`). -- Switch to jupyter_core implementation of ensure_dir_exists (:ghpull:`3002`). -- Send http shutdown request on \'stop\' subcommand (:ghpull:`3000`). -- Work on loading ui translations (:ghpull:`2969`). -- Fix ansi inverse (:ghpull:`2967`). -- Add send2trash to requirements for building docs (:ghpull:`2964`). -- I18n readme.md improvement (:ghpull:`2962`). -- Add \'reason\' field to json error responses (:ghpull:`2958`). -- Add some padding for stream outputs (:ghpull:`3194`). -- Always use setuptools in ``setup.py`` (:ghpull:`3206`). -- Fix clearing cookies on logout when ``base_url`` is configured (:ghpull:`3207`). - -Thanks to the following contributors: - -- bacboc (`bacboc `__) -- Steven Silvester (`blink1073 `__) -- Matthias Bussonnier (`Carreau `__) -- ChungJooHo (`ChungJooHo `__) -- edida (`edida `__) -- Francesco Franchina (``ferdas``) -- forbxy (`forbxy `__) -- Grant Nestor (`gnestor `__) -- Josh Barnes (`jcb91 `__) -- JocelynDelalande (`JocelynDelalande `__) -- Karthik Balakrishnan (`karthikb351 `__) -- Kevin Bates (`kevin-bates `__) -- Kirit Thadaka (`kirit93 `__) -- Lilian Besson (`Naereen `__) -- Maarten Breddels (`maartenbreddels `__) -- Madhu94 (`Madhu94 `__) -- Matthias Geier (`mgeier `__) -- Michael Heilman (`mheilman `__) -- Min RK (`minrk `__) -- PHaeJin (`PHaeJin `__) -- Sukneet (`Sukneet `__) -- Thomas Kluyver (`takluyver `__) - -See the 5.3 milestone on GitHub for a complete list of -`pull requests `__ involved in this release. - -.. _release-5.2.1: - -5.2.1 ------ - -- Fix invisible CodeMirror cursor at specific browser zoom levels (:ghpull:`2983`). -- Fix nbconvert handler causing broken export to PDF (:ghpull:`2981`). -- Fix the prompt_area argument of the output area constructor. (:ghpull:`2961`). -- Handle a compound extension in new_untitled (:ghpull:`2949`). -- Allow disabling offline message buffering (:ghpull:`2916`). - -Thanks to the following contributors: - -- Steven Silvester (`blink1073 `__) -- Grant Nestor (`gnestor `__) -- Jason Grout (`jasongrout `__) -- Min RK (`minrk `__) -- M Pacer (`mpacer `__) - -See the 5.2.1 milestone on GitHub for a complete list of -`pull requests `__ involved in this release. - -.. _release-5.2.0: - -5.2.0 ------ - -- Allow setting token via jupyter_token env (:ghpull:`2921`). -- Fix some errors caused by raising 403 in get_current_user (:ghpull:`2919`). -- Register contents_manager.files_handler_class directly (:ghpull:`2917`). -- Update viewable_extensions (:ghpull:`2913`). -- Show edit shortcuts modal after shortcuts modal is hidden (:ghpull:`2912`). -- Improve edit/view behavior (:ghpull:`2911`). -- The root directory of the notebook server should never be hidden (:ghpull:`2907`). -- Fix notebook require config to match tools/build-main (:ghpull:`2888`). -- Give page constructor default arguments (:ghpull:`2887`). -- Fix codemirror.less to match codemirror\'s expected padding layout (:ghpull:`2880`). -- Add x-xsrftoken to access-control-allow-headers (:ghpull:`2876`). -- Buffer messages when websocket connection is interrupted (:ghpull:`2871`). -- Load locale dynamically only when not en-us (:ghpull:`2866`). -- Changed key strength to 2048 bits (:ghpull:`2861`). -- Resync jsversion with python version (:ghpull:`2860`). -- Allow copy operation on modified, read-only notebook (:ghpull:`2854`). -- Update error handling on apihandlers (:ghpull:`2853`). -- Test python 3.6 on travis, drop 3.3 (:ghpull:`2852`). -- Avoid base64-literals in image tests (:ghpull:`2851`). -- Upgrade xterm.js to 2.9.2 (:ghpull:`2849`). -- Changed all python variables named file to file_name to not override built_in file (:ghpull:`2830`). -- Add more doc tests (:ghpull:`2823`). -- Typos fix (:ghpull:`2815`). -- Rename and update license [ci skip] (:ghpull:`2810`). -- Travis builds doc (:ghpull:`2808`). -- Pull request i18n (:ghpull:`2804`). -- Factor out output_prompt_function, as is done with input prompt (:ghpull:`2774`). -- Use rfc5987 encoding for filenames (:ghpull:`2767`). -- Added path to the resources metadata, the same as in from_filename(...) in nbconvert.exporters.py (:ghpull:`2753`). -- Make "extrakeys" consistent for notebook and editor (:ghpull:`2745`). -- Bidi support (:ghpull:`2357`). - -Special thanks to `samarsultan `__ and the Arabic Competence and Globalization Center Team at IBM Egypt for adding RTL (right-to-left) support to the notebook! - -See the 5.2 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ involved in this release. - -.. _release-5.1.0: - -5.1.0 ------ - -- Preliminary i18n implementation (:ghpull:`2140`). -- Expose URL with auth token in notebook UI (:ghpull:`2666`). -- Fix search background style (:ghpull:`2387`). -- List running notebooks without requiring ``--allow-root`` (:ghpull:`2421`). -- Allow session of type other than notebook (:ghpull:`2559`). -- Fix search background style (:ghpull:`2387`). -- Fix some Markdown styling issues (:ghpull:`2571`), (:ghpull:`2691`) and (:ghpull:`2534`). -- Remove keymaps that conflict with non-English keyboards (:ghpull:`2535`). -- Add session-specific favicons (notebook, terminal, file) (:ghpull:`2452`). -- Add /api/shutdown handler (:ghpull:`2507`). -- Include metadata when copying a cell (:ghpull:`2349`). -- Stop notebook server from command line (:ghpull:`2388`). -- Improve "View" and "Edit" file handling in dashboard (:ghpull:`2449`) and (:ghpull:`2402`). -- Provide a promise to replace use of the ``app_initialized.NotebookApp`` event (:ghpull:`2710`). -- Fix disabled collapse/expand output button (:ghpull:`2681`). -- Cull idle kernels using ``--MappingKernelManager.cull_idle_timeout`` (:ghpull:`2215`). -- Allow read-only notebooks to be trusted (:ghpull:`2718`). - -See the 5.1 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ involved in this release. - -.. _release-5.0.0: - -5.0.0 ------ - -This is the first major release of the Jupyter Notebook since version 4.0 was -created by the "Big Split" of IPython and Jupyter. - -We encourage users to start trying JupyterLab in preparation for a future -transition. - -We have merged more than 300 pull requests since 4.0. Some of the -major user-facing changes are described here. - -File sorting in the dashboard -***************************** - -Files in the dashboard may now be sorted by last modified date or name (:ghpull:`943`): - -.. image:: /_static/images/dashboard-sort.png - :align: center - -Cell tags -********* - -There is a new cell toolbar for adding *cell tags* (:ghpull:`2048`): - -.. image:: /_static/images/cell-tags-toolbar.png - :align: center - -Cell tags are a lightweight way to customise the behaviour of tools working with -notebooks; we're working on building support for them into tools like `nbconvert -`__ and `nbval -`__. To start using tags, -select ``Tags`` in the ``View > Cell Toolbar`` menu in a notebook. - -The UI for editing cell tags is basic for now; we hope to improve it in future -releases. - -Table style -*********** - -The default styling for tables in the notebook has been updated (:ghpull:`1776`). - -Before: - -.. image:: /_static/images/table-style-before.png - :align: center - -After: - -.. image:: /_static/images/table-style-after.png - :align: center - -Customise keyboard shortcuts -**************************** - -You can now edit keyboard shortcuts for *Command Mode* within the UI -(:ghpull:`1347`): - -.. image:: /_static/images/shortcut-editor.png - :align: center - -See the ``Help > Edit Keyboard Shortcuts`` menu item and follow the instructions. - -Other additions -*************** - -- You can copy and paste cells between notebooks, using :kbd:`Ctrl-C` and - :kbd:`Ctrl-V` (:kbd:`Cmd-C` and :kbd:`Cmd-V` on Mac). - -- It's easier to configure a password for the notebook with the new - ``jupyter notebook password`` command (:ghpull:`2007`). - -- The file list can now be ordered by *last modified* or by *name* - (:ghpull:`943`). - -- Markdown cells now support attachments. Simply drag and drop an image from - your desktop to a markdown cell to add it. Unlike relative links that you - enter manually, attachments are embedded in the notebook itself. An - unreferenced attachment will be automatically scrubbed from the notebook on - save (:ghpull:`621`). - -- Undoing cell deletion now supports undeleting multiple cells. Cells may not be - in the same order as before their deletion, depending on the actions you did - on the meantime, but this should should help reduce the impact of - accidentally deleting code. - -- The file browser now has *Edit* and *View* buttons. - -- The file browser now supports moving multiple files at once - (:ghpull:`1088`). - -- The Notebook will refuse to run as root unless the ``--allow-root`` flag is - given (:ghpull:`1115`). - -- Keyboard shortcuts are now declarative (:ghpull:`1234`). - -- Toggling line numbers can now affect all cells (:ghpull:`1312`). - -- Add more visible *Trusted* and *Untrusted* notifications (:ghpull:`1658`). - -- The favicon (browser shortcut icon) now changes to indicate when the kernel is busy - (:ghpull:`1837`). - -- Header and toolbar visibility is now persisted in nbconfig and across sessions - (:ghpull:`1769`). - -- Load server extensions with ConfigManager so that merge happens recursively, - unlike normal config values, to make it load more consistently with frontend - extensions(:ghpull:`2108`). - -- The notebook server now supports the `bundler API - `__ - from the `jupyter_cms incubator project - `__ (:ghpull:`1579`). - -- The notebook server now provides information about kernel activity in - its kernel resource API (:ghpull:`1827`). - -Remember that upgrading ``notebook`` only affects the user -interface. Upgrading kernels and libraries may also provide new features, -better stability and integration with the notebook interface. - -.. _release-4.4.0: - -4.4.0 ------ - -- Allow override of output callbacks to redirect output messages. This is used to implement the ipywidgets Output widget, for example. -- Fix an async bug in message handling by allowing comm message handlers to return a promise which halts message processing until the promise resolves. - -See the 4.4 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ involved in this release. - -.. _release-4.3.2: - -4.3.2 ------ - -4.3.2 is a patch release with a bug fix for CodeMirror and improved handling of the "editable" cell metadata field. - -- Monkey-patch for CodeMirror that resolves `#2037 `__ without breaking `#1967 `__ -- Read-only (``"editable": false``) cells can be executed but cannot be split, merged, or deleted - -See the 4.3.2 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ involved in this release. - -.. _release-4.3.1: - -4.3.1 ------ - -4.3.1 is a patch release with a security patch, a couple bug fixes, and improvements to the newly-released token authentication. - -**Security fix**: - -- CVE-2016-9971. Fix CSRF vulnerability, - where malicious forms could create untitled files and start kernels - (no remote execution or modification of existing files) - for users of certain browsers (Firefox, Internet Explorer / Edge). - All previous notebook releases are affected. - -Bug fixes: - -- Fix carriage return handling -- Make the font size more robust against fickle browsers -- Ignore resize events that bubbled up and didn't come from window -- Add Authorization to allowed CORS headers -- Downgrade CodeMirror to 5.16 while we figure out issues in Safari - -Other improvements: - -- Better docs for token-based authentication -- Further highlight token info in log output when autogenerated - -See the 4.3.1 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ involved in this release. - -.. _release-4.3: - -4.3.0 ------ - -4.3 is a minor release with many bug fixes and improvements. -The biggest user-facing change is the addition of token authentication, -which is enabled by default. -A token is generated and used when your browser is opened automatically, -so you shouldn't have to enter anything in the default circumstances. -If you see a login page -(e.g. by switching browsers, or launching on a new port with ``--no-browser``), -you get a login URL with the token from the command ``jupyter notebook list``, -which you can paste into your browser. - - -Highlights: - -- API for creating mime-type based renderer extensions using :code:`OutputArea.register_mime_type` and :code:`Notebook.render_cell_output` methods. See `mimerender-cookiecutter `__ for reference implementations and cookiecutter. -- Enable token authentication by default. See :ref:`server_security` for more details. -- Update security docs to reflect new signature system -- Switched from term.js to xterm.js - -Bug fixes: - -- Ensure variable is set if exc_info is falsey -- Catch and log handler exceptions in :code:`events.trigger` -- Add debug log for static file paths -- Don't check origin on token-authenticated requests -- Remove leftover print statement -- Fix highlighting of Python code blocks -- :code:`json_errors` should be outermost decorator on API handlers -- Fix remove old nbserver info files -- Fix notebook mime type on download links -- Fix carriage symbol behavior -- Fix terminal styles -- Update dead links in docs -- If kernel is broken, start a new session -- Include cross-origin check when allowing login URL redirects - -Other improvements: - -- Allow JSON output data with mime type ``application/*+json`` -- Allow kernelspecs to have spaces in them for backward compat -- Allow websocket connections from scripts -- Allow :code:`None` for post_save_hook -- Upgrade CodeMirror to 5.21 -- Upgrade xterm to 2.1.0 -- Docs for using comms -- Set :code:`dirty` flag when output arrives -- Set :code:`ws-url` data attribute when accessing a notebook terminal -- Add base aliases for nbextensions -- Include :code:`@` operator in CodeMirror IPython mode -- Extend mathjax_url docstring -- Load nbextension in predictable order -- Improve the error messages for nbextensions -- Include cross-origin check when allowing login URL redirects - -See the 4.3 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ involved in this release. - - -.. _release-4.2.3: - -4.2.3 ------ - -4.2.3 is a small bugfix release on 4.2. - - Highlights: - -- Fix regression in 4.2.2 that delayed loading custom.js - until after ``notebook_loaded`` and ``app_initialized`` events have fired. -- Fix some outdated docs and links. - -.. seealso:: - - 4.2.3 `on GitHub `__. - -.. _release-4.2.2: - -4.2.2 ------ - -4.2.2 is a small bugfix release on 4.2, with an important security fix. -All users are strongly encouraged to upgrade to 4.2.2. - - Highlights: - -- **Security fix**: CVE-2016-6524, where untrusted latex output - could be added to the page in a way that could execute javascript. -- Fix missing POST in OPTIONS responses. -- Fix for downloading non-ascii filenames. -- Avoid clobbering ssl_options, so that users can specify more detailed SSL - configuration. -- Fix inverted load order in nbconfig, so user config has highest priority. -- Improved error messages here and there. - -.. seealso:: - - 4.2.2 `on GitHub `__. - -.. _release-4.2.1: - -4.2.1 ------ - -4.2.1 is a small bugfix release on 4.2. Highlights: - -- Compatibility fixes for some versions of ipywidgets -- Fix for ignored CSS on Windows -- Fix specifying destination when installing nbextensions - -.. seealso:: - - 4.2.1 `on GitHub `__. - -.. _release-4.2.0: - -4.2.0 ------ - -Release 4.2 adds a new API for enabling and installing extensions. -Extensions can now be enabled at the system-level, rather than just per-user. -An API is defined for installing directly from a Python package, as well. - -.. seealso:: - - :doc:`./examples/Notebook/Distributing Jupyter Extensions as Python Packages` - - -Highlighted changes: - -- Upgrade MathJax to 2.6 to fix vertical-bar appearing on some equations. -- Restore ability for notebook directory to be root (4.1 regression) -- Large outputs are now throttled, reducing the ability of output floods to - kill the browser. -- Fix the notebook ignoring cell executions while a kernel is starting by - queueing the messages. -- Fix handling of url prefixes (e.g. JupyterHub) in terminal and edit pages. -- Support nested SVGs in output. - -And various other fixes and improvements. - -.. _release-4.1.0: - -4.1.0 ------ - -Bug fixes: - -- Properly reap zombie subprocesses -- Fix cross-origin problems -- Fix double-escaping of the base URL prefix -- Handle invalid unicode filenames more gracefully -- Fix ANSI color-processing -- Send keepalive messages for web terminals -- Fix bugs in the notebook tour - -UI changes: - -- Moved the cell toolbar selector into the *View* menu. Added a button that - triggers a "hint" animation to the main toolbar so users can find the new - location. (Click here to see a `screencast `__ ) - - .. image:: /_static/images/cell-toolbar-41.png - -- Added *Restart & Run All* to the *Kernel* menu. Users can also bind it to a - keyboard shortcut on action ``restart-kernel-and-run-all-cells``. -- Added multiple-cell selection. Users press ``Shift-Up/Down`` or ``Shift-K/J`` - to extend selection in command mode. Various actions such as cut/copy/paste, - execute, and cell type conversions apply to all selected cells. - - .. image:: /_static/images/multi-select-41.png - -- Added a command palette for executing Jupyter actions by name. Users press - ``Cmd/Ctrl-Shift-P`` or click the new command palette icon on the toolbar. - - .. image:: /_static/images/command-palette-41.png - -- Added a *Find and Replace* dialog to the *Edit* menu. Users can also press - ``F`` in command mode to show the dialog. - - .. image:: /_static/images/find-replace-41.png - -Other improvements: - -- Custom KernelManager methods can be Tornado coroutines, allowing async - operations. -- Make clearing output optional when rewriting input with - ``set_next_input(replace=True)``. -- Added support for TLS client authentication via ``--NotebookApp.client-ca``. -- Added tags to ``jupyter/notebook`` releases on DockerHub. ``latest`` - continues to track the master branch. - -See the 4.1 milestone on GitHub for a complete list of -`issues `__ -and `pull requests `__ handled. - -4.0.x ------ - -4.0.6 -***** - -- fix installation of mathjax support files -- fix some double-escape regressions in 4.0.5 -- fix a couple of cases where errors could prevent opening a notebook - -4.0.5 -***** - -Security fixes for maliciously crafted files. - -- `CVE-2015-6938 `__: malicious filenames -- `CVE-2015-7337 `__: malicious binary files in text editor. - -Thanks to Jonathan Kamens at Quantopian and Juan Broullón for the reports. - - -4.0.4 -***** - -- Fix inclusion of mathjax-safe extension - -4.0.2 -***** - -- Fix launching the notebook on Windows -- Fix the path searched for frontend config - - -4.0.0 -***** - -First release of the notebook as a standalone package. diff --git a/docs/source/conf.py b/docs/source/conf.py index 6987abb57..f52289963 100644 --- a/docs/source/conf.py +++ b/docs/source/conf.py @@ -15,6 +15,7 @@ import sys import os import shlex +import shutil # If extensions (or modules to document with autodoc) are in another directory, # add these directories to sys.path here. If the directory is relative to the @@ -32,6 +33,9 @@ here = os.path.abspath(os.path.dirname(__file__)) repo_root = os.path.dirname(os.path.dirname(here)) sys.path.insert(0, repo_root) +# Copy the markdown file here +shutil.copy(os.path.join(repo_root, "CHANGELOG.md"), os.path.join(here, "changelog.md")) + print("repo_root") print("=====================") print(repo_root) @@ -47,7 +51,6 @@ for item in sys.path: # configuration options if os.environ.get('READTHEDOCS', ''): - # Readthedocs doesn't run our Makefile, so we do this to force it to generate # the config docs. with open('../autogen_config.py') as f: @@ -70,8 +73,12 @@ extensions = [ 'IPython.sphinxext.ipython_console_highlighting', 'nbsphinx', 'sphinxcontrib_github_alt', + 'myst_parser' ] +myst_enable_extensions = ["html_image"] +myst_update_mathjax = False + # Add any paths that contain templates here, relative to this directory. templates_path = ['_templates']