[Snyk] Fix for 2 vulnerabilities#367
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-17909104 - https://snyk.io/vuln/SNYK-JS-TAR-17909225
|
This is a major upgrade to Jupyter Notebook v7, which represents a fundamental architectural shift. The frontend is now built using JupyterLab components, leading to significant breaking changes, especially for existing customizations and extensions. Key Breaking Changes:
Migration: For users who depend on extensions not yet available for Notebook 7, the Source: Jupyter Notebook 7 Migration Guide [7, 11] Recommendation: This upgrade requires a full audit of any existing Jupyter Notebook extensions and customizations. Verify that all necessary extensions have a compatible version for Notebook 7 before merging. If not, plan for a migration strategy, which may involve using
|
Snyk has created this PR to fix 2 vulnerabilities in the yarn dependencies of this project.
Snyk changed the following file(s):
packages/tree-extension/package.jsonNote for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the
.yarn/cache/directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to runyarnto update the contents of the./yarn/cachedirectory.If you are not using zero-install you can ignore this as your flow should likely be unchanged.
Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-TAR-17909104
SNYK-JS-TAR-17909225
Breaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Uncaught Exception