Voilà turns Jupyter notebooks into standalone web applications
Fix CVE-2024-30265
0.2.x
by @jtpio in https://github.com/voila-dashboards/voila/pull/1004
Full Changelog: https://github.com/voila-dashboards/voila/compare/v0.2.16...v0.2.17
Full Changelog: https://github.com/voila-dashboards/voila/compare/v0.3.7...v0.3.8
Fix CVE-2024-30265
Full Changelog: https://github.com/voila-dashboards/voila/compare/v0.4.3...v0.4.4
Fix CVE-2024-30265
Fix CVE-2024-30265
package.json
#1431 (@jtpio)(GitHub contributors page for this release)
@ClaytonAstrom | @dependabot | @github-actions | @jtpio | @maartenbreddels | @martinRenou | @nbareil | @pre-commit-ci | @SylvainCorlay | @timkpaine | @trungleduc | @Zsailer
(GitHub contributors page for this release)
@ClaytonAstrom | @dependabot | @edublancas | @github-actions | @pre-commit-ci | @trungleduc
jupyterlab-manager
plugins #1396 (@trungleduc)Below are the major highlights in Voila 0.5.0
In 0.5.0, the frontend of Voila is rebuilt from scratch with JupyterLab 4.0 components. The current requirejs
+ nbextensions
approach is replaced by a JupyterLab plugin-based application.
This allows Voila to profit from all the upstream features and improvements.
This is a direct benefit of the new frontend, now Voila will use the same prebuilt extension system as in JupyterLab. The extension assets are loaded from the local path instead of the CDN. This greatly improves the extension compatibility of Voila and avoid making requests to external services. And moreover, we can start creating extensions for Voila in the same fashion as JupyterLab extensions.
In 0.5.0, the logic for rendering cell outputs is switched from relying on nbconvert for handling different mimetypes to relying on JupyterLab mimetype renderers.
This adds support for many custom JupyterLab renderers like jupyterlab-fasta
, vega
, jupyterlab-geojson
...
The default tree page of Voila is now a JupyterLab-based application using the file browser widget.
The jinja-based tree page is still supported, but users need to activate it with the --classic-tree
CLI option, the VoilaConfiguration.classic_tree
config, or ?classic-tree=True
in the query string.
JupyterLab custom themes are supported with the new tree page, for the classic tree page, only the light and dark themes are supported.
By using jupyter-server
2, Voila now supports token authentication, but it is disabled by default.
voila --token notebook.ipynb
voila --token=my-secret-token notebook.ipynb
jupyter_client
< 7.4.4 is no longer supported.