Support Mistune 3.0

[blink1073]

Mistune 3.0 is changing some of the Renderer APIs in its alpha releases. For now we are pinning to <3 (#1808), but we should add compatibility once the API settles down.

[blink1073]

Initial attempt was in #1807

[TiagodePAlves]

Didn't know you were handling this already, so I ended up making another PR #1820.

[blink1073]

No worries, thanks for working on it! I'll close my PR.

[anick16]

Hi guys, do we have any expected date of release for this change?
I am using the latest nbconvert 6.5.0 which has hard dependency on mistune 0.8.4. This mistune version has been found with security issue CVE-2022-34749 and fixed in mistune 2.0.3.

[blink1073]

Hi @anick16, we're planning a new release with mistune 2.0 support next week. In the mean time you can use the prerelease as pip install --upgrade --pre nbconvert.

[rikardn]

Version 3 of mistune is now out. Any idea if the pin can be lifted in nbconvert? I could help testing if needed.

[rikardn]

I noticed that the pin on mistune was lifted so I tested and it works fine in my use case. I think this issue could be closed.

[blink1073]

Sounds good, thanks for confirming!