v4.6.2-1

JupyterLab Desktop v4.6.2-1

This is a first release in 2 years, catching up with the latest JupyterLab 4.6.2 and a stable, supported Electron version. This release includes patches for security vulnerabilities due to be disclosed soon. All users are recommended upgrade, but please bear with us as we exercise the revamped release process for the first time in a while - it is likely that some installers will only become available a bit later.

Many thanks to @notluquis for pushing on the revival.

What's Changed

• Attempt to fix lab sync workflow by @krassowski in #898
• Run sync job in the sync environment by @krassowski in #899
• Improve lab version sync action by @krassowski in #901
• Only upload changed files by @krassowski in #902
• Fix sync workflow for filtering files by @krassowski in #904
• Fix sync file upload by @krassowski in #906
• Bump braces from 3.0.2 to 3.0.3 by @dependabot[bot] in #838
• Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #915
• Bump actions/setup-node from 4 to 5 by @dependabot[bot] in #916
• Bump fast-xml-parser from 4.2.5 to 5.7.0 by @dependabot[bot] in #849
• Add review guidance by @krassowski in #921
• Update to JupyterLab v4.5.7 by @jupyterlab-desktop-bot[bot] in #950
• fix: replace node-fetch with Electron net.fetch in main process by @notluquis in #955
• chore: remove vestigial stylelint setup by @notluquis in #959
• feat: add test infrastructure (Vitest + Playwright) by @notluquis in #961
• fix: resolve CodeQL high-severity findings and harden CI by @notluquis in #966
• test: main-process unit coverage with CI-enforced thresholds (C2) by @notluquis in #967
• test: cover cli.ts and env.ts process-spawn branches by @notluquis in #972
• test: characterize the 12 preload contextBridge contracts by @notluquis in #971
• test: Playwright e2e suite (first-run smoke + env-backed welcome) by @notluquis in #976
• Phase 3 e2e: macOS leg and embedded-server isolation by @notluquis in #984
• Phase 3 pre-bump: TypeScript 6 and ESLint 10 flat config by @notluquis in #978
• Phase 3: bump Electron 27 to 42 and adapt the changed APIs by @notluquis in #988
• deps: move js-yaml 4 to 5, with a parse test on the real data by @notluquis in #1000
• build: drop @types/tar, tar 7 ships its own types by @notluquis in #999
• test(e2e): exercise the JupyterLab integration through the labview (cell, widget, UI) by @notluquis in #1001
• Bump lodash from 4.17.21 to 4.18.1 by @dependabot[bot] in #990
• ci: have Dependabot track npm version updates too by @notluquis in #998
• ci: add zizmor static analysis for the workflows by @notluquis in #1016
• ci: open the release PR with gh instead of peter-evans/create-pull-request by @notluquis in #996
• build: replace fs-extra, node-watch, meow and rimraf with Node built-ins by @notluquis in #992
• Address Copilot review on the e2e suite (#984 follow-up) by @notluquis in #986
• Fix dialog title bars and env-switch crash from the Electron 42 / TS6 migration by @notluquis in #1022
• Fix env-select popup placement on narrow windows and dismissal on blur by @notluquis in #1037
• Fix title bar maximize/restore desync and cross-window focus theft by @notluquis in #1038
• ci: build the osx-64 installer on a native Intel runner by @notluquis in #1020
• Fix resize repaint gaps and initial view sizing by @notluquis in #1039
• Harden WebContentsView lifecycle after the Electron 42 migration by @notluquis in #1031
• Make env-switch and initial-load failures visible and recoverable by @notluquis in #1036
• Update to JupyterLab v4.6.2 by @jupyterlab-desktop-bot[bot] in #1059
• Fix Mac build by @krassowski in #1064
• Prettier by @krassowski in #1065
• Update releasing docs and workflows by @krassowski in #1066

New Contributors

• @notluquis made their first contribution in #955

Full Changelog: v4.2.5-1...v4.6.2-1