Nebari

Latest version: v2025.3.1

Safety actively analyzes 723217 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 8

2025.3.1

Not secure
What's Changed
- fix buffer full deadlock by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2929
- support KubeSpawner profile_options by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2937
- fix ansi color reset bug by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2970
- allow eks_public_access_cidrs to be optionally set in nebari-config.yaml by dcmcand in https://github.com/nebari-dev/nebari/pull/2963
- Add option to customize keycloak themes by viniciusdc in https://github.com/nebari-dev/nebari/pull/2469
- support updated kubespawner by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2938
- Filter environments by user access by soapy1 in https://github.com/nebari-dev/nebari/pull/2940
- loosen dependency requirement pins for nebari by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2984

**Full Changelog**: https://github.com/nebari-dev/nebari/compare/2025.2.1...2025.3.1

2025.2.1

Not secure
> NOTE: In this release, we have updated our maximum supported Kubernetes version from

2024.12.1

Not secure
> NOTE: Support for DigitalOcean has been removed in this release. If you plan to deploy Nebari on DigitalOcean, you first need to independently create a Kubernetes cluster and then use the `existing` deployment option.

What's Changed
- Precommit typos by blakerosenthal in https://github.com/nebari-dev/nebari/pull/2731
- fix typo in KubernetesCredentials by blakerosenthal in https://github.com/nebari-dev/nebari/pull/2729
- handle branch rename from develop to main in github actions by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2748
- remove do integration test by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2765
- Remove old develop branch references after default branch renaming by marcelovilla in https://github.com/nebari-dev/nebari/pull/2769
- fix CICD issue with pre-commit action by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2775
- fix CHECK_URL in kuberhealthy checks to respect namespaces by dcmcand in https://github.com/nebari-dev/nebari/pull/2779
- remove duplicate GCPPrivateClusterConfig class by dcmcand in https://github.com/nebari-dev/nebari/pull/2786
- Fix hub variable for jupyterhub_dashboard by kenafoster in https://github.com/nebari-dev/nebari/pull/2721
- Fix Pytest Tests failing on PRs updating src by joneszc in https://github.com/nebari-dev/nebari/pull/2790
- Add ability to add overrides to jhub-apps config by aktech in https://github.com/nebari-dev/nebari/pull/2754
- Remove leftover develop reference by marcelovilla in https://github.com/nebari-dev/nebari/pull/2792
- fix bug where check_immutable_fields throws error with old version of Nebari by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2796
- Fix immutable field validation error when a sub-schema is not Pydantic by kenafoster in https://github.com/nebari-dev/nebari/pull/2797
- Address issue with AWS instance type schema by viniciusdc in https://github.com/nebari-dev/nebari/pull/2787
- add broken note by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2802
- Fix release notes formatting to restore docs syncing functionality by marcelovilla in https://github.com/nebari-dev/nebari/pull/2809
- Refactor role creation for upgrade command path by viniciusdc in https://github.com/nebari-dev/nebari/pull/2795
- add test workflow for upgrade by pmeier in https://github.com/nebari-dev/nebari/pull/2780
- Add config option to enable the encryption of AWS EKS secrets by joneszc in https://github.com/nebari-dev/nebari/pull/2788
- remove digital ocean tests by dcmcand in https://github.com/nebari-dev/nebari/pull/2813
- Python3 13 upgrade dependencies by dcmcand in https://github.com/nebari-dev/nebari/pull/2823
- Test support for Python 3.13 in CI by aktech in https://github.com/nebari-dev/nebari/pull/2774
- remove unmaintained nix files by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2831
- allow passing X.XX or X.XX.XX as k8s versions by dcmcand in https://github.com/nebari-dev/nebari/pull/2840
- Remove explicit branch inputs from cloud integration test workflows in GHA by marcelovilla in https://github.com/nebari-dev/nebari/pull/2837
- Allow overriding of keycloak root credentials for `2024.11.1` upgrade path by viniciusdc in https://github.com/nebari-dev/nebari/pull/2843
- Added security group rule descriptions by jcbolling in https://github.com/nebari-dev/nebari/pull/2850
- Set `launch_template.ami_id` attrs to private by viniciusdc in https://github.com/nebari-dev/nebari/pull/2842
- attempt to address paramiko connection errors by viniciusdc in https://github.com/nebari-dev/nebari/pull/2811
- specify terraform registry for providers not in opentofu registry by dcmcand in https://github.com/nebari-dev/nebari/pull/2852
- Disable AWS `launch_template` from nebari-config schema by viniciusdc in https://github.com/nebari-dev/nebari/pull/2856
- Remove Digital Ocean references by marcelovilla in https://github.com/nebari-dev/nebari/pull/2838
- Use tofu binary instead of terraform one by marcelovilla in https://github.com/nebari-dev/nebari/pull/2773
- Add 2024.11.1 release notes and bump version by viniciusdc in https://github.com/nebari-dev/nebari/pull/2859
- Disable `jupyterlab-jhub-apps` extension when jhub-apps is disabled by krassowski in https://github.com/nebari-dev/nebari/pull/2804
- Validate instance types for GCP by blakerosenthal in https://github.com/nebari-dev/nebari/pull/2730
- update gcp instance validation by dcmcand in https://github.com/nebari-dev/nebari/pull/2875

New Contributors
- jcbolling made their first contribution in https://github.com/nebari-dev/nebari/pull/2850

**Full Changelog**: https://github.com/nebari-dev/nebari/compare/2024.11.1...2024.12.1

2024.11.1

Not secure
> NOTE: This hotfix addresses several major bugs identified in the 2024.9.1 release. For a detailed overview, please refer to the related discussion at 2798. Users should upgrade directly from 2024.7.1 to 2024.11.1.

What's Changed

- fix `CHECK_URL` in kuberhealthy checks to respect namespaces by dcmcand in https://github.com/nebari-dev/nebari/pull/2779
- fix bug where `check_immutable_fields` throws error with old version of Nebari by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2796
- Fix immutable field validation error when a sub-schema is not Pydantic by kenafoster in https://github.com/nebari-dev/nebari/pull/2797
- Address issue with AWS instance type schema by viniciusdc in https://github.com/nebari-dev/nebari/pull/2787
- Add broken note by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2802
- Refactor role creation for upgrade command path by viniciusdc in https://github.com/nebari-dev/nebari/pull/2795
- Allow overriding of keycloak root credentials for 2024.11.1 upgrade path 2843
- Disable AWS `launch_template` from nebari-config schema 2856

**Full Changelog**: https://github.com/nebari-dev/nebari/compare/2024.9.1...2024.11.1

2024.9.1

Not secure
> WARNING: This release was later found to have unresolved issues described further in [issue 2798](https://github.com/nebari-dev/nebari/issues/2798). We have marked this release as broken on conda-forge and yanked it on PyPI. One of the bugs prevents any upgrade from 2024.9.1 to 2024.11.1. Users should skip this release entirely and upgrade directly from 2024.7.1 to 2024.11.1.

> WARNING: This release changes how group directories are mounted in JupyterLab pods: only groups with specific permissions will have their directories mounted. If you rely on custom group mounts, we strongly recommend running `nebari upgrade` before updating. This will prompt you to confirm how Nebari should handle your groups—either keep them mounted or allow unmounting. **No data will be lost**, and you can reverse this anytime.

What's Changed

- Fix: KeyValueDict error when deploying to existing infrastructure by oftheaxe in https://github.com/nebari-dev/nebari/pull/2560
- Remove unused AWS terraform modules by marcelovilla in https://github.com/nebari-dev/nebari/pull/2623
- Upgrade Hashicorp Vault action by aktech in https://github.com/nebari-dev/nebari/pull/2616
- Pass `oauth_no_confirm=True` to jhub-apps by krassowski in https://github.com/nebari-dev/nebari/pull/2631
- Use Rook Ceph for Jupyterhub and Conda Store drives by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2541
- Fix typo in guided init by marcelovilla in https://github.com/nebari-dev/nebari/pull/2635
- Action var tests off by BrianCashProf in https://github.com/nebari-dev/nebari/pull/2632
- add a "moved" block to account for refactored terraform code without deleting/recreating NFS disks by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2639
- Use Helm Chart for JupyterHub 5.1.0 by krassowski in https://github.com/nebari-dev/nebari/pull/2661
- Add a how to test section to PR template by marcelovilla in https://github.com/nebari-dev/nebari/pull/2659
- Support disallowed nebari config changes by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2660
- Fix converted init command in guided init by marcelovilla in https://github.com/nebari-dev/nebari/pull/2666
- Add initial uptime metrics by dcmcand in https://github.com/nebari-dev/nebari/pull/2609
- Refactor and extend Playwright tests by viniciusdc in https://github.com/nebari-dev/nebari/pull/2644
- Remove Cypress remaining tests/files by viniciusdc in https://github.com/nebari-dev/nebari/pull/2672
- refactor jupyterhub user token retrieval within pytest by viniciusdc in https://github.com/nebari-dev/nebari/pull/2645
- add moved block to account for terraform changes on AWS only by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2673
- Refactor shared group mounting using RBAC by viniciusdc in https://github.com/nebari-dev/nebari/pull/2593
- Dashboard fix usage report by kenafoster in https://github.com/nebari-dev/nebari/pull/2671
- only capture stdout not stdout+stderr when capture_output=True by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2704
- revert breaking change to azure deployment test by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2706
- Refactor GitOps approach prompt flow in guided init by marcelovilla in https://github.com/nebari-dev/nebari/pull/2269
- template the kustomization.yaml file by dcmcand in https://github.com/nebari-dev/nebari/pull/2667
- Fix auto-provisioned GitHub repo description after guided init by marcelovilla in https://github.com/nebari-dev/nebari/pull/2708
- Add amazon_web_services configuration option to specify EKS cluster api server endpoint access setting by joneszc in https://github.com/nebari-dev/nebari/pull/2618
- Use Google Auth and Cloud Python APIs instead of `gcloud` CLI by swastik959 in https://github.com/nebari-dev/nebari/pull/2083
- fix broken links in README.md, SECURITY.md, and CONTRIBUTING.md by blakerosenthal in https://github.com/nebari-dev/nebari/pull/2720
- add test for changing dicts and lists by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2724
- 2024.9.1 upgrade notes by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2726
- Add Support for AWS Launch Template Configuration by viniciusdc in https://github.com/nebari-dev/nebari/pull/2668
- Run terraform init before running terraform show by marcelovilla in https://github.com/nebari-dev/nebari/pull/2734
- Release Process Checklist Updates by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2727
- Test implicit aiohttp's TCP to HTTP connector change by viniciusdc in https://github.com/nebari-dev/nebari/pull/2741
- remove comments by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2743
- Deploy Rook Ceph Helm only when Ceph FS Needed by kenafoster in https://github.com/nebari-dev/nebari/pull/2742
- fix group mounting paths by viniciusdc in https://github.com/nebari-dev/nebari/pull/2738
- Add compatibility prompt and notes for shared group mounting by viniciusdc in https://github.com/nebari-dev/nebari/pull/2739

New Contributors

- oftheaxe made their first contribution in https://github.com/nebari-dev/nebari/pull/2560
- joneszc made their first contribution in https://github.com/nebari-dev/nebari/pull/2618
- swastik959 made their first contribution in https://github.com/nebari-dev/nebari/pull/2083
- blakerosenthal made their first contribution in https://github.com/nebari-dev/nebari/pull/2720

**Full Changelog**: https://github.com/nebari-dev/nebari/compare/2024.7.1...2024.9.1

2024.7.1

Not secure
> NOTE: Support for Digital Ocean deployments using CLI commands and related Terraform modules is being deprecated. Although Digital Ocean will no longer be directly supported in future releases, you can still deploy to Digital Ocean infrastructure using the current `existing` deployment option.

What's Changed

- Enable authentication by default in jupyter-server by krassowski in https://github.com/nebari-dev/nebari/pull/2288
- remove dns sleep by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2550
- Conda-store permissions v2 + load roles from keycloak by aktech in https://github.com/nebari-dev/nebari/pull/2531
- Restrict public access and add bucket encryption using cmk by dcmcand in https://github.com/nebari-dev/nebari/pull/2525
- Add overwrite to AWS coredns addon by dcmcand in https://github.com/nebari-dev/nebari/pull/2538
- Add a default roles at initialisation by aktech in https://github.com/nebari-dev/nebari/pull/2546
- Hide gallery section if no exhibits are configured by krassowski in https://github.com/nebari-dev/nebari/pull/2549
- Add note about ~/.bash_profile by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2575
- Expose jupyterlab-gallery branch and depth options by krassowski in https://github.com/nebari-dev/nebari/pull/2556
- 2566 Upgrade Jupyterhub ssh image by arjxn-py in https://github.com/nebari-dev/nebari/pull/2576
- Stop copying unnecessary files into user home directory by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2578
- Include deprecation notes for init/deploy subcommands by viniciusdc in https://github.com/nebari-dev/nebari/pull/2582
- Only download jar if file doesn't exist by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2588
- Remove unnecessary experimental flag by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2606
- Add typos spell checker to pre-commit by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2568
- Enh 2451 skip conditionals by BrianCashProf in https://github.com/nebari-dev/nebari/pull/2569
- Improve codespell support: adjust and concentrate config to pyproject.toml and fix more typos by yarikoptic in https://github.com/nebari-dev/nebari/pull/2583
- Move codespell config to pyproject.toml only by Adam-D-Lewis in https://github.com/nebari-dev/nebari/pull/2611
- Add `depends_on` for bucket encryption by viniciusdc in https://github.com/nebari-dev/nebari/pull/2615

New Contributors

- BrianCashProf made their first contribution in https://github.com/nebari-dev/nebari/pull/2569
- yarikoptic made their first contribution in https://github.com/nebari-dev/nebari/pull/2583

**Full Changelog**: https://github.com/nebari-dev/nebari/compare/2024.6.1...2024.7.1

Page 1 of 8

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.