Ipylab

Latest version: v1.0.0

Safety actively analyzes 682457 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 2

0.5.0

([Full Changelog](https://github.com/jtpio/ipylab/compare/0.4.1...1c614527d2647906a2d1e91c71b698b72ae6643b))

Maintenance and upkeep improvements

- Update dependencies [74](https://github.com/jtpio/ipylab/pull/74) ([jtpio](https://github.com/jtpio))
- Adopt the Jupyter Releaser [73](https://github.com/jtpio/ipylab/pull/73) ([jtpio](https://github.com/jtpio))
- Add a Binder on PR workflow [72](https://github.com/jtpio/ipylab/pull/72) ([jtpio](https://github.com/jtpio))
- Re-enable the Windows install check on 3.6 [71](https://github.com/jtpio/ipylab/pull/71) ([jtpio](https://github.com/jtpio))
- Update to Jupyter Packaging 0.10 [69](https://github.com/jtpio/ipylab/pull/69) ([jtpio](https://github.com/jtpio))

Other merged PRs

- Bump tar from 6.1.5 to 6.1.11 [68](https://github.com/jtpio/ipylab/pull/68) ([dependabot](https://github.com/dependabot))
- Bump path-parse from 1.0.6 to 1.0.7 [67](https://github.com/jtpio/ipylab/pull/67) ([dependabot](https://github.com/dependabot))
- Bump tar from 6.1.0 to 6.1.5 [66](https://github.com/jtpio/ipylab/pull/66) ([dependabot](https://github.com/dependabot))
- Bump ws from 7.4.4 to 7.5.0 [64](https://github.com/jtpio/ipylab/pull/64) ([dependabot](https://github.com/dependabot))
- Run CI on node 12 [63](https://github.com/jtpio/ipylab/pull/63) ([jtpio](https://github.com/jtpio))
- Include the style/style.js file in the package [62](https://github.com/jtpio/ipylab/pull/62) ([vidartf](https://github.com/vidartf))
- Bump postcss from 7.0.35 to 7.0.36 [61](https://github.com/jtpio/ipylab/pull/61) ([dependabot](https://github.com/dependabot))
- Bump normalize-url from 4.5.0 to 4.5.1 [60](https://github.com/jtpio/ipylab/pull/60) ([dependabot](https://github.com/dependabot))
- Bump browserslist from 4.16.3 to 4.16.6 [58](https://github.com/jtpio/ipylab/pull/58) ([dependabot](https://github.com/dependabot))
- Bump hosted-git-info from 2.8.8 to 2.8.9 [57](https://github.com/jtpio/ipylab/pull/57) ([dependabot](https://github.com/dependabot))
- Update to ipytree 0.2 on Binder [56](https://github.com/jtpio/ipylab/pull/56) ([jtpio](https://github.com/jtpio))
- Update dependencies [55](https://github.com/jtpio/ipylab/pull/55) ([jtpio](https://github.com/jtpio))
- Rename master -> main on CI [54](https://github.com/jtpio/ipylab/pull/54) ([jtpio](https://github.com/jtpio))

Contributors to this release

([GitHub contributors page for this release](https://github.com/jtpio/ipylab/graphs/contributors?from=2021-01-12&to=2021-09-06&type=c))

[dependabot](https://github.com/search?q=repo%3Ajtpio%2Fipylab+involves%3Adependabot+updated%3A2021-01-12..2021-09-06&type=Issues) | [github-actions](https://github.com/search?q=repo%3Ajtpio%2Fipylab+involves%3Agithub-actions+updated%3A2021-01-12..2021-09-06&type=Issues) | [jtpio](https://github.com/search?q=repo%3Ajtpio%2Fipylab+involves%3Ajtpio+updated%3A2021-01-12..2021-09-06&type=Issues) | [vidartf](https://github.com/search?q=repo%3Ajtpio%2Fipylab+involves%3Avidartf+updated%3A2021-01-12..2021-09-06&type=Issues)

0.4.1

- Fix jstargets in setup.py: https://github.com/jtpio/ipylab/pull/53


Making a new release of ipylab

The extension can be published to `PyPI` and `npm` manually or using the [Jupyter Releaser](https://github.com/jupyter-server/jupyter_releaser).

Manual release

Python package

This extension can be distributed as Python packages. All of the Python
packaging instructions are in the `pyproject.toml` file to wrap your extension in a
Python package. Before generating a package, you first need to install some tools:

bash
pip install build twine hatch


Bump the version using `hatch`. By default this will create a tag.
See the docs on [hatch-nodejs-version](https://github.com/agoose77/hatch-nodejs-version#semver) for details.

bash
hatch version <new-version>


Make sure to clean up all the development files before building the package:

bash
jlpm clean:all


You could also clean up the local git repository:

bash
git clean -dfX


To create a Python source package (`.tar.gz`) and the binary package (`.whl`) in the `dist/` directory, do:

bash
python -m build


> `python setup.py sdist bdist_wheel` is deprecated and will not work for this package.

Then to upload the package to PyPI, do:

bash
twine upload dist/*


NPM package

To publish the frontend part of the extension as a NPM package, do:

bash
npm login
npm publish --access public


Automated releases with the Jupyter Releaser

The extension repository should already be compatible with the Jupyter Releaser.

Check out the [workflow documentation](https://jupyter-releaser.readthedocs.io/en/latest/get_started/making_release_from_repo.html) for more information.

Here is a summary of the steps to cut a new release:

- Add tokens to the [Github Secrets](https://docs.github.com/en/actions/security-guides/encrypted-secrets) in the repository:
- `ADMIN_GITHUB_TOKEN` (with "public_repo" and "repo:status" permissions); see the [documentation](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token)
- `NPM_TOKEN` (with "automation" permission); see the [documentation](https://docs.npmjs.com/creating-and-viewing-access-tokens)
- Set up PyPI

<details><summary>Using PyPI trusted publisher (modern way)</summary>

- Set up your PyPI project by [adding a trusted publisher](https://docs.pypi.org/trusted-publishers/adding-a-publisher/)
- The _workflow name_ is `publish-release.yml` and the _environment_ should be left blank.
- Ensure the publish release job as `permissions`: `id-token : write` (see the [documentation](https://docs.pypi.org/trusted-publishers/using-a-publisher/))

</details>

<details><summary>Using PyPI token (legacy way)</summary>

- If the repo generates PyPI release(s), create a scoped PyPI [token](https://packaging.python.org/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#saving-credentials-on-github). We recommend using a scoped token for security reasons.

- You can store the token as `PYPI_TOKEN` in your fork's `Secrets`.

- Advanced usage: if you are releasing multiple repos, you can create a secret named `PYPI_TOKEN_MAP` instead of `PYPI_TOKEN` that is formatted as follows:

text
owner1/repo1,token1
owner2/repo2,token2


If you have multiple Python packages in the same repository, you can point to them as follows:

text
owner1/repo1/path/to/package1,token1
owner1/repo1/path/to/package2,token2


</details>

- Go to the Actions panel
- Run the "Step 1: Prep Release" workflow
- Check the draft changelog
- Run the "Step 2: Publish Release" workflow

Publishing to `conda-forge`

If the package is not on conda forge yet, check the documentation to learn how to add it: https://conda-forge.org/docs/maintainer/adding_pkgs.html

Otherwise a bot should pick up the new version publish to PyPI, and open a new PR on the feedstock repository automatically.

Page 2 of 2

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.