JupyterLab 4.6.2-1

What's new in 4.6.2-1

JupyterLab Desktop v4.6.2-1
This is a first release in 2 years, catching up with the latest JupyterLab 4.6.2 and a stable, supported Electron version. This release includes patches for security vulnerabilities due to be disclosed soon. All users are recommended upgrade, but please bear with us as we exercise the revamped release process for the first time in a while - it is likely that some installers will only become available a bit later.
Many thanks to @notluquis for pushing on the revival.
What's Changed
- Attempt to fix lab sync workflow by @krassowski in #898
- Run sync job in the sync environment by @krassowski in #899
- Improve lab version sync action by @krassowski in #901
- Only upload changed files by @krassowski in #902
- Fix sync workflow for filtering files by @krassowski in #904
- Fix sync file upload by @krassowski in #906
- Bump braces from 3.0.2 to 3.0.3 by @dependabot[bot] in #838
- Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #915
- Bump actions/setup-node from 4 to 5 by @dependabot[bot] in #916
- Bump fast-xml-parser from 4.2.5 to 5.7.0 by @dependabot[bot] in #849
- Add review guidance by @krassowski in #921
- Update to JupyterLab v4.5.7 by @jupyterlab-desktop-bot[bot] in #950
- fix: replace node-fetch with Electron net.fetch in main process by @notluquis in #955
- chore: remove vestigial stylelint setup by @notluquis in #959
- feat: add test infrastructure (Vitest + Playwright) by @notluquis in #961
- fix: resolve CodeQL high-severity findings and harden CI by @notluquis in #966
- test: main-process unit coverage with CI-enforced thresholds (C2) by @notluquis in #967
- test: cover cli.ts and env.ts process-spawn branches by @notluquis in #972
- test: characterize the 12 preload contextBridge contracts by @notluquis in #971
- test: Playwright e2e suite (first-run smoke + env-backed welcome) by @notluquis in #976
- Phase 3 e2e: macOS leg and embedded-server isolation by @notluquis in #984
- Phase 3 pre-bump: TypeScript 6 and ESLint 10 flat config by @notluquis in #978
- Phase 3: bump Electron 27 to 42 and adapt the changed APIs by @notluquis in #988
- deps: move js-yaml 4 to 5, with a parse test on the real data by @notluquis in #1000
- build: drop @types/tar, tar 7 ships its own types by @notluquis in #999
- test(e2e): exercise the JupyterLab integration through the labview (cell, widget, UI) by @notluquis in #1001
- Bump lodash from 4.17.21 to 4.18.1 by @dependabot[bot] in #990 …

Full release notes »