pkgsrc/www/py-notebook/Makefile

39 lines
1.5 KiB
Makefile
Raw Normal View History

# $NetBSD: Makefile,v 1.18 2020/02/06 15:47:32 adam Exp $
DISTNAME= notebook-6.0.3
PKGNAME= ${PYPKGPREFIX}-${DISTNAME}
CATEGORIES= www python
MASTER_SITES= ${MASTER_SITE_PYPI:=n/notebook/}
MAINTAINER= pkgsrc-users@NetBSD.org
2019-07-22 10:42:49 +02:00
HOMEPAGE= https://jupyter.org/
COMMENT= Web-based notebook environment for interactive computing
LICENSE= modified-bsd
DEPENDS+= ${PYPKGPREFIX}-Send2Trash-[0-9]*:../../sysutils/py-Send2Trash
DEPENDS+= ${PYPKGPREFIX}-ipykernel-[0-9]*:../../devel/py-ipykernel
DEPENDS+= ${PYPKGPREFIX}-ipython_genutils-[0-9]*:../../devel/py-ipython_genutils
py-notebook: updated to 6.0.1 6.0.1 - Attempt to re-establish websocket connection to Gateway - Add missing react-dom js to package data 6.0 This is the first major release of the Jupyter Notebook since version 5.0 (March 2017). We encourage users to start trying JupyterLab, which has just announced it's 1.0 release in preparation for a future transition. - Remove Python 2.x support in favor of Python 3.5 and higher. - Multiple accessibility enhancements and bug-fixes. - Multiple translation enhancements and bug-fixes. - Remove deprecated ANSI CSS styles. - Native support to forward requests to Jupyter Gateway(s) (Embedded NB2KG). - Use JavaScript to redirect users to notebook homepage. - Enhanced SSL/TLS security by using PROTOCOL_TLS which selects the highest ssl/tls protocol version available that both the client and server support. When PROTOCOL_TLS is not available use PROTOCOL_SSLv23. - Add ?no_track_activity=1 argument to allow API requests. to not be registered as activity (e.g. API calls by external activity monitors). - Kernels shutting down due to an idle timeout is no longer considered an activity-updating event. - Further improve compatibility with tornado 6 with improved checks for when websockets are closed. - Launch the browser with a local file which redirects to the server address including the authentication token. This prevents another logged-in user from stealing the token from command line arguments and authenticating to the server. The single-use token previously used to mitigate this has been removed. Thanks to Dr. Owain Kenway for suggesting the local file approach. - Respect nbconvert entrypoints as sources for exporters - Update to CodeMirror to 5.37, which includes f-string syntax for Python 3.6. - Update jquery-ui to 1.12 - Execute cells by clicking icon in input prompt. - New "Save as" menu option. - When serving on a loopback interface, protect against DNS rebinding by checking the Host header from the browser. This check can be disabled if necessary by setting NotebookApp.allow_remote_access. (Disabled by default while we work out some Mac issues in :ghissue:3754). - Add kernel_info_timeout traitlet to enable restarting slow kernels. - Add custom_display_host config option to override displayed URL. - Add /metrics endpoint for Prometheus Metrics. - Optimize large file uploads. - Allow access control headers to be overriden in jupyter_notebook_config.py to support greater CORS and proxy configuration flexibility. - Add support for terminals on windows. - Add a "restart and run all" button to the toolbar. - Frontend/extension-config: allow default json files in a .d directory. - Allow setting token via jupyter_token env. - Cull idle kernels using --MappingKernelManager.cull_idle_timeout. - Allow read-only notebooks to be trusted. - Convert JS tests to Selenium. Security Fixes included in previous minor releases of Jupyter Notebook and also included in version 6.0. - Fix Open Redirect vulnerability (CVE-2019-10255) where certain malicious URLs could redirect from the Jupyter login page to a malicious site after a successful login. - Contains a security fix for a cross-site inclusion (XSSI) vulnerability (CVE-2019–9644), where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server. The fix involves setting the X-Content-Type-Options: nosniff header, and applying CSRF checks previously on all non-GET API requests to GET requests to API endpoints and the /files/ endpoint. - Check Host header to more securely protect localhost deployments from DNS rebinding. This is a pre-emptive measure, not fixing a known vulnerability. Use .NotebookApp.allow_remote_access and .NotebookApp.local_hostnames to configure access. - Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been assigned CVE-2018-14041 <https://nvd.nist.gov/vuln/detail/CVE-2018-14041>_. - Contains a security fix preventing malicious directory names from being able to execute javascript. - Contains a security fix preventing nbconvert endpoints from executing javascript with access to the server API. CVE request pending.
2019-08-22 10:23:27 +02:00
DEPENDS+= ${PYPKGPREFIX}-jupyter_client>=5.3.1:../../devel/py-jupyter_client
DEPENDS+= ${PYPKGPREFIX}-jupyter_core>=4.4.0:../../devel/py-jupyter_core
DEPENDS+= ${PYPKGPREFIX}-jinja2-[0-9]*:../../textproc/py-jinja2
DEPENDS+= ${PYPKGPREFIX}-nbconvert-[0-9]*:../../www/py-nbconvert
DEPENDS+= ${PYPKGPREFIX}-nbformat-[0-9]*:../../www/py-nbformat
DEPENDS+= ${PYPKGPREFIX}-prometheus_client-[0-9]*:../../net/py-prometheus_client
py-notebook: updated to 5.5.0 5.5.0 New features: The files list now shows file sizes Add a quit button in the dashboard Display hostname in the terminal when running remotely Add slides exportation/download to the menu Add any extra installed nbconvert exporters to the “Download as” menu Editor: warning when overwriting a file that is modified on disk Display a warning message if cookies are not enabled Basic __version__ reporting for extensions Add NotebookApp.terminals_enabled config option Make buffer time between last modified on disk and last modified on last save configurable Allow binding custom shortcuts for ‘close and halt’ Add description for ‘Trusted’ notification Add settings['activity_sources'] Add an output_updated.OutputArea event Fixing problems: Fixes to improve web accessibility Fixed color contrast issue in tree.less Allow cancelling upload of large files Don’t clear login cookie on requests without cookie Don’t trash files on different device to home dir on Linux Clear waiting asterisks when restarting kernel Fix output prompt when execution_count missing Make the ‘changed on disk’ dialog work when displayed twice Fix going back to root directory with history in notebook list Allow defining keyboard shortcuts for missing actions Prevent default on pageup/pagedown when completer is active Prevent default event handling on new terminal ConfigManager should not write out default values found in the .d directory Fix leak of iopub object in activity monitoring Javascript lint in notebooklist.js Some Javascript syntax fixes Convert native for loop to Array.forEach() Disable cache when downloading nbconvert output Add missing digestmod arg to HMAC Log OSErrors failing to create less-critical files during startup Use powershell on Windows API spec improvements, API handler improvements Set notebook to dirty state after change to kernel metadata Use CSP header to treat served files as belonging to a separate origin Don’t install gettext into builtins Add missing import _ Write notebook.json file atomically Fix clicking with modifiers, page title updates Upgrade jQuery to version 2.2 Upgrade xterm.js to 3.1.0 Upgrade moment.js to 2.19.3 Upgrade CodeMirror to 5.35 “Require” pyzmq>=17
2018-05-11 12:09:55 +02:00
DEPENDS+= ${PYPKGPREFIX}-terminado>=0.8.1:../../www/py-terminado
py-notebook: updated to 6.0.1 6.0.1 - Attempt to re-establish websocket connection to Gateway - Add missing react-dom js to package data 6.0 This is the first major release of the Jupyter Notebook since version 5.0 (March 2017). We encourage users to start trying JupyterLab, which has just announced it's 1.0 release in preparation for a future transition. - Remove Python 2.x support in favor of Python 3.5 and higher. - Multiple accessibility enhancements and bug-fixes. - Multiple translation enhancements and bug-fixes. - Remove deprecated ANSI CSS styles. - Native support to forward requests to Jupyter Gateway(s) (Embedded NB2KG). - Use JavaScript to redirect users to notebook homepage. - Enhanced SSL/TLS security by using PROTOCOL_TLS which selects the highest ssl/tls protocol version available that both the client and server support. When PROTOCOL_TLS is not available use PROTOCOL_SSLv23. - Add ?no_track_activity=1 argument to allow API requests. to not be registered as activity (e.g. API calls by external activity monitors). - Kernels shutting down due to an idle timeout is no longer considered an activity-updating event. - Further improve compatibility with tornado 6 with improved checks for when websockets are closed. - Launch the browser with a local file which redirects to the server address including the authentication token. This prevents another logged-in user from stealing the token from command line arguments and authenticating to the server. The single-use token previously used to mitigate this has been removed. Thanks to Dr. Owain Kenway for suggesting the local file approach. - Respect nbconvert entrypoints as sources for exporters - Update to CodeMirror to 5.37, which includes f-string syntax for Python 3.6. - Update jquery-ui to 1.12 - Execute cells by clicking icon in input prompt. - New "Save as" menu option. - When serving on a loopback interface, protect against DNS rebinding by checking the Host header from the browser. This check can be disabled if necessary by setting NotebookApp.allow_remote_access. (Disabled by default while we work out some Mac issues in :ghissue:3754). - Add kernel_info_timeout traitlet to enable restarting slow kernels. - Add custom_display_host config option to override displayed URL. - Add /metrics endpoint for Prometheus Metrics. - Optimize large file uploads. - Allow access control headers to be overriden in jupyter_notebook_config.py to support greater CORS and proxy configuration flexibility. - Add support for terminals on windows. - Add a "restart and run all" button to the toolbar. - Frontend/extension-config: allow default json files in a .d directory. - Allow setting token via jupyter_token env. - Cull idle kernels using --MappingKernelManager.cull_idle_timeout. - Allow read-only notebooks to be trusted. - Convert JS tests to Selenium. Security Fixes included in previous minor releases of Jupyter Notebook and also included in version 6.0. - Fix Open Redirect vulnerability (CVE-2019-10255) where certain malicious URLs could redirect from the Jupyter login page to a malicious site after a successful login. - Contains a security fix for a cross-site inclusion (XSSI) vulnerability (CVE-2019–9644), where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server. The fix involves setting the X-Content-Type-Options: nosniff header, and applying CSRF checks previously on all non-GET API requests to GET requests to API endpoints and the /files/ endpoint. - Check Host header to more securely protect localhost deployments from DNS rebinding. This is a pre-emptive measure, not fixing a known vulnerability. Use .NotebookApp.allow_remote_access and .NotebookApp.local_hostnames to configure access. - Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been assigned CVE-2018-14041 <https://nvd.nist.gov/vuln/detail/CVE-2018-14041>_. - Contains a security fix preventing malicious directory names from being able to execute javascript. - Contains a security fix preventing nbconvert endpoints from executing javascript with access to the server API. CVE request pending.
2019-08-22 10:23:27 +02:00
DEPENDS+= ${PYPKGPREFIX}-tornado>=5:../../www/py-tornado
DEPENDS+= ${PYPKGPREFIX}-traitlets>=4.2.1:../../devel/py-traitlets
py-notebook: updated to 5.5.0 5.5.0 New features: The files list now shows file sizes Add a quit button in the dashboard Display hostname in the terminal when running remotely Add slides exportation/download to the menu Add any extra installed nbconvert exporters to the “Download as” menu Editor: warning when overwriting a file that is modified on disk Display a warning message if cookies are not enabled Basic __version__ reporting for extensions Add NotebookApp.terminals_enabled config option Make buffer time between last modified on disk and last modified on last save configurable Allow binding custom shortcuts for ‘close and halt’ Add description for ‘Trusted’ notification Add settings['activity_sources'] Add an output_updated.OutputArea event Fixing problems: Fixes to improve web accessibility Fixed color contrast issue in tree.less Allow cancelling upload of large files Don’t clear login cookie on requests without cookie Don’t trash files on different device to home dir on Linux Clear waiting asterisks when restarting kernel Fix output prompt when execution_count missing Make the ‘changed on disk’ dialog work when displayed twice Fix going back to root directory with history in notebook list Allow defining keyboard shortcuts for missing actions Prevent default on pageup/pagedown when completer is active Prevent default event handling on new terminal ConfigManager should not write out default values found in the .d directory Fix leak of iopub object in activity monitoring Javascript lint in notebooklist.js Some Javascript syntax fixes Convert native for loop to Array.forEach() Disable cache when downloading nbconvert output Add missing digestmod arg to HMAC Log OSErrors failing to create less-critical files during startup Use powershell on Windows API spec improvements, API handler improvements Set notebook to dirty state after change to kernel metadata Use CSP header to treat served files as belonging to a separate origin Don’t install gettext into builtins Add missing import _ Write notebook.json file atomically Fix clicking with modifiers, page title updates Upgrade jQuery to version 2.2 Upgrade xterm.js to 3.1.0 Upgrade moment.js to 2.19.3 Upgrade CodeMirror to 5.35 “Require” pyzmq>=17
2018-05-11 12:09:55 +02:00
DEPENDS+= ${PYPKGPREFIX}-zmq>=17.0.0:../../net/py-zmq
USE_LANGUAGES= # none
PYTHON_VERSIONS_INCOMPATIBLE= 27 # py-ipykernel
post-install:
.for name in bundlerextension nbextension notebook serverextension
cd ${DESTDIR}${PREFIX}/bin && \
py-notebook: updated to 6.0.1 6.0.1 - Attempt to re-establish websocket connection to Gateway - Add missing react-dom js to package data 6.0 This is the first major release of the Jupyter Notebook since version 5.0 (March 2017). We encourage users to start trying JupyterLab, which has just announced it's 1.0 release in preparation for a future transition. - Remove Python 2.x support in favor of Python 3.5 and higher. - Multiple accessibility enhancements and bug-fixes. - Multiple translation enhancements and bug-fixes. - Remove deprecated ANSI CSS styles. - Native support to forward requests to Jupyter Gateway(s) (Embedded NB2KG). - Use JavaScript to redirect users to notebook homepage. - Enhanced SSL/TLS security by using PROTOCOL_TLS which selects the highest ssl/tls protocol version available that both the client and server support. When PROTOCOL_TLS is not available use PROTOCOL_SSLv23. - Add ?no_track_activity=1 argument to allow API requests. to not be registered as activity (e.g. API calls by external activity monitors). - Kernels shutting down due to an idle timeout is no longer considered an activity-updating event. - Further improve compatibility with tornado 6 with improved checks for when websockets are closed. - Launch the browser with a local file which redirects to the server address including the authentication token. This prevents another logged-in user from stealing the token from command line arguments and authenticating to the server. The single-use token previously used to mitigate this has been removed. Thanks to Dr. Owain Kenway for suggesting the local file approach. - Respect nbconvert entrypoints as sources for exporters - Update to CodeMirror to 5.37, which includes f-string syntax for Python 3.6. - Update jquery-ui to 1.12 - Execute cells by clicking icon in input prompt. - New "Save as" menu option. - When serving on a loopback interface, protect against DNS rebinding by checking the Host header from the browser. This check can be disabled if necessary by setting NotebookApp.allow_remote_access. (Disabled by default while we work out some Mac issues in :ghissue:3754). - Add kernel_info_timeout traitlet to enable restarting slow kernels. - Add custom_display_host config option to override displayed URL. - Add /metrics endpoint for Prometheus Metrics. - Optimize large file uploads. - Allow access control headers to be overriden in jupyter_notebook_config.py to support greater CORS and proxy configuration flexibility. - Add support for terminals on windows. - Add a "restart and run all" button to the toolbar. - Frontend/extension-config: allow default json files in a .d directory. - Allow setting token via jupyter_token env. - Cull idle kernels using --MappingKernelManager.cull_idle_timeout. - Allow read-only notebooks to be trusted. - Convert JS tests to Selenium. Security Fixes included in previous minor releases of Jupyter Notebook and also included in version 6.0. - Fix Open Redirect vulnerability (CVE-2019-10255) where certain malicious URLs could redirect from the Jupyter login page to a malicious site after a successful login. - Contains a security fix for a cross-site inclusion (XSSI) vulnerability (CVE-2019–9644), where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server. The fix involves setting the X-Content-Type-Options: nosniff header, and applying CSRF checks previously on all non-GET API requests to GET requests to API endpoints and the /files/ endpoint. - Check Host header to more securely protect localhost deployments from DNS rebinding. This is a pre-emptive measure, not fixing a known vulnerability. Use .NotebookApp.allow_remote_access and .NotebookApp.local_hostnames to configure access. - Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been assigned CVE-2018-14041 <https://nvd.nist.gov/vuln/detail/CVE-2018-14041>_. - Contains a security fix preventing malicious directory names from being able to execute javascript. - Contains a security fix preventing nbconvert endpoints from executing javascript with access to the server API. CVE request pending.
2019-08-22 10:23:27 +02:00
${MV} jupyter-${name} jupyter-${name}-${PYVERSSUFFIX} || ${TRUE}
.endfor
.include "../../lang/python/egg.mk"
.include "../../mk/bsd.pkg.mk"