jupyter-server-proxy is a package available on [PyPI][] and [conda-forge][].
These are instructions on how to make a release.
Pre-requisites
Push rights to [github.com/jupyterhub/jupyter-server-proxy][]
Push rights to [conda-forge/jupyter-server-proxy-feedstock][]
Steps to make a release
Create a PR updating labextension/yarn.lock and continue only
when its merged.
This helps us avoid leaving known vulnerabilities are unfixed. To do this,
delete the file and manually perform the the build dist step in the
.github/workflows/publish.yaml workflow's build job as summarized below.
rm labextension/yarn.lock
pip install --upgrade pip build
pyproject-build
Create a PR updating docs/source/changelog.md with [github-activity][] and
continue only when its merged.
Checkout main and make sure it is up to date.
git checkout main
git fetch origin main
git reset --hard origin/main
Update the version, make commits, and push a git tag with tbump.
pip install tbump
tbump --dry-run ${VERSION}
run
tbump ${VERSION}
Following this, the [CI system][] will build and publish a release.
Reset the version back to dev, e.g. 4.0.1.dev0 after releasing 4.0.0.
... (truncated)
Commits
230188c Merge pull request #400 from consideRatio/pr/refreeze-yarn-lock
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps jupyter-server-proxy from 3.2.2 to 4.0.0.
Changelog
Sourced from jupyter-server-proxy's changelog.
... (truncated)
Commits
230188c
Merge pull request #400 from consideRatio/pr/refreeze-yarn-lock829e850
labextension: refreeze yarn.lock8b72874
Bump to 4.0.0b85df45
Use semver2 version format9cfb5b9
Merge pull request #399 from consideRatio/pr/add-changelog-for-4.0.0-and-3.2.2448ed4c
Update date53b35f1
Merge pull request #398 from consideRatio/pr/docs-windows-supportc5c4f5c
Add PR to changelog9b1386a
Fix English grammar4e278d8
Add changelog for 4.0.0, and 3.2.2 retroactivelyDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)