Jupyterhub and JQuery

Vladimir Ivannikov

unread,

Nov 17, 2020, 9:43:55 AM11/17/20

to Project Jupyter

Hello colleagues.
I'm using The Littlest JupyterHub.
Recently received a notice from our security team that we are using an outdated version of jQuery. The jQuery (). Jquery command in the web interface console showed that the version we are using is jQuery 3.4.1
Our Security Group requires jQuery version <3.4.5
I updated JupyterHub according to the guide from the official site. The jQuery version hasn't changed.
Can you please tell me if it is possible to upgrade jQuery to version 3.4.5 or higher? Or is it impossible?

Vladimir Ivannikov

unread,

Nov 18, 2020, 9:48:42 AM11/18/20

to Project Jupyter

Has no one faced such a problem before me?

вторник, 17 ноября 2020 г. в 17:43:55 UTC+3, Vladimir Ivannikov:

Matthias Bussonnier

unread,

Nov 18, 2020, 12:01:31 PM11/18/20

to jup...@googlegroups.com

I can see jquery being updated on sept 14th:

commit 80ad455fc7015d92c15800df90d66b9464de4756
Author: Forest Anderson <forestkz...@gmail.com>
Date: Mon Sep 14 13:01:27 2020 -0400

Upgraded jquery dep

diff --git a/package.json b/package.json
index 8039d007..fba009a5 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
"dependencies": {
"bootstrap": "^3.4.1",
"font-awesome": "^4.7.0",
- "jquery": "^3.3.1",
+ "jquery": "^3.5.1",
"moment": "^2.24.0",
"requirejs": "^2.3.6"
}

Which should be in the latest release. There is likely either 1) a
caching issue.
or 2) the jquery you see is not from jupyterhub, but from jupyter
notebook (remember hub is mostly a proxy, so you end up seeing
jupyterhub dependency only on login/admin pages.)

2 seem more plausible as I see notebook updated jquery from 3.4.1 in May:

commit db90cf3331f1ecc324429a82d8988af063d5a513 (origin/pull/5494)
Author: Kevin Bates <kba...@gmail.com>
Date: Fri May 29 08:09:51 2020 -0700

Bump minimum version of jQuery to 3.5.0

Resolves #5489

diff --git a/bower.json b/bower.json
index 58e237b26..4426c6cd0 100644
--- a/bower.json
+++ b/bower.json
@@ -11,7 +11,7 @@
"font-awesome": "components/font-awesome#~4.7.0",
"google-caja": "5669",
"jed": "~1.1.1",
- "jquery": "components/jquery#~3.4.1",
+ "jquery": "components/jquery#~3.5.0",
"jquery-typeahead": "~2.10.6",
"jquery-ui": "components/jqueryui#~1.12",
"marked": "~0.5",

--
M

> --
> You received this message because you are subscribed to the Google Groups "Project Jupyter" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to jupyter+u...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/jupyter/fd246107-9a77-4c51-9eee-b954bf6f7634n%40googlegroups.com.

Vladimir Ivannikov

unread,

Nov 25, 2020, 3:08:12 AM11/25/20

to Project Jupyter

Thanks for your help.

I have updated the jupyter notebook version

but in the browser I still keep getting the old version of jquery

среда, 18 ноября 2020 г. в 20:01:31 UTC+3, bussonnie...@gmail.com:

Matthias Bussonnier

unread,

Nov 26, 2020, 2:19:23 PM11/26/20

to jup...@googlegroups.com

Then I'm not sure, I would need to know which page shows the wrong version of Jquery and which url it's loaded from to try to find out where it comes from.

--

M

To view this discussion on the web visit https://groups.google.com/d/msgid/jupyter/1dfaa80b-3e47-4898-ab33-e4f63b255537n%40googlegroups.com.

Reply all

Reply to author

Forward