NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
PyPI · #555 most downloaded on PyPI
The backend—i.e. core services, APIs, and REST endpoints—to Jupyter web applications.
Last release 19 days ago
15 Sep 2026
Release timing varies
gaps range from 3 weeks to 8 months
Nearly every release is documented
notes for 58 of the last 60 stable releases
4 versions withdrawn
withdrawn after publishing
8 years old
162 releases · first in 2018
Fix compatibility with Tornado v6.5.9+ Jupyter #1703 ( @krassowski , @andrii-i )
The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@andrii-i (activity) | @jtpio (activity) | @krassowski (activity)
One column per quarter.
GHSA-c3mw-737p-c7g2 5xx request logging leaked token-bearing Referer header values
5xx request logging leaked token-bearing Referer header valueskernel_id on kernel/session creation #1655 (@sfc-gh-sbirmiwal, @Zsailer, @krassowski, @minrk)WebSocketClosedError #1680 (@Zsailer, @krassowski)resolvePath handling for home-relative paths #1670 (@MUFFANUJ, @krassowski)packaging change. #1688 (@Carreau, @krassowski)jupyter_client versions (no longer needed) #1656 (@krassowski, @Zsailer)The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@Carreau (activity) | @krassowski (activity) | @minrk (activity) | @MUFFANUJ (activity) | @Sanjays2402 (activity) | @sfc-gh-sbirmiwal (activity) | @sjh9714 (activity) | @Yann-P (activity) | @Zsailer (activity)
CVE-2026-44727 GHSA-fcw5-x6j4-ccmp
bind_sockets in case its different #1651 (@choldgraf, @krassowski)test_authorizer having a spurious comma in params #1664 (@krassowski)pywinpty 3.0.4 version #1658 (@krassowski)The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@Carreau (activity) | @choldgraf (activity) | @Copilot (activity) | @ianthomas23 (activity) | @krassowski (activity) | @minrk (activity) | @Yann-P (activity)
Return unresolved stanza when kernel scope is unavailable for resolvePath (instead of failing with 404) #1641 ( @MUFFANUJ , @Carreau , @krassowski )
unresolved stanza when kernel scope is unavailable for resolvePath (instead of failing with 404) #1641 (@MUFFANUJ, @Carreau, @krassowski)The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@Carreau (activity) | @ianthomas23 (activity) | @krassowski (activity) | @minrk (activity) | @MUFFANUJ (activity) | @terminalchai (activity) | @Zsailer (activity)
Fix saving user avatar URL #1637 ( @brichet , @krassowski )
root_dir is a filesystem root #1636 (@Yann-P, @krassowski)The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@brichet (activity) | @Carreau (activity) | @krassowski (activity) | @Yann-P (activity)
Prevent reconnect stalls from orphaned kernel_info requests #1632 ( @krassowski , @Copilot , @jtpio , @tonyx93 )
kernel_info requests #1632 (@krassowski, @Copilot, @jtpio, @tonyx93)The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@Copilot (activity) | @jtpio (activity) | @krassowski (activity) | @tonyx93 (activity)
CVE-2026-40110 GHSA-24qx-w28j-9m6p
test_execution_state test #1579 (@krassowski, @Zsailer)hatch fmt and pre-commit #1576 (@krassowski, @Zsailer)@flaky.flaky decorate with pytest marker #1544 (@mgorny, @minrk)The following people contributed discussions, new ideas, code and documentation contributions, and review.
See our definition of contributors.
(GitHub contributors page for this release)
@blink1073 (activity) | @bloomsa (activity) | @carlfarrington (activity) | @Carreau (activity) | @claude (activity) | @codecov-commenter (activity) | @dualc (activity) | @echarles (activity) | @emin63 (activity) | @fcollonval (activity) | @kevin-bates (activity) | @krassowski (activity) | @Krish-876 (activity) | @ktaletsk (activity) | @lresende (activity) | @MaryushSoroka (activity) | @mgorny (activity) | @minrk (activity) | @ptch314 (activity) | @rgbkrk (activity) | @RRosio (activity) | @terminalchai (activity) | @tonyx93 (activity) | @Yann-P (activity) | @YDawn (activity) | @zolyfarkas-fb (activity) | @Zsailer (activity)
_get_os_path in _dir_model #1547 (@joeyutong, @vidartf)test_execution_state test #1579 (@krassowski, @Zsailer)hatch fmt and pre-commit #1576 (@krassowski, @Zsailer)@flaky.flaky decorate with pytest marker #1544 (@mgorny, @minrk)cookie_secret #1433 (@krassowski, @blink1073, @minrk)ServerApp.preferred_dir #1396 (@krassowski, @blink1073)The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.
(GitHub contributors page for this release)
@3coins (activity) | @afshin (activity) | @andrii-i (activity) | @ark-1 (activity) | @astitv-sh (activity) | @aws-jasakshi (activity) | @blink1073 (activity) | @bloomsa (activity) | @bollwyvl (activity) | @brichet (activity) | @carlfarrington (activity) | @Carreau (activity) | @cjwatson (activity) | @claude (activity) | @codecov-commenter (activity) | @danyeaw (activity) | @Darshan808 (activity) | @davidbrochart (activity) | @dlqqq (activity) | @dualc (activity) | @echarles (activity) | @edrogers (activity) | @emin63 (activity) | @epignot (activity) | @fcollonval (activity) | @gogasca (activity) | @hansepac (activity) | @holzman (activity) | @IITII (activity) | @jasongrout (activity) | @joeyutong (activity) | @jtpio (activity) | @kevin-bates (activity) | @kjayan (activity) | @krassowski (activity) | @Krish-876 (activity) | @ktaletsk (activity) | @lresende (activity) | @MaicoTimmerman (activity) | @manics (activity) | @markypizz (activity) | @MaryushSoroka (activity) | @mgorny (activity) | @minrk (activity) | @mwouts (activity) | @nokados (activity) | @ojarjur (activity) | @oliver-sanders (activity) | @ptch314 (activity) | @rgbkrk (activity) | @RRosio (activity) | @terminalchai (activity) | @Timeroot (activity) | @tonyx93 (activity) | @tornaria (activity) | @vidartf (activity) | @Wh1isper (activity) | @Yann-P (activity) | @YDawn (activity) | @yuvipanda (activity) | @zolyfarkas-fb (activity) | @Zsailer (activity)
Avoid redundant call to _get_os_path in _dir_model #1547 ( @joeyutong )
_get_os_path in _dir_model #1547 (@joeyutong)(GitHub contributors page for this release)
@aws-jasakshi | @brichet | @dependabot | @edrogers | @gogasca | @joeyutong | @jtpio | @minrk | @vidartf | @Zsailer
If ServerApp.ip is ipv6 use [::1] as local_url #1495 ( @manics )
(GitHub contributors page for this release)
@ark-1 | @bollwyvl | @Darshan808 | @davidbrochart | @kjayan | @krassowski | @MaicoTimmerman | @manics | @minrk | @nokados | @RRosio | @vidartf | @yuvipanda | @Zsailer
Better error message when starting kernel for session. #1478 ( @Carreau )
(GitHub contributors page for this release)
@afshin | @blink1073 | @bloomsa | @bollwyvl | @Carreau | @cjwatson | @davidbrochart | @dependabot | @epignot | @fcollonval | @gogasca | @hansepac | @holzman | @IITII | @krassowski | @lresende | @manics | @markypizz | @minrk | @mwouts | @ojarjur | @oliver-sanders | @pre-commit-ci | @Timeroot | @tornaria | @welcome | @Wh1isper | @yuvipanda | @Zsailer
cookie_secret #1433 (@krassowski)ServerApp.preferred_dir #1396 (@krassowski)(GitHub contributors page for this release)
@afshin | @blink1073 | @bloomsa | @bollwyvl | @Carreau | @cjwatson | @davidbrochart | @dependabot | @epignot | @fcollonval | @gogasca | @hansepac | @holzman | @IITII | @krassowski | @lresende | @manics | @markypizz | @minrk | @mwouts | @ojarjur | @oliver-sanders | @pre-commit-ci | @Timeroot | @tornaria | @welcome | @Wh1isper | @yuvipanda | @Zsailer
Pass session_id during Websocket connect #1440 ( @gogasca )
cookie_secret #1433 (@krassowski)(GitHub contributors page for this release)
@blink1073 | @gogasca | @krassowski | @manics | @pre-commit-ci
Removing excessive logging from reading local files #1420 ( @lresende )
Do not include token in dashboard link, when available #1406 (@minrk)
(GitHub contributors page for this release)
@blink1073 | @dependabot | @holzman | @krassowski | @markypizz | @minrk | @oliver-sanders | @pre-commit-ci | @welcome | @Zsailer
Add deprecation note for ServerApp.preferred_dir #1396 (@krassowski)
ServerApp.preferred_dir #1396 (@krassowski)(GitHub contributors page for this release)
@blink1073 | @hansepac | @krassowski | @manics | @minrk | @oliver-sanders | @pre-commit-ci | @Timeroot | @welcome | @yuvipanda
Improve warning handling #1386 (@blink1073)
Fix log arguments for gateway client error #1385 (@minrk)
Import User unconditionally #1384 (@yuvipanda)
(GitHub contributors page for this release)
@mwouts | @tornaria | @welcome | @yuvipanda
Fix a typo in error message #1381 (@krassowski)
log extension import time at debug level unless it's actually slow #1375 (@minrk)
Support async Authorizers #1373 (@Zsailer)
(GitHub contributors page for this release)
avoid unhandled error on some invalid paths #1369 (@minrk)
(GitHub contributors page for this release)
@blink1073 | @fcollonval | @minrk | @Wh1isper
Support get file(notebook) md5 #1363 (@Wh1isper)
(GitHub contributors page for this release)
@blink1073 | @IITII | @welcome | @Wh1isper
ContentsHandler return 404 rather than raise exc #1357 (@bloomsa)
Update kernel env to reflect changes in session #1354 (@blink1073)
Revert "Update kernel env to reflect changes in session." #1346 (@blink1073)
Ability to configure cull_idle_timeout with kernelSpec #1342 (@akshaychitneni)
Added Logs for get_os_path closes issue #1336 (@jayeshsingh9767)
(GitHub contributors page for this release)
@blink1073 | @dependabot | @jayeshsingh9767 | @minrk | @pre-commit-ci | @welcome
Support external kernels #1305 (@davidbrochart)
Nothing published for this version
accessing API version should not count as activity #1315 (@minrk)
/api/ endpoint to REST spec #1312 (@minrk)(GitHub contributors page for this release)
@allstrive | @bhperry | @blink1073 | @emmanuel-ferdman | @Hind-M | @kevin-bates | @krassowski | @mathbunnyru | @matthewwiese | @minrk | @pre-commit-ci | @welcome | @wqj97 | @Zsailer
Add missing events to gateway client #1288 (@allstrive)
(GitHub contributors page for this release)
@allstrive | @blink1073 | @fcollonval | @kevin-bates | @minrk | @pre-commit-ci | @welcome
Fix DeprecationWarning from pytest-console-scripts #1281 (@frenzymadness)
.gitmodules #1248 (@SauravMaheshkar)babel and eslint configuration under package.json #1246 (@SauravMaheshkar)(GitHub contributors page for this release)
@blink1073 | @brichet | @codecov | @davidbrochart | @dependabot | @echarles | @frenzymadness | @hbcarlos | @kevin-bates | @lresende | @minrk | @ojarjur | @pre-commit-ci | @rajmusuku | @SauravMaheshkar | @welcome | @yuvipanda | @Zsailer
Enable KernelSpecResourceHandler to be async #1236 (@Zsailer)
(GitHub contributors page for this release)
@blink1073 | @broden-wanner | @codecov | @welcome | @Zsailer
Fix priority of deprecated NotebookApp.notebook_dir behind ServerApp.root_dir (#1223 #1223 (@minrk)
(GitHub contributors page for this release)
@blink1073 | @Carreau | @codecov | @codecov-commenter | @davidbrochart | @dcsaba89 | @echarles | @kenyaachon | @kevin-bates | @minrk | @vidartf | @welcome | @Zsailer
Support IPV6 in \_find_http_port() #1207 (@schnell18)
(GitHub contributors page for this release)
@blink1073 | @cmd-ntrf | @codecov | @dcsaba89 | @meeseeksdev | @minrk | @pre-commit-ci | @schnell18 | @welcome
Delete the extra "or" in front of the second url #1194 (@jonnygrout)
(GitHub contributors page for this release)
@blink1073 | @codecov | @jonnygrout | @minrk | @welcome
Only load enabled extension packages #1180 (@minrk)
(GitHub contributors page for this release)
@blink1073 | @Carreau | @codecov | @kevin-bates | @minrk | @ojarjur | @welcome | @yuvipanda
Fix preferred_dir for sync contents manager #1173 (@vidartf)
Log how long each extension module takes to import #1171 (@yuvipanda)
(GitHub contributors page for this release)
@blink1073 | @Carreau | @codecov | @consideRatio | @meeseeksdev | @pre-commit-ci | @vidartf | @welcome | @yuvipanda
Iterate through set of apps in extension_manager.any_activity method #1157 (@mahendrapaipuri)
extension_manager.any_activity method #1157 (@mahendrapaipuri)Update deprecation warning #1148 (@Carreau)
end kwarg after migration from print to info #1151 (@krassowski)Fix handling of extension last activity #1145 (@blink1073)
Restore default writing of browser open redirect file, add opt-in to skip #1144 (@bollwyvl)
Raise errors on individual problematic extensions when listing extension #1139 (@Zsailer)
(GitHub contributors page for this release)
@blink1073 | @bloomsa | @codecov | @hhuuggoo | @kevin-bates | @vidartf | @vindex10 | @welcome | @Zsailer
\[Gateway\] Remove redundant list kernels request during session poll #1112 (@kevin-bates)
(GitHub contributors page for this release)
@blink1073 | @codecov | @dependabot | @kevin-bates | @ofek | @ophie200 | @welcome
Your coding agent can read these notes before it upgrades. Set up the MCP server →