Skip to content

Conversation

@nitbharambe
Copy link
Member

@nitbharambe nitbharambe commented Dec 29, 2025

Lock file contains a version for fonttools 4.59.2 which is flagged as a vulnerability. GHSA-768j-98cg-p3fv

  • Added a seed to all random (Only used at assignments of PF and SE)
  • Reran all notebooks (except SE assignment solutions)

Also not sure if there is a easy + direct solution via dependabot. Check dependabot/dependabot-core#11913

Signed-off-by: Nitish Bharambe <nitish.bharambe@alliander.com>
@nitbharambe nitbharambe marked this pull request as draft December 29, 2025 13:59
Signed-off-by: Nitish Bharambe <nitish.bharambe@alliander.com>
@nitbharambe
Copy link
Member Author

Re-ran all notebooks since a lock file is expected to work unconditionally when upgraded. (State estimation assignment gets changes which are resolved in #28 . We should merge that PR.)

The changes here should only clear out metadata.

A handy script for automating notebook runs:

find ./examples -name "*.ipynb" -not -path "*/.ipynb_checkpoints/*" | while read notebook; do
  echo "Processing: $notebook"
  uv run jupyter nbconvert --to notebook --execute \
    --inplace \
    --ExecutePreprocessor.timeout=600 \
    --ClearOutputPreprocessor.enabled=True \
    --ClearMetadataPreprocessor.enabled=True \
    "$notebook" || echo "Failed to process $notebook"
done

If needed we can include as an action and/or pre-commit at this repository and/or other repositories,

Signed-off-by: Nitish Bharambe <nitish.bharambe@alliander.com>
Signed-off-by: Nitish Bharambe <nitish.bharambe@alliander.com>
@nitbharambe nitbharambe marked this pull request as ready for review December 29, 2025 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants