unstale

pypi / jupytext

jupytext

What changed in jupytext 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-24.

1 breaking5 security2 new APIs and options1 performance1 tooling6 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.5 on npm

jupytext 116 changes

Breaking changes 1

  • Paired paths from notebook formats metadata can no longer escape the working tree, including for absolute notebook paths.

    1.19.6release notes

Security 5

  • Custom light-format cell markers are matched literally, preventing regular-expression injection, parsing errors, and excessive processing time on crafted notebooks.

    1.19.6release notes

  • Custom light-format end-of-cell values are matched literally, preventing regular-expression injection, parsing errors, and excessive processing time on crafted notebooks.

    1.19.6release notes

  • Quarto conversions run in a private temporary directory, preventing another user from pre-creating the output file as a symlink.

    1.19.6release notes

  • The CLI ignores trusted cell metadata when the notebook signature is invalid, preventing paired text from making untrusted outputs trusted during synchronization.

    1.19.6release notes

  • Reuses secure (0600, mkstemp-backed) temporary files instead of closing and reopening them by name, removing unsafe permissions and a symlink-attack window on shared machines.

    1.19.5release notes

New APIs and options 2

Performance 1

  • Detecting IPython help/shell commands no longer takes quadratic time on lines made of whitespace.

    1.19.5release notes

Tooling 1

  • A development container is available to open with VS Code’s Dev Containers extension.

    1.19.6release notes

Fixes and other changes 6

  • Pairing works when a prefix root contains subdirectories.

    1.19.6release notes

  • A whitespace-only final line is preserved when reading and round-tripping the notebook.

    1.19.6release notes

  • Mermaid comments inside markdown cells are no longer mistaken for py:percent cell markers.

    1.19.6release notes

  • Menu entries name the file type again instead of saying “default.”

    1.19.6release notes

  • Guards access to languageInfo.extensions when kernel metadata is incomplete, preventing Python files from being shown with notebook icons.

    1.19.5release notes

  • YAML dumping now supports Unicode characters.

    1.19.4release notes