vdk-jupyter: research on updating jupyterlab dependencies to v4 #2587
Description
What is the feature request? What problem does it solve?
Some dependencies we have on vdk-jupyterlab-extension use an older version of a "marked" npm package which has security vulnerabilities:
The packages we use that has this package as dependency are:
Apparently, the vulnerability is solved in the latest versions of the jupyterlab packages (4.0.10 at the time), but since these packages are freshly released and new bugs are yet being found it is not feasible to use them in the extension, yet.
The main idea of this ticket is to investigate after some time (at least 1 month after the release of the v4 packages) and to see whether they are compatible with the jupyterlab extensions and whether they have still have issues.
Acceptance criteria
- Find the latest most stable Jupyter version
- Remove as many deprecated packages as possible
- Test the UI components
- Fix broken UI components (open different tickets for this work if necessary)