[dependabot]

Updates the requirements on jupytext and sphinx-autodoc-typehints to permit the latest version.
Updates jupytext to 1.19.6

Release notes

Sourced from jupytext's releases.

Version 1.19.6

Security

• The Quarto conversions now run in a private temporary directory, so that the output file that quarto convert names after its input can no longer be pre-created as a symlink by another user of the machine. Thanks to Naveed for the PR (#1615).
• Paired paths from notebook formats metadata are now prevented from escaping the working tree, including when an absolute notebook path is used. Thanks to Naveed for addressing the issue (#1588).
• The CLI now ignores trusted cell metadata when the notebook signature is invalid, so a trusted=true option in a paired text file cannot make untrusted notebook outputs trusted during --sync. Thanks to Naveed for the fix (#1617).
• Custom cell_markers and endofcell values in the light format are now matched literally, preventing regular-expression injection, parsing errors, and excessive processing time on crafted notebooks. This also fixes writing OCaml notebooks with custom cell markers. Thanks to Naveed again for the PR (#1618).
• We have merged Dependabot security updates for the JupyterLab extension and the documentation website (#1614, #1620, #1622, #1624, #1634, #1639, #1642, #1643, #1647, #1653, #1654).

Fixed

• Menu entries such as "Rename Notebook…" name the file type again, instead of saying "default". Thanks to Michał Krassowski for this PR (#1632).
• Mermaid %% comments inside a markdown cell are no longer mistaken for py:percent cell markers (#1533). Thanks to Sanjay Santhanam for his PR (#1609)
• A whitespace-only final line in a percent-format cell is now preserved when reading and round-tripping the notebook (#1599). Thanks to lowbyteguy for the PR (#1610).
• The JupyterLab extension's development install script now uses the correct jupyter-builder import (#1632). Thanks again to Michał Krassowski for this fix.
• Fixed JupyterLab extension build issues related to Yarn package checksums. Thanks to Mahendra Paipuri for his contributions to #1614, #1620, and #1621.
• Fixed pairing on Windows when a prefix root contains subdirectories, such as notebooks/tutorials///ipynb.

Changed

• Updated the JupyterLab extension's production dependencies (#1621, #1641, #1652).
• Updated the documentation website's Astro, Starlight, and Sharp dependencies (#1612, #1621, #1625, #1641, #1646, #1650, #1652).
• Updated the GitHub Actions used for CI and publishing (#1613, #1619, #1633, #1640, #1649, #1651).
• Updated Jupyter Server in the Pixi environments. Thanks again to Mahendra Paipuri for this update (#1646).

Added

• We have added a development container that can be opened with VS Code’s Dev Containers extension (#1655).
• Added support for the Jenner language. Thanks to Lawrence Sinclair for this contribution (#1493).

Changelog

Sourced from jupytext's changelog.

1.19.6 (2026-10-04)

Security

• The Quarto conversions now run in a private temporary directory, so that the output file that quarto convert names after its input can no longer be pre-created as a symlink by another user of the machine. Thanks to Naveed for the PR (#1615).
• Paired paths from notebook formats metadata are now prevented from escaping the working tree, including when an absolute notebook path is used. Thanks to Naveed for addressing the issue (#1588).
• The CLI now ignores trusted cell metadata when the notebook signature is invalid, so a trusted=true option in a paired text file cannot make untrusted notebook outputs trusted during --sync. Thanks to Naveed for the fix (#1617).
• Custom cell_markers and endofcell values in the light format are now matched literally, preventing regular-expression injection, parsing errors, and excessive processing time on crafted notebooks. This also fixes writing OCaml notebooks with custom cell markers. Thanks to Naveed again for the PR (#1618).
• We have merged Dependabot security updates for the JupyterLab extension and the documentation website (#1614, #1620, #1622, #1624, #1634, #1639, #1642, #1643, #1647, #1653, #1654).

Fixed

• Menu entries such as "Rename Notebook…" name the file type again, instead of saying "default". Thanks to Michał Krassowski for this PR (#1632).
• Mermaid %% comments inside a markdown cell are no longer mistaken for py:percent cell markers (#1533). Thanks to Sanjay Santhanam for his PR (#1609)
• A whitespace-only final line in a percent-format cell is now preserved when reading and round-tripping the notebook (#1599). Thanks to lowbyteguy for the PR (#1610).
• The JupyterLab extension's development install script now uses the correct jupyter-builder import (#1632). Thanks again to Michał Krassowski for this fix.
• Fixed JupyterLab extension build issues related to Yarn package checksums. Thanks to Mahendra Paipuri for his contributions to #1614, #1620, and #1621.
• Fixed pairing on Windows when a prefix root contains subdirectories, such as notebooks/tutorials///ipynb.

Changed

• Updated the JupyterLab extension's production dependencies (#1621, #1641, #1652).
• Updated the documentation website's Astro, Starlight, and Sharp dependencies (#1612, #1621, #1625, #1641, #1646, #1650, #1652).
• Updated the GitHub Actions used for CI and publishing (#1613, #1619, #1633, #1640, #1649, #1651).

... (truncated)

Commits

• 9fccc3d Version 1.19.6 (#1656)
• 85c65a9 Add Jenner language support (#1493)
• ca39ad2 Add development container (#1655)
• 0176ff2 reject paired paths that escape the notebook directory tree (#1588)
• 1eb4653 Ignore '%%' lines inside fenced blocks of py:percent markdown cells (#1609)
• b1d7b65 build(deps): bump the jupytext-extension-security-updates group across 2 dire...
• 85df69a build(deps): bump the actions-dependencies group with 3 updates (#1651)
• c3bb81d run quarto convert in a private temp directory (#1615)
• 9bbd990 build(deps): bump the jupytext-extension-security-updates group across 1 dire...
• f96ae7d build(deps): bump the jupytext-extension-dependencies group across 2 director...
• Additional commits viewable in compare view

Updates sphinx-autodoc-typehints to 3.13.9

Release notes

Sourced from sphinx-autodoc-typehints's releases.

3.13.9

Fix the forward-reference warning when documenting NumPy's clip by resolving generic parameters declared in stub signatures. See #780, which fixes #779.

Full changelog.

Commits

• 789861f fix: resolve generic parameters in stubs
• 83d5565 [pre-commit.ci] pre-commit autoupdate (#778)
• 3805fbf 👷 ci: pin ubuntu-26.04 and bump dependencies (#777)
• 0a96a6c 🐛 fix(resolver): resolve guarded class imports (#775)
• d794732 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-acti...
• 6dc6c4e [pre-commit.ci] pre-commit autoupdate (#773)
• 9627932 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
• bd00366 [pre-commit.ci] pre-commit autoupdate (#771)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions