I can see jquery being updated on sept 14th:

commit 80ad455fc7015d92c15800df90d66b9464de4756
Author: Forest Anderson <forestkzander...@gmail.com>
Date:   Mon Sep 14 13:01:27 2020 -0400

    Upgraded jquery dep

diff --git a/package.json b/package.json
index 8039d007..fba009a5 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
   "dependencies": {
     "bootstrap": "^3.4.1",
     "font-awesome": "^4.7.0",
-    "jquery": "^3.3.1",
+    "jquery": "^3.5.1",
     "moment": "^2.24.0",
     "requirejs": "^2.3.6"
   }

Which should be in the latest release. There is likely either 1) a
caching issue.
or 2) the jquery you see is not from jupyterhub, but from jupyter
notebook (remember hub is mostly a proxy, so you end up seeing
jupyterhub dependency only on login/admin pages.)

2 seem more plausible as I see notebook updated jquery from 3.4.1 in May:

commit db90cf3331f1ecc324429a82d8988af063d5a513 (origin/pull/5494)
Author: Kevin Bates <kbat...@gmail.com>
Date:   Fri May 29 08:09:51 2020 -0700

    Bump minimum version of jQuery to 3.5.0

    Resolves #5489

diff --git a/bower.json b/bower.json
index 58e237b26..4426c6cd0 100644
--- a/bower.json
+++ b/bower.json
@@ -11,7 +11,7 @@
     "font-awesome": "components/font-awesome#~4.7.0",
     "google-caja": "5669",
     "jed": "~1.1.1",
-    "jquery": "components/jquery#~3.4.1",
+    "jquery": "components/jquery#~3.5.0",
     "jquery-typeahead": "~2.10.6",
     "jquery-ui": "components/jqueryui#~1.12",
     "marked": "~0.5",

-- 
M

On Wed, 18 Nov 2020 at 06:48, Vladimir Ivannikov
<job.for.accentur...@gmail.com> wrote:
>
> Has no one faced such a problem before me?
>
> вторник, 17 ноября 2020 г. в 17:43:55 UTC+3, Vladimir Ivannikov:
>>
>> Hello colleagues.
>> I'm using The Littlest JupyterHub.
>> Recently received a notice from our security team that we are using an 
>> outdated version of jQuery. The jQuery (). Jquery command in the web 
>> interface console showed that the version we are using is jQuery 3.4.1
>> Our Security Group requires jQuery version <3.4.5
>> I updated JupyterHub according to the guide from the official site. The 
>> jQuery version hasn't changed.
>> Can you please tell me if it is possible to upgrade jQuery to version 3.4.5 
>> or higher? Or is it impossible?
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Project Jupyter" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to jupyter+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/jupyter/fd246107-9a77-4c51-9eee-b954bf6f7634n%40googlegroups.com.

-- 
You received this message because you are subscribed to the Google Groups 
"Project Jupyter" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jupyter+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jupyter/CANJQusW9O3BB0Wo-Yci61cZMYfN7squ_4oPSG19uPwYVm5r-yQ%40mail.gmail.com.

Reply via email to