[dependabot]

Bumps the javascript-dependencies group with 2 updates in the /js directory: @lumino/widgets and @jupyter/builder.

Updates @lumino/widgets from 2.9.0 to 2.10.0

Changelog

Sourced from @​lumino/widgets's changelog.

---

github_url: 'https://github.com/jupyterlab/lumino/blob/main/CHANGELOG.md'

Changelog

2026.10.8

(Full Changelog)

@lumino/application: 2.4.10 => 2.4.11
@lumino/datagrid: 2.5.8 => 2.5.9
@lumino/default-theme: 2.1.16 => 2.1.17
@lumino/widgets: 2.9.0 => 2.10.0

Enhancements made

• Add extension points for customizing command palette search results #836 (@​jtpio, @​krassowski)

Bugs fixed

• Fix touch resizing for split and dock panel handles #835 (@​MUFFANUJ, @​emilkrebs, @​krassowski)
• Fix touch click handling for menus and tab close actions #834 (@​MUFFANUJ, @​krassowski)
• Assign menuitemcheckbox role to toggleable menu items #823 (@​MUFFANUJ, @​krassowski)

Maintenance and upkeep improvements

• Update versions #854 (@​jtpio)
• Fix broken HPCC link in the README #851 (@​jtpio, @​krassowski)

Other merged PRs

• Bump axios from 1.18.0 to 1.20.0 #853 (@​jtpio)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​emilkrebs (activity) | @​jtpio (activity) | @​krassowski (activity) | @​MUFFANUJ (activity)

2026.7.3

... (truncated)

Commits

• f186862 Publish 2026.10.8
• 91fe59e Update versions (#854)
• fb43b45 Add extension points for customizing command palette search results (#836)
• c596a53 Bump axios from 1.18.0 to 1.20.0 (#853)
• 2c28e96 Fix broken HPCC link in the README (#851)
• d9b39db Fix touch resizing for split and dock panel handles (#835)
• 761a1d0 Fix touch click handling for menus and tab close actions (#834)
• b390af5 Assign menuitemcheckbox role to toggleable menu items (#823)
• See full diff in compare view

Updates @jupyter/builder from 1.2.3 to 1.2.4

Release notes

Sourced from @​jupyter/builder's releases.

v1.2.4

1.2.4

(Full Changelog)

Enhancements made

• Add a jupyterlab.rspackConfig alias #167 (@​agriyakhetarpal, @​Darshan808, @​krassowski)

Bugs fixed

• Fix UTF-8 decoding in captured build tests #184 (@​rastagan-git, @​Darshan808)
• Fix TypeError when package.json omits dependencies field (#182) #183 (@​Yash990-bit, @​Darshan808)
• Fix _resolve_core_path_for_jupyterlab_builder overwriting installed package.json #181 (@​agu2347, @​Darshan808)

Maintenance and upkeep improvements

• Pass GITHUB_TOKEN to the minimum-versions and prerelease test jobs #186 (@​Darshan808, @​krassowski)
• Fix flaky macOS CI tests by authenticating GitHub API calls #178 (@​Yash990-bit, @​krassowski)

Other merged PRs

• Bump @​rspack/core from 2.2.1 to 2.2.8 #190 (@​Darshan808)
• Bump @​jupyterlab/core-meta from 4.6.3 to 4.6.4 #189 (@​Darshan808)
• Bump ruff from 0.16.5 to 0.16.9 in the pip group #188 (@​Darshan808)
• Bump @​rspack/core from 2.1.7 to 2.2.1 #173 (@​Darshan808)
• Bump @​jupyterlab/core-meta from 4.6.2 to 4.6.3 #172 (@​Darshan808)
• Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 in the actions group #171 (@​Darshan808)
• Bump ruff from 0.16.0 to 0.16.5 in the pip group #170 (@​Darshan808, @​krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​agriyakhetarpal (activity) | @​agu2347 (activity) | @​Darshan808 (activity) | @​krassowski (activity) | @​rastagan-git (activity) | @​Yash990-bit (activity)

Changelog

Sourced from @​jupyter/builder's changelog.

1.2.4

(Full Changelog)

Enhancements made

• Add a jupyterlab.rspackConfig alias #167 (@​agriyakhetarpal, @​Darshan808, @​krassowski)

Bugs fixed

• Fix UTF-8 decoding in captured build tests #184 (@​rastagan-git, @​Darshan808)
• Fix TypeError when package.json omits dependencies field (#182) #183 (@​Yash990-bit, @​Darshan808)
• Fix _resolve_core_path_for_jupyterlab_builder overwriting installed package.json #181 (@​agu2347, @​Darshan808)

Maintenance and upkeep improvements

• Pass GITHUB_TOKEN to the minimum-versions and prerelease test jobs #186 (@​Darshan808, @​krassowski)
• Fix flaky macOS CI tests by authenticating GitHub API calls #178 (@​Yash990-bit, @​krassowski)

Other merged PRs

• Bump @​rspack/core from 2.2.1 to 2.2.8 #190 (@​Darshan808)
• Bump @​jupyterlab/core-meta from 4.6.3 to 4.6.4 #189 (@​Darshan808)
• Bump ruff from 0.16.5 to 0.16.9 in the pip group #188 (@​Darshan808)
• Bump @​rspack/core from 2.1.7 to 2.2.1 #173 (@​Darshan808)
• Bump @​jupyterlab/core-meta from 4.6.2 to 4.6.3 #172 (@​Darshan808)
• Bump apache/skywalking-eyes/header from 0.8.0 to 0.9.0 in the actions group #171 (@​Darshan808)
• Bump ruff from 0.16.0 to 0.16.5 in the pip group #170 (@​Darshan808, @​krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​agriyakhetarpal (activity) | @​agu2347 (activity) | @​Darshan808 (activity) | @​krassowski (activity) | @​rastagan-git (activity) | @​Yash990-bit (activity)

Commits

• fec862f Publish 1.2.4
• 4978d1b Pass GITHUB_TOKEN to the minimum-versions and prerelease test jobs (#186)
• 66c2a54 Bump @​rspack/core from 2.2.1 to 2.2.8 (#190)
• c5b87df Bump ruff from 0.16.5 to 0.16.9 in the pip group (#188)
• 543ac7e Bump @​jupyterlab/core-meta from 4.6.3 to 4.6.4 (#189)
• 2ac5d1e Fix _resolve_core_path_for_jupyterlab_builder overwriting installed package.j...
• b0aefd3 Fix UTF-8 decoding in captured build tests (#184)
• 2cf1db5 Fix TypeError when package.json omits dependencies field (#182) (#183)
• 4ecea3c Add a jupyterlab.rspackConfig alias (#167)
• e782a5a Bump ruff from 0.16.0 to 0.16.5 in the pip group (#170)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions