Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
astral-sh/setup-uv	action	minor	v10.1.0 → v10.2.0
jupytext	project.dependencies	patch	1.19.5 → 1.19.6

---

Release Notes

astral-sh/setup-uv (astral-sh/setup-uv)

v10.2.0

Compare Source

jupytext/jupytext (jupytext)

v1.19.6

Compare Source

Security

• The Quarto conversions now run in a private temporary directory, so that the output file that quarto convert names after its input can no longer be pre-created as a symlink by another user of the machine. Thanks to Naveed for the PR (#​1615).
• Paired paths from notebook formats metadata are now prevented from escaping the working tree, including when an absolute notebook path is used. Thanks to Naveed for addressing the issue (#​1588).
• The CLI now ignores trusted cell metadata when the notebook signature is invalid, so a trusted=true option in a
  paired text file cannot make untrusted notebook outputs trusted during --sync. Thanks to
  Naveed for the fix (#​1617).
• Custom cell_markers and endofcell values in the light format are now matched literally, preventing regular-expression
  injection, parsing errors, and excessive processing time on crafted notebooks. This also fixes writing OCaml notebooks
  with custom cell markers. Thanks to Naveed again for the PR
  (#​1618).
• We have merged Dependabot security updates for the JupyterLab extension and the documentation website
  (#​1614, #​1620,
  #​1622, #​1624,
  #​1634, #​1639,
  #​1642, #​1643,
  #​1647, #​1653,
  #​1654).

Fixed

• Menu entries such as "Rename Notebook…" name the file type again, instead of saying "default". Thanks to
  Michał Krassowski for this PR (#​1632).
• Mermaid %% comments inside a markdown cell are no longer mistaken for py:percent cell markers (#​1533). Thanks to Sanjay Santhanam for his PR (#​1609)
• A whitespace-only final line in a percent-format cell is now preserved when reading and round-tripping the notebook
  (#​1599). Thanks to lowbyteguy
  for the PR (#​1610).
• The JupyterLab extension's development install script now uses the correct jupyter-builder import
  (#​1632). Thanks again to Michał Krassowski
  for this fix.
• Fixed JupyterLab extension build issues related to Yarn package checksums. Thanks to
  Mahendra Paipuri for his contributions to
  #​1614, #​1620,
  and #​1621.
• Fixed pairing on Windows when a prefix root contains subdirectories, such as notebooks/tutorials///ipynb.

Changed

• Updated the JupyterLab extension's production dependencies
  (#​1621, #​1641,
  #​1652).
• Updated the documentation website's Astro, Starlight, and Sharp dependencies
  (#​1612, #​1621,
  #​1625, #​1641,
  #​1646, #​1650,
  #​1652).
• Updated the GitHub Actions used for CI and publishing
  (#​1613, #​1619,
  #​1633, #​1640,
  #​1649, #​1651).
• Updated Jupyter Server in the Pixi environments. Thanks again to
  Mahendra Paipuri for this update
  (#​1646).

Added

• We have added a development container that can be opened with VS Code’s Dev Containers extension
  (#​1655).
• Added support for the Jenner language. Thanks to Lawrence Sinclair for this contribution (#​1493).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.