chore(deps): bump nbclient from 0.10.4 to 0.11.0

[dependabot]

Bumps nbclient from 0.10.4 to 0.11.0.

Release notes

Sourced from nbclient's releases.

v0.11.0

0.11.0

(Full Changelog)

Maintenance and upkeep improvements

• Minor cleanup and bump minimal versions. #347 (@​Carreau, @​krassowski)

Other merged PRs

• no-numfocus funding + Zizmor #345 (@​Carreau, @​Yann-P, @​krassowski)
• ignore parallel closing error #343 (@​Carreau, @​krassowski)
• Remove out of date badges about Python version. #342 (@​Carreau)
• Ignore new warning from ipykernel about encryption #341 (@​krassowski, @​Carreau, @​minrk)
• drop leftover ref. to async_generator #340 (@​a-detiste, @​Carreau)
• Replace @flaky.flaky decorate with pytest marker #334 (@​mgorny, @​Carreau)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​a-detiste (activity) | @​Carreau (activity) | @​krassowski (activity) | @​mgorny (activity) | @​minrk (activity) | @​Yann-P (activity)

Changelog

Sourced from nbclient's changelog.

0.11.0

(Full Changelog)

Maintenance and upkeep improvements

• Minor cleanup and bump minimal versions. #347 (@​Carreau, @​krassowski)

Other merged PRs

• no-numfocus funding + Zizmor #345 (@​Carreau, @​Yann-P, @​krassowski)
• ignore parallel closing error #343 (@​Carreau, @​krassowski)
• Remove out of date badges about Python version. #342 (@​Carreau)
• Ignore new warning from ipykernel about encryption #341 (@​krassowski, @​Carreau, @​minrk)
• drop leftover ref. to async_generator #340 (@​a-detiste, @​Carreau)
• Replace @flaky.flaky decorate with pytest marker #334 (@​mgorny, @​Carreau)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@​a-detiste (activity) | @​Carreau (activity) | @​krassowski (activity) | @​mgorny (activity) | @​minrk (activity) | @​Yann-P (activity)

Commits

• 0811ff4 Publish 0.11.0
• f1c8b43 Minor cleanup and bump minimal versions. (#347)
• be2c721 no-numfocus funding + Zizmor (#345)
• 760cb03 Replace @flaky.flaky decorate with pytest marker (#334)
• dd09895 Remove out of date badges about Python version. (#342)
• 954c07e Ignore new warning from ipykernel about encryption (#341)
• 4c0f7e8 ignore parallel closing error (#343)
• 264e156 drop leftover ref. to async_generator (#340)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🐦‍⬛ Muninn Security Scan

Severity	Count
🔴 Critical	0
🟠 High	1
🟡 Medium	0
🟢 Low	0
ℹ️ Info	0

🟠 High Findings

[dependency] Mistune: Potential DoS via quadratic-time parsing in parse_link_text

Package: mistune 3.2.1 (PyPI)
Advisory: GHSA-qcq2-496w-v96p (CVE-2026-49851)
Detected by: osv-scanner, trivy
Sources:

• /github/workspace/gitgalaxy/requirements.txt (osv-scanner)
• gitgalaxy/requirements.txt (trivy)
  ### Summary Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_link_text. A relatively small input consisting of repeated [ characters causes significant parsing slowdown. ### Affected component mistune/inline_parser.py → parse_link_text...

🐦‍⬛ Powered by Muninn · Skald Lab