Address CVEs

This updates:
- Jinja2 (Python) (CVE-2024-56201)
- nanoid (JavaScript) (CVE-2024-55565)
- path-to-regexp (JavaScript) (CVE-2024-52798)
- golang.org/x/net (Go) (CVE-2024-45338)

Signed-off-by: mprahl <mprahl@users.noreply.github.com>

Author: mprahl

.github/workflows/frontend.yml

@@ -20,9 +20,9 @@ jobs:
       uses: actions/checkout@v2
 
     - name: Set up Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
-        node-version: '14'
+        node-version: '22'
 
     - name: Clean npm cache
       run: npm cache clean --force

backend/src/apiserver/visualization/exporter.py

@@ -143,11 +143,10 @@ def generate_html_from_notebook(self, nb: NotebookNode) -> Text:
 
         """
         # HTML generator and exporter object
-        html_exporter = HTMLExporter()
         template_file = "templates/{}.tpl".format(self.template_type.value)
-        html_exporter.template_file = str(Path.cwd() / template_file)
         # Output generator
         self.ep.preprocess(nb, {"metadata": {"path": Path.cwd()}}, self.km)
+        html_exporter = HTMLExporter(template_file=str(Path.cwd() / template_file))
         # Export all html and outputs
         body, _ = html_exporter.from_notebook_node(nb, resources={})
         return body

backend/src/apiserver/visualization/requirements.in

@@ -4,10 +4,10 @@ google-api-python-client==1.7.*
 itables==0.1.0
 ipykernel==5.1.1
 ipython==7.12.0
-jinja2==2.11.3
-jupyter_client==5.3.*
+Jinja2>=3.1.2,<4
+jupyter-client==8.6.3
 markupsafe==2.0.1
-nbconvert==5.5.0
+nbconvert==7.16.5
 nbformat==5.10.4
 scikit-learn==0.24.2
 tensorflow==2.10.1
@@ -16,4 +16,3 @@ tensorflow-model-analysis==0.40.*
 tensorflow-data-validation==1.9.*
 tensorflow-serving-api==2.10.1
 tornado==6.*
-mistune<2.0.0