jupyter helm charts are not being updated

[merlos]

It' a reopening of #420.

Since jan 2024 helm chart repo (https://helm.dask.org/index.yaml) has not been updated.

Whereas the bot merges the changes, I understand a manual tag is needed to run the publish-charts action. https://github.com/dask/helm-chart/blob/main/.github/workflows/publish-charts.yml

[vprivat-ads]

A new tag/release would be needed, as the latest tag deploys a version affected by CVE-2024-10096.

[jacobtomlinson]

Unfortunately that CVE is bogus AI slop.

[franciszekadamski]

Hi,

refering to the issue, would it be feasible for the new tag to appear in the near future?

[franciszekadamski]

Currently we are using daskhub helm chart with Jupyterhub's version 3.2.1 through the helm chart tagged with 2024.1.1. Could you kindly advice what should we do in order to make use of newer versions of Jupyterhub considering what was mentioned here?

[sedonaprice]

I'd like to add a +1 on asking whether it would be feasible to create a new tag for the dask helm chart -- thanks!

[sebastian-luna-valero]

Hi,

Is the problem with making new releases for daskhub the lack of human power to test this out? If so, can we create a working group to help?

If there are more reasons to not release new versions of daskhub, and the preferred way forward after version 2024.1.1 is to deploy jupyterhub and dask-gateway independently, could this be confirmed as well?

Thanks

[ofk123]

Hi @jacobtomlinson do you happen to have advice on @sebastian-luna-valero 's comment above?

We use daskhub in pangeo@EOSC so a new daskhub-release would take less time to implement, but if jupyerhub+dask-gateway is preferred onward, then we have some work to do..

Hi,

Is the problem with making new releases for daskhub the lack of human power to test this out? If so, can we create a working group to help?

If there are more reasons to not release new versions of daskhub, and the preferred way forward after version 2024.1.1 is to deploy jupyterhub and dask-gateway independently, could this be confirmed as well?

Thanks