Cherry-pick improvements from upstream to main (#125)

* Update jupyterlab-git to 0.51.2 to fix vulnerability (elyra-ai#3319)

Signed-off-by: Luciano Resende <lresende@apple.com>

* Switch from elyra-code-viewer to jupyterlab-code-viewer (elyra-ai#3265)

Signed-off-by: Luciano Resende <lresende@apple.com>

* Update changelog for release 4.0.0rc2

Signed-off-by: Luciano Resende <lresende@apple.com>

* Bump braces from 3.0.2 to 3.0.3 (elyra-ai#3309)

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump tornado from 6.4.2 to 6.5.1 in /etc/generic (elyra-ai#3313)

Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.4.2 to 6.5.1.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.4.2...v6.5.1)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump requests from 2.32.3 to 2.32.4 in /etc/generic (elyra-ai#3314)

Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump form-data from 4.0.0 to 4.0.4 (elyra-ai#3317)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update changelog for release 4.0.0rc4 (elyra-ai#3318)

Signed-off-by: Luciano Resende <lresende@apple.com>

* Update changelog for release 4.0.0rc5

Signed-off-by: Luciano Resende <lresende@apple.com>

---------

Signed-off-by: Luciano Resende <lresende@apple.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Luciano Resende <lresende@apple.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: 3 people

README.md

@@ -233,7 +233,6 @@ JupyterLab [version]
         @jupyter-server/resource-usage [version] enabled OK (python, jupyter-resource-usage)
         @krassowski/jupyterlab-lsp [version] enabled OK (python, jupyterlab_lsp)
         @elyra/code-snippet-extension [version] enabled OK
-        @elyra/code-viewer-extension [version] enabled OK
         @elyra/metadata-extension [version] enabled OK
         @elyra/pipeline-editor-extension [version] enabled OK
         @elyra/python-editor-extension [version] enabled OK

create-release.py

@@ -603,15 +603,8 @@ def prepare_extensions_release() -> None:
             f"making programming in JupyterLab more efficient by reducing repetitive work. "
             f"See https://elyra.readthedocs.io/en/v{config.new_version}/user_guide/code-snippets.html",
         ),
-        "elyra-code-viewer-extension": SimpleNamespace(
-            packages=["code-viewer-extension"],
-            description="The Code Viewer extension adds the ability to display a given chunk of code "
-            "(string) in a transient read-only 'editor' without needing to create a file."
-            "This extension will be available in JupyterLab core in a near future release and removed "
-            "from Elyra as a standalone extension.",
-        ),
         "elyra-pipeline-editor-extension": SimpleNamespace(
-            packages=["code-viewer-extension", "pipeline-editor-extension", "metadata-extension", "theme-extension"],
+            packages=["pipeline-editor-extension", "metadata-extension", "theme-extension"],
             description=f"The Visual Editor Pipeline extension is used to build AI pipelines from notebooks, "
             f"Python scripts and R scripts, simplifying the conversion of multiple notebooks "
             f"or script files into batch jobs or workflows."
@@ -775,8 +768,6 @@ def publish_release(working_dir) -> None:
         f"{config.work_dir}/kfp-notebook/dist/kfp-notebook-{config.new_version}.tar.gz",
         f"{config.work_dir}/elyra-code-snippet-extension/dist/elyra_code_snippet_extension-{config.new_version}-py3-none-any.whl",
         f"{config.work_dir}/elyra-code-snippet-extension/dist/elyra-code-snippet-extension-{config.new_version}.tar.gz",
-        f"{config.work_dir}/elyra-code-viewer-extension/dist/elyra_code_viewer_extension-{config.new_version}-py3-none-any.whl",
-        f"{config.work_dir}/elyra-code-viewer-extension/dist/elyra-code-viewer-extension-{config.new_version}.tar.gz",
         f"{config.work_dir}/elyra-pipeline-editor-extension/dist/elyra_pipeline_editor_extension-{config.new_version}-py3-none-any.whl",
         f"{config.work_dir}/elyra-pipeline-editor-extension/dist/elyra-pipeline-editor-extension-{config.new_version}.tar.gz",
         f"{config.work_dir}/elyra-python-editor-extension/dist/elyra_python_editor_extension-{config.new_version}-py3-none-any.whl",

docs/source/developer_guide/release.md

@@ -30,7 +30,6 @@ In order to perform a release, one will need to have publish access to
   - [elyra-python-editor-extension](https://pypi.org/manage/project/elyra-python-editor-extension/collaboration/)
   - [elyra-pipeline-editor-extension](https://pypi.org/manage/project/elyra-pipeline-editor-extension/collaboration/)
   - [elyra-code-snippet-extension](https://pypi.org/manage/project/elyra-code-snippet-extension/collaboration/)
-  - [elyra-code-viewer-extension](https://pypi.org/manage/project/elyra-code-viewer-extension/collaboration/)
   - [kfp-notebook](https://pypi.org/manage/project/kfp-notebook/collaboration/)
   - [airflow-notebook](https://pypi.org/manage/project/airflow-notebook/collaboration/)
 - npm
@@ -167,7 +166,6 @@ create-release.py prepare --version 2.3.0 --dev-version 2.4.0 [--rc 0][--beta 0]
 ```bash
 elyra
 elyra-code-snippet-extension
-elyra-code-viewer-extension
 elyra-pipeline-editor-extension
 elyra-python-editor-extension
 elyra-r-editor-extension
@@ -193,7 +191,6 @@ make container-images publish-container-images
   - https://github.com/conda-forge/elyra-feedstock/pulls
   - https://github.com/conda-forge/elyra-server-feedstock/pulls
   - https://github.com/conda-forge/elyra-code-snippet-extension-feedstock/pulls
-  - https://github.com/conda-forge/elyra-code-viewer-extension-feedstock/pulls
   - https://github.com/conda-forge/elyra-pipeline-editor-extension-feedstock/pulls
   - https://github.com/conda-forge/elyra-python-editor-extension-feedstock/pulls
   - https://github.com/conda-forge/elyra-r-editor-extension-feedstock/pulls
@@ -212,4 +209,4 @@ To create the release [notes]:
  - Add descriptive summaries for each release highlight (features users should be aware of), including links to the relevant documentation.
  - The contributor list and new contributor list is automatically generated by GitHub.
 
- Request a release notes review once the draft is complete and publish the release.
+ Request a release notes review once the draft is complete and publish the release.

docs/source/getting_started/changelog.md

@@ -2,6 +2,61 @@
 
 A summary of new feature highlights is located on the [GitHub release page](https://github.com/elyra-ai/elyra/releases).
 
+## Release 4.0.0rc5 - 07/24/2025
+
+- Update jupyterlab-git to 0.51.2 to fix vulnerability - [#3319](https://github.com/elyra-ai/elyra/pull/3319)
+
+## Release 4.0.0rc4 - 07/23/2025
+
+- Bump form-data from 4.0.0 to 4.0.4 - [#3317](https://github.com/elyra-ai/elyra/pull/3317)
+- Bump requests from 2.32.3 to 2.32.4 in /etc/generic - [#3314](https://github.com/elyra-ai/elyra/pull/3314)
+- Fix flake8 warnings in the CI - [#3315](https://github.com/elyra-ai/elyra/pull/3315)
+- Bump tornado from 6.4.2 to 6.5.1 in /etc/generic - [#3313](https://github.com/elyra-ai/elyra/pull/3313)
+- Add support to Python 3.12 and 3.13 - [#3311](https://github.com/elyra-ai/elyra/pull/3311)
+- Bump braces from 3.0.2 to 3.0.3 - [#3309](https://github.com/elyra-ai/elyra/pull/3309)
+- Bump JupyterLab packages to v4.4 - [#3308](https://github.com/elyra-ai/elyra/pull/3308)
+- Pin click package - [#3307](https://github.com/elyra-ai/elyra/pull/3307)
+- Use ubuntu-latest on codeql-analysis workflow - [#3304](https://github.com/elyra-ai/elyra/pull/3304)
+- Suppress flake8 F824 warning to fix the CI - [#3300](https://github.com/elyra-ai/elyra/pull/3300)
+
+## Release 4.0.0rc2 - 03/17/2025
+
+Our 4.0.0 release candidate 2 includes the following high-level changes
+
+- Update JupyterLab version compatibility all way to 4.3.x  - [#3293](https://github.com/elyra-ai/elyra/pull/3293)
+- Switch from elyra-code-viewer to jupyterlab-code-viewer - [#3265](https://github.com/elyra-ai/elyra/pull/3265)
+
+See the full changelog below:
+
+- Switch from elyra-code-viewer to jupyterlab-code-viewer - [#3265](https://github.com/elyra-ai/elyra/pull/3265)
+- Bump express from 4.18.1 to 4.21.2 - [#3297](https://github.com/elyra-ai/elyra/pull/3297)
+- Bump @babel/runtime-corejs3 from 7.19.1 to 7.26.10 - [#3296](https://github.com/elyra-ai/elyra/pull/3296)
+- Bump elliptic from 6.5.4 to 6.6.1 - [#3286](https://github.com/elyra-ai/elyra/pull/3286)
+- Bump axios from 1.7.5 to 1.8.3 - [#3295](https://github.com/elyra-ai/elyra/pull/3295)
+- Bump jinja2 from 3.1.5 to 3.1.6 in /etc/generic - [#3294](https://github.com/elyra-ai/elyra/pull/3294)
+- Pin Yarn version - [#3292](https://github.com/elyra-ai/elyra/pull/3292)
+- Updates Jupyterlab version compatibility to <4.4 - [#3293](https://github.com/elyra-ai/elyra/pull/3293)
+- Fix yarn.lock after release - [#3289](https://github.com/elyra-ai/elyra/pull/3289)
+- Update yarn.lock after release - [#3287](https://github.com/elyra-ai/elyra/pull/3287)
+
+## Release 4.0.0rc1 - 02/15/2025
+
+- Add codecov token to upload reports github action - [#3283](https://github.com/elyra-ai/elyra/pull/3283)
+- Fix references to KF_PIPELINES_SSL_SA_CERTS - [#3284](https://github.com/elyra-ai/elyra/pull/3284)
+- Fix main icon replacement - [#3285](https://github.com/elyra-ai/elyra/pull/3285)
+- Update ToolbarButton widget library - [#3282](https://github.com/elyra-ai/elyra/pull/3282)
+- Add missing props and files for Code Viewer, R Editor and Scala Editor extensions - [#3280](https://github.com/elyra-ai/elyra/pull/3280)
+- Add test coverage support through CodeCov - [#3281](https://github.com/elyra-ai/elyra/pull/3281)
+- Add ELYRA_GITHUB_REPO env var - [#3278](https://github.com/elyra-ai/elyra/pull/3278)
+- Replace 'any' with correct types in typescript code - [#85](https://github.com/elyra-ai/elyra/pull/85)
+- Remove Python 3.8 support as it reached EOL - [#3277](https://github.com/elyra-ai/elyra/pull/3277)
+- Upgrade Cypress v6 -> v13 - [#3275](https://github.com/elyra-ai/elyra/pull/3275)
+- Bump Node.js version to 22 LTS - [#3276](https://github.com/elyra-ai/elyra/pull/3276)
+- Update yarn.lock after release candidate updates - [#3274](https://github.com/elyra-ai/elyra/pull/3274)
+- Allow production builds for UI packages - [#3269](https://github.com/elyra-ai/elyra/pull/3269)
+- Fix properties not being added in the Pipeline Properties tab - [#3270](https://github.com/elyra-ai/elyra/pull/3270)
+- Extract common code and fail build if lock is modified - [#3272](https://github.com/elyra-ai/elyra/pull/3272)
+
 ## Release 4.0.0rc0 - 01/03/2025
 
 Our 4.0.0 release candidate 0 includes the following high-level changes

docs/source/getting_started/installation.md

@@ -182,7 +182,6 @@ JupyterLab [version]
         @jupyter-server/resource-usage [version] enabled OK (python, jupyter-resource-usage)
         @krassowski/jupyterlab-lsp [version] enabled OK (python, jupyterlab_lsp)
         @elyra/code-snippet-extension [version] enabled OK
-        @elyra/code-viewer-extension [version] enabled OK
         @elyra/metadata-extension [version] enabled OK
         @elyra/pipeline-editor-extension [version] enabled OK
         @elyra/python-editor-extension [version] enabled OK

etc/generic/requirements-elyra.txt

@@ -13,8 +13,8 @@ nbformat==5.4.0
 papermill==2.6.0
 pyzmq==26.4.0
 prompt-toolkit==3.0.43
-requests==2.32.3
-tornado==6.4.2
+requests==2.32.4
+tornado==6.5.1
 traitlets==5.10.0
 urllib3==1.26.19
 #