Change8

v1.7.5

📦 panelView on GitHub →
5 features🐛 16 fixes🔧 17 symbols

Summary

This patch release adds several enhancements such as improved `.from_param()` errors and a warm reuse‑sessions option, while fixing numerous bugs and addressing XSS security issues.

✨ New Features

  • Improved error messages for `.from_param()` utility.
  • Added `--reuse-sessions warm` option to preload and cache apps before first use.
  • Implemented debounce logic for `ModelChanged` events in Pyodide to improve performance.
  • Added guard for undefined `url` in `ImportedStyleSheet`.
  • Ensured `Layoutable` parameters propagate to HoloViews plots.

🐛 Bug Fixes

  • Fixed handling of `value_throttled` in Param panes.
  • Prevented `AutocompleteInput` from resetting when `restrict=False`.
  • Fixed callback cleanup for `--reuse_sessions` mode.
  • Reset `param.Event` state on ESM components.
  • Allowed `Player` components to start upon initialization.
  • Fixed modal dialog stacking and focus behavior in `VanillaTemplate`.
  • Avoided errors in `Tabulator` when editing DataFrames containing `pd.NA` values.
  • Added guard for undefined `url` in `ImportedStyleSheet`.
  • Ensured session token payload is correctly updated when reusing sessions.
  • Ensured `--reuse-sessions` caches the `--index` app correctly.
  • Ensured `LoadingSpinner.visible` correctly hides the component.
  • Ensured `JSONEditor` triggers on re-ordering of nodes.
  • Fixed `JSONEditor` menu option to improve usability.
  • Fixed XSS vulnerabilities in login and OAuth error templates by escaping user-controlled input.
  • Fixed regression in handling `param.Action` in `.from_param()` utility.
  • Fixed gallery deployment automation.

🔧 Affected Symbols

.from_param()--reuse-sessionslogin templateOAuth error templatevalue_throttledAutocompleteInputparam.EventPlayerVanillaTemplateTabulatorImportedStyleSheetsession token payloadModelChangedLayoutableparam.ActionLoadingSpinner.visibleJSONEditor