Remove deprecated WandbChart widget and its wandb/gitpython dependency - #319
Merged
Conversation
WandbChart was deprecated in 0.4.0 (api_key leakage in marimo static HTML exports) but only reduced to a print-only stub — the file, exports, demo, and the `wandb` optional extra were left behind, so uv.lock kept resolving wandb -> gitpython. Fully remove them; the lock now drops wandb, gitpython, and gitdb. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
WandbChartwas deprecated back in 0.4.0 over anapi_keyleak in marimo static HTML exports, but the removal was only half-done — it was reduced to a print-only stub while the file, its__init__exports, the demo, and thewandboptional extra all stayed, souv.lockkept resolvingwandb → gitpython → gitdb. This PR fully removes the widget, demo, and extra, and re-locks so those deps (including thegitpythonflagged by CVE-2026-42215) drop out entirely. That makes the automated bump in #318 moot. Import tests pass and nothing else references wandb.🤖 Generated with Claude Code