Issues

• [ENH] - Prevent file downloads from JupyterHub IDEs

  nebari-dev/data-science-pack#258 · Filter by author kcpevey opened on Oct 2, 2026

• VS Code activity reporter is disabled in Restricted Mode, so untrusted users get culled while working

  area: user experience 👩🏻‍💻needs: PR 📬priority: medium ⚡size: Stype: bug 🐛

  SFilter by Size: S

  MediumFilter by Priority: Medium

  Oct 2, 2026Filter by Start date: Oct 2, 2026

  Oct 5, 2026Filter by Target date: Oct 5, 2026
  Bug

  nebari-dev/data-science-pack#256 · Filter by author viniciusdc opened on Oct 2, 2026

• Notebook path spawns into the selected tenant

  nebari-dev/data-science-pack#252 · Filter by author oldsj opened on Sep 22, 2026

• Nebi token exchange fails with invalid_client when the chart is not deployed in a jupyterhub namespace

  nebari-dev/data-science-pack#248 · Filter by author marcelovilla opened on Sep 8, 2026

• PR-build sha- image tags name the merge commit, so in-PR pins can silently go stale

  nebari-dev/data-science-pack#244 · Filter by author tylerpotts opened on Aug 31, 2026

• Pin pixi version in images/Dockerfile

  nebari-dev/data-science-pack#243 · Filter by author tylerpotts opened on Aug 31, 2026

• Fix JupyterLab extension version warnings in data science pack image

  area: dependencies 📦
  nebari-dev/data-science-pack#239 · Filter by author MUFFANUJ opened on Aug 26, 2026

• Field report: deploying on a keycloakx (/auth) + microk8s environment — 7 friction points

  nebari-dev/data-science-pack#232 · Filter by author brandonrc opened on Aug 23, 2026

• Harden VS Code activity reporting: use the *_last_activity settings seam instead of /api/contents/

  nebari-dev/data-science-pack#231 · Filter by author tylerpotts opened on Aug 21, 2026

• Set jupyterhub.cull.maxAge as a backstop for activity-based culling

  nebari-dev/data-science-pack#228 · Filter by author viniciusdc opened on Aug 20, 2026

• One user, one node: co-location affinity plus RWO home volume creates multiple issues

  nebari-dev/data-science-pack#221 · Filter by author aktech opened on Aug 17, 2026

• [ENH] KC Admin API URL should have a backchannel override, like token/userinfo do

  nebari-dev/data-science-pack#220 · Filter by author oren-openteams opened on Aug 14, 2026

• [ENH] - Investigate credential management solutions

  nebari-dev/data-science-pack#217 · Filter by author kcpevey opened on Aug 14, 2026

• [DOCS] - Add docs page for enterprise CA bundle

  area: documentation 📖
  Task

  nebari-dev/data-science-pack#209 · Filter by author pavithraes opened on Aug 10, 2026

• sharedStorage.groups allowlist rendered in values but not consumed by chart templates

  nebari-dev/data-science-pack#206 · Filter by author oren-openteams opened on Aug 4, 2026

• keycloak-rbac-bootstrap job fails: expected hub client id does not match what nebari-operator provisions

  nebari-dev/data-science-pack#203 · Filter by author tylerpotts opened on Jul 30, 2026

• [ENH] - Include real time collaboration feature

  Feature

  nebari-dev/data-science-pack#200 · Filter by author kcpevey opened on Jul 28, 2026
  2

  

• jhub-apps service does not receive CA trust env vars: nebi environment selector silently empty behind a private CA

  nebari-dev/data-science-pack#187 · Filter by author tylerpotts opened on Jul 20, 2026

• ci: adopt the shared pack-release.yaml reusable workflow (suggestion)

  area: ci 👷🏽‍♀️needs: discussion 💬type: maintenance 🛠
  Task

  nebari-dev/data-science-pack#181 · Filter by author dcmcand opened on Jul 17, 2026

• Migrate release CI onto the shared nebari-dev/.github@v1 reusable workflows

  nebari-dev/data-science-pack#180 · Filter by author dcmcand opened on Jul 16, 2026

• Epic: Security hardening for 0.1.0 assessment findings

  epic
  nebari-dev/data-science-pack#179 · Filter by author dcmcand opened on Jul 14, 2026

• Security(L-02): Hub-to-Nebi egress NetworkPolicy selects an entire namespace with no pod selector

  area: securitypriority: low 🌱
  nebari-dev/data-science-pack#178 · Filter by author dcmcand opened on Jul 14, 2026

• Security(L-01): auth diagnostics log identity and token-presence metadata (sub, scope, key names)

  area: securitypriority: low 🌱
  nebari-dev/data-science-pack#177 · Filter by author dcmcand opened on Jul 14, 2026

• Security(M-08): every authenticated realm user is admitted by default (allow_all = True)

  area: securitypriority: medium ⚡
  nebari-dev/data-science-pack#176 · Filter by author dcmcand opened on Jul 14, 2026

• Security(M-07): Hub OIDC login credential reused for Admin API and forwarded to japps with broad realm roles

  area: securitypriority: medium ⚡
  nebari-dev/data-science-pack#175 · Filter by author dcmcand opened on Jul 14, 2026