streamlit-nightly 1.43.1.dev20250306__tar.gz → 1.43.2.dev20250307__tar.gz

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: streamlit-nightly
-Version: 1.43.1.dev20250306
+Version: 1.43.2.dev20250307
 Summary: A faster way to build and share data apps
 Home-page: https://streamlit.io
 Author: Snowflake Inc

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/setup.py

@@ -21,7 +21,7 @@ from setuptools.command.install import install
 
 THIS_DIRECTORY = Path(__file__).parent
 
-VERSION = "1.43.1.dev20250306"  # PEP-440
+VERSION = "1.43.2.dev20250307"  # PEP-440
 
 # IMPORTANT: We should try very hard *not* to add dependencies to Streamlit.
 # And if you do add one, make the required version as general as possible:

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/auth_util.py

@@ -172,8 +172,8 @@ def validate_auth_credentials(provider: str) -> None:
 
     provider_section = auth_section.get(provider)
 
-    # TODO[kajarenc]: Revisit this check later when investigating the ability
-    # TODO[kajarenc] to add "_" to the provider name.
+    # TODO(kajarenc): Revisit this check later when investigating the ability
+    # TODO(kajarenc): to add "_" to the provider name.
     if "_" in provider:
         raise StreamlitAuthError(
             f'Auth provider name "{provider}" contains an underscore. '

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/commands/navigation.py

@@ -14,6 +14,7 @@
 
 from __future__ import annotations
 
+from collections.abc import Mapping, Sequence
 from pathlib import Path
 from typing import TYPE_CHECKING, Callable, Literal, Union
 
@@ -39,7 +40,7 @@ PageType: TypeAlias = Union[str, Path, Callable[[], None], StreamlitPage]
 
 
 def convert_to_streamlit_page(
-    page_input: str | Path | Callable[[], None] | StreamlitPage,
+    page_input: PageType,
 ) -> StreamlitPage:
     """Convert various input types to StreamlitPage objects."""
     if isinstance(page_input, StreamlitPage):
@@ -80,7 +81,7 @@ def send_page_not_found(ctx: ScriptRunContext):
 
 @gather_metrics("navigation")
 def navigation(
-    pages: list[PageType] | dict[SectionHeader, list[PageType]],
+    pages: Sequence[PageType] | Mapping[SectionHeader, Sequence[PageType]],
     *,
     position: Literal["sidebar", "hidden"] = "sidebar",
     expanded: bool = False,
@@ -108,7 +109,7 @@ def navigation(
 
     Parameters
     ----------
-    pages : list[page-like], dict[str, list[page-like]]
+    pages : Sequence[page-like], Mapping[str, Sequence[page-like]]
         The available pages for the app.
 
         To create a navigation menu with no sections or page groupings,
@@ -262,12 +263,12 @@ def navigation(
 
 
 def _navigation(
-    pages: list[PageType] | dict[SectionHeader, list[PageType]],
+    pages: Sequence[PageType] | Mapping[SectionHeader, Sequence[PageType]],
     *,
     position: Literal["sidebar", "hidden"],
     expanded: bool,
 ) -> StreamlitPage:
-    if isinstance(pages, list):
+    if isinstance(pages, Sequence):
         converted_pages = [convert_to_streamlit_page(p) for p in pages]
         nav_sections = {"": converted_pages}
     else:

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/components/v1/custom_component.py

@@ -118,7 +118,7 @@ And if you're using Streamlit Cloud, add "pyarrow" to your requirements.txt."""
         # In addition to the custom kwargs passed to the component, we also
         # send the special 'default' and 'key' params to the component
         # frontend.
-        all_args = dict(kwargs, **{"default": default, "key": key})
+        all_args = dict(kwargs, default=default, key=key)
 
         json_args = {}
         special_args = []

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/doc_string.py

@@ -270,8 +270,7 @@ def _get_variable_name_from_code_str(code):
     ):
         # A common pattern is to add "," at the end of a magic command to make it print.
         # This removes that final ",", so it looks nicer.
-        if code.endswith(","):
-            code = code[:-1]
+        code = code.removesuffix(",")
 
         return code
 

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/lib/color_util.py

@@ -125,9 +125,7 @@ def _is_cssrgb_color_like(color: MaybeColor) -> bool:
     NOTE: We only accept hex colors and color tuples as user input. So do not use this function to
     validate user input! Instead use is_hex_color_like and is_color_tuple_like.
     """
-    return isinstance(color, str) and (
-        color.startswith("rgb(") or color.startswith("rgba(")
-    )
+    return isinstance(color, str) and color.startswith(("rgb(", "rgba("))
 
 
 def is_color_tuple_like(color: MaybeColor) -> bool:

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/lib/file_uploader_utils.py

@@ -14,8 +14,11 @@
 
 from __future__ import annotations
 
+import os
 from typing import TYPE_CHECKING
 
+from streamlit.errors import StreamlitAPIException
+
 if TYPE_CHECKING:
     from collections.abc import Sequence
 
@@ -48,3 +51,16 @@ def normalize_upload_file_type(file_type: str | Sequence[str]) -> Sequence[str]:
             file_type.append(x)
 
     return file_type
+
+
+def enforce_filename_restriction(filename: str, allowed_types: Sequence[str]) -> None:
+    """Ensure the uploaded file's extension matches the allowed
+    types set by the app developer. In theory, this should never happen, since we
+    enforce file type check by extension on the frontend, but we check it on backend
+    before returning file to the user to protect ourselves.
+    """
+    extension = os.path.splitext(filename)[1].lower()
+    if allowed_types and extension not in allowed_types:
+        raise StreamlitAPIException(
+            f"Invalid file extension: `{extension}`. Allowed: {allowed_types}"
+        )

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/lib/image_utils.py

@@ -344,7 +344,7 @@ def image_to_url(
 
 
 def _4d_to_list_3d(array: npt.NDArray[Any]) -> list[npt.NDArray[Any]]:
-    return [array[i, :, :, :] for i in range(0, array.shape[0])]
+    return [array[i, :, :, :] for i in range(array.shape[0])]
 
 
 def marshall_images(

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/markdown.py

@@ -136,44 +136,6 @@ class MarkdownMixin:
 
         return self.dg._enqueue("markdown", markdown_proto)
 
-    @gather_metrics("code")
-    def code(
-        self,
-        body: SupportsStr,
-        language: str | None = "python",
-    ) -> DeltaGenerator:
-        """Display a code block with optional syntax highlighting.
-
-        (This is a convenience wrapper around `st.markdown()`)
-
-        Parameters
-        ----------
-        body : str
-            The string to display as code.
-
-        language : str or None
-            The language that the code is written in, for syntax highlighting.
-            If ``None``, the code will be unstyled. Defaults to ``"python"``.
-
-            For a list of available ``language`` values, see:
-
-            https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/AVAILABLE_LANGUAGES_PRISM.MD
-
-        Example
-        -------
-        >>> import streamlit as st
-        >>>
-        >>> code = '''def hello():
-        ...     print("Hello, Streamlit!")'''
-        >>> st.code(code, language="python")
-
-        """
-        code_proto = MarkdownProto()
-        markdown = f"```{language or ''}\n{body}\n```"
-        code_proto.body = clean_text(markdown)
-        code_proto.element_type = MarkdownProto.Type.CODE
-        return self.dg._enqueue("markdown", code_proto)
-
     @gather_metrics("caption")
     def caption(
         self,

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/audio_input.py

@@ -24,6 +24,7 @@ from streamlit.deprecation_util import (
     make_deprecated_name_warning,
     show_deprecation_warning,
 )
+from streamlit.elements.lib.file_uploader_utils import enforce_filename_restriction
 from streamlit.elements.lib.form_utils import current_form_id
 from streamlit.elements.lib.policies import (
     check_widget_policies,
@@ -83,6 +84,8 @@ class AudioInputSerde:
             return_value = None
         else:
             return_value = upload_files[0]
+        if return_value is not None and not isinstance(return_value, DeletedFile):
+            enforce_filename_restriction(return_value.name, [".wav"])
         return return_value
 
 

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/camera_input.py

@@ -20,6 +20,7 @@ from typing import TYPE_CHECKING, Union, cast
 
 from typing_extensions import TypeAlias
 
+from streamlit.elements.lib.file_uploader_utils import enforce_filename_restriction
 from streamlit.elements.lib.form_utils import current_form_id
 from streamlit.elements.lib.policies import (
     check_widget_policies,
@@ -79,6 +80,8 @@ class CameraInputSerde:
             return_value = None
         else:
             return_value = upload_files[0]
+        if return_value is not None and not isinstance(return_value, DeletedFile):
+            enforce_filename_restriction(return_value.name, [".jpg"])
         return return_value
 
 

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/chat.py

@@ -27,7 +27,10 @@ from typing import (
 
 from streamlit import config, runtime
 from streamlit.delta_generator_singletons import get_dg_singleton_instance
-from streamlit.elements.lib.file_uploader_utils import normalize_upload_file_type
+from streamlit.elements.lib.file_uploader_utils import (
+    enforce_filename_restriction,
+    normalize_upload_file_type,
+)
 from streamlit.elements.lib.form_utils import is_in_form
 from streamlit.elements.lib.image_utils import AtomicImage, WidthBehavior, image_to_url
 from streamlit.elements.lib.policies import check_widget_policies
@@ -52,7 +55,7 @@ from streamlit.runtime.state import (
     WidgetKwargs,
     register_widget,
 )
-from streamlit.runtime.uploaded_file_manager import UploadedFile
+from streamlit.runtime.uploaded_file_manager import DeletedFile, UploadedFile
 from streamlit.string_util import is_emoji, validate_material_icon
 
 if TYPE_CHECKING:
@@ -190,6 +193,7 @@ def _pop_upload_files(
 @dataclass
 class ChatInputSerde:
     accept_files: bool = False
+    allowed_types: Sequence[str] | None = None
 
     def deserialize(
         self,
@@ -201,9 +205,14 @@ class ChatInputSerde:
         if not self.accept_files:
             return ui_value.data
         else:
+            uploaded_files = _pop_upload_files(ui_value.file_uploader_state)
+            for file in uploaded_files:
+                if self.allowed_types and not isinstance(file, DeletedFile):
+                    enforce_filename_restriction(file.name, self.allowed_types)
+
             return ChatInputValue(
                 text=ui_value.data,
-                files=_pop_upload_files(ui_value.file_uploader_state),
+                files=uploaded_files,
             )
 
     def serialize(self, v: str | None) -> ChatInputValueProto:
@@ -599,7 +608,10 @@ class ChatMixin:
         chat_input_proto.file_type[:] = file_type if file_type is not None else []
         chat_input_proto.max_upload_size_mb = config.get_option("server.maxUploadSize")
 
-        serde = ChatInputSerde(accept_files=bool(accept_file))
+        serde = ChatInputSerde(
+            accept_files=bool(accept_file),
+            allowed_types=file_type,
+        )
         widget_state = register_widget(  # type: ignore[misc]
             chat_input_proto.id,
             on_change_handler=on_submit,

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/file_uploader.py

@@ -21,7 +21,10 @@ from typing import TYPE_CHECKING, Literal, Union, cast, overload
 from typing_extensions import TypeAlias
 
 from streamlit import config
-from streamlit.elements.lib.file_uploader_utils import normalize_upload_file_type
+from streamlit.elements.lib.file_uploader_utils import (
+    enforce_filename_restriction,
+    normalize_upload_file_type,
+)
 from streamlit.elements.lib.form_utils import current_form_id
 from streamlit.elements.lib.policies import (
     check_widget_policies,
@@ -97,12 +100,20 @@ def _get_upload_files(
 @dataclass
 class FileUploaderSerde:
     accept_multiple_files: bool
+    allowed_types: Sequence[str] | None = None
 
     def deserialize(
         self, ui_value: FileUploaderStateProto | None, widget_id: str
     ) -> SomeUploadedFiles:
         upload_files = _get_upload_files(ui_value)
 
+        for file in upload_files:
+            if isinstance(file, DeletedFile):
+                continue
+
+            if self.allowed_types:
+                enforce_filename_restriction(file.name, self.allowed_types)
+
         if len(upload_files) == 0:
             return_value: SomeUploadedFiles = [] if self.accept_multiple_files else None
         else:
@@ -444,7 +455,7 @@ class FileUploaderMixin:
         if help is not None:
             file_uploader_proto.help = dedent(help)
 
-        serde = FileUploaderSerde(accept_multiple_files)
+        serde = FileUploaderSerde(accept_multiple_files, allowed_types=type)
 
         # FileUploader's widget value is a list of file IDs
         # representing the current set of files that this uploader should

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/number_input.py

@@ -526,6 +526,13 @@ class NumberInputMixin:
 
         if widget_state.value_changed:
             if widget_state.value is not None:
+                # Min/Max bounds checks when the value is updated.
+                if number_input_proto.has_min and widget_state.value < number_input_proto.min:
+                    raise StreamlitValueBelowMinError(value=widget_state.value, min_value=number_input_proto.min)
+
+                if number_input_proto.has_max and widget_state.value > number_input_proto.max:
+                    raise StreamlitValueAboveMaxError(value=widget_state.value, max_value=number_input_proto.max)
+
                 number_input_proto.value = widget_state.value
             number_input_proto.set_value = True
 

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/slider.py

@@ -44,7 +44,11 @@ from streamlit.elements.lib.utils import (
     get_label_visibility_proto_value,
     to_key,
 )
-from streamlit.errors import StreamlitAPIException
+from streamlit.errors import (
+    StreamlitAPIException,
+    StreamlitValueAboveMaxError,
+    StreamlitValueBelowMinError,
+)
 from streamlit.proto.Slider_pb2 import Slider as SliderProto
 from streamlit.runtime.metrics_util import gather_metrics
 from streamlit.runtime.scriptrunner import ScriptRunContext, get_script_run_ctx
@@ -155,27 +159,30 @@ class SliderSerde:
     single_value: bool
     orig_tz: tzinfo | None
 
+    def deserialize_single_value(self, value: float):
+        if self.data_type == SliderProto.INT:
+            return int(value)
+        if self.data_type == SliderProto.DATETIME:
+            return _micros_to_datetime(int(value), self.orig_tz)
+        if self.data_type == SliderProto.DATE:
+            return _micros_to_datetime(int(value), self.orig_tz).date()
+        if self.data_type == SliderProto.TIME:
+            return (
+                _micros_to_datetime(int(value), self.orig_tz)
+                .time()
+                .replace(tzinfo=self.orig_tz)
+            )
+        return value
+
     def deserialize(self, ui_value: list[float] | None, widget_id: str = ""):
         if ui_value is not None:
-            val: Any = ui_value
+            val = ui_value
         else:
             # Widget has not been used; fallback to the original value,
             val = self.value
 
         # The widget always returns a float array, so fix the return type if necessary
-        if self.data_type == SliderProto.INT:
-            val = [int(v) for v in val]
-        if self.data_type == SliderProto.DATETIME:
-            val = [_micros_to_datetime(int(v), self.orig_tz) for v in val]
-        if self.data_type == SliderProto.DATE:
-            val = [_micros_to_datetime(int(v), self.orig_tz).date() for v in val]
-        if self.data_type == SliderProto.TIME:
-            val = [
-                _micros_to_datetime(int(v), self.orig_tz)
-                .time()
-                .replace(tzinfo=self.orig_tz)
-                for v in val
-            ]
+        val = [self.deserialize_single_value(v) for v in val]
         return val[0] if self.single_value else tuple(val)
 
     def serialize(self, v: Any) -> list[Any]:
@@ -845,7 +852,23 @@ class SliderMixin:
         )
 
         if widget_state.value_changed:
-            slider_proto.value[:] = serde.serialize(widget_state.value)
+            # Min/Max bounds checks when the value is updated.
+            serialized_values = serde.serialize(widget_state.value)
+            for value in serialized_values:
+                # Use the deserialized values for more readable error messages for dates/times
+                deserialized_value = serde.deserialize_single_value(value)
+                if value < slider_proto.min:
+                    raise StreamlitValueBelowMinError(
+                        value=deserialized_value,
+                        min_value=serde.deserialize_single_value(slider_proto.min),
+                    )
+                if value > slider_proto.max:
+                    raise StreamlitValueAboveMaxError(
+                        value=deserialized_value,
+                        max_value=serde.deserialize_single_value(slider_proto.max),
+                    )
+
+            slider_proto.value[:] = serialized_values
             slider_proto.set_value = True
 
         self.dg._enqueue("slider", slider_proto)

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/elements/widgets/time_widgets.py

@@ -875,7 +875,7 @@ class TimeWidgetsMixin:
         else:
             parsed = parse_date_deterministic_for_id(value)
 
-        # TODO this is missing the error path, integrate with the dateinputvalues parsing
+        # TODO: this is missing the error path, integrate with the dateinputvalues parsing
 
         element_id = compute_and_register_element_id(
             "date_input",

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/errors.py

@@ -338,7 +338,7 @@ class StreamlitValueAboveMaxError(LocalizableStreamlitException):
 
     def __init__(self, value: int | float, max_value: int | float):
         super().__init__(
-            "The `value` {value} is greater than than the `max_value` {max_value}.",
+            "The `value` {value} is greater than the `max_value` {max_value}.",
             value=value,
             max_value=max_value,
         )

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/runtime/app_session.py

@@ -776,9 +776,7 @@ class AppSession:
 
             repository_name, branch, module = repo_info
 
-            if repository_name.endswith(".git"):
-                # Remove the .git extension from the repository name
-                repository_name = repository_name[:-4]
+            repository_name = repository_name.removesuffix(".git")
 
             msg.git_info_changed.repository = repository_name
             msg.git_info_changed.branch = branch

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/runtime/runtime.py

@@ -580,7 +580,7 @@ class Runtime:
             session.request_rerun(None)
 
             now = time.perf_counter()
-            while (
+            while (  # noqa: ASYNC110
                 SCRIPT_RUN_WITHOUT_ERRORS_KEY not in session.session_state
                 and (time.perf_counter() - now) < SCRIPT_RUN_CHECK_TIMEOUT
             ):

{streamlit_nightly-1.43.1.dev20250306 → streamlit_nightly-1.43.2.dev20250307}/streamlit/static/index.html

@@ -51,7 +51,7 @@
     <script>
       window.prerenderReady = false
     </script>
-    <script type="module" crossorigin src="./static/js/index.BpcIvL5C.js"></script>
+    <script type="module" crossorigin src="./static/js/index.D1HZENZx.js"></script>
     <link rel="stylesheet" crossorigin href="./static/css/index.DpJG_94W.css">
   </head>
   <body>

streamlit_nightly-1.43.1.dev20250306/streamlit/static/static/js/FileDownload.esm.D90ZPlvX.js → streamlit_nightly-1.43.2.dev20250307/streamlit/static/static/js/FileDownload.esm.Bp9m5jrx.js

@@ -1 +1 @@
-import{r as e,E as n,_ as a}from"./index.BpcIvL5C.js";var o=e.forwardRef(function(t,r){var l={fill:"currentColor",xmlns:"http://www.w3.org/2000/svg"};return e.createElement(n,a({iconAttrs:l,iconVerticalAlign:"middle",iconViewBox:"0 0 24 24"},t,{ref:r}),e.createElement("path",{fill:"none",d:"M0 0h24v24H0V0z"}),e.createElement("path",{d:"M16 9v10H8V9h8m-1.5-6h-5l-1 1H5v2h14V4h-3.5l-1-1zM18 7H6v12c0 1.1.9 2 2 2h8c1.1 0 2-.9 2-2V7z"}))});o.displayName="Delete";var i=e.forwardRef(function(t,r){var l={fill:"currentColor",xmlns:"http://www.w3.org/2000/svg"};return e.createElement(n,a({iconAttrs:l,iconVerticalAlign:"middle",iconViewBox:"0 0 24 24"},t,{ref:r}),e.createElement("rect",{width:24,height:24,fill:"none"}),e.createElement("path",{d:"M18 15v3H6v-3H4v3c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2v-3h-2zm-1-4l-1.41-1.41L13 12.17V4h-2v8.17L8.41 9.59 7 11l5 5 5-5z"}))});i.displayName="FileDownload";export{o as D,i as F};
+import{r as e,E as n,_ as a}from"./index.D1HZENZx.js";var o=e.forwardRef(function(t,r){var l={fill:"currentColor",xmlns:"http://www.w3.org/2000/svg"};return e.createElement(n,a({iconAttrs:l,iconVerticalAlign:"middle",iconViewBox:"0 0 24 24"},t,{ref:r}),e.createElement("path",{fill:"none",d:"M0 0h24v24H0V0z"}),e.createElement("path",{d:"M16 9v10H8V9h8m-1.5-6h-5l-1 1H5v2h14V4h-3.5l-1-1zM18 7H6v12c0 1.1.9 2 2 2h8c1.1 0 2-.9 2-2V7z"}))});o.displayName="Delete";var i=e.forwardRef(function(t,r){var l={fill:"currentColor",xmlns:"http://www.w3.org/2000/svg"};return e.createElement(n,a({iconAttrs:l,iconVerticalAlign:"middle",iconViewBox:"0 0 24 24"},t,{ref:r}),e.createElement("rect",{width:24,height:24,fill:"none"}),e.createElement("path",{d:"M18 15v3H6v-3H4v3c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2v-3h-2zm-1-4l-1.41-1.41L13 12.17V4h-2v8.17L8.41 9.59 7 11l5 5 5-5z"}))});i.displayName="FileDownload";export{o as D,i as F};