fix: update jsonpath-plus to 10.3.0 across CRUD web apps (Security v1.11)

.github/workflows/OWNERS

@@ -1,2 +1,3 @@
 labels:
-  - area/ci
+  - area/ci
+  - area/v1

.github/workflows/common_frontend_tests.yaml

@@ -0,0 +1,60 @@
+name: Common Frontend Tests
+on:
+  pull_request:
+    paths:
+      - components/crud-web-apps/common/frontend/kubeflow-common-lib/**
+      - releasing/version/VERSION
+    branches:
+      - main
+      - v*-branch
+      - notebooks-v1
+
+env:
+  FRONTEND_DIR: components/crud-web-apps/common/frontend/kubeflow-common-lib
+
+jobs:
+  frontend-format-lint-check:
+    name: Check code format and lint
+    runs-on: ubuntu-22.04
+    defaults:
+      run:
+        working-directory: ${{ env.FRONTEND_DIR }} 
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 16
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check frontend code formatting
+        run: npm run format:check
+
+      - name: Check frontend code linting
+        run: npm run lint-check
+
+  frontend-unit-tests:
+    runs-on: ubuntu-22.04
+    name: Unit tests
+    defaults:
+      run:
+        working-directory: ${{ env.FRONTEND_DIR }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup node version to 16
+        uses: actions/setup-node@v4
+        with:
+          node-version: 16
+
+      - name: Install Kubeflow common library dependencies
+        run: npm ci
+
+      - name: Run unit tests
+        run: npm run test:prod

.github/workflows/example_notebook_servers_publish.yaml

@@ -0,0 +1,119 @@
+name: Build & Publish Notebook Servers
+on:
+  push:
+    branches:
+      - main
+      - notebooks-v1
+      - v*-branch
+    paths:
+      - components/example-notebook-servers/**
+      - releasing/version/VERSION
+
+jobs:
+  base_images:
+    name: Build & Push - Base
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        base
+
+  codeserver_images:
+    name: Build & Push - Code Server
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ base_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        codeserver
+        codeserver-python
+
+  rstudio_images:
+    name: Build & Push - RStudio
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ base_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        rstudio
+        rstudio-tidyverse
+
+  jupyter_images:
+    name: Build & Push - Jupyter
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ base_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        jupyter
+
+  jupyter_scipy_images:
+    name: Build & Push - Jupyter (SciPy)
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ jupyter_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        jupyter-scipy
+
+  jupyter_pytorch_images:
+    name: Build & Push - Jupyter (PyTorch)
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ jupyter_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        jupyter-pytorch
+        jupyter-pytorch-full
+
+  jupyter_pytorch_cuda_images:
+    name: Build & Push - Jupyter (PyTorch + CUDA)
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ jupyter_images ]
+    secrets: inherit
+    with:
+      # TODO: support 'linux/arm64' for PyTorch CUDA images
+      build_arch: linux/amd64
+      image_folders: |
+        jupyter-pytorch-cuda
+        jupyter-pytorch-cuda-full
+
+  jupyter_pytorch_gaudi_images:
+    name: Build & Push - Jupyter (PyTorch + Gaudi)
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ jupyter_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64
+      image_folders: |
+        jupyter-pytorch-gaudi
+        jupyter-pytorch-gaudi-full
+
+  jupyter_tensorflow_images:
+    name: Build & Push - Jupyter (TensorFlow)
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ jupyter_images ]
+    secrets: inherit
+    with:
+      build_arch: linux/amd64,linux/arm64
+      image_folders: |
+        jupyter-tensorflow
+        jupyter-tensorflow-full
+
+  jupyter_tensorflow_cuda_images:
+    name: Build & Push - Jupyter (TensorFlow + CUDA)
+    uses: ./.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml
+    needs: [ jupyter_images ]
+    secrets: inherit
+    with:
+      # TODO: support 'linux/arm64' for TensorFlow CUDA images
+      build_arch: linux/amd64
+      image_folders: |
+        jupyter-tensorflow-cuda
+        jupyter-tensorflow-cuda-full

.github/workflows/example_notebook_servers_publish_TEMPLATE.yaml

@@ -0,0 +1,61 @@
+name: Build & Publish Notebook Servers (TEMPLATE)
+on:
+  workflow_call:
+    inputs:
+      build_arch:
+        required: true
+        description: "architectures to build for, comma separated"
+        type: string
+      image_folders:
+        required: true
+        description: "image folders to build, ordered by dependency, whitespace separated"
+        type: string
+
+env:
+  REGISTRY: ghcr.io/kubeflow/kubeflow/notebook-servers
+  CACHE_IMAGE: ghcr.io/${{ github.repository }}/notebook-servers/build-cache
+
+jobs:
+  build_and_push_images:
+    name: Build & Push Images
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          base: ${{ github.ref }}
+          filters: |
+            version:
+              - 'releasing/version/VERSION'
+
+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and Push Notebook Server images
+        env:
+          ARCH: ${{ inputs.build_arch }}
+          IMAGE_FOLDERS: ${{ inputs.image_folders }}
+          SHOULD_TAG_LATEST: ${{ github.ref == 'refs/heads/notebooks-v1' }}
+          SHOULD_TAG_VERSION: ${{ steps.filter.outputs.version == 'true' }}
+        run: |
+          if [[ "$SHOULD_TAG_LATEST" = "true" ]]; then
+            export ALSO_TAG_LATEST=1
+          fi
+          if [[ "$SHOULD_TAG_VERSION" = "true" ]]; then
+              export ALSO_TAG_VERSION=$(cat releasing/version/VERSION)
+          fi
+          cd components/example-notebook-servers/
+          make docker-build-push-multi-arch

.github/workflows/jwa_backend_unittests.yaml

@@ -0,0 +1,38 @@
+name: JWA Backend Tests
+on:
+  pull_request:
+    paths:
+      - components/crud-web-apps/jupyter/backend/**
+      - releasing/version/VERSION
+    branches:
+      - main
+      - notebooks-v1
+      - 'v*-branch'
+
+jobs:
+  run-backend-unittests:
+    name: Unittests
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install KinD
+        run: ./components/testing/gh-actions/install_kind.sh
+
+      - name: Create KinD Cluster
+        run: kind create cluster --config components/testing/gh-actions/kind-1-25.yaml
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.7"
+
+      - name: Setup Python environment
+        run: |
+          cd components/crud-web-apps/jupyter/backend
+          make install-deps
+
+      - name: Run unittests
+        run: |
+          cd components/crud-web-apps/jupyter/backend
+          make unittest

.github/workflows/jwa_docker_publish.yaml

@@ -0,0 +1,60 @@
+name: Build & Publish JWA Docker image
+on:
+  push:
+    branches:
+      - main
+      - v*-branch
+      - notebooks-v1
+    paths:
+      - components/crud-web-apps/jupyter/**
+      - components/crud-web-apps/common/**
+      - releasing/version/VERSION
+
+env:
+  IMG: ghcr.io/kubeflow/notebooks/jupyter-web-app
+  ARCH: linux/amd64,linux/ppc64le,linux/arm64
+
+jobs:
+  push_to_registry:
+    name: Build & Push image to GHCR Hub
+    runs-on: ubuntu-22.04
+    defaults:
+      run:
+        working-directory: components/crud-web-apps/jupyter
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - uses: dorny/paths-filter@v3
+      id: filter
+      with:
+        base: ${{ github.ref }}
+        filters: |
+          version:
+            - 'releasing/version/VERSION'
+
+    - name: Login to GHCR
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Setup QEMU
+      uses: docker/setup-qemu-action@v3
+
+    - name: Setup Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Build and push multi-arch docker image
+      run: make docker-build-push-multi-arch
+
+    - name: Build and push latest multi-arch docker image
+      if: github.ref == 'refs/heads/notebooks-v1'
+      run: TAG=latest make docker-build-push-multi-arch
+
+    - name: Build and push multi-arch docker image on Version change
+      id: version
+      if: steps.filter.outputs.version == 'true'
+      run: TAG=$(cat ../../../releasing/version/VERSION) make docker-build-push-multi-arch
+