Add CHANGELOG for 1.9.0

[philippjfr]

Panel 1.9.0 delivers full typing compatibility with Param 2.4.0, finally ensuring that all parameters are fully typed. Additionally this release makes it possible to provide wildcard routes to pn.serve making it possible to support dynamic routing. It also includes a significant modernization of the widget API, introducing Widget.label as the canonical display label parameter and renaming button_type/button_style to color/variant for better alignment with panel-material-ui, which will be integrated within Panel in upcoming releases. The release also includes a range of Tabulator improvements, chat enhancements, security updates, and numerous bug fixes. Lastly, this release drops support for Bokeh 3.7.

Many thanks to the contributors to this release including: @philippjfr, @hoxbro, @ghostiee-11, @ahuang11, @AtharvaJaiswal005, @SKlerk, @TheoMathurin, @chucklay, @zhangdomi, @mvanhorn, @SuMayaBee, @forman, and @omyaaa1.

🚀 Features

• Add type compatibility for param 2.4.0 (#8573)
• Add support for wildcard route handling (#8588)

✨ Enhancements

• Introduce Widget.label parameter and treat name as an alias (#8328)
• Rename button_type -> color and button_style -> variant (#8577)
• Make Feed type configurable on ChatFeed (#8582)
• Add selection and value_input to TextEditor widget (#8560)
• Add dark theme support for JSONEditor widget (#8444)

🐛 Bug Fixes

• Fix widget.disabled getting stuck after rapid toggling (#8507)
• Fix Trend indicator not working with date_range x-axis (#8509)
• Fix ReactComponent initialization issues (#8552)
• Fix DataFrame comparison in Tabulator.from_param (#8539)
• Fix Tabulator scroll reset when filtering on patch (#8531)
• Prevent Tabulator from overwriting scroll position on style update (#8420)
• Fix Gauge/ECharts crash when the ECharts library is not yet loaded (#8515)
• Make OAuth token refreshes more robust (#8518)
• Sanitize JavaScript string replacement tokens in Python code (#8566)
• Fix string formatting in NotImplementedError message (#8536)

🎨 UI Improvements

• Update Tabulator to version 6.4 (#8568)
• Optimize Tabulator resize events (#8528)
• Improve Pyodide badge appearance (#8519)
• General rendering and performance optimizations (#8547)

⚠️ Deprecations

• Widget.name was renamed to Widget.label
• Button.button_type was renamed to Button.color
• Button.button_style was renamed to Button.variant
• Dropped support for Bokeh 3.7

📚 Documentation

• Update reference gallery to use panel-material-ui (#8596)
• Add Outerbounds deployment guide (#8587)
• Add Functions vs Classes explanation (#8581)
• Add Panel extensions documentation page (#8529)
• Document pn.state.sync_busy in the busy indicator how-to guide (#8564)

🔒 Security

• Switch HTML sanitization from bleach to nh3 (#8503)
• Add zizmor for GitHub Actions security scanning (#8584)
• Validate next_url for basic auth and raise an error if invalid (#8575)