X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=CHANGES.txt;h=1bf1ec1bfcc1a83c7f2ac2e16f5761704ba51407;hb=80cd6f610ee95dbd3f49638ec2ebf3f16e3587c0;hp=7161378a5cbb50cb54d4d3c6fc043cefd10a9ed0;hpb=78804c414d04bdeeeda2600419e45f51ab07aadf;p=roundup.git diff --git a/CHANGES.txt b/CHANGES.txt index 7161378..1bf1ec1 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -1,7 +1,115 @@ This file contains the changes to the Roundup system over time. The entries -are given with the most recent entry first. +are given with the most recent entry first. If no other name is given, +Richard Jones did the change. -2010-XX-XX 1.4.12 (rXXXX) +20XX-XX-XX 1.4.17 (rXXXX) + +Features: + +- Add explicit "Search" permissions, see Security Fix below. + +Fixed: + +- Security Fix: Add a check for search-permissions: now we allow + searching for properties only if the property is readable without a + check method or if an explicit search permission (see above unter + "Features) is given for the property. This fixes cases where a user + doesn't have access to a property but can deduce the content by + crafting a clever search, group or sort query. + see doc/upgrading.txt for how to fix your trackers! (Ralf Schlatterbeck). +- Some minor typos fixed in doc/customizing.txt (Thanks Ralf Hemmecke). +- XML-RPC documentation now linked from the docs/index (Bernhard Reiter). + +2010-10-08 1.4.16 (r4541) + +Features: + +- allow trackers to override the classes used to render properties in + templating per issue2550659 (thanks Ezio Melotti) +- new mailgw configuration item "subject_updates_title": If set to "no" + a changed subject in a reply to an issue will not update the issue + title with the changed subject. Thanks to Arkadiusz Kita and Peter + Funk for requesting the feature and discussing the implementation. + http://thread.gmane.org/gmane.comp.bug-tracking.roundup.user/10169 +- new rdbms config item sqlite_timeout makes the previously hard-coded + timeout of 30 seconds configurable. This is the time a client waits + for the locked database to become free before giving up. Used only for + SQLite backend. +- new mailgw config item unpack_rfc822 that unpacks message attachments + of type message/rfc822 and attaches the individual parts instead of + attaching the whole message/rfc822 attachment to the roundup issue. + +Fixed: + +- fixed reporting of source missing warnings +- relevant tests made locale independent, issue2550660 (thanks + Benni Bärmann for reporting). +- fix for incorrect except: syntax, issue2550661 (thanks Jakub Wilk) +- No longer use the root logger, use a logger with prefix "roundup", + see http://thread.gmane.org/gmane.comp.bug-tracking.roundup.devel/5356 +- improve handling of '>' when URLs are converted to links, issue2550664 + (thanks Ezio Melotti) +- fixed registration, issue2550665 (thanks Timo Paulssen) +- make sorting of multilinks in the web interface more robust, issue2550663 +- Fix charset of first text-part of outgoing multipart messages, thanks Dirk + Geschke for reporting, see + http://thread.gmane.org/gmane.comp.bug-tracking.roundup.user/10223 +- Fix handling of incoming message/rfc822 attachments. These resulted in + a weird mail usage error because the email module threw a TypeError + which roundup interprets as a Reject exception. Fixes issue2550667. + Added regression tests for message/rfc822 attachments with and without + configured unpacking (mailgw unpack_rfc822, see Features above) + Thanks to Benni Bärmann for reporting. +- Allow search_popup macro to work with all db classes, issue2550567 + (thanks John Kristensen) +- lower memory footprint for (journal-) import + + +2010-07-12 1.4.15 + +Fixed: + +- A bunch of regressions were introduced in the last release making Roundup + no longer work in Python releases prior to 2.6 +- make URL detection a little smarter about brackets per issue2550657 + (thanks Ezio Melotti) + + +2010-07-01 1.4.14 + +Features: + +- Preparations for getting 2to3 work, not completed yet. (Richard Jones) + +Fixed: + +- User input not escaped when a bad template name is supplied (thanks + Benjamin Pollack) +- The email for the first message on an issue was having its In-Reply-To + set to itself (thanks Eric Kow) +- Handle multiple @action values from broken trackers. +- Accept single-character subject lines +- xmlrpc handling of unicode characters and binary values, see + http://thread.gmane.org/gmane.comp.bug-tracking.roundup.user/10040 + thanks to Hauke Duden for reporting these. +- frontends/roundup.cgi got out of sync with the roundup.cgi.Client API +- Default to "text/plain" if no Content-Type header is present in email + (thanks Hauke Duden) +- Small documentation update regarding debugging aids (Bernhard Reiter) +- Indexer Xapian, made Xapian 1.2 compatible. Needs at least Xapian 1.0.0 now. + (Bernhard Reiter; Thanks to Olly Betts for providing the patch Issue2550647.) + + +2010-02-19 1.4.13 + +Fixed: +- Multilink edit fields lose their values (thanks Will Maier) + + +2010-02-09 1.4.12 (r4455) + +Features: +- Support IMAP CRAM-MD5, thanks Jochen Maes Fixes: - Proper handling of 'Create' permissions in both mail gateway (earlier @@ -29,6 +137,8 @@ Fixes: issue2550632 - Allow value to be specified to multilink form element templating, fixes issue2550613, thanks David Wolever +- Fix thread safety with stdin in roundup-server, fixes issue2550596 + (thanks Werner Hunger) 2009-12-21 1.4.11 (r4413)