Tags

Release v6.1.4 - Bugfixes

bugfixes:
- 37c7dee0: produce DeleteNotification a line before handle_request
- adc3a218: add 'unsafe-inline' to script-src CSP

documentation:
- 62495404: (rpc) include route doc at the top of aurweb.routers.rpc

features:
- 8e8b746a: (rpc) add GET /rpc/v5/search/{arg} openapi route
- 17f2c05f: (rpc) add GET /rpc/v5/suggest/{arg} openapi route

upgrade:
- f450b5df: bump to version v6.1.4

Release v6.1.3 - Updates, Bugfixes, RPC OpenAPI, CSP

bugfixes:
- 7fed5742: display requests for TUs which no longer have an associated User
- a629098b: conditional display on Request's 'Filed by' field
- 0388b128: package description on /packages/{name} view
- 310c469b: run pre-commit checks instead of flake8 and isort
- b38e765d: (deps) update dependency aiofiles to ^0.8.0
- cdc7bd61: (deps) update dependency email-validator to v1.2.1
- a981ae40: (deps) update dependency httpx to ^0.23.0
- a73af3e7: (deps) update dependency hypercorn to ^0.14.0
- bb310bdf: (deps) update dependency uvicorn to ^0.18.0
- 486f8bd6: (deps) update dependency aiofiles to v22
- 6ab9663b: (deps) update dependency authlib to v1
- 7ad22d81: (deps) update dependency bcrypt to v4
- 3de17311: (deps) update dependency bleach to v5
- 307d944c: (deps) update dependency protobuf to v4
- 69d67247: (deps) update dependency redis to v4
- a2d08e44: (docker) run `pre-commit run -a` once
- 03776c46: (docker) cache & install pre-commit deps during image build
- b3853e01: (pre-commit) include migrations in fixes/checks
- 4e061846: (test) JSONResponse() requires a content argument with fastapi 0.83.0
- bb6e602e: (deps) update dependency fastapi to ^0.83.0

features:
- df0a4a2b: (rpc) add /rpc/v5/{type} openapi-compatible routes
- 9faa7b80: add cdn.jsdelivr.net to script/style CSP

miscellaneous tasks:
- a84d115f: (deps) add renovate.json
- 655402a5: (deps) update dependency pytest-asyncio to ^0.19.0
- a39f34d6: (deps) update dependency pytest to v7

testing:
- 83ddbd22: get /requests displays all requests, including those without a User
- 25e05830: test that /packages/{name} produces the package's description

upgrade:
- 5e75a00c: bump to version v6.1.3

Release v6.1.2 - Bugfixes

bugfixes:
- b8a4ce4c: include maint/comaint state in pkgbase post's error context

upgrade:
- 6435c2b1: bump to version v6.1.2

Release v6.1.1

upgrade:
- 8a3a7e31: bump version to v6.1.1

Release v6.1.0 - Features & Bugfixes

bugfixes:
- 8598ea6f: (gitlab-ci) update coverage reporting in CI
- 98f55879: (docker) don't run redis with protected mode
- 4a58e134: (docker) fix typo scheme -> schema
- 0b03a687: (docker) document runtime deps
- 034e47bc: hide Unflag package from non-maintainers
- 28970ccc: align text on left
- a509e404: (python) use standard dict/list type annotation
- 1d633536: strip whitespace when parsing package keywords
- 0e82916b: (python) don't show maintainer link for non logged in users
- 913ce8a4: (performance) lazily load expensive modules within aurweb.db
- 952c2478: (docker) apply chown each time sshd is started
- d63615a9: (docker) fix ca entrypoint logic and healthcheck
- 9497f6e6: (aurweb) resolve exception in ratelimit
- 801df832: (rpc) correct URLPath in package results
- 7b047578: correct kwarg name for approved users of creds.has_credential
- 7a52da55: guard POST keywords & allow co-maintainers to see keyword form
- 15d016eb: secure access to comment edits to user who owns the comment
- 33bf5df2: show unflag link to flagger
- f1073296: Use SameSite=Lax on cookies
- 8e43932a: (doc) re-add Max-Age to list of secure cookie attributes
- fd4aaed2: use max-age for all cookie expirations

documentation:
- ade624c2: (README) update contributing guidelines
- ce5dbf0e: (contributing) Update Coding Style

features:
- 2c080b2e: add pagination on comments
- 1a7f6e1f: (db) add an index for SSHPubKeys.PubKey
- 6c7e2749: (db) add an index for SSHPubKeys.PubKey (#2)
- fb1fb2ef: documentation for web authentication (login, verification)
- ab2956ee: add pytest unit of independent user unflagging
- 08d48520: allow co-maintainers to disown their pkg

miscellaneous tasks:
- edef6cc6: (css) drop old vendor prefixes
- 505eb904: Add .git-blame-ignore-revs file

styling:
- 9c6c13b7: Run pre-commit
- 57c04099: set flake8's max-line-length=88

ci:
- de5538a4: (lint) Use pre-commit
- fbb3e052: use cache/virtualenv for test dependencies
- 929bb756: (lint) add .pre-commit cache for pre-commit

update:
- 9648628a: requests dependency
- a82d552e: migrate new transifex client configuration
- 4565aa38: Swedish translations

Release v6.0.28 - 2022-05-12
---------------------------

bugfixes:
- a553d5d9: replace distutils.util.strtobool with our own
- 02d114d5: hide email when account's email hidden is set
- 0b544885: (poetry) remove mysql-connector dependency

changes:
- 7a525d76: remove poetry-dynamic-versioning

upgrade:
- 4ddd1dec: bump to v6.0.28

Release v6.0.27

features:
- ed41a4fe: add paging to package depends & required by

upgrade:
- cf4295a1: bump to v6.0.27

Release v6.0.26 - Metrics fix
--------------------

bugfixes:
- 790ca419: coherenace -> coherence
- afd25c24: remove HEAD and OPTIONS handling from metrics

changes:
- 3aa8d523: (rpc) `search` module reformatting

documentation:
- 7ddce6bb: update CONTRIBUTING.md

Release v6.0.25

features:
- 49c5a3fa: display stats about total & active TUs on proposals

upgrade:
- d7cb04b9: bump to v6.0.25

Release v6.0.24 - Bugfixes

bugfixes:
- 6e837e0c: always provide a path
- a1a88ea8: (rpc) suggestions should only suggest based on <keyword>%

upgrade:
- 0afa07ed: bump to v6.0.24

Release v6.0.23

bugfixes:
- 13217be9: don't check suspension for ownership changes

testing:
- e00cf5f1: use smtplib.SMTP[_SSL] timeout = notifications.smtp-timeout

upgrade:
- 2a393f95: bump to v6.0.23

Release v6.0.22 - Bugfixes

bugfixes:
- 5045f0f3: copy.js javascript initialization
- b80d914c: click to copy when there is more than one copy link on the page.

upgrade:
- e2a17fef: bump to v6.0.22

Release v6.0.21 - Bugfixes

bugfixes:
- 6a243e90: only reject addvote for users with running proposals

upgrade:
- f11e8de2: bump to v6.0.21

Release v6.0.20

bugfixes:
- 9204b761: ...do not add to ActiveTUs when voting on a proposal

documentation:
- 9f452a62: fix link formatting in CONTRIBUTING
- 7c363797: (docker) basic usage instructions
- 27f30212: (docker) note ports and `curl` usage
- d92f1838: (docker) explain how to generate dummy data
- 1bb4daa3: merge CodingGuidelines into CONTRIBUTING.md

upgrade:
- c7c79a15: bump to v6.0.20

Release v6.0.19 - Hot-patch

bugfixes:
- 51d4b7f9: (rpc) limit Package results, not relationships

upgrade:
- 07e479ab: bump to v6.0.19

Release v6.0.18

bugfixes:
- 4a4fd015: blanking out particular fields when editing accounts
- 80622cc9: suspend check should check Suspended...

changes:
- c83c5cdc: log out details about PROMETHEUS_MULTIPROC_DIR

upgrade:
- 1e31db47: bump to v6.0.18

Release v6.0.17 - Hot-patch

bugfixes:
- 7cc20cd9: suspended users should not be able to login

upgrade:
- 388e64d0: bump to v6.0.17

Release v6.0.16 - Bugfixes

bugfixes:
- 4e641d94: unset InactivityTS for users on login
- 1d86b3e2: use a transaction for package query; remove refresh
- 8387f325: resolve null VoteTS columns via migration
- 14347232: treat all keywords as lowercase when updating

upgrade:
- e43e1c6d: bump to v6.0.16

Release v6.0.15

bugfixes:
- dcaf4075: /packages search result count

changes:
- bfd59229: display default package search parameter values in its form

upgrade:
- b2508e5b: bump to v6.0.15

Release v6.0.14 - Bugfixes

bugfixes:
- 040c9bc3: send up to date flag notifications
- 36116309: /packages search ordering links
- e3864d4b: set RequestTS when autogenerating requests

upgrade:
- 0bfecb98: bump to v6.0.14