You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@allura.apache.org by br...@apache.org on 2025/08/08 15:56:53 UTC
(allura) branch master updated (37e951560 -> 9a6091a7b)
This is an automated email from the ASF dual-hosted git repository.
brondsem pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git
from 37e951560 for ease of development, make trusted_login_source allow some usernames
new b1fd96744 Update copyright year
new 9a6091a7b CHANGES updated for ASF release 1.18.0
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
Allura/NOTICE | 2 +-
Allura/docs/conf.py | 2 +-
CHANGES | 105 ++++++++++++++++++++++++++++++++++++++++++++
ForgeDiscussion/NOTICE | 2 +-
ForgeGit/NOTICE | 2 +-
ForgeImporters/NOTICE | 2 +-
ForgeImporters/docs/conf.py | 2 +-
ForgeLink/NOTICE | 2 +-
ForgeSVN/NOTICE | 2 +-
ForgeTracker/NOTICE | 2 +-
ForgeWiki/NOTICE | 2 +-
NOTICE | 2 +-
12 files changed, 116 insertions(+), 11 deletions(-)
(allura) 01/02: Update copyright year
Posted by br...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
brondsem pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git
commit b1fd967449cbb5fd4a49215c1c5639f17b088484
Author: Dave Brondsema <db...@slashdotmedia.com>
AuthorDate: Thu Aug 7 14:00:54 2025 -0400
Update copyright year
---
Allura/NOTICE | 2 +-
Allura/docs/conf.py | 2 +-
ForgeDiscussion/NOTICE | 2 +-
ForgeGit/NOTICE | 2 +-
ForgeImporters/NOTICE | 2 +-
ForgeImporters/docs/conf.py | 2 +-
ForgeLink/NOTICE | 2 +-
ForgeSVN/NOTICE | 2 +-
ForgeTracker/NOTICE | 2 +-
ForgeWiki/NOTICE | 2 +-
NOTICE | 2 +-
11 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/Allura/NOTICE b/Allura/NOTICE
index 066318d49..a9611b57d 100644
--- a/Allura/NOTICE
+++ b/Allura/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/Allura/docs/conf.py b/Allura/docs/conf.py
index c903bc24f..55f602acd 100644
--- a/Allura/docs/conf.py
+++ b/Allura/docs/conf.py
@@ -56,7 +56,7 @@
# General information about the project.
project = 'Apache Allura'
-copyright = '2012-2024 The Apache Software Foundation'
+copyright = '2012-2025 The Apache Software Foundation'
# The version info for the project you're documenting, acts as replacement for
# |version| and |release|, also used in various other places throughout the
diff --git a/ForgeDiscussion/NOTICE b/ForgeDiscussion/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeDiscussion/NOTICE
+++ b/ForgeDiscussion/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/ForgeGit/NOTICE b/ForgeGit/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeGit/NOTICE
+++ b/ForgeGit/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/ForgeImporters/NOTICE b/ForgeImporters/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeImporters/NOTICE
+++ b/ForgeImporters/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/ForgeImporters/docs/conf.py b/ForgeImporters/docs/conf.py
index 059458e96..b3c984ac1 100644
--- a/ForgeImporters/docs/conf.py
+++ b/ForgeImporters/docs/conf.py
@@ -52,7 +52,7 @@
# General information about the project.
project = 'Apache Allura'
-copyright = '2012-2024 The Apache Software Foundation'
+copyright = '2012-2025 The Apache Software Foundation'
# The version info for the project you're documenting, acts as replacement for
# |version| and |release|, also used in various other places throughout the
diff --git a/ForgeLink/NOTICE b/ForgeLink/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeLink/NOTICE
+++ b/ForgeLink/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/ForgeSVN/NOTICE b/ForgeSVN/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeSVN/NOTICE
+++ b/ForgeSVN/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/ForgeTracker/NOTICE b/ForgeTracker/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeTracker/NOTICE
+++ b/ForgeTracker/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/ForgeWiki/NOTICE b/ForgeWiki/NOTICE
index 066318d49..a9611b57d 100644
--- a/ForgeWiki/NOTICE
+++ b/ForgeWiki/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
diff --git a/NOTICE b/NOTICE
index 066318d49..a9611b57d 100644
--- a/NOTICE
+++ b/NOTICE
@@ -1,5 +1,5 @@
Apache Allura
-Copyright 2012-2024 The Apache Software Foundation
+Copyright 2012-2025 The Apache Software Foundation
This product includes software developed at
The Apache Software Foundation (http://www.apache.org/).
(allura) 02/02: CHANGES updated for ASF release 1.18.0
Posted by br...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
brondsem pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/allura.git
commit 9a6091a7b946ea48c26a98516742fe2b76530965
Author: Dave Brondsema <db...@slashdotmedia.com>
AuthorDate: Fri Aug 8 11:12:49 2025 -0400
CHANGES updated for ASF release 1.18.0
---
CHANGES | 105 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 105 insertions(+)
diff --git a/CHANGES b/CHANGES
index 83471a400..78e8f2f6b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,108 @@
+Version 1.18.0 (August 2025)
+
+Upgrade Instructions
+
+ Run: `paster ensure_index development.ini` in Allura dir
+
+ Install updated dependencies by running:
+ pip install -r requirements.txt --no-deps --upgrade --upgrade-strategy=only-if-needed
+
+ If using docker, rebuild the allura image and restart containers.
+
+ To upgrade to stronger password hashing, see auth.password.algorithm and .old in development.ini.
+
+ To require logins from new locations with MFA to verify a code by email, set in your .ini file:
+ auth.email_auth_code.enabled = true
+
+ To enforce stricter login session handling, set in your .ini file:
+ auth.reject_untracked_sessions = true
+
+Breaking Changes
+ * Python 3.8 is no longer supported (3.9 through 3.11 are supported)
+
+Security Improvements
+ * [#8566] support newer pwd hashs, remove deprecated 'crypt' AUTH PLUGIN CHANGES
+ * [#8568] support basic auth to solr
+ * [#8572] add more password change settings
+ * Use email authentication code for foreign logins without MFA
+ * Track session ids on user records
+ * Python Package Upgrades
+ * [#8576] upgrade JS libraries a bit
+ * support CSP fenced-frame-src config
+
+Admin & Accounts
+ * [#8577] Allow notes on new projects section
+ * [#8573] Prevent bad permissions setup
+ * fix permissions options to show anonymous/read for private projects
+ * be more forgiving if a multifactor session gets disrupted due to being actually logged in already
+ * [#8579] Set Clear-Site-Data response header upon logout
+ * avoid error in audit-logging if a tool is missing an option field
+ * if you end up on /auth/ or /auth/multifactor already fully logged in, skip that form
+ * incomplete multifactor auth redirs back to form, instead of messing with session (problematic if you have any background requests like images, ajax etc)
+ * task view improvements: show project neighborhood, remove ming I prefixes on args/kwargs
+ * enforce new passwords (not current one again) on pwd reset links
+ * for users its better to link to the Activity rss/atom feed instead of user-project FeedItem feed
+ * rename 'Twitter Handle' -> 'X Handle' on admin metadata page
+ * skip per-user and per-nbhd limit checks when creating a user project
+ * make scripts/add_user_to_group.py work without a --replaces-users value
+
+Code Repositories
+ * remove encoding that turns author string into utf-8 bytes
+ * small hint on repo viewable extensions format
+
+Wikis
+ * fix for wiki pages that don't have any history
+
+Discussion Forums
+ * fix bugs on the discussion moderation form
+
+General
+ * increase akismet default timeout
+ * don't send bytes to akismet, that causes b' prefix to be sent
+
+Solr
+ * add storeOffsetsWithPositions in case "unified" highligher is used in future, it gives better performance
+ * be explicit about docValues for faceting used on tickets
+ * enable autoSoftCommit in config, since commitWithin from code doesn't seem to be working
+ * clean up unused solr fields
+ * set solr.use_new_types=true for tests
+
+For Developers
+ * Convert REST API docs to OpenAPI
+ * [#8574] Update smtpd and asynchat
+ * [#8580] Update method for the installation of packages in editable mode
+ * Update copyright year
+ * for ease of development, make trusted_login_source allow some usernames
+ * update ruff version and ruff rules
+ * include more response text in urlopen error logging
+ * small tweak to allow 'no_negated_flags=False' to defoptscript
+ * Change _session_id cookie to _csrf_token
+ * support configs for COOP/CORP/COEP headers
+ * ensure_index: make deduping work on nested fields like "foo.bar.baz"
+ * ensure_index: deduping on a sparse index only needs to look at records where the field exists
+ * ensure_index: require explicit --delete-duplicate-key-records to delete records
+ * Use "uv" to generate a universal req.txt for 3.9+
+ * speedup functional tests by caching jinja bytecode across tests
+ * update tg_context_patch for python 3.12
+ * create return_to redirect helper
+ * also detect 'fetch()' requests as ajax
+ * fix and simplify beautifulsoup selector
+ * pep8 reformatting
+ * clean up unused imports, mark helpers.py lines that we need to keep
+ * __all__ for model/__init__.py files
+ * Convert unittest assertions -> pytest
+ * test speedup: always use lxml (if html5lib is selected, some tests fail)
+ * test speedup: smarter bs4 parser selection
+ * test speedup: response.html faster parser
+ * run: find Allura* Forge* fuse/ scripts/ -name '*.py' | xargs pyupgrade --py39-plus --keep-mock && git co scripts/ApacheAccessHandler.py
+ * fix attribute errors in @LazyProperty methods
+ * change httpbin service used in a few tests
+ * remove some unneeded warnings filtering
+ * support per-page csp_frame_domains modifier
+ * running with threads is good, for our prod example
+ * publicize security fix in changelog
+
+
Version 1.17.1 (June 2024)
Upgrade Instructions