##// END OF EJS Templates
emails: don't use tag type for commit flow in pull-request type emails....
emails: don't use tag type for commit flow in pull-request type emails. - they don't render nicely in small devices - they are way off visually to all other elements of emails making it almost like a primary elements (which they aren't)

File last commit:

r2019:ca2092ce stable
r4104:0ecc8449 default
Show More
release-notes-4.9.0.rst
66 lines | 1.9 KiB | text/x-rst | RstLexer
/ docs / release-notes / release-notes-4.9.0.rst
docs: added release notes for 4.9.0
r2019 |RCE| 4.9.0 |RNS|
-----------------
Release Date
^^^^^^^^^^^^
- 2017-08-12
New Features
^^^^^^^^^^^^
General
^^^^^^^
- Off cycle Minor release to fix SCM vulnerabilities.
Security
^^^^^^^^
- security(critical): Bumped GIT to 2.9.5 fixes CVE-2017-1000117
https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1466490.html
- security(critical): Bumped SVN to 1.9.7 fixes CVE-2017-9800
https://subversion.apache.org/security/CVE-2017-9800-advisory.txt
- security(critical): Bumped Mercurial to 4.2.3 fixes CVE-2017-1000116
https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.3_.282017-08-10.29
Performance
^^^^^^^^^^^
- Fixed Mercurial Stream support for very large repositories. Due to discovered
bug in WebOb library we manage to fix Mercurial stream support.
Now cloning very large repos e.g 100GB, ~1mln commits should be much
faster, and use less memory.
Fixes
^^^^^
- Fixed problem with default-reviewers in EE package that was missing panel
title and in some occasions generate 500 errors.
- Fixed problem with potential URL generation inside our integration.
This was introduced during pyramid porting. We know ensure that proper
routing generation is done on all events.
Upgrade notes
^^^^^^^^^^^^^
- The 4.9.0 release is an off-cycle release. Due to the fact that we needed to
bump Mercurial from 4.1.X to 4.2.X, and Subversion from 1.9.4 to 1.9.7, we
released this version not as 4.8.1 security bug fix but 4.9.0.
We know historically that SVN and Mercurial can have internal api changes.
We tested basic functionality for all 3 vcs-es but due to very short release
time we were unable to test everything. Please report any found problems to us
and we'll for sure address them.
Note to SVN users: Please make sure to upgrade mod_dav to 1.9.7 version.
At this time we know Wandisco provides 1.9.7 packages for most major distros.