Show More
@@ -0,0 +1,133 b'' | |||
|
1 | |RCE| 4.13.0 |RNS| | |
|
2 | ------------------ | |
|
3 | ||
|
4 | Release Date | |
|
5 | ^^^^^^^^^^^^ | |
|
6 | ||
|
7 | - 2018-09-05 | |
|
8 | ||
|
9 | ||
|
10 | New Features | |
|
11 | ^^^^^^^^^^^^ | |
|
12 | ||
|
13 | - Branch permissions: new set of permissions were added to control branch modification. | |
|
14 | There are 4 basic permissions that can be set for branch names/branch patterns: | |
|
15 | * no-access (any modification for given branch is forbidden) | |
|
16 | * web-merge (modify branch by web based PR merge) | |
|
17 | * push (only non-forced modification on branch are allowed) | |
|
18 | * forced push (all modification to branch are allowed) | |
|
19 | Available in EE edition only. | |
|
20 | - Unified search and repo-switcher: a new persistent search box is now present allowing | |
|
21 | to search for repositories, repository groups, commits (using full text search), | |
|
22 | users, user-groups. Replaces redundant quick-filters/repo switcher. | |
|
23 | - Default Reviewers: added possibility to match against regex based pattern as | |
|
24 | alternative syntax to glob which didn't handle all the cases. | |
|
25 | - Built-in Error tracker: added new exception tracking capability. All errors are now | |
|
26 | tracked and stored. This allows instance admins to see potential problems without | |
|
27 | access to the machine and logs. | |
|
28 | - User Groups: each user group which users have access to expose public profile link. | |
|
29 | It's possible to view the members of a group before attaching it to any resource. | |
|
30 | - New caching framework: existing Beaker cache was completely replaced by dogpile.cache | |
|
31 | library. This new cache framework in addition to solving multiple | |
|
32 | performance/reliability problems of Beaker is used to cache permissions tree. | |
|
33 | This gives huge performance boosts for very large and complex permission trees. | |
|
34 | - Pull Requests: description field is now allowed to use a RST/Markdown syntax. | |
|
35 | - SVN: added support for SVN 1.10 release line. | |
|
36 | ||
|
37 | ||
|
38 | General | |
|
39 | ^^^^^^^ | |
|
40 | ||
|
41 | - Google: updated google auth plugin with latest API changes. | |
|
42 | - Frontend: Switched to Polymer 2.0. | |
|
43 | - Events: added a default timeout for operation calling the endpoint url, so | |
|
44 | they won't block forever. | |
|
45 | - SQLAlchemy: allow DB connection ping/refresh using dedicated flag from .ini file. | |
|
46 | `sqlalchemy.db1.ping_connection = true` | |
|
47 | - Pull Requests: added option to force-refresh merge workspace in case of problems. | |
|
48 | Adding GET param `?force_refresh=1` into PR page triggers the refresh. | |
|
49 | - Pull Requests: show more info about version of comment vs latest version. | |
|
50 | - Diffs: skip line numbers during copy from a diff view. | |
|
51 | - License: use simple cache to read license info. | |
|
52 | Due to the complex and expensive encryption, this reduces requests time by ~10ms. | |
|
53 | - Debug: add new custom logging to track unique requests across systems. | |
|
54 | Allows tracking single requests in very busy system by unique ID added into logging system. | |
|
55 | - Configuration: .ini files now can replace a special placeholders e.g "{ENV_NAME}" | |
|
56 | into a value from the ENVIRONMENT. Allows easier setup in Docker and similar. | |
|
57 | - Backend: don't support vcsserver.scm_app anymore, now it uses http even if scm_app | |
|
58 | is specified. | |
|
59 | - Repositories: re-order creation/fork forms for better UX and consistency. | |
|
60 | - UI: Add the number of inactive users in _admin/users and _admin/user_groups | |
|
61 | - UX: updated registration form to better indicate what is the process of binding a | |
|
62 | RhodeCode account with external one like Google. | |
|
63 | - API: pull-requests allow automatic title generation via API | |
|
64 | - VCSServer: errors: use a better interface to track exceptions and tracebacks. | |
|
65 | - VCSServer: caches: replaced beaker with dogpile cache. | |
|
66 | - GIT: use GIT_DISCOVERY_ACROSS_FILESYSTEM for better compatibility on NFS servers. | |
|
67 | - Dependencies: bumped mercurial to 4.6.2 | |
|
68 | - Dependencies: bumped evolve to 8.0.1 | |
|
69 | - Dependencies: bumped hgsubversion to 1.9.2 | |
|
70 | - Dependencies: bumped git version to 2.16.4 | |
|
71 | - Dependencies: bumped SVN to 1.10.2 | |
|
72 | - Dependencies: added alternative pymysql drivers for mysql | |
|
73 | - NIX: updated to 18.03 nix packages, now shipped with python 2.7.15 | |
|
74 | release and multiple other new libraries. | |
|
75 | ||
|
76 | ||
|
77 | Security | |
|
78 | ^^^^^^^^ | |
|
79 | ||
|
80 | - Mercurial: general protocol security updates. | |
|
81 | * Fixes Mercurial's CVE for lack of permissions checking on mercurial batch commands. | |
|
82 | * Introduced more strict checks for permissions, now they default to push instead of pull. | |
|
83 | * Decypher batch commands and pick top-most permission to be required. | |
|
84 | * This follows changes in Mercurial CORE after 4.6.1 release. | |
|
85 | - Fixed bug in bleach sanitizer allowing certain custom payload to bypass it. Now | |
|
86 | we always fails if sanitizing fails. This could lead to stored XSS | |
|
87 | - Fixed stored XSS in binary file rendering. | |
|
88 | - Fixed stored XSS in repo forks datagrid. | |
|
89 | ||
|
90 | ||
|
91 | Performance | |
|
92 | ^^^^^^^^^^^ | |
|
93 | ||
|
94 | - Permissions: Permission trees for users and now cached, after calculation. | |
|
95 | This reduces response time for some pages dramatically. | |
|
96 | In case of any permission changes caches are invalidated. | |
|
97 | - Core: new dogpile.cache based cache framework was introduced, which is faster than | |
|
98 | previously used Beaker. | |
|
99 | ||
|
100 | ||
|
101 | Fixes | |
|
102 | ^^^^^ | |
|
103 | ||
|
104 | - Audit Logs: store properly IP for certain events. | |
|
105 | - External Auth: pass along came_from into the url so we get properly | |
|
106 | redirected back after logging using external auth provider. | |
|
107 | - Pull Requests: lock submit on pull request to prevent double submission on a fast click. | |
|
108 | - Pull Requests: fixed a case of unresolved comments attached to removed file in pull request. | |
|
109 | That prevented from closing it. | |
|
110 | - Pull Requests: use numeric repo id for creation of shadow repos. Fixes a problem | |
|
111 | when repository is renamed during PR lifetime. | |
|
112 | - API: fixed creation of a pull request with default reviewer rules. | |
|
113 | - Default Reviewers: fixed voting rule calculation on user group. | |
|
114 | - Pull Requests: in GIT use force fetch and update for target ref. | |
|
115 | This solves a case when in PR a target repository is force updated (by push force) | |
|
116 | and is out of sync. | |
|
117 | - VCSServer: detect early potential locale problem, and fallback to LC_ALL=C, | |
|
118 | instead of crashing vcsserver. | |
|
119 | - Pull Requests: use a safer way of destroying shadow repositories. | |
|
120 | Fixes some problems in NFS storage and big repositories | |
|
121 | ||
|
122 | ||
|
123 | Upgrade notes | |
|
124 | ^^^^^^^^^^^^^ | |
|
125 | ||
|
126 | - The direct backend `vcsserver.scm_app` is not supported anymore. This backed was | |
|
127 | already deprecated some time ago. Now it will use `http` mode even if scm_app is | |
|
128 | specified. Please contact us in case you still use it, and not sure how to upgrade. | |
|
129 | - New dogpile cache settings are not ported to converted .ini. If users want to do | |
|
130 | adjustments please copy the settings over dogpile cache section from a newly | |
|
131 | generated rhodecode.template.ini file. This file is stored next to rhodecode.ini | |
|
132 | - SVN 1.10.2 was introduced in this release. Please make sure to update your | |
|
133 | mod_dav to the same version for best compatibility. |
@@ -1,119 +1,120 b'' | |||
|
1 | 1 | .. _rhodecode-release-notes-ref: |
|
2 | 2 | |
|
3 | 3 | Release Notes |
|
4 | 4 | ============= |
|
5 | 5 | |
|
6 | 6 | |RCE| 4.x Versions |
|
7 | 7 | ------------------ |
|
8 | 8 | |
|
9 | 9 | .. toctree:: |
|
10 | 10 | :maxdepth: 1 |
|
11 | 11 | |
|
12 | release-notes-4.13.0.rst | |
|
12 | 13 | release-notes-4.12.4.rst |
|
13 | 14 | release-notes-4.12.3.rst |
|
14 | 15 | release-notes-4.12.2.rst |
|
15 | 16 | release-notes-4.12.1.rst |
|
16 | 17 | release-notes-4.12.0.rst |
|
17 | 18 | release-notes-4.11.6.rst |
|
18 | 19 | release-notes-4.11.5.rst |
|
19 | 20 | release-notes-4.11.4.rst |
|
20 | 21 | release-notes-4.11.3.rst |
|
21 | 22 | release-notes-4.11.2.rst |
|
22 | 23 | release-notes-4.11.1.rst |
|
23 | 24 | release-notes-4.11.0.rst |
|
24 | 25 | release-notes-4.10.6.rst |
|
25 | 26 | release-notes-4.10.5.rst |
|
26 | 27 | release-notes-4.10.4.rst |
|
27 | 28 | release-notes-4.10.3.rst |
|
28 | 29 | release-notes-4.10.2.rst |
|
29 | 30 | release-notes-4.10.1.rst |
|
30 | 31 | release-notes-4.10.0.rst |
|
31 | 32 | release-notes-4.9.1.rst |
|
32 | 33 | release-notes-4.9.0.rst |
|
33 | 34 | release-notes-4.8.0.rst |
|
34 | 35 | release-notes-4.7.2.rst |
|
35 | 36 | release-notes-4.7.1.rst |
|
36 | 37 | release-notes-4.7.0.rst |
|
37 | 38 | release-notes-4.6.1.rst |
|
38 | 39 | release-notes-4.6.0.rst |
|
39 | 40 | release-notes-4.5.2.rst |
|
40 | 41 | release-notes-4.5.1.rst |
|
41 | 42 | release-notes-4.5.0.rst |
|
42 | 43 | release-notes-4.4.2.rst |
|
43 | 44 | release-notes-4.4.1.rst |
|
44 | 45 | release-notes-4.4.0.rst |
|
45 | 46 | release-notes-4.3.1.rst |
|
46 | 47 | release-notes-4.3.0.rst |
|
47 | 48 | release-notes-4.2.1.rst |
|
48 | 49 | release-notes-4.2.0.rst |
|
49 | 50 | release-notes-4.1.2.rst |
|
50 | 51 | release-notes-4.1.1.rst |
|
51 | 52 | release-notes-4.1.0.rst |
|
52 | 53 | release-notes-4.0.1.rst |
|
53 | 54 | release-notes-4.0.0.rst |
|
54 | 55 | |
|
55 | 56 | |RCE| 3.x Versions |
|
56 | 57 | ------------------ |
|
57 | 58 | |
|
58 | 59 | .. toctree:: |
|
59 | 60 | :maxdepth: 1 |
|
60 | 61 | |
|
61 | 62 | release-notes-3.8.4.rst |
|
62 | 63 | release-notes-3.8.3.rst |
|
63 | 64 | release-notes-3.8.2.rst |
|
64 | 65 | release-notes-3.8.1.rst |
|
65 | 66 | release-notes-3.8.0.rst |
|
66 | 67 | release-notes-3.7.1.rst |
|
67 | 68 | release-notes-3.7.0.rst |
|
68 | 69 | release-notes-3.6.1.rst |
|
69 | 70 | release-notes-3.6.0.rst |
|
70 | 71 | release-notes-3.5.2.rst |
|
71 | 72 | release-notes-3.5.1.rst |
|
72 | 73 | release-notes-3.5.0.rst |
|
73 | 74 | release-notes-3.4.1.rst |
|
74 | 75 | release-notes-3.4.0.rst |
|
75 | 76 | release-notes-3.3.4.rst |
|
76 | 77 | release-notes-3.3.3.rst |
|
77 | 78 | release-notes-3.3.2.rst |
|
78 | 79 | release-notes-3.3.1.rst |
|
79 | 80 | release-notes-3.3.0.rst |
|
80 | 81 | release-notes-3.2.3.rst |
|
81 | 82 | release-notes-3.2.2.rst |
|
82 | 83 | release-notes-3.2.1.rst |
|
83 | 84 | release-notes-3.2.0.rst |
|
84 | 85 | release-notes-3.1.1.rst |
|
85 | 86 | release-notes-3.1.0.rst |
|
86 | 87 | release-notes-3.0.2.rst |
|
87 | 88 | release-notes-3.0.1.rst |
|
88 | 89 | release-notes-3.0.0.rst |
|
89 | 90 | |
|
90 | 91 | |RCE| 2.x Versions |
|
91 | 92 | ------------------ |
|
92 | 93 | |
|
93 | 94 | .. toctree:: |
|
94 | 95 | :maxdepth: 1 |
|
95 | 96 | |
|
96 | 97 | release-notes-2.2.8.rst |
|
97 | 98 | release-notes-2.2.7.rst |
|
98 | 99 | release-notes-2.2.6.rst |
|
99 | 100 | release-notes-2.2.5.rst |
|
100 | 101 | release-notes-2.2.4.rst |
|
101 | 102 | release-notes-2.2.3.rst |
|
102 | 103 | release-notes-2.2.2.rst |
|
103 | 104 | release-notes-2.2.1.rst |
|
104 | 105 | release-notes-2.2.0.rst |
|
105 | 106 | release-notes-2.1.0.rst |
|
106 | 107 | release-notes-2.0.2.rst |
|
107 | 108 | release-notes-2.0.1.rst |
|
108 | 109 | release-notes-2.0.0.rst |
|
109 | 110 | |
|
110 | 111 | |RCE| 1.x Versions |
|
111 | 112 | ------------------ |
|
112 | 113 | |
|
113 | 114 | .. toctree:: |
|
114 | 115 | :maxdepth: 1 |
|
115 | 116 | |
|
116 | 117 | release-notes-1.7.2.rst |
|
117 | 118 | release-notes-1.7.1.rst |
|
118 | 119 | release-notes-1.7.0.rst |
|
119 | 120 | release-notes-1.6.0.rst |
General Comments 0
You need to be logged in to leave comments.
Login now