Changelog:
New
Firefox 67 demonstrates improved performance thanks to a number of changes such as:
Lowering priority of setTimeout during page load
Delayed component initialization until after start up
Painting sooner during page load but less often
Suspending unused tabs
Learn more about our approach to performance in 67 in the Mozilla blog.
Users can block known cryptominers and fingerprinters in the Custom settings of their Content Blocking preferences.
Keyboard accessibility has improved in the latest version of Firefox. Toolbar and toolbar overflow menu are both fully keyboard accessible: keyboard users can now access add-ons, the downloads panel, the overflow, Page actions and Firefox menus, and much more.
Private Browsing sees both usability and security improvements:
Save passwords in private browsing mode
Choose which extensions to exclude from private tabs
A myriad of new features help make Firefox easier to use:
We’ve added a toolbar menu for your Firefox Account to provide more transparency for when you are synced, sharing data across devices and with Firefox. Personalize the appearance of the menu with your own avatar
Tabs can now be pinned from the Page Actions menu in the address bar
Firefox will highlight useful features (like Pin Tabs) when users are most likely to benefit from them.
Easier access to your list of saved logins from the main menu and login autocomplete. Learn about all the ways you can manage your passwords in Firefox.
The Import Data from Another Browser feature is now also available from the File menu
Users will be able to run different Firefox installs side by side by default so that you can run the beta and release versions simultaneously
Firefox will now protect you against running older versions of the browser which can lead to data corruption and stability issues
Firefox is upgrading to the newer, higher performance, AV1 decoder known as ‘dav1d’
WebRender is gradually enabled by default on Windows 10 desktops with NVIDIA graphics cards
Mozilla’s highest performing JavaScript compiler now supports ARM64 Windows devices.
Enable FIDO U2F API, and permit registrations for Google Accounts
Some users will see experiments with an improved Pocket experience in Firefox Home with different layouts and more topical content.
Fixed
Various security fixes
#CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
#CVE-2019-9816: Type confusion with object groups and UnboxedObjects
#CVE-2019-9817: Stealing of cross-domain images using canvas
#CVE-2019-9818: Use-after-free in crash generation server
#CVE-2019-9819: Compartment mismatch with fetch API
#CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
#CVE-2019-9821: Use-after-free in AssertWorkerThread
#CVE-2019-11691: Use-after-free in XMLHttpRequest
#CVE-2019-11692: Use-after-free removing listeners in the event listener manager
#CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
#CVE-2019-7317: Use-after-free in png_image_free of libpng library
#CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
#CVE-2019-11695: Custom cursor can render over user interface outside of web content
#CVE-2019-11t .JNLP files are not recognized as executable files for download prompts
#CVE-2019-11697: Pressing key combinations can bypass installation prompt delays and install extensions
#CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to andsulting bookmark is subsequently dragged and dropped into the web content area, an arbitrary query of a user's browser history can be run and transmitted to the content page via drop event data. This allows for the theft of browser history by a malicious site.
#CVE-2019-11700: res: protocol can be used to open known local files
#CVE-2019-11699: Incorrect domain name highlighting during page navigation
#CVE-2019-11701: webcal: protocol default handler loads vulnerable web page
#CVE-2019-9814: Memory safety bugs fixed in Firefox 67
#CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
1. Added a missing build dependency, devel/yasm.
2. Fixed build failures when compiling with rust>=1.33 by disabling the
--enable-rust-simd flag for now. (borrowed from ryoon@'s fix from
www/firefox)
3. Bumped the rust dependency minimum version to 1.31.
4. Bump PKGREVISION
pkgsrc changes:
- Remove patch-configure test(1) `==' -> `=' hunk applied upstream
Changes:
7.65.0
------
This release includes the following changes:
o CURLOPT_DNS_USE_GLOBAL_CACHE: removed
o CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
o pipelining: removed
This release includes the following bugfixes:
o CVE-2019-5435: Integer overflows in curl_url_set
o CVE-2019-5436: tftp: use the current blksize for recvfrom()
o --config: clarify that initial : and = might need quoting
o AppVeyor: enable testing for WinSSL build
o CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
o CURLOPT_ADDRESS_SCOPE: fix range check and more
o CURLOPT_CAINFO.3: with Schannel, you want Windows 8 or later
o CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
o CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
o CURL_MAX_INPUT_LENGTH: largest acceptable string input size
o Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
o INTERNALS: Add code highlighting
o OS400/ccsidcurl: replace use of Curl_vsetopt
o OpenSSL: Report -fips in version if OpenSSL is built with FIPS
o README.md: fix no-consecutive-blank-lines Codacy warning
o VC15 project: remove MinimalRebuild
o VS projects: use Unicode for VC10+
o WRITEFUNCTION: add missing set_in_callback around callback
o altsvc: Fix building with cookies disabled
o auth: Rename the various authentication clean up functions
o base64: build conditionally if there are users
o build-openssl.bat: Fixed support for OpenSSL v1.1.0+
o build: fix "clarify calculation precedence" warnings
o checksrc.bat: ignore snprintf warnings in docs/examples
o cirrus: Customize the disabled tests per FreeBSD version
o cleanup: remove FIXME and TODO comments
o cmake: avoid linking executable for some tests with cmake 3.6+
o cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
o cmake: rename CMAKE_USE_DARWINSSL to CMAKE_USE_SECTRANSP
o cmake: set SSL_BACKENDS
o configure: avoid unportable `==' test(1) operator
o configure: error out if OpenSSL wasn't detected when asked for
o configure: fix default location for fish completions
o cookie: Guard against possible NULL ptr deref
o curl: make code work with protocol-disabled libcurl
o curl: report error for "--no-" on non-boolean options
o curl_easy_getinfo.3: fix minor formatting mistake
o curlver.h: use parenthesis in CURL_VERSION_BITS macro
o docs/BUG-BOUNTY: bug bounty time
o docs/INSTALL: fix broken link
o docs/RELEASE-PROCEDURE: link to live iCalendar
o documentation: Fix several typos
o doh: acknowledge CURL_DISABLE_DOH
o doh: disable DOH for the cases it doesn't work
o examples: remove unused variables
o ftplistparser: fix LGTM alert "Empty block without comment"
o hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
o http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
o http: acknowledge CURL_DISABLE_HTTP_AUTH
o http: mark bundle as not for multiuse on < HTTP/2 response
o http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
o http_negotiate: do not treat failure of gss_init_sec_context() as fatal
o http_ntlm: Corrected the name of the include guard
o http_ntlm_wb: Handle auth for only a single request
o http_ntlm_wb: Return the correct error on receiving an empty auth message
o lib509: add missing include for strdup
o lib557: initialize variables
o makedebug: Fix ERRORLEVEL detection after running where.exe
o mbedtls: enable use of EC keys
o mime: acknowledge CURL_DISABLE_MIME
o multi: improved HTTP_1_1_REQUIRED handling
o netrc: acknowledge CURL_DISABLE_NETRC
o nss: allow fifos and character devices for certificates
o nss: provide more specific error messages on failed init
o ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
o ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
o openssl: mark connection for close on TLS close_notify
o openvms: Remove pre-processor for SecureTransport
o openvms: Remove pre-processors for Windows
o parse_proxy: use the URL parser API
o parsedate: disabled on CURL_DISABLE_PARSEDATE
o pingpong: disable more when no pingpong protocols are enabled
o polarssl_threadlock: remove conditionally unused code
o progress: acknowledge CURL_DISABLE_PROGRESS_METER
o proxy: acknowledge DISABLE_PROXY more
o resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
o revert "multi: support verbose conncache closure handle"
o sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
o sasl: only enable if there's a protocol enabled using it
o scripts: fix typos
o singleipconnect: show port in the verbose "Trying ..." message
o smtp: fix compiler warning
o socks5: user name and passwords must be shorter than 256
o socks: fix error message
o socksd: new SOCKS 4+5 server for tests
o spnego_gssapi: fix return code on gss_init_sec_context() failure
o ssh-libssh: remove unused variable
o ssh: define USE_SSH if SSH is enabled (any backend)
o ssh: move variable declaration to where it's used
o test1002: correct the name
o test2100: Fix typos in test description
o tests/server/util: fix Windows Unicode build
o tests: Run global cleanup at end of tests
o tests: make Impacket (SMB server) Python 3 compatible
o tool_cb_wrt: fix bad-function-cast warning
o tool_formparse: remove redundant assignment
o tool_help: Warn if curl and libcurl versions do not match
o tool_help: include <strings.h> for strcasecmp
o transfer: fix LGTM alert "Comparison is always true"
o travis: add an osx http-only build
o travis: allow builds on branches named "ci"
o travis: install dependencies only when needed
o travis: update some builds do Xenial
o travis: updated mesalink builds
o url: always clone the CUROPT_CURLU handle
o url: convert the zone id from a IPv6 URL to correct scope id
o urlapi: add CURLUPART_ZONEID to set and get
o urlapi: increase supported scheme length to 40 bytes
o urlapi: require a non-zero host name length when parsing URL
o urlapi: stricter CURLUPART_PORT parsing
o urlapi: strip off zone id from numerical IPv6 addresses
o urlapi: urlencode characters above 0x7f correctly
o vauth/cleartext: update the PLAIN login to match RFC 4616
o vauth/oauth2: Fix OAUTHBEARER token generation
o vauth: Fix incorrect function description for Curl_auth_user_contains_domain
o vtls: fix potential ssl_buffer stack overflow
o wildcard: disable from build when FTP isn't present
o winbuild: Support MultiSSL builds
o xattr: skip unittest on unsupported platforms
v6.5.5
- :issue:99 via :pr:186': Sockets now collect statistics (bytes
read and written) on Python 3 same as Python 2.
- :cp-issue:1618 via :pr:180: Ignore OpenSSL's 1.1+ Error 0
under any Python while wrapping a socket.
6.1.6:
Features / Enhancements
Security: Bump jQuery to 3.4.0
Bug Fixes
Playlist: Fix loading dashboards by tag.
6.1.5:
Security: Urgent security patch release.
6.1.4:
Bug Fixes
DataPanel: Added missing built-in interval variables to scopedVars.
Explore: Adds maxDataPoints to data source query options .
Explore: Fixes so intervals are recalculated on run query.
Heatmap: Fix for empty graph when panel is too narrow.
Heatmap: Fixed auto decimals when bucket name is not number.
QueryInspector: Now shows error responses again.
6.1.3:
Bug Fixes
Graph: Fixed auto decimals in legend values for some units like ms and s.
Graph: Fixed png rendering with legend to the right.
Singlestat: Use decimals when manually specified.
UI Switch: Fix broken UI switches. Fixes Default Data Source switch, Explore Logs switches, Gauge option switches.
6.1.2:
Bug Fixes
Graph: Fixed series legend color for hidden series.
Graph: Fixed tooltip highlight on white theme.
Styles: Fixed menu hover highlight border.
Singlestat Panel: Correctly use the override decimals.
6.1.1:
Bug Fixes
Alerting: Notification channel http api fixes.
Graphite: Editing graphite query function now works again.
Playlist: Kiosk & auto fit panels modes are working normally again .
QueryEditors: Toggle edit mode now always work on slower computers.
6.1.0:
Bug Fixes
CloudWatch: Fix for dimension value list when changing dimension key.
Graphite: Editing function arguments now works again.
InfluxDB: Fix tag names with periods in alert evaluation.
PngRendering: Fix for panel height & title centering .
Templating: Fix for editing query variables.
Changelog:
This is a bug-fix release with one important fix. There have been
reports about infrequent paginator crashes when running the Hugo
server since 0.55.0. The reason have been narrowed down to that of
parallel rebuilds. This isn't a new thing, but the changes in 0.55.0
made it extra important to serialize the page initialization. This
release fixes that by protecting the Build method with a lock when
running in server mode. 95ce2a40 @bep #5885#5968
TEXTURE_MAPPER_COLOR_CONVERT_FLAG is defined only if GSTREAMER_GL
is defined (it is not in pkgsrc package). Backport a patch from
upstream to address that.
Thanks to <wiz> for reporting this problem!
Version 2.4.0
- Make engine configuration more flexible.
- Address SQLAlchemy 1.3 deprecations.
- get_or_404() and first_or_404() now accept a description
parameter to control the 404 message.
- Use time.perf_counter for Python 3 on Windows.
- Drop support for Python 2.6 and 3.3.
- Add an example of Flask's tutorial project, Flaskr, adapted for
Flask-SQLAlchemy.
Version 1.0.3
- :func:send_file encodes filenames as ASCII instead of Latin-1
(ISO-8859-1). This fixes compatibility with Gunicorn, which is
stricter about header encodings than PEP 3333.
- Allow custom CLIs using FlaskGroup to set the debug flag without
it always being overwritten based on environment variables.
- flask --version outputs Werkzeug's version and simplifies the
Python version.
- :func:send_file handles an attachment_filename that is a
native Python 2 string (bytes) with UTF-8 coded bytes.
- A catch-all error handler registered for HTTPException will not
handle RoutingExcpetion, which is used internally during
routing. This fixes the unexpected behavior that had been introduced
in 1.0.
- Passing the json argument to app.test_client does not
push/pop an extra app context.
Changelog
* Add functions utility compile unit
* Move macros and helpers to fn_utils
* Protect some header defines from redefining
* Move number functions to own compile unit
* Move selector functions to own compile unit
* Move color functions to own compile unit
* Move string functions to own compile unit
* Move list functions to own compile unit
* Move map functions to own compile unit
* Move misc functions to own compile unit
* Rename stacks to use shorter typedefs
* Cleanup CRTP implementation
* Rename ast2c and move c2ast to own compile unit
* Move AST memory macros to macro header
* Make Value inherit from PreValue
* Remove obsolete parameters
* Remove Function_Call_Schema class
* Remove obsolete in_selector flag
* Add distinct Parent_Reference class for values
* Fix parsing of colors (remove dynamic cast on eval)
* Pass traces instead of full context to bind
* Clean up get_arg_m in fn_utils
* Change String_Schema to only hold PreValue objects
* Clean up function macros and force to return PreValues
* Enhance stacktrace to report column numbers
* Add display name for color to debugger
* Add get method for environment class
* Remove obsolete function constructor arguments
* Add EnvStack typedef
* Replace direct references with methods
* Adjust output/error for modulo zero operation
* Adjust output/error for modulo zero operation
* Fix automake build if sassc is missing
* Upgrade sass2scss to version 1.1.2
* Allow colors in @at directives
* Fix edge case converting achromatic colors to HSL
* Delay interpolated expression as in regular CSS
* Fix automake build if sassc is missing
* Upgrade sass2scss to version 1.1.2
* Allow colors in @at directives
* Fix edge case converting achromatic colors to HSL
* Delay interpolated expression as in regular CSS
* Fix parsing of colors (remove dynamic cast on eval)
* Allow "!" in custom property values
* Allow "!" in custom property values
* Include Haskell bindings in implementations list
* Fix ordering in implementations list
* Fix link to node-sass implementation
* Separate out deprecated import file extensions
* Add a deprecation warning for @import's that resolved .css files
* Add support for index imports
* Add configuration for supporting additional extensions as .scss
* Remove raw css imports
* Inline out_of_memory macro
* Inline out_of_memory macro
* Emit transparent colors as rgba(0, 0, 0, 0)
* Fix merging of nested media queries with not
* Fix merging of nested media queries with not
* Fix regression in parsing selector with trailing escaped colon
* Fix regression in parsing selector with trailing escaped colon
* Emit transparent colors as rgba(0, 0, 0, 0)
* Add configuration for supporting additional extensions as .scss
* Remove raw css imports
* Mentioned SharpScss and LibSassHost in implementations.md
* Update compatibility section of the read me
* Fix segfault on empty custom properties
* Fix segfault on empty custom properties
* Include Haskell bindings in implementations list
* Fix ordering in implementations list
* Fix link to node-sass implementation
* Mentioned SharpScss and LibSassHost in implementations.md
* Revert "Upgrade sass2scss to version 1.1.2"
* Add deprecation messages for color arithmetic
* Add deprecation messages for color arithmetic
* Fix explosion of parent selectors in selector-nest
* Include in operation.hpp
* Adds another Nim implementation
* Update Readme.md
* Remove legacy workaround for parsing modulo operator
* Fix handling of unclosed interpolant in url
* Create CODE_OF_CONDUCT.md
* Revert "Remove raw css imports"
* Revert "Add configuration for supporting additional extensions as .scss"
* Revert "Add a deprecation warning for @import's that resolved .css files"
* Revert "Separate out deprecated import file extensions"
* Revert "Remove raw css imports"
* Revert "Add configuration for supporting additional extensions as .scss"
* Remove legacy workaround for parsing modulo operator
* Fix handling of unclosed interpolant in url
* Fix possible bug with handling empty reference combinators
* Fix -Wmissing-declarations for gcc < 7
* Support hex colors with alpha channels
* Make plugin tests run with a precision of 5
* Update make CC and CXX defaults for wider compat
* Update link to perl-libsass implementation
* Fix -Wmissing-declarations for gcc < 7
* Support hex colors with alpha channels
* Fix possible bug with handling empty reference combinators
* Update plugin test script to use precision 5
* Makefile: Use order-only deps for directories
* Use precision 10 by default
* Set default precision to 10 in Sass_Output_Options
* Docs: Profiling
* SharedPtr: Remove explicit detached bool
* Remove -undefined error, --no-undefined LDFLAGS
* SharedPtr: More cleanup
* Makefile cleanup
* Disable failing coverage check
* Fix ignored :not(multiple, selectors)
* Actually fix coveralls failures
* Use -std=c++11
* AST: Add final specifier to final classes
* Fix selector unification ordering
* Add and use a unification_order method
* Fix memory leak introduced in March
* Fix memory leak in resolve_parent_refs
* Revert "SharedPtr: More cleanup"
* Revert "SharedPtr: Remove explicit detached bool"
* AST: Fix clang warnings, add const, remove virtual
* .travis.yml: sudo: required for ptrace support
* Fix 2 more memory leaks
* Selector unification: use == for comparison
* Do not use 0 for initializing SharedImpl
* Add /plugins/ to .gitignore
* Fix a memory leak in rgba_2
* Travis ASan: Use default Travis clang (v5.0)
* Clean up Selector_List::operator==
* Fix heap-use-after-free in Parser error handling
* Optimize line_begin/end search in handle_error
* MSVC warning and fix
* Add a copy constructor to InvalidSass exception
* Minor fix: Reserve lists with correct sizes
* SharedPtr improvements
* Run C++ unit tests on CI (Makefile-only)
* Disallow parent selectors in selector-append
* Fix memory leak in parse_ie_keyword_arg
* Implement passing arguments to @content
* Clean up Compound_Selector::operator==
* Fix crash in selector-append('.x~~', 'a')
* Refactor: Add starts/ends_with functions
* Update utfcpp to v2.3.6
* Remove debugger from fn_miscs
* Move AST selectors into own compile units
* Move AST values into own compile units
* Fix clang warnings
* Cleanup and fix selector compare operators
* Rename element to type selector and type enums
* Replace to_string compare with == object compare
* Split AST declarations and definitions
* Move AST supports into own compile units
* Split AST declarations and definitions
* Cleanup AST values compare operators
* Fix clang warnings
* Refactor loops in Selector::unify_with
* Enable to read remote UNC locations on windows
* Re-implement selector unification
* Fix 2782: heap-use-after-free in expand.cpp
* Set without_rule flat only when explicitly requested by at_root
* Disallow optional pseudo_prefix
* Disallow parent selector in selector_fns arguments
* Refactor inspection/output of numbers
* Implement internal HSLA color representation
* Add deprecation for hsla with percentage alpha
* Fix number comparison for floats/doubles by calculations
* Fix VS2013 warning C4800 in src/ast_selectors.cpp
* Remove unused src/functions.{h,c}pp
* Catch exceptions by reference
* Simplify string concatenation
* indentation
* travis: Disable coverage for static OSX build
* Fixed typos
* Avoid clang warning: expression with side effects will be evaluated despite being used as an operand to 'typeid'
* Ensure sass.hpp is included before system headers
* Add comment about order to all sass.hpp includes
* https-ify sass-lang.com urls
* Fix broken markdown link
* Fix one more I missed due to faulty sed
* Install hrx gem in CI
* Install hrx gem in Windows CI
* Bump AppVeyor Ruby version
* Fix mixin-exists and function-exists in local scopes
* Avoid modifying Expression in ast_node_to_sass_value
* Remove _Ptr(_Const) typedefs
* Fix GCC warning: Catching polymorphic type by value
* Newlines: Parse \f and normalize in comments
* Make Makefile compatible with GNU Make >= 3.79.1
* Fix heap-use-after-free in eval.cpp
* Error on incomplete @supports clause in parser
* Fix invalid operator< for Selector_List
* Fix heap-buffer-overflow in prelexer.hpp:70
* Copy Unicode PWD tests from sass-spec
* Remove passing version flag to spec runner
* Remove unquoting for str_slice, str-insert and str-index
* Fix incorrect call to std::isdigit
* Remove obsolete unit tests
* Fix spec testing on mac with shared build
* Disallow non-string argument to quote
* Makefile: Mark test* targets as .PHONY
* Fix inspect for quoted strings
* Make parse_css_variable_value non-recursive
* Forbid empty custom property values
* Delete extconf.rb
Changelog:
Fix setupcheck for intl module (server#15223)
Take return of mkdir into consideration; photocache to not create a folder for deletion (server#15303)
Remove the custom prefix from the table name length when checking on … (server#15312)
Check if the data is in the lookup server (server#15341)
Do NOT assume all files are selected if the first checkbox is (server#15345)
Fix collapse button in app navigation in IE11 (server#15389)
Make sure all middlewares are only registered once (server#15399)
Allow to send the password of protected conversations (server#15405)
Remove extra margin from warning messages in authenticate page (server#15409)
Set Edge < 16 as incompatible with css vars (server#15417)
Remove extra param in cache update call (server#15418)
Handle 0 B default quota properly in the web UI (server#15424)
Fix multiselect min width (server#15433)
Make access column a real boolean (server#15434)
Fix public upload by also load the semaphore method (server#15439)
Remove setup args from logging (server#15442)
Use non-absolute logout URL to fix wrong URL in reverse proxy scenario (server#15452)
Fix mobile vertical scrolling (server#15469)
Remove recommendation for opcache on CLI (server#15471)
Update file-upload.js (server#15482)
Add interfaces to interact with subscription from support app (server#15513)
Fall back to application/octet-stream instead of using an invalid mim… (activity#374)
Only call setViewerMode if FileList is available (files_pdfviewer#132)
Use correct CSS URL, remove default marked settings and change to GFM rendering (files_texteditor#150)
Use correct method to determine if HTTPS is used (firstrunwizard#189)
Upstream changes:
6.39 2019-05-06 14:18:39Z
- Document current best practices (GH#314) (Olaf Alders)
- Document order in which handlers fire (GH#315) (Olaf Alders)
- SKIP nntp test for now (GH#317) (Olaf Alders)
Changes:
2.24.2
======
- Fix rendering of emojis copy-pasted from GTK emoji chooser.
- Fix space characters not being rendered with some CJK fonts.
- Fix adaptive streaming playback with older GStreamer versions.
- Set a maximum zoom level for pinch zooming gesture.
- Fix navigation gesture to not interfere with scrolling.
- Fix SSE2 detection at compile time, ensuring the right flags are passed to the compiler.
- Fix several crashes and rendering issues.
- Translation updates: Danish, Spanish, Ukrainian.
- Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615.
Update to the latest release, and, while here, get spell checking to
work.
Change log:
1.0.01 (2019-01-01):
- some enhancements in experimental backend for QtWebEngine (Blink):
-- download dialog is now shown for tab that initiated it;
-- added support for handling requests to print page;
- many other fixes.
0.9.99 RC 12 (2018-09-01):
- QtWebEngine backend no longer uses locks for fetching feeds, links or search engines;
- some other fixes.
0.9.99 RC 11 (2018-08-01):
- reworked handling of custom icons for toolbar entries;
- some other fixes.
There is no changes file or list of changes that I can find.
This version does generate files that are more compatible with newer
versions of eliom (removes deprecated types).
3.0.1:
Allow 'null' in CORS_ORIGIN_WHITELIST check.
3.0.0:
CORS_ORIGIN_WHITELIST now requires URI schemes, and optionally ports. This is part of the CORS specification (Section 3.2) that was not implemented in this library, except from with the CORS_ORIGIN_REGEX_WHITELIST setting. It fixes a security issue where the CORS middleware would allow requests between schemes, for example from insecure http:// Origins to a secure https:// site.
You will need to update your whitelist to include schemes, for example from this:
CORS_ORIGIN_WHITELIST = ['example.com']
...to this:
CORS_ORIGIN_WHITELIST = ['https://example.com']
Removed the CORS_MODEL setting, and associated class. It seems very few, or no users were using it, since there were no bug reports since its move to abstract in version 2.0.0 (2017-01-07). If you are using this functionality, you can continue by changing your model to not inherit from the abstract one, and add a signal handler for check_request_enabled that reads from your model. Note you'll need to handle the move to include schemes for Origins.
BUGFIXES
Fix 404 when sending pull requests in some situations (#6871) (#6873)
Enforce osusergo build tag for releases (#6862) (#6869)
Don't post process commit summary in templates (#6842) (#6868)
Fix 500 when reviewer is deleted (#6856) (#6860)
Fix v78 migration for MSSQL (#6823) (#6854)
Added tags pull step to drone config to show correct version hashes (#6836) (#6839)
Fix double-generation of scratch token (#6833) (#6835)
When mirroring we should set the remote to mirror (#6824) (#6834)
Show scrollbar only when needed (#6802) (#6803)
Service worker js is missing a comma (#6788) (#6795)
Set user search base field optional in LDAP (simple auth) edit page (#6779) (#6789)
Fix team edit API panic (#6780) (#6785)
Minor CSS cleanup for the navbar (#6553) (#6781)
Stricter domain name pattern in email regex (#6739) (#6768)
Detect and restore encoding and BOM in content (#6727) (#6765)
Fix org visibility bug when git cloning (#6743) (#6762)
OAuth2 token can be used in basic auth (#6747) (#6761)
Fix missing return (#6751) (#6756)
Fix sorting repos on org home page with non-admin login (#6741) (#6746)
Drop is_bare IDX only when it exists for MySQL and MariaDB (#6736) (#6744)
Fix team members API (#6714) (#6729)
Load issue attributes when editing an issue with API (#6723) (#6725)
Fix config ui error about cache ttl (#6861) (#6865)
* Convert to ffmpeg dependency to 4
Changelog:
Fixed:
Further improvements to re-enable web extensions which had been
disabled for users with a master password set (Bug 1549249).
Changelog:
0.55.0
This is a bug-fix release with a couple of important fixes.
Enhancements
Templates
Provide more detailed errors in Where f76e5011 @moorereason
Other
Regenerate docs helper cee181c3 @bep
Update blackfriday to v1.5.2 1cbb501b @dbirks
Fixes
Templates
Fix nil compare in eq/ne for interface values 66b143a0 @bep #5905
Fix hugo package name and add godocs 4f93f8c6 @moorereason
Output
Fix permalink in sitemap etc. when multiple permalinkable output formats 6b76841b @bep #5910
Core
Fix PrevInSection/NextInSection for nested sections bcbed4eb @bep #5883
Other
Fix concurrent initialization order 009076e5 @bep #5901
0.55.4
This is a bug-fix release with a couple of important fixes.
Enhancements
Core
Avoid recloning of shortcode templates 69a56420 @bep #5890
No links for bundled pages 0775c98e @bep #5882
Other
Avoid rebuilding the Translations map for every lookup 4756ec3c @bep #5892
Init mem profile at the end 4c3c5120 @bep
Fixes
Core
Fix shortcode version=1 logic 33c73811 @bep #5831
0.55.3
This is a bug-fix release with a couple of important fixes.
Enhancements
Templates
Return error on invalid input in in 7fbfedf0 @bep #5875
Make Pages etc. work with the in func 06f56fc9 @bep #5875
Make Pages etc. work in uniq d7a67dcb @bep #5852
Core
Add some OutputFormats.Get tests 7aeeb60d @bep #5877
Add some integration tests for in/uniq using Pages 6c80acbd @bep #5875#5852
Other
Regenerate docs helper 75b16e30 @bep
Replace IsDraft with Draft in list command 3e421bd4 @bep #5873
Fixes
Output
Fix links for non-HTML output formats c7dd66bf @bep #5877
Fix menu URL when multiple permalinkable output formats ea529c84 @bep #5849
0.55.2
This is a bug-fix release with a couple of important fixes.
Enhancements
Templates
Handle late transformation of templates 2957795f @bep #5865
Core
Add more tests for Permalinkable 35f41834 @bep #5849
Fixes
Core
Fix Pages reinitialization on rebuilds 9b17cbb6 @bep #5833
Fix shortcode namespace issue 56550d1e @bep #5863
Fix false WARNINGs in lang prefix check 7881b096 @bep #5860
Fix bundle resource publishing when multiple output formats 49d0a826 @bep #5858
Fix panic for unused taxonomy content files b799b12f @bep #5847
Fix dates for sections with dates in front matter 70148672 @bep #5854
Other
Fix WeightedPages in union etc. f2795d4d @bep #5850
0.55.1
This is a bug-fix release with a couple of important fixes.
Notes
Replace deprecated .GetParam usage 27a8049d @bep #5834
Enhancements
Core
Add a test for parent's resources in shortcode 8d7607ae @bep #5833
Other
Remove the space in . RelPermalink 7966c0b5 @yihui
Fixes
Core
Fix simple menu config 9e9a1f92 @bep
Other
Fix 4d425a86 @bep
Fix paginator refresh on server change f7375c49 @bep #5838
Fix .RSSLinke deprecation message 3b86b4a9 @bep #4427
0.55.0
Hugo 0.55 is the early Easter Egg Edition with lots of great improvements
and fixes. The original motivation for this release was to prepare for
Issue #5074, but the structural changes needed for that paved the way for
lots of others. Please study the list of changes below, and especially
the Notes section, but some headlines include:
