The official list of changes is shown below. However, this release also
switches to use GNU Autoconf and Automake, yet this is not shown in the
list of changes. This fact obsoletes our previous local changes, although
new portability problems might arise.
CHANGES FROM 1.4 TO 1.5, 09 July 2011
* Support xterm mouse modes 1002 and 1003.
* Change from a per-session stack of buffers to one global stack. This renders
copy-buffer useless and makes buffer-limit now a server option.
* Fix most-recently-used choice by avoiding reset the activity timer for
unattached sessions every second.
* Add a -P option to new-window and split-window to print the new window or
pane index in target form (useful to pass it into other commands).
* Handle a # at the end of a replacement string (such as status-left)
correctly.
* Support for UTF-8 mouse input (\033[1005h) which was added in xterm 262.
If the new mouse-utf8 option is on, UTF-8 mouse input is enabled for all
UTF-8 terminals. The option defaults to on if LANG etc are set in the same
manner as the utf8 option.
* Support for HP-UX.
* Accept colours of the hex form #ffffff and translate to the nearest from the
xterm(1) 256-colour set.
* Clear the non-blocking IO flag (O_NONBLOCK) on the stdio file descriptors
before closing them (fixes things like "tmux ls && cat").
* Use TMPDIR if set.
* Fix next and previous session functions to actually work.
* Support -x and -y for new-session to specify the initial size of the window
if created detached with -d.
* Make bind-key accept characters with the top-bit-set and print them as octal.
* Set $TMUX without the session when background jobs are run.
* Simplify the way jobs work and drop the persist type, so all jobs are
fire-and-forget.
* Accept tcgetattr/tcsetattr(3) failure, fixes problems with fatal() if the
terminal disappears while locked.
* Add a -P option to detach to HUP the client's parent process (usually causing
it to exit as well).
* Support passing through escape sequences to the underlying terminal by using
DCS with a "tmux;" prefix.
* Prevent tiled producing a corrupt layout when only one column is needed.
* Give each pane created in a tmux server a unique id (starting from 0), put it
in the TMUX_PANE environment variable and accept it as a target.
* Allow a start and end line to be specified for capture-pane which may be
negative to capture part of the history.
* Add -a and -s options to lsp to list all panes in the server or session
respectively. Likewise add -s to lsw.
* Change -t on display-message to be target-pane for the #[A-Z] replacements
and add -c as target-client.
* The attach-session command now prefers the most recently used unattached
session.
* Add -s option to detach-client to detach all clients attached to a session.
* Add -t to list-clients.
* Change window with mouse wheel over status line if mouse-select-window is on.
* When mode-mouse is on, automatically enter copy mode when the mouse is
dragged or the mouse wheel is used. Also exit copy mode when the mouse wheel
is scrolled off the bottom.
* Provide #h character pair for short hostname (no domain).
* Don't use strnvis(3) for the title as it breaks UTF-8.
* Use the tsl and fsl terminfo(5) capabilities to update terminal title and
automatically fill them in on terminals with the XT capability (which means
their title setting is xterm-compatible).
* Add a new option, mouse-resize-pane. When on, panes may be resized by
dragging their borders.
* Fix crash by resetting last pane on {break,swap}-pane across windows.
* Add three new copy-mode commands - select-line, copy-line, copy-end-of-line.
* Support setting the xterm clipboard when copying from copy mode using the
xterm escape sequence for the purpose (if xterm is configured to allow it).
* Support xterm(1) cursor colour change sequences through terminfo(5) Cc
(set) and Cr (reset) extensions.
* Support DECSCUSR sequence to set the cursor style with two new terminfo(5)
extensions, Cs and Csr.
* Make the command-prompt custom prompts recognize the status-left option
character pairs.
* Add a respawn-pane command.
* Add a couple of extra xterm-style keys that gnome terminal provides.
* Allow the initial context on prompts to be set with the new -I option to
command-prompt. Include the current window and session name in the prompt
when renaming and add a new key binding ($) for rename session.
* Option bell-on-alert added to trigger the terminal bell when there is an
alert.
* Change the list-keys format so that it shows the keys using actual tmux
commands which should be able to be directly copied into the config file.
* Show full targets for lsp/lsw -a.
* Make confirm-before prompt customizable with -p option like command-prompt
and add the character pairs #W and #P to the default kill-{pane,window}
prompts.
* Avoid sending data to suspended/locked clients.
* Small memory leaks in error paths plugged.
* Vi mode improvements.
Rails 3.0.10
* Magic encoding comment added to schema.rb files
* schema.rb is written as UTF-8 by default.
* Ensuring an established connection when running `rake db:schema:dump`
* Association conditions will not clobber join conditions.
* Destroying a record will destroy the HABTM record before destroying
itself. GH #402.
* Make `ActiveRecord::Batches#find_each` to not return `self`.
* Update `table_exists?` in PG to to always use current search_path or
schema if explictly set.
Rails 3.0.10
* Fixes an issue where cache sweepers with only after filters would
have no controller object, it would raise undefined method
controller_name for nil [jeroenj]
* Ensure status codes are logged when exceptions are raised.
* Subclasses of OutputBuffer are respected.
* Fixed ActionView::FormOptionsHelper#select with :multiple => false
* Avoid extra call to Cache#read in case of a fragment cache hit
2.3.14:
Security Fix:
1. The code in Ruby on Rails 2.3 which sets the response content type
performs insufficient sanitization of the values provided. This
means that applications which let the user provide an arbitrary
Content-Type header for the response are vulnerable to response
splitting attacks.
2. The strip_tags helper in Ruby on Rails is designed to remove all
HTML tags from a string. By using specially crafted values an
attacker can confuse the parser and cause HTML tags to be injected
into the response. This can be exploited to inject arbitrary
javascript into the rendered page.
Future releases of Ruby on Rails are likely to replace the current
HTML tokenizer with one provided by libxml to reduce the likelihood
of errors such as these in the future. In the meantime users can
install the loofah gem[1] which should enhance both the performance
and reliability of the HTML sanitization helpers.
2.3.14:
Security fix:
The quote_table_name method in the ActiveRecord adapaters for Ruby on
Rails were initially created solely for the purpose of escaping
reserved words encountered in table names. However over time 3rd
party libraries, and rails itself, grew to rely on those functions as
a way to sanitize potentially malicious user input. As a result these
functions need to be hardened to manage malicious input rather than
assuming they're being passed benign values generated by rails itself.
2.3.14:
Security fix with Ruby 1.8.x not affected Ruby 1.9.x:
Ruby on Rails has provided a high performance replacement for
ERB::Util.h since version 2.0.0. Due to a bug in the Ruby 1.8 Regular
Expression code this replacement version will fail to escape certain
malformed unicode strings. This malformed output will then be
interpreted as HTML by some browsers on some operating systems.
Major changes in this release:
* Added sequential version numbering
* Added a optional configure script - the Makefile still works
for most systems.
* Improvements to the "annotate" algorithm: only search
primary ancestors and ignore branches.
* Update the "scrub" command to remove traces of login-groups
and subrepositories.
* Added the --type option to the "fossil tag find" command.
* In contexts where only a check-in makes sense, resolve
branch and tag names to checkins only, never events or other
artifacts.
* Improved display of file renames on a diff. A rebuild is
required to take full advantage of this change.
* Update the built-in SQLite to version 3.7.7.
Prawn 0.12.0:
We continue our trek to Prawn 1.0 with 0.12.0. This release fixes many bugs
and adds some new features. A full list of changes is available via `git log
0.11.1..0.12.0`.
Features / Enhancements
* Rewrite project README [Gregory Brown]
* Speed improvements to text kerning [Jan De Poorter]
* Snapshotting now preserves your bounding box [Brad Ediger]
* Allow Document#float to teleport across pages and return to starting page
[Brad Ediger]
* number_pages now defaults to numbering every page [Matthew Rudy Jacobs]
* Your bounding box is now reset when starting a new page with a different
size or layout [Brad Ediger]
Major Bugfixes
* Fix multi-page templates (#199) [Chase M. Gray / Jonathan Greenberg]
* Make tables work in stretchy bounding boxes (#235) [Jan De Poorter / Brad
Ediger]
* Fix TTF font metrics when a TTF font has a nonzero width for newlines (#245)
[daduke / Katsuya Hidaka / Brad Ediger]
* Fix kerning bug on line width calculations (#251) [vspan / Brad Ediger]
* Fix images in stretchy bounding boxes creating a new page (#241) [Brad Ediger]
* Fix character_spacing to work based on character count, not byte length
(#253) [Katsuya Hidaka / Brad Ediger]
* Fix NoMethodError under $KCODE==¡Èu¡É [Michael Klein]
* Fix extra page break created when spans were used at the top of a page
(#255) [Sean Russell / Brad Ediger]
* Fix problem with table cell backgrounds overlapping other cell¡Çs borders by
drawing all backgrounds before any borders (#226) [Kenta Murata / Brad
Ediger]
* Remove old examples that were duplicated by our new manual (Micha«³l Witrant)
Tables: use an epsilon to compare floating-point values [Kenta Murata]
2.3.2 2011-08-15
----------------
A bug fix release.
Improvements
------------
[ui][console] Added some newlines to improve readability.
Fixes
-----
[ui][console] Worked --verbose again.
Re-supported Ruby 1.8.6. [Reported by James Mead]
Thanks
------
James Mead
=== 2.1.0 / 2011-08-15
* 2 minor enhancements:
* Added new accessor canonicalize_conditions to toggle conditional canonicalization (on by default). (confused)
* Awesome cleanup: Replaced call to append_block by block_append. (Confusion)
* 2 bug fixes:
* Fixed handling last line of =begin/=end. (raybaxter)
* Fixed source line numbers after heredocs. (jbarreneche)
=== 3.0.6 / 2011-08-16
* 5 minor enhancements:
* Added ParseTreeTestCase#add_19tests
* Added a bunch of FAILING 1.9 tests stolen from presidentbeef's repo! yay!
* Added add_19tests and add_18tests to segregate version specific parsing.
* Moved pt_testcase.rb to sexp_processor
* Segregated a bunch of 1.8 specific tests using add_18tests.
=== 2.12.0 / 2011-08-15
* 2 minor enhancements:
* Forcibly copy file specified in --main to index.html. (ewong)
* need_tar now defaults to false.
* 4 bug fixes:
* Don't attempt to require RSpec 1 in an RSpec 2 environment. (monde)
* Fixed test/packaging issue when wrapping hoespec in namespace. (damphyr)
* Fixed tests for jruby. (sferik)
* Hoe.load_plugins removes bad entries so plugin? returns false for unloaded
plugins.
version: 0.48
date: Mon 21 Feb 2011
Version 0.48 released to CPAN. (No changes from 0.47_02.)
---
version: 0.47_02
date: Tues 1 Feb 2011
Version 0.47_02 released to CPAN.
Makefile.PL - Change the Test::Warn dependency from 0.22 to 0.21 and
specify it in top-level Makefile.PL instead of in C/Makefile.PL.
---
version: 0.47_01
date: Sun 30 January 2011
Version 0.47_01 released to CPAN.
Changes only to Inline::C test suite - see C/Changes.
---
version: 0.47
date: Fri 21 January 2011
Version 0.47 released to CPAN. No changes from 0.46_02
---
version: 0.46_02
date: Wed 29 December 2010
lib/Inline/MakeMaker.pm - apply patch from Raymond Mroz to accommodate the modern
h2xs directory structure. Bump Inline::MakeMaker version
to 0.45.
---
version: 0.46_01
date: Wed 31 March 2010 (and released to CPAN as 0.46_01)
Inline.pm - warn about untainting of Inline configuration info (where applicable)
- quieten non-numeric warnings in relation to devel releases
- quieten uninitialized warning regarding $ENV{WIN64} that can occur
in certain circumstances on MS Windows
Inline.pod - Documentation change relating to introduction of further _TESTING
capabilities in Inline::C
---
version: 0.46_01
date: Mon 8 March 2010
Inline.pm - add '_TESTING' config option
- hide the 'redefined' warning introduced by the fix to ticket 49669,
by placing the offending code in a 'no warnings "redefine";' block.
- bump require from 5.005 to 5.006
---
version: 0.46_01
date: Sun 14 feb 2010
Inline.pm - add archname and perlversion number to config filename.
C/C.pm - Second attempt at accommodating 'ccache cc' compiler (RT ticket 40140).