166 lines
8 KiB
ReStructuredText
166 lines
8 KiB
ReStructuredText
|RCE| 3.0.0 |RNS|
|
|
-----------------
|
|
|
|
As |RCE| 3.0 is a big release, the release notes have been split into the following sections:
|
|
|
|
* :ref:`general-rn-ref`
|
|
* :ref:`security-rn-ref`
|
|
* :ref:`api-rn-ref`
|
|
* :ref:`performance-rn-ref`
|
|
* :ref:`prs-rn-ref`
|
|
* :ref:`gists-rn-ref`
|
|
* :ref:`search-rn-ref`
|
|
* :ref:`fixes-rn-ref`
|
|
|
|
.. _general-rn-ref:
|
|
|
|
General
|
|
^^^^^^^
|
|
* Released 2015-01-27
|
|
* Basic |svn| support added
|
|
* GPLv3 components removed
|
|
* Server/Client architecture for VCS systems created
|
|
* Python 2.5 and 2.6 support deprecated
|
|
* Server info pages now show gist/archive cache storage, and also CPU/Memory/Load information.
|
|
* Added new bulk commit (changeset) status comment form into compare view which enables bulk code-reviews without
|
|
opening a pull-request.
|
|
* License checks and limits now only apply to active users.
|
|
* Removed CLI command for |repo| scans as it can be done via an API call.
|
|
* VCS backends can be globally enabled/disabled from the :file:`rhodecode.ini` file.
|
|
* Added a UI option to set default rendering to rst or markdown.
|
|
* Added syntax highlighting to 2 way compare diff.
|
|
* Markup rendering can now render checkboxes for easy checklists generation.
|
|
* Gravatars are now retina ready.
|
|
* Admins can define custom CSS or JavaScript in the header or footer via new pre/post code options.
|
|
* Replaced ``graph.js`` with ``commits-graph.js`` html5 implementation.
|
|
* Added editable owner field for repository groups, and user group.
|
|
* Added an option to detach/delete user repositories when deleting users from the system.
|
|
* Added a Supervisor control page that shows status of processes.
|
|
* User admin grid can now filter by username OR email.
|
|
* Added personal |repo| group link for easier fork creation.
|
|
* Added support for using subdirectories when creating and uploading new files.
|
|
* Added option to rename a file from the web interface.
|
|
* Added arrow key navigation to file filter and fixed the back button behaviour.
|
|
* Added fuzzy matching to file filter.
|
|
* Added functionality to create folder structures along with files when adding content via the web interface.
|
|
* Separated default permissions UI into `global`, `user`, or `object` permissions management.
|
|
* Added an inheritance flag to object permissions which allows for explicit permissions which disregard global
|
|
permissions.
|
|
* Added post create repository group hook.
|
|
* Added trigger push hooks on online file editor.
|
|
* Added default title for pull request.
|
|
* More detailed logs during Authentication.
|
|
* More explicit logging when permission checks occur.
|
|
* Switched the implementation of |git| ``fetch clone pull checkout`` commands to pure |py| without any subprocess
|
|
calls.
|
|
* Introduced the ``rcserver`` command for custom development.
|
|
* Added the ability to force no cache archived via the ``GET no_cache`` flag
|
|
|
|
.. _security-rn-ref:
|
|
|
|
Security
|
|
^^^^^^^^
|
|
|
|
* CSRF (Cross-Site Request Forgery) tokens now in all pages that use forms.
|
|
* The ``clone_url`` field is now AES encrypted inside the database.
|
|
* ACLs (Access Control Lists) are checked on the gist edit page for logged in users.
|
|
* New repository groups and repositories are created with 0755 permissions and not not 0777.
|
|
* Explicit RSS tokens are used for the RSS journal, when leaked, limits access to RSS only.
|
|
* Fixed XSS issues when rendering raw SVG files.
|
|
* Added force password reset option for users.
|
|
* IP list now accepts comma-separated values, and also ranges using `-` to specify multiple addresses.
|
|
* Added ``auth tokens``, these authentication tokens can be used as an alternative to passwords.
|
|
* Added roles (``http, api, rss, all, vcs``) into authentication tokens (previously called ``apikeys``).
|
|
* LDAP Group Support added.
|
|
* Added JASIG CAS auth plugin support.
|
|
* Added a plugin parameter that defines if a plugin can create new users on the fly.
|
|
|
|
.. _api-rn-ref:
|
|
|
|
API
|
|
^^^
|
|
* Added permissions delegation when creating |repos| or |repo| groups.
|
|
* Added ``strip`` support for |hg| and |git| |repos|.
|
|
* Added comments API for commits.
|
|
* Added add/remove methods for extra fields in repositories.
|
|
* ``get_*`` calls now use ``permission()`` and ``permission_user_group()`` methods for unified permissions structure.
|
|
* ``get_repo_nodes`` information sending has changed and is no longer a boolean flag, it's now ``basic`` or ``full``.
|
|
* Due to configurable backends ``repo_type`` is now mandatory parameter for the ``create_repo`` call.
|
|
|
|
.. _performance-rn-ref:
|
|
|
|
Performance
|
|
^^^^^^^^^^^
|
|
|
|
* Significant performance improvements across all application functions.
|
|
* HTTP Authentication performance enhancements.
|
|
* Added a ``scope`` variable to the permissions fetching function which improves building permission trees in large
|
|
amounts by a factor of 10.
|
|
* Implemented caching logic for all authentication plugins. The ``AUTH_CACHE_TTL = <int>`` property now allow you to
|
|
set the cache in seconds.
|
|
|
|
.. _prs-rn-ref:
|
|
|
|
Pull Requests
|
|
^^^^^^^^^^^^^
|
|
|
|
* Pull requests can be now updated and merged from the web interface
|
|
* Fixed creating a Mercurial |pr| from a bookmark.
|
|
* Forbid closing pull requests when calculated status is different that the approved or rejected version.
|
|
* Properly display calculated pull request review status on listing page.
|
|
* Disable delete comment button if |pr| is closed.
|
|
|
|
.. _gists-rn-ref:
|
|
|
|
Gists
|
|
^^^^^
|
|
* New UI based on grids with filtering.
|
|
* Super-admins can see all gists.
|
|
* Gists can now be created with a custom names.
|
|
|
|
.. _search-rn-ref:
|
|
|
|
Search
|
|
^^^^^^
|
|
|
|
* New API based indexer.
|
|
* Added the ability to create size limits for indexed files.
|
|
* Added a new mapping configuration file which gives a very high level of flexibility when creating full text search.
|
|
|
|
.. _fixes-rn-ref:
|
|
|
|
Fixes
|
|
^^^^^
|
|
|
|
* General: fixed issues with dependent objects, such as ``users`` in ``user groups``. Cleaning up these dependent
|
|
objects is now done in a safe way.
|
|
* General: deleting a ``user group`` from **settings > advanced** will use force removal and cleanup from all
|
|
associations.
|
|
* General: fixed issue with filter proxy middleware it's now more error prone.
|
|
* General: fixed issues with unable to create fork inside a group.
|
|
* General: fixed bad logic in ``ext_json`` lib, that checked bool on microseconds, in case it was 0 bool it returned False.
|
|
* General: authors in annotation mode shows authors of current source, not from all history (that is in normal mode)
|
|
* Permissions: fix issue when inherit flag for user group stopped working after initial permissions set.
|
|
* |git|: fixed shallow clones.
|
|
* |git|: added ``\n`` into the service line of |git| protocol. It is in the specifications and some python clients
|
|
require this.
|
|
* |hg|: fix thread safety for mercurial ``in-memory`` commits.
|
|
* Windows: fixed issue with shebang and env headers.
|
|
* MySQL: fixed database fields with 256 char length with added indexes. Mysql had problems with them.
|
|
* Database: fixed bad usage of matching using ``ILIKE``. Previously it could happen that if you had
|
|
``marcin_1@rhodecode.com`` and ``marcin_2@rhodecode.com`` emails, using ``marcin_@rhodecode.com`` would match both.
|
|
* VCS: fixed issues with double new lines on the commit patches.
|
|
* VCS: repository locking now requires write permission to repository. If we allowed locking with read,
|
|
people can lock repository without an option to unlock it.
|
|
* Models: removed the ``isdigit`` call that can create issues when names are actually numbers on fetching objects.
|
|
* Files: Fix bug with show authors in annotate view.
|
|
* Hooks: truncate excessive commit lists on ``post_push`` hook.
|
|
* Hooks: in |git|, support added to set the default branch if it is not ``master``.
|
|
* Notifications: now can be marked as read when you are not admin.
|
|
* Notifications: marking all notifications as read will hide the counter.
|
|
* Frontend: fixed branch-tag switcher multiple ajax calls.
|
|
* Repository group: |repo| group owners can now change group settings even if they don't have access to top-level
|
|
permissions.
|
|
* Repositories: if you set ``Fork of`` in advanced repository settings it will now only show valid repositories
|
|
with the same type.
|
|
|