Skip to content

Releases: Kinto/kinto

13.2.2

04 Jul 13:10
b8c09c0
Compare
Choose a tag to compare

Bug fixes

  • Fix apparence of Admin notifications (fixes #2191)

13.2.1

25 Jun 08:58
f3edfd0
Compare
Choose a tag to compare

Internal changes

  • Upgrade kinto-admin to v1.24.1

13.2.0

18 Jun 23:23
128192b
Compare
Choose a tag to compare

Internal changes

13.1.1

23 May 20:30
30846df
Compare
Choose a tag to compare

Bug fixes

  • Fix cache heartbeat test (fixes #2107)
  • Fix support of sqlalchemy.pool.NullPool for PostgreSQL backends.
    The default pool_size of 25 is maintained on the default pool class
    (QueuePoolWithMaxBacklog). When using custom connection pools, please
    refer to SQLAlchemy documentation for default values.

Internal changes

  • Remove dependency to kinto-redis in core tests

13.1.0

21 Mar 11:29
d9c03d2
Compare
Choose a tag to compare

New features

  • Expose the user_profile in the user field of the hello page. (#1989)
  • Add an "account validation" option to the accounts plugin. (#1973)
  • Add a validate endpoint at /accounts/{user id}/validate/{validation key} which can be used to validate an account when the account
    validation
    option is enabled on the accounts plugin.
  • Add a reset-password endpoint at /accounts/(user id)/reset-password which can be used to reset a user's password when the account validation option is enabled on the accounts plugin.

Bug fixes

  • Fixed two potential bugs relating to mutable default values.
  • Fix crash on validating records with errors in arrays (#1508)
  • Fix crash on deleting multiple accounts (#2009)

Documentation

  • Fixed spelling and Filtering docs

Internal changes

  • Use setup.cfg for package metadata (ref #1921)

API is now at version 1.22. See API changelog

13.0.1

29 Jan 14:02
6262012
Compare
Choose a tag to compare

Bug fixes

  • Loosen up the Content-Security policies in the Kinto Admin plugin to prevent Webpack inline script to be rejected (fixes #2000)

13.0.0

25 Jan 17:36
a702f6e
Compare
Choose a tag to compare

New features

  • Expose the user_profile in the user field of the hello page with OpenID authentication (#1989)

Breaking changes

  • Update Kinto OpenID plugin to redirect with a base64 JSON encoded token. (#1988).
    This will work with kinto-admin 1.23

Bug fixes

  • security: Fix a pagination bug in the PostgreSQL backend that could leak records between collections

Internal changes

  • Upgrade kinto-admin to v1.23.0

12.0.2

25 Jan 17:35
6f4050a
Compare
Choose a tag to compare

Bug fixes

  • security: Fix a pagination bug in the PostgreSQL backend that could leak records between collections

12.0.1

21 Jan 15:25
5716ca1
Compare
Choose a tag to compare

Bug Fixes

  • Fix bumping of tombstones timestamps when deleting objects in PostgreSQL storage backend (fixes #1981)
  • Fix ETag header in responses of DELETE on plural endpoints (ref #1981)

12.0.0

11 Jan 11:40
440a40c
Compare
Choose a tag to compare

Breaking changes

  • Remove Python 3.5 support and upgrade to Python 3.6. (#1886)
  • Remove record from UnicityError class (#1919). This enabled us to fix #1545.
  • Storage backend API has changed, notions of collection and records were replaced
    by the generic terms resource and object. Plugins that subclass the internal
    ShareableResource class may also break.
  • GET requests no longer include the Total-Records header. To get a count in a collection
    you need to do a HEAD request. And the new header name is Total-Objects. (#1624)
  • Remove the UserResource class. And ShareableResource is now deprecated in
    favor of Resource.
  • Removed kinto.core.utils.parse_resource(). Use kinto.core.utils.view_lookup_registry() instead (#1828)
  • Remove the delete-collection command (#1959)

API is now at version 1.21. See API changelog.

New features

  • Add a user-data endpoint at /__user_data__/ which can be used to delete all data
    associated with a principal. This might be helpful for pursuing GDPR
    compliance, for instance. (Fixes #442.)

Bug Fixes

  • Like query now returns 400 when a non string value is used. (#1899)
  • Record ID is validated if explicitly mentioned in the collection schema (#1942)
  • The Memory permission backend implementation of remove_principal
    is now less generous with what it removes (#1955).

Documentation

  • Change PostgreSQL backend URLs to be postgresql:// instead of the deprecated postgres://

Internal changes

  • Remove depreciation warning for mapping (#1904)
  • Fix depreciated warn method (#1903)
  • Use f-string instead of % or format operators. (#1886)
  • Ignore admin plugin node_modules folder while running black (#1902)
  • Remove regexp py36 warnings. (#1907)
  • Changed psycopg2 dependency for psycopg2-binary. (#1905)
  • Renamed core notions (ie. record and collection) (#710)
  • JSON Schema validation is optimized by keeping instances of validator cached. (#1807)