bin/manage changelog --start 5.2.3 --end 5.2.4 > changelog.txt

(plus minor editing)

changelog.txt

@@ -1,6 +1,7 @@
-Zope 4.5.3 → 4.5.4
+Zope 4.5.3 → 4.5.5
 ------------------
 
+
 plone.recipe.zope2instance: 6.8.1 → 6.8.3
 -----------------------------------------
 Bug fixes:
@@ -117,7 +118,7 @@ Bug fixes:
   [maurits] (#174)
 
 
-plone.app.linkintegrity: 3.3.14 → 3.4.0
+plone.app.linkintegrity: 3.3.14 → 3.4.1
 ---------------------------------------
 New features:
 
@@ -126,6 +127,10 @@ New features:
 
 Bug fixes:
 
+- Use base64.decodebytes instead of decodestring when possible.
+  Fixes Python 3.9 compatibility in the tests.
+  [maurits] (#81)
+
 - Fix Unauthorized exception when you edit a page that links to another page that you are not allowed to see.
   Fixes `issue 79 <https://github.com/plone/plone.app.linkintegrity/issues/79>`_.
   [maurits] (#79)
@@ -155,7 +160,7 @@ Bug fixes:
   [jensens] (#1)
 
 
-plone.app.upgrade: 2.0.36 → 2.0.37
+plone.app.upgrade: 2.0.36 → 2.0.38
 ----------------------------------
 Breaking changes:
 
@@ -165,6 +170,10 @@ Breaking changes:
 
 Bug fixes:
 
+- Make portal_setup objects accessible only to Manager/Owner.
+  See `GenericSetup issue 101 <https://github.com/zopefoundation/Products.GenericSetup/issues/101>`_.
+  [maurits] (#101)
+
 - Plone 6.0: remove portal_form_controller tool.
   [maurits] (#3057)
 
@@ -200,6 +209,23 @@ New features:
   [frapell] (#25)
 
 
+plone.batching: 1.1.6 → 1.1.7
+-----------------------------
+New features:
+
+- Include request form parameters from parent request to allow batching in plone.app.standardtiles and filtering with collective.collectionfilter.
+  [agitator] (#26)
+
+
+plone.cachepurging: 2.0.2 → 2.0.3
+---------------------------------
+Bug fixes:
+
+- Replaced deprecated Thread.isAlive by is_alive.
+  The old name no longer works in Python 3.9.
+  The new name already works in Python 2.7. (#22)
+
+
 plone.portlet.collection: 3.3.5 → 3.3.6
 ---------------------------------------
 Bug fixes:
@@ -373,16 +399,35 @@ Bug fixes:
   [maurits] (#1)
 
 
-Products.CMFPlone: 5.2.3 → 5.2.4rc1
------------------------------------
+Products.CMFPlone: 5.2.3 → 5.2.4
+--------------------------------
 Bug fixes:
 
+- Release Plone 5.2.4 final.
+  No changes compared to last release candidate.
+  [maurits] (#3250)
+
+- Fixed tests in combination with Products.PluggableAuthService 2.6.0.
+  [maurits] (#3251)
+
 - Bumped metadata version to 5211.
   [maurits] (#5211)
 
 
-Products.GenericSetup: 2.0.3 → 2.1.0
+Products.CMFQuickInstallerTool: 4.0.3 → 4.0.4
+---------------------------------------------
+Bug fixes:
+
+- Require 'Manage portal' permission for accessing the tool or an installed product.
+  For most methods this was already the case, but you could get some info from the objects themselves.
+  [maurits] (#24)
+
+
+Products.GenericSetup: 2.0.3 → 2.1.1
 ------------------------------------
+- Enforce access control on setup tool log files and snapshot files and folders.
+  (`#101 <https://github.com/zopefoundation/Products.GenericSetup/issues/101>`_)
+
 - Add support for Python 3.9.
 
 
@@ -394,8 +439,16 @@ Bug fixes:
   [jensens] (#59)
 
 
-Products.PluggableAuthService: 2.5 → 2.5.1
+Products.PluggableAuthService: 2.5 → 2.6.1
 ------------------------------------------
+- Fix remaining open redirect sources
+
+- Fix missing access control on ZODB Role Manager ``enumerateRoles``
+
+- Fix open redirect issue in `Cookie Auth Helper` redirect handling
+
+- Add support for Python 3.9.
+
 - Fixed error assigning groups in ``manage_groups`` page in ZMI.
   (`#61 <https://github.com/zopefoundation/Products.PluggableAuthService/issues/61>`_,
   `#84 <https://github.com/zopefoundation/Products.PluggableAuthService/issues/84>`_)