Release of Roundup 2.5.0beta1 (call for testing)

John Rouillard via Roundup-devel <[email protected]> Wed, 11 Jun 2025 17:30:21 -0400
Newsgroups gmane.comp.bug-tracking.roundup.devel,gmane.comp.bug-tracking.roundup.user
Message-ID <CANfx4mvaOh05TqyBPmu4s3xradxPYovLddwnTXUeiALD-H5w9A@mail.gmail.com>
Hi all:

The 2.5 beta release is out. Please try installing and testing.
See:

    https://pypi.org/project/roundup/2.5.0b1/

for the full announcement with changelog.

Installing using:

    python3 -m pip install --pre roundup

or

    python3 -m pip install roundup==2.5.0b1


should work.

Known issues:

   man pages are not installed in html form
   roundup-admin help test not installed in html form
   config.ini docs not updated to the newest version

There are 41 changes since 2.4.0. Version 2.5.0b1
does not support Python 2. Python 3.6 should work, but it
has been removed from CI so it is not tested anymore.

Among the notable improvements in 2.5.0 from the 2.4.0
release are:

* detect more errors in RPN search expressions. Return more
  useful error messages. Documented (advanced) RPN search expressions
  in the user guide.

* change default password hash method to PBKDF2 with SHA512. You
  may need to reset password_pbkdf2_default_rounds to a lower
  value. See upgrading doc.

* add filter function to Permission objects. This pushes some
  permission checks down to the SQL database and speeds up display of
  index pages.

* fix crash bug on windows with Python 3.13

* update doc on required REST headers. Also other docs updates.

* detect error condition early when we can't respond with requested
  REST format response (e.g. xml is requested).

* do not generate an error if a PUT REST request sets the user's
  address to the current value.

* make ``roundup-gettext`` extract translatable strings from detectors
  and extensions.

* improve security of session cookies by marking them with the magic
  ``__Secure__`` prefix.

* make the rest endpoint return raw message or file content data. Use
  the ``binary_content`` endpoint and a suitable ``Accept``` header in
  the request.

* add support for the ``defusedxml`` Python module to improve security when
  using XML.

* add templating function: ``utils.set_http_response(integer)`` to set
  HTTP return code from your template.

* add generation of native HTML date and number/integer inputs. See
  Upgrading for caveats this is disabled by default.

* re-enable support for GPG/PGP signed emails. Requires installing
  from the test PyPi repository.

* remove XHTML support simplifying the code base

The release of 2.5.0 is expected on July 13th.

Enjoy.

-- rouilj