Release of Roundup 2.5.0beta1 (call for testing)
John Rouillard via Roundup-devel <[email protected]> Wed, 11 Jun 2025 17:30:21 -0400
| Newsgroups | gmane.comp.bug-tracking.roundup.devel,gmane.comp.bug-tracking.roundup.user |
|---|---|
| Message-ID | <CANfx4mvaOh05TqyBPmu4s3xradxPYovLddwnTXUeiALD-H5w9A@mail.gmail.com> |
Hi all:
The 2.5 beta release is out. Please try installing and testing.
See:
https://pypi.org/project/roundup/2.5.0b1/
for the full announcement with changelog.
Installing using:
python3 -m pip install --pre roundup
or
python3 -m pip install roundup==2.5.0b1
should work.
Known issues:
man pages are not installed in html form
roundup-admin help test not installed in html form
config.ini docs not updated to the newest version
There are 41 changes since 2.4.0. Version 2.5.0b1
does not support Python 2. Python 3.6 should work, but it
has been removed from CI so it is not tested anymore.
Among the notable improvements in 2.5.0 from the 2.4.0
release are:
* detect more errors in RPN search expressions. Return more
useful error messages. Documented (advanced) RPN search expressions
in the user guide.
* change default password hash method to PBKDF2 with SHA512. You
may need to reset password_pbkdf2_default_rounds to a lower
value. See upgrading doc.
* add filter function to Permission objects. This pushes some
permission checks down to the SQL database and speeds up display of
index pages.
* fix crash bug on windows with Python 3.13
* update doc on required REST headers. Also other docs updates.
* detect error condition early when we can't respond with requested
REST format response (e.g. xml is requested).
* do not generate an error if a PUT REST request sets the user's
address to the current value.
* make ``roundup-gettext`` extract translatable strings from detectors
and extensions.
* improve security of session cookies by marking them with the magic
``__Secure__`` prefix.
* make the rest endpoint return raw message or file content data. Use
the ``binary_content`` endpoint and a suitable ``Accept``` header in
the request.
* add support for the ``defusedxml`` Python module to improve security when
using XML.
* add templating function: ``utils.set_http_response(integer)`` to set
HTTP return code from your template.
* add generation of native HTML date and number/integer inputs. See
Upgrading for caveats this is disabled by default.
* re-enable support for GPG/PGP signed emails. Requires installing
from the test PyPi repository.
* remove XHTML support simplifying the code base
The release of 2.5.0 is expected on July 13th.
Enjoy.
-- rouilj