New Plone 5.2.2 release - Plone: Enterprise Level CMS - Free and OpenSource - Community Driven - Secure
"Announcement of Plone releases and security-related notifications. Recommended subscription for all Plone developers and site admins." <[email protected]> Tue, 22 Sep 2020 11:37:11 -0500
| Newsgroups | gmane.comp.web.zope.plone.announce |
|---|---|
| Message-ID | <mailman.123623.1600792732.1839.plone-announce@lists.sourceforge.net> |
--===============6516316548777609888==
Content-Type: multipart/alternative;
boundary="Apple-Mail=_D4093D52-3D57-4EE1-B6BE-975239CED85D"
--Apple-Mail=_D4093D52-3D57-4EE1-B6BE-975239CED85D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
>=20
> https://plone.org/download/releases/5.2.2 =
<https://plone.org/download/releases/5.2.2>
>=20
> Plone 5.2.2
>=20
> There may be hotfixes applicable to this release. Always check the =
Plone Hotfix page <https://plone.org/security/hotfixes/> before =
production deployment.
>=20
> Release notes
>=20
> License GPL <http://creativecommons.org/licenses/GPL/2.0/>
> Date released 2020-08-14
> Release manager Eric Steele <https://plone.org/profile/esteele>
> Plone 5.2.2 is a bug fix release of Plone 5.2 =
<x-msg://9/resolveuid/be45977ba24744d2bbd2a6d1f1f4cfe6>. Release Manager =
for this version is Maurits van Rees (despite the automated text above).
>=20
> Installers are being made, so not all links below will work yet. =
Experienced users can update their buildout config by pointing to =
https://dist.plone.org/release/5.2.2/versions.cfg =
<https://dist.plone.org/release/5.2.2/versions.cfg>.
>=20
> Linux/BSD/Unix users: Use the Unified Installer. It is a configuration =
and setup kit with build scripts.
>=20
> Windows 10 users: use the Unified Installer. See Windows-specific =
installation instructions =
<https://github.com/plone/Installers-UnifiedInstaller/blob/windows_install=
/docs/windows.rst>. Consider using the unified installer within the =
Windows Subsystem for Linux (WSL).
>=20
> OS X users: use the Vagrant kit or install XCode command-line tools =
and use the Unified Installer.
>=20
> Automated provisioning: See Plone's Ansible Playbook =
<http://docs.plone.org/external/ansible-playbook/docs> for a full-stack =
installation kit.
>=20
> Cross-platform Docker: install Docker <https://www.docker.com/> and =
use the Plone Docker image <https://github.com/plone/plone.docker>.
>=20
> For the Plone 5.2 upgrade guide, see =
https://docs.plone.org/manage/upgrading/ =
<https://docs.plone.org/manage/upgrading/index.html?highlight=3Dupgrade%20=
guide>
> Specific release notes for Plone 5.2.2:
>=20
> This release packs a lot of changes: the previous release was from =
January 2020. Some highlights are:
>=20
> Zope was upgraded from 4.1 to 4.5. This means the support for WebDav =
is back. And the logic around template engines got updated. There should =
now be less differences in behavior between various kinds of templates =
(Zope/Acquisition-aware or not) or which template engine is used =
(zope.pagetemplate or chameleon). There were some problems due to this =
change, but all should have been fixed now.
> ZODB goes from 5.5.1 to 5.6.0. This needed updated packages for =
zodbupdate and ZEO. So if you are doing low-level transactional stuff, =
please take a look at its changes.
> plone.recipe.zope2instance: changes for relstorage, sqlite, webdav, =
Windows.
> Fixed problems running Plone on Windows. You may want to keep an eye =
out for newer releases of plone.recipe.zope2instance. See especially =
this issue: =
https://github.com/plone/plone.recipe.zope2instance/issues/144 =
<https://github.com/plone/plone.recipe.zope2instance/issues/144>
> Mockup and plone.staticresources: lots and lots of improvements and =
bug fixes in styling and javascript.
> Big push in fixing various internationalization issues.
> Integrated PloneHotfix20200121 for increased security.
> Moved the security check if a url is in the portal to a small separate =
package: Products.isurlinportal. You can immediately use this on Plone =
4.3 and higher. Keep an eye on updates for this package: newer versions =
will increase the security. Often the impact of fixes is too small to =
warrant a real security hotfix package, but we want to do more regular =
fixes here.
> Use Products.isurlinportal 1.1.0 with security hardening against =
whitespace: https://github.com/plone/Products.isurlinportal/issues/1 =
<https://github.com/plone/Products.isurlinportal/issues/1>
> plone.app.discussion: Extended existing review workflow by states =
rejected and spam.
> plone.app.theming: Add custom CSS settings to theming control panel. =
You now have a textarea where you can simply add css without needing to =
override things or play with less/scss.
> plone.namedfile and several other packages: support for Range =
requests.
> plone.outputfilters has a possibly breaking change: change the image =
caption template to use <figure> and <figcaption>. If you want to change =
this, there is a new ImageCaptioningEnabler utility.
> plone.restapi was upgraded from 6.1.0 to 6.13.7, with lots of new =
features.
> plone.scale: the method signature for scaling was made clearer. The =
mode argument replaces the old direction argument. Direction is still =
supported, but now deprecated. The new name for direction down is: mode =
contain or scale-crop-to-fit. The new name for direction up is: mode =
cover or scale-crop-to-fill. The new name for direction thumbnail is: =
mode scale.
> plone.testing 8.0.1 drops the z2 extra. If you need this, use the zope =
extra instead.
> Products.CMFPlone: Add markdown extension settings to markup control =
panel.
> z3c.autoinclude: When environment variable Z3C_AUTOINCLUDE_DEBUG is =
set, log which packages are being automatically included.
> zope.interface was upgraded from 4.6.0 to 5.0.2. This has performance =
fixes that may have backwards incompatible changes. This makes the =
inheritance and method resolution order for interfaces more logical and =
more in line with how it works for 'normal' classes. In corner cases =
there can be subtle differences when there are several utility or =
adapter registrations for similar interfaces. For example, when looking =
for browser view X and there are two such views, Zope looks for the most =
specific matching interface, and this may have changed.
> Downloads
>=20
> Unified Installer
> all platforms (5.6 MB) =
<https://launchpad.net/plone/5.2/5.2.2/+download/Plone-5.2.2-UnifiedInstal=
ler.tgz>
> Please see the release page for more detailed package release notes
--Apple-Mail=_D4093D52-3D57-4EE1-B6BE-975239CED85D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=us-ascii
<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii"><base></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><meta=
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><base class=3D""><div style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><meta=
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><base class=3D""><div style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><meta=
http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8" =
class=3D""><base class=3D""><div style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><base=
class=3D""><div class=3D"Apple-Mail-URLShareUserContentTopClass"><br =
class=3D""></div><div =
class=3D"Apple-Mail-URLShareWrapperClass"><blockquote type=3D"cite" =
style=3D"border-left-style: none; color: inherit; padding: inherit; =
margin: inherit;" class=3D""><div class=3D""><div =
class=3D"original-url"><br class=3D""><a =
href=3D"https://plone.org/download/releases/5.2.2" =
class=3D"">https://plone.org/download/releases/5.2.2</a><br class=3D""><br=
class=3D""></div><div id=3D"article" role=3D"article" =
style=3D"text-rendering: optimizeLegibility; font-family: =
-apple-system-font; font-size: 1.2em; line-height: 1.5em; margin: 0px; =
padding: 0px;" class=3D"system exported">
<!-- This node will contain a number of div.page. -->
<div class=3D"page" style=3D"word-wrap: break-word; max-width: =
100%;"><h1 class=3D"title" style=3D"font-size: 1.95552em; line-height: =
1.2141em; margin-top: 0px; margin-bottom: 0.5em; max-width: 100%;">Plone =
5.2.2</h1>
=20
=20
<div style=3D"max-width: 100%;" class=3D""><p style=3D"max-width: =
100%;" class=3D"">There may be hotfixes applicable to this release. =
Always check the <a href=3D"https://plone.org/security/hotfixes/" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" class=3D"">Plone =
Hotfix page</a> before production deployment.</p>
</div>
<h3 style=3D"font-size: 1.25em; max-width: 100%;" class=3D"">Release =
notes</h3>
<div class=3D"scrollable" style=3D"max-width: 100%; overflow-x: =
scroll; word-wrap: normal;"><table style=3D"max-width: none; font-size: =
0.9em; word-wrap: break-word; border-collapse: collapse;" class=3D"">
<tbody style=3D"max-width: 100%;" class=3D"">
<tr style=3D"max-width: 100%;" class=3D""><th style=3D"max-width: =
100%; padding: 0.25em 0.5em; border: 1px solid rgb(216, 216, 216); =
background-color: rgba(0, 0, 0, 0.024);" class=3D"">License</th><td =
style=3D"max-width: 100%; padding: 0.25em 0.5em; border: 1px solid =
rgb(216, 216, 216);" class=3D""><a =
href=3D"http://creativecommons.org/licenses/GPL/2.0/" style=3D"color: =
rgb(65, 110, 210); max-width: 100%;" class=3D"">GPL</a></td></tr>
<tr style=3D"max-width: 100%;" class=3D""><th style=3D"max-width: =
100%; padding: 0.25em 0.5em; border: 1px solid rgb(216, 216, 216); =
background-color: rgba(0, 0, 0, 0.024);" class=3D"">Date =
released</th><td style=3D"max-width: 100%; padding: 0.25em 0.5em; =
border: 1px solid rgb(216, 216, 216);" class=3D"">2020-08-14</td></tr>
<tr style=3D"max-width: 100%;" class=3D""><th style=3D"max-width: =
100%; padding: 0.25em 0.5em; border: 1px solid rgb(216, 216, 216); =
background-color: rgba(0, 0, 0, 0.024);" class=3D"">Release =
manager</th><td style=3D"max-width: 100%; padding: 0.25em 0.5em; border: =
1px solid rgb(216, 216, 216);" class=3D""><a =
href=3D"https://plone.org/profile/esteele" style=3D"color: rgb(65, 110, =
210); max-width: 100%;" class=3D"">Eric Steele</a></td></tr>
</tbody>
</table></div>
<div style=3D"max-width: 100%;" class=3D""><p style=3D"max-width: =
100%;" class=3D"">Plone 5.2.2 is a bug fix release of <a =
href=3D"x-msg://9/resolveuid/be45977ba24744d2bbd2a6d1f1f4cfe6" =
data-linktype=3D"internal" data-val=3D"be45977ba24744d2bbd2a6d1f1f4cfe6" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" class=3D"">Plone =
5.2</a>. Release Manager for this version is Maurits van Rees <span =
style=3D"max-width: 100%;" class=3D"">(despite the automated text =
above)</span>.</p><p style=3D"max-width: 100%;" class=3D"">Installers =
are being made, so not all links below will work yet. Experienced users =
can update their buildout config by pointing to <a =
href=3D"https://dist.plone.org/release/5.2.2/versions.cfg" =
data-linktype=3D"external" =
data-val=3D"https://dist.plone.org/release/5.2.2/versions.cfg" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">https://dist.plone.org/release/5.2.2/versions.cfg</a>.</p><p =
style=3D"max-width: 100%;" class=3D""><strong style=3D"max-width: 100%;" =
class=3D"">Linux/BSD/Unix users:</strong> Use the <em =
style=3D"max-width: 100%;" class=3D"">Unified Installer</em>. It is =
a configuration and setup kit with build scripts.</p><p =
style=3D"max-width: 100%;" class=3D""><strong style=3D"max-width: 100%;" =
class=3D"">Windows 10 users:</strong> use the Unified Installer. =
See <a =
href=3D"https://github.com/plone/Installers-UnifiedInstaller/blob/windows_=
install/docs/windows.rst" style=3D"color: rgb(65, 110, 210); max-width: =
100%;" class=3D"">Windows-specific installation instructions</a>. =
Consider using the unified installer within the Windows Subsystem for =
Linux (WSL).</p><p style=3D"max-width: 100%;" class=3D""><strong =
style=3D"max-width: 100%;" class=3D"">OS X users:</strong> use the =
Vagrant kit or install XCode command-line tools and use the Unified =
Installer.</p><p style=3D"max-width: 100%;" class=3D""><strong =
style=3D"max-width: 100%;" class=3D"">Automated =
provisioning:</strong> See <a =
href=3D"http://docs.plone.org/external/ansible-playbook/docs" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" class=3D"">Plone's =
Ansible Playbook</a> for a full-stack installation kit.</p><p =
style=3D"max-width: 100%;" class=3D""><strong style=3D"max-width: 100%;" =
class=3D"">Cross-platform Docker:</strong> install <a =
href=3D"https://www.docker.com/" data-linktype=3D"external" =
data-val=3D"https://www.docker.com/" style=3D"color: rgb(65, 110, 210); =
max-width: 100%;" class=3D"">Docker</a> and use the <a =
href=3D"https://github.com/plone/plone.docker" data-linktype=3D"external" =
data-val=3D"https://github.com/plone/plone.docker" style=3D"color: =
rgb(65, 110, 210); max-width: 100%;" class=3D"">Plone Docker =
image</a>.</p><p style=3D"max-width: 100%;" class=3D"">For the Plone 5.2 =
upgrade guide, see <a =
href=3D"https://docs.plone.org/manage/upgrading/index.html?highlight=3Dupg=
rade%20guide" style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">https://docs.plone.org/manage/upgrading/</a></p><p =
style=3D"max-width: 100%;" class=3D""><strong style=3D"max-width: 100%;" =
class=3D"">Specific release notes for Plone 5.2.2:</strong></p><p =
style=3D"max-width: 100%;" class=3D"">This release packs a lot of =
changes: the previous release was from January 2020. Some highlights =
are:</p>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">Zope was upgraded from 4.1 to =
4.5. This means the support for WebDav is back. And the logic around =
template engines got updated. There should now be less differences in =
behavior between various kinds of templates (Zope/Acquisition-aware or =
not) or which template engine is used (zope.pagetemplate or chameleon). =
There were some problems due to this change, but all should have been =
fixed now.</li>
<li style=3D"max-width: 100%;" class=3D"">ZODB goes from 5.5.1 to 5.6.0. =
This needed updated packages for zodbupdate and ZEO. So if you are doing =
low-level transactional stuff, please take a look at its changes.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.recipe.zope2instance: =
changes for relstorage, sqlite, webdav, Windows.</li>
<li style=3D"max-width: 100%;" class=3D"">Fixed problems running Plone =
on Windows. You may want to keep an eye out for newer releases of =
plone.recipe.zope2instance. See especially this issue: <a =
href=3D"https://github.com/plone/plone.recipe.zope2instance/issues/144" =
data-linktype=3D"external" =
data-val=3D"https://github.com/plone/plone.recipe.zope2instance/issues/144=
" style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">https://github.com/plone/plone.recipe.zope2instance/issues/144<=
/a></li>
<li style=3D"max-width: 100%;" class=3D"">Mockup and =
plone.staticresources: lots and lots of improvements and bug fixes in =
styling and javascript.</li>
<li style=3D"max-width: 100%;" class=3D"">Big push in fixing various =
internationalization issues.</li>
<li style=3D"max-width: 100%;" class=3D"">Integrated PloneHotfix20200121 =
for increased security.</li>
<li style=3D"max-width: 100%;" class=3D"">Moved the security check if a =
url is in the portal to a small separate package: =
Products.isurlinportal. You can immediately use this on Plone 4.3 and =
higher. Keep an eye on updates for this package: newer versions will =
increase the security. Often the impact of fixes is too small to warrant =
a real security hotfix package, but we want to do more regular fixes =
here.</li>
<li style=3D"max-width: 100%;" class=3D"">Use Products.isurlinportal =
1.1.0 with security hardening against whitespace: <a =
href=3D"https://github.com/plone/Products.isurlinportal/issues/1" =
data-linktype=3D"external" =
data-val=3D"https://github.com/plone/Products.isurlinportal/issues/1" =
style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">https://github.com/plone/Products.isurlinportal/issues/1</a></l=
i>
<li style=3D"max-width: 100%;" class=3D"">plone.app.discussion: Extended =
existing review workflow by states rejected and spam.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.app.theming: Add custom =
CSS settings to theming control panel. You now have a textarea where you =
can simply add css without needing to override things or play with =
less/scss.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.namedfile and several =
other packages: support for Range requests.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.outputfilters has a =
possibly breaking change: change the image caption template to use =
<figure> and <figcaption>. If you want to change this, there =
is a new ImageCaptioningEnabler utility.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.restapi was upgraded =
from 6.1.0 to 6.13.7, with lots of new features.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.scale: the method =
signature for scaling was made clearer. The mode argument replaces the =
old direction argument. Direction is still supported, but now =
deprecated. The new name for direction down is: mode contain or =
scale-crop-to-fit. The new name for direction up is: mode cover or =
scale-crop-to-fill. The new name for direction thumbnail is: mode =
scale.</li>
<li style=3D"max-width: 100%;" class=3D"">plone.testing 8.0.1 drops the =
z2 extra. If you need this, use the zope extra instead.</li>
<li style=3D"max-width: 100%;" class=3D"">Products.CMFPlone: Add =
markdown extension settings to markup control panel.</li>
<li style=3D"max-width: 100%;" class=3D"">z3c.autoinclude: When =
environment variable Z3C_AUTOINCLUDE_DEBUG is set, log which packages =
are being automatically included.</li>
<li style=3D"max-width: 100%;" class=3D"">zope.interface was upgraded =
from 4.6.0 to 5.0.2. This has performance fixes that may have backwards =
incompatible changes. This makes the inheritance and method resolution =
order for interfaces more logical and more in line with how it works for =
'normal' classes. In corner cases there can be subtle differences when =
there are several utility or adapter registrations for similar =
interfaces. For example, when looking for browser view X and there are =
two such views, Zope looks for the most specific matching interface, and =
this may have changed.</li>
</ul>
</div>
<h3 style=3D"font-size: 1.25em; max-width: 100%;" =
class=3D"">Downloads</h3>
<ul style=3D"max-width: 100%;" class=3D"">
<li style=3D"max-width: 100%;" class=3D"">
<a =
href=3D"https://launchpad.net/plone/5.2/5.2.2/+download/Plone-5.2.2-Unifie=
dInstaller.tgz" style=3D"color: rgb(65, 110, 210); max-width: 100%;" =
class=3D"">
Unified Installer<br style=3D"max-width: 100%;" class=3D"">
<small style=3D"max-width: 100%;" class=3D"">all platforms (5.6 =
MB)</small>
</a>
</li>
</ul>
=20
<h3 style=3D"font-size: 1.25em; max-width: 100%;" class=3D""><b =
class=3D"">Please see the release page for more detailed package release =
notes</b></h3></div></div></div></blockquote></div></div></div></div></bod=
y></html>=
--Apple-Mail=_D4093D52-3D57-4EE1-B6BE-975239CED85D--
--===============6516316548777609888==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--===============6516316548777609888==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Want community news? Subscribe to our newsletter http://eepurl.com/S4wfL
Plone-Announce mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/plone-announce
--===============6516316548777609888==--