.. _changes_1.6.4:
|
|
1.6.4 (2016-08-17)
|
==================
|
|
Bug Fixes
|
---------
|
|
- Oops, Apparently wheels do not build cleanly every time, so build artifacts
|
from 1.7.1 creeped into the wheel for 1.6.3. Note to self: ``rm -rf build``.
|
|
.. _changes_1.6.3:
|
|
1.6.3 (2016-08-16)
|
==================
|
|
Bug Fixes
|
---------
|
|
- Revert changes from #2706 released in Pyramid 1.6.2. JSON renderers will
|
continue to return unicode data instead of UTF-8 encoded bytes. This means
|
that WebOb responses are still expected to handle unicode data even though
|
JSON does not have a charset.
|
See https://github.com/Pylons/pyramid/issues/2744
|
|
.. _changes_1.6.2:
|
|
1.6.2 (2016-08-16)
|
==================
|
|
Bug Fixes
|
---------
|
|
- Fixed bug in `proutes` such that it now shows the correct view when a class
|
and `attr` is involved.
|
See: https://github.com/Pylons/pyramid/pull/2687
|
|
- The JSON renderers now encode their result as UTF-8. The renderer helper
|
will now warn the user and encode the result as UTF-8 if a renderer returns a
|
text type and the response does not have a valid character set. See
|
https://github.com/Pylons/pyramid/pull/2706
|
|
.. _changes_1.6.1:
|
|
1.6.1 (2016-02-02)
|
==================
|
|
Deprecations
|
------------
|
|
- Missed the deprecation of one more daemon/process management feature that
|
allowed logging to a file. This deprecates ``--log-file`` which is generally
|
only used with pserve running in daemon mode. See
|
https://github.com/Pylons/pyramid/pull/2330
|
|
Bug Fixes
|
---------
|
|
- Fix an issue with differing CSRF token data types on Python runtimes
|
supporting ``hmac.compare_digest``.
|
See https://github.com/Pylons/pyramid/pull/2299
|
|
1.6 (2016-01-03)
|
================
|
|
Deprecations
|
------------
|
|
- Continue removal of ``pserve`` daemon/process management features
|
by deprecating ``--user`` and ``--group`` options.
|
See https://github.com/Pylons/pyramid/pull/2190
|
|
1.6b3 (2015-12-17)
|
==================
|
|
Backward Incompatibilities
|
--------------------------
|
|
- Remove the ``cachebust`` option from ``config.add_static_view``. See
|
``config.add_cache_buster`` for the new way to attach cache busters to
|
static assets.
|
See https://github.com/Pylons/pyramid/pull/2186
|
|
- Modify the ``pyramid.interfaces.ICacheBuster`` API to be a simple callable
|
instead of an object with ``match`` and ``pregenerate`` methods. Cache
|
busters are now focused solely on generation. Matching has been dropped.
|
|
Note this affects usage of ``pyramid.static.QueryStringCacheBuster`` and
|
``pyramid.static.ManifestCacheBuster``.
|
|
See https://github.com/Pylons/pyramid/pull/2186
|
|
Features
|
--------
|
|
- Add a new ``config.add_cache_buster`` API for attaching cache busters to
|
static assets. See https://github.com/Pylons/pyramid/pull/2186
|
|
Bug Fixes
|
---------
|
|
- Ensure that ``IAssetDescriptor.abspath`` always returns an absolute path.
|
There were cases depending on the process CWD that a relative path would
|
be returned. See https://github.com/Pylons/pyramid/issues/2188
|
|
1.6b2 (2015-10-15)
|
==================
|
|
Features
|
--------
|
|
- Allow asset specifications to be supplied to
|
``pyramid.static.ManifestCacheBuster`` instead of requiring a
|
filesystem path.
|
|
1.6b1 (2015-10-15)
|
==================
|
|
Backward Incompatibilities
|
--------------------------
|
|
- IPython and BPython support have been removed from pshell in the core.
|
To continue using them on Pyramid 1.6+ you must install the binding
|
packages explicitly::
|
|
$ pip install pyramid_ipython
|
|
or
|
|
$ pip install pyramid_bpython
|
|
- Remove default cache busters introduced in 1.6a1 including
|
``PathSegmentCacheBuster``, ``PathSegmentMd5CacheBuster``, and
|
``QueryStringMd5CacheBuster``.
|
See https://github.com/Pylons/pyramid/pull/2116
|
|
Features
|
--------
|
|
- Additional shells for ``pshell`` can now be registered as entrypoints. See
|
https://github.com/Pylons/pyramid/pull/1891 and
|
https://github.com/Pylons/pyramid/pull/2012
|
|
- The variables injected into ``pshell`` are now displayed with their
|
docstrings instead of the default ``str(obj)`` when possible.
|
See https://github.com/Pylons/pyramid/pull/1929
|
|
- Add new ``pyramid.static.ManifestCacheBuster`` for use with external
|
asset pipelines as well as examples of common usages in the narrative.
|
See https://github.com/Pylons/pyramid/pull/2116
|
|
- Fix ``pserve --reload`` to not crash on syntax errors!!!
|
See https://github.com/Pylons/pyramid/pull/2125
|
|
- Fix an issue when user passes unparsed strings to ``pyramid.session.CookieSession``
|
and ``pyramid.authentication.AuthTktCookieHelper`` for time related parameters
|
``timeout``, ``reissue_time``, ``max_age`` that expect an integer value.
|
See https://github.com/Pylons/pyramid/pull/2050
|
|
Bug Fixes
|
---------
|
|
- ``pyramid.httpexceptions.HTTPException`` now defaults to
|
``520 Unknown Error`` instead of ``None None`` to conform with changes in
|
WebOb 1.5.
|
See https://github.com/Pylons/pyramid/pull/1865
|
|
- ``pshell`` will now preserve the capitalization of variables in the
|
``[pshell]`` section of the INI file. This makes exposing classes to the
|
shell a little more straightfoward.
|
See https://github.com/Pylons/pyramid/pull/1883
|
|
- Fixed usage of ``pserve --monitor-restart --daemon`` which would fail in
|
horrible ways. See https://github.com/Pylons/pyramid/pull/2118
|
|
- Explicitly prevent ``pserve --reload --daemon`` from being used. It's never
|
been supported but would work and fail in weird ways.
|
See https://github.com/Pylons/pyramid/pull/2119
|
|
- Fix an issue on Windows when running ``pserve --reload`` in which the
|
process failed to fork because it could not find the pserve script to
|
run. See https://github.com/Pylons/pyramid/pull/2138
|
|
Deprecations
|
------------
|
|
- Deprecate ``pserve --monitor-restart`` in favor of user's using a real
|
process manager such as Systemd or Upstart as well as Python-based
|
solutions like Circus and Supervisor.
|
See https://github.com/Pylons/pyramid/pull/2120
|
|
1.6a2 (2015-06-30)
|
==================
|
|
Bug Fixes
|
---------
|
|
- Ensure that ``pyramid.httpexceptions.exception_response`` returns the
|
appropriate "concrete" class for ``400`` and ``500`` status codes.
|
See https://github.com/Pylons/pyramid/issues/1832
|
|
- Fix an infinite recursion bug introduced in 1.6a1 when
|
``pyramid.view.render_view_to_response`` was called directly or indirectly.
|
See https://github.com/Pylons/pyramid/issues/1643
|
|
- Further fix the JSONP renderer by prefixing the returned content with
|
a comment. This should mitigate attacks from Flash (See CVE-2014-4671).
|
See https://github.com/Pylons/pyramid/pull/1649
|
|
- Allow periods and brackets (``[]``) in the JSONP callback. The original
|
fix was overly-restrictive and broke Angular.
|
See https://github.com/Pylons/pyramid/pull/1649
|
|
1.6a1 (2015-04-15)
|
==================
|
|
Features
|
--------
|
|
- pcreate will now ask for confirmation if invoked with
|
an argument for a project name that already exists or
|
is importable in the current environment.
|
See https://github.com/Pylons/pyramid/issues/1357 and
|
https://github.com/Pylons/pyramid/pull/1837
|
|
- Make it possible to subclass ``pyramid.request.Request`` and also use
|
``pyramid.request.Request.add_request.method``. See
|
https://github.com/Pylons/pyramid/issues/1529
|
|
- The ``pyramid.config.Configurator`` has grown the ability to allow
|
actions to call other actions during a commit-cycle. This enables much more
|
logic to be placed into actions, such as the ability to invoke other actions
|
or group them for improved conflict detection. We have also exposed and
|
documented the config phases that Pyramid uses in order to further assist
|
in building conforming addons.
|
See https://github.com/Pylons/pyramid/pull/1513
|
|
- Add ``pyramid.request.apply_request_extensions`` function which can be
|
used in testing to apply any request extensions configured via
|
``config.add_request_method``. Previously it was only possible to test
|
the extensions by going through Pyramid's router.
|
See https://github.com/Pylons/pyramid/pull/1581
|
|
- pcreate when run without a scaffold argument will now print information on
|
the missing flag, as well as a list of available scaffolds.
|
See https://github.com/Pylons/pyramid/pull/1566 and
|
https://github.com/Pylons/pyramid/issues/1297
|
|
- Added support / testing for 'pypy3' under Tox and Travis.
|
See https://github.com/Pylons/pyramid/pull/1469
|
|
- Automate code coverage metrics across py2 and py3 instead of just py2.
|
See https://github.com/Pylons/pyramid/pull/1471
|
|
- Cache busting for static resources has been added and is available via a new
|
argument to ``pyramid.config.Configurator.add_static_view``: ``cachebust``.
|
Core APIs are shipped for both cache busting via query strings and
|
path segments and may be extended to fit into custom asset pipelines.
|
See https://github.com/Pylons/pyramid/pull/1380 and
|
https://github.com/Pylons/pyramid/pull/1583
|
|
- Add ``pyramid.config.Configurator.root_package`` attribute and init
|
parameter to assist with includeable packages that wish to resolve
|
resources relative to the package in which the ``Configurator`` was created.
|
This is especially useful for addons that need to load asset specs from
|
settings, in which case it is may be natural for a developer to define
|
imports or assets relative to the top-level package.
|
See https://github.com/Pylons/pyramid/pull/1337
|
|
- Added line numbers to the log formatters in the scaffolds to assist with
|
debugging. See https://github.com/Pylons/pyramid/pull/1326
|
|
- Add new HTTP exception objects for status codes
|
``428 Precondition Required``, ``429 Too Many Requests`` and
|
``431 Request Header Fields Too Large`` in ``pyramid.httpexceptions``.
|
See https://github.com/Pylons/pyramid/pull/1372/files
|
|
- The ``pshell`` script will now load a ``PYTHONSTARTUP`` file if one is
|
defined in the environment prior to launching the interpreter.
|
See https://github.com/Pylons/pyramid/pull/1448
|
|
- Make it simple to define notfound and forbidden views that wish to use
|
the default exception-response view but with altered predicates and other
|
configuration options. The ``view`` argument is now optional in
|
``config.add_notfound_view`` and ``config.add_forbidden_view``..
|
See https://github.com/Pylons/pyramid/issues/494
|
|
- Greatly improve the readability of the ``pcreate`` shell script output.
|
See https://github.com/Pylons/pyramid/pull/1453
|
|
- Improve robustness to timing attacks in the ``AuthTktCookieHelper`` and
|
the ``SignedCookieSessionFactory`` classes by using the stdlib's
|
``hmac.compare_digest`` if it is available (such as Python 2.7.7+ and 3.3+).
|
See https://github.com/Pylons/pyramid/pull/1457
|
|
- Assets can now be overidden by an absolute path on the filesystem when using
|
the ``config.override_asset`` API. This makes it possible to fully support
|
serving up static content from a mutable directory while still being able
|
to use the ``request.static_url`` API and ``config.add_static_view``.
|
Previously it was not possible to use ``config.add_static_view`` with an
|
absolute path **and** generate urls to the content. This change replaces
|
the call, ``config.add_static_view('/abs/path', 'static')``, with
|
``config.add_static_view('myapp:static', 'static')`` and
|
``config.override_asset(to_override='myapp:static/',
|
override_with='/abs/path/')``. The ``myapp:static`` asset spec is completely
|
made up and does not need to exist - it is used for generating urls
|
via ``request.static_url('myapp:static/foo.png')``.
|
See https://github.com/Pylons/pyramid/issues/1252
|
|
- Added ``pyramid.config.Configurator.set_response_factory`` and the
|
``response_factory`` keyword argument to the ``Configurator`` for defining
|
a factory that will return a custom ``Response`` class.
|
See https://github.com/Pylons/pyramid/pull/1499
|
|
- Allow an iterator to be returned from a renderer. Previously it was only
|
possible to return bytes or unicode.
|
See https://github.com/Pylons/pyramid/pull/1417
|
|
- ``pserve`` can now take a ``-b`` or ``--browser`` option to open the server
|
URL in a web browser. See https://github.com/Pylons/pyramid/pull/1533
|
|
- Overall improvments for the ``proutes`` command. Added ``--format`` and
|
``--glob`` arguments to the command, introduced the ``method``
|
column for displaying available request methods, and improved the ``view``
|
output by showing the module instead of just ``__repr__``.
|
See https://github.com/Pylons/pyramid/pull/1488
|
|
- Support keyword-only arguments and function annotations in views in
|
Python 3. See https://github.com/Pylons/pyramid/pull/1556
|
|
- ``request.response`` will no longer be mutated when using the
|
``pyramid.renderers.render_to_response()`` API. It is now necessary to
|
pass in a ``response=`` argument to ``render_to_response`` if you wish to
|
supply the renderer with a custom response object for it to use. If you
|
do not pass one then a response object will be created using the
|
application's ``IResponseFactory``. Almost all renderers
|
mutate the ``request.response`` response object (for example, the JSON
|
renderer sets ``request.response.content_type`` to ``application/json``).
|
However, when invoking ``render_to_response`` it is not expected that the
|
response object being returned would be the same one used later in the
|
request. The response object returned from ``render_to_response`` is now
|
explicitly different from ``request.response``. This does not change the
|
API of a renderer. See https://github.com/Pylons/pyramid/pull/1563
|
|
- The ``append_slash`` argument of ```Configurator().add_notfound_view()`` will
|
now accept anything that implements the ``IResponse`` interface and will use
|
that as the response class instead of the default ``HTTPFound``. See
|
https://github.com/Pylons/pyramid/pull/1610
|
|
Bug Fixes
|
---------
|
|
- The JSONP renderer created JavaScript code in such a way that a callback
|
variable could be used to arbitrarily inject javascript into the response
|
object. https://github.com/Pylons/pyramid/pull/1627
|
|
- Work around an issue where ``pserve --reload`` would leave terminal echo
|
disabled if it reloaded during a pdb session.
|
See https://github.com/Pylons/pyramid/pull/1577,
|
https://github.com/Pylons/pyramid/pull/1592
|
|
- ``pyramid.wsgi.wsgiapp`` and ``pyramid.wsgi.wsgiapp2`` now raise
|
``ValueError`` when accidentally passed ``None``.
|
See https://github.com/Pylons/pyramid/pull/1320
|
|
- Fix an issue whereby predicates would be resolved as maybe_dotted in the
|
introspectable but not when passed for registration. This would mean that
|
``add_route_predicate`` for example can not take a string and turn it into
|
the actual callable function.
|
See https://github.com/Pylons/pyramid/pull/1306
|
|
- Fix ``pyramid.testing.setUp`` to return a ``Configurator`` with a proper
|
package. Previously it was not possible to do package-relative includes
|
using the returned ``Configurator`` during testing. There is now a
|
``package`` argument that can override this behavior as well.
|
See https://github.com/Pylons/pyramid/pull/1322
|
|
- Fix an issue where a ``pyramid.response.FileResponse`` may apply a charset
|
where it does not belong. See https://github.com/Pylons/pyramid/pull/1251
|
|
- Work around a bug introduced in Python 2.7.7 on Windows where
|
``mimetypes.guess_type`` returns Unicode rather than str for the content
|
type, unlike any previous version of Python. See
|
https://github.com/Pylons/pyramid/issues/1360 for more information.
|
|
- ``pcreate`` now normalizes the package name by converting hyphens to
|
underscores. See https://github.com/Pylons/pyramid/pull/1376
|
|
- Fix an issue with the final response/finished callback being unable to
|
add another callback to the list. See
|
https://github.com/Pylons/pyramid/pull/1373
|
|
- Fix a failing unittest caused by differing mimetypes across various OSs.
|
See https://github.com/Pylons/pyramid/issues/1405
|
|
- Fix route generation for static view asset specifications having no path.
|
See https://github.com/Pylons/pyramid/pull/1377
|
|
- Allow the ``pyramid.renderers.JSONP`` renderer to work even if there is no
|
valid request object. In this case it will not wrap the object in a
|
callback and thus behave just like the ``pyramid.renderers.JSON`` renderer.
|
See https://github.com/Pylons/pyramid/pull/1561
|
|
- Prevent "parameters to load are deprecated" ``DeprecationWarning``
|
from setuptools>=11.3. See https://github.com/Pylons/pyramid/pull/1541
|
|
- Avoiding sharing the ``IRenderer`` objects across threads when attached to
|
a view using the `renderer=` argument. These renderers were instantiated
|
at time of first render and shared between requests, causing potentially
|
subtle effects like `pyramid.reload_templates = true` failing to work
|
in `pyramid_mako`. See https://github.com/Pylons/pyramid/pull/1575
|
and https://github.com/Pylons/pyramid/issues/1268
|
|
- Avoiding timing attacks against CSRF tokens.
|
See https://github.com/Pylons/pyramid/pull/1574
|
|
- ``request.finished_callbacks`` and ``request.response_callbacks`` now
|
default to an iterable instead of ``None``. It may be checked for a length
|
of 0. This was the behavior in 1.5.
|
|
Deprecations
|
------------
|
|
- The ``pserve`` command's daemonization features have been deprecated. This
|
includes the ``[start,stop,restart,status]`` subcommands as well as the
|
``--daemon``, ``--stop-server``, ``--pid-file``, and ``--status`` flags.
|
|
Please use a real process manager in the future instead of relying on the
|
``pserve`` to daemonize itself. Many options exist including your Operating
|
System's services such as Systemd or Upstart, as well as Python-based
|
solutions like Circus and Supervisor.
|
|
See https://github.com/Pylons/pyramid/pull/1641
|
|
- Renamed the ``principal`` argument to ``pyramid.security.remember()`` to
|
``userid`` in order to clarify its intended purpose.
|
See https://github.com/Pylons/pyramid/pull/1399
|
|
Docs
|
----
|
|
- Moved the documentation for ``accept`` on ``Configurator.add_view`` to no
|
longer be part of the predicate list. See
|
https://github.com/Pylons/pyramid/issues/1391 for a bug report stating
|
``not_`` was failing on ``accept``. Discussion with @mcdonc led to the
|
conclusion that it should not be documented as a predicate.
|
See https://github.com/Pylons/pyramid/pull/1487 for this PR
|
|
- Removed logging configuration from Quick Tutorial ini files except for
|
scaffolding- and logging-related chapters to avoid needing to explain it too
|
early.
|
|
- Clarify a previously-implied detail of the ``ISession.invalidate`` API
|
documentation.
|
|
- Improve and clarify the documentation on what Pyramid defines as a
|
``principal`` and a ``userid`` in its security APIs.
|
See https://github.com/Pylons/pyramid/pull/1399
|
|
- Add documentation of command line programs (``p*`` scripts). See
|
https://github.com/Pylons/pyramid/pull/2191
|
|
Scaffolds
|
---------
|
|
- Update scaffold generating machinery to return the version of pyramid and
|
pyramid docs for use in scaffolds. Updated starter, alchemy and zodb
|
templates to have links to correctly versioned documentation and reflect
|
which pyramid was used to generate the scaffold.
|
|
- Removed non-ascii copyright symbol from templates, as this was
|
causing the scaffolds to fail for project generation.
|
|
- You can now run the scaffolding func tests via ``tox py2-scaffolds`` and
|
``tox py3-scaffolds``.
|
