Plone 5.0.7 (March 15, 2017)

There may be hotfixes applicable to this release. Always check the Plone Hotfix page before production deployment.

Release notes

LicenseGPL
Date released2017-03-15
Release managerEric Steele

Linux/BSD/Unix users: Use the Unified Installer. It is a full-source kit with build scripts.

Windows users: use the Simple Plone Buildout or the Vagrant kit.

OS X users: use the Vagrant kit or install XCode command-line tools and use the Unified Installer.

Automated provisioning: See Plone's Ansible Playbook for a full-stack installation kit.

Downloads

Changes

AccessControl: 3.0.12 → 3.0.13

coverage: 3.7.1 → 4.2

setuptools: 21.0.0 → 26.1.1

zc.buildout: 2.5.2 → 2.5.3

plone.recipe.zeoserver: 1.2.9 → 1.3

New features:
  • Add support for log rotation. [hvelarde]
Bug fixes:
  • Typo in documentation. [ale-rt]

plone.recipe.zope2instance: 4.2.21 → 4.2.22

Bug fixes:
  • Add coding headers on python files. [gforcada]

plone.releaser: 1.5.3 → 1.5.4

Bug fixes:
  • Use print as a function. [gforcada]

plone.app.robotframework: 1.0 → 1.0.1

Bug fixes:
  • fix broken links [staeff]

Chameleon: 2.24 → 2.25

Plone: 5.0.6 → 5.0.7

New features:
  • Release Plone 5.0.7 [esteele]
Bug fixes:
  • Be sure to require archetypes.multilingual even if it's not required as a dependency of plone.app.multilingual. [davisagli]

Products.Archetypes: 1.10.15 → 1.10.16

Bug fixes:
  • DateWidget, DatetimeWidget now able to clear previous values; backported fix from 1.11.1. [seanupton]

Products.CMFDiffTool: 3.1.2 → 3.1.3

Bug fixes:
  • Fix error in showing changes to objects of type "set" [deankarlen]

Products.CMFDynamicViewFTI: 4.1.4 → 4.1.5

Bug fixes:
  • Don't instantiate browser view to check for existence. [malthe]

Products.CMFEditions: 2.2.21 → 2.2.23

Bug fixes:
  • In ShadowStorage's isRegistered and getHistory methods, avoid checking for a history_id of None in the storage's BTree. This fixes compatibility with BTrees 4.x, which disallows comparing keys to None. [davisagli]

  • Fix deprecated import from Globals that is changed in Zope4. [pbauer]

  • Do not log using plone restricted python logging script. [jensens]

Products.CMFFormController: 3.0.6 → 3.0.8

Bug fixes:
  • Applied security hotfix 20160830 for redirect_to. This action refuses to redirect to unknown external sites. Added external_redirect_to action in case someone does need to redirect to an external site. This option is also there in the hotfix. [maurits]

  • Move patch from plone.protect 3.x to Actions.RedirectTo so it allows ATContentTypes add forms to append auth token. Issue https://github.com/plone/Products.CMFPlone/issues/1335 [staeff, fredvd]

Products.CMFPlacefulWorkflow: 1.6.5 → 1.6.6

Bug fixes:
  • Fixed workflow tests for new comment_one_state_workflow. [maurits]

Products.CMFPlone: 5.0.6 → 5.0.7

New features:
  • Added ok view. This is useful for automated checks, for example httpok, to see if the site is still available. It returns the text OK and sets headers to avoid caching. [maurits]

  • Include a new release of mockup. [thet]

  • Move get_top_site_from_url from plone.app.content to utils.py. This function allows in virtual hosting environments to acquire the top most visible portal object to operate on. It is used for example to calculate the correct virtual root objects for Mockup's related items and structure pattern. [thet]

Bug fixes:
  • Fix wrong TinyMCE configuration for multilingual sites [erral]

  • Added security checks for str.format. Part of PloneHotfix20170117. [maurits]

  • Load some patches earlier, instead of in our initialize method. [maurits]

  • Fixed workflow tests for new comment_one_state_workflow. [maurits]

  • Fixed sometimes failing search order tests. [maurits]

  • Load some Products.CMFPlone.patches earlier, instead of in our initialize method. This is part of PloneHotfix20161129. [maurits]

  • Fix Search RSS link condition to use search_rss_enabled option and use rss.png instead of rss.gif that doesn't exist anymore. [vincentfretin]

  • Fix potential KeyError: admin in doSearch in Users/Groups controlpanel. [vincentfretin]

  • Prevent workflow menu overflowing in toolbar [MatthewWilkes]

  • Add default icon for top-level contentview and contentmenu toolbar entries [alecm]

  • Fix various layout issues in toolbar [alecm]

  • Fix TinyMCE table styles [vangheem]

  • Apply security hotfix 20160830 for z3c.form widgets. [maurits]

  • Fixed tests in combination with newer CMFFormController which has the hotfix. [maurits]

  • Apply security hotfix 20160830 for @@plone-root-login. [maurits]

  • Apply security hotfix 20160830 for isURLInPortal. [maurits]

  • Bundle aggregation must use ++plone++static overrided versions if any. [ebrehault]

  • Fix bundle aggregation when bundle has no CSS (or no JS) [ebrehault]

  • Fix relative url in CSS in bundle aggregation [ebrehault]

  • Don't fail, when combining bundles and the target resource files (BUNLDE-compiled.[min.js|css]) do not yet exist on the filesystem. Fixes GenericSetup failing silently on import with when a to-be-compiled bundle which exists only as registry entry is processed in the combine-bundle step. [thet]

  • Don't fail, if timestamp.txt was deleted from the resource registries production folder. [thet]

  • Fix security test assertion: TestAttackVectorsFunctional test_widget_traversal_2 assumed a 302 http return code when accessing some private API. Meanwhile it changed to return a 404 on the URL. Reflect this in the test and expect a 404. [jensens]

  • Fix atom.xml feed not paying attention for setting to show about information [vangheem]

  • Do not encode reply-to email address for contact-info form [tkimnguyen]

Products.CMFQuickInstallerTool: 3.0.13 → 3.0.15

Bug fixes:
  • Fix imports since Globals was removed in Zope4 [pbauer]

  • Added link to the Add-ons control panel in the QI ZMI form. And say the form itself is deprecated. [maurits]

  • Apply security hotfix 20160830 for installProducts redirection. On top of that, we require a POST request. [maurits]

Products.contentmigration: 2.1.13 → 2.1.15

Bug fixes:
  • Errors has been dropped/deprecated errors from OFS.CopySupport. [tschorr]

  • Remove unused import of Archetypes. [davisagli]

Products.ExternalEditor: 1.1.1 → 1.1.3

  • Fixed reflective XSS in findResult. This applies PloneHotfix20170117. [maurits]

  • Quote variable in manage_tabs to avoid XSS. From Products.PloneHotfix20160830. [maurits]

Products.GenericSetup: 1.8.3 → 1.8.6

  • Added a purge_old option to the tarball import form. By default this option is checked, which matches the previous behavior. If you uncheck it, this avoids purging old settings for any import step that is run. [maurits]

  • Stopped using a form library to render the components form.

  • Made _profile_upgrade_versions a PersistentMapping. When (un)setLastVersionForProfile is called, we migrate the original Python dictionary. This makes some code easier and plays nicer with transactions, which may especially help during tests. [maurits]

Products.PlacelessTranslationService: 2.0.6 → 2.0.7

Bug fixes:
  • Fix import from Globals that is removed in Zope4. [pbauer]

Products.PlonePAS: 5.0.11 → 5.0.13

Bug fixes:
  • In getMemberInfo, if a property is not present it now returns an empty string, rather than raising an exception. This fixes login for sites that have location removed. [MatthewWilkes]

  • Depend on plone.protect 2.0.3 or higher. Fixes https://github.com/plone/Products.PlonePAS/issues/21 [maurits]

Products.ResourceRegistries: 3.0.4 → 3.0.5

Bug fixes:
  • Fix import from Globals that is removed in Zope4. [pbauer]

  • Remove tests, since this contains only stubs [tomgross]

Products.ZSQLMethods: 2.13.4 → 2.13.5

Products.statusmessages: 4.1.1 → 4.1.2

Bug fixes:
  • Fix deprecated import in test. [pbauer]

borg.localrole: 3.1.2 → 3.1.3

Bug fixes:
  • Removed ZopeTestCase. [maurits]

diazo: 1.2.3 → 1.2.5

New features:
  • only add absolute prefix for xlink:href attributes if url doesn't start with a '#' (use anchor_safe_urljoin) [huubbouma]
Bug fixes:
  • Fix test with webob 1.7 [davisagli]

icalendar: 3.10 → 3.11.3

Bug fixes:
  • Removed setuptools as a dependency as it was only required by setup.py and not by the package.

  • Don't split content lines on the unicode LINE SEPARATOR character \u2028 but only on CRLF or LF.

  • Run tests with python 3.5 and 3.6. [geier]

  • Allow tests failing with pypy3 on travis.ci. [geier]

  • Encode error message before adding it to the stack of collected error messages.

  • Successfully test with pypy and pypy3. [gforcada]

  • Minor documentation update. [tpltnt]

mockup: 2.1.5 → 2.1.7

New features:
  • PickADate pattern: Add a button to set the date or time to now and another to clear all inputs. Remove the clear buttons from the date and time picker itself, as they allowed incomplete input submission (e.g. date only when date and time were required). [thet]

  • PickADate pattern: Add option to automatically set the time when changing the date. It defaults to set the time to the current time. [thet]

  • PickADate pattern: Add option to automatically set the time when changing the date. It defaults to set the time to the current time. [thet]

  • provide selector option to markspeciallinks pattern

  • Change default sort option in livesearch pattern. [rodfersou]

  • Show expired label in folder contents for expired attributes [vangheem]

Bug fixes:
  • Fix the tests for 2.1.x by aligning package.json to master and reverting commit 3f1b741 as it was reverted in master also. [thet]

  • Move tooltip pattern definition after bootstrapTooltip function definition. This should fix bootstrapTooltip is not a constructor errors. [vangheem]

plone.app.blob: 1.6.4 → 1.6.7

Bug fixes:
  • Make sure core permissions are defined. This fixes issue #30 <https://github.com/plone/plone.app.blob/issues/30>_. [maurits]

  • Make doctests work with new zope.testbrowser based on Webtest. [pbauer]

  • Add coding headers on python files. [gforcada]

  • More flexible test of getIcon. [jensens]

  • Update code to follow Plone styleguide. [gforcada]

plone.app.caching: 1.2.11 → 1.2.15

Bug fixes:
  • Remove dependency on unittest2; fix tests assertions. [hvelarde]

  • Fixed tests when using ZODB 4. [davisagli]

  • Update code to follow Plone styleguide. [gforcada]

  • Code-Style: isort, utf8-headers, zca-decorators, manual cleanup. [jensens]

  • Enable unload protection by using pattern class pat-formunloadalert instead enableUnloadProtection. [thet]

plone.app.collection: 1.1.6 → 1.1.7

Bug fixes:
  • Fix summary view for results with Discussion Items [ichim-david]

  • Check with getattr if item isPrincipiaFolderish as Comment does not have this attribute which would render an AttributeError [ichim-david]

plone.app.content: 3.2 → 3.3.5

New features:
  • Move get_top_site_from_url out from here into Products.CMFPlone.utils. Deprecate old import. [thet]

  • Folder contents rename dialog: In the rename dialog, show image thumbnails in thumb scale instead of icon. Plones standard icon scale is way to small to be useful for images. [thet]

Bug fixes:
  • Check for containerish behavior in @@allow_upload. Fixes a case, where @allow_upload reported True for content of type File. [thet]

  • Add a missing comma between two strings in a list, python merges them into a single string if not. [keul, ekulos, gforcada]

  • Stop using canSelectDefaultPage Python script from CMFPlone. [davisagli]

  • Fix folder_contents view incorrectly returning an application/json response instead of a text/html response. [thet]

  • Fix issue with get_top_site_from_url, where in some circumstances a ValueError was thrown. If that happens, just return getSite. You will only notice, if you have subsites, access them non-VirtualHost-rooted and an error is thrown. Then folder contents won't be able to navigate up to the root Plone site. [thet]

  • Apply security hotfix 20160830 for folder factories redirection. [maurits]

  • Fix UnicodeDecodeError on full review list view [datakurre]

  • Folder contents properties dialog: Fix form request variables for effectiveDate and expirationDate dates. [thet]

  • Fix a json "circular reference detected" error which happened when the json dumper got unparsable data types. [pcdummy]

plone.app.contentlisting: 1.2.7 → 1.2.8

Bug fixes:
  • Remove ZopeTestCase. [ivanteoh, maurits]

plone.app.contentmenu: 2.1.8 → 2.1.10

New features:
  • Add ability to specify a short title for the collapsed sidebar by setting extras['shortTitle'], in the same way as stateTitle. [MatthewWilkes]

  • Documentation in README added. [jensens]

Bug fixes:
  • Add default icon for top-level toolbar entries [alecm]

  • Code cleanup. [gforcad]

  • Minor code cleanup, some micro-optimizations. [jensens]

plone.app.contentrules: 4.0.11 → 4.0.13

Bug fixes:
  • In browser tests, specify the buttons to be clicked by their name instead of their index. [thet]

  • Fix import location for Products.ATContentTypes.interfaces. [thet]

  • Add coding header to python files. [gforcada]

plone.app.contenttypes: 1.2.17 → 1.2.22

New features:
  • Remove browserlayer from listing views to allow overrides from other packages [agitator]
Bug fixes:
  • Add condition so custom folder migration does not fail if there is not an 'excludeFromNav' [cdw9]

  • Use helper method to retrieve all catalog brains in migration code, because Products.ZCatalog removed the ability to get all brains by calling the catalog without arguments. [thet, gogobd]

  • Fix use of add_file in testbrowser tests. [davisagli]

  • Render migration results without using Zope session. [davisagli]

  • Use unicode string when .format() parameter is unicode for the field migrator [frapell]

  • Fix SearchableText indexer, using textvalue.mimeType [agitator]

  • Fix Mimetype icon path. With the removal of the skins folder in https://github.com/plone/Products.MimetypesRegistry/pull/8/commits/61acf8327e5c844bff9e5c5676170aaf0ee2c323 we need the full resourcepath now [agitator]

  • Show message for editors when viewing Link. Fixes issue 375 <https://github.com/plone/plone.app.contenttypes/issues/375>_. [maurits]

  • Update code to follow Plone styleguide. [gforcada]

  • Update File.xml view action url_expr to append /view Fixes 'issue 378' https://github.com/plone/plone.app.contenttypes/issues/378`_. [lbrannon]

  • Correct the SearchableText base indexer: use mime type of RichText output (rather than raw) value in plaintext conversion. Fixes #357. [petri]

plone.app.customerize: 1.3.5 → 1.3.7

Bug fixes:
  • Fix tests on Zope 4. [davisagli]

  • Add coding header to python files. [gforcada]

  • Update code to follow Plone styleguide. [gforcada]

plone.app.dexterity: 2.3.2 → 2.3.7

New features:
  • Add generic version of folder_listing view & macro. Only registered for Plone 5.1, to avoid taking precedence over skin layer templates for Archetypes content in Plone 5.0 [davisagli]
Bug fixes:
  • Do not import IFileFactory in interfaces from plone.app.widgets. It is only imported over there. [jensens]

  • Update code to follow Plone styleguide. [gforcada]

  • Documentation: Add dexterity test example using a behavior. [ramiroluz]

  • Add a generic version of the folder_listing view so that the container view can use it even without plone.app.contenttypes (such as in tests using the DEXTERITY_FIXTURE) [davisagli]

  • Replaced secureSend with send in documentation. secureSend has long been deprecated. [maurits]

  • TTW behaviors selection of the name is now bound to the registration, prior it was bound to the interface. But interfaces may be used by more than one registered behavior. [jensens]

plone.app.discussion: 2.4.17 → 2.4.21

New features:
  • Reindex comments when they are modified. [gforcada]
Bug fixes:
  • Remove deprecated of calls on BrowserViews [MrTango]

  • Improve English on a couple of field descriptions [djowett]

  • Fix some easy pep8 issues [djowett]

  • Make comment on private content not publicly available in search results. Part of PloneHotfix20161129. [vangheem, maurits]

  • Apply security hotfix 20160830 for redirects. [maurits]

  • Update Traditional Chinese translation. [l34marr]

plone.app.event: 2.0.10 → 2.0.12

New features:
  • add full danish translation [tmog]
Bug fixes:
  • Fix format of tooltip in calendar portlet. Fixes: https://github.com/plone/Products.CMFPlone/issues/1046 [fgrcon]

  • Update french translations. [bsuttor]

  • Do not index sync_uid, start and end fields if they are empty. [bsuttor]

  • Fix bug when creating indexes on install. It was not detecting existing indexes correctly. [vangheem]

plone.app.folder: 1.2.0 → 1.2.2

Bug fixes:
  • Support ZODB5 [pbauer]

  • Remove unused tests/bbb.py file which is not used by plone.app.folder itself. [gforcada]

plone.app.i18n: 3.0.3 → 3.0.4

Bug fixes:
  • Remove zopetestcase. [ivanteoh, maurits]

  • Add coding header to pyton files. [gforcada]

plone.app.imaging: 2.0.5 → 2.0.6

Bug fixes:
  • Add coding headers on python files. [gforcada]

  • Remove vestigial requirement of plone.app.controlpanel. [davisagli]

plone.app.iterate: 3.2.1 → 3.2.4

Bug fixes:
  • Cleanup: isort, zca decorators, etc. [jensens]

  • Some more cleanup. [gforcada]

  • Add coding header on python files. [gforcada]

  • Hide uninstall profile from being shown on the Plone install (advanced) form. [gforcada]

  • Remove broken references when making checkout. Fixes issue 30 <https://github.com/plone/plone.app.iterate/issues/30>_. [maurits]

plone.app.layout: 2.5.20 → 2.5.23

Bug fixes:
  • Fix error in viewlet when related dexterity item has been deleted. [maurits]

  • Rework sitemap.xml.gz to allow filtering of sitemap elements; and supply such a filter if LinguaPlone is installed. [djowett]

  • Add default icon for top-level contentview toolbar entries [alecm]

plone.app.linkintegrity: 3.0.6 → 3.1

New features:
  • Information about contents within a selected folder for deletion. This information contains number of deleted objects, number of subfolders and number of published objects. [karalics]
Bug fixes:
  • Add coding headers on python files. [gforcada]

  • Remove hard dependency on Archetypes (again). [davisagli]

  • Use transaction savepoints while calling @@updateLinkIntegrityInformation to keep memory usage under control. [ale-rt]

plone.app.locales: 5.0.11 → 5.0.13

  • Update Basque translation.

  • Updated French translations. [gnafou]

  • Add messages and English translations for portlet manager names. [alecm]

  • Updated German Translations. [vincero]

  • Updated Tranditional Chinese translations. [l34marr]

  • Add coding header to python files. [gforcada]

plone.app.portlets: 3.1.3 → 3.1.5

Bug fixes:
  • Apply security hotfix 20160830 for redirects. [maurits]

  • Use absolute source URL in navigation portlet's thumbnails [davilima6]

plone.app.querystring: 1.3.15 → 1.3.17

Bug fixes:
  • Make integer query operators accept unicode values Fixes their usage via QueryStringFieldWidget [lzdych]

  • Import DateTimeError from DateTime.interfaces, class attribute DateTime.DateTimeError was removed in DateTime 3.0 [vincentfretin]

plone.app.redirector: 1.3.2 → 1.3.4

Bug fixes:
  • Don't test repr of tree iterator. [davisagli]

  • Add coding header on python files. [gforcada]

plone.app.registry: 1.3.12 → 1.5

New features:
  • Add support for have and have-not import conditions in registry.xml [datakurre]

  • Add support for optional condition attribute in registry.xml entries to allow conditional importing of records. Conditions themselves are not import (nor exported). [datakurre]

plone.app.testing: 5.0.2 → 5.0.6

New features:
  • Use get_installer instead of portal_quickinstaller when available, for Plone 5.1 and higher. [maurits]

  • In PloneSandboxLayer make profile upgrade versions persistent. This way installed profile versions get reset in teardown. [maurits]

Bug fixes:
  • No longer try to load Products.SecureMailHost and its zcml. This is not shipped with Plone 5.0 or higher. [maurits]

  • Do not use install Products.PasswordResetTool in the PloneFixture if it isn't available. [thet]

  • Load Products.CMFFormController in tests. It is still used by core Plone, also without Archetypes. This makes the CMFFormController tests pass. [maurits]

plone.app.textfield: 1.2.7 → 1.2.8

New features:
  • Enable the RichText field to work together with a simple ITextAreaWidget. [jensens]
Bug fixes:
  • Cleanup: Use more zope.interface decorators, add utf8 headers, isort imports, zcml conditions are enough. [jensens]

plone.app.theming: 1.3.0 → 1.3.5

New features:
  • Add Update -button for theming control panel making it possible to reload modified theme manifest without deactivating theme at first. [datakurre]
Bug fixes:
  • Fix imports from Globals that was removed in Zope4 [pbauer]

  • No longer patch Control Panel internals, as it was removed in Zope4 [MatthewWilkes]

  • reST syntax, styleguide, wording and line length of the docs [svx]

  • Make diazo.debug work again when DIAZO_ALWAYS_CACHE_RULES is set. [ale-rt]

  • Remove roman monkey patch. [gforcada]

  • Enable unload protection by using pattern class pat-formunloadalert instead enableUnloadProtection. [thet]

  • Small fix in documentation [staeff]

  • Fix issue where theming control panel errored when a packaged theme was overidden with a global resource directory theme [datakurre]

plone.app.upgrade: 1.3.27 → 2.0.1

Breaking changes:
  • Remove really old upgrade steps (everything up to v40). [gforcada]
New features:
  • New mockup releases for Plone 5.0 and 5.1. [thet]

  • Remove jquery.cookie from plone-logged-in bundle's stub_js_modules. The toolbar, which has a dependency on jquery.cookie, was moved from the plone bundle to plone-logged-in in CMPlone 5.1a2. [thet]

  • Products.MimetypesRegistry has no longer a skins layer, remove it. [jensens]

  • Add sort_on field to search controlpanel. [rodfersou]

  • Support sites without portal_quickinstaller. We use get_installer in Plone 5.1 migrations. In earlier version we will keep using the portal_quickinstaller, because get_installer is not available. In shared utility and base code, we try to import get_installer, and fall back on the previous implementation. See PLIP 1340 <https://github.com/plone/Products.CMFPlone/issues/1340>_. [maurits]

  • Add new Mockup 2.4.0 relateditems resource url. Add new optional relateditems upload resource. [thet]

  • Update last_compilation to deliver new bundles. [thet]

  • Move PasswordResetTool to CMFPlone. Note: Pending password resets are deleted. [tomgross]

  • Adopt to changes in Zope4 [pbauer]

Bug fixes:
  • Adapt tests to the new indexing operations queueing. Part of PLIP 1343: https://github.com/plone/Products.CMFPlone/issues/1343 [gforcada]

  • Fix registration of upgrade-step to Plone 5.1a1 [pbauer]

  • Remove displayContentsTab from action expressions in 5.1. Fixes https://github.com/plone/Products.CMFPlone/issues/1935. [maurits]

  • Fix move_pw_reset_tool upgrade step [agitator]

  • Install plone.app.caching in 5.0 alpha if available. When it is already installed, upgrade it. [maurits]

  • Install plone.app.theming in 5.0 alpha. When it is already installed, upgrade it. [maurits]

  • Fixed AttributeError use_content_negotiation when migrating old language tool. Not all versions have the same properties available. Now we only take over existing properties. 5.0 beta. [maurits]

  • Fixed ConstraintNotSatisfied when default_editor is not allowed. 5.0 alpha. [maurits]

  • Enabled update from latest 4.3 profile revision. Otherwise we would skip a few upgrade steps when migrating to Plone 5. [maurits]

  • Don't remove sub skin layers when cleaning portal_skins. Created utils.cleanUpSkinsTool method which has generally useful code for cleaning up the skins. Fixes issue 87 <https://github.com/plone/plone.app.upgrade/issues/87>_. [maurits]

  • Install plone.resource in Plone 5.0 alpha 3. Fixes possible TypeError: argument of type 'NoneType' is not iterable when migrating from Plone 4.3 for a site that did not have plone.resource or diazo installed yet. Fixes issue 1756 <https://github.com/plone/Products.CMFPlone/issues/1756>_. [maurits]

  • Be sure smtp_port is an integer. [ale-rt]

  • Fix upgrade step for PasswordResetTool if there was never da different value than the default was set. [jensens]

  • Check whether avoiding exception in RealUpgradeLayer setup avoids polluting test environment. [davisagli]

  • avoid error in layer teardown [davisagli]

plone.app.users: 2.3.7 → 2.3.8

Bug fixes:
  • Give a 404 when the user-information form is called with a not existing userid. [maurits]

  • Don't show unescaped user id in user-information form. This applies PloneHotfix20160830. [maurits]

plone.app.uuid: 1.1.1 → 1.1.3

Bug fixes:
  • Fix test in Zope 4. [davisagli]

  • Update code to follow Plone styleguide. [gforcada]

plone.app.vocabularies: 3.0 → 4.0.1

Breaking changes:
  • Make zope.formlib optional. [gforcada]

  • Mark vocabularies based on zope.formlib as deprecated. [gforcada]

Bug fixes:
  • Fix problem in ParseError fallback introduced in 4.0 [jensens]

  • Adapt code to follow Plone styleguide. [gforcada]

  • Fix in catalog: If ZCTextIndex catches a ParseError, try w/o SearchableText if there is one given. Often Query contains only common words happen (only stop words given) and results are not fetched. Semantically this means that we want all results. [jensens]

plone.app.widgets: 2.0.6 → 2.0.7

Bug fixes:
  • No longer test on Travis. We are tested on jenkins.plone.org, and the Travis setup on master is pretty broken. [maurits]

  • Take more time during robot tests. I hope that this makes a sometimes failing test always pass. [maurits]

plone.app.workflow: 2.2.6 → 2.2.7

Bug fixes:
  • Fixed test failure for LookupError, having extra 'available items' (Zope 4) [davisagli]

plone.app.z3cform: 1.2.1 → 1.2.3

Bug fixes:
  • Fix RelatedItemsDataConverter with relation lists, where in an iteration a wrong value was checked to be existent. Fixes failures in situations, where a None value was part of the relation list. [thet]

  • In select widget, accept items as property or method. This avoids breaking on some z3c.form versions. See https://github.com/zopefoundation/z3c.form/issues/44 [maurits]

plone.api: 1.5 → 1.6

New features:
  • Passing inherit=False to groups.get_roles() will only get local roles for the group. [pbauer]

  • api.portal.get_registry_record supports an optional default parameter [ale-rt]

Bug fixes:
  • Support user.get_roles for anonymous users. Refs #339 [jaroel]

  • Fix imports from Globals that was removed in Zope4 [pbauer]

  • Fix 'bad' quotes. [adamcheasley]

  • Typo in the documentation. [ale-rt]

  • Fix error in tests that try to add built-in roles, which no longer fails silently in Zope4. [MatthewWilkes]

  • Do not reassign global roles as local roles when using group.grant_roles() [pbauer]

  • reST syntax in documentation, follow style-guide, adjust setup.py [svx]

  • Do not reassign dynamic roles as local roles when using group.grant_roles(). [pbauer]

  • Fix translation related tests to use the plonelocales domain instead passwordresettool. Products.PasswordResetTool was removed in Plone 5.1. [thet]

  • Allow plone.api.group.get_groups for Anonymous user. Refs #290 [jaroel]

  • Allow adopting to a Special User. Fixes #320 - checking permissions for Anonymous User. [jaroel]

  • Fix an AttributeError in api.user.revoke_roles [ale-rt]

  • Remove print statements and use @security decorators to make code-analysis happy. [ale-rt]

  • Typo in the documentation. [ale-rt]

  • Fix travis and coveralls. [gforcada]

  • Various wording tweaks [tkimnguyen]

  • In api.content.move if source and target are specified and target is already source parent, skip the operation.

  • Fix test [gforcada]

  • Fix PRINTINGMAILHOST_ENABLED evaluation to respect Products.PrintingMailHost internal logic [ale-rt]

plone.alterego: 1.0.1 → 1.1.1

New features:
  • Add compatibility with Python 3. [datakurre]
Bug fixes:
  • Update code to follow Plone styleguide. [gforcada]

plone.behavior: 1.1.2 → 1.1.4

New features:
  • Support Python 3. [davisagli]
Bug fixes:
  • Add already introduced attribute name to interface IBehavior. This was missing. Also modernized other IBehavior interface descriptions a bit. [jensens]

plone.browserlayer: 2.1.6 → 2.2.0

Bug fixes:
  • Fixed test when using Zope 4. [maurits]

  • Removed ZopeTestCase. We were importing from it but not using it... [ivanteoh, maurits]

plone.cachepurging: 1.0.12 → 1.0.13

Bug fixes:
  • Code-Style: isort, utf8-headers, zca-decorators, manual cleanup. [jensens]

plone.caching: 1.1.1 → 1.1.2

Bug fixes:
  • Cleanup: isort, readability, pep8, utf8-headers. [jensens]

plone.dexterity: 2.4.3 → 2.4.5

New features:
  • Removed test dependency on plone.mocktestcase [davisagli]
Bug fixes:
  • Fix error when copying DX containers with AT children which caused the children to not have the UID updated properly. [jone]

plone.event: 1.3.1 → 1.3.3

New features:
  • Support Python 3. [davisagli]
Bug fixes:
  • Update code to follow Plone styleguide. [gforcada]

plone.formwidget.querystring: 1.1.7 → 1.1.8

Bug fixes:
  • Prevent ASCII error for encode/decode in utf8 into converter. [bsuttor]

plone.i18n: 3.0.5 → 3.0.6

Bug fixes:
  • Code Cleanup: isort, pep8, manual cleanup [jensens]

plone.locking: 2.1.2 → 2.1.3

New features:
  • Update README.rst with Compatibility [djowett]

plone.namedfile: 3.0.9 → 3.0.10

New features:
  • Add Pdata storage [vangheem]

plone.outputfilters: 2.1.5 → 3.0.1

Breaking changes:
  • Give up support of PortalTransforms 1.x with old style interfaces. [jensens]
Bug fixes:
  • Do not transform a and img tags when inside script tag. [gotcha]

  • Handle unicode errors in img attributes [vangheem]

  • Cleanup: utf8-headers, isort, pep8 [jensens]

  • Use zope.interface decorator. [gforcada]

plone.portlet.static: 3.0.2 → 3.1

New features:
  • Attempt to use AutoExtensibleForm for as base for static portlet forms when Plone 4 site also has recent plone.app.widgets; this should be consistent in portlet with how TinyMCE is configured for Dexterity content. This approach attempts to harmonize Plone 4 compatibillity work done previously by @thet and @cdw9 -- supporting Plone 4, either with/without plone.app.widgets, and with/without plone.app.contenttypes (provided recent plone.app.widgets is used). [seanupton]

plone.protect: 3.0.19 → 3.0.23

Bug fixes:
  • Allow confirm-action for all contexts, instead of only Plone Site root. This avoids an error when calling it on a subsite. Fixes issue #51 <https://github.com/plone/plone.protect/issues/51>_. [maurits]

  • Code Style: utf8-headers, import sorting, new style namespace declaration, autopep8 [jensens]

  • Fix #57: Html must contain "body", otherwise plone.protect breaks. [jensens]

  • avoid zope.globalrequest.getRequest() [tschorr]

  • Avoid regenerating image scale over and over in Plone 4. Avoid (unnoticed) error when refreshing lock in Plone 4, plus a few other cases that were handled by plone4.csrffixes. Fixes https://github.com/plone/plone.protect/issues/47 [maurits]

  • Only try the confirm view for urls that are in the portal. This applies PloneHotfix20160830. [maurits]

  • Removed RedirectTo patch. The patch has been merged to Products.CMFFormController 3.0.7 (Plone 4.3 and 5.0) and 3.1.2 (Plone 5.1). Note that we are not requiring those versions in our setup.py, because the code in this package no longer needs it. [maurits]

plone.registry: 1.0.4 → 1.0.5

Bug fixes:
  • Fix endless recursion on getting values from broken records proxy objects This fixes https://github.com/plone/plone.registry/issues/13. [tomgross, maurits]

plone.resource: 1.0.6 → 1.2.1

New features:
  • Fire events on resources creation/modification [jpgimenez, ebrehault]

  • Use mimetypes_registry utility to dertermine mimetype if available. [jensens]

Bug fixes:
  • 'unittest2' is a test dependency, make this explicit in setup.py. [jensens]

  • Remove duplicte import [jensens]

  • Add coding headers on python files. [gforcada]

  • Applied 20160830 security hotfix. [maurits]

plone.scale: 1.4.1 → 1.4.2

Bug fixes:
  • When getting an outdated scale, don't throw it away when there is no factory. [maurits]

  • Avoid TypeErrors when looking for outdated scales. Fixes issue 12 <https://github.com/plone/plone.scale/issues/12>_. [maurits]

  • Catch KeyError when deleting non existing scale. This can happen in corner cases. Fixes issue 15 <https://github.com/plone/plone.scale/issues/15>_. [maurits]

  • Set zip_safe=False in setup.py. Otherwise you cannot run the tests of the released package because the test runner does not find any tests in the egg file. Note that this is only a problem in zc.buildout 1.x: it uses unzip=False by default. zc.buildout 2.x no longer has this option and always unzips eggs. [maurits]

plone.schemaeditor: 2.0.11 → 2.0.15

Bug fixes:
  • Cleaner implementation of bypassing required check for setting default values, which actually works [tomgross]

  • Use test browser from plone.testing for compatibility with Zope 4 [davisagli]

  • Fix POST AJAX-URL for reordering fields [tomgross]

  • Import test browser from Testing.testbrowser instead of Products.Five.testbrowser [davisagli]

  • Fix test setup for Zope 4. [davisagli]

  • Use parent instead of aq_parent. [davisagli]

  • Test-Fix: Support latest zope.i18nmessageid. [jensens]

  • Add coding headers on python files. [gforcada]

  • Update code follow Plone styleguide. [gforcada]

plone.session: 3.6.0 → 3.6.1

Bug fixes:
  • Hide uninstall profile in install listings. [jensens]

plone.stringinterp: 1.1.4 → 1.2.1

New features:
  • Removed ZopeTestCase. [maurits]

  • Provide a ContextWrapper adapter in order to easily pass custom messages to StringInterpoator [avoinea]

plone.subrequest: 1.7.0 → 1.8

New features:
  • Provide an exception-handler for rewriting Unauthorized to 401's. [jensens]

plone.supermodel: 1.3.0 → 1.3.2

Bug fixes:
  • Fix issue where supermodel XML choice field parser failed to parse vocabulary values with separate keys and display titles, because the parser expected values tag to not have any namespace. [datakurre]

  • Test-Fix: Support latest zope.i18nmessageid. [jensens]

plone.synchronize: 1.0.1 → 1.0.2

New features:
  • Test Python 3 compatibility. [datakurre]

plone.theme: 3.0.0 → 3.0.2

Bug fixes:
  • Fixed test when using Zope 4. [maurits]

  • Remove ZopeTestCase traces. [gforcada]

plonetheme.barceloneta: 1.6.21 → 1.6.23

New features:
  • Add default content type icon to add menu only. Add missing npm dependency. [alecm]
Bug fixes:
  • Fix weird nav scrollbars on mobile [agitator]

  • Unset select width and display [agitator]

  • Isolate the autotabs class for ul elements to .autotabs ul.autotoc-nav. Fixes an issue, where list elements in an inline TinyMCE content area were displayed wrong. [thet]

  • Fix buttons alignment in ordered selection widget [ale-rt]

z3c.form: 3.2.9 → 3.2.11

  • Fix TypeError: object of type 'generator' has no len(). Happens with z3c.formwidget.query. [maurits]

  • Turned items into a property again on all widgets. For the select widget it was a method since 2.9.0. For the radio and checkbox widgets it was a method since 3.2.10. For orderedselect and multi it was always a property. Fixes https://github.com/zopefoundation/z3c.form/issues/44 [maurits]

  • Removed z3c.coverage from test extra. [gforcada, maurits]

  • RadioWidget items are better determined when they are needed [agroszer]

  • CheckBoxWidget items are better determined when they are needed [agroszer]

  • Bugfix: The ChoiceTerms adapter blindly assumed that the passed in field is unbound, which is not necessarily the case in interesting ObjectWidget scenarios. Not it checks for a non-None field context first. [srichter]

five.intid: 1.1.1 → 1.1.2

Bug fixes:
  • Prevent errors on removeIntIdSubscriber when the IKeyReference adapter raises a NotYet, e.g. because the object does not have a proper path. [ale-rt]

plone.app.lockingbehavior: 1.0.4 → 1.0.5

Bug fixes:
  • Unskip test for Zope 4, as isolation problems are already fixed. [thet]

plone.app.referenceablebehavior: 0.7.5 → 0.7.7

Bug fixes:
  • Do not load plone.app.referenceablebehavior.testing on package registration as it adds a broken dependency to plone.app.testing. [hvelarde]

  • Make tests pass with ZCatalog 4 [pbauer]

  • Add coding header on python files. [gforcada]

plone.app.relationfield: 1.3.3 → 1.3.4

New features:
  • Support RelatedValues UUID lookup to validate with p.a.vocabularies [calvinhp]

plone.app.versioningbehavior: 1.2.9 → 1.3

New features:
  • Add shortname plone.versioning for behavior. [jensens]
Bug fixes:
  • Do not break in the case of dexterity objects with relations migrated from something else (usually Archetypes). [ale-rt]

plone.formwidget.autocomplete: 1.2.10 → 1.2.11

Bug fixes:
  • Better handling of undefined data [agitator]

plone.app.multilingual: 4.0.3 → 5.0.3

Breaking changes:
  • Support for Archetypes content is only installed if you install `archetypes.multilingual. For Archetypes support, there is a new archetypes extras_require, which you can depend upon. [davisagli]
New features:
  • Show Translate menu in INavigationRoot items and hide in ILanguageRootFolders [erral]

  • Replaced add_translations and remove_translations with combined modify_translations. Modify translations page gives you an overview of existing translations and has actions to connect, disconnect existing translations, as well as actions to create or delete a translation for you content item. [agitator]

  • Moved stylesheet from legacy bundle to logged-in bundle [agitator]

Bug fixes:
  • Remove deprecated of calls on BrowserViews [MrTango]

  • Add new tests for sitemap.xml.gz (it is currently not listing any content) [djowett]

  • Allow to work in an Archtypes free Plone 5.1. [jensens]

  • Made robot tests more robust, I hope. Before using 'Wait until element is visible', first call 'Wait until page contains element'. The first one only works reliably when the element was already on the page initially. If the element was created dynamically, you need to use the 'page contains' call first, otherwise you sometimes get an error: 'Element not found in the cache - perhaps the page has changed since it was looked up.' [maurits]

  • Change RelatedItemsFieldWidget configuration from @@add_translations view to support Mockup 2.4.0, so that the widget is able to navigate beyond the INavigationRoot boundary and to access other translation trees. This change keeps compatibility with older versions of Mockup or Mockup-less setups. [thet]

archetypes.multilingual: 3.0.3 → 3.0.4

Bug fixes:
  • Better, narrative name in GS profile [jensens]

plone.tiles: 1.6 → 1.8.2

New features:
  • Provide ignore_querystring form directive to mark particular tiles fields that are not allowed to default data from query string data [vangheem]

  • Option to customize storage layer with ITileDataStorage adapter [datakurre]

Bug fixes:
  • Fix issue where transient tile was unable to encode data with list of unicode strings [datakurre]

  • Remove unused unittest2 requirement [tomgross]

  • Reformat docs. [gforcada]

  • Add coveralls shield. [gforcada]

  • Fix encode error in nested unicodes (like in plone.app.querystring) [tomgross]

  • Restructure testing [tomgross]

  • Fix issue where collective.cover was broken, because internal changes in default data managers [datakurre]

Project resources

Learn about Plone