Remove reference to plaintext author username field in Snapshot's from_username method
Fix convert_encrypted_field for nested field attributes
bump Pillow 12.1.1 -> 12.2.0
bump pytest 9.0.2 -> 9.0.3
support nested encrypted field migration paths
Support nested encrypted field migration paths
bump cryptography 46.0.6 -> 46.0.7
show domain on external links, if misleading
[#8599] detect potentially misleading links and show the destination domain afterwards
[#8599] detect potentially misleading links and show the destination domain afterwards
show domain on external links, if misleading
db/8599 images that are links are not handled on this ticket. Should we do something about it in a next ticket? There could be images that look like text. But it could be annoying to show a domain after every image link (especially a row of badges) another overall consideration instead of appending (evil.com) or in addition to that, we could have a popup when clicking on it to confirm you're ok going to the site. Seems like more work than is worth it
Escape specific values in notification emails
bump pygments 2.19.2 -> 2.20.0
bump cryptography 46.0.5 -> 46.0.6
show domain on external links, if misleading
Encrypt snapshot author nested fields
Support nested encrypted field migration paths
restore original code in _verify_return_to
additional tests added to catch redirection attacks
bump requests 2.32.5 -> 2.33.0
[#8596] test updates
[#8596] add test for email notification that send markdown content
fixup! fixup! [#8596] add test for email notification that send markdown content
fixup! [#8596] add test for email notification that send markdown content
[#8596] add test for email notification that send markdown content
[#8596] escape markdown and also html in notification email templates
fixup! [#8596] add test for email notification that send markdown content
fixup CHANGES note on underscore library upgrade
Upgrade Underscore Library
merged
Pass more context to the project_deleted event
[#8598] Upgrade underscore from 1.13.6 -> 1.13.8
Upgrade Underscore Library
[#8596] add test for email notification that send markdown content
dependency-check upgrade joserfc 1.6.1 -> 1.6.3
improve bad markdown performance
merged
[#8597] minor cleanup
[#8597] remove empty class=""
[#8597] Fix perf by using markdown's own regexes and inheriting from existing InlineProcessors
[#8597] add a test for link references (pure markdown feature, not related to our artifact references)
[#8597] improve a test, add a failing test that check perf
bump werkzeug 3.1.5 -> 3.1.6
[#8597] minor cleanup
[#8597] remove empty class=""
[#8597] Fix perf by using markdown's own regexes and inheriting from existing InlineProcessors
[#8597] add a test for link references (pure markdown feature, not related to our artifact references)
[#8597] improve a test, add a failing test that check perf
improve bad markdown performance
allura:db/8597 Switch to the more incremental approach that the Markdown library uses, using its regexes (much simpler now) and inheriting from its classes which do any extra work needed. We just override some parts to modify how [..] and [..](..) behave after markdown has done the parsing. Based largely on the original Markdown work here: https://github.com/Python-Markdown/markdown/commit/d18c3d0acab0e7469c3284c897afcb61f9dd1fea?w=0#diff-9edb00b2a79237066818ddca29f224fa7d91bf28ee9b33255b0f00ce2a99d489...
Redact emails in logs
Looks good! Nice tests. Merged.
[#8595] added tests and fixed hide_email function
[#8595] add new function to hide/redact email addresses and also shorten the acces tokens that appear printed in the logs
improve bad markdown performance
[#8595] added tests and fixed hide_email function
if MR is calculating commits, avoid saying "0 commits"
update config notes and pytest.ini for new forgehg version
remove unneeded warning ignore
strengthen /nf/markdown_syntax test, also avoid errors showing up on that page in dev mode
updated Markdown syntax guide with a new example to make use of text rendering and updated the exmaple for lists
remove solr.use_new_types setting and always do the new mode
[#4321] s/labels_t/labels_ws/g per https://forge-allura.apache.org/p/allura/tickets/4321/#02d5
[#8596] escape markdown and also html in notification email templates
Escape specific values in notification emails
if MR is calculating commits, avoid saying "0 commits"
bump pillow 12.1.0 -> 12.1.1
Added install_anchored_tools to all_configs
bump cryptography 46.0.4 -> 46.0.5
update config notes and pytest.ini for new forgehg version
remove unneeded warning ignore
Python Packages Upgrades
specify setuptools version since v82 does not work with allura currently
[#8594] adding one ruff rule to the ignore list
[#8594] replaced wrapt.formatargspec with inspect.signature since it was removed from wrapt on the latest version
[#8594] ran pre-commit autoupdate and added new format flag for giticket
[#8594] Upgrade gunicorn 23.0.0 -> 25.0.0, and its deps: packaging
[#8594] Upgrade wrapt 1.17.3 -> 2.1.0
[#8594] Upgrade boto3 1.40.51 -> 1.42.39, and its deps: botocore,jmespath,python-dateutil,six,urllib3,jmespath,s3transfer,botocore,jmespath,python-dateutil,six,urllib3
[#8594] Upgrade pre_commit 4.3.0 -> 4.5.1, and its deps: cfgv,identify,nodeenv,PyYAML,virtualenv,distlib,filelock,platformdirs
[#8594] Upgrade gunicorn 23.0.0 -> 24.1.1, and its deps: packaging
[#8594] Upgrade pytest-sugar 1.1.1 -> no upgrade, and its deps: pytest,iniconfig,packaging,pluggy,Pygments,termcolor
[#8594] Upgrade pytest-xdist 3.8.0 -> no upgrade, and its deps: execnet,pytest,iniconfig,packaging,pluggy,Pygments
[#8594] Upgrade pytest 8.4.2 -> 9.0.2, and its deps: iniconfig,packaging,pluggy,Pygments
[#8594] Upgrade testfixtures 9.2.0 -> 10.0.0
[#8594] Upgrade ruff 0.14.0 -> 0.14.14
[#8594] Upgrade wrapt 1.17.3 -> 2.0.1
[#8594] Upgrade pysolr 3.10.0 -> 3.11.0, and its deps: requests,certifi,charset-normalizer,idna,urllib3,setuptools
[#8594] Upgrade Pypeline 0.7.0 -> no upgrade, and its deps: bleach,webencodings,html5lib,six,webencodings,textile,nh3,regex,docutils
[#8594] Upgrade pyasynchat 1.0.4 -> 1.0.5, and its deps: pyasyncore
[#8594] Upgrade pillow 11.3.0 -> 12.1.0
[#8594] Upgrade GitPython 3.1.45 -> 3.1.46, and its deps: gitdb,smmap
[#8594] Upgrade defopt 7.0.0 -> no upgrade, and its deps: docutils,sphinxcontrib-napoleon,pockets,six,six
[#8594] Upgrade beaker-session-jwt 1.0.4 -> no upgrade, and its deps: Beaker,joserfc,cryptography,cffi,pycparser,pymongo,dnspython
[#8594] Upgrade beautifulsoup4 4.14.2 -> 4.14.3, and its deps: soupsieve,typing_extensions
[#8594] Upgrade aiosmtpd 1.4.6 -> no upgrade, and its deps: atpublic,attrs
[#8594] Upgrade ActivityStream 0.5.1 -> no upgrade, and its deps: pymongo,dnspython
updated Markdown syntax guide with a new example to make use of text rendering and updated the exmaple for lists
[#8595] add new function to hide/redact email addresses and also shorten the acces tokens that appear printed in the logs