start a SECURITY.md
increase ulimits on docker web to avoid "Too many open files" during test runs at least
Fix: Force push tests
[#11714] more Permissions-Policy values drop Feature-policy
turn on scm.force_push.git.enabled by default
[#8622] Rework search result filtering
CWE-200 and CWE-862
[#8622] Rework search result filtering
CWE-200 and CWE-862
[#12049] Fix for sync repo config command
drop other urllib handlers
change lgtm
Fix git rename handling
changes look good and tests pass
html sanitization fixes, drop inline SVG tag support
changes look good and tests pass
[#8621] drop ftp/file/data url handlers
[#8620] fix space handling in renamed files
html sanitization fixes, drop inline SVG tag support
[#8619] invalidate markdown caches
[#8619] fix text_contains_hostname substring bypass
[#8619] sanitize class/id on void elements too
[#8619] drop allowed iframe's body
[#8619] block SVG entirely, keep MathML
[#8619] iframe tracking better
[#8621] drop ftp/file/data url handlers
[#8620] fix space handling in renamed files
drop other urllib handlers
Fix git rename handling
html sanitization fixes
fix git thread-safety issues
fix git thread-safety issues
Add mongodb option for the jinja bytecode cache
[#8617] Implement field level encryption for tool data fields
[#12049] Fix for sync repo config command
Prevent re-tracking revoked sessions
generate html
version 1.20.0
fix typos
publicize security fix
Align REST checks/queries with web controllers
Home
Prevent re-tracking revoked sessions
Fix for CHANGES version
Added migrations instructions to changes, plus some fixes
New script to backfill allow forcepush flag
Fix for force push on new repos
Added scm.force_push.git.enabled flag
Force push enable of repos
fixup! Add mongodb option for the jinja bytecode cache
[#8617] Update User's set_tool_data to store encrypted tool data values
[#6054] Simplify trusted MX header verification
[#6054] Verify inbound senders with trusted MX header
[#6054] Simplify inbound sender authentication parsing
Implement field level encryption for User tool data fields
Added migrations instructions to changes, plus some fixes
Add mongodb option for the jinja bytecode cache
CHANGES updated for ASF release 1.20.0
Align REST checks/queries with web controllers
[#8616] align RestController lookups & checks with web controllers
New script to backfill allow forcepush flag
Fix for force push on new repos
[#8614] Implement field level encryption for User and UserLoginDetails fields
Implement field level encryption for more user fields
[#8616] align RestController lookups & checks with web controllers
Align REST checks/queries with web controllers
SF-11610 POC of memcached dependency replacement
do github rate-limit logic on 429 status codes too
fixup! [#8614] Implement field level encryption for User and UserLoginDetails fields
[#8614] Implement field level encryption for User and UserLoginDetails fields
[#8614] Decrypt social networks returned by the profile rest api
[#8614] Add support for nested lists and tests to the field conversion script
[#8614] Add backing encrypted fields for User and UserLoginDetails fields
link CVEs into release page
[#11714] more Permissions-Policy values drop Feature-policy
bump gitpython 3.1.57 -> 3.1.59
Added scm.force_push.git.enabled flag
Force push enable of repos
[#6687] change most feed links to Atom version instead of RSS, since Atom is less weird
[#6687] mark rss <guid> as not a link
Odd guid on RSS feeds
We're now using isPermaLink and changing default links to go to .atom urls so people find Atom feeds rather than RSS feeds going forward. Not changing guid values to avoid any breakages
upgrade ming
Upgrade packages
bumping cryptography 49.0.0 -> 50.0.0
SF-11578 Reject untracked Allura sessions
[#8615] update .pre-commit-config.yaml versions
[#8615] Upgrade boto3 1.42.89 -> 1.43.52, and its deps: botocore,s3transfer
[#8615] Upgrade pre_commit 4.5.1 -> 4.6.0, and its deps: distlib,python-discovery,virtualenv,filelock,platformdirs,identify
[#8615] Upgrade gunicorn 25.3.0 -> 26.0.0, and its deps: packaging
[#8615] Upgrade pytest 9.0.3 -> 9.1.1, and its deps: packaging
[#8615] Upgrade ruff 0.15.10 -> 0.15.22
[#8615] Upgrade wrapt 2.1.2 -> 2.2.2
[#8615] Upgrade TurboGears2 2.5.0 -> no upgrade, and its deps: repoze.lru
[#8615] Upgrade pysolr 3.11.0 -> no upgrade, and its deps: charset-normalizer,requests,idna,certifi
[#8615] Upgrade Pypeline 0.7.0 -> no upgrade, and its deps: nh3,Genshi,docutils,textile,regex
[#8615] Upgrade Ming 0.17.1 -> no upgrade, and its deps: pymongo,pytz
[#8615] Upgrade lxml 6.1.0 -> 6.1.1
[#8615] Upgrade idna 3.15 -> 3.18
[#8615] Upgrade faust-cchardet 2.1.19 -> 2.2.1