[#8567] Upgrade pre-commit 3.7.0 -> 3.7.1, and its deps: cfgv,identify,nodeenv,setuptools,PyYAML,virtualenv,distlib,filelock,platformdirs
[#8567] Upgrade pytest-xdist 3.5.0 -> 3.6.1, and its deps: execnet,pytest,iniconfig,packaging,pluggy
[#8567] Upgrade pytest 8.1.1 -> 8.3.1 (OUTDATED! latest is: 8.2.2), and its deps: iniconfig,packaging,pluggy
[#8567] Upgrade testfixtures 8.1.0 -> 8.3.0
[#8567] Upgrade ruff 0.3.7 -> 0.5.4 (OUTDATED! latest is: 0.5.3)
[#8567] Upgrade Pypeline 0.6.1 -> no upgrade, and its deps: bleach,six,webencodings,html5lib,six,webencodings,Creoleparser,Genshi,six,six,Markdown,textile,html5lib,six,webencodings,regex,docutils
[#8567] Upgrade Pygments 2.17.2 -> 2.18.0
[#8567] Upgrade pillow 10.3.0 -> 10.4.0
[#8567] Upgrade PasteScript 3.5.1 -> 3.6.0, and its deps: Paste,setuptools,PasteDeploy,setuptools
[#8567] Upgrade emoji 2.11.0 -> 2.12.1
[#8567] Upgrade EasyWidgets 0.4.1 -> 0.4.2, and its deps: FormEncode,MarkupSafe,Paste,setuptools,python-dateutil,six,six,WebOb
[#8567] Upgrade ActivityStream 0.4.2 -> no upgrade, and its deps: pymongo
fixup! fix import for pymongo4
Upgrade Python packages
[#8565] fix a bad usage of update_partial
fix import for pymongo4
support newer pwd hashs, remove deprecated 'crypt' AUTH PLUGIN CHANGES
allura:db/8566 QA: After switching to this branch, you should be able to log in as a user, and then see that the password automatically got re-hashed with the new preferred algorithm. There are breaking AuthenticationProvider plugin changes, for any custom Auth implementations: set_password takes a set_timestamp=True which should be checked before setting user.last_password_updated rename def validate_password to def _validate_password since the base class implements a high-level validate_password...
[#9485] Disable OAuth2 authorize button and change its text value on click
Disable OAuth2 authorize button and change its text value on click
bump certifi 2024.2.2 -> 2024.7.4
support per-page csp_frame_domains modifier
don't check some limits, for user's own profile project creations
don't check some limits, for user's own profile project creations
Disable OAuth2 authorize button and change its text value on click
fixup! update ming calls from find_and_modify to find_one_and_update
fixup! replace uses of Collection.count() with Collection.estimated_document_count()
drop pymongo/ming method
When we get everything updated, we can remove the ming & pymongo lines in pytest.ini that make it ignore deprecation warnings.
support newer pwd hashs, remove deprecated 'crypt'
support per-page csp_frame_domains modifier
running with threads is good, for our prod example
Allura/allura/lib/custom_middleware.py remove the 'group' method wrapping instead of .estimated_document_count() what do you think about .count({})? It seems like estimated_document_count should be reliable in nearly all cases, but I don't like the name, it makes it seem unreliable. And its long. find_and_modify had new=True, but find_one_and_update doesn’t have that kwarg, it has a upsert kwarg instead. Looking pretty good, just reviewing the code. Haven't actually tried running it
bump requests 2.32.1 -> 2.32.3
bump cryptography 42.0.5 -> 42.0.8
replace uses of Collection.count() with Collection.estimated_document_count()
I have completed this prep on branch dw/8565 However, these updates were made in concert with pre-release Ming changes. We shouldn't merge this branch until a new version of Ming has been published that includes its own API migration prep.
add additional logging of concurrency values in run_tests
pymongo - use drop instead of remove in some places
use pymongo's create_index rather than ensure_index
remove ming/pymongo map_reduce and inline_map_reduce. no longer provided by mongo
replace deprecated ming/mongo collection_names() with list_collection_names()
replace deprecated ming/mongo database_names() with list_database_names()
update ming calls from find_and_modify to find_one_and_update
Prepare for Upgrade to Pymongo 4
Prepare for Upgrade to Pymongo 4
Home
fix typo
announce 1.17.1
publicize security fix in changelog
deprecate and remove has_access(..)() syntax
make scripts/add_user_to_group.py work without a --replaces-users value
make scripts/add_user_to_group.py work without a --replaces-users value
[Feature Request] Easier Merge Request Creation
bump urllib3 2.2.1 -> 2.2.2
CHANGES updated for ASF release 1.17.1
improve url checks
fix jenkins link; remove IRC link
publish 1.17.0 with security notice
[#8556] remove TruthyCallable, has_access() now returns a normal bool
deprecate and remove has_access(..)() syntax
Looks good. Merged
remove #allura irc mentions
[#8556] remove TruthyCallable, has_access() now returns a normal bool
Somehow db/8556-breaking-removal didn't have any changes in it. I re-created the changes at db/8556-breaking-removal-2 and have run all the tests. Its ready to be merged
delete unused jinja file with invalid syntax
replace tabs with spaces in jinja html files
add jinja linter to pre-commit
publicize security fix in CHANGES file
Home
CHANGES updated for ASF release 1.17.0
remove deprecated version line from docker-compose.yml
Update copyright year
use urlopen in blog external rss feed processing
rename class
prevent dns rebinding
update tests
Support for OAuth 2.0 - NEEDS INDEX
done with several merge requests from Carlos Cruz and myself
final (hopefully) improvements to oauth2
final (hopefully) improvements to oauth2
Java Runtime Error with XWPFDocument.getParagraphs() poi-ooxml-5.2.5.jar
This is the Apache Allura project, not the Apache POI project. See https://poi.apache.org/
Java Runtime Error with XWPFDocument.getParagraphs() poi-ooxml-5.2.5.jar
Generate custom bearer tokens and other fixes
Uh oh our indexes are having an issue with multiple bearer tokens now. If I try to generate a 2nd bearer token for myself I get an error: E11000 duplicate key error collection: pyforge.oauth2_access_token index: refresh_token_1 dup key: { refresh_token: null } Would it be ok to ignore null refresh_tokens? Probably? If so, then we could move that index to be like this I believe: custom_indexes = [ dict(fields=('refresh_token',), sparse=True, unique=True), ]