radicale/NEWS.md

340 lines
9.8 KiB
Markdown
Raw Normal View History

2017-06-21 09:48:55 +02:00
News
====
2011-09-27 07:54:26 +02:00
2017-08-04 14:59:03 +02:00
2.1.4 - Wild Radish
-------------------
This feature is not compatible with the 1.x.x versions. See
http://radicale.org/1to2/ if you want to switch from 1.x.x to
2.x.x.
* Fix incorrect time range matching and calculation for some edge-cases with
rescheduled recurrences
* Fix owner property
2017-08-01 17:18:13 +02:00
2.1.3 - Wild Radish
-------------------
This feature is not compatible with the 1.x.x versions. See
http://radicale.org/1to2/ if you want to switch from 1.x.x to
2.x.x.
* Enable timeout for SSL handshakes and move them out of the main thread
* Create cache entries during upload of items
* Stop built-in server on Windows when Ctrl+C is pressed
* Prevent slow down when multiple requests hit a collection during cache warm-up
2017-07-24 04:22:57 +02:00
2.1.2 - Wild Radish
-------------------
This feature is not compatible with the 1.x.x versions. See
http://radicale.org/1to2/ if you want to switch from 1.x.x to
2.x.x.
* Remove workarounds for bugs in VObject < 0.9.5
* Error checking of collection tags and associated components
* Improve error checking of uploaded collections and components
* Don't delete empty collection properties implicitly
* Improve logging of VObject serialization
2017-07-01 00:12:04 +02:00
2.1.1 - Wild Radish Again
-------------------
This release is compatible with version 2.0.0.
* Add missing UIDs instead of failing
2017-07-01 04:26:17 +02:00
* Improve error checking of calendar and address book objects
2017-07-01 00:12:04 +02:00
* Fix upload of whole address books
2017-06-25 09:55:39 +02:00
2.1.0 - Wild Radish
-------------------
2017-06-17 01:45:53 +02:00
This release is compatible with version 2.0.0.
* Built-in web interface for creating and managing address books and calendars
* can be extended with web plugins
* Much faster storage backend
* Significant reduction in memory usage
* Improved logging
* Include paths (of invalid items / requests) in log messages
* Include configuration values causing problems in log messages
* Log warning message for invalid requests by clients
* Log error message for invalid files in the storage backend
* No stack traces unless debugging is enabled
* Time range filter also regards overwritten recurrences
* Items that couldn't be filtered because of bugs in VObject are always
returned (and a warning message is logged)
* Basic error checking of configuration files
* File system locking isn't disabled implicitly anymore, instead a new
configuration option gets introduced
* The permissions of the lock file are not changed anymore
* Support for sync-token
* Support for client-side SSL certificates
* Rights plugins can decide if access to an item is granted explicitly
* Respond with 403 instead of 404 for principal collections of non-existing
2017-06-18 15:34:18 +02:00
users when ``owner_only`` plugin is used (information leakage)
2017-06-21 09:49:01 +02:00
* Authentication plugins can provide the login and password from the
environment
* new ``remote_user`` plugin, that gets the login from the ``REMOTE_USER``
2017-06-18 15:35:52 +02:00
environment variable (for WSGI server)
2017-06-21 09:49:01 +02:00
* new ``http_x_remote_user`` plugin, that gets the login from the
2017-06-18 15:35:52 +02:00
``X-Remote-User`` HTTP header (for reverse proxies)
2017-06-17 01:45:53 +02:00
2017-04-15 15:51:05 +02:00
2.0.0 - Little Big Radish
2017-06-21 09:48:55 +02:00
-------------------------
2017-04-15 15:51:05 +02:00
This feature is not compatible with the 1.x.x versions. See
2017-05-27 18:10:46 +02:00
http://radicale.org/1to2/ if you want to switch from 1.x.x to
2017-04-15 15:51:05 +02:00
2.0.0.
* Support Python 3.3+ only, Python 2 is not supported anymore
* Keep only one simple filesystem-based storage system
* Remove built-in Git support
* Remove built-in authentication modules
* Keep the WSGI interface, use Python HTTP server by default
* Use a real iCal parser, rely on the "vobject" external module
* Add a solid calendar discovery
* Respect the difference between "files" and "folders", don't rely on slashes
* Remove the calendar creation with GET requests
* Be stateless
* Use a file locker
* Add threading
* Get atomic writes
* Support new filters
* Support read-only permissions
* Allow External plugins for authentication, rights management, storage and
version control
2017-06-25 09:55:41 +02:00
1.1.4 - Fifth Law of Nature
---------------------------
* Use ``shutil.move`` for ``--export-storage``
2017-05-27 11:15:57 +02:00
1.1.3 - Fourth Law of Nature
2017-06-21 09:48:55 +02:00
----------------------------
2017-05-27 11:15:57 +02:00
* Add a ``--export-storage=FOLDER`` command-line argument (by Unrud, see #606)
2017-04-19 14:04:09 +02:00
1.1.2 - Third Law of Nature
2017-06-21 09:48:55 +02:00
---------------------------
2017-04-19 14:04:09 +02:00
* **Security fix**: Add a random timer to avoid timing oracles and simple
bruteforce attacks when using the htpasswd authentication method.
* Various minor fixes.
2016-01-07 23:31:19 +01:00
1.1.1 - Second Law of Nature
2017-06-21 09:48:55 +02:00
----------------------------
2016-01-07 23:31:19 +01:00
* Fix the owner_write rights rule
2015-12-31 12:51:23 +01:00
1.1 - Law of Nature
2017-06-21 09:48:55 +02:00
-------------------
2015-12-31 12:51:23 +01:00
One feature in this release is **not backward compatible**:
* Use the first matching section for rights (inspired from daald)
Now, the first section matching the path and current user in your custom rights
file is used. In the previous versions, the most permissive rights of all the
matching sections were applied. This new behaviour gives a simple way to make
specific rules at the top of the file independant from the generic ones.
Many **improvements in this release are related to security**, you should
upgrade Radicale as soon as possible:
* Improve the regex used for well-known URIs (by Unrud)
* Prevent regex injection in rights management (by Unrud)
* Prevent crafted HTTP request from calling arbitrary functions (by Unrud)
* Improve URI sanitation and conversion to filesystem path (by Unrud)
* Decouple the daemon from its parent environment (by Unrud)
Some bugs have been fixed and little enhancements have been added:
* Assign new items to corret key (by Unrud)
* Avoid race condition in PID file creation (by Unrud)
* Improve the docker version (by cdpb)
* Encode message and commiter for git commits
* Test with Python 3.5
1.0.1 - Sunflower Again
2017-06-21 09:48:55 +02:00
-----------------------
2015-09-21 12:14:51 +02:00
* Update the version because of a **stupid** "feature"™ of PyPI
2015-09-14 11:49:34 +02:00
1.0 - Sunflower
2017-06-21 09:48:55 +02:00
---------------
2015-02-07 14:39:00 +01:00
* Enhanced performances (by Mathieu Dupuy)
2015-09-14 11:49:34 +02:00
* Add MD5-APR1 and BCRYPT for htpasswd-based authentication (by Jan-Philip Gehrcke)
* Use PAM service (by Stephen Paul Weber)
2015-12-31 12:51:23 +01:00
* Don't discard PROPPATCH on empty collections (by Markus Unterwaditzer)
* Write the path of the collection in the git message (by Matthew Monaco)
2015-09-14 11:49:34 +02:00
* Tests launched on Travis
2015-02-07 14:39:00 +01:00
2015-01-12 18:40:42 +01:00
0.10 - Lovely Endless Grass
2017-06-21 09:48:55 +02:00
---------------------------
2014-11-01 15:52:55 +01:00
* Support well-known URLs (by Mathieu Dupuy)
* Fix collection discovery (by Markus Unterwaditzer)
* Reload logger config on SIGHUP (by Élie Bouttier)
* Remove props files when deleting a collection (by Vincent Untz)
2014-11-10 10:44:30 +01:00
* Support salted SHA1 passwords (by Marc Kleine-Budde)
2015-01-12 18:40:42 +01:00
* Don't spam the logs about non-SSL IMAP connections to localhost (by Giel van Schijndel)
2014-11-01 15:52:55 +01:00
2014-08-13 13:12:19 +02:00
0.9 - Rivers
2017-06-21 09:48:55 +02:00
------------
2013-08-23 15:58:13 +02:00
2013-12-30 13:54:14 +01:00
* Custom handlers for auth, storage and rights (by Sergey Fursov)
2013-08-30 19:03:10 +02:00
* 1-file-per-event storage (by Jean-Marc Martins)
* Git support for filesystem storages (by Jean-Marc Martins)
2013-12-24 12:14:25 +01:00
* DB storage working with PostgreSQL, MariaDB and SQLite (by Jean-Marc Martins)
2013-08-23 15:58:13 +02:00
* Clean rights manager based on regular expressions (by Sweil)
* Support of contacts for Apple's clients
2013-08-27 17:08:10 +02:00
* Support colors (by Jochen Sprickerhof)
* Decode URLs in XML (by Jean-Marc Martins)
2013-10-01 13:05:39 +02:00
* Fix PAM authentication (by Stepan Henek)
2013-10-31 14:05:15 +01:00
* Use consistent etags (by 9m66p93w)
2015-05-06 15:00:58 +02:00
* Use consistent sorting order (by Daniel Danner)
2014-08-06 12:14:55 +02:00
* Return 401 on unauthorized DELETE requests (by Eduard Braun)
* Move pid file creation in child process (by Mathieu Dupuy)
* Allow requests without base_prefix (by jheidemann)
2013-08-23 15:58:13 +02:00
2013-07-09 13:08:15 +02:00
0.8 - Rainbow
2017-06-21 09:48:55 +02:00
-------------
2013-07-09 13:08:15 +02:00
* New authentication and rights management modules (by Matthias Jordan)
* Experimental database storage
* Command-line option for custom configuration file (by Mark Adams)
* Root URL not at the root of a domain (by Clint Adams, Fabrice Bellet, Vincent Untz)
* Improved support for iCal, CalDAVSync, CardDAVSync, CalDavZAP and CardDavMATE
2013-07-09 13:08:15 +02:00
* Empty PROPFIND requests handled (by Christoph Polcin)
* Colon allowed in passwords
* Configurable realm message
2012-08-03 14:37:02 +02:00
0.7.1 - Waterfalls
2017-06-21 09:48:55 +02:00
------------------
2012-08-03 14:37:02 +02:00
* Many address books fixes
* New IMAP ACL (by Daniel Aleksandersen)
* PAM ACL fixed (by Daniel Aleksandersen)
* Courier ACL fixed (by Benjamin Frank)
* Always set display name to collections (by Oskari Timperi)
* Various DELETE responses fixed
2012-03-20 18:36:34 +01:00
0.7 - Eternal Sunshine
2017-06-21 09:48:55 +02:00
----------------------
2011-11-04 01:06:50 +01:00
* Repeating events
2012-03-20 18:36:34 +01:00
* Collection deletion
2011-11-04 01:06:50 +01:00
* Courier and PAM authentication methods
* CardDAV support
2012-03-20 18:36:34 +01:00
* Custom LDAP filters supported
0.6.4 - Tulips
2017-06-21 09:48:55 +02:00
--------------
* Fix the installation with Python 3.1
2011-11-04 01:06:50 +01:00
0.6.3 - Red Roses
2017-06-21 09:48:55 +02:00
-----------------
2011-10-24 18:05:07 +02:00
2011-11-04 01:06:50 +01:00
* MOVE requests fixed
* Faster REPORT answers
* Executable script moved into the package
2011-10-24 18:05:07 +02:00
2011-09-27 07:54:26 +02:00
0.6.2 - Seeds
2017-06-21 09:48:55 +02:00
-------------
2011-09-27 07:54:26 +02:00
* iPhone and iPad support fixed
2011-09-27 08:12:25 +02:00
* Backslashes replaced by slashes in PROPFIND answers on Windows
2011-09-27 07:54:26 +02:00
* PyPI archive set as default download URL
2011-08-27 13:29:38 +02:00
0.6.1 - Growing Up
2017-06-21 09:48:55 +02:00
------------------
2011-08-27 13:29:38 +02:00
* Example files included in the tarball
* htpasswd support fixed
* Redirection loop bug fixed
* Testing message on GET requests
2011-07-31 23:20:08 +02:00
0.6 - Sapling
2017-06-21 09:48:55 +02:00
-------------
2011-04-02 22:34:04 +02:00
2011-05-01 19:23:24 +02:00
* WSGI support
2011-04-02 22:34:04 +02:00
* IPv6 support
2011-04-10 18:17:06 +02:00
* Smart, verbose and configurable logs
* Apple iCal 4 and iPhone support (by Łukasz Langa)
* KDE KOrganizer support
2011-05-01 19:23:24 +02:00
* LDAP auth backend (by Corentin Le Bail)
* Public and private calendars (by René Neumann)
2011-06-11 16:59:49 +02:00
* PID file
* MOVE requests management
* Journal entries support
2011-05-11 06:21:35 +02:00
* Drop Python 2.5 support
2011-04-02 22:34:04 +02:00
2011-04-02 11:37:42 +02:00
0.5 - Historical Artifacts
2017-06-21 09:48:55 +02:00
--------------------------
2010-12-29 18:58:54 +01:00
* Calendar depth
* MacOS and Windows support
* HEAD requests management
* htpasswd user from calendar path
2010-08-07 14:55:05 +02:00
0.4 - Hot Days Back
2017-06-21 09:48:55 +02:00
-------------------
* Personal calendars
* Last-Modified HTTP header
2010-08-07 14:55:05 +02:00
* ``no-ssl`` and ``foreground`` options
* Default configuration file
2010-06-14 19:05:27 +02:00
0.3 - Dancing Flowers
2017-06-21 09:48:55 +02:00
---------------------
2010-04-19 16:07:32 +02:00
* Evolution support
* Version management
2010-01-22 21:22:38 +01:00
0.2 - Snowflakes
2017-06-21 09:48:55 +02:00
----------------
2010-01-22 21:22:38 +01:00
2010-04-12 12:52:02 +02:00
* Sunbird pre-1.0 support
2010-01-22 21:22:38 +01:00
* SSL connection
* Htpasswd authentication
* Daemon mode
* User configuration
* Twisted dependency removed
* Python 3 support
2010-04-12 12:52:02 +02:00
* Real URLs for PUT and DELETE
* Concurrent modification reported to users
2011-05-01 19:23:24 +02:00
* Many bugs fixed (by Roger Wenham)
2010-01-22 21:22:38 +01:00
2009-09-01 15:59:18 +02:00
0.1 - Crazy Vegetables
2017-06-21 09:48:55 +02:00
----------------------
2009-09-01 15:59:18 +02:00
* First release
* Lightning/Sunbird 0.9 compatibility
2010-04-19 16:07:32 +02:00
* Easy installer