Changelog

=========

This document records all notable changes to `Pagure <https: pagure.io="">`_.</https:>

5.0.1 (2018-09-27)

------------------

.. warning:: This release contains a security fix

- Add to theme the possibility to display site-wide messages (Ryan Lerch)

- Multiple adjustments to the scripts keyhelper and aclchecker (Patrick Uiterwijk)

- Only enforce Signed-Off-By on the main git repo

- Ignore any and all action done by the pagure user when loading JSON into the db

- Fix the last modified date on the PR list

- Updating regex for URLs and SSH urls

- Use gitolite's own mechanism to bypass the update hook

- Ensure the plugin is active when retrieving them

- Switch from GIT_SORT_TIME to GIT_SORT_NONE to preserver 'git log'-like commit

  ordering (Slavek Kabrda)

- Fix pr-dropdown (Ryan Lerch)

- Add hilightjs-line-numbers plugin (Ryan Lerch)

- Fix the reply buttons

- Fix escaping on PR diffs (Ryan Lerch)

- Fix opening/viewing PRs from the branches page

- Fix loading issue template and make the drop-down a little more obvious

- Correctly align edit button for groups in repo settings (Ryan Lerch)

- Fix all-around sidebar heading borders (Ryan Lerch)

- Remove incorrect count label on related PRs (Ryan Lerch)

- Move attachements to sidebar (Ryan Lerch)

- Add reporter and assignee to notification emails headers (Lenka Segura)

- Make sure that ticket changes don't get duplicated (Patrick Uiterwijk)

- Fix the git ssh urls in the templates

- Fix when milestones_keys and milestones get out of sync

- Sign-off the merge commits when the project enforces it

- Add missing alembic migration to create the hook_mirror table

- Don't generate API keys with random.choice (Jeremy Cline)

5.0 (2018-09-24)

----------------

.. warning:: This release contains backward incompatible changes and fixes a CVE

- Pagure supports now python2 and python3 simultaneously (Thanks to Aurélien

  Bompard and Neal Gompa for the testing)

- New UI deployed (thanks to Ryan Lerch)

- New dashboard page as index page when authenticated (Ryan Lerch)

- API listing items (projects, issues, pull-requests are now paginated (

  Karsten Hopp)

  .. warning:: Backward incompatible

- Enable private projects by default (Neal Gompa)

  .. warning:: Backward incompatible

- Change the default and sample configuration to point to localhost-friendly

  resources (Neal Gompa)

  .. warning:: Backward incompatible

- Disable sending FedMsg notifications by default (Neal Gompa)

  .. warning:: Backward incompatible

- Switch default authentication to `local` (Neal Gompa)

  .. warning:: Backward incompatible

- Drop the dependency on python-pygments

- Drop the dependency on flask-multistatic

- Drop the dependency on python-trollius (in favor of python-trololio) (Neal

  Gompa)

- Bump pygit2 requirement to 0.24.0 minimum

  .. warning:: Backward incompatible

- Add support to re-open a pull-request (Karsten Hopp)

- Fix editing a file into a fork containing a namespace

- Allow creating a new API token based on an expired one

- New API endpoint to submit a pull-request

- Add support for making the issue tracker read-only

- Add a new API endpoint allowing to update watch status on a project

- Paginate the project lists on the front pages

- Let the reply button append instead of replacing

- Add a way to list all API tokens and don't restrict the info command (

  in pagure-admin)

- Expand pagure-admin to allow using it to block an user

- Expand pagure-admin to allow adding new groups using it

- Allow viewing commits from a git tag

- Support viewing commits from a specific commit hash

- Add a hook that disables creating new branches by git push (Slavek Kabrda)

- Make API endpoint for creating new git branch have its own ACL

- Support sorting PR's by recent activity (ymdatta)

- Fix installing the API key reminder cron with systemd  integration

- Add reactions to comments (Lubomír Sedlář)

- New API endpoint allowing to retrieve pull-requests based on their UUID

  (Slavek Kabrda)

- Add an option to restrict emails sent to certain domains (Karsten Hopp)

- Integration with repospanner (Patrick Uiterwijk)

- Rework how git hooks work to rely on a single file rather than moving files

  around (Patrick Uiterwijk)

- Add themes for pagure.io, src.fedoraproject.org (Ryan Lerch)

- Add themes for OpenSUSE (hellcp)

- Ensure remote PR are opened from a remote URL (CVE-2018-1002158 - reported by

  Patrick Uiterwijk)

4.0.4 (2018-07-19)

------------------

.. note:: This release fixes CVE-2018-1002155, CVE-2018-1002156,

        CVE-2018-1002157, CVE-2018-1002153

- Ensure the project's description does not contain any javascript (Michael

  Scherer)

- Prevent the project's URL to be anything other than an URL

- Escape any html people may have injected in their author name in commits

  (Michael Scherer)

- Do not serve SVG inline (Michael Scherer)

  - The four items above constitute CVE-2018-1002155

- Catch exception raised by pagure-ci when it fails to find a build on jenkins

- Fix RELATES and FIXES regex to cover projects with a dash in their name

- Support calls from jenkins indicating the build is started

- Ensure we check the required group membership when giving a project away

- Add missing titles to the milestones table in the settings

- Properly inform the user if they are introducing a duplicated tag

- Only select the default template when creating a new ticket

- Fix the subscribe button on the PR page

- Fix updating a remote PR

- Fix showing the 'more' button on the overview page

- Multiple fixes to the pagure-milter

- Fix triggering CI checks on new comments added to a PR

- Fix logging and the SMTPHandler

- Do not notify everyone about private tickets (CVE-2018-1002157)

- Make the settings of a project private (CVE-2018-1002156)

- Ensure the git repo of private projects aren't exposed via https

  (CVE-2018-1002153)

- Do not log activity on private projects

- Drop trollius-redis requirement (Neal Gompa)

4.0.3 (2018-05-14)

------------------

- Backport utility method from the 4.1 code to fix the 4.0.2 release

4.0.2 (2018-05-14)

------------------

.. note:: This release fixes CVE-2018-1002151

- Fix showing the list of issues in a timely fashion (Patrick Uiterwijk)

- Fix stats for commits without author (Lubomír Sedlář)

- Explain how to fetch a pull request locally and some grammar fixes

  (Todd Zullinger)

- Drop the constraint on the requirement on straight.plugin but document it

- Fix the requirement on bcrypt, it's optional

- Make API endpoint for creating new git branch have its own ACL

  fixes CVE-2018-1002151

4.0.1 (2018-04-26)

------------------

- Fix browsing projects in a namespace when logged in and the instance has only

  one contributor for every projects

- Fix commenting on a PR or an issue if the event source server is not

  configured at all (Slavek Kabrda)

4.0 (2018-04-26)

----------------

- Re-architecture the project to allow potentially extending pagure outside of

  its core

- Fix running the tests on newer pygit

- Add a space between the fork and the watch buttons

- Add a global configuration option to turn on or off fedmsg notifications for

  the entire pagure instance

- Set the default username to be 'Pagure' when sending git commit notifications

  by email

- Add project setting to show roadmap by default (Vivek Anand)

- Explain in the doc where the doc is coming from

- Expand and document the tokenization search

- Add document that multiple keys are supported

- Add a way to block non fast-forwardable commits on all branches

- Fix running pagure on docker for development (Clément Verna)

- Make the accordeon in the settings page work correctly

- Allow calling git blame on a commit instead of a branch

- Exclude the .pyc files from all folders

- Fix viewing file if the identifier provider is a commit hash

- Make pagure-ci use python-jenkins to work with newer Jenkins

- Fix the link to the pull-request shown by the default git hook

- If the tag's color is the default text, convert it to the hex value

- Include documentation on how to pull locally a pull-request on the PR page

- Properly retrieve the number of projects and forks users have

- Replace jquery.dotdotdot by jquery.expander

- Update the Preview button to display 'Edit' when previewing

- Fix supporting <link> in markdown as it is supposed to be

- Add missing authentication provider option to documentation (Michael Watters)

- Fix couple of places where fullname is required while it's not

- Let users see and access private tickets they are assigned to

- Fix allowing to add multiple tags with the same color

- Add a new API endpoint allowing to open new pull-requests

- Fix checking if the user is authenticated

- Add the possibility to mark milestones as active or inactive

- Fix making the milestones showing in the correct order on the issue page

- Fix showing the proper URLs in the repo overview

- Include the cached merge status in the JSON representation of pull-requests

- Improve the fedmsg git hook documentation

- Fix display of deleted parent on index page (Lubomír Sedlář)

- Adjust message shown to the user deleting a tag off a project

- Fix redirecting the user when they remove themselves from a project

- Add an option to notify on flags being added to a pull-request

- Add an option to notify on flags being added to a commit

- Document project intra-pagure hyperlinks

- Refresh the PR cache of the parent repo rather than always the current one

- Move the webhook service to be a celery service

- Fix dead-link due to documentation for python-markdown being moved

- Mention #pagure IRC channel in Contributing docs (Peter Oliver)

- Fix editing and deleting comments added by the EV server to PRs

- Include a count of the number of tickets shown vs recorded for each milestone

- Do not try to get the avatar if the author has no email

- Fix HTML on settings page

- Migrate the logcom service to be celery based and triggered

- Link directly to API key settings in error message about expired API key

  (Peter Oliver)

- Drop the constraint on binaryornot

- Make fork page header link consistent (Lubomír Sedlář)

- Fix the rtd hook and port it to the v2 API (Clément Verna, Pierre-Yves Chibon)

- Deduplicate list of contributors to a project (Lubomír Sedlář)

- Remove repo from gitolite cache when it gets deleted (Slavek Kabrda)

- Make the hooks use the new architecture (Clément Verna)

- Switch to comments on PR page when url fragment is reset (Lubomír Sedlář)

- Handle implicit issue link at start of line (Adam Williamson)

- Don't treat @ in the middle of words as a mention (Adam Williamson)

- Improve the CI settings docs (Clément Verna)

- Ensure the tasks has finished before checking its results

- Fix oidc logout with admin_session_timedout (Slavek Kabrda)

- Make images be lazy loaded via javascript

- Adjust activity heatmap and logs for timezone (Adam Williamson)

- Use timezone not offset for user activity, fix heat map (Adam Williamson)

- JS clean up (Lubomír Sedlář)

- Fix UnicodeEncode on entering non-ascii password (Farhaan Bukhsh)

- Add Tests and exception for non-unicode password (Farhaan Bukhsh)

- Forbid adding tags with a slash in their name to a project

- Migrate the loadjson service to be celery-based

- Specify which service is logging the action for easier debugging/reading of

  the logs

- Merge the fedmsg notifications on commit logic into the default hook

- Merge pagure-ci into the pagure's celery-based services

- When creating a new PR, allow updating the branch from

- Allow pull changes from a different repo than the parent one

- Add a new internal endpoint to get the family of a project

- Expand the API endpoint listing tags to include the hash if asked t

- List the tags of the project in the list of commits

- Fix sending notifications in the default hook

- Make it possible to use custom PR/commit flags based on instance configuration

  (Slavek Kabrda)

- Show summary of flags on page with commits list (Slavek Kabrda)

- Improve the info message when trying to setup an user with a known email

- Make badges with flag counts in commits list to links to commit details

  (Slavek Kabrda)

- Enable sending messages to stomp-compliant brokers (Slavek Kabrda)

- Update required pygit2 version (Clément Verna)

- Do not crash when getting the branches ready for PR on a fork with no parent

- Adjust tests for newer flask

- Make trigger CI build depends on project name (Clément Verna)

- Ensure the DOCS_FOLDER and TICKETS_FOLDER really are optional

- Move the `Add Milestone` button near the top and fix the layout

- Add a button to delete empty line when adding new tags

- Change submit button labels for issues and PRs (Akshay Gaikwad)

- Add changelog.rst (Akshay Gaikwad)

- Overflow heatmap automatically (Paul W. Frields)

- Large unit-tests improvement both in quality and speed (Aurélien Bompard)

- Initial support for commit CI trigger (Clément Verna)

- Added signed-off-by during web ui commit (yadneshk)

- Replace py-bcrypt by python2-bcrypt (Clément Verna)

- Fix the user's requests page

- Establish an order for readme files (Karsten Hopp)

- Include the filename when showing the diff of remote PRs

- Specify the parent repo, even when creating a remote PR

- Always use md5 to get ssh key information (Patrick Uiterwijk)

- Support showing comment submitted by ajax when the SSE is down/not set

- Add the possibility to link issues to pull-requests (in the UI)

- Rely on the list of branches rather than the ``.empty`` attribute to find out

  if a git repo is empty or not

- Add the possibility to split the tasks into multiple queues

- Fix getting the patch of a PR that no longer has a project from

- Do not update the CHECKSUMS file if the file was already uploaded

- Show the fork button on forks

- Make the web-hook field be a textarea and improve the documentation about

  web-hook

- Fix supporting branches containing multiple dots

- Do not convert to markdown commit messages in notifications

- Port pagure to use the compile-1 script from upstream gitolite (if

  configured to do so) (Slavek Kabrda)

- Add preview when editing a comment (Rahul Bajaj) and the initial comment

- Ensure that deployment keys are managed correctly (Michael Watters)

- Improve human-readable date/time display in web UI (Adam Williamson)

- Make sure we rollback session on task failures (Slavek Kabrda)

- Fix new commit notification mails with non-ASCII (#1814) (Adam Williamson)

- Don't create gitolite.conf entries for docs and tickets when they're disabled (Slavek Kabrda)

- Move source git urls above contibutors list (yadneshk)

- Fix private repo to be accessed by ACLs other than admin (Farhaan Bukhsh)

- Change the lock name based on the git repo touched (Pierre-Yves Chibon)

- Adjust the spec file, remove no longer needed lines and fix requirements (Pierre-Yves Chibon)

- Add example worker systemd service file (Pierre-Yves Chibon)

- Adjust the wsgi file for the new arch (Pierre-Yves Chibon)

- Fix turning the read-only boolean on a fork (Pierre-Yves Chibon)

- Support blaming a file is the identifier is a tag (Pierre-Yves Chibon)

- Ensure the git hooks are always executable in the rpm (Pierre-Yves Chibon)

- Do not syntax highlight 'huge' files (Patrick Uiterwijk)

- Fix exceptions caused by missing merge object (Michael Watters)

- Fix linking to a PR that was opened from a main project to a fork (Pierre-Yves

  Chibon)

- Add support for repository templates for sources and forks (Pierre-Yves

  Chibon)

- Enable usage of flask-session extension (Slavek Kabrda)

- Add a configuration key allowing to send fedmsg notifications on all commits

  (Pierre-Yves Chibon)

- Allow deleting branch when PR is merged (Lubomír Sedlář)

3.13.2 (2017-12-21)

-------------------

- Fix ordering issues by author using an alias so the User doesn't collide

3.13.1 (2017-12-19)

-------------------

- Add an alembic migration removing a constraint on the DB that not only no

  longer needed but even blocking regular use now

3.13 (2017-12-18)

-----------------

- Fix the alembic migration adjusting the pull_requests table

- Fix how is created the db in the docker development environment (Clement

  Verna)

- Ensure optional dependencies remain optional

- Ensure groups cannot be created when it is not allowed

- When listing issues, include the project as well in the user's issue API

  endpoint

- Sort forks by date of creation (descending) (Neha Kandpal)

- Ensure the pagination arguments are returned when a page is specified

- Make the milestone clickable on the issue page

- Make the celery tasks update their status so we know when they are running (vs

  pending)

3.12 (2017-12-08)

-----------------

- Adjust the API endpoint listing project to not return a 404 when not projects

  are found (Vivek Anand)

- Remove --autoreload from the docker dev deployment (Vivek Anand)

- Fix ordering issues (Patrick Uiterwijk)

- Do not log actions pertaining to private issues, PRs or projects

- Fix flagging a PR when no uid is specified

- Fix the doc about custom gitolite config

- Fix displaying the filename on the side and linking to file for remote PRs

- Add irc info in Readme (Vivek Anand)

- Make pagure compatible with newer python chardet

- Check that the identifier isn't the hash of a git tree in view_file

- Fix if the identifier provided is one of a blob instead of a commit in

  view_commit

- Include the status when flagging a PR via jenkins

- Enable OpenID Connect authentication (Slavek Kabrda)

- Use the updated timestamp in the pull-request list

- Add migration to fix the project_from_id foreign key in pull_requests

- Let the SSE server to send the notifications so they can be displayed live

- Improve the createdb script to support stamping the database in the initial

  run

- Specify a different connection and read timeout in pagure-ci

- Small CSS fix making the (un)subscribe show up on the PR page

3.11.2 (2017-11-29)

-------------------

- Fix giving a project if no user is specified

- Don't show issue stats when issues are off

3.11.1 (2017-11-28)

-------------------

- Fix showing the issue list

- Make clear in the project's settings that tags are also for PRs (Clement

  Verna)

- Remove unused jdenticon js library (Shengjing Zhu)

3.11 (2017-11-27)

-----------------

- Print out the URL to existing PR(s) or to create one on push

- Reword the repository access warning (Matt Prahl)

- Add pagure-admin admin-token update to update the expiration date

- Fix the api_view_user_activity_stats to return the expected data (post flask

  0.11)

- Add small icon showing if issues are blocked or blocking in the issue list

- Replace all print statements with print function calls (Vadim Rutkovski)

- Add a default_priority field to projects

- Bail on merge a PR that is already closed

- Add a graph of the history of the open issues on the project

- Make the pagure hook act as the person doing the push

- Clean spec file to drop deprecated lines and macros (Igor Gnatenko)

- Include selectize in the settings page to fix the autocomplete in the give

  project action

- Do not display the close_status if there isn't one

- Do not show the `Fork and edit` button all the time

- Allow project maintainer to set metadata when creating a new issue (expand the

  API as well)

- Add a timeout when trying to query jenkins

- Show the reply button even if the PR/issue is closed.

- Add a diff view for PR

- Improve the `My star` page

- Introduce repo statistics

- When a project enforce signed-off-by, clearly say so on the new PR page and

  properly block the PR from being created

- Adjust button title on the 'Fork and Edit' action

- Fix typos in the code (chocos10)

- When editing an issue, act as the person who pushed the change

- Commit using the user's fullname if there is one, otherwise its username

- Expand the group info API endpoint

- Sorting on Opened, Modified, Closed, Priority, Reporter, Assignee cols (Mohan

  Boddu and Matt Prahl)

- Fix the Vagrant setup (Ryan Lerch)

- Fix typo in the example pagure.wsgi file (Vivek Anand)

- Add API endpoints for listing pull requests for a user (Ryan Lerch)

- Ask for the post-commit hook to be run when editing files via the UI

- Fix the milter for email gpg signed

- Allow filtering the user's project by access level

- Add a modal at the bottom of the issues list to add milestones

- Add a field to store the order of the milestones

- Hide the ``+`` button on the index page when it is disabled in the UI

- Improve mimetype detection (Shengjing Zhu and Clement Verna)

- Allow assignee to drop their assignment

- Remove duplicate [Pagure] from mail subjects (Stefan Bühler)

- Fix undefined 'path' in blame.html template (Stefan Bühler)

- Warn users when a project does not support direct push

- Update gitolite's config for the project when set to PR only

- Do not report the branch differing master if PRs have been turned off

- Add a button and an API endpoint to subscribe to PR's notifications

- Fix showing the file names in PR (pre)view

- Fix number of typos in the documentation (René Genz)

- Improve the documentation about documentation hosting in pagure (René Genz)

- Allow priorities and milestones to be 0 or -1

- Return the flag UID when adding or updating a flag on a PR not in fedmsg

- Add flags on commits

- Add documentation about flags on commits and PRs

- Add status fields to flags

- Make flag's UID be unique to the commit/PR being flagged

- Add API endpoint to retrieve all issues related to an user across all repos

- Fix the new PR and delete buttons for branch name with + in them

- When merging a PR, call the post-update hook on the target repo

- Add tags to pull-request

- Fix documentation for fork API endpoint (ishcherb)

- Send fedmsg messages when deleting a project (Shaily)

3.10.1 (2017-10-13)

-------------------

- Fix providing access to some of the internal API endpoints by javascript

3.10 (2017-10-13)

-----------------

- Show the branches' head in the commit list

- Log which IP is being denied access to the internal endpoints (makes debugging

  easier)

- Link to pagure's own markdown documentation and warn that remote images are

  not supported

- Document how to run a single test file or a single test in a file

- Fix trying to decode when the encoding is None

- Include an url_path field in the JSON representation of a project

- Generalize the description of the ACLs (since we know have project-less API

  tokens)

- Drop ``--autoreload`` from the .service files as celery dropped support for it

  and it never really worked (Vivek Anand)

3.9 (2017-10-11)

----------------

- Fix the editing issue when the user does not actually edit anything

- Fix the internal API endpoint: get branches of commit to support namespace

- Consolidate the code in our custom markdown processor (fixes linking to a

  commit on a namespaced project)

- Fix deleting a project by also removing it from the gitolite config

- Warn if the user is about to just recompile the gitolite config via

  pagure-admin (Patrick Uiterwijk)

- Update .git/config example in doc/usage/pull_requests.rst (sclark)

- Include the PRs opened by the user on the 'My pull-requests' page

- Add to pagure-admin the actions: get-watch and update-watch

- Add to pagure-admin the action: read-only

- Add the user's fullname (if there is one) as title when they comment

- Fix the title of the percentage when hovering over the red bar in issues

- Make the box to edit comments bigger

- Document in the usage section where to find the API documentation

- Provide the sha256 and sha512 of the releases in a CHECKSUMS file

- Remove clear buttons (Till Maas)

3.8 (2017-09-29)

----------------

- Fix API documentation for git/branch (Matt Prahl)

- Fix giving a project to someone who already has access (Matth Prahl)

- Add some border to the tables created in README files

- Ask the user to confirm merging a pull-request

- Fix processing status and close_status updates in the SSE

- Fix the URL to the issue used by the SSE JS on tags

- Increase the logging in the milter to help figuring out issues in the future

- Fix the In-Reply-To header when sending notifications

- Fix showing the delete project button

- Fix search issues with a unicode character

- Catch exception raised when accessing the head of the repo

- Fix deleting a project when some of the folder are not used

- Allow viewing a PR when its origin (fork or branch) is gone

- Fix linking to issue or PR in namespaced projects via #<id></id>

- Make it more obvious that the namespace and the project are different links

- Tell fedmsg to send things with pagure certificates (Patrick Uiterwijk)

- Fix loading ticket templates on namespaced project and extracting their names

- Add a banner on the overview page when the ACLs are being refreshed on the

  backend (and thus ssh access may not be entirely functional) (Vivek Anand)

- Update the documentation on how to create pull requests (Clement Verna)

- Add button to refresh external pull requests (Patrick Uiterwijk)

- Add the possibility to get the group members when asking the project info

- Make the PROJECT_NAME_REGEX used in form be configurable

- Adjust the milter to support replying with any email addresses associated

- Allow pagure admin to give a project

3.7.1 (2017-09-05)

------------------

- Fix the UPGRADING documentation

- Add the API endpoint to edit multiple custom fields to the doc (Clement

  Verna)

3.7 (2017-09-05)

----------------

- Update link to markdown documentation, fix typo on the way (Till Hofmann)

- Add feature allowing to prevent project creation in the UI only

- Remove the front whitespace from the commit markdown regex (Clement Verna)

- New API endpoint to modify multiple custom fields (Clement Verna)

- Update the example output of the API endpoint giving project information

- Add the ability to order issues by ascending or descending (Matt Prahl)

- Consolidate around pagure.lib.git.generate_gitolite_acls

- Regenerate the gitolite ACL when changing the main admin of a project

- Change the documentation link end point (Clement Verna)

- Fixes the README.rst file (Ompragash)

- Update Docker Environment (Clement Verna)

- Add a configuration key to allow deleting forks but not projects

- Show the entire project name in the UI on the delete button

- Add support for a custom user in the SSH URL

- Do not show the SSH url when the user isn't logged in

- Update the documentation on how to work with pull requests (Clement Verna)

- Support both JSON and Form POST on APIs that accepted only JSON (Matt Prahl)

- Don't expand groups in the watchers API (Ralph Bean)

- Add a new branch API (Matt Prahl)

- Add bash function example to PR documentation (Clement Verna)

- Add the star project feature (Vivek Anand)

- Update the overview diagram

- Fix the rendering of the API version in the html page (Clement Verna)

- Fix message-id not having FQDN (Sachin Kamath)

- Mention on what the rebase was done

- Remove the line numbers coming from pygments on pull-requests

- Include the targeted branch in the list of PRs

- Separately link user/namespace/name

- Fix the pagination when listing projects via the view_projects endpoints

- Retain access when transfering ownership of the project (Matt Prahl)

3.6 (2017-08-14)

----------------

- Blacklist creating a group named 'group'

- Allow having a dedicated worker to compile the gitolite configuration file

- Fix removing groups of a project

- Make the API returns only open issues by default (as documented) (Clement

  Verna)

- Improve the README regarding the use of eventlet to run the tests (Vivek

  Anand)

- Give Pagure site admins the ability to modify projects using the API (Matt

  Prahl)

- Add the "git/generateacls" API endpoint for projects (Matt Prahl)

3.5 (2017-08-08)

----------------

- Fix login when groups are managed outside

- Fix the ordering of the issues by priority using JS and its documentation

- Indicate the issue/PR status in the title of its link

- Correct typo in waiting page template: 'You task' -> 'Your task' (Hazel Smith)

- Fix redirect in search (Carl George)

- Fix removing users of a project

- Allow customizing the HTML title globally

- Drop the new line character and the '# end of body' message when loading the

  config

- Scroll to the comment section on clicking reply. (shivani)

- only show issues on the My Issue page if the issue tracker is on for the

  project (Vivek Anand)

- Update the refresh-gitolite action of pagure-admin for the new interface

  (turns out this wasn't in fact merged in 3.4)

- Add a configuration key to make pagure case sensitive

- Add an USER_ACLS configuration key

- Document the different API token ACLs configuration keys

- Fix syncing groups from external account sources (Patrick Uiterwijk)

3.4 (2017-07-31)

----------------

- Fix layout breakage in the doc

- Stop using readlines() to drop the trailing new line character

- Fix logging by properly formatting the message

- Fix the issue count in the My Issues page (Vivek Anand)

- Add a configuration key to disable deleting branches from the UI

- Add a configuration key to disable managing user's ssh key in pagure

- Fix the vagrant environment (Clement Verna)

- Fix branch support for the git blame view

- Update the PR ref when the PR is updated

- Add a configuration key to disable the deploy keys in a pagure instance

- Fix login when groups are managed outside of pagure

- Fix setting up the git hooks when there is no DOCS_FOLDER set

- Fix installing up the pagure hooks when there is no DOCS_FOLDER set

3.3.1 (2017-07-24)

------------------

- Fix typo in the alembic migration present in 3.3

3.3 (2017-07-24)

----------------

- [SECURITY FIX] block private repo (read) access via ssh due to a bug on how we

  generated the gitolite config - CVE-2017-1002151 (Stefan Bühler)

- Add the date_modified to projects (Clement Verna)

3.2.1 (2017-07-14)

------------------

- Fix a syntax error on the JS in the wait page

3.2 (2017-07-14)

----------------

- Use a decorator to check if a project has an issue tracker (Clement Verna)

- Optimize generating the gitolite configuration for group change

- Fix the issue_keys table for mysql

- Drop the load_from_disk script

- Fix next_url URL parameter on the login page not being used (Carlos Mogas da

  Silva)

- Support configuration where there are no docs folder and no tickets folder

- Show all the projects a group has access to

- Add pagination to the projects API (Matt Prahl)

- Simplify diff calculation (Carlos Mogas da Silva)

- Show the inline comment in the PR's comments by default (Clement Verna)

- Fix the URL in the API documentation for creating a new project (Matt Prahl)

3.1 (2017-07-04)

----------------

- Allow project-less API token to create new tickets

- Tips/tricks: add info on how to validate local user account without email

  verification (Vivek Anand)

- Optimize the generation of the gitolite configuration

- Improve logging and load only the plugin of interest instead of all of them

- Show the task's status on the wait page and avoid reloading the page

- Don't show '+' sign when GROUP_MNGT is off (Vivek Anand)

3.0 (2017-06-30)

----------------

- Since 2.90 celery has become a requirement as well as one of the queueing

  system it supports (pagure defaults to using redis)

- Multiple stability and performance improvements (mainly thanks to Patrick

  Uiterwijk)

- Fix the assignee value in fedmsg when assigning a ticket (Ricky Elrod)

- Make pagure support bleach 2.0.0 (Shengjing Zhu)

- Fixes in CI support (Tim Flink)

- Update the documentation

- Fix plain readme html escape (Shengjing Zhu)

- Refactor user existence code in API and UI (Abhijeet Kasurde)

- Add an API to modify a Pagure project's owner (Matt Prahl)

- Support for uploading multiple files to an issue at once

- Introduce the external committer feature

- Add the required groups feature

- Add an API endpoint to get the git urls of a project (Matt Prahl)

- Blacklist 'wait' as project name

- Add a border to the search box on the side bar to the documentation

- Add the list-id, list-archive and X-Auto-Response-Suppress email headers

- Add ways to customize the gitolite configuration file with snippets

- Return a 404 on private ticket if the user is not authenticated

- cleanup: move static js/css to vendor dir

- Limit the requests version as it conflicts with our chardet requirement

- Rename all the services to pagure-*

- Remove 'on 

- Create references for pull-request in the git repo for local checkout

- Use the entire list of users for the assignee field completion

- Fix searching for groups

- Make the search work when searching for project with namespaces or forks

- Return a human-friendly error message when upload fails

- Let acting on the status potentially set the close_status and vice versa

- Multiple fixes to the SSE server

- When forking a project, wait until the very end to let the user go through

- Allow customizing the writing of gitolite's configuration file

- Fix diffing the branch of a project against the target branch

- Fix displaying the new PR button on the default branch

- Do not send a notification upon merge conflicts

- Do not let pagure return 500 when hit with bogus URL

- When loading comment from JSON rely on username/comment rather than comment id

- When deleting a comment, refresh the ticket git repo

- Make patch_to_diff use lists instead of string concatenation (Patrick

  Uiterwijk)

2.90.1 (2017-07-24)

-------------------

- Fix the systemd service file for the worker, needs to have the full path

  (Patrick Uiterwijk and I)

- Fix the logcom server (Patrick Uiterwijk)

- Use python-redis instead of trollius-redis to correctly clean up when client

  leaves on the EV server (Patrick Uiterwijk)

2.90.0 (2017-05-23)

-------------------

- Re-architecture the interactions with git (especially the writing part) to be

  handled by an async worker (Patrick Uiterwijk)

- Add the ability to filter projects by owner (Matt Prahl)

2.15.1 (2017-05-18)

-------------------

- Fix the requirements on straight.plugin in the requirements.txt file

  (Shengjing Zhu)

- Fix typo in the fedmsg hook so it finds the function where it actually is

- Fix and increase the logging when merging a PR

- Fix pushing a merge commit to the original repo

- Use psutil's Process() instead of looping through all processes (Patrick

  Uiterwijk)

- Don't email admins for each PR conflicting

- Fix/improve our new locking mechanism (Patrick Uiterwijk)

- Drop making the token required at the database level since pagure-ci doesn't

  use one (but do flag pull-requests)

- Fix the watch feature (Matt Prahl)

2.15 (2017-05-16)

-----------------

- Improve logic in api/issue.py to reduce code duplication (Martin Basti)

- Fix the download button for attachment (Mark Reynolds)

- Fix our markdown processor for strikethrough

- Add a spinner indicating when we are retrieving the list of branches differing

- Make add_file_to_git use a lock as we do for our other git repositories

- Add the opportunity to enforce a PR-based workflow

- Store in the DB the API token used to flag a pull-request

- Allow people with ticket access to take and drop issues

- Display the users and groups tied to the repo in the API (Matt Prahl)

- Document our markdown in rest so it shows up in our documentation

- Fix comparing the minimal version of flask-wtf required

- Allow the td and th tags to have an align attribute to allow align in html

  tables via markdown

- Avoid binaryornot 0.4.3 and chardet 3.0.0 for the time being

- Add group information API that shows group members (Matt Prahl)

- Ensure people with ticket metadata can edit the custom fields

- Add support to create private projects (Farhaan Bukhsh) - Off by default

- Link to the doc when the documentation is activated but has no content

- Enforce project wide flake8 compliance in the tests

- Enforce a linear alembic history in the tests

- Increase logging in pagure.lib.git

- Use custom logger on all module so we can configure finely the logging

- Multiple improvements to the documentation (René Genz)

- Add the ability to query projects by a namespace in the API (Matt Prahl)

- Add the /<repo>/git/branches API endpoint (Matt Prahl)</repo>

- Lock the git repo when removing elements from it

- Always remove the lockfile after using it, just check if it is still present

- Implement the `Give Repo` feature

- Allow project-less token to change the status of an issue in the API

- Make the watch feature more granular (Matt Prahl): you can now watch tickets,

  commits, both, neither or go back to the default

- Bring the pagure.lib coverage to 100% in the tests (which results to bug fixes

  in the code)

- Add locking at the project level using SQL rather than filelock at the git

  repo level

2.14.2 (2017-03-29)

-------------------

- Fix a bug in the logic around diff branches in repos

2.14.1 (2017-03-29)

-------------------

- Fix typo for walking the repo when creating a diff of a PR

- Have the web-hook use the signed content and have a content-type header

- Fix running the tests on jenkins via a couple of fixes to pagure-admin and

  skipping a couple of tests on jenkins due to the current pygit2/libgit2

  situation in epel7

2.14 (2017-03-27)

-----------------

- Update the label of the button to comment on a PR (Abhijeet Kasurde)

- Make search case insensitive (Vivek Anand)

- Improve the debugging on pagure_loadjson

- Only link the diff to the file if the PR is local and not remote

- Do not log on fedmsg edition to private comment

- When deleting a project, give the fullname in the confirmation window

- Add link to the FPCA indicating where to sign it when complaining that the

  user did not sign it (Charelle Collett)

- Fix the error: 'Project' object has no attribute 'ci_hook'

- Fix input text height to match to button (Abhijeet Kasurde)

- Fix the data model to make deleting a project straight forward

- Fix searching issues in the right project by including the namespace

- When creating the pull-request, save the commit_start and commit_stop

- Ensure there is a date before trying to humanize it

- Fixing showing tags even when some of them are not formatted as expected

- Allow repo user to Take/Drop assigment of issue (Vivek Anand)

- Add merge status column in pull requests page (Abhijeet Kasurde)

- Allow user with ticket access to edit custom fields, metadata and the privacy

  flag (Vivek Anand)

- Add number of issues in my issues page (Abhijeet Kasurde)

- Allow report to filter for a key multiple times

- Add the support to delete a report in a project

- Fix rendering the roadmap when there are tickets closed without a close date

- Fix to show tabs in pull request page on mobile (Abhijeet Kasurde)

- Document some existing API endpoints that were missing from the doc

- Make issues and pull-requests tables behave in responsive way (Abhijeet Kasurde)

- Add option to custom field for email notification (Mark Reynolds)

- When resetting the value of a custom field, indicate what the old value was

- Add instance wide API token

- Move the admin functions out of the UI and into a CLI tool pagure-admin

- Do not update the hash in the URL for every tabs on the PR page

- Fix heatmap to show current datetime not when when object was created (Smit

  Thakkar and Vivek Anand)

- Do not include watchers in the subscribers of a private issue

- Do not highlight code block unless a language is specified

- Make getting a project be case insensitive

- Do not change the privacy status of an issue unless one is specified

- Fix the logic of the `since` keyword in the API (Vivek Anand)

- Fix the logic around ticket dependencies

- Add reset watch button making it go back to the default (Vivek Anand)

- Do not show dates that are None object, instead make them empty strings

- Allow filtering tickets by milestones in the API

- Allow filtering tickets by priorities in the API

- Expand the API to support filtering issues having or not having a milestone

- Use plural form for SSH key textfield (Martin Basti)

- Support irc:// links in our markdown and adjust the regex

- Remove backticks from email subject (Martin Basti)

- Adjust the logic when filtering issues by priorities in the API

- Remove mentioning if a commit is in master on the front page

- Optimize finding out which branches are in a PR or can be

- Add required asterisk to Description on new issues (Abhijeet Kasurde)

- Fix misc typo in 404 messages (Abhijeet Kasurde)

- Add performance git repo analyzer/framework (Patrick Uiterwijk)

- Added tip_tricks in doc to document how to pre-fill issues using the url

  (Eashan)

- Document how to filter out for issues having a certain tag in the tips and

  tricks section

- Allow to manually triggering a run of pagure-ci via a list of sentences set in

  the configuration

- Add support for admin API token to pagure-admin

- Make clicking on 'Unassigned' filter the unassigned PR as it does for issues

- Add Priority column to My Issues page (Abhijeet Kasurde)