Package: kinto-dist
Kinto DistributionThis projectis deprecatedand has becomehttps://github.com/mozilla/remote-settings/CHANGELOGThis document describes changes between each past release as well as
the version control of each dependency.27.0.3 (2022-02-15)This projectis deprecatedand has becomehttps://github.com/mozilla/remote-settings/27.0.2 (2022-01-26)Bug FixesAdd missingLast-Modifiedresponse header in/changesetresponsesDon’t check groups when review is disabled (backport of mozilla/remote-settings#157)27.0.1 (2022-01-13)Bug fixesRestoregroup_check_enabledfield in"signer"capability for backward
compability with previous versions (#1962)Internal ChangesRemove known instances file (#1958)27.0.0 (2021-12-10)Breaking ChangesThekinto.signer.group_check_enabledsetting is now alwaystrue, and
won’t be read from configuration anymore.Bug fixesRestore"version"fields insignerandchangescapabilities metadatakinto-attachmentkinto-attachment 6.1.0 → 6.2.0:https://github.com/Kinto/kinto-attachment/releases/tag/6.2.0New featuresbase_urlfield in server’s capabilities will be added a trailing slash (/)
if missing.26.0.0 (2021-12-01)Breaking ChangesDo not installkinto_changesandkinto_signerplugins from PyPI.
The source code for these plugins has moved to this repository and will
continue to be maintained here.kinto-changeswas copied to this repo at
commit 0af75a9efb6ae849ee1a6761349bfaf49dd1c488, andkinto-signerwas
copied at commit 249db348caec02daafc4c249658b4ca2a89343bd. After they were
copied, linting and formatting tools were run against them and changes were
made for CI checks to pass.kinto_changesandkinto_signerare now combined into one pluginkinto_remote_settings. Kinto config files must be changed to register the
plugin as such.Before:
.. code-block:: inikinto.includes = …kinto_changes
kinto_signerAfter:
.. code-block:: inikinto.includes = …kinto_remote_settingsThis change does not include the names of config items. For instance,kinto_changes.http_hostremains with prefixkinto_changesand was
not renamedkinto_remote_settings.changes.http_host.In addition to thekinto_signerandkinto_changesconsolidation as
described above,kinto_remote_settings.signer’s internal packagesignerwas renamed tobackends. Consider adjusting thekinto.signer.signer_backendsettings in your configuration
accordingly.kinto.signer.signer_backend=kinto_remote_settings.signer.backends.autographSome collection metadata rely on classes fromkinto_signerto have
specific qualified names forkinto-emailerto send emails on signer
events (review requests, approvals, …). These names must be changed to
correctly refer to these classes. For example:Before:kinto-emailer:hooks:-event:kinto_signer.events.ReviewRequestedAfter:kinto-emailer:hooks:-event:kinto_remote_settings.signer.events.ReviewRequestedkinto-emailerkinto-emailer 2.0.0 → 2.1.0:https://github.com/Kinto/kinto-emailer/releases/tag/2.1.0New featuresAdd ability to use settings values in placeholders (Kinto/kinto-emailer#294).
For example:"subject": "Email from{settings[project_name]}"25.0.0 (2021-11-15)Breaking ChangesRemovedkinto_fxa,kinto_elasticsearch,kinto_megaphone, andkinto_redisfrom packages distribution (not officially maintained by Mozilla)Bug fixesFix docker-compose command that primes the PostgreSQL server for local testing (mozilla-services/kinto-dist#1930)kintokinto 14.5.1 → 14.6.0:https://github.com/Kinto/kinto/releases/tag/14.6.0New featuresNow sendCache-Controlresponse headers on trailing slash redirects. Seekinto.trailing_slash_redirect_ttl_secondssetting (Kinto/kinto#2895)DocumentationFix query params typo in docs/tutorials/synchronisation.rst (Kinto/kinto#2898)Ref #2295: update URL of demo server (Kinto/kinto#2899)kinto-changeskinto-changes 3.2.0 → 4.1.1:https://github.com/Kinto/kinto-changes/releases/tag/4.1.1Breaking ChangesNoResourceEventis sent anymore for changes in this virtual monitor/changes collection.New FeaturesSend cache control headers on old?_sinceredirects (cache for 1 day by default) (Kinto/kinto-changes#290)Bug fixesFix redirection for old?_sincevalues on changeset endpoints (fixes Kinto/kinto-changes#299)24.0.1 (2021-10-18)kintokinto 14.5.0 → 14.5.1:https://github.com/Kinto/kinto/releases/tag/14.5.1Bug fixesFix bundle of kinto-admin, using same versions of React as upstream package #GroundhogDay (Kinto/kinto#2880)24.0.0 (2021-10-08)Breaking changesRemovedkinto-amofrom packages distribution (#1915)kintokinto 14.4.1 → 14.5.0:https://github.com/Kinto/kinto/releases/tag/14.5.0New featureAddkinto.version_prefix_redirect_ttl_secondssetting in order to sendCache-Controlresponse headers on version prefix redirects (fixes Kinto/kinto#2874)23.3.1 (2021-09-20)kintokinto 14.4.0 → 14.4.1:https://github.com/Kinto/kinto/releases/tag/14.4.1Bug fixesFix bundle of kinto-admin, using same versions of React as upstream package (fixes mozilla/remote-settings#129)23.3.0 (2021-09-16)kintokinto 14.2.0 → 14.4.0:https://github.com/Kinto/kinto/releases/tag/14.4.0DocumentationFix “negociation” typo in docs/images/architecture.svg (Kinto/kinto#2813)Internal changesReplace ujson with rapidjson. (Kinto/kinto#2677)kinto-adminkinto-admin 1.30.0 → 1.30.2:https://github.com/Kinto/kinto-admin/releases/tag/v1.30.2Bug fixesRollback to Bootstrap 4 (Kinto/kinto-admin#2046, mozilla/remote-settings#127)23.2.0 (2021-06-14)kintokinto 14.1.3 → 14.2.0:https://github.com/Kinto/kinto/releases/tag/14.3.0DocumentationFix documentation about disabling endpoints (Kinto/kinto#2794)Internal changesNow compatible with Pyramid 2 (Kinto/kinto#2764)Upgrade kinto-admin to v1.30.0kinto-adminkinto-admin 1.29.0 → 1.30.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.30.0New feature(signoff) Added simple review page, accessible at/#/buckets/{bid}/collections/{cid}/simple-review(thanks @k88hudson! Kinto/kinto-admin#1885)23.1.2 (2021-04-07)Internal changesUpgraded sub-dependenciesSwitch topip-toolsto manage requirements and constraints (#1784)23.1.1 (2021-02-23)kinto-signerkinto-signer 8.0.0 → 8.0.1:https://github.com/Kinto/kinto-signer/releases/tag/8.0.1Bug fixesFix behaviour with preview collection when review is disabled (Kinto/kinto-signer#1327)23.1.0 (2021-02-22)kintokinto 14.1.3 → 14.2.0:https://github.com/Kinto/kinto/releases/tag/14.2.0New featureAllow rotation of the user password hmac secret without rotating the default bucket id hmac secret. (kinto/kinto#2647)kinto-adminkinto-admin 1.28.0 → 1.29.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.29.0Show spinner while loading history (kinto/kinto-admin#1701)Do not loose history list view context when switch to diff overview (kinto/kinto-admin#1702)Fix content of diff overview when records were deleted via plural endpoint (kinto/kinto-admin@45e69be)23.0.0 (2020-12-01)kinto-emailerkinto-emailer 1.1.0 → 2.0.0:https://github.com/Kinto/kinto-emailer/releases/tag/2.0.0Breaking ChangesRemove template variable validation (Kinto/kinto-emailer#235)22.0.0 (2020-11-19)kinto-signerkinto-signer 7.0.0 → 8.0.0:https://github.com/Kinto/kinto-signer/releases/tag/8.0.0New featureAdd comments to sign-off events attributes (Kinto/kinto-signer#1274)Breaking changesReplaced custom Canonical JSON withpython-canonicaljson-rs(Kinto/kinto-signer#1260)Removed CloudFront invalidation code (Kinto/kinto-signer#1256)kinto-changeskinto-changes 3.1.2 → 3.2.0:https://github.com/Kinto/kinto-changes/releases/tag/3.2.0New featuresAdd filtering support in monitor/changes changeset endpoint21.2.2 (2020-11-09)kintokinto 14.1.1 → 14.1.3:https://github.com/Kinto/kinto/releases/tag/14.1.3Internal ChangesUpgrade kinto-admin to v1.28.0kinto-adminkinto-admin 1.27.3 → 1.28.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.27.0Fix signoff comment popup (#1598)Distinguish signoff progress bar on readonly preview/main collections (#1597)21.2.1 (2020-11-04)kintokinto 14.1.0 → 14.1.1:https://github.com/Kinto/kinto/releases/tag/14.1.1Bug fixesFix broken Kinto admin (#2646)Internal ChangesUpgrade kinto-admin to v1.27.321.2.0 (2020-10-27)kintokinto 14.0.1 → 14.1.0:https://github.com/Kinto/kinto/releases/tag/14.1.0New featureAdd ability to disable explicit permissions at object level (ref Kinto/kinto#893). Usekinto.explicit_permissions = falseto only rely on inherited permissions (see settings docs)kinto-adminkinto-admin 1.26.1 → 1.27.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.27.0Fix portier login form (Kinto/kinto-admin#1553)Upgrade to Bootstrap v4 (Kinto/kinto-admin#1519)Replace Glyphicons with Bootstrap icons (Kinto/kinto-admin#1518)21.1.2 (2020-09-29)kinto-changeskinto-changes 3.1.1 → 3.1.2:https://github.com/Kinto/kinto-changes/releases/tag/3.1.2Bug fixesFix crash when collection is unknown and backend running in readonly mode (Kinto/kinto-changes#210)21.1.1 (2020-09-28)kinto-changeskinto-changes 3.1.0 → 3.1.1:https://github.com/Kinto/kinto-changes/releases/tag/3.1.1Bug fixesBypass storage when redirecting on old_since(Kinto/kinto-changes#209)21.1.0 (2020-09-23)kinto-changeskinto-changes 3.0.2 → 3.1.0:https://github.com/Kinto/kinto-changes/releases/tag/3.1.0New featuresRedirect clients whose?_sincevalue is too old (21 days by default)Add support for monitor/changes in changeset endpoints (fixes #173)Bug fixesFix validation rule for_sincequery parameter21.0.0 (2020-09-16)kintokinto 14.0.0 → 14.0.1:https://github.com/Kinto/kinto/releases/tag/14.0.1Bug fixesDo not break storage implementations (ie. kinto-redis) that rely onjsonclass attribute (removed in v14.0.0)Do not return 400 for?_since=null(fixes #2595)kinto-signerkinto-signer 6.1.0 → 7.0.0:https://github.com/Kinto/kinto-signer/releases/tag/7.0.0Breaking changesRecords cannot contain float values anymore.Setkinto.signer.allow_floats = trueto keep old behaviour.20.0.0 (2020-08-14)kintokinto 13.6.5 → 14.0.0:https://github.com/Kinto/kinto/releases/tag/14.0.0Drop thestrict_jsonoption, and useultrajsoneverywhereFix messages duplication in logs (#2513)Fix resource timestamp unicity (fixes #2472, #602)19.1.0 (2020-06-23)kinto-attachmentkinto-attachment 6.0.3 → 6.1.0:https://github.com/Kinto/kinto-attachment/releases/tag/6.1.0New featuresAllow to override mimetypes from config (#315)Bug fixesAdd missing content type when uploading to S319.0.2 (2020-06-02)kinto-changes 3.0.0 → 3.0.2:https://github.com/Kinto/kinto-changes/releases/tag/3.0.2Bug fixesInclude tombstones in changeset endpoint (Kinto/kinto-changes#175)19.0.1 (2020-05-18)amo2kintoamo2kinto 4.0.1 → 4.0.2:https://github.com/mozilla-services/amo2kinto/releases/tag/4.0.2Bug fixFix crash whenprefsfield is missing from addons entry19.0.0 (2020-04-20)kinto-changeskinto-changes 2.2.0 → 3.0.0:https://github.com/Kinto/kinto-changes/releases/tag/3.0.0Breaking changesSwitch changeset timestamp from ETag to integer (#168)18.2.1 (2020-03-31)kintokinto 13.6.4 → 13.6.5:https://github.com/Kinto/kinto/releases/tag/13.6.5Bug fixesSimplify get_objects_permissions query (#2475)18.2.0 (2020-03-29)kintokinto 13.6.3 → 13.6.4:https://github.com/Kinto/kinto/releases/tag/13.6.4Security fixFix permission checking with POST on plural endpoints (Kinto/kinto#2459)Bug fixesApply CORS headers to EOL responses (Kinto/kinto#2452)kinto-megaphonekinto-megaphone 0.4.1 → 0.5.0:https://github.com/Kinto/kinto-megaphone/releases/tag/0.5.0New featuresAdd option to exclude certain resources (Kinto/kinto-megaphone#75)kinto-changeskinto-changes 2.1.1 → 2.2.0:https://github.com/Kinto/kinto-changes/releases/tag/2.2.0New featuresAdd changeset endpoint (Kinto/kinto-changes#154)Bug fixesFix crash withIf-None-Match:*(Kinto/kinto-changes#158)kinto-signerkinto-signer 6.0.2 → 6.1.0:https://github.com/Kinto/kinto-signer/releases/tag/6.1.0Send resource events on rollback (#894)kinto-attachmentkinto-attachment 6.0.2 → 6.0.3:https://github.com/Kinto/kinto-attachment/releases/tag/6.0.3Bug fixesFix broken compatibility with Kinto 13.6.418.1.0 (2020-02-04)kintokinto 13.6.2 → 13.6.3:https://github.com/Kinto/kinto/releases/tag/13.6.3Bug fixesHistory entries datetimes now carry timezone informationFixkinto initcommand (Kinto/kinto#2375)Fix float strings parsing in certain URL query parameters (Kinto/kinto#2392)kinto-adminkinto-admin 1.25.2 → 1.26.1:https://github.com/Kinto/kinto-admin/releases/tag/v1.26.1Close modal after rollback (Kinto/kinto-admin#1134)Remove the button to refresh signature (Kinto/kinto-admin#1166)18.0.2 (2020-01-07)kinto-changeskinto-changes 2.1.0 → 2.1.1:https://github.com/Kinto/kinto-changes/releases/tag/2.1.1Bug fixesUse explicit resource timestamp from DB instead of event payloadkinto-megaphonekinto-megaphone 0.4.0 → 0.4.1:https://github.com/Kinto/kinto-megaphone/releases/tag/0.4.1Bug fixesSend resource timestamp instead of event timestamp (fixes #65)kinto-signerkinto-signer 6.0.1 → 6.0.2:https://github.com/Kinto/kinto-signer/releases/tag/6.0.2Bug fixesDo not recreate tombstones on rollback (fixes Kinto/kinto-signe#832)18.0.1 (2019-12-05)kinto-signerkinto-signer 6.0.0 → 6.0.1:https://github.com/Kinto/kinto-signer/releases/tag/6.0.1Bug fixesFix records dropped since Kinto/kinto-signer#780 (Kinto/kinto-signer#816)18.0.0 (2019-11-15)kinto-signerkinto-signer 5.2.1 → 6.0.0:https://github.com/Kinto/kinto-signer/releases/tag/6.0.0Breaking changesRecords timestamps are now bumped when copied to preview/destination collections (Kinto/kinto-signer#779)kinto-attachmentkinto-attachment 6.0.1 → 6.0.2:https://github.com/Kinto/kinto-attachment/releases/tag/6.0.2Bug fixesFix attachment deletion not being committed (fixes #149)17.5.2 (2019-11-04)kintokinto 13.6.1 → 13.6.2:https://github.com/Kinto/kinto/releases/tag/13.6.2Bug fixesSecond attempt at fixing loading of Kinto Admin (Kinto/kinto#2322)17.5.1 (2019-10-31)kintokinto 13.6.0 → 13.6.1:https://github.com/Kinto/kinto/releases/tag/13.6.1Bug fixesFix loading of Kinto Admin (Kinto/kinto#2320)17.5.0 (2019-10-28)kintokinto 13.5.0 → 13.6.0:https://github.com/Kinto/kinto/releases/tag/13.6.0New FeaturesAdd Content-Security-Policy header (Kinto/kinto#2303)kinto-adminkinto-admin 1.25.1 → 1.25.2:https://github.com/Kinto/kinto-admin/releases/tag/v1.25.2Bug fixesFix status and rollback in preview/destination collections (Kinto/kinto-admin#1098)17.4.0 (2019-10-04)kinto-signerkinto-signer 5.2.0 → 5.2.1:https://github.com/Kinto/kinto-signer/releases/tag/5.2.1Fix crash in collection deletion safety check (Kinto/kinto-signer#709)kinto-megaphonekinto-megaphone 0.3.0 → 0.4.0:https://github.com/Kinto/kinto-megaphone/releases/tag/0.4.0Log version value when broadcasting to Megaphone17.3.0 (2019-09-26)kintokinto 13.4.0 → 13.5.0:https://github.com/Kinto/kinto/releases/tag/13.5.0Internal changesAdd a warning when using the accounts plugin with the memory backend. (Kinto/kinto#2258)Upgrade kinto-admin tov1.25.1kinto-adminkinto-admin 1.25.0 → 1.25.1:https://github.com/Kinto/kinto-admin/releases/tag/v1.25.1Bug fixesFix inverted diff (bis) (Kinto/kinto-admin#988)kinto-signerkinto-signer 5.1.0 → 5.2.0:https://github.com/Kinto/kinto-signer/releases/tag/5.2.0New featuresLog Autograph requests references (Kinto/kinto-signer#687)Set status of new collections to signed (Kinto/kinto-signer#683)Fix collection deletion safety check (Kinto/kinto-signer#684)17.2.0 (2019-09-12)kintokinto 13.2.2 → 13.4.0:https://github.com/Kinto/kinto/releases/tag/13.4.0Bug fixesPrevent password to be modified on modification of accounts metadata (Kinto/kinto#2058)Fix unexpected exception in/__version__endpointAddContent-Typeto default_cors_headers Kinto/kinto#2220)Fix crash with non-allowed requests on__user_data__(Kinto/kinto#2063)Fix multiple event listeners on READ action (Kinto/kinto#1755)New featuresAllow StatsD counter to be incremented by an arbitrary numberkinto-adminkinto-admin 1.24.1 → 1.25.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.25.0New featuresRollback changes button (Kinto/kinto-admin#520)Bug fixesRemove kinto-signer from filtered history (Kinto/kinto-admin#1015)Since parameter not taken into account in history list (Kinto/kinto-admin#1007)Fix inverted diff (Kinto/kinto-admin#988)kinto-signerkinto-signer 5.0.1 → 5.1.0:https://github.com/Kinto/kinto-signer/releases/tag/5.1.0New FeaturesAdd StatsD counter for number of changes approved (Kinto/kinto-signer#606)Prevent deletion of preview or destination if in use (Kinto/kinto-signer#641)Add ability to rollback changes (Kinto/kinto-signer#260)17.1.4 (2019-07-30)kinto-signerkinto-signer 5.0.0 → 5.0.1:https://github.com/Kinto/kinto-signer/releases/tag/5.0.1Bug FixesMake sure the DB transaction is rolledback when signing fails (Kinto/kinto-signer#591)17.1.3 (2019-07-04)kintokinto 13.1.1 → 13.2.2:https://github.com/Kinto/kinto/releases/tag/13.2.2Bug fixesFix apparence of Admin notifications (Kinto/kinto#2191)17.1.2 (2019-07-03)kinto-fxa 2.5.2 → 2.5.3:https://github.com/Kinto/kinto-fxa/releases/tag/2.5.3OptimizationTry to keepOAuthClientaround longer to take advantage of HTTP keepalives (Kinto/kinto-fxa#133).17.1.1 (2019-06-25)kinto-adminkinto-admin 1.24.0 → 1.24.1:https://github.com/Kinto/kinto/releases/tag/1.24.1Bug fixesFix #977: Fix copy to clipboard in Firefox (#980)Fix #978: Move notifications below header bar (#979)17.1.0 (2019-06-19)kinto-adminkinto-admin 1.23.0 → 1.24.0:https://github.com/Kinto/kinto/releases/tag/1.24.0New featuresFix #501: UI notifications improvements (Kinto/kinto-admin#932)Fix #935: Show records changes without having to request review (Kinto/kinto-admin#943)Fix #915: Add button to copy authentication headerFix #443: Collapse diffs and only show 3 lines of context (Kinto/kinto-admin#960)Fix #467: Add links to source/preview/destination collections (Kinto/kinto-admin#959)Bug fixesFix #938: Show login form on authentication error (Kinto/kinto-admin#939)Fix #686: Do not scroll to bottom on pagination load (Kinto/kinto-admin#947)Fix #712: fix history pagination loading (Kinto/kinto-admin#948)Fix #949: fix history list from signoff diff details (Kinto/kinto-admin#950)Fix behaviour of servers history in login page (Kinto/kinto-admin#946)17.0.0 (2019-05-27)kintokinto 12.0.1 → 13.1.1:https://github.com/Kinto/kinto/releases/tag/13.1.1Breaking changesUpdate Kinto OpenID plugin to redirect with a base64 JSON encoded token. (#1988).This will work with kinto-admin 1.23New featuresExpose the user_profile in the user field of the hello page. (#1989)Add an “account validation” option to the accounts plugin. (#1973)Add avalidateendpoint at/accounts/{userid}/validate/{validationkey}which can be used to validate an account when theaccount
validationoption is enabled on the accounts plugin.Add areset-passwordendpoint at/accounts/(userid)/reset-passwordwhich can be used to reset a user’s password when theaccount validationoption is enabled on the accounts plugin.Bug fixesFix cache heartbeat test (fixes Kinto/kinto#2107)Fix support ofsqlalchemy.pool.NullPoolfor PostgreSQL backends.
The defaultpool_sizeof 25 is maintained on the default pool class
(QueuePoolWithMaxBacklog). When using custom connection pools, please
refer to SQLAlchemy documentation for default values.Fixed two potential bugs relating to mutable default values.Fix crash on validating records with errors in arrays (#1508)Fix crash on deleting multiple accounts (#2009)Loosen up the Content-Security policies in the Kinto Admin plugin to prevent Webpack inline script to be rejected (fixes #2000)security: Fix a pagination bug in the PostgreSQL backend that could leak records between collectionskinto-rediskinto-redis 2.0.0 → 2.0.1:https://github.com/Kinto/kinto-redis/releases/tag/2.0.1Bug fixespool_sizesetting should remain optional16.1.0 (2019-04-10)Add kinto-redis to the distribution (fixes #653). This allows use of
the kinto-redis cache backend. The Docker compose configuration now
uses Redis for the cache backend in order to ensure it works.16.0.0 (2019-04-04)kinto-signerkinto-signer 4.0.1 → 5.0.0:https://github.com/Kinto/kinto-signer/releases/tag/5.0.0Breaking changesDo not invalidate CloudFront on signature refresh (Kinto/kinto-signer#430)15.1.0 (2019-02-21)kinto-changeskinto-changes 2.0.0 → 2.1.0:https://github.com/Kinto/kinto-changes/releases/tag/2.1.0SendCache-Controlheaders if cache busting query parameters or concurrency control request headers are sent (Kinto/kinto-changes#66)kinto-emailerkinto-emailer 1.0.2 → 1.1.0:https://github.com/Kinto/kinto-emailer/releases/tag/1.1.0Allow regexp in filters values when selecting events (Kinto/kinto-emailer#88)15.0.2 (2019-01-30)kinto-signerkinto-signer 4.0.0 → 4.0.1:https://github.com/Kinto/kinto-signer/releases/tag/4.0.1Security issueSigner parameters were displayed in capabilities. Fixed in Kinto/kinto-signer#326.15.0.1 (2019-01-25)Bug fixesInclude kinto-fxa script dependencies so that the
process-account-events script can run. (#507)15.0.0 (2019-01-22)kintokinto 11.1.0 → 12.0.1:https://github.com/Kinto/kinto/releases/tag/12.0.1Breaking changesRemove Python 3.5 support and upgrade to Python 3.6. (Kinto/kinto#1886)Removerecordfrom UnicityError class (Kinto/kinto#1919). This enabled us to fix Kinto/kinto#1545.Storage backend API has changed, notions of collection and records were replaced
by the generic termsresourceandobject. Plugins that subclass the internalShareableResourceclass may also break.GET requests no longer include theTotal-Recordsheader. To get a count in a collection
you need to do a HEAD request. And the new header name isTotal-Objects. (Kinto/kinto#1624)Remove theUserResourceclass. AndShareableResourceis now deprecated in
favor ofResource.Removedkinto.core.utils.parse_resource()`.Use ``kinto.core.utils.view_lookup_registry()instead (Kinto/kinto#1828)Remove delete-collection command (Kinto/kinto#1959)API is now at version1.21. SeeAPI changelog.New featuresAdd auser-dataendpoint at/__user_data__/which can be used to delete all data
associated with a principal. This might be helpful for pursuing GDPR
compliance, for instance. (Kinto/kinto#442.)Return a500 Internal Erroron__version__instead of 404 if the version file
cannot be found (Kinto/kinto#1841)Bug FixesLike query now returns 400 when a non string value is used. (Kinto/kinto#1899)Record ID is validated if explicitly mentioned in the collection schema (Kinto/kinto#1942)The Memory permission backend implementation ofremove_principalis now less generous with what it removes (Kinto/kinto#1955).Fix bumping of tombstones timestamps when deleting objects in PostgreSQL storage backend (Kinto/kinto#1981)Fix ETag header in responses of DELETE on plural endpoints (Kinto/kinto#1981)Fix thehttp_api_versionexposed in the/v1/endpoint. The
version1.20was getting parsed as a number1.2.Fixrecord:createnot taken into account from settings. (Kinto/kinto#1813)DocumentationChange PostgreSQL backend URLs to bepostgresql://instead of the deprecatedpostgres://Add documentation on troubleshooting Auth0 multiauth issue. (Kinto/kinto#1889)kinto-attachmentkinto-attachment 6.0.0 → 6.0.1:https://github.com/Kinto/kinto-attachment/releases/tag/6.0.1Bug fixesFix support of Kinto >= 12kinto-changeskinto-changes 1.3.0 → 2.0.0:https://github.com/Kinto/kinto-changes/releases/tag/2.0.0Breaking changesRequire Kinto >= 12kinto-signerkinto-signer 3.3.8 → 4.0.0:https://github.com/Kinto/kinto-signer/releases/tag/4.0.0Bug fixesFix inconsistencies when source records are deleted via the DELETE /records endpoint (Kinto/kinto-signer#287)Breaking changesRequire Kinto >= 12.0.014.0.1 (2018-11-28)kinto-signerkinto-signer 3.3.7 → 3.3.8:https://github.com/Kinto/kinto-signer/releases/tag/3.3.7Bug fixesFix “RuntimeError: OrderedDict mutated during iteration” (#283).14.0.0 (2018-11-22)Breaking changeskinto-ldapis not shipped in this distribution anymore (#369)kinto-signerkinto-signer 3.3.6 → 3.3.7:https://github.com/Kinto/kinto-signer/releases/tag/3.3.7Bug fixesIfto_review_enabledis False, the preview collection is not created, nor updated (Kinto/kinto-signer#279)Show collections with specific settings in capabilities13.0.0 (2018-11-12)kinto-megaphonekinto-megaphone 0.2.3 → 0.3.0:https://github.com/Kinto/kinto-megaphone/releases/tag/0.3.0New features/Breaking changesAdd configuration to restrict what kinto-changes records cause
notifications (#13). This configuration ismandatory.12.0.2 (2018-11-08)kinto-signerkinto-signer 3.3.5 → 3.3.6:https://github.com/Kinto/kinto-signer/releases/tag/3.3.6Bug fixesFix Canonical JSON serialization of zeroAllow installingkinto-signerwith--no-depsin order to importkinto_signer.serializer.canonical_json()without the Pyramid ecosystemkinto-megaphonekinto-megaphone 0.2.2 → 0.2.3:https://github.com/Kinto/kinto-megaphone/releases/tag/0.2.3Remove a broken log message (Kinto/kinto-megaphone#10).12.0.1 (2018-11-07)kinto-megaphonekinto-megaphone 0.2.0 → 0.2.2:https://github.com/Kinto/kinto-megaphone/releases/tag/0.2.2Add a few log messages to help try to troubleshoot.0.2.1 was a bogus release. Skip to 0.2.2.12.0.0 (2018-11-06)kinto-attachmentkinto-attachment 5.0.0 → 6.0.0:https://github.com/Kinto/kinto-attachment/releases/tag/6.0.0Breaking changesDo not allow any file extension by default. Now allow documents+images+text+data (Kinto/kinto-attachment#130)Bug fixesFix heartbeat when allowed file types is notany(Kinto/kinto-attachment#148)kinto-signerkinto-signer 3.3.4 → 3.3.5:https://github.com/Kinto/kinto-signer/releases/tag/3.3.5Bug fixesFix Canonical JSON about float numbers to conform withECMAScript V6 notation11.1.0 (2018-10-25)kintokinto 11.0.0 → 11.1.0:https://github.com/Kinto/kinto/releases/tag/11.1.0New featuresAdd ability to configure theproject_namein settings, shown in theroot URL(Kinto/kinto#1809)Use.as bucket/collection separator in cache control settings (Kinto/kinto#1815)Bug fixesFix missing favicon and inline images in kinto-admin pluginInternal changesUse mock from the standard library.Blackify the whole code base (Kinto/kinto#1799, huge thanks to @Cnidarias for this!)Upgrade kinto-admin to v1.22kinto-signerkinto-signer 3.3.3 → 3.3.4:https://github.com/Kinto/kinto-signer/releases/tag/3.3.4Bug fixesPrevent events to be sent if status is not changed (Kinto/kinto-signer#268)11.0.0 (2018-10-22)kintokinto 10.1.2 → 11.0.0:https://github.com/Kinto/kinto/releases/tag/11.0.0Breaking changesThebasicauthpolicy is not used by default anymore (#1736)If your application relies on this specific behaviour, you now have to add explicitly settings:multiauth.policies=basicauthButit is recommendedto use other authentication policies like theOpenID Connector theaccountsplugin instead.# Enable plugin.kinto.includes=kinto.plugins.accounts# Enable authenticated policy.multiauth.policies=accountmultiauth.policy.account.use=kinto.plugins.accounts.AccountsPolicy# Allow anyone to create their own account.kinto.account_create_principals=system.EveryoneYou will find more details theauthentication settings section of the documentationBug fixesFix crash when querystring filter contains NUL (0x00) character (Kinto/kinto#1704)Many bugs were fixed in the Kinto Admin UI (seev1.21.0)DocumentationHuge refactor of documentation about authentication (#1736)kinto-adminkinto-admin 1.19.2 → 1.21.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.21.0New featuresRemove brownish theme (Kinto/kinto-admin#658)Button labels consistency (Kinto/kinto-admin#659)Fix #118: order buckets alphabetically (Kinto/kinto-admin#650)Fix #170: show total number of records (Kinto/kinto-admin#657)Fix #529, Fix #617, Fix #618: Better handling of Kinto internal fields (Kinto/kinto-admin#626)Fix #66: Show record id in list by default (Kinto/kinto-admin#653)Fix #401: Show create bucket only if allowed (Kinto/kinto-admin#639)Fix #86: Show create collection only if allowed (Kinto/kinto-admin#651)Fix #74: Add a refresh button for bucket collections list (Kinto/kinto-admin#640)Bug fixesFix #641: Fix OpenID auth flow (Kinto/kinto-admin#642)Fix #648: Restore login failed detection (Kinto/kinto-admin#649)Fix #643, Fixup #630: fix crash when listing default bucket collections (Kinto/kinto-admin#647)Fix #609: Fix presence of ID value in record edit forms (Kinto/kinto-admin#611)Fix #619: fix display of attachment info (Kinto/kinto-admin#623)Fix #540, Fix #573: prevent root perm to become undefined bucket (Kinto/kinto-admin#631)Fix #584: remote Portier note about server install (Kinto/kinto-admin#632)Fix #629: always show default bucket (Kinto/kinto-admin#630)Fixup #630: hide default bucket if anonymousFix #459: bucket readonly filter with writable collection (Kinto/kinto-admin#627)kinto-changeskinto-changes 1.2.1 → 1.3.0:https://github.com/Kinto/kinto-changes/releases/tag/1.3.0New featureAdd ability to configure cache control headers (Kinto/kinto-changes#47)10.0.2 (2018-10-10)kinto-signer 3.3.2 → 3.3.3:https://github.com/Kinto/kinto-signer/releases/tag/3.3.3Bug fixesAllow refresh of signature even if the collection was never signed (#267)10.0.1 (2018-10-04)kintokinto 10.1.1 → 10.1.2:https://github.com/Kinto/kinto/releases/tag/10.1.2Internal changesUpgrade kinto-admin to v1.20.2kinto-adminkinto-admin 1.20.1 → 1.20.2:https://github.com/Kinto/kinto-admin/releases/tag/1.20.2Bug fixesFix OpenID login in Kinto-Admin (Kinto/kinto-admin#641)10.0.0 (2018-09-12)kintokinto 9.2.3 → 10.1.1:https://github.com/Kinto/kinto/releases/tag/10.1.1Breaking changeskinto.core.events.get_resource_eventsnow returns a generator
rather than a list.New featuresInclude Python 3.7 support.kinto.core.events.notify_resource_eventnow supportsresource_nameandresource_data. These are useful when
emitting events from one view “as though” they came from another
view.Resource events can now trigger other resource events, which are
handled correctly. This might be handy if one resource wants to
simulate events on another “virtual” resource, as inkinto-changes.The registry now has a “command” attribute during one-off commands
such askinto migrate. This can be useful for plugins that want
to behave differently during a migration, for instance. (#1762)Bug fixesRaise a configuration error if thekinto.plugin.accountsis included without being enabled in policies.
Without thiskinto-adminwould present a confusing login experience (fixes #1734).Deleting a collection doesn’t delete access_control_entrries for its children (fixes #1647)Fix for adding extra OpenId providers (fixes #1509)Change the meaning ofevent.payload["timestamp"]. Previously it
was@reify‘d, which meant that it was calculated from before
whatever thing triggered the event. Now we use a “fresh”
timestamp. (Fixes #1469.)Internal changesUpgrade kinto-admin to v1.20.0kinto-changeskinto-changes 1.1.0 → 1.2.1:https://github.com/Kinto/kinto-changes/releases/tag/1.2.1New featureEvents are now generated on the monitor/changes collection (#41).Bug fixesDon’t do anything during amigratecommand (fixes #43).Internal changesGet rid of sixkinto-megaphonekinto-megaphone 0.2.0:https://github.com/Kinto/kinto-megaphone/releases/tag/0.2.0Addition of this plugin.kinto-signerkinto-signer 3.3.0 → 3.3.2:https://github.com/Kinto/kinto-signer/releases/tag/3.3.2(Skipping 3.3.1 because of a mistake made during its release…)Internal changesSupport kinto 10.0.0, which allowed some simplifications (#264).9.0.1 (2018-08-01)Change CircleCI container in an attempt to successfully build a release.9.0.0 (2018-07-31)kinto-attachmentkinto-attachment 4.0.0 → 5.0.0:https://github.com/Kinto/kinto-attachment/releases/tag/5.0.0Breaking changesGzipContent-Encodingis not used anymore when uploading on S3 (fixes #144)Internal changesHeartbeat now usesutils.save_file()for better detection of configuration or deployment errors (fixes #146)8.0.2 (2018-07-26)Fix CircleCI job execution for tags (fixes #233)8.0.1 (2018-07-25)Fix Docker Hub publication issue from CircleCI8.0.0 (2018-07-25)kinto-signerkinto-signer 3.2.5 → 3.3.0:https://github.com/Kinto/kinto-signer/releases/tag/3.3.0New featuresAllow to refresh the signature when the collection has pending changes (Kinto/kinto-signer#245)kinto-attachmentkinto-attachment 3.0.1 → 4.0.0:https://github.com/Kinto/kinto-attachment/releases/tag/4.0.0Breaking changesGzipContent-Encodingis now always enabled when uploading on S3 (Kinto/kinto-attachment#139)Overriding settings via the querystring (eg.?gzipped,randomize,use_content_encoding) is not possible anymore7.3.1 (2018-07-05)kintokinto 9.2.2 → 9.2.3:https://github.com/Kinto/kinto/releases/tag/9.2.3Bug fixesUpgrade to kinto-admin v1.19.2kinto-adminkinto-admin 1.19.1 → 1.19.2:https://github.com/Kinto/kinto-admin/releases/tag/1.19.2Bug fixesBetter auth error message (kinto/kinto-admin#566)Fix history diff viewing (kinto/kinto-admin#563)kinto-signerkinto-signer 3.2.4 → 3.2.5:https://github.com/Kinto/kinto/releases/tag/3.2.5Bug fixesFixscripts/e2e.pyscript to work with per-bucket configuration (kinto/kinto-signer#255)Prevent kinto-attachment to raise errors when attachments are updated (kinto/kinto-signer#256)kinto-fxakinto-fxa 2.5.1 → 2.5.2:https://github.com/Kinto/kinto-fxa/releases/tag/2.5.2Bug fixesFix theprocess-account-eventsscript to take client user ID suffixes into account (kinto/kinto-fxa#61)kinto-attachmentkinto-attachment 3.0.0 → 3.0.1:https://github.com/Kinto/kinto-attachment/releases/tag/3.0.1Bug fixesDo not delete attachment when record is deleted ifkeep_old_filessetting is true (kinto/kinto-attachment#137)amo2kintoamo2kinto 3.2.1 → 4.0.1:https://github.com/mozilla-services/amo2kinto/releases/tag/4.0.1Bug fixFix the XML item ID when squashing entries by addon ID (#88)Fix the affected users section (#87), thanks @rctgamer3!Breaking changesRemoved the AWS lambda code in charge of updating the collection schema (#85)7.3.0 (2018-06-28)kintokinto 9.1.1 → 9.2.2:https://github.com/Kinto/kinto/releases/tag/9.2.2APIJSON schemas can now be defined in the bucket metadata and will apply to every
underlying collection, group or record (Kinto/kinto#1555)Bug fixesFixed bug where unresolved JSON pointers would crash server (Kinto/kinto#1685)New featuresKinto Admin plugin now supports OpenID ConnectLimit network requests to current domain in Kinto Admin usingContent-Security PoliciesPrompt for cache backend type inkinto init(Kinto/kinto#1653)kinto.core.utils now has new featuresroute_path_registryandinstance_uri_registry, suitable for use when you don’t
necessarily have arequestobject around. The existing functions
will remain in place.openid plugin will carryprompt=nonequerystring parameter if appended
to authorize endpoint.kinto-adminkinto-admin 1.17.2 → 1.19.1:https://github.com/Kinto/kinto-admin/releases/tag/1.19.1New featuresAdd support of OpenID Connect (Kinto/kinto-admin#460)Fix accounts capability detection (Kinto/kinto-admin#558)Remember last used authentication method (Kinto/kinto-admin#525)kinto-fxakinto-fxa 2.5.0 → 2.5.1:https://github.com/Kinto/kinto-fxa/releases/tag/2.5.1Bug fixesSet up metrics on theprocess-account-eventsscript (#57).Set up logging on thekinto_fxa.scriptsprograms (#58).7.2.1 (2018-05-30)kinto-signerkinto-signer 3.2.3 → 3.2.4:https://github.com/Kinto/kinto-signer/releases/tag/3.2.4Bug fixesFix CloudFront invalidation request with multiple paths (Kinto/kinto-signer#253)7.2.0 (2018-05-23)kintokinto 9.0.1 → 9.1.1:https://github.com/Kinto/kinto/releases/tag/9.1.1APIBatch endpoint now checks for and aborts any parent request if subrequest encounters409 Conflictconstraint violation (Kinto/kinto#1569)Bug fixesFix a bug where you could not reach the last records viaNext-Headerwhen deleting with pagination (Kinto/kinto#1170)Slight optimizations on theget_all()query in the Postgres
storage backend which should make it faster for result sets that
have a lot of records (Kinto/kinto#1622). This is the first change meant to
address Kinto/kinto#1507, though more can still be done.Fix a bug where the batch route accepted all content-types (Kinto/kinto#1529)kinto-adminkinto-admin 1.17.1 → 1.17.2:https://github.com/Kinto/kinto-admin/releases/tag/1.17.2Bug fixesDon’t request records as part of the permissions (Kinto/kinto-admin#536)Fix strange validation errors on collection forms (Kinto/kinto-admin#539)7.1.0 (2018-05-17)kintokinto 9.0.0 → 9.0.1:https://github.com/Kinto/kinto/releases/tag/9.0.0Update version of kinto-adminkinto-adminkinto-admin 1.17.0 → 1.17.1:https://github.com/Kinto/kinto-admin/releases/tag/1.17.1Bug fixesFetch capabilities from singleServer if set (Kinto/kinto-admin#532)kinto-fxakinto-fxa 2.4.1 → 2.5.0:https://github.com/Kinto/kinto-fxa/releases/tag/2.5.0New featuresIntroduce new kinto_fxa.scripts. Right now the only script available
is process-account-events, which listens to an SQS queue for user
delete events and deletes data from that user’s default bucket, in
order to comply with GDPR. (Kinto/kinto-fxa#55)7.0.2 (2018-05-09)kinto-signerkinto-signer 3.2.2 → 3.2.3:https://github.com/Kinto/kinto-signer/releases/tag/3.2.3Bug fixesFix crash on collection delete (Kinto/kinto#248)7.0.1 (2018-05-02)kinto-signerkinto-signer 3.2.1 → 3.2.2:https://github.com/Kinto/kinto-signer/releases/tag/3.2.2Bug fixesCleanup preview and destination when source collection is deleted (kinto/kinto-signer#114)7.0.0 (2018-04-25)kintokinto 8.2.3 → 9.0.0:https://github.com/Kinto/kinto/releases/tag/9.0.0APIIntroducecontainsandcontains_anyfilter operators (Kinto/kinto#343).API is now at version1.19. SeeAPI changelog.Breaking changesThe storage class now exposesbump_timestamp()andbump_and_store_timestamp()methods
so that memory based storage backends can use them. (Kinto/kinto#1596)DocumentationVersion number is taken from package in order to ease release process (Kinto/kinto#1594)Copyright year is now dynamic (Kinto/kinto#1595)kinto-adminkinto-admin 1.15.0 → 1.17.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.17.0New featuresGet the list of auth methods supported by the server when first rendering the auth form (Kinto/kinto-admin#331, Kinto/kinto-admin#497, Kinto/kinto-admin#516)Date are now formatted as en-US (Kinto/kinto-admin#508)Bug fixesFix signoff workflow info when kinto-signer running on server is >= 3.2 (Kinto/kinto-admin#500)Better detection of authentication failures (Kinto/kinto-admin#330)Fix history table apparence (Kinto/kinto-admin#511)Wrap signoff comment (Kinto/kinto-admin#490)kinto-signerkinto-signer 3.0.0 → 3.2.1:https://github.com/Kinto/kinto-signer/releases/tag/3.2.1New featuresCloudfront invalidation paths can be configured (kinto/kinto-signer#231)User does not have to be in thereviewersgroup to refresh a signature (kinto/kinto-signer#233)Give write permission to reviewers/editors groups on newly created collections (kinto/kinto-signer#237)The preview collection signature is now refreshed along the destination (kinto/kinto-signer#236)Tracking fields are now documented and new ones were added (last_edit_date,last_request_review_date,last_review_dateandlast_signature_date) (kinto/kinto-signer#137)DeprecationsThe collection specific settings must now be separated with.instead of_.
(eg. usekinto.signer.staging.certificates.editors_groupinstead ofkinto.signer.staging_certificates.editors_group) (kinto/kinto-signer#224)Internal changesNow log an INFO message when the CloudFront invalidation request is sent (kinto/kinto-signer#238)kinto-elasticsearchkinto-elasticsearch 0.3.0 → 0.3.1:https://github.com/Kinto/kinto-elasticsearch/releases/tag/0.3.1Bug fixesFix the reindex get_paginated_records function. (Kinto/kinto-elasticsearch#61)kinto-attachmentkinto-attachment 2.1.0 → 3.0.0:https://github.com/Kinto/kinto-attachment/releases/tag/3.0.0Breaking changesThe collection specificuse_content_encodingsetting must now be separated with.instead of_.
(eg. usekinto.attachment.resources.bid.cid.use_content_encodinginstead ofkinto.attachment.resources.bid_cid.use_content_encoding) (fixes kinto/kinto-attachment#134)6.0.2 (2018-04-06)kintokinto 8.2.2 → 8.2.3:https://github.com/Kinto/kinto/releases/tag/8.2.3Security fixSince Kinto 8.2.0 theaccountplugin had a security flaw where the password wasn’t verified during the session duration.
It now validates the account user password even when the session is cached (Kinto/kinto#1583).6.0.1 (2018-03-28)kintokinto 8.2.0 → 8.2.2:https://github.com/Kinto/kinto/releases/tag/8.2.2Internal changesUpgrade to kinto-admin 1.15.1kinto-adminkinto-admin 1.15.0 → 1.15.1:https://github.com/Kinto/kinto-admin/releases/tag/v1.15.1Bug fixes[signoff] Fix bug where users who are part of “editors” and “reviewers” groups do not get shown the “request review” or “approve” buttons (Kinto/kinto-admin#495)6.0.0 (2018-03-09)kintokinto 8.1.5 → 8.2.0:https://github.com/Kinto/kinto/releases/tag/8.2.0New featuresAdd Openid connect support (#939, #1425). SeedemoAccount plugin now caches authentication verification (Kinto/kinto#1413)Bug fixesFix missing principals from user info in root URL when default bucket plugin is enabled (fixes #1495)Fix crash in Postgresql when the value of url param is empty (Kinto/kinto#1305)kinto-adminkinto-admin 1.14.0 → 1.15.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.15.0New features[signoff] Fixes #461: Support per-bucket configuration (Kinto/kinto-admin#466)Bug fixesFix list permissions if anonymous (Kinto/kinto-admin#463)[signoff] Fix workflow info parameter types (Kinto/kinto-admin#470)kinto-signerkinto-signer 2.2.0 → 3.0.0:https://github.com/Kinto/kinto/releases/tag/3.0.0Breaking changesThe settingsreviewers_group,editors_group,to_review_enabled,group_check_enabledprefixed with_are not supported anymore. (eg. usekinto.signer.staging_certificates.editors_groupinstead ofkinto.signer.staging_certificates_editors_group)New featuresAllow spaces in resources configurations, and separate URIs with->for better readability (fixes Kinto/kinto-signer#148, fixes Kinto/kinto-signer#88)Allow configuration ofreviewers_group,editors_group,to_review_enabled,group_check_enabledby bucketAllow placeholders{bucket_id}and{collection_id}inreviewers_group,editors_group,to_review_enabled, andgroup_check_enabledsettings
(e.g.group:/buckets/{bucket_id}/groups/{collection_id}-reviewers) (fixes Kinto/kinto-signer#210)Allow configuration by bucket. Every collections in the source bucket will be reviewed/signed (fixes Kinto/kinto-signer#144).Editors and reviewers groups are created automatically when source collection is created (fixes Kinto/kinto-signer#213)Preview and destination collections are automatically signed when source is created (fixes Kinto/kinto-signer#226)Bug fixesFix permissions of automatically created preview/destination bucket (fixes Kinto/kinto-signer#155)5.2.1 (2018-02-09)kintokinto 8.1.4 → 8.1.5:https://github.com/Kinto/kinto/releases/tag/8.1.5Bug fixesRestore “look before you leap” behavior in the Postgres storage
backend create() method to check whether a record exists before
running the INSERT query (#1487). This check is “optimistic” in the sense
that we can still fail to INSERT after the check succeeded, but it
can reduce write load in configurations where there are a lot of
create()s (i.e. when using the default_bucket plugin).5.2.0 (2018-02-07)kinto-amokinto-amo 0.4.0 → 1.0.1:https://github.com/mozilla-services/kinto-amo/releases/tag/1.0.1Bug fixesFix last update / last modified of blocklist XML endpoint (fixes mozilla-services/kinto-amo#25)New featuresPass application ID and version to amo2kinto code when generating blocklist.xml (mozilla-services/kinto-amo#23)Filter add-ons and plugins in v3 based on the requesting application and version. (mozilla-services/amo2kinto#74)Stop exporting cert items to Firefox 58 and above, where they aren’t used. (mozilla-services/amo2kinto#75)5.1.4 (2018-01-31)kintokinto 8.1.3 → 8.1.4:https://github.com/Kinto/kinto/releases/tag/8.1.4Bug fixesAllow inherited resources to set a custom model instance before instantiating (fixes #1472)Fix collection timestamp retrieval when the stack is configured as readonly (fixes #1474)5.1.3 (2018-01-26)kintokinto 8.1.2 → 8.1.3:https://github.com/Kinto/kinto/releases/tag/8.1.3Bug fixesOptimize the PostgreSQL permission backend’sdelete_object_permissionsfunction in the case where we are only
matching one object_id (or object_id prefix).5.1.2 (2018-01-24)kintokinto 8.1.1 → 8.1.2:https://github.com/Kinto/kinto/releases/tag/8.1.2Bug fixesFlushing a server no longer breaks migration of the storage backend
(#1460). If you have ever flushed a server in the past, migration
may be broken. This version of Kinto tries to guess what version of
the schema you’re running, but may guess wrong. Seehttps://github.com/Kinto/kinto/wiki/Schema-versionsfor some
additional information.Internal changesWe now allow migration of the permission backend’s schema.Operational concernsThe schema for the Postgres permission backend has changed.This
changes another ID column to use the “C” collation, which should
speed up thedelete_object_permissionsquery when deleting a
bucket.5.1.1 (2018-01-18)kintokinto 8.1.0 → 8.1.1:https://github.com/Kinto/kinto/releases/tag/8.1.1Operational concernsThe schema for the Postgres storage backend has changed.This
changes some more ID columns to use the “C” collation, which fixes a
bug where thebump_timestampstrigger was very slow.5.1.0 (2018-01-04)kintokinto 8.0.0 → 8.1.0:https://github.com/Kinto/kinto/releases/tag/8.1.0Internal changesUpdate the Docker compose configuration to use memcache for the cache backend (#1405)Refactor the way postgresql.storage.create_from_settings ignores settings (#1410)Operational concernsThe schema for the Postgres storage backend has changed.This
changes some ID columns to use the “C” collation, which will makedelete_allqueries faster. (See
e.g.https://www.postgresql.org/docs/9.6/static/indexes-opclass.html,
which says “If you do use the C locale, you do not need the
xxx_pattern_ops operator classes, because an index with the default
operator class is usable for pattern-matching queries in the C
locale.”) This may change the default sort order and grouping of
record IDs.New featuresNew settingkinto.backoff_percentageto only set the backoff header a portion of the time.make tddallows development in a TDD style by rerunning tests every time a file is changed.Bug fixesOptimize the Postgres collection_timestamp method by one query. It
now only makes two queries instead of three.Update other dependencies: newrelic to 2.98.0.81 (#1409), setuptools
to 38.4.0 (#1411, #1429, #1438, #1440), pytest to 3.3.2 (#1412,
#1437), raven to 6.4.0 (#1421), werkzeug to 0.14.1 (#1418, #1434),
python-memcached to 1.59 (#1423), zest.releaser to 6.13.3 (#1427),
bravado_core to 4.11.2 (#1426, #1441), statsd to 3.2.2 (#1422),
jsonpatch to 1.21 (#1432), sqlalchemy to 1.2.0 (#1430), sphinx to
1.6.6 (#1442).kinto-signerkinto-signer 2.1.1 → 2.2.0:https://github.com/Kinto/kinto-signer/releases/tag/2.2.0New featuresUse generic config keys as a fallback for missing specific signer config keys. (Kinto/kinto-signer#151)Fix bad signature on empty collections. (Kinto/kinto-signer#164)kinto-attachmentkinto-attachment 2.0.1 → 2.1.0:https://github.com/Kinto/kinto-attachment/releases/tag/2.1.0New featuresAdd support for theContent-Encodingheader with the S3 backend (Kinto/kinto-attachment#132)5.0.0 (2017-11-29)kintokinto 7.6.1 → 8.0.0:https://github.com/Kinto/kinto/releases/tag/8.0.0Operational concernsThe schema for the Postgres ``storage`` backend has changed.This
lets us prevent a race condition where deleting and creating a thing
at the same time can leave it in an inconsistent state (#1386). You
will have to run thekinto migratecommand in order to migrate
the schema. The safest way to do this is to disable Kinto traffic
(perhaps using nginx), bring down the old Kinto service, run the
migration, and then bring up the new Kinto service.Breaking changesStorage backends no longer support theignore_conflictargument (#1401). Instead of using this argument, consider catching theUnicityErrorand handling it.ignore_conflictwas only ever
used in one place, in thedefault_bucketplugin, and was
eventually backed out in favor of catching and handling aUnicityError.Bug fixesFix a TOCTOU bug in the Postgres storage backend where a transaction
doing acreate()would fail because a row had been inserted after
the transaction had checked for it (#1376).Document how to create an account using thePOST /accountsendpoint (#1385).Internal changesUpdate dependency on pytest to move to 3.3.0 (#1403).Update other dependencies: setuptools to 38.2.1 (#1380, #1381,
#1392, #1395), jsonpatch to 1.20 (#1393), zest.releaser to 6.13.2
(#1397), paste-deploy to 0.4.2 (#1384), webob to 1.7.4 (#1383),
simplejson to 3.13.2 (#1389, #1390).Undo workaround for broken kinto-http.js in the kinto-admin plugin
(#1382).4.6.0 (2017-11-27)kinto-fxakinto-fxa 2.3.0 → 2.4.0:https://github.com/Kinto/kinto-fxa/releases/tag/2.4.0New FeatureAdd support for multiple FxA Clients (mozilla-services/kinto-fxa#52)4.5.1 (2017-11-21)kinto-emailer 1.0.0 → 1.0.1:https://github.com/Kinto/kinto-emailer/releases/tag/1.0.1Remove hard requirements of Pyramid 1.8 (Kinto/kinto-emailer#46)4.5.0 (2017-11-16)kintokinto 7.5.1 → 7.6.0:https://github.com/Kinto/kinto/releases/tag/7.6.0ProtocolWhen a record is pushed with an older timestamp, the collection
timestamps is not bumped anymore. (Kinto/kinto#1361)New featuresA new custom logging formatter is available inkinto.core. It fixes the issues ofmozilla-cloud-services-logger.
Consider migrating your logging settings to :[formatter_json]
class = kinto.core.JsonLogFormatterBug fixesDo not log empty context values (Kinto/kinto#1363)Fixed some attributes in logging of errors (Kinto/kinto#1363)Fixed logging of method/path of batch subrequests (Kinto/kinto#1363)Fix removing permissions with Json Merge (Kinto/kinto#1322).Internal changesMoved PostgreSQL helper function to Python code (Kinto/kinto#1358)kinto-changeskinto-changes 1.0.0 → 1.1.0:https://github.com/Kinto/kinto-changes/releases/tag/1.1.0Bug fixesDisable reify to always get the most accurate timestamp. (#36)4.4.1 (2017-10-30)kinto-signerkinto-signer 2.1.0 → 2.1.1:https://github.com/Kinto/kinto-signer/releases/tag/2.1.1Bug fixesInvalidate the CloudFront CDN cache. (Kinto/kinto-signer#199)4.4.0 (2017-10-03)amo2kinto 3.0.0 → 3.1.0:https://github.com/mozilla-services/amo2kinto/releases/tag/3.1.0New featuresAdd support for cert items subject and pubKeyHash attributes. (mozilla-services/amo2kinto#70)kinto 7.5.0 → 7.5.1:https://github.com/Kinto/kinto/releases/tag/7.5.1Bug fixesUse theKINTO_INIenv variable to findout the configuration file. (Kinto/kinto#1339)Fixcreate-usercommand for PostgreSQL backend (Kinto/kinto#1340)Make surecreate-usercommand updates password (Kinto/kinto#1336)4.3.0 (2017-09-28)amo2kintoamo2kinto 1.7.2 → 3.0.0:https://github.com/mozilla-services/kinto-amo/releases/tag/3.0.0Bug fixesRemove json2kinto importerRemove xml verifierkintokinto 7.4.1 → 7.5.0:https://github.com/Kinto/kinto/releases/tag/7.5.0New featuresAdd aMemcachedcache backend (Kinto/kinto#1332)4.2.0 (2017-09-14)kinto-elasticsearchkinto 0.2.1 → 0.3.0:https://github.com/Kinto/kinto-elasticsearch/releases/tag/0.3.0New featuresAdd StatsD timer to measure E/S indexation (Kinto/kinto-elasticsearch#54)Add akinto-reindexcommand to reindex existing collections of records (Kinto/kinto-elasticsearch#56)4.1.0 (2017-09-01)kintokinto 7.3.2 → 7.4.1:https://github.com/Kinto/kinto/releases/tag/7.4.1New featuresAdd acreate-userkinto command (Kinto/kinto#1315)Bug fixesFix pagination token generation on optional fields (Kinto/kinto#1253)4.0.1 (2017-08-14)kintokinto 7.3.1 → 7.3.2:https://github.com/Kinto/kinto/releases/tag/7.3.2Bug fixesThe PostgreSQL cache backend now orders deletes according to keys,
which are a well-defined order that never changes. (Fixes #1308.)Internal changesNow all configuration options appear as commented lines on the configuration
template (#895)Added task on PR template about updating the configuration template
if a new configuration setting is added.Use json instead of ujson in storage in tests (#1255)Improve Docker container to follow Dockerflow recommendations (fixes #998)4.0.0 (2017-08-09)kinto-signerkinto-signer 1.5.4 → 2.1.0:https://github.com/Kinto/kinto-signer/releases/tag/2.1.0Breaking changesUpgrade to Autograph 2.0New featuresInvalidate the monitor changes collection on updates (#187)Bug fixesAllow kinto-attachment collections reviews. (#190)Remove additional / in invalidation collection path (#194)3.3.0 (2017-07-13)kinto-elasticsearchkinto-elasticsearch 0.2.1:https://github.com/Kinto/kinto/releases/tag/0.2.1New featuresFlush indices when server is flushed (fixes #4)Perform insertions and deletion in bulk for better efficiency (fixes #5)Add setting to force index refresh on change (fixes #6)Add heartbeat (fixes #3)Delete indices when buckets and collections are deleted (fixes #21)Support quick search from querystring (fixes #34)Return details about invalid queries in request body (fixes #23)Support defining mapping from theindex:schemaproperty in the collection metadata (ref #8)Bug fixesOnly index records if the storage transaction is committed (fixes #15)Do not allow to search if no read permission on collection or bucket (fixes #7)Fix empty results response when plugin was enabled after collection creation (ref #20)Limit the number of results returned by default (fixes #45)Fix crash on search parse exceptions (fixes #44)Fix the number of results when specified in query (ref #45)Internal changesCreate index when collection is created (fixes #27)3.2.3 (2017-07-21)kinto-signerkinto-signer 1.5.3 → 1.5.4:https://github.com/Kinto/kinto-signer/releases/tag/1.5.4Bug fixesAllow kinto-attachment collections reviews on subrequests too. (Kinto/kinto-signer#192)3.2.2 (2017-07-20)Update requirements.txt with kinto-signer version bump in 3.2.1 release3.2.1 (2017-07-20)kinto-signerkinto-signer 1.5.2 → 1.5.3:https://github.com/Kinto/kinto-signer/releases/tag/1.5.3Bug fixesAllow kinto-attachment collections reviews. (Kinto/kinto-signer#190)3.2.0 (2017-07-05)kintokinto 7.1.0 → 7.3.1:https://github.com/Kinto/kinto/releases/tag/7.3.1APIFiltering with like can now contain wild chars (eg.?like_nobody=*you*).
It is thus now impossible to search for the*character with this operator.Handle querystring parameters as JSON encoded values
to avoid treating number as number where they should be strings. (Kinto/kinto#1217)Introducehas_filter operator (Kinto/kinto#344).API is now at version1.17. SeeAPI changelog.New featuresAccount plugin now allows account IDs to be email addresses (Kinto/kinto#1283).Bug fixesMake it illegal for a principal to be present inaccount_create_principalswithout also being inaccount_write_principals. Restricting creation of accounts to
specified users only makes sense if those users are “admins”, which
means they’re inaccount_write_principals. (Kinto/kinto#1281)Fix a 500 when accounts without an ID are created (Kinto/kinto#1280).Fix StatsD unparseable metric packets for the unique user counter (Kinto/kinto#1282)Fix permissions endpoint when using account plugin (Kinto/kinto#1276)Fix missingcollection_countfield in the rebuild-quotas script.Fix bug causing validation to always succeed if no required fields are present.Several changes to the handling of NULLs and how the full range of
JSON values is compared in a storage backend (Kinto/kinto#1258, Kinto/kinto#1252,
Kinto/kinto#1215, Kinto/kinto#1216, Kinto/kinto#1217 and Kinto/kinto#1257).Fix requests output when running with make serve (Kinto/kinto#1242)Fix pagination on permissions endpoint (Kinto/kinto#1157)Fix pagination when max fetch storage is reached (Kinto/kinto#1266)Fix schema validation when internal fields likeidorlast_modifiedare
marked as required (Kinto/kinto#1244)Restore error format for JSON schema validation errors (which was
changed in Kinto/kinto#1245).Fix bug in Postgres backend regarding the handling of combining
filters and NULL values (Kinto/kinto#1291)kinto-adminkinto-admin 1.13.3 → 1.14.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.14.0New featuresUpdate kinto-http.js 4.3.3 (Kinto/kinto-admin#431)Add support for the Kinto Account plugin. (Kinto/kinto-admin#439)kinto-amokinto-amo 0.3.0 → 0.4.0:https://github.com/mozilla-services/kinto-amo/releases/tag/0.4.0New featuresAdd support for cache control headers (If-None-MatchandIf-Modified-Since) (mozilla-services/kinto-amo#21)3.1.2 (2017-06-28)kinto-emailerkinto-emailer 0.4.0 → 1.0.0:https://github.com/Kinto/kinto-emailer/releases/tag/1.0.0Bug fixesFix crash when creating bucket withPOST /buckets(fixes Kinto/kinto-emailer#43)kinto-signerkinto-signer 1.5.1 → 1.5.2:https://github.com/Kinto/kinto-signer/releases/tag/1.5.2Catch cache invalidation errors and log the error. (Kinto/kinto-signer#186)3.1.1 (2017-06-28)kinto-signerkinto-signer 1.5.0 → 1.5.1:https://github.com/Kinto/kinto-signer/releases/tag/1.5.1Fix kinto-signer heartbeat. (Kinto/kinto-signer#182)3.1.0 (2017-06-19)kinto-signerkinto-signer 1.4.0 → 1.5.0:https://github.com/Kinto/kinto-signer/releases/tag/1.5.0New featuresAdd support for CloudFront path cache invalidation. (Kinto/kinto-signer#178)# Configure the cloudfront distribution related to the server cache.kinto.signer.distribution_id=E2XLCI5EUWMRON3.0.1 (2017-06-12)Install mozilla-cloud-services-logger. (#134)3.0.0 (2017-06-12)kintokinto 6.1.0 → 7.1.0:https://github.com/Kinto/kinto/releases/tag/7.1.0Breaking changesThe flush endpoint is now a built-in plugin atkinto.plugins.flushand
should be enabled using theincludessection of the configuration file.KINTO_FLUSH_ENDPOINT_ENABLEDenvironment variable is no longer supported. (#1147)Settings withcliquet.prefix are not supported anymore.Logging configuration now relies on standard Python logging module (#1150)Before:kinto.logging_renderer=kinto.core.logs.ClassicLogRendererNow:[handler_console]...formatter=color[formatters]keys=color[formatter_color]class=logging_color_formatter.ColorFormatterForbid storing bytes in the cache backend. (#1143)kinto.core.apiwas renamed tokinto.core.openapi(#1145)Logging extra information on message must be done using theextrakeyword
(eg.logger.info('msg',extra={a=1})instead oflogger.info('msg',a=1))
(#1110, #1150)Cache entries must now always have a TTL. Thettlparameter ofcache.set()is now mandatory (fixes #960).get_app_settings()fromkinto.core.testing.BaseWebTestis now a
class method (#1144)ProtocolGroups can now be created with a simplePUT(fixes #793)Batch requests now raise400on unknown attributes (#1163).Protocol is now at version1.16. SeeAPI changelog.New featuresEnforce the permission endpoint when the admin plugin is included (fixes #1059)Access control failures are logged with WARN level (fixes #1074)Added an experimentalAccounts APIwhich allow users to sign-up modify their password or delete their account (fixes #795)delete()method from cache backend now returns the deleted value (fixes #1231)kintorebuild-quotasscript was written that can be run to
repair the damage caused by #1226 (fixes #1230).Bug fixesFix Memory backend sometimes show empty permissions (#1045)Allow to create default bucket with a PUT request and an empty body (fixes #1080)Fix PostgreSQL backend when excluding a list of numeric values (fixes #1093)Fixignore_conflictstorage backend create method parameter to
keep the existing rather than overriding it. (#1134)Fix impacted records of events generated by implicit creation in default
bucket (#1137)Removed Structlog binding and bottlenecks (fixes #603)Fixed Swagger output with subpath and regex in pyramid routes (fixes #1180)Fixed Postgresql errors when specifying empty values in querystring numeric filters. (fixes #1194)Return a 400 Bad Request instead of crashing when the querystring contains bad characters. (fixes #1195)Fix PostgreSQL backend from deleting records of the same name in
other buckets and collections when deleting a bucket. (fixes #1209)Fix race conditions on deletions with upsert in PostgreSQLstorage.update()(fixes #1202)Fix PostgreSQL backend race condition when replacing permissions of an object (fixes #1210)Fix crash when deleting multiple buckets with quotas plugin enabled (fixes #1201)Thedefault_bucketplugin no longer sends spurious “created”
events for buckets and collections that already exist. This causes
thequotasplugin to no longer leak “quota” when used with thedefault_bucketplugin. (#1226)Fix removal of timestamps when parent object is deleted (fixes #1233)Do not allow to reuse deletion tokens (fixes #1171)accountsplugin: fix exception on authentication. (#1224)Fix crash with JSONSchema validation of unknown required properties (fixes #1243)Fix bug on bucket deletion where other buckets could be deleted too if their id
started with the same idFix permissions of accounts created with PUT by admin (ref #1248)Fix ownership of accounts created with POST by admin (fixes #1248)Internal changesDo not keep the whole Kinto Admin bundle in the repo (fixes #1012)Remove the email example from the custom code event listener tutorial (fixes #420)Removed useless logging info from resource (ref #603)Make sure prefixed userid is always first in principalsRun functional tests on PostgreSQLFix tests with Pyramid 1.9aRemoved useless deletions in quota pluginUpgraded the kinto-admin to version 1.13.2kinto-signerkinto-signer 1.3.3 → 1.4.0:https://github.com/Kinto/kinto-signer/releases/tag/1.4.0Internal changesUpgrade to kinto 7.12.2.0 (2017-05-25)kintokinto 6.0.8 → 6.1.0:https://github.com/Kinto/kinto/releases/tag/6.1.0New featurekintorebuild-quotasscript was written that can be run to
repair the damage caused by #1226 (fixes #1230).Bug fixesThedefault_bucketplugin no longer sends spurious “created”
events for buckets and collections that already exist. This causes
thequotasplugin to no longer leak “quota” when used with thedefault_bucketplugin. (#1226)Fix race conditions on deletions with upsert in PostgreSQLstorage.update()(fixes #1202).Fix PostgreSQL backend race condition when replacing permissions of an object (fixes #1210)Fix missing package.json file in package. (#1222)Fix removal of timestamps when parent object is deleted (fixes #1233)2.1.3 (2017-05-04)kintokinto 6.0.7 → 6.0.8:https://github.com/Kinto/kinto/releases/tag/6.0.8Bug fixesPrevent PostgreSQL backend from deleting records of the same name in other buckets and collections when deleting a bucket. (fixes Kinto/kinto#1209)2.1.2 (2017-04-27)kintokinto 6.0.6 → 6.0.7:https://github.com/Kinto/kinto/releases/tag/6.0.7Bug fixesFix the kinto-admin to use PATCH instead of PUT when asking for a review.2.1.1 (2017-04-26)kintokinto 6.0.4 → 6.0.6:https://github.com/Kinto/kinto/releases/tag/6.0.6Bug fixesReturn a 400 Bad Request instead of crashing when the querystring contains bad characters. (Kinto/kinto#1195)Fixed Postgresql errors when specifying empty values in querystring numeric filters. (Kinto/kinto#1194)Upgrade the kinto-admin to v1.13.3kinto-adminkinto-admin 1.13.2 → 1.13.3:https://github.com/Kinto/kinto-admin/releases/tag/v1.13.3Bug fixesFix signoff plugin membership checks. (Kinto/kinto-admin#429).
This was preventing using and navigating within signoff plugin views.kinto-signerkinto-signer 1.3.2 → 1.3.3:https://github.com/Kinto/kinto-signer/releases/tag/1.3.3Bug fixesDo not sendReviewApprovedevent when signing a collection that is already signed (Kinto/kinto-signer#174)2.1.0 (2017-04-14)kintokinto 6.0.1 → 6.0.4:https://github.com/Kinto/kinto/releases/tag/6.0.4Bug fixesFixed Swagger when routes contain subpath/regexp (Kinto/kinto#1180)kinto-attachmentkinto-attachment 2.0.0 → 2.0.1:https://github.com/Kinto/kinto-attachment/releases/tag/2.0.1Bug fixesSet request parameters before instantiating a record resource. (Kinto/kinto-attachment#127)kinto-adminkinto-admin 1.10.0 → 1.13.2:https://github.com/Kinto/kinto-admin/releases/tag/v1.13.2New featuresAdd review/decline comments (Kinto/kinto-admin#417)Limit number of collections listed in the sidebar. (Kinto/kinto-admin#410)Collection full diff view improvements. (Kinto/kinto-admin#409)Add support for Portier authentication. (Kinto/kinto-admin#395)Bug fixesPreload all collections to populate state. (Kinto/kinto-admin#418)Order history entry target permissions consistently. (Kinto/kinto-admin#413)Fix Portier broken redirect URL handling after successful auth when coming from the homepage (Kinto/kinto-admin#414)Restore auth form contextual help. (Kinto/kinto-admin#396)Fix broken post-auth redirections. (Kinto/kinto-admin#397)Retrieve all paginated permissions. (Kinto/kinto-admin#400)kinto-emailerkinto-emailer 0.3.0 → 0.4.0:https://github.com/Kinto/kinto-emailer/releases/tag/0.4.0New featuresAdd avalidate_setup.pyscript to check that server can actually send emailsAdd akinto-send-emailcommand to test the configuration (kinto/kinto-emailer#35)Bug fixesFix sending notifications by decoupling it from transactions (kinto/kinto-emailer#38)kinto-signerkinto-signer 1.3.0 → 1.3.2:https://github.com/Kinto/kinto-signer/releases/tag/1.3.2Bug fixesAllowcanonical_jsonto work with iterators. (Kinto/kinto-signer#167)Fixed inconsistencies inResourceChangedproduced by Kinto signer (Kinto/kinto-signer#169)Update e2e.py to be robust against kinto_client returning an iterator in Python 3. (Kinto/kinto-signer#165)Send kinto-signer before committing since some database may have to be performed
in the subscribers (Kinto/kinto-signer#172)2.0.1 (2017-03-10)kintokinto 6.0.0 → 6.0.1:https://github.com/Kinto/kinto/releases/tag/6.0.1Bug fixesFix Memory backend sometimes show empty permissions (Kinto/kinto#1045)Allow to create default bucket with a PUT request and an empty body (Kinto/kinto#1080)Fix PostgreSQL backend when excluding a list of numeric values (Kinto/kinto#1093)Fixignore_conflictstorage backend create method parameter to
keep the existing rather than overriding it. (Kinto/kinto#1134)Fix impacted records of events generated by implicit creation in default
bucket (Kinto/kinto#1137)kinto-ldapkinto-ldap 0.3.0 → 0.3.1:https://github.com/Kinto/kinto-ldap/releases/tag/0.3.1Bug fixesFix support with Kinto 6 and Python 3. (Kinto/kinto-ldap#18)2.0.0 (2017-03-06)Configuration Breaking Changeskinto_changesmust now be present inkinto.includes(eg. on read-only stacks)
otherwise the monitoring endpoint won’t be accessible.The configuration ofkinto-changeshas to be changed:Before:kinto.event_listeners=changeskinto.event_listeners.changes.use=kinto_changes.listenerkinto.event_listeners.changes.http_host=website.domain.tldkinto.event_listeners.changes.collections=/buckets/settings/buckets/blocklists/collections/certificatesNow:kinto.changes.http_host=website.domain.tldkinto.changes.resources=/buckets/settings/buckets/blocklists/collections/certificateskintokinto 5.4.1 → 6.0.0:https://github.com/Kinto/kinto/releases/tag/6.0.0Breaking changesRemove Python 2.7 support and upgrade to Python 3.5. (Kinto/kinto#1050)Upgraded minimal PostgreSQL support to PostgreSQL 9.5 (Kinto/kinto#1056)The--iniparameter is now after the subcommand name (Kinto/kinto#1095)ProtocolFixedIf-Matchbehavior to match the RFC 2616 specification (Kinto/kinto#1102).A409 Conflicterror response is now returned when some backend integrity
constraint is violated (instead of503) (Kinto/kinto#602)Protocol is now at version1.15. SeeAPI changelog.Bug fixesPrevent injections in the PostgreSQL permission backend (Kinto/kinto#1061)Fix crash onIf-Match:*(Kinto/kinto#1064)Handle Integer overflow in querystring parameters. (Kinto/kinto#1076)Flush endpoint now returns an empty JSON object instad of an HTML page (Kinto/kinto#1098)Fix nested sorting key breaks pagination token. (Kinto/kinto#1116)Removedeletedfield fromPUTrequests over tombstones. (Kinto/kinto#1115)Fix crash when preconditions are used on the permission endpoint (Kinto/kinto#1066)Fixed resource timestamp upsert in PostgreSQL backend (Kinto/kinto#1125)Fix pserve argument ordering with Pyramid 1.8 (Kinto/kinto#1095)Internal changesUpdate the upsert query to use an INSERT or UPDATE on CONFLICT behavior (Kinto/kinto#1055)Permission schema children fields are now set during initialization instead of on
deserialization (Kinto/kinto#1046).Request schemas (including validation and deserialization) are now isolated by method
and endpoint type (Kinto/kinto#1047).Move generic API schemas (e.g TimeStamps and HeaderFields) fromkinto.core.resource.schemato a sepate file onkinto.core.schema. (Kinto/kinto#1054)Upgraded the kinto-admin to version 1.10.0 (Kinto/kinto#1086, Kinto/kinto#1128)Upgrade to Pyramid 1.8 (Kinto/kinto#1087)UseCornice Swaggerrather than
merging YAML files to generate the OpenAPI spec.Gracefully handleUnicityErrorwith thedefault_bucketplugin and
the PostgreSQL backend using PostgreSQL 9.5+ON CONFLICTclause. (Kinto/kinto#1122)kinto-attachmentkinto-attachment 1.1.2 → 2.0.0:https://github.com/Kinto/kinto-attachment/releases/tag/2.0.0Remove Python 2.7 support and upgrade to Python 3.5. (Kinto/kinto-attachment#125)kinto-changeskinto-changes 0.5.0 → 1.0.0:https://github.com/Kinto/kinto-changes/releases/tag/1.0Breaking changesThe change endpointlocation is now hard-coded(/buckets/monitor/collections/changes/records)
and cannot be configured.The permissions principals cannot be specified anymore.
The change endpoint is nowalways public.Themonitorbucket andchangescollection are not required anymore and
are not created anymore.POSTandDELETEare not supported on the changes endpoint anymore.Individual entries (eg./buckets/monitor/collections/changes/records/{id})
cannot be accessed anymore.The listener was dropped. Configuration must be changed (see above)kinto-signerkinto-signer 1.2.0 → 1.3.0:https://github.com/Kinto/kinto-signer/releases/tag/1.3.0Update e2e.py script to be compatible with Python 3.5 (Kinto/kinto-signer#165)1.13.1 (2017-02-24)kintokinto 5.4.0 → 5.4.1:https://github.com/Kinto/kinto/releases/tag/5.4.1Bug fixesFix unexpected references on the swagger spec that failed validation. (Kinto/kinto#1108)1.13.0 (2017-02-21)amo2kintoamo2kinto 1.6.0 → 1.7.2:https://github.com/mozilla-services/kinto-amo/releases/tag/1.7.2Bug fixesFix XML exporter on missing blockID. (mozilla-services/amo2kinto#63)kintokinto 5.3.5 → 5.3.6:https://github.com/Kinto/kinto/releases/tag/5.3.6Bug fixesFix crash onIf-Match:*(Kinto/kinto#1064)Handle Integer overflow in querystring parameters. (Kinto/kinto#1076)kinto-adminkinto-admin 1.8.1 → 1.9.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.9.0New FeatureFix Kinto/kinto-admin#377, Kinto/kinto-admin#378: Allow dropping edited resource properties. (Kinto/kinto-admin#379)Fix Kinto/kinto-admin#365: Render a JSON diff for history entries. (Kinto/kinto-admin#380)Fix Kinto/kinto-admin#376: Denote readonly buckets & collections in the sidebar. (Kinto/kinto-admin#382)Fix Kinto/kinto-admin#384: Live-searchable/filterable sidebar entries. (Kinto/kinto-admin#385)Hide auth method selector when a single one is configured.Bug fixesDo not store passwords. Fixes #364 (#386)1.12.1 (2017-02-08)kintokinto 5.3.4 → 5.3.5:https://github.com/Kinto/kinto/releases/tag/5.3.5Bug fixesPrevent injections in the PostgreSQL permission backend (Kinto/kinto#1061)1.12.0 (2017-02-02)kintokinto 5.3.2 → 5.3.4:https://github.com/Kinto/kinto/releases/tag/5.3.4Bug fixesUpdate the upsert query to use an INSERT or UPDATE on CONFLICT behavior (Kinto/kinto#1055)kinto-attachmentkinto-attachment 1.0.1 → 1.1.2:https://github.com/Kinto/kinto-attachment/releases/tag/1.1.2New featuresExpose the gzipped settings value in the capability (Kinto/kinto-attachment#117)Bug fixesFixes crash when adding attachment to existing record with Kinto 5.3 (Kinto/kinto-attachment#120)Fix invalid request when attaching a file on non UUID record id (Kinto/kinto-attachment#122)1.11 (2017-01-31)kintokinto 5.3.1 → 5.3.2:https://github.com/Kinto/kinto/releases/tag/5.3.2Bug fixesRetries to set value in PostgreSQL cache backend in case of BackendError (Kinto/kinto#1052)1.10 (2017-01-30)kintokinto 5.3.0 → 5.3.1:https://github.com/Kinto/kinto/releases/tag/5.3.1Bug fixesRetries to set value in PostgreSQL cache backend in case of IntegrityError (Kinto/kinto#1035)Display Kinto-Admin version number in the footer. (Kinto/kinto#1040)Configure the Kinto Admin auth methods from the server configuration (Kinto/kinto#1042)kinto-emailerkinto-emailer 0.3.0:https://github.com/Kinto/kinto-emailer/releases/tag/0.3.0This package allows to send email notifications when something happens in a bucket
or on a collection.Emailing configuration is done in.iniwhereas notifications configuration is done
via the HTTP API within bucket or collection metadata.kinto.includes=kinto_emailermail.default_sender=firefox-settings-notifs@mozilla.com# mail.host = localhost# mail.port = 25# mail.username = None# mail.password = NoneSee more details inPyramid Mailer documentation.kinto-fxakinto-fxa 2.3.0 → 2.3.1:https://github.com/Kinto/kinto-fxa/releases/tag/2.3.0Bug fixesMake sure that caching of token verification nevers prevents from authenticating
requests (see Mozilla/PyFxA#48)1.9 (2017-01-24)kinto-signerkinto 5.2.0 → 5.3.0:https://github.com/Kinto/kinto/releases/tag/5.3.0Bug fixesFix crash with batch endpoint when list of requests contains trailing comma (Kinto/kinto#1024)Cache backend transactions are not bound to the request/response cycle anymore (Kinto/kinto#879)kinto-changes 1.1.1 → 1.2.0:https://github.com/Kinto/kinto-changes/releases/tag/1.2.0Bug fixesDo not always reset destination permissionsNew featuresPyramid events are sent for each review step of the validation workflow (fixes #157)Kinto Admin UI fields likedisplayFieldsattachmentandsortare copied
from the source to the preview and destination collections (if not set) (fixes #161)kinto-admin 1.7.0 → 1.8.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.8.0Bug fixesFix Kinto/kinto-admin#353: Show changes in review step even if no permission to approveFix Kinto/kinto-admin#248: Prevent crash onuiSchemavalidation when the entered JSON schema is invalidFix Kinto/kinto-admin#302: Make whole menu entry area clickable for collectionsNew featuresAdd a JSON editor for raw collection attributes. (Kinto/kinto-admin#116, Kinto/kinto-admin#371)Don’t fail when fetching the list of buckets returns a HTTP 403. (Kinto/kinto-admin#370)Retry requests once (Kinto/kinto-admin#368)1.8 (2017-01-16)kinto-changeskinto-changes 0.4.0 → 0.5.0:https://github.com/Kinto/kinto-changes/releases/tag/0.5.0Bug fixesDo not force the timestamp of monitored entries, to avoid possible integrity errors (Kinto/kinto-changes#27)kinto-signerkinto-signer 1.0.0 → 1.1.1:https://github.com/Kinto/kinto-signer/releases/tag/1.1.1Bug fixesFix consistency of setting names for per-collection workflows configuration (Kinto/kinto-signer#149)Remove recursivity of events when requesting review (Kinto/kinto-signer#158)1.7 (2017-01-12)Kintokinto 5.1.0 → 5.2.0:https://github.com/Kinto/kinto/releases/tag/5.2.0ProtocolAdd anOpenAPI specificationfor the HTTP API on/__api__(Kinto/kinto#997)New featuresWhen admin is enabled,/v1/admindoes not return404anymore, but now redirects to/v1/admin/(with trailing slash).Bug fixesAdd missingTotal-Recordsfield onDELETEheader with plural endpoints (fixes Kinto/kinto#1000)kinto-adminkinto-admin 1.6.1 → 1.7.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.7.0Added a TagsField form component (eg. devices list) (Kinto/kinto-admin#367)1.6 (unreleased)Upgrade notesReplacekinto_adminbykinto.plugins.adminforkinto.includessetting in the INI file.kinto.includes=kinto.plugins.adminWe can skip the history on the preview and production buckets:kinto.history.exclude_resources=/buckets/blocklists/buckets/blocklists-previewKintokinto 4.3.6 → 5.1.0:https://github.com/Kinto/kinto/releases/tag/5.1.0ProtocolAdd support forJSON-Patch (RFC 6902).Add support forJSON-Merge (RFC 7396).Added a principals list tohelloview when authenticated.Added details attribute to 404 errors. (Kinto/kinto#818)Add abasicauthcapability when activated on the server. (Kinto/kinto#937)Add ability to delete history entries usingDELETE(Kinto/kinto#958)New featuresAdded a new built-in pluginkinto.plugins.adminto serve the kinto admin.Added a newparse_resourceutility tokinto.core.utilsAdd a setting to limit the maximum number of bytes cached in the memory backend. (Kinto/kinto#610)Add a setting to exclude certain resources from being tracked by history (Kinto/kinto#964)kinto-adminkinto-admin 1.5.1 → 1.6.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.6.0New featuresFix Kinto/kinto-admin#208: Generalized pagination. (Kinto/kinto-admin#352)Fix Kinto/kinto-admin#208: Paginate history. (Kinto/kinto-admin#351)Add support for gzipped option on attachments (Kinto/kinto-admin#358)Bug fixesFix Kinto/kinto-admin#349: [signoff] Update the lastSigned timestamp. (Kinto/kinto-admin#362)Fix Kinto/kinto-admin#350: work-in-progress infos (Kinto/kinto-admin#363)Fix Kinto/kinto-admin#273: Prevent overriding members list in group edition form. (Kinto/kinto-admin#346)Typo in capabilities property name (Kinto/kinto-admin#357)kinto-fxakinto-fxa 2.2.0 → 2.3.0:https://github.com/mozilla-services/kinto-fxa/releases/2.3.0Compatibility with Kinto 51.5 (2016-12-01)Create a Dockerfile that matches Dockerflow. (#84)1.4 (2016-11-28)Kintokinto 4.3.4 → 4.3.6:https://github.com/Kinto/kinto-admin/releases/tag/4.3.6Bug fixesFix crash in permission endpoint when merging permissions from settings and from
permissions backend (fixes #926)Fix crash in PostgreSQL backend when specified bound permissions is empty (fixes #906)Fix response status for OPTION request on version redirection (fixes #852)Fix crash in authorization policy when object ids contain unicode (fixes #931)Permissions are now correctly removed from permission backend when a parent
object is deleted (fixes #898)Add deletion of multiple groups in API docs (#928)Fixrecord_idattribute in history entries when several records are
modified via a batch request (fixes #942)kinto-adminkinto-admin 1.5.0 → 1.5.1:https://github.com/Kinto/kinto-admin/releases/tag/1.5.1Bug fixesFix #339: Fix server history not saved. (#342)Fix #340: Fix broken saved session restore. (#341)Fix #332: Display app version number in the footer. (#338)Fix broken timeago helper. (#335)Fix #336: Fix cannot save bucket attributes upon creation. (#337)kinto-ldapkinto-ldap 0.2.1 → 0.3.0:https://github.com/Kinto/kinto-ldap/releases/tag/0.3.0New featuresSupport login from multiple DN from the same LDAP server (Kinto/kinto-ldap#16)1.3 (2016-11-18)Kintokinto 4.3.3 → 4.3.4:https://github.com/Kinto/kinto-admin/releases/tag/4.3.4Bug fixesFix bug when two subfields are selected in partial responses (fixes Kinto/kinto#920)kinto-adminkinto-admin 1.4.3 → 1.5.0:https://github.com/Kinto/kinto-admin/releases/tag/1.5.0New featuresAuth form improvements (Kinto/kinto-admin#327, Kinto/kinto-admin#327#328)Review workflow UI improvements. (Kinto/kinto-admin#319, Kinto/kinto-admin#322)Bug fixesHide details on review step link when history capability is unavailable. (Kinto/kinto-admin#325)Relative time fixes (Kinto/kinto-admin#324)Workflow history of changes now only shows records (Kinto/kinto-admin#320)Fix lost list of groups when using signoff plugin. (Kinto/kinto-admin#321)1.2 (2016-11-15)Kintokinto 4.3.2 → 4.3.3:https://github.com/Kinto/kinto-admin/releases/tag/4.3.3Bug fixesFix crash when querystring parameter contains null string (fixes #882)Permissions endpoint now exposes the user permissions defined in settings (fixes #909)Fix crash when redirection path contains CRLF character (fixes #887)kinto-adminkinto-admin 1.4.2 → 1.4.3:https://github.com/Kinto/kinto-admin/releases/tag/1.4.3Bug fixesFix #311: check object permissions via parents objects too (#312)Fix #309: hide server URL from authentication form (#310)1.1 (2016-11-09)kinto-ldapkinto-ldap 0.1.0 → 0.2.1:https://github.com/Kinto/kinto-ldap/releases/tag/0.2.1New featuresSet default value formultiauth.policy.ldap.use(fixes #3)Add the plugin version in the hello view capabilities.Add connection pool settings (fixes #10)# kinto.ldap.pool_size = 10# kinto.ldap.pool_retry_max = 3# kinto.ldap.pool_retry_delay = .1# kinto.ldap.pool_timeout = 30Bug fixesFix heartbeat when server is unreachable (fixes #8)Fix heartbeat that would always return False (#14)Do not crash and log exception if LDAP when server is unreachable (fixes #9)kinto-changeskinto-changes 0.3.0 → 0.4.0:https://github.com/Kinto/kinto-changes/releases/tag/0.4.0New featuresAdd the plugin version in the capability (Kinto/kinto-changes#20)Add collections in the capability (Kinto/kinto-changes#18)Add a specific setting to override globalhttp_hostvalue (Kinto/kinto-changes#24)kinto.event_listeners.changes.http_host=firefox.settings.services.mozilla.comkinto-adminkinto-admin 1.4.1 → 1.4.2:https://github.com/Kinto/kinto-admin/releases/tag/1.4.2Bug fixesFix #299: Fix broken attachment creation. (#305)Fix #303: Fix attachment link in records list. (#306)Fix #307: Always show hooks on collection records page (#308)1.0 (2016-10-28)kinto-adminkinto-admin 1.4.1:https://github.com/Kinto/kinto-admin/releases/tag/v1.4.1Seechangelog for kinto-admin 1.4.0kinto-amokinto-amo 0.2.0 → 0.3.0:https://github.com/mozilla-services/kinto-amo/releases/tag/0.3.0Enable preview XML endpoint:kinto.amo.preview.addons=/buckets/blocklists-preview/collections/addonskinto.amo.preview.plugins=/buckets/blocklists-preview/collections/pluginskinto.amo.preview.gfx=/buckets/blocklists-preview/collections/gfxkinto.amo.preview.certificates=/buckets/blocklists-preview/collections/certificatesThen you can access kinto-amo endpoints:/v1/preview/3/{3550f703-e582-4d05-9a08-453d09bdfdc6}/47.0/kinto-signerkinto-signer 0.9.2 → 1.0.0:https://github.com/Kinto/kinto-signer/releases/tag/1.0.0Review and group check features can be set/overriden by collection in settings:kinto.signer.staging_certificates_group_check_enabled=truekinto.signer.staging_certificates_to_review_enabled=truekinto.signer.staging_certificates_editors_group=certificates-editorskinto.signer.staging_certificates_reviewers_group=certificates-reviewersYou can also update the signer to configure preview there:kinto.signer.resources=/buckets/staging/collections/addons;/buckets/blocklists-preview/collections/addons;/buckets/blocklists/collections/addons/buckets/staging/collections/plugins;/buckets/blocklists-preview/collections/plugins;/buckets/blocklists/collections/plugins/buckets/staging/collections/gfx;/buckets/blocklists-preview/collections/gfx;/buckets/blocklists/collections/gfx/buckets/staging/collections/certificates;/buckets/blocklists-preview/collections/certificates;/buckets/blocklists/collections/certificatesSeechangelog for kinto-dist 0.9.0orkinto-signer documentationfor more details about workflows.kinto-fxakinto-fxa 2.1.0 → 2.2.0:https://github.com/mozilla-services/kinto-fxa/releases/2.2.00.9.1 (2016-10-06)Kintokinto 4.3.0 → 4.3.1:https://github.com/Kinto/kinto/releases/tag/4.3.1kinto-signerkinto-signer 0.9.1 → 0.9.2:https://github.com/Kinto/kinto-signer/releases/tag/0.9.20.9.0 (2016-10-04)Kintokinto 3.3.2 → 4.3.0:https://github.com/Kinto/kinto/releases/tag/4.3.0HighlightsRedis backends were dropped from core, and are now packaged separately inkinto-redisNew/__version__endpoint which reads aversion.jsonfile to expose what version
has been deployed. Its location can be specified in thekinto.version_json_pathsetting (fixes #830)New built-in pluginkinto.plugins.historyto track history of changes per bucket
from the Kinto Admin UI (must be added explicity in the ``kinto.includes`` setting)kinto migratenow accepts a--dry-runoption which details the operations
to be made without executing them.New built-in pluginkinto.plugins.quotasto set storage quotas per bucket/collection
(c.f.Web Extensionsstorage)The history and quotas plugins execution time is now monitored on StatsD
(kinto.plugins.quotasandkinto.plugins.history) (#832)The permissions attribute is now empty in the response if the user has not
the permission to write on the object (Kinto/kinto#123)Parent attributes are now readable if children creation is allowed (Kinto/kinto#803)Newkintodelete-collectioncommand to delete a collection from the command-line.kinto-adminkinto-admin 1.3.0:https://github.com/Kinto/kinto-admin/releases/tag/v1.3.0Add views for browsing a collection history (#196)Updated kinto-http to v2.3.0.Activate the signoff plugin to allow triggering a signature from the Admin.kinto-signerkinto-signer 0.7.3 → 0.9.1:https://github.com/Kinto/kinto-signer/releases/tag/0.9.0The API can nowoptionallyrely on a workflow and can check that users changing collection status
belong to some groups (e.g.editors,reviewers). With that feature enabled,
the signature of the collection will have to follow this workflow:aneditorwill request a review by setting the collection status toto-review;a preview collection will be updated and signed so that QA can validate the changes
on the client side;areviewer— different from the last editor — will trigger the signature by setting
the status toto-signas before.In order to enable this feature, the following procedure must be followed:Change the resources settings to add apreviewcollection URL ({source};{preview};{destination})..code-block:: inikinto.signer.resources =/buckets/staging/collections/certificates;/buckets/preview/collections/certificates;/buckets/blocklists/collections/certificatesEnable the review and group check features:..code-block:: inikinto.signer.to_review_enabled = true
kinto.signer.group_check_enabled = trueLast, createeditorsandreviewersgroups in thestagingbucket, and
add appropriate usernames to it. The groups can now be managed from the
Kinto Admin UI. Otherwise via the command-line:..code-block:: bash$ echo ‘{“data”: {“members”: [”ldap:some@one.com”]}}’ |http PUT $SERVER_URL/buckets/staging/groups/editors –auth=”admin:token”$ echo ‘{“data”: {“members”: [”ldap:some@one.com”]}}’ |http PUT $SERVER_URL/buckets/staging/groups/editors –auth=”admin:token”0.8.2 (2016-09-12)Upgrade to kinto 3.3.3Bug fixesFix heartbeat transaction locks with PostgreSQL backends (fixes Kinto/kinto#804)0.8.1 (2016-07-27)Add the kinto-dist version in the plugin capability. (#40)kinto-signer 0.7.2 → 0.7.3:https://github.com/Kinto/kinto-signer/releases/tag/0.7.3Bug fixesFix signature inconsistency (timestamp) when several changes are sent from
thesourceto thedestinationcollection.
Fixede2e.pyandvalidate_signature.pyscripts (Kinto/kinto-signer#110)Minor changeAdd the plugin version in the capability. (Kinto/kinto-signer#108)0.8.0 (2016-07-25)Kintokinto 3.3.0 → 3.3.2:https://github.com/Kinto/kinto/releases/tag/3.3.2Bug fixesFix Redis get_accessible_object implementation (kinto/kinto#725)Fix bug where the resource events of a request targetting two groups/collection
from different buckets would be grouped together (kinto/kinto#728)kinto-signerkinto-signer 0.7.1 → 0.7.2:https://github.com/Kinto/kinto-signer/releases/tag/0.7.2Bug fixesProvide theoldvalue on destination records updates (kinto/kinto-signer#104)Sendcreateevent when destination record does not exist yet.Events sent by kinto-signer for created/updated/deleted objects in destination now show
user_id asplugin:kinto-signer0.7.0 (2016-07-19)kinto-admin 1.2.0:https://github.com/Kinto/kinto-admin/releases/tag/1.2.0Kintokinto 3.2.2 → 3.3.0:https://github.com/Kinto/kinto/releases/tag/3.3.0APIAdd newexperimentalendpointGET /v1/permissionsto retrieve the list of permissions
granted on every kind of object (#600).
Requires settingkinto.experimental_permissions_endpointto be set totrue.API is now at version1.8. SeeAPI changelog.Bug fixesAllow filtering and sorting by any attribute on buckets, collections and groups list endpointsFix crash in memory backend with Python3 when filtering on unknown fieldKinto-attachmentkinto-attachment 0.7.0 → 0.8.0:https://github.com/Kinto/kinto-attachment/releases/tag/0.8.0New featuresPreventattachmentattributes to be modified manually (fixes Kinto/kinto-attachment#83)Bug fixesFix crash when the file is not uploaded usingattachmentfield name (fixes Kinto/kinto-attachment#57)Fix crash when the multipart content-type is invalid.Prevent crash when filename is not provided (fixes Kinto/kinto-attachment#81)Update the call to the Record resource to use named attributes. (Kinto/kinto-attachment#97)Show detailed error when data is not posted with multipart content-type.Fix crash when submitted data is not valid JSON (fixes Kinto/kinto-attachment#104)0.6.3 (2016-07-21)Take the correct Kinto 3.2.4 version.0.6.2 (2016-07-21)Add integration test for every enabled pluginsKintokinto 3.2.2 → 3.2.4:https://github.com/Kinto/kinto/releases/tag/3.2.4Bug fixesFix bug where the resource events of a request targetting two groups/collection
from different buckets would be grouped together (#728).Allow filtering and sorting by any attribute on buckets, collections and groups list endpointsFix crash in memory backend with Python3 when filtering on unknown fieldFix bug in object permissions with memory backend (#708)Make sure the tombstone is deleted when the record is created with PUT. (#715)Bumplast_modifiedon record when provided value is equal to previous
in storageupdate()method (#713)kinto-signerkinto-signer 0.7.0 → 0.7.1:https://github.com/Kinto/kinto-signer/releases/tag/0.7.1Bug fixUpdate thelast_modifiedvalue when updating the collection status and signature
(kinto/kinto-signer#97)TriggerResourceChangedevents when the destination collection and records are updated
during signing. This allows plugins likekinto-changesandkinto.plugins.historyto catch the changes (kinto/kinto-signer#101)0.6.1 (2016-07-13)Kintokinto 3.2.1 → 3.2.2:https://github.com/Kinto/kinto/releases/tag/3.2.2Bug fixesFix bug in object permissions with memory backend (#708)Make sure the tombstone is deleted when the record is created with PUT. (#715)Bumplast_modifiedon record when provided value is equal to previous
in storageupdate()method (#713)0.6.0 (2016-05-25)This release moves to the Kinto 3 series. This version merges Cliquet
intokinto.coreand all plugins have been updated to work with this
change. This is a change to code structure, but there is a
user-visible change, which is that settings referring to Cliquet
module paths should now be updated to refer tokinto.core.module
paths. For example:kinto.cache_backend = cliquet.cache.postgresqlShould be changed to:kinto.cache_backend = kinto.core.cache.postgresqlKintokinto 2.1.2 → 3.2.0:https://github.com/Kinto/kinto/releases/tag/3.2.0APIAdded theGET /contribute.jsonendpoint for open-source information (fixes #607)Allow record IDs to be any string instead of just UUIDs (fixes #655).API is now at version1.7. SeeAPI changelog.New featuresMajor version update. Merged cliquet into kinto.core. This is
intended to simplify the experience of people who are new to Kinto.
Addresses #687.Removedinitialize_cliquet(), which has been deprecated for a while.Removedcliquet_protocol_version. Kinto already defines
incompatible API variations as part of its URL format (e.g./v0,/v1). Services based on kinto.core are free to usehttp_api_versionto indicate any additional changes to their
APIs.Simplify settings code. Previously,public_settingscould be
prefixed with a project name, which would be reflected in the output
of thehelloview. However, this was never part of the API
specification, and was meant to be solely a backwards-compatibility
hack for first-generation Kinto clients. Kinto public settings
should always be exposed unprefixed. Applications developed against
kinto.core can continue using these names even after they transition
clients to the new implementation of their service.kinto startnow accepts a--portoption to specify which port to listen to.Important: Because of a limitation in [Pyramid tooling](http://stackoverflow.com/a/21228232/147077),
it won’t work if the port is hard-coded in your existing.inifile. Replace
it by%(http_port)sor regenerate a new configuration file withkinto init.Add support forpool_timeoutoption in Redis backend (fixes #620)Add new settingkinto.heartbeat_timeout_secondsto control the maximum duration
of the heartbeat endpoint (fixes #601)Bug fixesFix internal storage filtering when an empty list of values is provided.Authenticated users are now allowed to obtain an empty list of buckets onGET /bucketseven if no bucket is readable (#454)Fix enabling flush enpoint withKINTO_FLUSH_ENDPOINT_ENABLEDenvironment variable (fixes #588)Fix reading settings for events listeners from environment variables (fixes #515)Fix principal added towritepermission when a publicly writable object
is created/edited (fixes #645)Prevent client to cache and validate authenticated requests (fixes #635)Fix bug that prevented startup if old Cliquet configuration values
were still around (#633)Fix crash when a cache expires setting is set for a specific bucket or collection. (#597)Mark old cliquet backend settings as deprecated (but continue to support them). (#596)Add an explicit message when the server is configured as read-only and the
collection timestamp fails to be saved (ref Kinto/kinto#558)Prevent the browser to cache server responses between two sessions. (#593)Redirects version prefix to hello page when trailing_slash_redirect is enabled. (#700)Fix crash when setting empty permission list with PostgreSQL permission backend (fixes Kinto/kinto#575)Fix crash when type of values in querystring for exclude/include is wrong (fixes Kinto/kinto#587)Fix crash when providing duplicated principals in permissions with PostgreSQL permission backend (fixes #702)Addapp.wsgito the manifest file. This helps address Kinto/kinto#543.Fix loss of data attributes when permissions are replaced withPUT(fixes Kinto/kinto#601)Fix 400 response when posting data withid: "default"in default bucket.Fix 500 on heartbeat endpoint when a check does not follow the specs and raises instead of
returning false.Kinto-attachmentkinto-attachment 0.5.0 → 0.7.0:https://github.com/Kinto/kinto-attachment/releases/tag/0.7.0Breaking changesWhen the gzip option is used during upload, theoriginalattribute  is now within
theattachmentinformation.New featuresKinto 3.0 compatibility updateAdd akinto.attachment.extra.base_urlsettings to be exposed publicly. (#73)Add the gzip option to automatically gzip files on upload (#85)kinto-amokinto-amo 0.1.0 → 0.2.0:https://github.com/mozilla-services/kinto-amo/releases/tag/0.2.0Kinto 3.0 compatibility updatekinto-changeskinto-changes 0.2.0 → 0.3.0:https://github.com/Kinto/kinto-changes/releases/tag/0.3.0Kinto 3.0 compatibility updatekinto-signerkinto-signer 0.4.0 → 0.7.0:https://github.com/Kinto/kinto-signer/releases/tag/0.7.0Breaking changesThe collection timestamp is now included in the payload prior to signing.
Old clients won’t be able to verify the signature made by this version.Bug fixesDo not crash on record deletion if destination was never synced (Kinto/kinto-signer#82)New featuresRaise configuration errors if resources are not configured correctly (Kinto/kinto-signer#88)kinto-fxacliquet-fxa 1.4.0 → kinto-fxa  2.0.0:https://github.com/mozilla-services/kinto-fxa/releases/tag/2.0.0Breaking changesProject renamed toKinto-fxato match the rename ofcliquettokinto.core.The settingmultiauth.policy.fxa.usemust now
be explicitly set tokinto_fxa.authentication.FxAOAuthAuthenticationPolicyKinto 3.0 compatibility updateBug fixesFix checking ofAuthorizationheader when python is ran with-O(ref mozilla-services/cliquet#592)kinto-ldapkinto-ldap 0.1.0:https://github.com/Kinto/kinto-ldap/releases/tag/0.1.00.5.1 (2016-05-20)Version controlCliquet 3.1.5:https://github.com/mozilla-services/cliquet/releases/tag/3.1.5kinto 2.1.2:https://github.com/Kinto/kinto/releases/tag/2.1.20.5.0 (2016-05-17)Version controlCliquet 3.1.4:https://github.com/mozilla-services/cliquet/releases/tag/3.1.4kinto 2.1.1:https://github.com/Kinto/kinto/releases/tag/2.1.1kinto-attachment 0.5.1:https://github.com/Kinto/kinto-attachment/releases/tag/0.5.1kinto-amo 0.1.1:https://github.com/mozilla-services/kinto-amo/releases/tag/0.1.1kinto-changes 0.2.0:https://github.com/Kinto/kinto-changes/releases/tag/0.2.0kinto-signer 0.5.0:https://github.com/Kinto/kinto-signer/releases/tag/0.5.0cliquet-fxa 1.4.0:https://github.com/mozilla-services/cliquet-fxa/releases/tag/1.4.0boto 2.40:http://docs.pythonboto.org/en/latest/releasenotes/v2.40.0.html0.4.0 (2016-04-27)Version controlkinto 2.1.0:https://github.com/Kinto/kinto/releases/tag/2.10kinto-changes 0.2.0:https://github.com/Kinto/kinto-changes/releases/tag/0.2.0kinto-signer 0.3.0:https://github.com/Kinto/kinto-signer/releases/tag/0.3.00.3.0 (2016-04-18)Fix kinto-attachment bucket setting in configuration exampleVersion controlDependencies version were updated to:kinto-attachment 0.5.1:https://github.com/Kinto/kinto-attachment/releases/tag/0.5.10.2.0 (2016-03-22)Version controlDependencies version where updated to:kinto-signer 0.2.0:https://github.com/Kinto/kinto-signer/releases/tag/0.2.00.1.0 (2016-03-11)Configuration changeskinto.plugins.default_bucketplugin is no longer assumed. We invite users
to check that thekinto.plugins.default_bucketis present in theincludessetting if they expect it. (ref #495)Version controlDependencies version were updated to:cliquet 3.1.0:https://github.com/mozilla-services/cliquet/releases/tag/3.1.0kinto 2.0.0:https://github.com/Kinto/kinto/releases/tag/2.0.0kinto-attachment 0.4.0:https://github.com/Kinto/kinto-attachment/releases/tag/0.4.0kinto-changes 0.1.0:https://github.com/Kinto/kinto-changes/releases/tag/0.1.0kinto-signer 0.1.0:https://github.com/Kinto/kinto-signer/releases/tag/0.1.0cliquet-fxa 1.4.0:https://github.com/mozilla-services/cliquet-fxa/releases/tag/1.4.0boto 2.39:https://github.com/boto/boto/releases/tag/2.39.0