kinto

Documentation

• Fix "negociation" typo in docs/images/architecture.svg (#2813)

Internal changes

• Replace ujson with rapidjson. (#2677)
• Upgrade kinto-admin to v1.30.2

Documentation

• Fix documentation about disabling endpoints (#2794)

Internal changes

• Now compatible with Pyramid 2 (#2764)
• Upgrade kinto-admin to v1.30.0

New feature

• Allow rotation of the user password hmac secret without rotating the default bucket id hmac secret. (#2647)

Documentation

• Upgrade kinto-admin to v1.29.0
• servicedenuages.fr domain is parked, replace links with web.archive.org (#2720)
• Fix broken url in docs (#2692)

Internal changes

• Show diff on failures. (#2723)
• Add GitHub Actions workflows (#2677)

Bug fixes

• Fix broken Kinto admin (#2646)

Internal Changes

• Upgrade kinto-admin to v1.27.3

New feature

• Add ability to disable explicit permissions at object level (ref #893). Use kinto.explicit_permissions = false to only rely on inherited permissions (see settings docs)

Internal Changes

• Distinguish readonly errors in storage backend (kinto.core.storage.exceptions.ReadonlyError)
• Upgrade kinto-admin to v1.27.0
• Add support to Python 3.9

Bug fixes

• Do not break storage implementations (ie. kinto-redis) that rely on json class attribute (removed in v14.0.0)
• Do not return 400 for ?_since=null (fixes #2595)

Breaking changes

• Drop the strict_json option, and use ultrajson everywhere

Internal Changes

• Upgrade kinto-admin to v1.26.2

Bug fixes

• Fix messages duplication in logs (#2513)
• Fix resource timestamp unicity (fixes #2472, #602)

Documentation

• Refer to proper terms in glossary (#2486)

Bug fixes

• Simplify get_objects_permissions query (#2475)

Security fix

• Fix permission checking with POST on plural endpoints (fixes #2459)

Bug fixes

• Apply CORS headers to EOL responses (#2452)

Internal Changes

• Remove auth parameter from postgresql/memory storage backends
• Removed pytest-sugar

Bug fixes

• History entries datetimes now carry timezone information
• Fix kinto init command (#2375)
• Fix float strings parsing in certain URL query parameters. (#2392)

Internal Changes

• Upgrade kinto-admin to v1.26.1
• Drop auth parameter from storage backend methods.

Bug fixes

• Second attempt at fixing loading of Kinto Admin (#2322)

Bug fixes

• Fix loading of Kinto Admin (#2320)

New Features

• Add Content-Security-Policy header and report URI (fixes #2303)

Internal Changes

• Use package-lock file for Kinto Admin packaging
• Use isort for formatting imports (Fixes #2270)
• Upgrade kinto-admin to v1.25.2

Internal changes

• Add a warning when using the accounts plugin with the memory backend. (fixes #2258)
• Upgrade kinto-admin to v1.25.1

Internal changes

• Upgrade kinto-admin to v1.25.0

Bug fixes

• Prevent password to be modified on modification of accounts metadata (fixes #2058)
• Fix unexpected exception in /__version__ endpoint
• Add Content-Type to default_cors_headers (refs #2220)
• Fix crash with non-allowed requests on __user_data__ (fixes #2063)
• Fix multiple event listeners on READ action (fixes #1755)

New features

• Allow StatsD counter to be incremented by an arbitrary number

Bug fixes

• Fix apparence of Admin notifications (fixes #2191)

Internal changes

• Upgrade kinto-admin to v1.24.1

Internal changes

• Upgrade kinto-admin to v1.24.0