Ckan

Latest version: v2.10.4

Safety actively analyzes 623567 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 16

2.7.5

Not secure
=================

* Strip full URL on uploaded resources before saving to DB (`4382 <https://github.com/ckan/ckan/issues/4382>`_)
* Fix for datastore_search distinct=true option (`4236 <https://github.com/ckan/ckan/issues/4236>`_)
* Fix edit slug button (`4379 <https://github.com/ckan/ckan/issues/4379>`_)
* Don't re-register plugin helpers on flask_app (`4414 <https://github.com/ckan/ckan/issues/4414>`_)
* Fix for Resouce View Re-order (`4416 <https://github.com/ckan/ckan/issues/4416>`_)
* autocomplete.js: fix handling of comma key codes (`4421 <https://github.com/ckan/ckan/issues/4421>`_)
* Flask patch update (`4426 <https://github.com/ckan/ckan/issues/4426>`_)
* Allow plugins to define multiple blueprints (`4495 <https://github.com/ckan/ckan/issues/4495>`_)
* Fix i18n API encoding (`4505 <https://github.com/ckan/ckan/issues/4505>`_)
* Allow to defined legacy route mappings as a dict in config (`4521 <https://github.com/ckan/ckan/issues/4521>`_)
* group_patch does not reset packages (`4557 <https://github.com/ckan/ckan/issues/4557>`_)

2.7.4

Not secure
=================

* Adding filter at resoruce preview doesn't work while site is setup with ckan.root_path param (4140)
* Datastore dump results are not the same as data in database (4150)

2.7.3

Not secure
=================

General notes:
* As with all patch releases this one does not include requirement changes.
However in some scenarios you might encounter the following error while
installing or upgrading this version of CKAN::

Error: could not determine PostgreSQL version from '10.2'

This is due to a bug in the psycopg2 version pinned to the release. To solve
it, upgrade psycopg2 with the following command::

pip install --upgrade psycopg2==2.8.2

* This release does not require a Solr schema upgrade, but if you are having the
issues described in 3863 (datasets wrongly indexed in multilingual setups),
you can upgrade the Solr schema and reindex to solve them.

* 3422 (implemented in 3425) introduced a major bug where if a resource was
deleted and the DataStore was active extras from all resources on the site where
changed. This is now fixed as part of this release but if your database is already
affected you will need to run a script to restore the extras to their
previous state. Remember, you only need to run the script if all the following are
true:

1. You are currently running CKAN 2.7.0 or 2.7.2, and
2. You have enabled the DataStore, and
3. One or more resources with data on the DataStore have been deleted (or you
suspect they might have been)

If all these are true you can run the following script to restore the extras to
their previous state:

https://github.com/ckan/ckan/blob/dev-v2.7/scripts/4042_fix_resource_extras.py

This issue is described in 4042

Fixes:
* Fix toggle bars header icon (3880)
* Change CORS header keys and values to string instead of unicode (3855)
* Fix cors header when all origins are allowed (3898)
* Update SOLR schema.xml reference in Dockerfile
* Build local SOLR container by default
* Create datastore indexes only if they are not exist
* Properly close file responses
* Use javascript content-type for jsonp responses (4022)
* Add Data Dictionary documentation (3989)
* Fix SOLR index delete_package implementation
* Add second half of DataStore set-permissions command(Docs)
* Fix extras overriding for removed resources (4042)
* Return a 403 if not authorized on the search page (4081)
* Add support for user/pass for Solr as ENV var
* Change permission_labels type to string in schema.xml (3863)
* Disallow solr local parameters
* Improve text view rendering
* Update Orgs/Groups logic for custom fields delete and update (4094)
* Upgrade Solr Docker image

2.7.2

Not secure
=================

* Include missing minified JavaScript files

2.7.1

Not secure
=================

* add field_name to image_upload macro when uploading resources (3766)
* Add some missing major changes to change log. (3799)
* _mail_recipient header override (3781)
* skip url parsing in redirect (3499)
* Fix multiple errors in i18n of JS modules (3590)
* Standardize on url_for on popup (3831)

2.7.0

Not secure
=================

General notes:
* Starting from this version, CKAN requires at least Postgres 9.3
* Starting from this version, CKAN requires a Redis database. Please
refer to the new `ckan.redis.url
<http://docs.ckan.org/en/ckan-2.7.0/maintaining/configuration.html#ckan-redis-url>`_
configuration option.
* This version requires a requirements upgrade on source installations
* This version requires a database upgrade
* This version requires a Solr schema upgrade
* There are several old features being officially deprecated starting from
this version. Check the *Deprecations* section to be prepared.

Major changes:
* New datatables_view resource view plugin for tabular data (3444)
* IDataStoreBackend plugins for replacing the default DataStore Postgres backend (3437)
* datastore_search new result formats and performance improvements (3523)
* PL/PGSQL triggers for DataStore tables (3428)
* DataStore dump CLI commands (3384)
* Wrap/override actions defined in other plugins (3494)
* DataStore table data dictionary stored as postgres comments (3414)
* Common session object for Flask and Pylons (3208)
* Rename deleted datasets when they conflict with new ones (3370)
* DataStore dump more formats: CSV, TSV, XML, JSON; BOM option (3390)
* Common requests code for Flask and Pylons so you can use Flask views via the
new IBlueprint interface (3212)
* Generate complete datastore dump files (3344)
* A new system for asynchronous background jobs (3165)
* Chaining of action functions (3494)

Minor changes:
* Renamed example theme plugin (3576)
* Localization support for groups (3559)
* Create new resource views when format changes (3515)
* Email field validation (3568)
* datastore_run_triggers sysadmin-only action to apply triggers to existing data (3565)
* Docs updated for Ubuntu 16.04 (3544)
* Upgrade leaflet to 0.7.7 (3534)
* Datapusher CLI always-answer-yes option (3524)
* Added docs for all plugin interfaces (3519)
* DataStore dumps nested columns as JSON (3487)
* Faster/optional datastore_search total calculation (3467)
* Faster group_activity_query (3466)
* Faster query performance (3430)
* Marked remaining JS strings translatable (3423)
* Upgrade font-awesome to 4.0.3 (3400)
* group/organization_show include_dataset_count option (3385)
* image_formats config option for image viewer (3380)
* click may now be used for CLI interfaces: use load_config instead of CkanCommand (3384)
* package_search option to return only names/ids (3427)
* user_list all_fields option (3353)
* Error controller may now be overridden (3340)
* Plural translations in JS (3211)
* Support JS translations in extensions (3272)
* Requirements upgraded (3305)
* Dockerfile updates (3295)
* Fix activity test to use utcnow (3644)
* Changed required permission from 'update' to 'manage_group' (3631)
* Catch invalid sort param exception (3630)
* Choose direction of recreated package relationship depending on its type (3626)
* Fix render_datetime for dates before year 1900 (3611)
* Fix KeyError in 'package_create' (3027)
* Allow slug preview to work with autocomplete fields (2501)
* Fix filter results button not working for organization/group (3620)
* Allow underscores in URL slug preview on create dataset (3612)
* Fallback to po file translations on ``h.get_translated()`` (3577)
* Fix Fanstatic URL on non-root installs (3618)
* Fixed escaping issues with ``helpers.mail_to`` and datapusher logs
* Autocomplete fields are more responsive - 300ms timeout instead of 1s (3693)
* Fixed dataset count display for groups (3711)
* Restrict access to form pages (3684)
* Render_datetime can handle dates before year 1900 (2228)

API changes:
* ``organization_list_for_user`` (and the ``h.organizations_available()``
helper) now return all organizations a user belongs to regardless of
capacity (Admin, Editor or Member), not just the ones where she is an
administrator (2457)
* ``organization_list_for_user`` (and the ``h.organizations_available()``
helper) now default to not include package_count. Pass
include_dataset_count=True if you need the package_count values.
* ``resource['size']`` will change from string to long integer (3205)
* Font Awesome has been upgraded from version 3.2.1 to 4.0.3 .Please refer to
https://github.com/FortAwesome/Font-Awesome/wiki/Upgrading-from-3.2.1-to-4
to upgrade your code accordingly if you are using custom themes.

Deprecations:
* The API versions 1 and 2 (also known as the REST API, ie ``/api/rest/*`` will removed
in favour of the version 3 (action API, ``/api/action/*``), which was introduced in
CKAN 2.0. The REST API will be removed on CKAN 2.8.
* The default theme included in CKAN core will switch to use Bootstrap 3 instead of
Bootstrap 2 in CKAN 2.8. The current Bootstrap 2 based templates will still be included
in the next CKAN versions, so existing themes will still work. Bootstrap 2 templates will
be eventually removed though, so instances are encouraged to update their themes using
the available documentation (https://getbootstrap.com/migration/)
* The activity stream related actions ending with ``*_list`` (eg ``package_activity_list``)
and ``*_html`` (eg ``package_activity_list_html``) will be removed in CKAN 2.8 in favour of
more efficient alternatives and are now deprecated.
* The legacy revisions controller (ie ``/revisions/*``) will be completely removed in CKAN 2.8.
* The old Celery based background jobs will be removed in CKAN 2.8 in favour of the new RQ based
jobs (http://docs.ckan.org/en/latest/maintaining/background-tasks.html). Extensions can still
of course use Celery but they will need to handle the management themselves.

v.2.6.9 2020-04-15
==================

General notes:
* Note: This version does not requires a requirements upgrade on source installations
* Note: This version does not requires a database upgrade
* Note: This version does not require a Solr schema upgrade

Fixes:

* Fix for number of datasets displayed on the My organizations tab (`3580 <https://github.com/ckan/ckan/pull/3580>`_)
* Fix datetime comparison in resource_dict_save (`5033 <https://github.com/ckan/ckan/pull/5033>`_)
* Fetch less data for `get_all_entity_ids` (`5201 <https://github.com/ckan/ckan/pull/5201>`_)
* Show error in text view if xhr failed (`5271 <https://github.com/ckan/ckan/pull/5271>`_)
* Allow vocabulary_id in /api/2/util/tag/autocomplete (`5071 <https://github.com/ckan/ckan/pull/5071>`_)
* Fix code injection in autocomplete module (`5064 <https://github.com/ckan/ckan/pull/5064>`_)
* Fix broken translation in image view placeholder (`5099 <https://github.com/ckan/ckan/pull/5116>`_)
* Filter revisions shown according to dataset permissions
* Update JS vendor libraries
* Use returned facets in group controller (`2713 <https://github.com/ckan/ckan/pull/5167>`_)
* Samesite support in auth cookie (`5255 <https://github.com/ckan/ckan/pull/5255>`_)
* Handle missing resources in case we have a race condition with the DataPusher (`3980 <https://github.com/ckan/ckan/pull/4918>`_)
* Add the g object to toolkit

v.2.6.8 2019-07-03
==================

General notes:
* Note: This version does not requires a requirements upgrade on source installations
* Note: This version does not requires a database upgrade
* Note: This version does not require a Solr schema upgrade

Fixes:

* Fix broken div nesting in the `user/read_base.html` (`4672 <https://github.com/ckan/ckan/issues/4672>`_)
* Strip local path when uploading file in IE (`4608 <https://github.com/ckan/ckan/issues/4608>`_)
* Increase size of h1 headings to 1.8em (`4665 <https://github.com/ckan/ckan/issues/4665>`_)
* Fix `ValueError` in `url_validator` (`4629 <https://github.com/ckan/ckan/issues/4629>`_)
* More robust auth functions for `resource_view_show` (`4827 <https://github.com/ckan/ckan/issues/4827>`_)
* Allow to customize the DataProxy URL (`4874 <https://github.com/ckan/ckan/issues/4874>`_)
* Allow custom CKAN callback URL for the DataPusher (`4878 <https://github.com/ckan/ckan/issues/4878>`_)

Page 1 of 16

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.