Onegov.core

~~~~~~~~~~~~~~~~~~~

- Orders independent upgrade tasks by their module dependencies.

This acts as a sane default for module upgrades. For example, if
onegov.ticket depends on onegov.user, all user tasks will be executed first.
Once the ticket tasks are run, the user tables are therefore up to date.

This change only affects the order of tasks which do not define no
explicit dependencies.

- Adds a datetime query argument converter.
[href]

~~~~~~~~~~~~~~~~~~~

- Allows to deal with CSV containing duplicate columns.
[msom]

~~~~~~~~~~~~~~~~~~~

- Adds the ability to manually define the csv encoding.
[msom]

~~~~~~~~~~~~~~~~~~~

- Tightens the security of identity_secret and csrf_secret.

Before, the identity_secret was shared between tennants (application ids).
As a result certain signing methods would generate tokens which would work
between multiple tennants. Fortunately this wasn't an avenue for serious
exploits.

With this change it is now much harder to use the identity/csrf secret
insecurely. By default those tokens are now bound to the tennant.
[href]

~~~~~~~~~~~~~~~~~~~

- Fixes pagination of empty collections throwing ZeroDivisionError errors.
[msom]

~~~~~~~~~~~~~~~~~~~

- Allows to configure the used locales.
[msom]