Python-nightscout


- remove `+` metadata from version
- upgrade webpack to 4.29.3
- stick to `event-stream` version 3.3.4, because with 4.0.1 GitHub will issue a security warning
- for all other changes, see https://github.com/nightscout/cgm-remote-monitor/releases/tag/0.11.0

Make sure you use the released version. That can be found at
https://github.com/nightscout/cgm-remote-monitor/releases


Changes

Over 360 commits, 89 files changed, +8,428 / −6,569 lines of changes (full list of changes here:
https://github.com/nightscout/cgm-remote-monitor/pull/4022/commits )

New features
- Fully secure by default out of the box. Unsecure access via http is not allowed anymore by default. This might force you to re-authenticate with your `API_SECRET` or token if you were using unsecure access. (PieterGit )
- No outdated packages with vulnerabilities are being used anymore (PieterGit )
- Add Week to Week report (jpcunningh, https://github.com/nightscout/cgm-remote-monitor/pull/4123 )
- Add Loopalyzer report to analyse looping. Visualize your loop (lixgbg, https://github.com/nightscout/cgm-remote-monitor/pull/3629 https://github.com/nightscout/cgm-remote-monitor/pull/4235 )
- Add predictions support to Day to Day report (lixgbg, https://github.com/nightscout/cgm-remote-monitor/pull/3179 )
- Add cgm sensor stop to Careportal (jpcunningh, https://github.com/nightscout/cgm-remote-monitor/pull/4060)

Removed features
- remove `mqtt` module, because it had a security issue and was not used
- remove `sgvdata` module, because it had a security issue, added a lot of complexity and wasn't needed (PieterGit ). Replacement implementation for CSV and TSV export (sulkaharo ).

Improvements
- Fix MongoDB database insert handling. Log error on inserts and don't crash in case the MongoDB disk is full or MongoDB quota is reached (sulkaharo and jpcunningh)
- Upgrade packages to recent version, fixing all known security issues with dependencies (PieterGit)
- Redirect redirect HTTP to HTTPS and implement HSTS (jweismann, PieterGit, https://github.com/nightscout/cgm-remote-monitor/pull/4044 and https://github.com/nightscout/cgm-remote-monitor/issues/4010 and https://github.com/nightscout/cgm-remote-monitor/pull/4253 )
- Technical improvement: Migrate from `uglify-js` to `terser-webpack-plugin` (PieterGit)
- Streamlined Heroku deployment template with more descriptive text and more appropriate defaults for new users (unsoluble, https://github.com/nightscout/cgm-remote-monitor/pull/4116 )

Bug fixes
- Fix CGM voltageb battery warning level to match xDrip+ (jpcunningh, https://github.com/nightscout/cgm-remote-monitor/pull/3954 )
- Fix daylight saving and reloading bug in profile editor, (DigitalDan1, Kywalh https://github.com/nightscout/cgm-remote-monitor/pull/4029 and https://github.com/nightscout/cgm-remote-monitor/pull/4074 )
- Reduce the amount of Profile Switch treatments being loaded to fix UI slowdown and Nightscout home screen losing AAPS data from >3 hours ago, (sulkaharo, vickster1, https://github.com/nightscout/cgm-remote-monitor/issues/4055 )
- Upgrade to [share2nightscout 0.2.0](https://github.com/nightscout/share2nightscout-bridge/releases/tag/0.2.0). Prevent Nightscout server crashes in case Dexcom server does not respond (PieterGit, veryfancy)
- Fix UI so pills are updated immediately after new data is loaded (sulkaharo)
- Fixes to If-Modified-Since HTTP header handling for BG data (sulkaharo)

Documentation and language updates
- Language updates for Danish, Dutch, German, Hebrew, Norwegian, Russian
- New languages: Japanese, Turkish
- Update Alexa documentation. Note that some Alexa improvements are postponed to Nightscout 0.12 because the Alexa plugin needs refactoring, see https://github.com/nightscout/cgm-remote-monitor/issues/4168#issuecomment-451701994
- Update IFTTT maker-setup.md docs (Dave9111, unsoluble, https://github.com/nightscout/cgm-remote-monitor/pull/4206 )
- Updated various docs, including [CONTRIBUTING](https://github.com/nightscout/cgm-remote-monitor/blob/dev/CONTRIBUTING.md) documentation

Upgrade notes
- We only allow Nightscout to start with a secure Node JS.
- Latest Node 8 LTS (8.15.0 or later) and Latest Node 10 LTS (10.15.1 or later) are recommended and supported.
- Latest Node version on Azure (currently 10.14.0) is tolerated, but not recommended
- Other versions will not start
- The [rawbg](https://github.com/nightscout/cgm-remote-monitor#rawbg-raw-bg) settings are converted to a single setting tri-state variable.
- We improved security and added several new environment variables such as [INSECURE_USE_HTTP and SECURE_HSTS_HEADER](https://github.com/nightscout/cgm-remote-monitor/#predefined-values-for-your-server-settings-optional)
- Your site redirects to https by default. If you don't want that or use a Nginx or Apache proxy, set `INSECURE_USE_HTTP` to `true`.
- We enabled [HTTP Strict Transport Security (HSTS)](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security) headers by default, settings `SECURE_HSTS_HEADER` and `SECURE_HSTS_HEADER_*`

Upgrade notes for Azure users

We recommend Azure users consider migrating their hosting to Heroku, as we've observed Heroku users have significantly less issues with having their sites work reliably. If you want to continue using Azure, change the following configuration variables in Azure before updating to the latest Nightscout version:

WEBSITE_NODE_DEFAULT_VERSION=10.14.1
SCM_COMMAND_IDLE_TIMEOUT=300


Install instructions

Install instructions can be found: https://github.com/nightscout/cgm-remote-monitor/blob/master/README.md#install

Contributors to this release

The release coordination for this release was done by PieterGit
We would like to thank the following people for their contribution (in alphabetical order):
anderser, apanasef, balshor, bewest, blocklist_twitter, CaroGo, cascer1, cluckj, danamlewis, Dave9111, diabetlum, herzogmedia, janrpn, jasoncalabrese, jpcunningh, jweismann, kenstack, Kywalh, lixgbg, LuminaryXion, MilosKozak, mitrei, PaperT1D, PieterGit, unsoluble, rarneson, renegadeandy, scottleibrand, sulkaharo, T-o-b-i-a-s, tynbendad, unsoluble, veryfancy, viq, wootmasterslick

(if I forgot somebody, please respond)

TODO for next release

TODO: Translations, Languages with less than 80% will be removed in a future Nightscout version. Currently the following languages are at risk:
中文（繁體） (zh_tw), Hrvatski (hr), Ελληνικά (el), 한국어 (ko)
See https://gitter.im/nightscout/public?at=5bef2f34de42d46bba766f66

This is a bug fix release to so the web visualizatio loads on iOS 9 and older

- New feature: `speech` plugin added. Speech synthesis plugin. When enabled, speaks out the blood glucose values, IOB and alarms.
- New feature: `xdrip-js` plugin added. Integrated xDrip-js monitoring
- Nightscout now deals with mLab and other Mongo database outages better and shouldn't need a restart after an outage
- Nightscout web page loading is now more robust for people using Loop, OpenAPS, AndroidAPS or multiple uploaders
- Site navigation now links to multiple clock views
- Client color themes now has a new 'colorblindfriendly' scheme that works better for users with deuteranopia (and possible other forms of color blindness)
- Careportal. Add support for temp targets in mmol/l
- New plugin to track pump battery age (batteryage) has been added

Other Changes & Bugfixes

- Over 250 commits, 118 files changed, +13,734 / −7,169 lines of changes (full list of changes here: https://github.com/nightscout/cgm-remote-monitor/pull/3704/commits )
- Only locales that have language support are loaded as Moment.js locales, reducing the size of the javascript bundle
- upgrade to Node 8.11.x LTS. Use of Node 9 or Node 10 is not recommended
- upgrade to Npm 5.6.x or later. Npm 6.1.x is recommended. No support for Npm 5.x (x<4)
- upgrade a lot of upgrades to dependencies, including security fixes
- `forever` has been removed for Heroku startup with the `Procfile`
- upgrade mongodb client and support MongoDB 4.x
- README updated, especially Windows instructions
- Glucose variability report now works correctly with hourly filters and sorting
- activity data storage API has been added (but no visualization for the data yet, scheduled for a later release)
- `PUMP_WARNONSUSPEND` renamed to `PUMP_WARN_ON_SUSPEND`. Set to `true` to get an alarm when the pump is suspended.
- `DEVICESTATUS_ADVANCED` (`true`) - Now defaults to true. Users who only have a single device uploading data to Nightscout can set this to false to reduce the data use of the site.
- swagger and OPEN API restored, see `/swagger.yaml` or `/swagger.json`
- most language localizations have been improved but still need work! Please join the Nightscout Translators group for details on how to help!
- Updated docs for alexa plugin
- Careportal: add Pump Battery Change event
- TDD average on daytoday report (total daily dosage)

We recommend Azure users consider migrating their hosting to Heroku, as we've observed Heroku users have significantly less issues with having their sites work reliably. If you want to continue using Azure, *change the following configuration variables in Azure before updating* to the latest Nightscout version:

WEBSITE_NODE_DEFAULT_VERSION=8.11.1
SCM_COMMAND_IDLE_TIMEOUT=300

Install instructions can be found: https://github.com/nightscout/cgm-remote-monitor/blob/master/README.md#install

The release coordination for this release was done by PieterGit and sulkaharo.
We would like to thank the following people for their contribution (in alphabetical order): 2flea, aaronjknox, AdrianLxM, apanasef, bogdangorescu, brutevinch, Dave2526, dbeasy, dideldum, dm61, dougboss, h2oil, HenrikHL, herzogmedia, hichameyessou, hummelstrand, jaylagorio, jasoncalabrese, jimrandomh, John Weston, jpcunningh, Kdisimone, kretch, lsandini, mdomox, MilosKozak, mpangburn, norbertgaal, pedrojparedes, PieterGit, PoweRGbg, rhdtv2002, ScheddyD, schmitzn, scottleibrand, someoneAnyone, sulkaharo, tanja3981, Tornado-Tim, unsoluble, veryfancy, whooze, winni67.

This release contains a large amount of fixes reported for the earlier Habanero releases & improvements lined below. Huge thanks for all the help - this release has more contributors than most of the previous releases. <3

If you haven't noticed issues with the previous Habanero release, there is no need to update to this version.

**IMPORTANT** If deploying the site to Azure, due to limitations in how Azure works, you have to ensure WEBSITE_NODE_DEFAULT_VERSION app setting is set to 8.9.0 for Nightscout **before** updating the site.

If hosting yourself, note npm must be run as the non-root user used to run node web server (as intended by npm) for the deploy to succeed.

This release now has a "sub-name" to make it easier to talk about which version of each release everyone has installed. This update is called Habanero Red (0.10.2), the previous update has been renamed to Habanero Yellow (0.10.1) and the initial Habanero is... still just Habanero (0.10.0).

**Translations notice:** the Danish, French, Spanish, Hebrew, Hungarian and Taiwanese Mandarin coverage of all translatable text has dropped to unacceptably low level and we might need to officially drop support for these languages unless we find a volunteer to update the translations. If you're interested in helping out (or adding a new language!), please join the Nightscout Translators group in Facebook to find the instructions and coordinate your work with others.

**Changes:**

* Updated Node to 8.9.1, with security fixes (sulkaharo & big thanks to PieterGit for helping test the new Node versions)
* Downgraded npm to 5.2.0 to fix intermittent issues with installing Nightscout (sulkaharo)
* New faster mechanism to load food data into the client (thanks MilosKozak)
* Additional unit tests for higher test coverage (thanks christopher-fredregill)
* Fixed an issue with generating javascript source maps for development and production to help debug issues (sulkaharo)
* Fixes a date handling issue with the If-Modified-Since in the treatments API (Thanks jamorham and ecc1)
* Profile editor now calculates daily total basal (alimhassam)
* Adds recommended bolus and eventual BG to Loop pill, improves RSSI handling (dm61)
* BG Clock now has a trend arrow (danielharrelson)
* Added BG Clock link to the Settings menu & added 24H support (sulkaharo)
* Dutch translations have been improved (boysim)
* There is a new 2 hour view mode & OpenAPS prediction / uploaded data rendering has been improved (thanks scottleibrand)
* Further improvements to glucose data filtering for distribution reports (sulkaharo)
* AAPS profile switch feature improvements and fixes (miloskozak)
* Report rendering of events with a duration has been improved (MilosKozak)

This is a point-release to fix issues with the previous release.

**Fixes:**

* The /v2 API had lost some data fields, now fixed
* Some missing UI icons have been added back
* Fixed the file cache path for minify to reduce the memory footprint of the server runtime
* iOS 11 users can again enter negative %-based temp basals in CarePortal
* Russian localization improvements
* /clock.html layout fix
* Distribution reporting now calculates target area times correctly when using hourly filtering

**Improvements:**

* Loop users should see the pump RSSI in the Loop pill