Release 5.3

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

UPGRADING.rst

@@ -1,7 +1,30 @@
 Upgrading Pagure
 ================
 
-From 5.2 to 5.1.x
+From 5.2 to 5.3
+---------------
+
+The 5.3 release contains a database schema updates, so:
+
+* Update the data schema using alembic: ``alembic upgrade head``
+
+(As usual, do your backups before).
+
+While working on pagure 5.3, we found that the version of python werkzeug
+available in CentOS 7 is too old and makes some of pagure's tests fail. We
+recomment it to be upgrade to at least 0.9.6.
+
+New configuration keys have been added:
+
+* ENABLE_TICKETS_NAMESPACE
+* FEDORA_MESSAGING_NOTIFICATIONS
+* SYNTAX_ALIAS_OVERRIDES
+* ALWAYS_STOMP_ON_COMMITS
+* ALWAYS_MQTT_ON_COMMITS
+* MQTT_TOPIC_PREFIX
+
+
+From 5.1.x to 5.2
 -----------------
 
 The 5.2 release contains a database schema updates, so:

doc/changelog.rst

@@ -3,8 +3,60 @@ Changelog
 
 This document records all notable changes to `Pagure <https://pagure.io>`_.
 
+5.3 (2019-02-18)
+----------------
+
+.. warning:: This release contains a security fix for CVE-2019-762
+
+- Change "created by" to "maintained by" in repo info (Ryan Lerch)
+- Fix showing an input box if the minimum score for PR is set to 0
+- Fix the output of the merge PR API endpoint when the PR conflicts
+- Add some documentation on our magic keywords
+- Allow filtering user's PR by time information
+- Add the possibility to filter the user's issues by dates
+- Add support for the `resolve` keyword among our magic words
+- Allow any username to be searched in issues filters (Ryan Lerch)
+- Allow using Pagure with python-redis >= 3.0.0 (Neal Gompa)
+- Fix Markdown usage to work with Markdown 3.0+ (Neal Gompa)
+- Decode the output from the shell commands if they are not already unicode
+- Add THEME option docs to configuration documentation (Ryan Lerch)
+- Fix updating the date_modified when giving the project to someone
+- Don't try mirroring if we failed generating private key
+- Change couple of log entries from info to warning
+- Cascade deleting flags when tokens are deleted
+- Ensure there are admin groups before adding them to the list of groups
+- Move the create_session function into pagure.lib.model_base
+- Make the button to show/hide the URL to checkout locally a PR more visible
+- Fixup documentation about modifyacls (Igor Gnatenko)
+- Force highlight.js to use certain highlighting schemes in file view
+  (Ryan Lerch)
+- Fix the total number of members on the repo info page
+- Fix not showing the edit and delete buttons when they won't work
+- Add project connector api endpoint (Fabien Boucher)
+- Api: project connector endpoint: complete returned data (Fabien Boucher)
+- Fix repoSpanner integration (Patrick Uiterwijk)
+- Make sure repoSpanner tests run in CentOS CI (Patrick Uiterwijk)
+- Only block new branches in hooks (Lubomír Sedlář)
+- Add support for fedora-messaging in pagure
+- Fix calculation of days until API key expires in the emails (Karsten Hopp)
+- Move to container-based testing on jenkins testing the following environment
+  - F29 using python3 with dependencies installed as RPMs
+  - F29 using python3 with dependencies installed via pip
+  - CentOS7 using python2 with dependencies installed as RPMs
+- Add project createapitoken endpoint (Fabien Boucher)
+- CVE-2019-7628: Do not leak partial API keys. (Randy Barlow)
+- Provide full repospanner reponame for aclchecker/repobridge (Slavek Kabrda)
+- Allow turning on issue tracking for only some namespaces
+- Do not allow `,` in tags
+- Ensure we can add/edit/delete tags even when issues are off but PRs aren't
+- Fix cancelling a rebase
+- Add options to send notifications on all the message bus we support on all
+  commits
+
+
 5.2 (2019-01-07)
 ----------------
+
 - Add support for the MQTT protocol (jingjing)
 - Add support for mirroring in git repositories from outside sources
 - Add the possibility to give a group away

doc/contributors.rst

@@ -3,41 +3,42 @@ Contributors to pagure
 
 Pagure would be nothing without its contributors.
 
-On January 7, 2019 (release 5.2) the list looks as follow:
+On February 22, 2019 (release 5.3) the list looks as follow:
 
 =================  ===========
 Number of commits  Contributor
 =================  ===========
-  6401              Pierre-Yves Chibon <pingou@pingoured.fr>
-   324              Ryan Lerch <rlerch@redhat.com>
+  6485              Pierre-Yves Chibon <pingou@pingoured.fr>
+   328              Ryan Lerch <rlerch@redhat.com>
    172              Vivek Anand <vivekanand1101@gmail.com>
    139              farhaanbukhsh <farhaan.bukhsh@gmail.com>
    133              Clement Verna <cverna@tutanota.com>
    133              Patrick Uiterwijk <puiterwijk@redhat.com>
+    91              Patrick Uiterwijk <patrick@puiterwijk.org>
     88              Farhaan Bukhsh <farhaan.bukhsh@gmail.com>
-    81              Patrick Uiterwijk <patrick@puiterwijk.org>
-    60              Slavek Kabrda <bkabrda@redhat.com>
+    61              Slavek Kabrda <bkabrda@redhat.com>
     59              Johan Cwiklinski <johan@x-tnd.be>
     47              Mark Reynolds <mreynolds@redhat.com>
-    43              Karsten Hopp <karsten@redhat.com>
+    45              Karsten Hopp <karsten@redhat.com>
+    32              Lubomír Sedlář <lsedlar@redhat.com>
     32              Matt Prahl <mprahl@redhat.com>
     32              Pradeep CE (cep) <breathingcode@gmail.com>
-    31              Lubomír Sedlář <lsedlar@redhat.com>
     25              Lubomír Sedlář <lubomir.sedlar@gmail.com>
+    24              Neal Gompa <ngompa13@gmail.com>
     23              rahul Bajaj <you@example.com>
     20              Jeremy Cline <jeremy@jcline.org>
-    20              Neal Gompa <ngompa13@gmail.com>
     19              Aurélien Bompard <aurelien@bompard.org>
     19              Gaurav Kumar <aavrug@gmail.com>
     18              Abhijeet Kasurde <akasurde@redhat.com>
     18              Sayan Chowdhury <sayan.chowdhury2012@gmail.com>
     17              Adam Williamson <awilliam@redhat.com>
     17              Ralph Bean <rbean@redhat.com>
-    15              Brian Stinson <brian@bstinson.com>
+    16              Brian Stinson <brian@bstinson.com>
+    15              Igor Gnatenko <ignatenkobrain@fedoraproject.org>
+    15              Lenka Segura <lenka@sepu.cz>
     15              Vibhor Verma <vibhcool@gmail.com>
-    14              Igor Gnatenko <ignatenkobrain@fedoraproject.org>
+    14              Fabien Boucher <fboucher@redhat.com>
     14              Justin W. Flory <git@jwf.io>
-    14              Lenka Segura <lenka@sepu.cz>
     13              Ghost-script <subho.prp@gmail.com>
     13              Martin Basti <mbasti@redhat.com>
     13              Mathieu Bridon <bochecha@fedoraproject.org>
@@ -66,7 +67,6 @@ Number of commits  Contributor
      3              Chenxiong Qi <cqi@redhat.com>
      3              Dhriti Shikhar <dhriti.shikhar.rokz@gmail.com>
      3              Eric Barbour <emb4gu@virginia.edu>
-     3              Fabien Boucher <fboucher@redhat.com>
      3              Jan Pokorný <jpokorny@redhat.com>
      3              Jason Tibbitts <tibbs@math.uh.edu>
      3              Kushal Khandelwal <kushal124@gmail.com>
@@ -85,6 +85,8 @@ Number of commits  Contributor
      2              Anatoli Babenia <anatoli@rainforce.org>
      2              Carlos Mogas da Silva <r3pek@r3pek.org>
      2              Daniel Mach <dmach@redhat.com>
+     2              Fabian Arrotin <fabian.arrotin@arrfab.net>
+     2              Hervé Beraud <hberaud@redhat.com>
      2              Kamil Páral <kparal@redhat.com>
      2              Luis Guzman <ark@switnet.org>
      2              Neha Kandpal <iec2015048@iiita.ac.in>
@@ -116,7 +118,6 @@ Number of commits  Contributor
      1              Charelle Collett <ccollett@redhat.com>
      1              David Caro <dcaroest@redhat.com>
      1              Eashan <eashankadam@gmail.com>
-     1              Fabian Arrotin <fabian.arrotin@arrfab.net>
      1              Felix Yan <felixonmars@users.sf.net>
      1              Filip Valder <fvalder@redhat.com>
      1              Haikel Guemar <hguemar@fedoraproject.org>
@@ -132,6 +133,7 @@ Number of commits  Contributor
      1              Mohan Boddu <mboddu@redhat.com>
      1              Peter Kolínek <fedora@pessoft.com>
      1              Petr Šplíchal <psplicha@redhat.com>
+     1              Randy Barlow <randy@electronsweatshop.com>
      1              Robert Bost <rbost@redhat.com>
      1              Romain DEP. <rom1dep@gmail.com>
      1              Ryan Lerch <ryanlerch@gmail.com>

files/pagure.spec

@@ -16,7 +16,7 @@
 
 
 Name:               pagure
-Version:            5.2
+Version:            5.3
 Release:            1%{?dist}
 Summary:            A git-centered forge
 
@@ -491,6 +491,9 @@ done
 
 
 %changelog
+* Fri Feb 22 2019 Pierre-Yves Chibon <pingou@pingoured.fr> - 5.3-1
+- Update to pagure 5.3
+
 * Mon Jan 07 2019 Pierre-Yves Chibon <pingou@pingoured.fr> - 5.2-1
 - Update to pagure 5.2
 

pagure/__init__.py

@@ -11,5 +11,5 @@
 from __future__ import unicode_literals, absolute_import
 
 
-__version__ = "5.2"
-__api_version__ = "0.25"
+__version__ = "5.3"
+__api_version__ = "0.26"