Kinto

Latest version: v18.1.0

Safety actively analyzes 627364 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 21 of 24

1.10.0

Not secure
------------------=

**Breaking changes**

- When using *cliquet-fxa*, the setting ``multiauth.policy.fxa.use`` must now
be explicitly set to ``cliquet_fxa.authentication.FxAOAuthAuthenticationPolicy``
- Fields in the root view were renamed (mozilla-services/cliquet600)

**Bug fixes**

- Fix redis default host in kinto init (fixes 289)
- Fix DockerFile with default configuration (fixes 296)
- Include plugins after setting up components (like authn/authz) so that plugins
can register views with permissions checking
- Remove ``__permissions__`` from impacted records values in ``ResourceChanged``
events (mozilla-services/cliquet586)

**Protocol**

Changed the naming in the root URL (hello view) (mozilla-services/cliquet600)

- Added ``http_api_version``
- Renamed ``hello`` to ``project_name``
- Renamed ``protocol_version`` to ``cliquet_protocol_version``
- Renamed ``documentation`` to ``project_docs``
- Renamed ``version`` to ``project_version``


**New features**

- New options in configuration of listeners to specify filtered actions and
resource names (mozilla-services/cliquet492, mozilla-services/cliquet555)
- Add ability to be notified on read actions on a resource (disabled by
default) (mozilla-services/cliquet493)

**Internal changes**

- Clarified how Kinto is versionned in the documentation (305)

1.9.0

Not secure
------------------

- Upgraded to *Cliquet* 2.11.0

**Breaking changes**

- For PostgreSQL backends, it is recommended to specify ``postgresql://``.

**Protocol**

- In the hello view:

- Add a ``bucket`` attribute in ``user`` mapping allowing clients
to obtain the actual id of their default bucket
- Add the ``protocol_version`` to tell which protocol version is
implemented by the service. (324)

- ``_since`` and ``_before`` now accepts an integer value between quotes ``"``,
as it would be returned in the ``ETag`` response header.
- A batch request now fails if one of the subrequests fails
(mozilla-services/cliquet510) (*see new feature about
transactions*)

**New features**

- Add a Kinto command for start and migrate operation. (129)
- Add a Kinto command to create a configuration file. (278)
- A transaction now covers the whole request/response cycle (194).
If an error occurs during the request processing, every operation performed
is rolled back. **Note:** This is only enabled with *PostgreSQL* backends. In
other words, the rollback has no effect on backends like *Redis* or *Memory*.

- New settings for backends when using PostgreSQL: ``*_max_backlog``,
``*_max_overflow``, ``*_pool_recycle``, ``*_pool_timeout`` to
control connections pool behaviour.

**Bug fixes**

- Fix 500 error response (instead of 503) when storage backend fails during
implicit creation of objects on ``default`` bucket. (fixes 236)
- Fixed ``Dockerfile`` for PostgreSQL backends.
- Fix JSON schema crash when no field information is available.

**Internal changes**

- Optimization for retrieval of user principals (263)
- Do not build the Docker container when using Docker Compose.
- Add Python 3.5 on TravisCI
- Add schema validation loadtest (fixes 201)
- Multiple documentation improvements.
- The PostgreSQL backends now use SQLAlchemy sessions.

See also `*Cliquet* changes <https://github.com/mozilla-services/cliquet/releases/2.11.0>`_

1.8.0

Not secure
------------------

- Upgraded to *Cliquet* 2.10.0

**Protocol breaking changes**

- Moved ``userid`` attribute to a dedicated ``user`` mapping in the hello
view (242).

**New features**

- Follow redirections in batch subrequests (fixes mozilla-services/cliquet511)
- Set cache headers only when anonymous (fixes mozilla-services/cliquet449)
- Add a ``readonly`` setting to run the service in read-only mode. (241)
- If no client cache is set, add ``Cache-Control: no-cache`` by default,
so that clients are forced to revalidate their cache against the server
(ref Kinto/kinto231)

**Bug fixes**

- Fixed 503 error message to mention backend errors in addition to unavailability.
- When recreating a record that was previously deleted, status code is now ``201``
(ref mozilla-services/cliquet530).
- Fix PostgreSQL error when deleting an empty collection in a protected
resource (fixes mozilla-services/cliquet528)
- Fix PUT not using ``create()`` method in storage backend when tombstone exists
(fixes mozilla-services/cliquet530)
- Delete tombstone when record is re-created (fixes mozilla-services/cliquet518)
- Fix crash with empty body for PATCH (fixes mozilla-services/cliquet477,
fixes mozilla-services/cliquet516)
- Fix english typo in 404 error message (fixes mozilla-services/cliquet527)

1.7.0

Not secure
------------------

- Upgraded to *Cliquet* 2.9.0
- Update cliquet-fxa configuration example for cliquet-fxa 1.4.0
- Improve the documentation to get started

**New features**

- Added Pyramid events, triggered when the content of a resource has changed. (488)
- Added ``kinto.includes`` setting allowing loading of plugins once Kinto
is initialized (unlike ``pyramid.includes``). (504)


**Protocol**

- Remove the broken git revision ``commit`` field in the hello page. (495).

`Please read the full Cliquet 2.9.0 changelog for more information <https://github.com/mozilla-services/cliquet/releases/tag/2.9.0>`_

1.6.2

Not secure
------------------

**Bug fixes**

- Handle 412 details with default bucket (226)

1.6.1

Not secure
------------------

- Upgraded to *Cliquet* 2.8.2

**Bug fixes**

- Return a JSON body for 405 response on the default bucket (214)

**Internal changes**

- Improve documentation for new comers (217)
- Do not force host in default configuration (219)
- Use tox installed in virtualenv (221)
- Skip python versions unavailable in tox (222)

Page 21 of 24

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.