Kinto

------------------

- Upgraded to *Cliquet* 2.8.1

**Breaking changes**

- Settings prefixed with ``cliquet.`` are now deprecated, and should be replaced
with non prefixed version instead.
- In the root url response, public settings are exposed without prefix too
(e.g. ``batch_max_requests``).

------------------

- Upgraded to *Cliquet* 2.7.0

------------------

- Add Disqus comments to documentation (fixes 159)

**New features**

- Allow POST to create buckets (fixes 64)
- Control client cache headers from settings or collection objects (189)

**Internal changes**

- Remove dead code (187, ref 53)
- Add pytest-capturelog for better output on test failures (191)
- Install cliquet middleware (*no-op if disabled*) (193)
- Many optimizations on ``default`` bucket (192, 197)
- Many optimizations on number of storage hits (203)
- Fix contributing docs about tests (198)
- Added more batched actions to loadtests (199)

------------------

**New features**

- Partial collection of records when user has no ``read`` permission on collection (fixes 76).
Alice can now obtain a list of Bob records on which she has individual ``read`` permission!
- Collection can now specify a JSON schema and validate its records (31).
The feature is marked as *experimental* and should be explicitly enabled
from settings (181)
- Accept empty payload on buckets and collections creation (63)
- Allow underscores in Kinto bucket and collection names (153, fixes 77)
- Collection records can now be filtered using multiple values (``?in_status=1,2,3``) (mozilla-services/cliquet39)
- Collection records can now be filtered excluding multiple values (``?exclude_status=1,2,3``) (mozilla-services/readinglist68)
- Current userid is now provided when requesting the hello endpoint with an ``Authorization``
header (mozilla-services/cliquet319)
- UUID validation now accepts any kind of UUID, not just v4 (mozilla-services/cliquet387)
- Querystring parameter ``_to`` on collection records was renamed to ``_before`` (*the former is now
deprecated*) (mozilla-services/cliquet391)
- Allow to configure info link in error responses with ``cliquet.error_info_link``
setting (mozilla-services/cliquet395)

**Bug fixes**

- Fix consistency in API to modify permissions with PATCH (fixes 155)
The list of principals for each specified permission is now replaced by the one
provided.
- Use correct HTTP Headers encoding in both Python2 and Python3 (141)
- ETag is now returned on every verb (fixes 110)

**Internal changes**

- When deleting a collection also remove the records tombstones (136)
- Complete revamp of the documentation (156 167 168 169 170)
- Upgraded to *Cliquet* 2.6.0

------------------

- Upgraded to *Cliquet* 2.3.1

**Bug fixes**

- Make sure the default route only catch /buckets/default and
/buckets/default/* routes. (131)

------------------

- Upgraded to *Cliquet* 2.3.0

**Bug fixes**

- Handle CORS with the default bucket. (126, 135)
- Add a test to make sure the tutorial works. (118)

**Internal changes**

- List StatsD counters and timers in documentation (fixes 73)
- Update virtualenv dependencies on setup.py modification (fixes 130)