Invenio v2.0.2
Invenio v2.0.2 is released
Invenio v2.0.2 was released on April 17, 2015.
About
Invenio is a digital library framework enabling you to build your own
digital library or document repository on the web.
Security fixes
- celery:
- Forces Celery to only accept msgpack content when using standard
configuration. This disallows pickle messages which can be used
for remote code execution. (#3003)
- Forces Celery to only accept msgpack content when using standard
- global:
- Disables all attempts to serve directory listings for directories
found under static root.
- Disables all attempts to serve directory listings for directories
Incompatible changes
- celery:
- If you use any Celery serializer other than msgpack, you must
update configuration variable CELERY_ACCEPT_CONTENT to include
that serializer.
- If you use any Celery serializer other than msgpack, you must
- pidstore:
- Refactors DataCite provider to use the new external DataCite API
client. - Removes DataCite API client from Invenio.
- Refactors DataCite provider to use the new external DataCite API
New features
- docs:
- Adds "Code of Conduct" to the "Community" documentation.
- Adds new fast track deprecation policy.
- Documents commit message labels used by developers (such as NEW,
SECURITY, FIX, etc.) used in automatic generation of structured
release notes. (#2856)
- global:
- Adds a
inveniomanage config locate
command to request the
location of the instance config file. - Adds new configurable variable
INVENIO_APP_CONFIG_ENVS
that can
be set both frominvenio.cfg
and OS environment. Application
factory iterates over comma separated list of configuration
variable names and updates application config with equivalent OS
environment value. (#2858)
- Adds a
- template:
- Adds 'u' filter that converts str to unicode in Jinja2 templates
since support for str has been deprecated. Example:{{ mystr|u }}
. (#2862)
- Adds 'u' filter that converts str to unicode in Jinja2 templates
Improved features
- docs:
- Adds example of how to deprecate a feature and includes
deprecation policy in documentation.
- Adds example of how to deprecate a feature and includes
- global:
- Moves datacite API wrapper to external package.
- Escapes all unicode characters in Jinja2 templates.
- installation:
- Apache virtual environments are now created with appropriate
WSGIDaemonProcess
user value, taken from the configuration
variableCFG_BIBSCHED_PROCESS_USER
, provided it is set. This
change makes it easier to run Invenio under non-Apache user
identity. - Apache virtual environments are now created with appropriate
WSGIPythonHome
directive so that it would be easier to run
Invenio from within Python virtual environments.
- Apache virtual environments are now created with appropriate
- jsonalchemy:
Bug fixes
- admin:
- assets:
- documents:
- Flask-Login import in field definition. (#2905)
- Safer upgrade recipe for migrations from the old document storage
model (used in v1.1) to the new document storage model (used in
v1.2).
- global:
- installation:
- Adds Babel as setup requirements for installing compile_catalog
command.
- Adds Babel as setup requirements for installing compile_catalog
- jsonalchemy:
- Fixes the definition of time_and_place_of_event_note,
series_statement and source_of_description fields.
- Fixes the definition of time_and_place_of_event_note,
- oairepository:
- Switches keys in CFG_OAI_METADATA_FORMATS configuration mapping.
(#2962) - Amends bfe_oai_marcxml element since get_preformatted_record does
not return a tuple anymore.
- Switches keys in CFG_OAI_METADATA_FORMATS configuration mapping.
- search:
- sorter:
- Comparison function of record tags uses space concatened string
from list of all tags values. (#2750)
- Comparison function of record tags uses space concatened string
Notes
- assets:
- Adds deprecation warning when LESS_RUN_IN_DEBUG is used. (#2923)
- global:
- Deprecates use of invenio.utils.datacite:DataCite (to be removed
in Invenio 2.2). - External authentication methods are being deprecated. Please use
invenio.modules.oauthclient
or Flask-SSO instead. (#1083) - Recreate Apache site configurations using new template. Run
following command:inveniomanage apache create-config
. - Deprecates custom remote debuggers. Please use native Werkzeug
debugger or other (*)pdb equivalents. (#2945) - Adds deprecation warning for
invenio.ext.jinja2hacks
and all
detected non-ascii strings usage in templates mainly coming from
legacy (1.x) modules. (#2862)
- Deprecates use of invenio.utils.datacite:DataCite (to be removed
- installation:
- Limits version of SQLAlchemy<=1.0 and SQLAlchemy-Utils<=0.30.
- oairepository:
- Changes current behavior of OAI-PMH server for logged in users to
take into account all records a user can view and not only public
records.
- Changes current behavior of OAI-PMH server for logged in users to
Installation
$ pip install invenio
Documentation
http://invenio.readthedocs.org/en/v2.0.2
Homepage
https://github.com/inveniosoftware/invenio
Happy hacking and thanks for choosing Invenio.
| Invenio Development Team
| Email: [email protected]
| IRC: #invenio on irc.freenode.net
| Twitter: http://twitter.com/inveniosoftware
| GitHub: http://github.com/inveniosoftware
| URL: http://invenio-software.org