Skip to content
This repository has been archived by the owner on Jul 13, 2023. It is now read-only.

Commit

Permalink
Prepare release 5.2.0
Browse files Browse the repository at this point in the history
This is a year in the making, with a security patch motivating it.

[ci skip]
  • Loading branch information
mike-burns committed Jan 23, 2018
1 parent 80847b4 commit 4ebedfb
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 7 deletions.
26 changes: 20 additions & 6 deletions NEWS
Original file line number Diff line number Diff line change
@@ -1,11 +1,17 @@
master:
5.2.0 (2018-01-23):

* Security: Remove the automatic loading of URI adapters. Some of these
adapters can be specially crafted to expose your network topology. (#2435)
* Bugfix: The rake task no longer rescues `Exception`. (#2476)
* Bugfix: Handle malformed `Content-Disposition` headers (#2283)
* Bugfix: The `:only_process` option works when passed a lambda again. (#2289)
* Improvement: Added `:use_accelerate_endpoint` option when using S3 to enable
[Amazon S3 Transfer Acceleration](http://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html)
* Improvement: make the fingerprint digest configurable per attachment. The
default remains MD5 but this will change in a future version because it is
not considered secure anymore against intentional file corruption. For more
info, see https://en.wikipedia.org/wiki/MD5#Security
(#2291)
* Improvement: Make the fingerprint digest configurable per attachment. The
default remains MD5. Making this configurable means it can change in a future
version because it is not considered secure anymore against intentional file
corruption. For more info, see https://en.wikipedia.org/wiki/MD5#Security

You can change the digest used for an attachment by adding the
`:adapter_options` parameter to the `has_attached_file` options like this:
Expand All @@ -17,7 +23,15 @@ master:
User attachments:
`CLASS=User rake paperclip:refresh:fingerprints`
You can optionally limit the attachment that will be processed, e.g:
`CLASS=User ATTACHMENT=avatar rake paperclip:refresh:fingerprints`
`CLASS=User ATTACHMENT=avatar rake paperclip:refresh:fingerprints` (#2229)
* Improvement: The new `frame_index` option on the thumbnail processor allows
you to select a specific frame from an animated upload to use as a thumbnail.
Initial support is for mkv, avi, MP4, mov, MPEG, and GIF. (#2155)
* Improvement: Instead of copying files, use hard links. This is an
optimization. (#2120)
* Improvement: S3 storage option `:s3_prefixes_in_alias`. (#2287)
* Improvement: Fog option `:fog_public` can be a lambda. (#2302)
* Improvement: One fewer warning on JRuby. (#2352)

5.1.0 (2016-08-19):

Expand Down
2 changes: 1 addition & 1 deletion lib/paperclip/version.rb
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
module Paperclip
unless defined?(Paperclip::VERSION)
VERSION = "5.1.0".freeze
VERSION = "5.2.0".freeze
end
end

0 comments on commit 4ebedfb

Please sign in to comment.