Plone v6.0.0.a1.dev0 Release Notes

Release Date: 2021-09-15 // about 1 month ago
  • ๐Ÿ’ฅ Breaking changes:

    • โœ‚ Removed our CMFQuickInstallerTool code completely. See PLIP 1775 <https://github.com/plone/Products.CMFPlone/issues/1775>_. maurits
    • ๐Ÿ‘‰ Use Dexterity for the Plone Site root object. This is PLIP 2454 <https://github.com/plone/Products.CMFPlone/issues/2454>_. jaroel, ale-rt
    • โœ‚ Removed dependency on Products.TemporaryFolder. Note: in your plone.recipe.zope2instance buildout part, you must set zodb-temporary-storage = off, otherwise you get errors when starting Plone. See issue 2957 <https://github.com/plone/Products.CMFPlone/issues/2957>_. maurits
    • ๐Ÿ‘ A part of "Drop Python 2 Support for Plone 6" #2812: Reflect dropping of Python 2 support in setup.py. Bump version to 6.0 jensens
    • โœ‚ Removed folder_publish.cpy script. Replaced with folder_publish browser view in plone.app.content. Removed deprecated transitionObjectsByPaths. maurits
    • โœ‚ Removed Products.CMFFormController dependency. maurits
    • Removed content_status_modify.cpy script and its validator validate_content_status_modify.vpy. Replaced with content_status_modify browser view in plone.app.content. maurits
    • Barceloneta LTS theming (#3061)
    • โœ‚ Remove six at all places where used. jensens
    • Remove portal_utf8 and it twin utf8_portal from utils and PloneTool since its never used nowhere. jensens
    • โœ‚ Remove meta_type index and metadata from catalog. Both were unused in Plone core and rarely used in addons. jensens
    • โšก๏ธ Plone 6 with markup update for Bootstrap. Extensive overhaul of Plone ui elements based on Bootstrap components. Introduction of icon resolver with use of icon_epr definitions. 1letter, agitator, ale-rt, balavec, ericof, erral, frapell, fredvd, fulv, gomez, jensens, krissik, mauritsvanrees, mrtango, nilshofer, petschki, santonelli, thet, thomasmassmann, tkimngyuen, tschorr

    ๐Ÿ†• New features:

    • Custom date format strings from registry can be in the ${} format as in the locales files. If theres a day or month name used, this will be translated. For bbb the classic strftime % strings are still behaving like before. jensens
    • โž• Add icon resolver to return url or tag for given icon. santonelli
    • Include a controlpanel to inspect and rebuild relations. pbauer
    • โž• Add PLONE60MARKER (and PLONE52MARKER) Python marker sneridagh
    • ๐Ÿ›  Protect @@historyview with Modify portal content permission. Fixes #3297 pbauer

    ๐Ÿ› Bug fixes:

    • โž• Add plone.app.caching to the list of add-ons that is upgraded when upgrading Plone. maurits
    • ๐Ÿ”„ Change control panel item sorting and sort them by title erral
    • No longer doubly undo a response Content-Type change when combining bundles. maurits
    • โœ‚ Removed dependency on Products.Sessions. It is still pulled in by Products.PluggableAuthService though. See also CMFPlacefulWorkflow issue 35 <https://github.com/plone/Products.CMFPlacefulWorkflow/issues/35>_. maurits
    • ๐Ÿ›  Fix issue with @@search view when filtering by creation date frapell
    • ๐Ÿš‘ Merge Hotfix20200121: isURLInPortal could be tricked into accepting malicious links. (#3021)
    • ๐Ÿš‘ Merge Hotfix20200121 Check of the strength of password could be skipped. (#3021)
    • ๐Ÿ‘Œ Improve tests for the workflow tool method listWFStatesByTitle (#3032)
    • ๐Ÿ”ง A default WSGI configuration requires Paste which is only installed with the Zope[wsgi] extra.. tschorr
    • ๐Ÿ›  Fixed deprecation warning for zope.site.hooks. maurits
    • 0๏ธโƒฃ Fixed use of own utils.isDefaultPage, which should be defaultpage.check_default_page_via_view. maurits
    • ๐Ÿ›  Fixed invalid escape sequences in regular expressions. maurits
    • PloneBatch: define __bool__ as copy of __nonzero__. Python 3 calls __bool__ when doing bool(batch). maurits
    • ๐Ÿ—„ No longer consider calling len(batch) as deprecated. The deprecation warning is unvoidable with current Products.PageTemplates code. Fixes issue 3176 <https://github.com/plone/Products.CMFPlone/issues/3176>_. maurits (#3176)
    • ๐Ÿ›  Fix tests with Products.MailHost 4.10. maurits
    • โฌ†๏ธ Applied: find . -name "*.py" |grep -v skins|xargs pyupgrade --py36-plus --py3-only. This auto-rewrites Python 2.7 specific syntax and code to Python 3.6+. jensens
    • โœ… Robot tests: Do not use jQuery.size() but use .length instead. .size() is deprecated since 1.8. thet
    • โœ‚ Remove traces of Archetypes pbauer
    • ๐Ÿ›  Fix problem to remove username and password from email settings if there was already one set. jensens
    • ๐Ÿ›  Fix migration when we have broken objects in the app root (e.g. the temp_folder) (#3245)
    • ๐Ÿ›  Fixed tests in combination with Products.PluggableAuthService 2.6.0. maurits
    • ๐Ÿ›  Fix closing curly brace in search.pt template. balavec
    • โž• Add the remote code execution fix from the Products.PloneHotfix20210518 expressions patch <https://plone.org/security/hotfix/20210518/remote-code-execution-via-traversal-in-expressions>_. We need this because Zope 4.6.2 is too strict for us. maurits
    • โœ‚ Removed the docstring from various methods to avoid making them available via a url. From the Products.PloneHotfix20210518 reflected XSS fix <https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots>_. maurits
    • โœ‚ Remove unused imports. jensens
    • ๐Ÿ›  Fix TypeError when adding a portlet. daggelpop
    • The portal catalog will not try to index itself anymore ale-rt

Previous changes from v5.2.2

  • ๐Ÿ› Bug fixes:

    • ๐Ÿš€ Release Plone 5.2.2 final. No changes with last release candidate, except that the versions will contain Products.isurlinportal 1.1.0 with a minor security hardening fix. maurits