Plone 5.0.5

There may be hotfixes applicable to this release. Always check the Plone Hotfix page before production deployment.

Release notes

License	GPL
Date released	2016-07-04
Release manager	Eric Steele

Linux/BSD/Unix users: Use the Unified Installer. It is a full-source kit with build scripts.

Windows users: use the Vagrant kit. We anticipate having a binary Windows installer for later releases.

OS X users: use the Vagrant kit or install XCode command-line tools and use the Unified Installer.

Automated provisioning: See Plone's Ansible Playbook for a full-stack installation kit.

Downloads

Changes

Plone: 5.0.4 → 5.0.5

New features:

Release Plone 5.0.5
esteele

Products.ATContentTypes: 2.2.11 → 2.2.12

Bug fixes:

Removed docstrings from some methods to avoid publishing them. From
Products.PloneHotfix20160419. maurits
Fixed AttributeError unmarkCreationFlag during installation.
This could happen when there was already a Members folder from
plone.app.contenttypes. Fixes issue
https://github.com/plone/Products.CMFPlone/issues/1519 maurits

Products.Archetypes: 1.10.13 → 1.10.15

Bug fixes:

Removed docstrings from some methods to avoid publishing them. From
Products.PloneHotfix20160419. maurits
No longer try to mock plone.app.widgets in tests. maurits

Products.CMFDiffTool: 3.0.4 → 3.1.1

New features:

Add generic inline_diff implementation for FieldDiff.
davisagli

Bug fixes:

Rerelease, as 3.1.0 was broken on one of our test servers. Should
be fine elsewhere. maurits

Products.CMFDynamicViewFTI: 4.1.3 → 4.1.4

Bug fixes:

Removed docstrings from some methods to avoid publishing them. From
Products.PloneHotfix20160419. maurits

Products.CMFEditions: 2.2.19 → 2.2.20

Bug fixes:

Fixed CloneBlobs modifier to only react on Archetypes.
This fix allows Dexterity Blob-Types (e.g. File, Image) to be versioned.
iham

Products.CMFFormController: 3.0.5 → 3.0.6

Bug fixes:

Minor package cleanup. maurits

Products.CMFPlone: 5.0.4 → 5.0.5

Products.GenericSetup: 1.8.2 → 1.8.3

Allowed overriding required and forbidden tools in toolset.xml.
If a tool is currently required and you import a toolset.xml
where it is forbidden, we remove the tool from the required list and
add it to the forbidden list. And the other way around. The
previous behavior was to raise an exception, which left no way in
xml to remove a tool. Fail with a ValueError when the remove
keyword is used. The expected behavior is unclear. maurits

Products.MimetypesRegistry: 2.0.8 → 2.0.9

Bug fixes:

In guess_encoding fall back to utf-8 instead of trying to
read a portal property or the registry. esteele

Products.PasswordResetTool: 2.2.1 → 2.2.2

Bug fixes:

Remove unused attribute access of fullname (whereas it should have been access via getProperty) on a PlonePAS MemberData object in mail_password_template.pt, which lead to attribute access errors.
thet

Products.PlonePAS: 5.0.9 → 5.0.11

Bug fixes:

Use the _marker from CMFCore for MemberDataTool.getProperty,
this makes sure that we never return the _marker from PlonePAS
but an error.
pcdummy
Don't raise an ValueError if a property doesn't exists for a ZOPE
user.
pcdummy
Fix UnicodeDecodeError in searchForMembers by using safe_unicode.
pbauer

Products.statusmessages: 4.0 → 4.1.0

New features:

Convert tests to plone.app.testing.
do3cc

diazo: 1.2.2 → 1.2.3

New features:

Add absolute url prefix to xlink:href attributes
krissik

five.pt: 2.2.3 → 2.2.4

Skip processing instruction code blocks in templates that use
the restricted evaluation engine.
mauritsvanrees

icalendar: 3.9.2 → 3.10

New features:

Updated components description to better comply with RFC 5545.
Refs #183.
stlaz
Added PERIOD value type to date types.
Also fixes incompatibilities described in #184.
Refs #189.
stlaz

Bug fixes:

Fix testsuite for use with dateutil>=2.5.
Refs #195.
untitaker
Reintroduce cal.Component.is_broken that was removed with 3.9.2.
Refs #185.
geier

mockup: 2.1.4 → 2.1.5

Bug fixes:

Escape input into select2 widget
vangheem

plone.app.blob: 1.6.1 → 1.6.2

Bug fixes:

Blob images now reset EXIF data on save martior

plone.app.content: 3.0.20 → 3.1.1

New features:

Show attributes from _unsafe_metadata if user has "Modify Portal Content" permissions.
thet
Add Creator, Description, end, start and location to the available columns and context attributes for folder_contents.
thet

Bug fixes:

Lookup of Content Type for passing in Content Type Factory improved,
so that all Images (especially Tiff) are stored as Images not Files.
loechel
Folder contents: When pasting, handle "Disallowed subobject type" ValueError and present a helpful error message.
Fixes: plone/mockup#657
thet
Folder contents: Acquire the top most visible portal object to operate on.
Fixes some issues in INavigationRoot or ISite based subsites and virtual hosting environments pointing to subsites.
Fixes include: show correct breadcrumb paths, paste to correct location.
Fixes: #86
thet
Added most notably portal_type, review_state and Subject but also exclude_from_nav, is_folderish, last_comment_date, meta_type and total_comments to BaseVocabularyView translate_ignored list.
Some of them are necessary for frontend logic and others cannot be translated.
Fixes https://github.com/plone/plone.app.content/issues/77
thet
Remove portal_type from available columns and use Type instead, which is meant to be read by humans.
portal_type is now available on the attributes object.
thet
Vocabulary permissions are considered View permission by default, if not
stated different in PERMISSION global. Renamed _permissions to PERMISSIONS,
Deprecated BBB name in place. Also minor code-style changes
jensens, thet
Fix test isolation problem and remove an unnecessary test dependency on plone.app.widgets.
thet
Restore acquisition context in orderings, which had been dropped by accident in 3.0.15
pysailor

plone.app.contentlisting: 1.2.4 → 1.2.5

Bug fixes:

Removed docstrings from some methods to avoid publishing them. From
Products.PloneHotfix20160419. maurits

plone.app.contentmenu: 2.1.7 → 2.1.8

Bug fixes:

Optimized display menu's check for index_html.
davisagli

plone.app.contenttypes: 1.2.11 → 1.2.16

New features:

assign shortnames to behaviors as supported by plone.behavior
thet

Bug fixes:

Wait longer to fix unstable robot tests. maurits
Fixed possible cross site scripting (XSS) attack in lead image caption. maurits
Encode the linked url for the Link type to allow for non ascii characters in the url.
martior
Deferred adapter lookup in collection view.
This was looked up for contentmenu/toolbar at every authenticated request.
It also had side effects if custom collection behaviors are used.
jensens
Fixed unstable robot test for location criterion. maurits
Don't fail for utils.replace_link_variables_by_paths, if value is None.
The value can be None when creating a Link type with invokeFactory without remoteUrl set and calling the indexer before setting the URL.
thet

plone.app.dexterity: 2.1.20 → 2.3.1

New features:

The defaults of exclude from navigation is now obtained from a contextaware default factory, which value is obtained from an adapter.
The default adapter returns False.
An alternative adapter which defaults to True is provided but not registered.
This change makes it possible to provide a custom context specific implementation.
jensens
Documentation: Shortnames added and some missing behaviors added.
jensens
Assign short names for all behaviors as supported by plone.behavior.
jensens

Bug fixes:

Removed dexterity-types from portal_actions. This is set
correctly in controlpanel.xml.
Issue https://github.com/plone/plone.app.dexterity/issues/218
maurits
Linebreaks in description are replaced with a space instead of vanishing it.
Thus an editor can use them w/o having word glued together afterwards.
jensens
Remove dups from TTW behavior FTI editor.
jensens
Fix problem in ConstrainTypesBehavior:
when mode was ENABLED but only setLocallyAllowedTypes were set,
then getImmediatelyAddableTypes returned None,
but all consuming code expect it to return a list
jensens
Lookup of Content Type from MIME-Type for using right Plone Content Type to store Images (especially Tiff) correct as Images not Files.
loechel

plone.app.discussion: 2.4.11 → 2.4.16

New features:

Make tests work with lxml safe html cleaner

Bug fixes:

Cleaned code from flake8 errors. maurits
Removed comment-migration view. This did not work anymore on
Plone 5. If you still need to migrate from old-style comments, so
from Plone 4.0 or earlier, please upgrade to Plone 4.3 first.
maurits
Reset the required setting of the author_email widget each time.
Otherwise, the email field might get set to required when an
anonymous user visits, and then remain required when an
authenticated user visits, making it impossible for an authenticated
user to fill in the form without validation error. Or when in the
control panel the field is set as not required anymore, that change
would have no effect until the instance was restarted. maurits
Fixed possible cross site scripting (XSS) attack on moderate comments page. maurits
Removed docstrings from some methods to avoid publishing them. From
Products.PloneHotfix20160419. maurits
Mark 'Edit' button for translation.
https://github.com/plone/plone.app.discussion/issues/90
gforcada

plone.app.event: 2.0.7 → 2.0.10

New features:

Changed the color of the navigation in the calendar widget to grey(from blue) using inherit.
see https://github.com/plone/Products.CMFPlone/issues/1445
janga1997
Added short-names for behaviors.
jensens

Bug fixes:

Fixed possible cross site scripting (XSS) attack in location field. maurits
Don't validate the validate_start_end invariant, if start or end are None.
This can happen on non-required, default empty start or end fields during editing.
thet
Don't break base.dates_for_display and the formatted_date content provider, if event object has no start or end dates.
It might come from a potential event.
thet

plone.app.imaging: 2.0.3 → 2.0.4

Bug fixes:

Fix tests to not scale gif images, which were converted to jpeg imaged until plone.scale version < 2.
Use png images for testing instead, which works for all versions of plone.scale.
thet

plone.app.iterate: 3.1.5 → 3.2.0

New features:

Added uninstall profile. maurits

Bug fixes:

Removed deprecated actionicons.xml. maurits
no special case that enables checkout via GET
gotcha
Minimal code cleanup. gforcada

plone.app.layout: 2.5.19 → 2.5.20

Bug fixes:

Fix body class pat-markspeciallinks not set.
Fixes #84.
thet

plone.app.linkintegrity: 3.0.4 → 3.0.5

Bug fixes:

Fix test isolation problems: if a test calls transaction.commit() directly or
indirectly it can not be an integration test, either avoid the commit or
change the layer into a functional one.
Fixes: https://github.com/plone/plone.app.linkintegrity/issues/36
gforcada

plone.app.locales: 5.0.9 → 5.0.10

Updated French translation.
Updated Traditional Chinese translations.
l34marr
Updated basque translations erral
Updated Dutch translations. maurits, fredvd
Updated Language-Codes in po file headers. These headers are not
used in Plone to determine the language: that is done by inspecting
the directory name. But the i18ndude script uses the Language-Code
header when printing statistics. Several were set to en or to
for example zh_CN (as the directory name should be) instead of
zh-cn (as the language code should be). maurits
Update German translations.
staeff
Fix typo in portuguese.
https://github.com/collective/plone.app.locales/issues/112
staeff
Update German translations.
chrimba
Update Traditional Chinese translations.
l34marr
Fix typos in it translation
ale-rt
Update Japanese translations for plone.po.
terapyon
Add russian translate Date and Time Settings, Language Settings and much more in control panel.
Full Russian translation frontpafe.po
Translation mocap and widgets
serge73
add label_schema_default and translate in Japanese
terapyon

plone.app.openid: 2.1.0 → 2.1.1

Bug fixes:

Code quality package cleanup. maurits

plone.app.querystring: 1.3.14 → 1.3.15

Bug fixes:

Add missing _referenceIs query parser
vangheem

plone.app.registry: 1.3.11 → 1.3.12

New features:

Add traceback info with record name to importer in order to ease debugging.
jensens

plone.app.testing: 5.0.1 → 5.0.2

Bug fixes:

Do not use install Products.SecureMailHost in the PloneFixture if it isn't available
vangheem

plone.app.theming: 1.2.19 → 1.3.0

New features:

Control theme compilation in development mode
through the environment variable DIAZO_ALWAYS_CACHE_RULES
ale-rt

Bug fixes:

Small fixes to documentaion
ale-rt

plone.app.upgrade: 1.3.24 → 1.3.25

New features:

Adds controlpanel setting to enable navigation root bound keyword vocabularies.
jensens
Update to 5.1a2 upgrade step to allow upgrades from Plone 5.1a1.
jensens

plone.app.users: 2.3.5 → 2.3.6

Bug fixes:

Fixed KeyError email on personal preferences form. This could
happen when email is used as login name. Fixes
https://github.com/plone/plone.app.users/issues/56 and
https://github.com/plone/Products.CMFPlone/issues/1146
maurits
Ensured partial searching utility for users in 'Search for users' page
Fixes https://github.com/plone/Products.CMFPlone/issues/1499
kkhan
Use ProtectedEmail for Email field factory
ebrehault

plone.app.vocabularies: 2.2.3 → 3.0

Breaking changes:

CatalogVocabulary now takes a query for it's constructor instead of a LazyMap of brains
and lazy loads terms. Also, in contains, do a UID query instead of checking the
entire contents of the result. This prevents potential DOS with custom code where the
whole contents of the catalog would get loaded with terms created for it on every
validation attempt.
vangheem

New features:

Optional allow to filter keyword vocabulary to a current section based on the current context.
The class was build for easy subclassing - and still is.
It allows to override the section fetching logic in a subclass.
The default logic is first to look in the controlpanel if there is a IEditingSchema.subjects_of_navigation_root boolean.
If its True the getNavigationRootObject is used as the section and only keywords used in this section are part of the vocabulary.
Otherwise all keywords in the index are displayed.
jensens
Refactor KeywordsVocabulary logic of term construction from dirty values out into own functions.
Document functions in README.
jensens
Add ImagesScales vocabulary.
bsuttor

Bug fixes:

Fix bug where queries would not be parsed correctly for date queries on the catalog
vocabulary
vangheem
increase readability of code in CatalogSource.
jensens

plone.app.widgets: 2.0.4 → 2.0.5

Bug fixes:

Fix related items to search for the whole site rather than from the navigation root only.
Gagaro

plone.app.workflow: 2.2.4 → 2.2.5

New features:

Add a direct link from a group name on Sharing ab to that group's
member list for users with sufficient permissions PLIP #1310
datakurre

plone.app.z3cform: 1.2.0 → 1.2.1

Bug fixes:

Enhance test in order to show problem in RelatedItemsWidget with
navigation-roots
jensens

plone.caching: 1.0.1 → 1.1.0

Bug fixes:

Use plone i18n domain. klinger

plone.dexterity: 2.4.1 → 2.4.2

Bug fixes:

Added security declarations from Products.PloneHotfix20160419. maurits

plone.folder: 1.0.7 → 1.0.8

Bug fixes:

Update testing layers to use best practices and remove ZopeTestCase dependency,
which should fix its test isolation problems.
gforcada

plone.formwidget.querystring: 1.1.5 → 1.1.6

Bug fixes:

Fix way to decode utf-8 into template.
bsuttor

plone.formwidget.recurrence: 2.0.2 → 2.1.0

New features:

Use plone i18n domain. klinger

Bug fixes:

Restructure tests: Move example type into own submodule.
thet

plone.namedfile: 3.0.8 → 3.0.9

Bug fixes:

Backport from v4 a fix for a problem streaming an uncommitted image scale.
Fixes an error on Windows 10 "WindowsError 32" by attempting to delete or
access a file in use by another process.
smcmahon

plone.outputfilters: 2.1.3 → 2.1.5

Bug fixes:

Make tests work with old and new safe HTML transform
tomgross
Explicitly exclude mailto: links from being UID-resolved.
thet
Fix test isolation problem.
thet

plone.registry: 1.0.3 → 1.0.4

Bug fixes:

More cleanup: PEP8, isort, readability.
jensens

plone.schemaeditor: 2.0.9 → 2.0.10

Bug fixes:

Fix tests for fieldset ordering changes in plone.supermodel.
thet
Update url in setup.py to point to github.
esteele

plone.session: 3.5.6 → 3.6.0

New features:

Added uninstall profile. maurits

plone.stringinterp: 1.1.2 → 1.1.3

Bug fixes:

Adapt to changes in SimpleViewClass in zope4.
pbauer
Fix typo
staeff

plone.subrequest: 1.6.11 → 1.7.0

New features:

Allow to pass a custom exception handler for the response.
jensens

Bug fixes:

When a subrequest modified the DB (or prior to the subrequest the main request),
the oids annotated to the requests were doubled with each subsequent subrequest.
This resulted in out-of-memory errors when using lots of subrequests,
such as it happens on Mosaic based sites with a certain amount of tiles.
Fixed by only adding new oids, not already known by parent request.
jensens
Housekeeping: isort imports, autopep8, minor manual cleanup (no zope.app. imports).
jensens

plone.supermodel: 1.2.7 → 1.3.0

New features:

Python 2.6 and Plone 4.3 no longer officially supported. It might
still work, but no special effort is made to keep this compatible.
maurits
Support to define the order of fieldsets.
jensens

Bug fixes:

Update setup.py url to point to github location.
esteele
Unset _init_field flag on init completion.
metatoaster

plone.transformchain: 1.1.0 → 1.2.0

New features:

Added events to notifiy before/after all/single transform(s) are executed.
jensens

plone.uuid: 1.0.3 → 1.0.4

Bug fixes:

Update setup.py url to point to github.
esteele
Fixed issues preventing tests passing on Python 3
datakurre

plonetheme.barceloneta: 1.6.18 → 1.6.21

New features:

Add styles for manage portlets jumplist
davilima6

Bug fixes:

Remove references to discarded offcanvas feature
davilima6
Set news lead image background for transparent images
https://github.com/plone/plonetheme.barceloneta/issues/107
staeff
Use .alert.status selector as an alternative to .portalMessage.
This class is used by the structure pattern.
thet
Make search button grow with the search buttons text.
Fixes an issue where translated button texts were not fitting into the button.
kkhan, thet

z3c.autoinclude: 0.3.5 → 0.3.6

Standardize namespace init.
Fix broken tests.

zope.globalrequest: 1.1 → 1.2

Lighten test dependencies by using neither zope.app.testing nor
zope.app.zcmlfiles any longer.

grokcore.component: 2.5 → 2.5.1

grokcore.security: 1.6.2 → 1.6.3

plone.app.intid: 1.1.0 → 1.1.1

Bug fixes:

Fix code analysis errors reported by http://jenkins.plone.org/view/Pkgs/job/package-plone.app.intid
gforcada

plone.app.lockingbehavior: 1.0.3 → 1.0.4

New features:

Add behavior short name.
jensens

plone.app.relationfield: 1.3.2 → 1.3.3

Bug fixes:

cleanup: pep8, utf8 header, sorted imports, zca decorators, ...
jensens

plone.app.versioningbehavior: 1.2.7 → 1.2.8

Bug fixes:

Fixes #25: URLs like ${absolute_url}/@@images/${uuid}.png are not converted
on @@version-view. rafaelbco

plone.formwidget.contenttree: 1.0.13 → 1.0.14

Bug fixes:

Slice search results in PathSource object to limit the search results correctly.
http://docs.plone.org/develop/plone/searching_and_indexing/query.html#sorting-and-limiting-the-number-of-results
elioschmutz

plone.app.multilingual: 3.0.16 → 4.0.2

Breaking changes:

No more compatible with GenericSetup below 1.8.2.
iham

New features:

Creating language folder(s) on installation.
(fixes https://github.com/plone/plone.app.multilingual/issues/214)
iham

Bug fixes:

Fixed unstable robot test by waiting until the expected text is on the page. maurits
Correct event subscribers so that content cut from one LRF & pasted into the
Media folder is shown there when I switch to a second language.
djowett
Wait for visibility of select2 result, instead of time.
jensens
Workaroud in robot test for TinyMCE overlap bug see
https://github.com/plone/plone.app.multilingual/issues/227
for details
jensens

plone.tiles: 1.4.0 → 1.6

Sphinx: 1.3.4 → 1.3.6

setuptools: 20.2.2 → 21.0.0

zc.buildout: 2.5.0 → 2.5.2

plone.recipe.zeoserver: 1.2.8 → 1.2.9

Bug fixes:

Updated documentation. mamico, gforcada

plone.recipe.zope2instance: 4.2.20 → 4.2.21

Bug fixes:

Fix #23: "TypeError: () takes no arguments (1 given)" on ./bin/instance start
jensens

plone.releaser: 1.5.0 → 1.5.3

New features:

Ask before pushing to coredev, after updating the checkouts and versions. maurits
Changed new headings to 'Breaking changes', 'New features', 'Bug
fixes'. Old headers are still accepted, but in the postrelease we
generate the new ones. In the unified changelog, we combine the old
and new names.
See https://github.com/plone/Products.CMFPlone/issues/1323
maurits

Bug fixes:

Change pypi-url from http to https.
fgrcon
Fix new versions if they had dev/post release suffix.
gforcada
When compiling changelog, treat Incompatibilities header as special
too. maurits

plone.app.robotframework: 0.9.15 → 0.9.16

Bug fixes:

Removed bad format parameter on ObjectModifiedEvent: must be an Attributes instance.
See zope.lifecycleevent.ObjectModifiedEvent class.
Removed because we can't get the interface and the correct fieldname.
sgeulette