Plone 5.0.5

There may be hotfixes applicable to this release. Always check the Plone Hotfix page before production deployment.

Release notes

Date released2016-07-04
Release managerEric Steele

Linux/BSD/Unix users: Use the Unified Installer. It is a full-source kit with build scripts.

Windows users: use the Vagrant kit. We anticipate having a binary Windows installer for later releases.

OS X users: use the Vagrant kit or install XCode command-line tools and use the Unified Installer.

Automated provisioning: See Plone's Ansible Playbook for a full-stack installation kit.



Plone: 5.0.4 → 5.0.5

New features:

Products.ATContentTypes: 2.2.11 → 2.2.12

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From Products.PloneHotfix20160419. maurits

  • Fixed AttributeError unmarkCreationFlag during installation. This could happen when there was already a Members folder from Fixes issue maurits

Products.Archetypes: 1.10.13 → 1.10.15

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From Products.PloneHotfix20160419. maurits

  • No longer try to mock in tests. maurits

Products.CMFDiffTool: 3.0.4 → 3.1.1

New features:
  • Add generic inline_diff implementation for FieldDiff. davisagli
Bug fixes:
  • Rerelease, as 3.1.0 was broken on one of our test servers. Should be fine elsewhere. maurits

Products.CMFDynamicViewFTI: 4.1.3 → 4.1.4

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From Products.PloneHotfix20160419. maurits

Products.CMFEditions: 2.2.19 → 2.2.20

Bug fixes:
  • Fixed CloneBlobs modifier to only react on Archetypes. This fix allows Dexterity Blob-Types (e.g. File, Image) to be versioned. iham

Products.CMFFormController: 3.0.5 → 3.0.6

Bug fixes:

Products.CMFPlone: 5.0.4 → 5.0.5

Products.GenericSetup: 1.8.2 → 1.8.3

  • Allowed overriding required and forbidden tools in toolset.xml. If a tool is currently required and you import a toolset.xml where it is forbidden, we remove the tool from the required list and add it to the forbidden list. And the other way around. The previous behavior was to raise an exception, which left no way in xml to remove a tool. Fail with a ValueError when the remove keyword is used. The expected behavior is unclear. maurits

Products.MimetypesRegistry: 2.0.8 → 2.0.9

Bug fixes:
  • In guess_encoding fall back to utf-8 instead of trying to read a portal property or the registry. esteele

Products.PasswordResetTool: 2.2.1 → 2.2.2

Bug fixes:
  • Remove unused attribute access of fullname (whereas it should have been access via getProperty) on a PlonePAS MemberData object in, which lead to attribute access errors. thet

Products.PlonePAS: 5.0.9 → 5.0.11

Bug fixes:
  • Use the _marker from CMFCore for MemberDataTool.getProperty, this makes sure that we never return the _marker from PlonePAS but an error. pcdummy

  • Don't raise an ValueError if a property doesn't exists for a ZOPE user. pcdummy

  • Fix UnicodeDecodeError in searchForMembers by using safe_unicode. pbauer

Products.statusmessages: 4.0 → 4.1.0

New features:
  • Convert tests to do3cc

diazo: 1.2.2 → 1.2.3

New features:
  • Add absolute url prefix to xlink:href attributes krissik 2.2.3 → 2.2.4

  • Skip processing instruction code blocks in templates that use the restricted evaluation engine. mauritsvanrees

icalendar: 3.9.2 → 3.10

New features:
  • Updated components description to better comply with RFC 5545. Refs #183. stlaz

  • Added PERIOD value type to date types. Also fixes incompatibilities described in #184. Refs #189. stlaz

Bug fixes:
  • Fix testsuite for use with dateutil>=2.5. Refs #195. untitaker

  • Reintroduce cal.Component.is_broken that was removed with 3.9.2. Refs #185. geier

mockup: 2.1.4 → 2.1.5

Bug fixes:
  • Escape input into select2 widget vangheem 1.6.1 → 1.6.2

Bug fixes:
  • Blob images now reset EXIF data on save martior 3.0.20 → 3.1.1

New features:
  • Show attributes from _unsafe_metadata if user has "Modify Portal Content" permissions. thet

  • Add Creator, Description, end, start and location to the available columns and context attributes for folder_contents. thet

Bug fixes:
  • Lookup of Content Type for passing in Content Type Factory improved, so that all Images (especially Tiff) are stored as Images not Files. loechel

  • Folder contents: When pasting, handle "Disallowed subobject type" ValueError and present a helpful error message. Fixes: plone/mockup#657 thet

  • Folder contents: Acquire the top most visible portal object to operate on. Fixes some issues in INavigationRoot or ISite based subsites and virtual hosting environments pointing to subsites. Fixes include: show correct breadcrumb paths, paste to correct location. Fixes: #86 thet

  • Added most notably portal_type, review_state and Subject but also exclude_from_nav, is_folderish, last_comment_date, meta_type and total_comments to BaseVocabularyView translate_ignored list. Some of them are necessary for frontend logic and others cannot be translated. Fixes thet

  • Remove portal_type from available columns and use Type instead, which is meant to be read by humans. portal_type is now available on the attributes object. thet

  • Vocabulary permissions are considered View permission by default, if not stated different in PERMISSION global. Renamed _permissions to PERMISSIONS, Deprecated BBB name in place. Also minor code-style changes jensens, thet

  • Fix test isolation problem and remove an unnecessary test dependency on thet

  • Restore acquisition context in orderings, which had been dropped by accident in 3.0.15 pysailor 1.2.4 → 1.2.5

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From Products.PloneHotfix20160419. maurits 2.1.7 → 2.1.8

Bug fixes:
  • Optimized display menu's check for index_html. davisagli 1.2.11 → 1.2.16

New features:
  • assign shortnames to behaviors as supported by plone.behavior thet
Bug fixes:
  • Wait longer to fix unstable robot tests. maurits

  • Fixed possible cross site scripting (XSS) attack in lead image caption. maurits

  • Encode the linked url for the Link type to allow for non ascii characters in the url. martior

  • Deferred adapter lookup in collection view. This was looked up for contentmenu/toolbar at every authenticated request. It also had side effects if custom collection behaviors are used. jensens

  • Fixed unstable robot test for location criterion. maurits

  • Don't fail for utils.replace_link_variables_by_paths, if value is None. The value can be None when creating a Link type with invokeFactory without remoteUrl set and calling the indexer before setting the URL. thet 2.1.20 → 2.3.1

New features:
  • The defaults of exclude from navigation is now obtained from a contextaware default factory, which value is obtained from an adapter. The default adapter returns False. An alternative adapter which defaults to True is provided but not registered. This change makes it possible to provide a custom context specific implementation. jensens

  • Documentation: Shortnames added and some missing behaviors added. jensens

  • Assign short names for all behaviors as supported by plone.behavior. jensens

Bug fixes:
  • Removed dexterity-types from portal_actions. This is set correctly in controlpanel.xml. Issue maurits

  • Linebreaks in description are replaced with a space instead of vanishing it. Thus an editor can use them w/o having word glued together afterwards. jensens

  • Remove dups from TTW behavior FTI editor. jensens

  • Fix problem in ConstrainTypesBehavior: when mode was ENABLED but only setLocallyAllowedTypes were set, then getImmediatelyAddableTypes returned None, but all consuming code expect it to return a list jensens

  • Lookup of Content Type from MIME-Type for using right Plone Content Type to store Images (especially Tiff) correct as Images not Files. loechel 2.4.11 → 2.4.16

New features:
  • Make tests work with lxml safe html cleaner
Bug fixes:
  • Cleaned code from flake8 errors. maurits

  • Removed comment-migration view. This did not work anymore on Plone 5. If you still need to migrate from old-style comments, so from Plone 4.0 or earlier, please upgrade to Plone 4.3 first. maurits

  • Reset the required setting of the author_email widget each time. Otherwise, the email field might get set to required when an anonymous user visits, and then remain required when an authenticated user visits, making it impossible for an authenticated user to fill in the form without validation error. Or when in the control panel the field is set as not required anymore, that change would have no effect until the instance was restarted. maurits

  • Fixed possible cross site scripting (XSS) attack on moderate comments page. maurits

  • Removed docstrings from some methods to avoid publishing them. From Products.PloneHotfix20160419. maurits

  • Mark 'Edit' button for translation. gforcada 2.0.7 → 2.0.10

New features:
  • Changed the color of the navigation in the calendar widget to grey(from blue) using inherit. see janga1997

  • Added short-names for behaviors. jensens

Bug fixes:
  • Fixed possible cross site scripting (XSS) attack in location field. maurits

  • Don't validate the validate_start_end invariant, if start or end are None. This can happen on non-required, default empty start or end fields during editing. thet

  • Don't break base.dates_for_display and the formatted_date content provider, if event object has no start or end dates. It might come from a potential event. thet 2.0.3 → 2.0.4

Bug fixes:
  • Fix tests to not scale gif images, which were converted to jpeg imaged until plone.scale version < 2. Use png images for testing instead, which works for all versions of plone.scale. thet 3.1.5 → 3.2.0

New features:
Bug fixes:
  • Removed deprecated actionicons.xml. maurits

  • no special case that enables checkout via GET gotcha

  • Minimal code cleanup. gforcada 2.5.19 → 2.5.20

Bug fixes:
  • Fix body class pat-markspeciallinks not set. Fixes #84. thet 3.0.4 → 3.0.5

Bug fixes:
  • Fix test isolation problems: if a test calls transaction.commit() directly or indirectly it can not be an integration test, either avoid the commit or change the layer into a functional one. Fixes: gforcada 5.0.9 → 5.0.10

  • Updated French translation.

  • Updated Traditional Chinese translations. l34marr

  • Updated basque translations erral

  • Updated Dutch translations. maurits, fredvd

  • Updated Language-Codes in po file headers. These headers are not used in Plone to determine the language: that is done by inspecting the directory name. But the i18ndude script uses the Language-Code header when printing statistics. Several were set to en or to for example zh_CN (as the directory name should be) instead of zh-cn (as the language code should be). maurits

  • Update German translations. staeff

  • Fix typo in portuguese. staeff

  • Update German translations. chrimba

  • Update Traditional Chinese translations. l34marr

  • Fix typos in it translation ale-rt

  • Update Japanese translations for plone.po. terapyon

  • Add russian translate Date and Time Settings, Language Settings and much more in control panel. Full Russian translation frontpafe.po Translation mocap and widgets serge73

  • add label_schema_default and translate in Japanese terapyon 2.1.0 → 2.1.1

Bug fixes:
  • Code quality package cleanup. maurits 1.3.14 → 1.3.15

Bug fixes:
  • Add missing _referenceIs query parser vangheem 1.3.11 → 1.3.12

New features:
  • Add traceback info with record name to importer in order to ease debugging. jensens 5.0.1 → 5.0.2

Bug fixes:
  • Do not use install Products.SecureMailHost in the PloneFixture if it isn't available vangheem 1.2.19 → 1.3.0

New features:
  • Control theme compilation in development mode through the environment variable DIAZO_ALWAYS_CACHE_RULES ale-rt
Bug fixes:
  • Small fixes to documentaion ale-rt 1.3.24 → 1.3.25

New features:
  • Adds controlpanel setting to enable navigation root bound keyword vocabularies. jensens

  • Update to 5.1a2 upgrade step to allow upgrades from Plone 5.1a1. jensens 2.3.5 → 2.3.6

Bug fixes:
  • Fixed KeyError email on personal preferences form. This could happen when email is used as login name. Fixes and maurits

  • Ensured partial searching utility for users in 'Search for users' page Fixes kkhan

  • Use ProtectedEmail for Email field factory ebrehault 2.2.3 → 3.0

Breaking changes:

  • CatalogVocabulary now takes a query for it's constructor instead of a LazyMap of brains and lazy loads terms. Also, in contains, do a UID query instead of checking the entire contents of the result. This prevents potential DOS with custom code where the whole contents of the catalog would get loaded with terms created for it on every validation attempt. vangheem
New features:
  • Optional allow to filter keyword vocabulary to a current section based on the current context. The class was build for easy subclassing - and still is. It allows to override the section fetching logic in a subclass. The default logic is first to look in the controlpanel if there is a IEditingSchema.subjects_of_navigation_root boolean. If its True the getNavigationRootObject is used as the section and only keywords used in this section are part of the vocabulary. Otherwise all keywords in the index are displayed. jensens

  • Refactor KeywordsVocabulary logic of term construction from dirty values out into own functions. Document functions in README. jensens

  • Add ImagesScales vocabulary. bsuttor

Bug fixes:
  • Fix bug where queries would not be parsed correctly for date queries on the catalog vocabulary vangheem

  • increase readability of code in CatalogSource. jensens 2.0.4 → 2.0.5

Bug fixes:
  • Fix related items to search for the whole site rather than from the navigation root only. Gagaro 2.2.4 → 2.2.5

New features:
  • Add a direct link from a group name on Sharing ab to that group's member list for users with sufficient permissions PLIP #1310 datakurre 1.2.0 → 1.2.1

Bug fixes:
  • Enhance test in order to show problem in RelatedItemsWidget with navigation-roots jensens

plone.caching: 1.0.1 → 1.1.0

Bug fixes:

plone.dexterity: 2.4.1 → 2.4.2

Bug fixes:
  • Added security declarations from Products.PloneHotfix20160419. maurits

plone.folder: 1.0.7 → 1.0.8

Bug fixes:
  • Update testing layers to use best practices and remove ZopeTestCase dependency, which should fix its test isolation problems. gforcada

plone.formwidget.querystring: 1.1.5 → 1.1.6

Bug fixes:
  • Fix way to decode utf-8 into template. bsuttor

plone.formwidget.recurrence: 2.0.2 → 2.1.0

New features:
Bug fixes:
  • Restructure tests: Move example type into own submodule. thet

plone.namedfile: 3.0.8 → 3.0.9

Bug fixes:
  • Backport from v4 a fix for a problem streaming an uncommitted image scale. Fixes an error on Windows 10 "WindowsError 32" by attempting to delete or access a file in use by another process. smcmahon

plone.outputfilters: 2.1.3 → 2.1.5

Bug fixes:
  • Make tests work with old and new safe HTML transform tomgross

  • Explicitly exclude mailto: links from being UID-resolved. thet

  • Fix test isolation problem. thet

plone.registry: 1.0.3 → 1.0.4

Bug fixes:
  • More cleanup: PEP8, isort, readability. jensens

plone.schemaeditor: 2.0.9 → 2.0.10

Bug fixes:
  • Fix tests for fieldset ordering changes in plone.supermodel. thet

  • Update url in to point to github. esteele

plone.session: 3.5.6 → 3.6.0

New features:

plone.stringinterp: 1.1.2 → 1.1.3

Bug fixes:
  • Adapt to changes in SimpleViewClass in zope4. pbauer

  • Fix typo staeff

plone.subrequest: 1.6.11 → 1.7.0

New features:
  • Allow to pass a custom exception handler for the response. jensens
Bug fixes:
  • When a subrequest modified the DB (or prior to the subrequest the main request), the oids annotated to the requests were doubled with each subsequent subrequest. This resulted in out-of-memory errors when using lots of subrequests, such as it happens on Mosaic based sites with a certain amount of tiles. Fixed by only adding new oids, not already known by parent request. jensens

  • Housekeeping: isort imports, autopep8, minor manual cleanup (no imports). jensens

plone.supermodel: 1.2.7 → 1.3.0

New features:
  • Python 2.6 and Plone 4.3 no longer officially supported. It might still work, but no special effort is made to keep this compatible. maurits

  • Support to define the order of fieldsets. jensens

Bug fixes:
  • Update url to point to github location. esteele

  • Unset _init_field flag on init completion. metatoaster

plone.transformchain: 1.1.0 → 1.2.0

New features:
  • Added events to notifiy before/after all/single transform(s) are executed. jensens

plone.uuid: 1.0.3 → 1.0.4

Bug fixes:
  • Update url to point to github. esteele

  • Fixed issues preventing tests passing on Python 3 datakurre

plonetheme.barceloneta: 1.6.18 → 1.6.21

New features:
  • Add styles for manage portlets jumplist davilima6
Bug fixes:
  • Remove references to discarded offcanvas feature davilima6

  • Set news lead image background for transparent images staeff

  • Use .alert.status selector as an alternative to .portalMessage. This class is used by the structure pattern. thet

  • Make search button grow with the search buttons text. Fixes an issue where translated button texts were not fitting into the button. kkhan, thet

z3c.autoinclude: 0.3.5 → 0.3.6

  • Standardize namespace init.

  • Fix broken tests.

zope.globalrequest: 1.1 → 1.2

  • Lighten test dependencies by using neither nor any longer.

grokcore.component: 2.5 → 2.5.1 1.6.2 → 1.6.3 1.1.0 → 1.1.1

Bug fixes:
  • Fix code analysis errors reported by gforcada 1.0.3 → 1.0.4

New features: 1.3.2 → 1.3.3

Bug fixes:
  • cleanup: pep8, utf8 header, sorted imports, zca decorators, ... jensens 1.2.7 → 1.2.8

Bug fixes:
  • Fixes #25: URLs like ${absolute_url}/@@images/${uuid}.png are not converted on @@version-view. rafaelbco

plone.formwidget.contenttree: 1.0.13 → 1.0.14

Bug fixes:
  • Slice search results in PathSource object to limit the search results correctly. elioschmutz 3.0.16 → 4.0.2

Breaking changes:

  • No more compatible with GenericSetup below 1.8.2. iham
New features:
  • Creating language folder(s) on installation. (fixes iham
Bug fixes:
  • Fixed unstable robot test by waiting until the expected text is on the page. maurits

  • Correct event subscribers so that content cut from one LRF & pasted into the Media folder is shown there when I switch to a second language. djowett

  • Wait for visibility of select2 result, instead of time. jensens

  • Workaroud in robot test for TinyMCE overlap bug see for details jensens

plone.tiles: 1.4.0 → 1.6

Sphinx: 1.3.4 → 1.3.6

setuptools: 20.2.2 → 21.0.0

zc.buildout: 2.5.0 → 2.5.2

plone.recipe.zeoserver: 1.2.8 → 1.2.9

Bug fixes:

plone.recipe.zope2instance: 4.2.20 → 4.2.21

Bug fixes:
  • Fix #23: "TypeError: () takes no arguments (1 given)" on ./bin/instance start jensens

plone.releaser: 1.5.0 → 1.5.3

New features:
  • Ask before pushing to coredev, after updating the checkouts and versions. maurits

  • Changed new headings to 'Breaking changes', 'New features', 'Bug fixes'. Old headers are still accepted, but in the postrelease we generate the new ones. In the unified changelog, we combine the old and new names. See maurits

Bug fixes:
  • Change pypi-url from http to https. fgrcon

  • Fix new versions if they had dev/post release suffix. gforcada

  • When compiling changelog, treat Incompatibilities header as special too. maurits 0.9.15 → 0.9.16

Bug fixes:
  • Removed bad format parameter on ObjectModifiedEvent: must be an Attributes instance. See zope.lifecycleevent.ObjectModifiedEvent class. Removed because we can't get the interface and the correct fieldname. sgeulette

robotframework: 2.8.7 → 3.0

robotframework-debuglibrary: 0.3 → 0.5

robotframework-ride: 1.3 →

robotframework-selenium2screenshots: 0.4.0 → 0.7.0

selenium: 2.46.0 → 2.53.5

sphinxcontrib-robotframework: 0.4.3 → 0.5.1

Markdown: 2.6.5 → 2.6.6

Pillow: 3.1.1 → 3.2.0

WebOb: 1.4.1 → 1.4.2

cssselect: 0.9.1 → 0.9.2

decorator: 4.0.9 → 4.0.10

requests: 2.9.1 → 2.9.2

simplejson: 3.8.1 → 3.8.2

Project resources

Learn about Plone