Plone 5.0.5

There may be hotfixes applicable to this release. Always check the Plone Hotfix page before production deployment.

Release notes

LicenseGPL
Date released2016-07-04
Release managerEric Steele

Linux/BSD/Unix users: Use the Unified Installer. It is a full-source kit with build scripts.

Windows users: use the Vagrant kit. We anticipate having a binary Windows installer for later releases.

OS X users: use the Vagrant kit or install XCode command-line tools and use the Unified Installer.

Automated provisioning: See Plone's Ansible Playbook for a full-stack installation kit.

Downloads

Changes

Plone: 5.0.4 → 5.0.5

New features:

Products.ATContentTypes: 2.2.11 → 2.2.12

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From
    Products.PloneHotfix20160419. maurits

  • Fixed AttributeError unmarkCreationFlag during installation.
    This could happen when there was already a Members folder from
    plone.app.contenttypes. Fixes issue
    https://github.com/plone/Products.CMFPlone/issues/1519 maurits

Products.Archetypes: 1.10.13 → 1.10.15

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From
    Products.PloneHotfix20160419. maurits

  • No longer try to mock plone.app.widgets in tests. maurits

Products.CMFDiffTool: 3.0.4 → 3.1.1

New features:
  • Add generic inline_diff implementation for FieldDiff.
    davisagli
Bug fixes:
  • Rerelease, as 3.1.0 was broken on one of our test servers. Should
    be fine elsewhere. maurits

Products.CMFDynamicViewFTI: 4.1.3 → 4.1.4

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From
    Products.PloneHotfix20160419. maurits

Products.CMFEditions: 2.2.19 → 2.2.20

Bug fixes:
  • Fixed CloneBlobs modifier to only react on Archetypes.
    This fix allows Dexterity Blob-Types (e.g. File, Image) to be versioned.
    iham

Products.CMFFormController: 3.0.5 → 3.0.6

Bug fixes:

Products.CMFPlone: 5.0.4 → 5.0.5

Products.GenericSetup: 1.8.2 → 1.8.3

  • Allowed overriding required and forbidden tools in toolset.xml.
    If a tool is currently required and you import a toolset.xml
    where it is forbidden, we remove the tool from the required list and
    add it to the forbidden list. And the other way around. The
    previous behavior was to raise an exception, which left no way in
    xml to remove a tool. Fail with a ValueError when the remove
    keyword is used. The expected behavior is unclear. maurits

Products.MimetypesRegistry: 2.0.8 → 2.0.9

Bug fixes:
  • In guess_encoding fall back to utf-8 instead of trying to
    read a portal property or the registry. esteele

Products.PasswordResetTool: 2.2.1 → 2.2.2

Bug fixes:
  • Remove unused attribute access of fullname (whereas it should have been access via getProperty) on a PlonePAS MemberData object in mail_password_template.pt, which lead to attribute access errors.
    thet

Products.PlonePAS: 5.0.9 → 5.0.11

Bug fixes:
  • Use the _marker from CMFCore for MemberDataTool.getProperty,
    this makes sure that we never return the _marker from PlonePAS
    but an error.
    pcdummy

  • Don't raise an ValueError if a property doesn't exists for a ZOPE
    user.
    pcdummy

  • Fix UnicodeDecodeError in searchForMembers by using safe_unicode.
    pbauer

Products.statusmessages: 4.0 → 4.1.0

New features:
  • Convert tests to plone.app.testing.
    do3cc

diazo: 1.2.2 → 1.2.3

New features:
  • Add absolute url prefix to xlink:href attributes
    krissik

five.pt: 2.2.3 → 2.2.4

  • Skip processing instruction code blocks in templates that use
    the restricted evaluation engine.
    mauritsvanrees

icalendar: 3.9.2 → 3.10

New features:
  • Updated components description to better comply with RFC 5545.
    Refs #183.
    stlaz

  • Added PERIOD value type to date types.
    Also fixes incompatibilities described in #184.
    Refs #189.
    stlaz

Bug fixes:
  • Fix testsuite for use with dateutil>=2.5.
    Refs #195.
    untitaker

  • Reintroduce cal.Component.is_broken that was removed with 3.9.2.
    Refs #185.
    geier

mockup: 2.1.4 → 2.1.5

Bug fixes:
  • Escape input into select2 widget
    vangheem

plone.app.blob: 1.6.1 → 1.6.2

Bug fixes:
  • Blob images now reset EXIF data on save martior

plone.app.content: 3.0.20 → 3.1.1

New features:
  • Show attributes from _unsafe_metadata if user has "Modify Portal Content" permissions.
    thet

  • Add Creator, Description, end, start and location to the available columns and context attributes for folder_contents.
    thet

Bug fixes:
  • Lookup of Content Type for passing in Content Type Factory improved,
    so that all Images (especially Tiff) are stored as Images not Files.
    loechel

  • Folder contents: When pasting, handle "Disallowed subobject type" ValueError and present a helpful error message.
    Fixes: plone/mockup#657
    thet

  • Folder contents: Acquire the top most visible portal object to operate on.
    Fixes some issues in INavigationRoot or ISite based subsites and virtual hosting environments pointing to subsites.
    Fixes include: show correct breadcrumb paths, paste to correct location.
    Fixes: #86
    thet

  • Added most notably portal_type, review_state and Subject but also exclude_from_nav, is_folderish, last_comment_date, meta_type and total_comments to BaseVocabularyView translate_ignored list.
    Some of them are necessary for frontend logic and others cannot be translated.
    Fixes https://github.com/plone/plone.app.content/issues/77
    thet

  • Remove portal_type from available columns and use Type instead, which is meant to be read by humans.
    portal_type is now available on the attributes object.
    thet

  • Vocabulary permissions are considered View permission by default, if not
    stated different in PERMISSION global. Renamed _permissions to PERMISSIONS,
    Deprecated BBB name in place. Also minor code-style changes
    jensens, thet

  • Fix test isolation problem and remove an unnecessary test dependency on plone.app.widgets.
    thet

  • Restore acquisition context in orderings, which had been dropped by accident in 3.0.15
    pysailor

plone.app.contentlisting: 1.2.4 → 1.2.5

Bug fixes:
  • Removed docstrings from some methods to avoid publishing them. From
    Products.PloneHotfix20160419. maurits

plone.app.contentmenu: 2.1.7 → 2.1.8

Bug fixes:
  • Optimized display menu's check for index_html.
    davisagli

plone.app.contenttypes: 1.2.11 → 1.2.16

New features:
  • assign shortnames to behaviors as supported by plone.behavior
    thet
Bug fixes:
  • Wait longer to fix unstable robot tests. maurits

  • Fixed possible cross site scripting (XSS) attack in lead image caption. maurits

  • Encode the linked url for the Link type to allow for non ascii characters in the url.
    martior

  • Deferred adapter lookup in collection view.
    This was looked up for contentmenu/toolbar at every authenticated request.
    It also had side effects if custom collection behaviors are used.
    jensens

  • Fixed unstable robot test for location criterion. maurits

  • Don't fail for utils.replace_link_variables_by_paths, if value is None.
    The value can be None when creating a Link type with invokeFactory without remoteUrl set and calling the indexer before setting the URL.
    thet

plone.app.dexterity: 2.1.20 → 2.3.1

New features:
  • The defaults of exclude from navigation is now obtained from a contextaware default factory, which value is obtained from an adapter.
    The default adapter returns False.
    An alternative adapter which defaults to True is provided but not registered.
    This change makes it possible to provide a custom context specific implementation.
    jensens

  • Documentation: Shortnames added and some missing behaviors added.
    jensens

  • Assign short names for all behaviors as supported by plone.behavior.
    jensens

Bug fixes:
  • Removed dexterity-types from portal_actions. This is set
    correctly in controlpanel.xml.
    Issue https://github.com/plone/plone.app.dexterity/issues/218
    maurits

  • Linebreaks in description are replaced with a space instead of vanishing it.
    Thus an editor can use them w/o having word glued together afterwards.
    jensens

  • Remove dups from TTW behavior FTI editor.
    jensens

  • Fix problem in ConstrainTypesBehavior:
    when mode was ENABLED but only setLocallyAllowedTypes were set,
    then getImmediatelyAddableTypes returned None,
    but all consuming code expect it to return a list
    jensens

  • Lookup of Content Type from MIME-Type for using right Plone Content Type to store Images (especially Tiff) correct as Images not Files.
    loechel

plone.app.discussion: 2.4.11 → 2.4.16

New features:
  • Make tests work with lxml safe html cleaner
Bug fixes:
  • Cleaned code from flake8 errors. maurits

  • Removed comment-migration view. This did not work anymore on
    Plone 5. If you still need to migrate from old-style comments, so
    from Plone 4.0 or earlier, please upgrade to Plone 4.3 first.
    maurits

  • Reset the required setting of the author_email widget each time.
    Otherwise, the email field might get set to required when an
    anonymous user visits, and then remain required when an
    authenticated user visits, making it impossible for an authenticated
    user to fill in the form without validation error. Or when in the
    control panel the field is set as not required anymore, that change
    would have no effect until the instance was restarted. maurits

  • Fixed possible cross site scripting (XSS) attack on moderate comments page. maurits

  • Removed docstrings from some methods to avoid publishing them. From
    Products.PloneHotfix20160419. maurits

  • Mark 'Edit' button for translation.
    https://github.com/plone/plone.app.discussion/issues/90
    gforcada

plone.app.event: 2.0.7 → 2.0.10

New features:
  • Changed the color of the navigation in the calendar widget to grey(from blue) using inherit.
    see https://github.com/plone/Products.CMFPlone/issues/1445
    janga1997

  • Added short-names for behaviors.
    jensens

Bug fixes:
  • Fixed possible cross site scripting (XSS) attack in location field. maurits

  • Don't validate the validate_start_end invariant, if start or end are None.
    This can happen on non-required, default empty start or end fields during editing.
    thet

  • Don't break base.dates_for_display and the formatted_date content provider, if event object has no start or end dates.
    It might come from a potential event.
    thet

plone.app.imaging: 2.0.3 → 2.0.4

Bug fixes:
  • Fix tests to not scale gif images, which were converted to jpeg imaged until plone.scale version < 2.
    Use png images for testing instead, which works for all versions of plone.scale.
    thet

plone.app.iterate: 3.1.5 → 3.2.0

New features:
Bug fixes:
  • Removed deprecated actionicons.xml. maurits

  • no special case that enables checkout via GET
    gotcha

  • Minimal code cleanup. gforcada

plone.app.layout: 2.5.19 → 2.5.20

Bug fixes:
  • Fix body class pat-markspeciallinks not set.
    Fixes #84.
    thet

plone.app.linkintegrity: 3.0.4 → 3.0.5

Bug fixes:
  • Fix test isolation problems: if a test calls transaction.commit() directly or
    indirectly it can not be an integration test, either avoid the commit or
    change the layer into a functional one.
    Fixes: https://github.com/plone/plone.app.linkintegrity/issues/36
    gforcada

plone.app.locales: 5.0.9 → 5.0.10

  • Updated French translation.

  • Updated Traditional Chinese translations.
    l34marr

  • Updated basque translations erral

  • Updated Dutch translations. maurits, fredvd

  • Updated Language-Codes in po file headers. These headers are not
    used in Plone to determine the language: that is done by inspecting
    the directory name. But the i18ndude script uses the Language-Code
    header when printing statistics. Several were set to en or to
    for example zh_CN (as the directory name should be) instead of
    zh-cn (as the language code should be). maurits

  • Update German translations.
    staeff

  • Fix typo in portuguese.
    https://github.com/collective/plone.app.locales/issues/112
    staeff

  • Update German translations.
    chrimba

  • Update Traditional Chinese translations.
    l34marr

  • Fix typos in it translation
    ale-rt

  • Update Japanese translations for plone.po.
    terapyon

  • Add russian translate Date and Time Settings, Language Settings and much more in control panel.
    Full Russian translation frontpafe.po
    Translation mocap and widgets
    serge73

  • add label_schema_default and translate in Japanese
    terapyon

plone.app.openid: 2.1.0 → 2.1.1

Bug fixes:
  • Code quality package cleanup. maurits

plone.app.querystring: 1.3.14 → 1.3.15

Bug fixes:
  • Add missing _referenceIs query parser
    vangheem

plone.app.registry: 1.3.11 → 1.3.12

New features:
  • Add traceback info with record name to importer in order to ease debugging.
    jensens

plone.app.testing: 5.0.1 → 5.0.2

Bug fixes:
  • Do not use install Products.SecureMailHost in the PloneFixture if it isn't available
    vangheem

plone.app.theming: 1.2.19 → 1.3.0

New features:
  • Control theme compilation in development mode
    through the environment variable DIAZO_ALWAYS_CACHE_RULES
    ale-rt
Bug fixes:
  • Small fixes to documentaion
    ale-rt

plone.app.upgrade: 1.3.24 → 1.3.25

New features:
  • Adds controlpanel setting to enable navigation root bound keyword vocabularies.
    jensens

  • Update to 5.1a2 upgrade step to allow upgrades from Plone 5.1a1.
    jensens

plone.app.users: 2.3.5 → 2.3.6

Bug fixes:
  • Fixed KeyError email on personal preferences form. This could
    happen when email is used as login name. Fixes
    https://github.com/plone/plone.app.users/issues/56 and
    https://github.com/plone/Products.CMFPlone/issues/1146
    maurits

  • Ensured partial searching utility for users in 'Search for users' page
    Fixes https://github.com/plone/Products.CMFPlone/issues/1499
    kkhan

  • Use ProtectedEmail for Email field factory
    ebrehault

plone.app.vocabularies: 2.2.3 → 3.0

Breaking changes:

  • CatalogVocabulary now takes a query for it's constructor instead of a LazyMap of brains
    and lazy loads terms. Also, in contains, do a UID query instead of checking the
    entire contents of the result. This prevents potential DOS with custom code where the
    whole contents of the catalog would get loaded with terms created for it on every
    validation attempt.
    vangheem
New features:
  • Optional allow to filter keyword vocabulary to a current section based on the current context.
    The class was build for easy subclassing - and still is.
    It allows to override the section fetching logic in a subclass.
    The default logic is first to look in the controlpanel if there is a IEditingSchema.subjects_of_navigation_root boolean.
    If its True the getNavigationRootObject is used as the section and only keywords used in this section are part of the vocabulary.
    Otherwise all keywords in the index are displayed.
    jensens

  • Refactor KeywordsVocabulary logic of term construction from dirty values out into own functions.
    Document functions in README.
    jensens

  • Add ImagesScales vocabulary.
    bsuttor

Bug fixes:
  • Fix bug where queries would not be parsed correctly for date queries on the catalog
    vocabulary
    vangheem

  • increase readability of code in CatalogSource.
    jensens

plone.app.widgets: 2.0.4 → 2.0.5

Bug fixes:
  • Fix related items to search for the whole site rather than from the navigation root only.
    Gagaro

plone.app.workflow: 2.2.4 → 2.2.5

New features:
  • Add a direct link from a group name on Sharing ab to that group's
    member list for users with sufficient permissions PLIP #1310
    datakurre

plone.app.z3cform: 1.2.0 → 1.2.1

Bug fixes:
  • Enhance test in order to show problem in RelatedItemsWidget with
    navigation-roots
    jensens

plone.caching: 1.0.1 → 1.1.0

Bug fixes:

plone.dexterity: 2.4.1 → 2.4.2

Bug fixes:
  • Added security declarations from Products.PloneHotfix20160419. maurits

plone.folder: 1.0.7 → 1.0.8

Bug fixes:
  • Update testing layers to use best practices and remove ZopeTestCase dependency,
    which should fix its test isolation problems.
    gforcada

plone.formwidget.querystring: 1.1.5 → 1.1.6

Bug fixes:
  • Fix way to decode utf-8 into template.
    bsuttor

plone.formwidget.recurrence: 2.0.2 → 2.1.0

New features:
Bug fixes:
  • Restructure tests: Move example type into own submodule.
    thet

plone.namedfile: 3.0.8 → 3.0.9

Bug fixes:
  • Backport from v4 a fix for a problem streaming an uncommitted image scale.
    Fixes an error on Windows 10 "WindowsError 32" by attempting to delete or
    access a file in use by another process.
    smcmahon

plone.outputfilters: 2.1.3 → 2.1.5

Bug fixes:
  • Make tests work with old and new safe HTML transform
    tomgross

  • Explicitly exclude mailto: links from being UID-resolved.
    thet

  • Fix test isolation problem.
    thet

plone.registry: 1.0.3 → 1.0.4

Bug fixes:
  • More cleanup: PEP8, isort, readability.
    jensens

plone.schemaeditor: 2.0.9 → 2.0.10

Bug fixes:
  • Fix tests for fieldset ordering changes in plone.supermodel.
    thet

  • Update url in setup.py to point to github.
    esteele

plone.session: 3.5.6 → 3.6.0

New features:

plone.stringinterp: 1.1.2 → 1.1.3

Bug fixes:
  • Adapt to changes in SimpleViewClass in zope4.
    pbauer

  • Fix typo
    staeff

plone.subrequest: 1.6.11 → 1.7.0

New features:
  • Allow to pass a custom exception handler for the response.
    jensens
Bug fixes:
  • When a subrequest modified the DB (or prior to the subrequest the main request),
    the oids annotated to the requests were doubled with each subsequent subrequest.
    This resulted in out-of-memory errors when using lots of subrequests,
    such as it happens on Mosaic based sites with a certain amount of tiles.
    Fixed by only adding new oids, not already known by parent request.
    jensens

  • Housekeeping: isort imports, autopep8, minor manual cleanup (no zope.app. imports).
    jensens

plone.supermodel: 1.2.7 → 1.3.0

New features:
  • Python 2.6 and Plone 4.3 no longer officially supported. It might
    still work, but no special effort is made to keep this compatible.
    maurits

  • Support to define the order of fieldsets.
    jensens

Bug fixes:
  • Update setup.py url to point to github location.
    esteele

  • Unset _init_field flag on init completion.
    metatoaster

plone.transformchain: 1.1.0 → 1.2.0

New features:
  • Added events to notifiy before/after all/single transform(s) are executed.
    jensens

plone.uuid: 1.0.3 → 1.0.4

Bug fixes:
  • Update setup.py url to point to github.
    esteele

  • Fixed issues preventing tests passing on Python 3
    datakurre

plonetheme.barceloneta: 1.6.18 → 1.6.21

New features:
  • Add styles for manage portlets jumplist
    davilima6
Bug fixes:
  • Remove references to discarded offcanvas feature
    davilima6

  • Set news lead image background for transparent images
    https://github.com/plone/plonetheme.barceloneta/issues/107
    staeff

  • Use .alert.status selector as an alternative to .portalMessage.
    This class is used by the structure pattern.
    thet

  • Make search button grow with the search buttons text.
    Fixes an issue where translated button texts were not fitting into the button.
    kkhan, thet

z3c.autoinclude: 0.3.5 → 0.3.6

  • Standardize namespace init.

  • Fix broken tests.

zope.globalrequest: 1.1 → 1.2

  • Lighten test dependencies by using neither zope.app.testing nor
    zope.app.zcmlfiles any longer.

grokcore.component: 2.5 → 2.5.1

grokcore.security: 1.6.2 → 1.6.3

plone.app.intid: 1.1.0 → 1.1.1

Bug fixes:
  • Fix code analysis errors reported by http://jenkins.plone.org/view/Pkgs/job/package-plone.app.intid
    gforcada

plone.app.lockingbehavior: 1.0.3 → 1.0.4

New features:

plone.app.relationfield: 1.3.2 → 1.3.3

Bug fixes:
  • cleanup: pep8, utf8 header, sorted imports, zca decorators, ...
    jensens

plone.app.versioningbehavior: 1.2.7 → 1.2.8

Bug fixes:
  • Fixes #25: URLs like ${absolute_url}/@@images/${uuid}.png are not converted
    on @@version-view. rafaelbco

plone.formwidget.contenttree: 1.0.13 → 1.0.14

Bug fixes:
  • Slice search results in PathSource object to limit the search results correctly.
    http://docs.plone.org/develop/plone/searching_and_indexing/query.html#sorting-and-limiting-the-number-of-results
    elioschmutz

plone.app.multilingual: 3.0.16 → 4.0.2

Breaking changes:

  • No more compatible with GenericSetup below 1.8.2.
    iham
New features:
  • Creating language folder(s) on installation.
    (fixes https://github.com/plone/plone.app.multilingual/issues/214)
    iham
Bug fixes:
  • Fixed unstable robot test by waiting until the expected text is on the page. maurits

  • Correct event subscribers so that content cut from one LRF & pasted into the
    Media folder is shown there when I switch to a second language.
    djowett

  • Wait for visibility of select2 result, instead of time.
    jensens

  • Workaroud in robot test for TinyMCE overlap bug see
    https://github.com/plone/plone.app.multilingual/issues/227
    for details
    jensens

plone.tiles: 1.4.0 → 1.6

Sphinx: 1.3.4 → 1.3.6

setuptools: 20.2.2 → 21.0.0

zc.buildout: 2.5.0 → 2.5.2

plone.recipe.zeoserver: 1.2.8 → 1.2.9

Bug fixes:

plone.recipe.zope2instance: 4.2.20 → 4.2.21

Bug fixes:
  • Fix #23: "TypeError: () takes no arguments (1 given)" on ./bin/instance start
    jensens

plone.releaser: 1.5.0 → 1.5.3

New features:
  • Ask before pushing to coredev, after updating the checkouts and versions. maurits

  • Changed new headings to 'Breaking changes', 'New features', 'Bug
    fixes'. Old headers are still accepted, but in the postrelease we
    generate the new ones. In the unified changelog, we combine the old
    and new names.
    See https://github.com/plone/Products.CMFPlone/issues/1323
    maurits

Bug fixes:
  • Change pypi-url from http to https.
    fgrcon

  • Fix new versions if they had dev/post release suffix.
    gforcada

  • When compiling changelog, treat Incompatibilities header as special
    too. maurits

plone.app.robotframework: 0.9.15 → 0.9.16

Bug fixes:
  • Removed bad format parameter on ObjectModifiedEvent: must be an Attributes instance.
    See zope.lifecycleevent.ObjectModifiedEvent class.
    Removed because we can't get the interface and the correct fieldname.
    sgeulette

robotframework: 2.8.7 → 3.0

robotframework-debuglibrary: 0.3 → 0.5

robotframework-ride: 1.3 → 1.5.2.1

robotframework-selenium2screenshots: 0.4.0 → 0.7.0

selenium: 2.46.0 → 2.53.5

sphinxcontrib-robotframework: 0.4.3 → 0.5.1

Markdown: 2.6.5 → 2.6.6

Pillow: 3.1.1 → 3.2.0

WebOb: 1.4.1 → 1.4.2

cssselect: 0.9.1 → 0.9.2

decorator: 4.0.9 → 4.0.10

requests: 2.9.1 → 2.9.2

simplejson: 3.8.1 → 3.8.2

Project resources

Learn about Plone