• Sept. 16, 2018, 4:37 p.m.

    Misago 0.19.2 is a maintenance release focused on fixing issues and improving different areas of project.

    Security improvement: added rel=noopener to user-posted links

    In response to heads up posted on Misago's GitHub (thank you for that!) 0.19.2 changes our message parser to set rel="nofollow noopener" on user-posted links, which should make it safer for site users to open posted links.

    Streamlining the dev experience

    Misago 0.17 was first Misago to standardize the process of creating development instances with inclusion of Docker. Misago 0.19.2 builds on this by providing the dev bash script providing shortcuts for common development actions, as well as place for us to run some basic checks and communicate possible issues to developers.

    Assuming you already have docker installed on your machine, it now takes 4 commands from nothing to running Misago instance on your machine:

    git clone https://github.com/rafalp/Misago.git
    cd Misago
    ./dev start
    docker-compose up
    

    The ./dev also gives us single place for packing other shortcut actions, such as ./dev reset that performs hard reset of development instance or ./dev txpull that pulls and compiles latest versions of translations from Transifex.

    Version check utility

    Misago Admin Panel has "Misago version" section that in plan should've displayed the button that administrator could click to learn if they need to update their site to new version. This was ruined however by Misago requiring site administrator to install additional package in their python environment in order to be able to use it.

    Misago 0.19.2 brings updated version check logic that no longer requires any custom action for this option to be available.

    Updating instructions

    To update Misago from 0.19.1 to 0.19.2 use PIP to uninstall old Misago and install new one:

    pip uninstall misago
    pip install misago
    

    Next, run following commands to make sure your forum database and static files are up to date with latest changes:

    python manage.py migrate
    python manage.py collectstatic
    

    New features

    none

    Theme changes

    none

    Bugs fixed

    • 1051 - Debug Toolbar was not being displayed inside development docker container.
    • 1100 - createfakeusers could run out of usernames.

    Implementation and API changes

    • 993 - Removed dependency on “packaging" module in "check version" admin tool.
    • 1061 - Moved requirements management to pip-tools.
    • 1079 - Consolidated all bash dev scripts into single file.
    • 1084 - createsuperuser will no longer require password to pass validation. This change is to bring its behavior in line with Django 2.0 implementation, and make it easier to create throwaway super user accounts in development.
    • 1088 - Misago will now add rel=noopener to outgoing links posted by users.
    • 1091 - Replaced GitHub API with PyPi in "check version" admin tool.
    • 1100 - Progress bar displayed by bulk-processing commands now also displays number of completed items.
    • 1101 - buildactivepostersranking management command will now display time it took to complete. It should also be little faster than it used to be.
    • 1104 - Updated default cron.txt to have 5 minute delays between each maintenance task run, conserving host's memory better.

    Documentation changes

    none

    Localization changes

    • 1082 - Translation source for django.po has changed. Transifex has been updated.
  • bookmark

    Thread has been pinned globally.

  • Members 35 posts
    Sept. 19, 2018, 1:47 a.m.

    Good, Updates done Successfully! NO ERROR! All working Great! :)

    Screenshot_20180919-024526.png

    PNG, 64.7 KB, uploaded by Rotense on Sept. 19, 2018.