Misago 0.19.2 is a maintenance release focused on fixing issues and improving different areas of project.

Security improvement: added rel=noopener to user-posted links

In response to heads up posted on Misago's GitHub (thank you for that!) 0.19.2 changes our message parser to set rel="nofollow noopener" on user-posted links, which should make it safer for site users to open posted links.

Streamlining the dev experience

Misago 0.17 was first Misago to standardize the process of creating development instances with inclusion of Docker. Misago 0.19.2 builds on this by providing the dev bash script providing shortcuts for common development actions, as well as place for us to run some basic checks and communicate possible issues to developers.

Assuming you already have docker installed on your machine, it now takes 4 commands from nothing to running Misago instance on your machine:

git clone https://github.com/rafalp/Misago.git
cd Misago
./dev start
docker-compose up

The ./dev also gives us single place for packing other shortcut actions, such as ./dev reset that performs hard reset of development instance or ./dev txpull that pulls and compiles latest versions of translations from Transifex.

Version check utility

Misago Admin Panel has "Misago version" section that in plan should've displayed the button that administrator could click to learn if they need to update their site to new version. This was ruined however by Misago requiring site administrator to install additional package in their python environment in order to be able to use it.

Misago 0.19.2 brings updated version check logic that no longer requires any custom action for this option to be available.

Updating instructions

To update Misago from 0.19.1 to 0.19.2 use PIP to uninstall old Misago and install new one:

pip uninstall misago
pip install misago

Next, run following commands to make sure your forum database and static files are up to date with latest changes:

python manage.py migrate
python manage.py collectstatic

New features

none

Theme changes

none

Bugs fixed

• 1051 - Debug Toolbar was not being displayed inside development docker container.
• 1100 - createfakeusers could run out of usernames.

Implementation and API changes

• 993 - Removed dependency on “packaging" module in "check version" admin tool.
• 1061 - Moved requirements management to pip-tools.
• 1079 - Consolidated all bash dev scripts into single file.
• 1084 - createsuperuser will no longer require password to pass validation. This change is to bring its behavior in line with Django 2.0 implementation, and make it easier to create throwaway super user accounts in development.
• 1088 - Misago will now add rel=noopener to outgoing links posted by users.
• 1091 - Replaced GitHub API with PyPi in "check version" admin tool.
• 1100 - Progress bar displayed by bulk-processing commands now also displays number of completed items.
• 1101 - buildactivepostersranking management command will now display time it took to complete. It should also be little faster than it used to be.
• 1104 - Updated default cron.txt to have 5 minute delays between each maintenance task run, conserving host's memory better.

Documentation changes

none

Localization changes

• 1082 - Translation source for django.po has changed. Transifex has been updated.