MoinMoin Version History

========================

Please note: Starting from the MoinMoin version you used previously, you

should read all more recent entries (or at least everything marked with HINT).

This release has known bugs (see MoinMoin:MoinMoinBugs), but we think it is

already better than the previous stable release. Our release policy is not

trying to make a "perfect release" (as that release might NEVER get released),

but to make progress and don't delay releases too much.

Known main issues:

  * The GUI WYSIWYG editor has still some issues and limitations.

    If you can't live with those, you can simply switch it off by using:

    editor_force = True

    editor_default = 'text'  # internal default, just for completeness

Version 1.9.0rc2:

  Please note:

  * This is a BETA/RC version, not meant for production usage, but just to

    discover bugs, incompatibilities, installation issues, documentation issues,

    etc. - please report issues on MoinMoin:MoinMoinBugs.

  * Translators can still work on translations, RC is mainly for testing the

    code, we likely will update translations and wiki pages for final release.

    Be careful though, don't break things.

    Please see http://master19.moinmo.in/ and help cleaning up there.

  New features:

  * Improved attachment dialog for GUI editor.

  * safe 2-stage xapian index rebuilding:

    moin index build --mode=buildnewindex  # slow, concurrent

    <stop wiki>

    moin index build --mode=usenewindex  # fast

    <start wiki>

  * added wikiconfig snippet for xapian indexed search

  * macro WikiConfigHelp: added section keyword for selecting a subset of the

    description, e.g. <<WikiConfigHelp(section="xapian")>>

  * macro HighlighterList: lists all Pygments lexers (see HelpOnParsers)

  * main exception handler: include request url in log output

  Bug fixes:

  * killed deprecated macro.form attribute (didn't work as expected anyway due

    to WSGI refactoring) - please use macro.request.{args,form,values}

  * fixed URL args processing for macros: MonthCalendar, FullSearch, TeudView

  * fix load_theme call for fallback theme loading

  * fix makeForbidden403() calls - is makeForbidden(403, ...) now

  * fix check_surge_protect() call

  * sendmail: add more debug logging, check for empty recipients list

  * parsers: avoid accidental triggering of ParserBase deprecation warning

  * SystemInfo macro: fix failure if xapian/xapian-bindings are not installed

  * Xapian indexing:

    * make sure DB connection gets closed

    * rely on xapian's locking (remove moin's additional locking)

    * removed indexer threading

    * fixed (reimplemented) indexer queue

    * less disruptive xapian index rebuild

  * AttachFile: added remove_attachment() and FileRemovedEvent (mail and xapian

    support, no jabber support yet)

  * patch werkzeug 0.5.1 to catch OverFlowError and ValueError so it doesn't

    crash when receiving invalid If-modified-since header from client.

  * GetText2 macro: fix for named placeholders

  * fixed MoinMoinBugs/LineNumbersWorkingBuggyWithHighlightParser

  * GUI editor: roundtripping works now for .pdf/doc/... attachment transclusion

  * fix MoinMoinBugs/MissingPageShouldn'tOfferToCreatePageForReadonlyUsers

  * fix MoinMoinBugs/1.6XmlRpcPutPagePagenameEscape

  * abort RenamePage if renaming of main page fails (do not try to rename

    subpages)

Version 1.9.0rc1:

  New features:

  * config attribute extensions_mapping added for mapping of attachment file

    extensions to actions (currently used for anywikidraw/twikidraw action)

  Bug fixes:

  * setup.py: fix wrong exitcode

  * Xapian indexing: we need to return a UnprocessedDocument in any case, never a ProcessedDocument

  * AdvancedSearch: example didn't work, fixed

  * fix wrong usage of parseQueryString result

  * SyncPages and LocalSiteMap action: fix NameError

  * LocalSiteMap: added missing _()

  * fix typo in Cache-Control header (max-age)

  * fix '304 not modified' response for AttachFile do=get and do=box

  * action CopyPage, RenamePage, DeletePage: fixed getting subpages_checked param from url

  * action.getHandler(): make it moin 1.8 compatible again

  Other changes:

  * 'modernized' theme:

    * use it by default (1.8 used 'modern')

    * move title_with_separators() from Modernized theme to ThemeBase

    * add a span with "pagepath" class to title_with_separators

  * add the sidebar() method from Mandarin and Gugiel themes to ThemeBase

  * updated flup to 1.0.2+ ( http://hg.saddi.com/flup-server/rev/6ea1ffac1bcb )

  * updated pygments to 1.1.1+ ( http://dev.pocoo.org/hg/pygments-main/rev/948f8885af16 )

  * updated parsedatetime to 0.8.7

  * TextCha feature of TWikiDraw removed again because AnyWikiDraw misses the

    TextCha feature still, language detection problems.

  * removed anywikidraw .pack.gz file, makes more trouble than it's worth

  * MoinMoin/search/builtin.py searching does not require a lock, xapian allows several concurrent search connections.

  * increase surge protection limits for AttachFile to avoid trouble with image galleries

Version 1.9.0beta4:

  New features:

  * Moin's Xapian based search code was refactored:

    * It is now based on the xappy library (see MoinMoin.support.xappy).

    * Minimum Xapian requirement is 1.0.6 now.

    * Outdated and unmaintained xapwrap lib was removed.

    * now regex search with Xapian enabled also is based on the xapian index

  * raw action mimetype support: ...?action=raw&mimetype=text/css

  * TWikiDraw:

    * support code was refactored/moved to the twikidraw action.

    * use drawing:example.tdraw to invoke it (drawing:example also still

      works for backwards compatibility)

    * TextCha feature added

  * AnyWikiDraw:

    * java applet added, source code see contrib/

    * support code for it is in anywikidraw action.

    * use drawing:example.adraw to invoke it

  * SlideShow action and css from moin/extensions for modernized theme added

  Bug fixes:

  * Bug with "language:en" was fixed for the Moin search. Now language:

    behaves like described on HelpOnSearching.

  * flup_frontend: __import__ compatibility fix for python 2.4

  * wiki_groups and wiki_dicts caching fix.

  * Fixed moin server standalone --start.

  Other changes:

  * HINT: simplify wikiserver configuration by using same names as werkzeug's

    run_simple() call.

  * Removed moin account check's --lastsaved option, it is default now

    (checking last use with trail file did not work in 1.9 anyway).

Version 1.9.0beta3:

  New features:

  * HINT: We now offer different sized sets of system/help pages and the default

    underlay just contains a single page: LanguageSetup. You need to be

    superuser, visit that page and then install the language packs you like

    (minimum is the essential set for English).

  * HINT: LanguageSetup is the default page_front_page, you need to change that

    after installing language packs (see above).

  * New modular group and dict data access, you can use group and dict 

    backend modules to access group and dict data stored anywhere you like.

    Currently we provide these backends:

      * WikiGroups and WikiDicts backends get data from wikipages. They work

        similar to old wikidicts code (but with less caching issues :).

      * ConfigGroups and ConfigDicts backends get data from a dictionary

        defined in the wiki config.

      * CompositeGroups and CompositeDicts compose several backends, so data

        may be retrieved from several sources. For example, groups may be

        defined in the wiki config and on wiki pages.

    * Using cfg.groups and cfg.dicts, you can define the backend to use to

      access group and dict information (default: WikiGroups / WikiDicts

      backend).

      See wiki/config/more_samples/ directory (groups_wikiconfig_snippet and

      dicts_wikiconfig_snippet).

    * See also the new HelpOnDictionaries and HelpOnGroups help pages.

  * "moin ... account homepage" script to create user homepages.

  * Theme packages: do_copythemefile now copies theme files to

    MoinMoin/web/static/htdocs.

  * OpenID: Support for Simple Registration (SREG) extension.

    Basic profile fields can be copied from OpenID provider when logging in.

  * OpenID: Support for Teams extension.

    If your OpenID provider supports the Teams extension (i.e. Launchpad),

    MoinMoin can be configured to generate 

  * OpenID: Ability to accept logins from specific OpenID providers.

    Login form changes based on configuration for better usability:

    * 0 providers: normal text input box for OpenID URL

    * 1 provider: hidden field, automatic form submission with JavaScript

    * 2+ providers: select field, uses directed identity

  Bug fixes:

  * Fixed MoinMoinBugs/DeprecatedIsNotRespected (search ranking, WantedPages).

  * web.session: fixed MoinMoinBugs/1.9_session_lifetime_for_user. We do

    refresh the session cookie now on each request.

  * web.session: fixed MoinMoinBugs/1.9_remember_me_broken.

  * Fix superuser functionality (broken in previous 1.9 betas).

  * fixes misc. crashes / exceptions

  * OpenID: request processing now works with new WSGI refactoring.

  * OpenID: always return error messages with CancelLogin if OpenID process fails.

  Other changes:

  * ImageLink page has been killed (ImageLink macro is gone since 1.6.1).

  * replace our text_irssi parser with a wrapper around pygments' irc highlighter

  * Added disabled state for HTML select fields.

  * Allowed disabling of timezone and language user prefs if they are

    part of the user's login fields (i.e. OpenID SREG).

  * Added option to disable local registration links and direct user

    to registration page at an OpenID provider instead.

  Developer notes:

  * groups and dicts API changes:

    * request.groups and request.dicts provide access to groups and dicts.

    * MoinMoin.wikidicts is gone, please use MoinMoin.datastruct.

    * LazyGroup and LazyGroupsBackend base classes for implementing backends

      which potentially deal with huge amounts of data (like a LDAP directory).

      Use MoinMoin/datastruct/backends/config_lazy_groups.py as a draft for

      new backends.

    * See http://moinmo.in/Groups2009 for more details.

  * i18n: new approach for defining sets of system/help pages (see i18n.strings).

    CheckTranslation, page packager, wikiutil.isSystemPage() use those sets.

Version 1.9.0beta2:

  New features:

  * Added modernized_cms theme (hides most wiki widgets from modernized if the

    user is not logged in).

  * Static file serving built-in (moved wiki/htdocs to MoinMoin/web/static/htdocs).

    MoinMoin.web.static has a static file serving wrapper that uses the files

    from htdocs subdirectory by default (docs=True).

    You can also give another path or switch off creation of that static wrapper.

    See the docstring of the static package for details.

  * Handle wikiserverconfig(_local) in the same way as wikiconfig(_local)

  * PackagePages: create package file in memory and send it to the caller

  * Environment variable MOIN_DEBUGGER=off/web/external (default is like "off")

  * HTTPAuthMoin: http basic auth done by moin

  * ldap auth: new name_callback param to create a custom wiki username (not the

    ldap login username)

  * wikiconfig/farmconfig: improve values for data(_underlay)_dir, make logo

    work automatically

  * New session code:

    * cfg.cookie_lifetime is now a tuple (anon, loggedin), giving the lifetime

      of the cookie in hours, accepting floats, for anon sessions and logged in

      sessions. Default is (0, 12). 0 means not to use a session cookie (== not

      to establish a session) and makes only sense for anon users.

  * cfg.cookie_httponly is new and defaults to False. Please note that if you

    set it to True, TWikiDraw and similar stuff won't be able to use the session

    cookie. Thus, if your wiki page doesn't allow writing for everybody, saving

    a drawing will fail, because there is no session (== no logged in user) for

    the TWikiDraw applet's saving POSTs.

  Removed features:

  * Removed cfg.traceback_* settings (use logging configuration)

  * Removed old session code and settings:

    * Removed cfg.session_handler and session_id_handler (use cfg.session_service)

    * Removed cfg.anonymous_session_lifetime (use cfg.cookie_lifetime)

  Fixes:

  * Fix ScriptContext URL default value

  * AttachFile: get the rename field content from qs args, too

  * Changed code to support werkzeug 0.5pre

  * run_server param name need to match Config attribute name 'debug'

  * Fix wiki regex samples in farmconfig

  * 1.6.0a mig script/converter: fixed converter bug for parser sections

  * login action: fix formatting of error messages

  * AttachFile do=view: quote filename and pagename params for EmbedObject

    macro call

  * unsubscribe action: add msg types so icons get displayed

  * Only save session data if we also have a cookie establishing a session

  * suid: simplify and fix, bigger selection box

  * Drawings: fix KeyError for non-existing map file

Version 1.9.0beta1:

  New features:

    * HINT: MoinMoin requires Python 2.4 now. If you only have Python 2.3 and

            you don't want to upgrade it, please use MoinMoin 1.8.x.

    * HINT: MoinMoin is now a WSGI application.

      Please read the new install docs about how to use it.

      We are still working on the docs, please try to use them and report any

      bugs you find: http://master19.moinmo.in/InstallDocs

      You also have a local copy of that page as docs/INSTALL.html.

      There is also some stuff in docs/INSTALL.wsgi.

    * HINT: due to big changes in the request processing and the request

      object (related to the WSGI refactoring), many 3rd party plugins might

      need code updates to work with moin 1.9.

      We are working on some docs about how to update them to work with 1.9.

    * We use the pygments highlighting library now, use it like this:

      {{{#!highlight xxx

      ...

      }}}

      xxx is any of the markups pygments supports.

      Note: we still have some (deprecated) small wrappers around pygments,

      so the old syntax #!python/pascal/cplusplus/... still works.

    * TWikiDraw drawings are now stored as a single attachment foo.tdraw.

      We added a migration script that converts your existing drawings.

    * HINT: auth.http.HTTPAuth is now auth.GivenAuth

      This was badly named from the beginning as for most servers, it just

      looked at REMOTE_USER environment variable and relied on the server

      doing the authentication (could be http basic auth or any other auth).

      See HelpOnAuthentication.

Version 1.8.6:

  Bug fixes:

  * Xapian indexing / indexing filters:

    * fix deadlocks with well- and misbehaving external filters

    * work around indexing run crashing when encountering encoding problems

      with non-ascii filenames

    * OpenOffice/OpenDocument filters: catch UnicodeDecodeErrors (happens

      with password protected files)

  * i18n: check if languages is not initialized yet, don't crash

  * http_redirect: use 301 redirect for some cases

  * do not use httponly session cookies, makes trouble with twikidraw and ACLs

  * GetText2 macro: fix for named placeholder

  * Fix SHA -> SSHA password hash upgrade for old user profiles.

  * abort RenamePage if renaming of main page fails (do not try to rename

    subpages)

  New features:

  * search: improve search result ordering

  * SubscribeUser action: username regexes, support unsubscribing

  * add MS Powerpoint indexing filter (needs catppt from catdoc package)

  * migration scripts: make finding damaged edit-log entries easier

Version 1.8.5:

  Bug fixes:

    * Attachment links: fix processing of attributes (e.g. 'target', 'title')

    * Upgrade FCKeditor from 2.6.4 to 2.6.4.1.

    * PDF embedding: fix html, works better with PDF browser plugins now.

    * Fix typo in rightsidebar CSS.

    * Action revert: avoids reverting to a deleted current revision.

    * Action diff: enable prev/next button only in the range of given revisions.

    * Add a Auto-Submitted: auto-generated header to generated mails.

    * Include comment in email notifies.

    * mailimport: fix endless looping while trying to import a forwarded mail.

    * fuid: keep same fake_mtime for intervals of max_staleness duration.

    * Fixes a bug with empty list items in the GUI editor.

    * Improve filesys.rename compatibility code (win32).

    * Fix locking for CacheEntry.

    * Xapian indexing: catch exception when a bad zip file is encountered.

    * openidrp / botbouncer: fix param count for CancelLogin().

  New features:

    * Added CAS authentication.

    * Added httponly cookie support and use it for session cookie.

  Other changes:

    * HTTP auth: added debug logging.

    * Minor LDAP auth improvements.

    * Data browser widget:

      * Add (h)column<idx> css class to make it styleable.

      * Include only necessary autofilter options.

    * moin maint cleancache purges now drafts, too.

    * Add gopher and apt protocols to url_schemas.

    * Add .csv, .flv, .swf to MIMETYPES_MORE.

Version 1.8.4:

  Bug fixes:

    * ACL security: fix bug in hierarchical ACL processing, more restrictive

      sub page ACLs did not work if the current user name did not give a match

      within the sub page ACL (instead, the less restrictive parent page ACL

      was used).

      Non-hierarchical ACL processing (the default) is NOT affected.

    * Creole parser: fix spaces in multiline elements.

    * Use msie.css only for Internet Explorer older than version 8, fixes

      e.g. the double rendering of link icons.

    * http auth: do auth_type comparisons case-insensitively (spec-compliant)

  New features:

    * EmbedObject macro: changed default width value for PDF files to 100%

                         (use a recent Adobe Reader to make this work).

    * CopyPage action: added a TextCha for it

  Other changes:    

    * Creole parser: Add second license: BSD

Version 1.8.3:

  Bug fixes:

    * AttachFile XSS fixes: move escaping to error_msg / upload_form

    * AttachFile move: add more escaping (maybe not XSS exploitable though)

    * email attachments import with xapian indexing enabled: fix AttributeError

    * fix wrong links in attachment notifications

    * AttachFile do=view: quote filename and pagename params for EmbedObject

      macro call

    * AttachFile: fix exception when someone just clicks on upload, without

      giving a file

    * ldap_login: use None as default value for ssl certs/keys (using '' for

      the pathes lets it fail with Connect Error)

    * release edit lock if someone saves an unchanged page

    * fix sendmail.encodeAddress (do not [QP] encode blanks, do not un-

      necessarily use [QP] encoding for pure ascii mail addresses)

    * Fixed docs bug: see HINT about secrets configuration at version 1.8.0

      (1.8.0 Other changes).

    * backup action: add 'self' dummy argument for backup_exclude function

    * login action: fix formatting of error messages

    * unsubscribe action: add msg types so icons get displayed

    * fix quoting for pagehits stats (info action) - was not working for pagenames with blanks

    * macro.TableOfContents: bug fix for MoinMoinBugs/TableOfContentsIgnoresSectionNumbersPragma

  New features:

    * added modernized_cms theme

    * use url_prefix_fckeditor if you don't want to use the builtin FCKeditor

      of moin, but a separate one at some specific url

    * action.Load: added textcha feature

    * add mumble protocol (nice and good quality F/OSS VOIP conference chat sw)

    * ldap auth: new name_callback param to create a custom wiki username (not

      the ldap login username).

  Other changes:

    * add compatibility code for set to xapwrap.index (fix py 2.6 warnings)

    * wikiutil: MIMETYPES_MORE extended for .md5 as text/plain

Version 1.8.2:

  Bug fixes:

    * Fix AttachFile and antispam XSS issues.

    * Modernized, modern and rightsidebar themes: make nonexistent or

      badinterwiki links gray also when they are already visited.

    * Fix anchor parsing for interwiki links and #redirect processing

      instruction.

    * user.apply_recovery_token: key must be of type string (for Python 2.6).

    * Fix MoinMoinBugs/GuiEditorBreaksIndentedTable.

    * Fix autofilter javascript breakage caused by including a databrowser

      widget.

    * Use per-wiki i18n cache (fixes wrong links to other farm wikis).

    * Made cfg.interwikiname and cfg.user_homewiki unicode objects (str only

      worked for ascii names).

    * Xapian search: fixed historysearch.

    * Xapian search indexing:

      * Fix index updating for trivial changes.

      * With history search enabled and in update mode, do not try to re-index

        old page revisions again.

      * With history search enabled, index page attachments only once.

      * Fix last modified time of xapian index (shown on SystemInfo page).

    * Make logging handlers defined in logging.handlers work (e.g.

      class=handlers.RotatingFileHandler)

    * Jabber notifications:

      * Use an RFC compliant message type.

      * Fix user creation notifications.

    * OpenID: Compatibility fix for python-openid 2.x.x (also works with

      1.x.x), fixes crash when trying to associate moin user to OpenID.

    * Have a wikiserverconfig.py in wiki/server/ so setup.py copies it.

    * Fixed inconsistent handling of fragments / anchor IDs:

      * Fixed creole and wiki parser, other parsers might need similar fixes.

      * IDs with blanks, non-ASCII chars etc. are now sanitized in the same way

        for links as well as for link targets, so the user editing a page won't

        have to bother with it.

        E.g. [[#123 foo bar]] will link to:

        * <<Anchor(123 foo bar)>> (moin) or {{#123 foo bar}} (creole)

        * headline = 123 foo bar = (moin / creole)

        Simple rule: if the link and the target are consistent, it should work.

      * The creole wiki parser created non-human-readable sha1 heading IDs

        before 1.8.2, now it creates same (sometimes readable) heading IDs as

        the moin wiki parser.

      * TitleIndex/WordIndex now also use IDs sanitized in that way internally.

      HINT: if you manually worked around the inconsistencies/bugs before, you

            likely have to remove those workarounds now. Same thing if you used

            creole's sha1 heading IDs or IDs on TitleIndex/WordIndex.

  Other changes:

    * Updated FCKeditor to 2.6.4 (== many bug fixes in the GUI editor).

    * Enhanced privacy by a new setting: cfg.log_remote_addr (default: True),

      it controls whether moin logs the remote's IP/hostname to edit-log and

      event-log. Use log_remote_addr = False to enhance privacy.

    * Streamline attachment_drawing formatter behaviour.

    * Search results: only redirect to a single search result for titlesearch

      (fuzzy goto functionality), but not for fulltext search results.

Version 1.8.1:

  Bug fixes:

    * Workaround win32 locking problems (caused by spurious access denied

      exceptions on that platform).

    * Fix unicode errors that happened when password checker failed a password

    * WikiConfig/WikiConfigHelp: fixed wrong language table headings

    * Themes: make the margins around trail line work properly

    * "modernized" theme:

      * make broken links gray

      * add new right/center/left/justify css classes

      * don't force Arial

    * Standalone server: be more specific when catching socket exceptions,

      treat socket errors in http header emission in the same way.

    * GUI editor:

      * Fix heading levels when inserting new headings.

      * Fix headers already sent exception when using e.g. edit LOCKing.

    * Xapian indexing: fixed missing import for execfilter (only happened on

      non-posix platforms like win32)

  * New features:

    * Themes:

     * Make the TOC shrinkwrap, add white background to navigation macro.

       The table of contents looked bad spanning the whole width of the page.

       It's made to shrinkwrap now, so it will only get as wide, as the longest

       heading. We use display:inline-table, so this won't work in MS IE6,

       which still displays it the old way.

       Navigation macro now has a white background, to make it more readable

       when it's floating over a pre block or TOC.

     * Make the numbers in lists in table of contents right-aligned.

     * Refactored and extended theme.html_stylesheets() to make alternate

       stylesheets possible. Stylesheet definitions now can either be:

       2-tuples: (media, href)  # backwards compatibility

       or:

       3-tuples: (media, href, title)  # new, for defining alternate stylesheets

       This works within themes as well as in the wiki config.

       See also: http://www.w3.org/Style/Examples/007/alternatives.html

Version 1.8.0:

  Note: This is a reduced CHANGES, ommitting details from rc/beta test and

        also less interesting minor changes and fixes. It shows changes

        relative to 1.7.2 release.

        If you want to see full detail, read it there:

        http://hg.moinmo.in/moin/1.8/file/6130eab15936/docs/CHANGES

  New Features: ==============================================================

    * HINT: New "modernized" theme - if you use "modern" [default], try:

      theme_default = 'modernized'

      If you find problems with "modernized", please report them because we

      want to use it as default theme in future.

    * GUI Editor:

      * upgraded to use FCKEditor version 2.6.3

      * user can insert and modify various types of MoinMoin links

    * New plugin_dirs setting to allow multiple plugin pathes (additional to

      the automatically configured plugin_dir [default: data_dir/plugin]).

    * @EMAIL@ expands to a MailTo macro call with the obfuscated email address

      of the current user.

    * New macros "WikiConfig" and "WikiConfigHelp".

    * Per-parser quickhelp, 'quickhelp' class variable of parser class.

    * Secure session cookies for https (see cfg.cookie_secure).

    * Added left/center/right/justify css classes to builtin themes.

      Use them like:

      {{{#!wiki justify

      this content is justified....

      }}}

  Removed Features: ==========================================================

    * HINT: url_prefix setting (use url_prefix_static or just use the default)

    * traceback_log_dir setting (we just use logging.exception)

    * editor_quickhelp setting (replaced by per-parser quickhelp)

    * Restoring backups with the backup action and related settings (while

      creating backups is no big issue and should work OK, restoring them

      had fundamental issues related to overwriting or not-overwriting of

      existing files - thus we removed the "restore" part of the action and

      recommend that you just contact the wiki server admin in case of trouble,

      give him your wiki backup file and let him carefully restore it.)

    * Removed unmaintained DesktopEdition (moin 1.5.x style) and phpwiki

      migration scripts from contrib/ directory.

  Bug Fixes: =================================================================

    * GUI Editor - fixed lots of bugs.

    * Fixing https detection for servers using HTTPS=1 and also for WSGI

      servers not using HTTPS/SSL_ environment, but just wsgi.url_scheme.

    * Search results: link to 'view' rendering of found attachments.

    * Standalone server: fix serverClass and interface argument processing,

      announce used serverClass in log output.

    * mointwisted: fixed Twisted start script.

    * Logging:

      * Use logging framework for messages emitted by warnings module (e.g.

        DeprecationWarning), silence some specific warnings.

      * Removed superfluous linefeeds in timing log output.

    * Bug fix for language not installed (MoinMoinBugs/WikiLanguageNotDefined).

    * Fixed editbar hidden comment link cosmetics for sidebar themes (hide the

      complete list element).

    * MoinMoinBugs/DoubleScriptNameInSitemap (fixing urls given by sitemap

      action, if the wiki does not run in the root url of the site)

    * Fixed backup action configuration (broke on win32).

    * Fixed MoinMoinBugs/PackagesAddRevision.

    * SyncPages: add workaround for callers calling log_status with encoded

      bytestrings.

    * Fixed dbw_hide_buttons javascript.

    * HINT: Jabber bot can now be configured to use an authentication realm

      which is different from the server's hostname; the xmpp_node

      configuration parameter can now contain a full JID and the xmpp_resource

      parameter is no longer supported.

  Other Changes: =============================================================

    * HINT: new configuration for misc. secrets, please use either:

          secrets = "MySecretLooongString!" # one secret for everything

      or:

          secrets = {

              'xmlrpc/ProcessMail': 'yourmailsecret', # for mailimport

              'xmlrpc/RemoteScript': 'yourremotescriptsecret',

              'action/cache': 'yourcachesecret', # unguessable cache keys

              'wikiutil/tickets': 'yourticketsecret', # edit tickets

              'jabberbot': 'yourjabberbotsecret', # jabberbot communication

          }

      Secret strings must be at least 10 chars long.

      Note: mail_import_secret setting is gone, use

            secrets["xmlrpc/ProcessMail"] instead of it.

      Note: jabberbot secret setting is gone, use

            secrets["jabberbot"] instead of it.

    * HINT: user_autocreate setting was removed from wiki configuration and

      replaced by a autocreate=<boolean> parameter of the auth objects that

      support user profile auto creation.

    * moin import irclog: use irssi parser to format logs, mapped .irc

      extension to text/plain mimetype.

    * HINT: backup action: backup_exclude (default: "do not exclude anything")

      is now a function f(filename) that tells whether a file should be

      excluded from backup.

      You can get the old regex exclusion functionality by using:

      backup_exclude = re.compile(your_regex).search

      Be careful with your regex, you might need to use re.escape() to escape

      characters that have a special meaning in regexes (e.g.: \.[] etc.).

      If in doubt, maybe just leave backup_exclude at the default and don't

      exclude anything.

    * Speed up javascript comments processing on IE by getElementsByClassName()

    * Added sk (slovak) i18n, updated i18n.

1.7.3:

  New features:

    * Secure session cookies for https, see cfg.cookie_secure.

    * Add left/center/right/justify classes to builtin themes.

  Fixes:

    * Python 2.3 compatibility fixes.

    * Fixed https detection for servers using HTTPS=1 and also for wsgi servers

      not using HTTPS/SSL_ environment, but just wsgi.url_scheme.

    * GUI editor:

      * Fix crash when editing a page with non-ASCII pagename and inserting a link

      * Fix "headers already sent exception" with edit LOCKs.

    * i18n.__init__: Bug fix for wiki language not installed.

    * Fixed URLs given by sitemap action, if the wiki does not run at / URL.

    * Search results: link to 'view' rendering of found attachments

    * Logging:    

      * Removed superfluous linefeed in timing log output.

      * Use logging framework for messages emitted by warnings module (e.g.

        DeprecationWarning), silence some specific warnings.

    * Fix dbw_hide_buttons javascript.

    * Standalone server:

      * fix serverClass argument processing

      * fix --interface="" argument processing

    * mointwisted:

      * added missing pidFile parameter

      * better use Config.name for pidFile to avoid conflicts and keep same

        behaviour as in the past

    * Jabber bot can now be configured to use an authentication realm which

      is different from the server's hostname

Version 1.7.2:

  Fixes:

    * Fix leakage of edit-log file handles (leaked 1 file handle / request!).

    * Fix for MoinMoinBugs/SystemAdminMailAccountData (using POST and forms)

    * Wiki parser: avoid IndexError for empty #! line

    * MonthCalendar macro: fix parameter parsing / url generation

    * Xapian indexing filters (MoinMoin/filter/ or data/plugin/filter/):

      Some indexing filter scripts (e.g. for MS Word documents or PDF files)

      failed on windows because of the single-quote quoting we used (that

      works on Linux and other Posix systems). The fix introduces platform-

      dependant automatic quoting, using double-quotes on win32 and single-

      quotes on posix.

      HINT: if you use own filter plugins based on execfilter, you have to

      update them as the filename quoting (was '%s') is now done automatically

      and must not be part of the command string any more (now just use %s).

      See MoinMoin/filter/ for some up-to-date code (esp. the PDF filter).

    * Prevent CategoryTemplate being listed as a category (it is a Template,

      but matched also the category regex) - added to sample wikiconfig.

    * LDAP auth: fix processing of TLS options

    * UpdateGroup xmlrpc server side: fix wrong arg count error

    * UpdateGroup client: use multicall / auth_token, refactor code so that

      updateGroup function is reusable.

    * Improve Python 2.3 compatibility, add notes where 2.4 is required.

Version 1.7.1:

  New features:

    * New 'cache' action (see developer notes).

  Fixes:

    * Security fix: XSS fix for advanced search form

    * Avoid creation of new pagedirs with empty edit-log files by just

      accessing a non-existant page. If you used 1.7 before, you likely have

      quite some trash pagedirs now and you can clean them up by using:

      moin --config-dir=... --wiki-url=... maint cleanpage

      This will output some shell script (please review it before running!)

      that can be used to move trash pages into some trash/ directory and also

      moves deleted pages into some deleted/ directory. Maybe keep a copy of

      those directories for a while just for the case.

    * Server specific fixes:

      * standalone (wikiserver.py): fix --pidfile and --group option, fix

        operation without a wikiserverconfig.py (use builtin defaults).

      * mod_python: work around mod_python 3.3.1 problems with file uploads.

        Note: if you are still using mod_python, we strongly recommend you

	      try out mod_wsgi (in daemon mode) - it has less bugs, better

	      security, better separation, WSGI is a Python standard, and moin

	      developers also use WSGI. See HelpOnInstalling/ApacheWithModWSGI.

    * revert action: fixed for deleted pages.

    * Search:

      * Xapian indexing: Removed crappy "hostname" tokenization.

        Fixes MoinMoinBugs/1.7 XapianNotWorkingWithLeadingNumbersInTitle.

        Also tokenize CamelCase parts of non-wikiwords.

      * Make query parser reject more invalid input.

      * If query parsing raises a BracketError, at least tell what the problem

        is (and not just raise empty  ValueError).

      * Category search: ignore traling whitespace after ----

    * Argument parser:

      * Fixed sort() usage in UnitArgument to be Python 2.3 compatible.

      * Fixed MoinMoinBugs/TypeErrorInWikiutils.

    * Macros:

      * TableOfContents: skip outer-most <ol> levels when page isn't using

        the biggest headings

      * MonthCalendar: fix MoinMoinBugs/MonthCalendarBreaksOnApostrophe

    * xslt parser: fix MoinMoinBugs/DoNotConvertUnicodeToUTF8ForXsltParser

    * OpenID RP: make it compatible to python-openid 2.2.x

    * PackagePages.collectpackage: removed encoding from file name of zipfile

    * Surge protection: exclude localnet no matter whether user is known or not.

    * Notifications: fix MoinMoinBugs/DuplicateNewUserNotification

    * Script moin account create/disable/resetpw: checks for already existing

      user now.

  Other changes:

    * Prevent CategoryTemplate being listed as a category (it is a Template)

      by changing the default page_category_regex.

  Developer notes:

    * New MoinMoin.action.cache - can be used to cache expensively rendered

      output, e.g. generated images). Once put into the cache, moin can emit

      a http response for that content very fast and very efficient (including

      "304 not changed" handling.

    * New file-like API in MoinMoin.caching (good for dealing with medium

      to large files without consuming lots of memory).

    * wikiutil.importPlugin supports getting the whole plugin module object

      by giving function=None.

Version 1.7.0:

  Note: This is a reduced CHANGES, ommitting details from rc/beta test and

        also less interesting minor changes and fixes. It shows changes

        relative to 1.6.3 release.

        If you want to see full detail, read it there:

        http://hg.moinmo.in/moin/1.7/file/76265568e8d3/docs/CHANGES

  New Features: ==============================================================

    * HINT: we added generic UPDATE instructions as docs/UPDATE.html.

    * HINT: Standalone server usage changed:

      * Standalone server can now be started via the "moin" script command,

        optionally backgrounding itself.

        See: moin server standalone --help

      * In the toplevel dir, we have renamed moin.py to wikiserver.py (it was

        often confused with the moin scripting command).

        Now you have:

        * wikiserver.py - to start the standalone server

        * wikiserverconfig.py - to configure the standalone server

        * wikiserverlogging.conf - to configure logging for it (default config

          is ok for all day use, but can easily be modified for debugging)

        * wikiconfig.py - to configure the wiki engine

      * Removed old moin daemonizing script (replaced by moin server standalone

        --start/stop)

      * We now provide the "moin" script command also for people not using

        setup.py, see wiki/server/moin.

    * Logging

      * New powerful and flexible logging, please see wiki/config/logging/ -

        HINT: you have to upgrade your server adaptor script (e.g. moin.cgi)

        and load a logging configuration that fits your needs from there, or

        alternatively you can also set MOINLOGGINGCONF environment variable

        to point at your logging config file.

        If you use some of our sample logging configs, make sure you have a

        look INTO them to fix e.g. the path of the logfile it will use.

      * Moin now logs the path from where it loaded its configuration(s).

    * Authentication / Sessions:

      * HINT: New authentication plugin system, see HelpOnAuthentication. If

        you do not use the builtin default for 'auth' list, you likely have to

        change your configuration. See wiki/config/snippets/ for some samples.

      * HINT: New session handling system (no moin_session any more, now done

        internally and automatically), see HelpOnSessions for details.

      * Added OpenID client and server support.

        See: HelpOnAuthentication and HelpOnOpenIDProvider.

      * cfg.trusted_auth_methods is a list of auth methods that put an

        authenticated user into the "Trusted" ACL group.

    * User profiles / password recovery / notification:

      * New newacount action for creating new user accounts/profiles. If you

        don't want users creating new accounts on their own, you can add this

        action to actions_excluded list.

      * New recoverpass action for password recovery:

        If you forgot your password, recoverpass sends you an email with a

        password recovery token (NOT the encrypted password) that is valid

        for 12 hours.

      * New moin account resetpw script for resetting a user's password by

        the wiki admin.

      * New preferences plugin system, see MoinMoin/userprefs/__init__.py.

      * New notification system with an optional jabber notification bot, see

        HelpOnNotification. HINT: wiki users have to check their notification

        settings, esp. if they want to receive trivial update notifications.

    * The diff action now has navigation buttons for prev/next change and also

      a revert button to revert to the revision shown below the diff display.

    * ThemeBase: support Universal Edit Button, see there for details:

      http://universaleditbutton.org/

    * ?action=info&max_count=42 - show the last 42 history entries of the page.

      max_count has a default of default_count and a upper limit of

      limit_max_count - you can configure both in your wiki config:

      cfg.history_count = (100, 200) # (default_count, limit_max_count) default

    * The CSV parser can sniff the delimiter from the first CSV line so other

      delimeters than ";" can be used.

    * Admonition support. Added styling for tip, note, important, warning 

      and caution in the modern theme. For more info see HelpOnAdmonitions.

    * DocBook-formatter:

      * supports HTML entities like → and ☃

      * supports the FootNote macro

      * supports bulletless lists

      * support for admonitions

      * will export the wiki page's edit history as the generated article's

        revision history. Doesn't add history of included pages.

      * supports for the MoinMoin comment element, though only inline comments

        are likely to be valid since the DocBook remark is an inline element.

    * New Hits macro: shows the total hits for the page it is used on.

  Removed Features: ==========================================================

    * HINT: Removed attachments direct serving (cfg.attachments - this was

            deprecated since long!). Use AttachFile action to serve attachments.

    * Duplicated file attachment upload code was removed from Load action (just

      use AttachFile action to deal with attachments).

    * Removed 'test' action. If you like to run unit tests, use py.test.

    * Removed Login macro.

  Bug Fixes: =================================================================

    * Better handling of ImportErrors (farmconfig, macros, wikiserverconfig).

    * Fix failure of detection of on-disk cache updates.

    * Fix traceback in filesys.py on Mac OS X when "import Carbon" fails.

    * AttachFile action / file up- and download / zip support:

      * WSGI: use wsgi.file_wrapper (or a builtin simple wrapper). Fixes memory

        consumption for sending of large file attachments.

      * FastCGI: flush often. Fixes memory consumption for sending of large

        file attachments.

      * Use the open temporary file for receiving file attachment uploads

        (fixes big memory consumption for large file uploads).

      * Catch runtime errors raised by zipfile stdlib modules when trying to

        process a defective zip.

      * When unzipping member files, decode their filenames from utf-8 and

        replace invalid chars.

      * Make error msg less confusing when trying to overwrite a file attachment

        without having 'delete' rights.

    * HINT: page_*_regex processing had to be changed to fix category search.

      If you don't use the builtin (english) defaults, you will have to change

      your configuration:

        old (default): page_category_regex = u'^Category[A-Z]'

        new (default): page_category_regex = ur'(?P<all>Category(?P<key>\S+))'

      As you see, the old regex did work for detecting whether a pagename is

      a category, but it could not be used to search for a category tag in the

      page text. The new regex can be used for both and identifies the complete

      category tag (match in group 'all', e.g. "CategoryFoo") as well as the

      category key (match in group 'key', e.g. "Foo") by using named regex

      groups. \S+ means the category key can be anything non-blank.

      If you like to simultaneously support multiple languages, use something

      like this: ur'(?P<all>(Kategorie|Category)(?P<key>\S+))'

      HINT: after changing your configuration, please rebuild the cache:

        * stop moin

        * moin ... maint cleancache

        * start moin

      If you don't do this, your groups / dicts will stop working (and also

      your ACLs that use those groups). You better do a test whether it works.

    * Xapian search / indexing / stemming:

      * Use text/<format> as mimetype for pages.

      * Index also major and minor for mimetypes, so it will find 'text' or

        'plain' as well as 'text/plain'

      * Fix searching for negative terms.

      * Improve result list ordering.

      * Index filters: redirect stderr to logging system.

      * Remove crappy num regex from WikiAnalyzer, improve tokenization.

      * Fix AttributeError that happened when trying to access an attribute only

        used with xapian search (but regex search is not done by xapian)

      * Fix IndexErrors happening when pages are renamed/nuked after the index

        was built.

      * Fixed indexing of WikiWords (index "WikiWords", "Wiki" and "Words").

      * Fix crash if default language is un-stemmable.

      * xapian_stemming: removed some strange code (fixes search

        title:lowercaseword with xapian_stemming enabled)

      * Fixed category indexing (index CategoryFoo correctly as CategoryFoo, not

        Foo - for all languages, see page_*_regex change above).

    * Builtin search: support mimetype: search for pages for the builtin search

      engine (using text/<format>).

    * Parser fixes:

      * Wiki: fix subscript parsing (was broken for cases like 'a,,1,2,,').

      * Docbook: fixed detection of WikiWords.

      * All: Add ssh protocol to url_schemas for ssh:... URLs.

    * XMLRPC:

      * Fix xmlrpc request.read() call to use content-length, if available,

        fixes hangs with wsgiref server.

      * Wiki xmlrpc getPageInfoVersion() fixed:

        * works correctly now for old page versions (was unsupported)

        * works correctly now for current page version (reported wrong

          data when a page had attachment uploads after the last page

          edit)

        * returns a Fault if it did not find a edit-log entry

  Other Changes: =============================================================

    * Using better ACLs and comments on system/help pages now, just taking

      away 'write' permission, but using default ACLs for everything else.

    * HINT: If you want to use xapian based indexed search, you need to have

      Xapian >= 1.0.0 (and you can remove PyStemmer in case you have installed

      it just for moin - we now use the stemmer built into Xapian as it

      supports utf-8 since 1.0.0).

    * Changed default value of cfg.search_results_per_page to 25.

    * Surge Protection: If a user is authenticated by a trusted authentication

      (see also cfg.auth_methods_trusted) then he/she won't trigger surge

      protection, but moin will just log a INFO level log msg with the user's

      name so you can find the culprit in case he/she is overusing ressources.

    * HINT: Added MyPages and CopyPage to actions_excluded because MyPages

      doesn't work without special SecurityPolicy anyway and CopyPage has

      questionable behaviour.

    * Load action now just creates a new revision of the target page, the

      target pagename defaults to the current page name and can be edited.

      If the target pagename is empty, moin tries to derive the target pagename

      from the uploaded file's name.

      Load tries to decode the file contents first using utf-8 coding and, if

      that fails, it forces decoding using iso-8859-1 coding (and replacing

      invalid characters).

    * HINT: cfg.show_login is gone, see code in theme/__init__.py, this may

      affect many themes!

    * HINT: a new userprefs/ plugin directory will be created by the usual

      "moin migration data" command.

    * DocBook-formatter:

      * generates a valid DOCTYPE

      * table support has been improved

      * handling of definitions and glossaries is more robust

      * supports program language and line numbering in code areas

    * HINT: ldap_login behaves a bit different now:

      In previous moin versions, ldap_login tended to either successfully

      authenticate a user or to completely cancel the whole login process in

      any other case (including ldap server down or exceptions happening).

      This made subsequent auth list entries rather pointless.

      Now it behaves like this:

        * user not found in LDAP -> give subsequent auth list entries a

          chance to authenticate the user (same happens if it finds multiple

          LDAP entries when searching - it logs an additional warning then).

        * user found, but wrong password -> cancel login

        * ldap server not reachable or other exceptions -> give subsequent

          auth list entries a chance

      So please make sure that you really trust every auth list entry you have

      configured when upgrading or it might maybe change behaviour in a

      unexpected or unwanted way.

    * ldap_login now supports failover: if it can't contact your LDAP server

      (e.g. because it is down or unreachable), it will just continue and

      try to authenticate with other authenticators (if there are any in

      cfg.auth list). So if you have some mirroring LDAP backup server, just

      put another authenticator querying it there:

          ldap_auth1 = LDAPAuth(server_uri='ldap://mainserver', ...)

          ldap_auth2 = LDAPAuth(server_uri='ldap://backupserver', ...)

          auth = [ldap_auth1, ldap_auth2, ]

  Developer notes: ===========================================================

    * Page.last_edit() is DEPRECATED, please use Page.edit_info().

    * Page._last_edited() is GONE (was broken anyway), please use

      Page.editlog_entry().

    * New request.send_file() call, making it possible to use server-specific

      optimizations.

    * getText's (aka _()) 'formatted' keyword param (default: True in 1.6 and

      early 1.7) was renamed/changed: it is now called 'wiki' and defaults to

      False. Example calls:

      _('This will NOT get parsed/formatted by MoinMoin!')

      _('This will be parsed/formatted by MoinMoin!', wiki=True)

      _('This will be used as a left side of percent operator. %s',

        wiki=True, percent=True)

    * Page.url 'relative' keyword param (default: True in 1.6 and early 1.7)

      was changed to default False).

    * The themedict no longer contains 'page_user_prefs' and 'user_prefs',

      this may affect custom themes.

    * The rst-parser's admonition class names are no longer prepended with

      "admonition_". Instead the class names are now for example "note"

      and not "admonition_note".

Version 1.6.3:

  Fixes:

    * Security fix: a check in the user form processing was not working as

      expected, leading to a major ACL and superuser priviledge escalation

      problem. If you use ACL entries other than "Known:" or "All:" and/or

      a non-empty superuser list, you need to urgently install this upgrade.

    * Security fix: if acl_hierarchic=True was used (False is the default),

      ACL processing was wrong for some cases, see

      MoinMoinBugs/AclHierarchicPageAclSupercededByAclRightsAfter

    * For {{transclusion_targets}} we checked the protocol to be http(s),

      this check was removed (because file: and ftp: should work also) and

      it's not moin's problem if the user uses silly protocols that can't

      work for that purpose.

    * Fixed TableOfContents macro for included pages.

    * server_fastcgi: added Config.port = None. If you want to use some port

      (not a fd), you can set it now in your Config, e.g. port = 8888.

    * category: search matches categories even if there are comment lines

      between the horizontal rule and the real categories, e.g.:

      ... some page text ...

      ----

      ## optionally some comments, e.g. about possible categories:

      ## CategoryJustACommentNotFound

      CategoryTheRealAndOnly