Artifact 027dd596bce2ddf76f0da742568c60116a794af3:

• File www/changes.wiki — part of check-in [c71e096800] at 2012-12-01 04:37:35 on branch trunk — Additional restrictions on the names of files served by "fossil server DIRECTORY": (1) only alphanumerics, "_", "-", "/", and "." characters are allowed in the pathname. (2) A "-" may not occur after a "/". (3) Every "." must be surrounded on both sides alphanumerics. This check-in also updates the changelog for the 1.25 release. (user: drh size: 18278) [more...]

Change Log

Changes For Version 1.25 (2012-12-19)

• Enhancements to ticket processing. There are now two tables: TICKET and TICKETCHNG. There is one row in TICKETCHNG for each ticket artifact. Fields from ticket artifacts go into either or both of TICKET and TICKETCHNG, whichever contain matching column names. Default ticket edit and viewing scripts are updated to use TICKETCHNG. The TH1 scripting language is enhanced to support this, including the new "query" command for doing SQL queries against the repository database. All changes should be backwards compatible.
• Add the ability to moderate ticket and wiki changes. Unmoderated changes do not sync and may be deleted by the moderator if found to contain spam or other objectionable content.
• Add javascript so that clicking on a node of the timeline graph selects that node. Then clicking on a second node shows a diff between the two nodes. Clicking on the selected node unselects it.
• Warn of unresolved merge conflicts in "fossil status" and disallow commits of unresolved conflicts unless the --allow-conflict option is used.
• Add javascript so that clicking on column headers in a ticket report sorts by the indicated column.
• Add the "fossil cat" command which is basically an alias for "fossil finfo -p".
• Hyperlinks with the class "button" are rendered as submenu buttons on embedded documentation.
• The check-in comment editor on windows now defaults to NotePad.exe.
• Correctly deal with BOMs in check-in comments. Also attempt to convert check-in comments to UTF8 from other encodings.
• Allow the deletion of multiple stash entries using multiple arguments to the "fossil stash rm" command.
• Enhance the "fossil server DIRECTORY" command to serve static content files contained in DIRECTORY. For security, only files with a recognized suffix (such as *.html, *.jpg, *.txt, etc) will be delivered as static content, and *.fossil files are not on the list of recognized suffixes. There are additional restrictions on the names of the files.
• Allow the "fossil ui" command to specify a directory as long as the the --notfound option is used.
• Add a configuration option that causes timeline messages to be rendered as text/x-fossil-plain (which is the same as text/plain except that hyperlinks inside of [...] are decorated.)
• Only decorate [...] in check-in comments and tickets if the contented text really is a valid hyperlink target.
• Improvements to the side-by-side diff algorithm, for a more human-friendly display in some complex cases.
• Added [utime] and [stime] commands to TH1. These commands can be used for things such as displaying the page rendering time in the footer.
• Add the ability to pass command-line options of "fossil rebuild" to "fossil all rebuild".
• Add the --deanalyze option to "fossil rebuild" (and "fossil all rebuild")
• Do not run the graphical merging tool nor leave merge-droppings after a dry-run merge. Display an improved merge-summary message at the end of the merge.
• Add options to "fossil commit" to override the various sanity checks. Options added: --allow-empty, --allow-fork, --allow-older, and --allow-conflict.
• Optionally require a CAPTCHA (controlled by a setting on the Admin/Access webpage) when a user who is not logged in tries to edit wiki, or a ticket, or an attachment.
• Improvements to the "ssh://" sync protocol, to help it move past noisey motd comments.
• Add the uf=FILE-SHA1-HASH query parameter to the timeline, causing the timeline to show only check-ins that contain the specific file identified by FILE-SHA1-HASH. ("uf" stands for "uses file".)
• Enhance the file change annotator so that it follows the file across name changes.
• Fix the server-side of the sync protocol so that it will not generate a delta loop when a file changes from its original state, through two or more intermediate states, and back to the original state, all within a single sync.
• Show much less output during a sync operation, unless the --verbose option is used.
• Set the action= attribute of <form> elements using javascript, as an addition defense against spam-bots.
• Disallow invalid UTF8 characters (such as characters in the surrogate pair range) in filenames.
• Judge the UserAgent strings issued by the NetSurf webbrowser to be coming from a human, not from a bot.
• Add the zlib sources to the Fossil source tree (under compat/zlib) and use those sources when compiling on (windows) systems that do not have a zlib library installed by default.
• Prompt the user with the option to convert non-UTF8 files into UTF8 when committing.
• Allow the characters *[]? in filenames.

Changes For Version 1.24 (2012-10-22)

• Added support for WYSIWYG editing of wiki pages. WYSIWYG is turned off by default and can be turned on by setting a configuration option.
• Allow style= attribute to occur in HTML markup on wiki pages.
• Added the --tk option to the "fossi diff" and "fossil stash diff" commands, causing color-coded diff output to be displayed in a Tcl/Tk GUI window. This option only works if Tcl/Tk is installed on the host.
• On windows, make the "gdiff" command default to use WinDiff.exe.
• Update the "fossil stash" command so that it always prompts for a comment if the -m option is omitted.
• Enhance the timeline webpages so that a=, b=, c=, d=, p=, and dp= query parameters (and others) can all accept any valid checkin name (such as branch names or labels) instead of just SHA1 hashes.
• Added the "fossil stash show" command.
• Added the "fileage" webpage with links to this page from the check-in information page and from the file browser.
• Added --age and -t options to the "fossil ls" command.
• Added the --setmtime option to "fossil update". When used, the mtime of all mananged files is set to the time when the most recent version of the file was checked in.
• Changed the "vdiff" webpage to show the complete text of files that were added or removed (the equivelent of using the -N or --newfile options with the "fossil diff" command-line.)
• Added the --temp option to "fossil clean" and "fossil extra", causing those commands to only look at temporary files generated by Fossil, such as merge-conflict reports or aborted check-in messages.
• Enhance the raw page download so that it can guess the mimetype of attachments based on the filename.
• Change the behavior of the from= and to= query parameters on the timeline page so that by default the path between the two specified check-ins avoids merges.
• Add the --baseurl option to "fossil server" and "fossil http" commands, so that those commands can be used with reverse proxies.
• If unable to determine the command-line user, do not guess. Instead issue an error message. This helps prevent check-ins from accidentally occurring under the wrong username.
• Include branch information in the output of file change listings (the "finfo" webpage).
• Make the simplified view of file history, rather than the full view, the default.
• In the "fossil configuration" command, allow the "css" option for synchronizing, importing, or exporting just the CSS file. This makes it easier to share CSS files across repositories by exporting from one and importing to another.
• Add the (unsupported) "fossil test-orphans" command.
• Add the --template option to the "fossil init" command, to facilitate creating new repositories based on a template repository.
• Add the diff-binary setting, which if enabled causes binary files to be passed to the "gdiff" command for it to deal with, rather than simply printing a "cannot diff binary files" error.
• Add the --unified option to the "fossil diff" command to force a unified diff even if the --tk option (which normally implies a side-by-side diff) is used.
• Present a choice of nearby branches and versions to diff against on the check-in information page.
• Add the --force option to the "fossil merge" command that will force the merge to occur even if it would be a no-op. This is sometimes useful for documentation purposes.
• Add another built-in skin: "Enhanced Default". Other minor tweaks to the existing skins.
• Add the "urllist" webpage, showing a list of URLs by which a server instance of Fossil has been accessed. Requires "Administrator" privileges. A link is on the "Setup" main page.
• Enable dynamic loading of the Tcl runtime for installations that want to use Tcl as part of their configuration. This reduces the size of the Fossil binary and allows any version of Tcl 8.4 or later to be used.
• Merge the latest SQLite changes from upstream.
• Lots of minor bug fixes.

Changes For Version 1.23 (2012-08-08)

• The default checkout database name is now ".fslckout" instead of "_FOSSIL_" on unix. Both names continue to work.
• Added the "fossil all changes" command
• Added the --ckout option to the "fossil all list" command
• Added the "public-pages" glob pattern that can be configured to allow anonymous users to see embedded documentation on sites where source code should not be accessible to anonymous users.
• Allow multiple --tag options on the same "fossil commit" command.
• Change the meaning of the --bgcolor option for "fossil commit" to only change the color for that one commit. The new --branchcolor option is available to set a persistent background color.
• Add the branch= query parameter to the vdiff page and the --branch option to the "fossil diff" command.
• Check-in names of the form "root:BRANCH" now refer to the origin of the branch. Hence to see all changes in a branch, use "fossil diff --from root:BRANCH --to BRANCH". The --branch option on the diff command is an alias for the same.
• Add the ability to configure ad-units to be displayed between the menu bar and the content.
• Add the ability to set a background image as part of server configuration.
• Allow partial commits of cherrypick merges.
• Updates against an uncommitted merge are now a warning, not a fatal error.
• Prompt the user to continue if a check-in comment is unedited.
• Fixes to case sensitivity settings with the /dir webpage.
• Repositories now try to remember the locations of all checkouts and web-access URLs and display this information with the "fossil info $REPO" command.
• Improved defense against spiders: The src= attribute of <a> elements is set using javascript after the page loads.
• Enhanced formatting of the user list page.
• If a file named in "fossil add" is missing, that is now a warning instead of a fatal error.
• Fix side-by-side diff so that it displays correctly with multi-byte UTF8 characters.
• Performance improvements in the diff logic.
• Other performance tweaks and documentation updates.

Changes For Version 1.22 (2012-03-17)

• Greatly improved "diff" processing including the new --brief option, partial line matching, colorized in-line diffs, and better performance.
• Promote "allow-symlinks" to a versionable setting
• Harden the CGI processing logic against DOS attacks
• Add the ability to run TH1 scripts after sync requests
• Store the repository name in _FOSSIL_ as it is type in the "open" command, possibly as a relative pathname.
• Make ".fslckout" the alternative name for the "_FOSSIL_" file.
• Change the "ssh:" transfer method to allow all access regardless of user permission.
• Improvements to the timeline messages associated with tag changes. (Requires a "fossil rebuild" to take effect.)
• Various additions and fixes for the JSON API.
• Improved merge-with-rename handling.
• --cherrypick merges use their origin's commit message by default.
• Added support for multiple concurrent logins per user.
• Update to use SQLite version 3.7.11.
• Various minor bug fixes.

Changes For Version 1.21 (2011-12-13)

• Added side-by-side diffs in the command-line interface
• Automatically enable hyperlinks if the UserAgent string in the HTTP header suggests that the requestor is a human and not a bot.
• Show only commonly used commands with "fossil help". Use "fossil help --all" to see the complete list now.
• Improvements to the "stash" command: (1) Stash all files, not just those below the working directory. (2) Add the --detail option to "list". (3) Confirm before "drop --all". (4) Add the "help" subcommand.
• Add an Admin/Access setting to change the number of octets of the IP address that are saved in login cookies - allowing this setting to be changed to zero
• Promote the "test-md5sum" command to "md5sum".
• Added the "whatis" command.
• Stop showing the server-code in status outputs - it is no longer used for anything.
• Added a compile-time option (--with-tcl) to build in the full TCL interpreter to augment TH1.
• Merged the JSON branch into trunk. Disabled by default. Enabled by a compile-time option. Probably it will be enabled by default in some future release.
• Update to use SQLite version 3.7.9 plus the alignment fix for Sparc. align

Changes For Version 1.20 (2011-10-21)

• Added side-by-side diffs in HTML interface. [0bde74ea1e]
• Added support for symlinks. (Controlled by "allow-symlinks" setting, off by default). [e4f1c1fe95]
• Fixed CLI annotate to show the proper file version in case there are multiple equal versions in history. [e161670939]
• Timeline now shows tag changes (requires rebuild).[87540ed6e6]
• Fixed annotate to show "more relevant" versions of lines in some cases. [e161670939]
• New command: ticket history. [98a855c508]
• Disabled SSLv2 in HTTPS client.[ea1d369d23]
• Fixed constant prompting regarding previously-saved SSL certificates. [636804745b]
• Other SSL improvements.
• Added -R REPOFILE support to several more CLI commands. [e080560378]
• Generated tarballs now have constant timestamps, so they are always identical for any given checkin. [e080560378]
• A number of minor HTML-related tweaks and fixes.
• Added --args FILENAME global CLI argument to import arbitrary CLI arguments from a file (e.g. long file lists). [e080560378]
• Fixed significant memory leak in annotation of files with long histories.[9929bab702]
• Added warnings when a merge operation overwrites local copies (UNDO is available, but previously this condition normally went silently unnoticed). [39f979b08c]
• Improved performance when adding many files. [a369dc7721]
• Improve merges which contain many file renames. [0b93b0f958]
• Added protection against timing attacks. [d4a341b49d]
• Firefox now remembers filled fields when returning to forms. [3fac77d7b0]
• Added the --stats option to the rebuild command. [f25e5e53c4]
• RSS feed now passes validation. [ce354d0a9f]
• Show overridden user when entering commit comment. [ce354d0a9f]
• Made rebuilding from web interface silent. [ce354d0a9f]
• Now works on MSVC with repos >2GB. [6092935ff2]
• A number of code cleanups to resolve warnings from various compilers.
• Update the built-in SQLite to version 3.7.9 beta.

Changes For Version 1.19 (2011-09-02)

• Added a ./configure script based on autosetup.
• Added the "fossil winsrv" command for creating a Fossil service on windows systems.
• Added "versionable settings" where settings that affect the local tree can be stored in versioned files in the .fossil-settings directory.
• Background colors for branches are choosen automatically if no color is specified by the user.
• The status, changes and extras commands now show pathnames relative to the current working directory, unless overridden by command line options or the "relative-paths" setting.
  WARNING: This change will break scripts which rely on the current output when the current working directory is not the repository root.
• Added "empty-dirs" versionable setting.
• Added support for client-side SSL certificates with "ssl-identity" setting and --ssl-identity option.
• Added "ssl-ca-location" setting to specify trusted root SSL certificates.
• Added the --case-sensitive BOOLEAN command-line option to many commands. Default to true for unix and false for windows.
• Added the "Color-Test" submenu button on the branch list web page.
• Compatibility improvements to the git-export feature.
• Performance improvements on SHA1 checksums
• Update to the latest SQLite version 3.7.8 alpha.
• Fix the tarball generator to work with very log pathnames

Changes For Version 1.18 (2011-07-14)

• Added this Change Log
• Added sequential version numbering
• Added a optional configure script - the Makefile still works for most systems.
• Improvements to the "annotate" algorithm: only search primary ancestors and ignore branches.
• Update the "scrub" command to remove traces of login-groups and subrepositories.
• Added the --type option to the "fossil tag find" command.
• In contexts where only a check-in makes sense, resolve branch and tag names to checkins only, never events or other artifacts.
• Improved display of file renames on a diff. A rebuild is required to take full advantage of this change.
• Update the built-in SQLite to version 3.7.7.