0.29.0.3

Highlighted Features

• Backport fixes for HTML getting rendered in to flash messages (Gareth Rees)

Upgrade Notes

• app/views/track/_track_set.erb has been renamed to
  app/views/track/_track_set.html.erb, so if you've overriden it you will need
  to update the override.

0.30.0.1

Highlighted Features

• Moved rake temp:set_daily_summary_times from upgrade notes
  for release 0.29.0.0 to release 0.30.0.0 (Louise Crow)

0.30.0.0

0.30.0.0

Highlighted Features

• Fix bug that prevented private requests from being published across the whole
  site once the embargo period had expired (Liz Conlan)
• Update format of robots.txt for Baidu compatibility (Gareth Rees)
• Added some extra margin space to the #logged_in_bar when javascript is
  disabled to avoid the user's name from overlapping the 'Sign out' link -
  otherwise if there is enough space to do so, the secondary menu will try to
  float alongside the nav bar content (Liz Conlan)
• Make it clearer to users that they must complete an action when receiving the
  email to remind them to update the status of a request (Gareth Rees)
• Removed non-responsive assets (Gareth Rees)
• Upgrade to Rails 4.2 (Liz Conlan, Gareth Rees)
• Fixed problem where the routing filter doesn't recognise default locales with
  underscores properly (Liz Conlan)
• Added wrapper methods to AlaveteliLocalization to be used in preference to
  the underlying I18n and FastGettext methods, avoiding confusion about
  which should be used and reducing the likelihood of getting hyphenated and
  underscore locale formats mixed up (Liz Conlan)
• Prevent null bytes getting saved to IncomingMessage attachment cache
  columns (Gareth Rees)
• Add :inverse_of option to ActiveRecord associations to improve performance
  (Gareth Rees)
• Make Vagrant settings configurable through .vagrant.yml (Gareth Rees)
• Make sure geoip-database-contrib is installed when installing Alaveteli
  (Gareth Rees)
• Make sure memcached is installed when installing Alaveteli (Gareth Rees)
• Remove front-end caching from delivery status calculation (Gareth Rees)
• Remove unconventional PublicBody database constraints (Gareth Rees,
  Liz Conlan)
• Improve public body data validations (Gareth Rees)
• Increase truncation length of comments on admin page so that its easier to
  spot spam without expanding each comment (Gareth Rees)
• Handle unicode in spam request subject lines (Gareth Rees)
• Improve public body data validation test coverage (Gareth Rees)
• Move some more flash messages to be rendered from partials (Gareth Rees)
• Admin timeline can now show events filtered by type (Louise Crow)
• As promised the notifications_testers role as been removed. Access to
  the experimental notification features is now controlled by a feature flag.
• Request numbers in search and list views are now more clearly displayed as
  estimates (Liz Conlan)
• Functionality of 'was clarification' admin button restored (Louise Crow)
• A new method for receiving incoming mail has been introduced. Setting the experimental
  config variable PRODUCTION_MAILER_RETRIEVER_METHOD to pop and generating
  a daemon from the poll-for-incoming-debian.example template will
  cause Alaveteli to poll a mailbox for incoming mail via POP, in addition to
  passively accepting mail piped into the application via script/mailin (Louise Crow)
• Only publicly visible requests are now counted in the text for a user search
  result (Louise Crow)
• Similar request IDs are now cached, rather than template partials displaying
  similar requests, in order to make better usage of the cache space (Louise Crow)
• You can now filter users by their role on the admin user list page (Louise Crow)
• Remove the obsolete admin_level user attribute (Louise Crow)
• Allow embargoed requests to be displayed separately in the admin interface
  to admins with pro_admin permissions (Louise Crow)
• Add a cookie_passthrough param to ensure that image files in responses can be
  accessed by authorised users on embargoed requests (Louise Crow)
• Add oink memory debugging setup. Use ALAVETELI_USE_OINK=1 to produce
  object allocation debugging output (Louise Crow)

Upgrade Notes

• This release removes the admin_level user attribute. You will need to migrate
  to this release via 0.29.0.0 and follow the instructions in the release notes for
  that release to migrate admin and pro statuses to the role-based system first, in
  order to retain admin status for your admin users.
• Ensure memcached is installed (sudo apt-get install memcached) and running
  (sudo service memcached start).
• app/views/track/_track_set.erb has been renamed to
  app/views/track/_track_set.html.erb, so if you've overriden it you will need
  to update the override.
• app/views/general/_opengraph_tags.erb has been renamed to
  app/views/general/_opengraph_tags.html.erb, so if you've overriden it you
  will need to update the override.
• Run bundle exec rake temp:populate_last_event_time after deployment to populate
  the cached last_event_time attribute on info_requests, used in the admin interface.
• Run bundle exec rake temp:remove_notifications_tester_role to remove the
  notification tester role from the database.
• Use of the PRODUCTION_MAILER_RETRIEVER_METHOD config setting is currently
  not recommended.
• Upgrading to Rails 4.2 requires that themes have a new section in their
  alavetelitheme.rb file as in:
  mysociety/whatdotheyknow-theme@f99f7fd
  For more details, see the preparatory changes
  and the upgrade itself
• To start the Rails server from a Vagrant box, you will now need to tell it
  what address to bind to as it now defaults to localhost.
  e.g. bundle exec rails s -b 0.0.0.0 to bind to all addresses (as before)
  or bundle exec rails s -b 10.10.10.30 to just use the Vagrantfile address.
• File-type icons have been moved from images to images/content_type. Please
  ensure any direct use of these uses the new path.
• This release deprecates the use of purge requests to Varnish. Please make sure
  your site works with VARNISH_HOST empty - it will be removed as a param in
  the next release.
• Run bundle exec rake temp:set_daily_summary_times to set some default
  times for users to receive daily summaries of notifications. This won't have
  any effect on emails for most users until the new notifications system is
  rolled out.
• There are some database structure updates so remember to rake db:migrate

0.28.0.13

Highlighted Features

• Backported fix for the AlaveteliFeatures gem mistakenly treating the flipper
  database tables as unavailable and failing over to using in memory storage
  (Liz Conlan)

0.29.0.2

Highlighted Features

• Updated translations from Transifex (Louise Crow)

0.29.0.1

Highlighted Features

• Fixed problem where the routing filter doesn't recognise default locales with
  underscores properly (Liz Conlan)
• Added wrapper methods to AlaveteliLocalization to be used in preference to the
  underlying I18n and FastGettext methods, avoiding confusion about which should
  be used and reducing the likelihood of getting hyphenated and underscore
  locale formats mixed up (Liz Conlan)

0.28.0.12

• Backported fix from Rails 4.1 for calls to .days raising an error in Rails 4.0 sites where 'en' is not included in available locales (Liz Conlan)

0.28.0.11

Highlighted Features

• Backport fix for loading sample data in Rails 4 (Gareth Rees)

0.29.0.0

Highlighted Features

• Upgrade to Rails 4.1 (Liz Conlan, Gareth Rees)
• Add sample public body headings and categories (Gareth Rees)
• Allow translation of delivery statuses (Gareth Rees)
• Fix stripping Syslog prefix from mail logs (Gareth Rees)
• Fix parsing of Syslog-format mail logs (Gareth Rees)
• Log spam domain signups instead of sending exception notifications
  (Gareth Rees)
• Finer control of anti-spam features (Gareth Rees)
• Fixed bug which redirected people trying to request a change to the email of
  a public body back to the missing body form post sign in (Liz Conlan)
• Tweak wording of bounce reply to make it easier for admins to locate the
  related request (Gareth Rees)
• Fix the layout of the request preview page so that the request body text is
  in line with the heading (Keerti Gautam)
• Add an unknown delivery status for better user experience when we haven't yet
  parsed MTA logs for a recent message (Gareth Rees)
• Switch MTA-specific delivery status to MTA-agnostic delivery status
  (Gareth Rees)
• Prevent deletion of initial outgoing messages through the admin interface
  (Gareth Rees)
• Make it easier to find the "Resend" message button in the admin interface
  (Gareth Rees)
• Install supported version of bundler through Rubygems on Debian Wheezy (Gareth
  Rees)
• Update Czechia country name in WorldFOIWebsites (Gareth Rees)
• Prevent null bytes getting saved to IncomingMessage cache columns (Gareth
  Rees)
• Add missing erb tags (Sam Smith)
• Introduction of role-based permissions system (Louise Crow)
• Link to the #internal_review section of the help/unhappy page instead of
  the UK-specific external link to FOIWiki (Liz Conlan)
• Allow comments to be reported for admin attention (Liz Conlan, Gareth Rees)
• Fix a bug in typeahead search where a search ending in a one or two letter
  word would automatically return zero results (Louise Crow)
• Update the spam scorer to hold lists of suspicious domains (email domains with
  a higher than average chance of being spam) and spam domains (email domains
  we're fairly confident are spam), and prevent spam domains from creating new
  accounts (Liz Conlan)
• Prevent the /request/search_ahead page from raising an error if there are
  no query parameters (Liz Conlan)
• Change "Send message" and "Send request" buttons to read "Send and publish" to
  make it clearer that your message is going to be shared via the website (Liz
  Conlan)
• Prevent new request titles from containing line breaks (Liz Conlan)
• Make the users:stats_by_domain task report percentages to 2 decimal places
  to avoid the situation where 374 out of 375 appears as 100% (Liz Conlan)
• Make users:ban_by_domain send a simpler message to say they've been banned
  rather than helping them work around our spam measures (Liz Conlan)
• A new role notifications_testers has been added, this is a temporary role
  to help us test new email configuration options for Alaveteli Professional,
  please don't give this role to any of your users - it may change and/or
  disappear without warning!
• Prevent Vagrant assigning more CPU cores than VirtualBox recognises (Liz
  Conlan)
• Improvements to the load-sample-data script to make it possible to run
  without the superuser db permissions and for Rails 4.1 compatibility
  (Liz Conlan)
• Prevent autoresponder emails from authorities resetting the withdrawn status
  on requests (Liz Conlan)
• Fix bug that prevented the categorisation game page from displaying when there
  are no requests (Liz Conlan)
• Switch to Trusty as the preferred OS for Travis CI and use Debian Wheezy as
  the new Vagrant default (Liz Conlan)
• Fix a bug that could cause misdelivered message links in the admin interface
  to appear without any text in the link if the message body contained unicode
  spaces (Liz Conlan)
• Use partial templates to render flash messages containing HTML rather than
  assigning the content directly to flash (Liz Conlan, Steven Day)
• Ensure info_requests are expired when censor rules are added, changed or
  removed (Liz Conlan)
• Fix the select authorities form when Javascript is disabled (Louise Crow)

Upgrade Notes

• Spring is now used as the application preloader in development mode. No action
  required, but worth being familiar with if you're running Alaveteli in
  development: http://guides.rubyonrails.org/v4.1.16/upgrading_ruby_on_rails.html#spring
• The COOKIE_STORE_SESSION_SECRET config item has been removed and replaced
  with SECRET_KEY_BASE. You should migrate the original value to the new
  config key.
• Anti-spam feaures can now be enabled independently
  (BLOCK_RATE_LIMITED_IPS, BLOCK_RESTRICTED_COUNTRY_IPS,
  BLOCK_SPAM_ABOUT_ME_TEXT, BLOCK_SPAM_COMMENTS, BLOCK_SPAM_EMAIL_DOMAINS,
  BLOCK_SPAM_REQUESTS) or all at once (ENABLE_ANTI_SPAM). Check that your
  configuration is enabling the anti-spam measures that you're expecting.
• MailServerLog::EximDeliveryStatus and MailServerLog::PostfixDeliveryStatus
  have been deprecated in favour of an MTA-agnostic
  MailServerLog::DeliveryStatus. You should run
  bundle exec rake temp:cache_delivery_status to convert any cached delivery
  statuses to the new format.
• To migrate admin and pro statuses to the role-based system, you must run
  bundle exec rake db:seed and then
  bundle exec rake temp:migrate_admins_and_pros_to_roles after deployment.
• There are some database structure updates so remember to rake db:migrate
• Run bundle exec rake temp:remove_line_breaks_from_request_titles after
  deployment to remove stray line breaks (could effect Atom feeds)
• Run bundle exec rake temp:generate_request_summaries after deployment to
  create the new facade models that the Alaveteli Pro dashboard uses to
  display all forms of requests in a unified list.
• Run bundle exec rake temp:set_use_notifications after deployment to
  opt all existing requests out of the new notifications feature. This is VERY
  IMPORTANT to run, as without it, existing requests won't trigger any alert
  emails at all.
• The way that flash messages are rendered has changed so if you have overridden
  a template which renders flash (e.g. <%= flash[:notice] %>), you will need
  to use the new <%= render_flash(flash[:notice]) %> style instead.
• This release deprecates non-responsive stylesheets. Please make sure your site
  works with RESPONSIVE_STYLING set to true.
• This is likely to be the last release that supports Ruby 1.9.x. We have some
  notes on migrating away from 1.8.7; migrating to
  Ruby 2+ should be a similar process. Debian Jessie and Ubuntu 14.04+ include
  packaged versions of Ruby 2+.

0.28.0.10

Highlighted Features

• Updated translations from Transifex (Gareth Rees)