Open data portal
Project description
udata
Customizable and skinnable social platform dedicated to (open) data.
The full documentation is hosted on Read the Docs.
udata is maintained by data.gouv.fr, the French public agency in charge of open data. data.gouv.fr is responsible for publishing udata's roadmap and for building consensus around it.
It is collectively taken care of by members of the OpenDataTeam.
Changelog
10.0.0 (2024-11-07)
- breaking change Migrate organization badges label to lowercase #3182
- Add contact_form in ContactPoint api fields #3175
- Expose contact point in DCAT RDF #3179
- Use trailing slashes for the upload files URLs #3177
- Use hydra's RESTful endpoint URLs #3146
- Return dataservices visible to the user #3180
- Fix flaky "duplicated email" importing fixtures tests #3176
- Fix deprecated CircleCI config #3181
- Use proper RESTful Hydra API endpoints #3178
- Add a "filter by organization badge" for datasets, dataservices, reuses and organizations #3155
- you will need https://github.com/opendatateam/udata-search-service/pull/49 for the search service
- Add dataservices search with search-service #3171
- Expose the "landingPage" in DCAT RDF #3183
- Licence.guess: extract first URL for better matching #3185
9.2.4 (2024-10-22)
- Add a job to bind Tabular API to its datasets #3162
- Expose dataservices' datasets by link instead of list #3156
- CSW ISO Harvest: add extra_configs.remote_url_prefix #3157
- DCAT harvest : Refactor DCAT extras handling in rdf parsing #3054.
accesRights
,rights
andlicense
are now inextras["dcat"]
for both datasets and resources.accessRights
can be infered for a dataset from its resources.
9.2.3 (2024-10-14)
- Add migration to delete duplicate resources due to ODS harvesting #3158
- Add discussion.posted_on in discussion sort choices 3168
9.2.2 (2024-10-08)
- Add a filter on organization and document sort parameters in the
/discussions
endpoint #3147 - Move discussion catalog creation and add fields #3152 and #3154
- Add resources formats and harvest remote_url on dataset catalog #3159
- Add contact form in contact point model #3164
- Make base_api_url optional in dataservice https://github.com/opendatateam/udata/pull/3163
9.2.1 (2024-09-23)
- Enable basic search on dataservices #3148
9.2.0 (2024-09-13)
- Allow OAuth clients without secrets #3138
- Add a
archived
button for datasets and reuses on frontend admin #3104 - breaking change Return all the reuses available to a user on the /reuses endpoint, including the private and deleted ones they own #3140.
- Fix undelete reuse and dataservices #3141
- Add a minimal publiccode.yml #3144
- Fix the boolean filters in the API for the "new system" endpoints #3139
- Update authlib dependency from 0.14.3 to 1.3.1 #3135
- Add CORS on resource redirect #3145
9.1.4 (2024-08-26)
- Fix many linting issues reported by ruff #3118
- Import the dataservice's organization from the fixtures #3121
- Convert reuse to new API system #3066
- Fix circular import error #3128
- Add an option to specify the port when using
inv serve
#3123 - Add a new
related_to
filter parameter to the activities API endpoint #3127 - Properly import the
Discussion.closed_by
from the fixtures #3125 - Send an API token to Hydra when publishing resource events #3130
- Add
last_login_at
to org members API #3133 - Always add Vary even for non CORS requests #3132
- Add acronym in organization csv catalog #3134
- Limit the number of user suggestions #3131
9.1.3 (2024-08-01)
- Adds latest
sentry-sdk[flask]
as an install dependency, and update Sentry logic to be able to send environment, app version and profiling/performance info #3086 - Add report get endpoint and make report get and list admin only #3115
- Fix the version of udata-fixtures used by
udata import-fixtures
#3114 - Update to the version v2.0.0 of udata-fixtures (with the dataservices)
- Add type hints #3111
- Make sure requests v2.32.3 is used everywhere consistently #3116
- Expose a dataservice in its organization's catalog, and expose a dataservice's catalog #3122
9.1.2 (2024-07-29)
- Add a
archived
field for reuses #3088 - Add linter and formatter with
pyproject.toml
config, add lint and formatting step in CI, add pre-commit hook to lint and format, update docs and lint and format the code #3085 - Revamp CORS: remove flask-cors to always returns 204 on OPTIONS request #3074
- Update pinned dependencies according to project dependencies, without updating any project dependencies #3089
- Add "run" button to harvesters (configurable with
HARVEST_ENABLE_MANUAL_RUN
) #3092 - Move from
object_type
/object_id
tosubject_type
/subject_id
in reports API #3094 - Allow to report without being authenticated #3096
- Add a warning on harvest source deletion #3098
- Fix license in dataservices API (now returns ID instead of title) #3097
- Fix missing title on new dataset preview #3100
- Fix the fixtures tests which was not running, and then was failing #3105
- Refactoring of the fixtures, the
generate-fixtures
command has been renamed toimport-fixtures
#3106
9.1.1 (2024-07-16)
- Add correct owner permissions on harvest sources #3091
9.1.0 (2024-07-11)
- Add reports backend #3069 and #3078
- Improve
udata db check-integrity
(perfs, Sentry notifications…) #3026 - Harvest dataservices #3029
- Refactor catalog exports #3052
- Add a filter to filter dataservices by dataset #3056
- Fix reuses' datasets references #3057
- Save and show harvest logs #3053
- Fix missing
ObjectId
validation on/sources
endpoint #3060 - Improve URL validation errors #3063 #2768
- Do not return full dataset objects on dataservices endpoints #3068
- Update markdown base settings #3067
- Prevent tagging as spam owners' messages #3071#3076
- Add api endpoint /me/org_topics/ #3070
- Expose dataservices in RDF catalog #3058 #3075
- CORS: always returns 204 on OPTIONS request #3046
9.0.0 (2024-06-07)
- breaking change Harvest backend is now sync #3030
- Add DCAT-AP HVD properties in RDF output if the dataset is tagged hvd #3050
- Allow dataservices to be discussed and followed #3049
- Add purge-dataservices job #3049
- Harvest all the available polygons from a spatial coverage #3039
8.0.1 (2024-05-28)
- Add dataservices in beta #2986
- Remove deprecated
metrics_for
route #3022 - Fix spatial coverage fetching perfs. Need to schedule
compute-geozones-metrics
#3018 - Delete a user without sending mail #3031
- Convert known HVD categories used as theme to keywords #3014
- Allow for series in CSW ISO 19139 DCAT backend #3028
- Add
email
to membership request list API response, addsince
to org members API responses, addemail
to members of org on show org endpoint for org's admins and editors #3038 - Add
resources_downloads
to datasets metrics #3042 - Fix do not override resources extras on admin during update #3043
- Endpoint /users is now protected by admin permissions #3047
- Fix trailing
/
insideGeoZone
routes not redirecting. Disallow/
insideGeoZone
ids #3045
8.0.0 (2024-04-23)
- breaking change Migrate to Python 3.11 #2992 #3021
- breaking change Fix datetime serialization in extras (return ISO string in JSON). Warning,
ujson
shouldn't be installed anymore on the project to allowcls
parameter to override the JSONEncoder #3019 - Fix missing
bcrypt
dependency #3019
7.0.7 (2024-04-16)
- :warning: breaking change
DATASET_MAX_RESOURCES_UNCOLLAPSED
config is removed. - Replace schemas API with a simple proxy to the
schemas.json
file #2989 - Topic: add filters in API #3007
- Move constants outside
models.py
files toconstants.py
#3001 - Move
db
and Mongo fields classes outsideudata.models
#3005 - :warning: Update LICENSE_GROUPS config layout #3010
- Remove unused dependencies #3006
- Move
FieldValidationError
into its own module and add an error handler #3012 - Move some
import User
to runtime imports #3013 - Move
Owned
mixin to its own module #3008 - Move
badge_fields
to separate module thanmodels.py
#3011
7.0.6 (2024-03-29)
- Add new harvester for ISO DCAT with XSLT transform #2982
- Fix, do not fail on spatial coverage harvesting exception and allow literal spatial BBOX from Arcgis 2998
- Mock calls to example.com #3000
- Fix duplicate logs in console commands #2996
- Refactor
Activity.kwargs
intoActivity.extras
to facilitate its usage #2999 - :warning: Datasets without resources are now visible and indexable #2997
7.0.5 (2024-03-20)
- Add spatial coverage harvesting #2959 #2991
- Fix: updating a dataset without
private
do not resetprivate
toFalse
, the previous saved value is kept #2955 - Fix: return the correct error when no
Content-Type
is sent instead of 500 #2967 - Improve documentation for API errors #2952
- Allow harvesting of big catalog (bigger than 16MB) #2980 2985
- Add downloads' count to organizations CSV #2973
- Add 3 new badges to the organization model :
company
,association
andlocal authority
#2984 - Prevent geozones listed ad
deleted
to be loaded #2983 #2993 - Topic: add spatial field #2988
- Topic: add last_modified field #2987
- Add stacktraces to CSV errors #2990
- Fix harvesting of DCT.conformsTo for complex inner information #2994
7.0.4 (2024-02-27)
- Add rotate password command #2966
- Custom extras metadata #2921:
- Organization can nom define a custom metadata of a choosen type
- Dataset belonging to the organization can assign a value to the defined metadata
- Metadata value must match the choosen type by the organization
- Harvest DCAT conformsTo into schemas for resources and datasets #2949 #2970 #2972 #2976
- Better reporting in spam detection (show the writer of the discussion/message) #2965
- Fix: spam lang detection not lowering input resulting in false positives #2965
- Fix: do not send mail about discussions when there is no owner / no organisation members #2962
- Fix: 'backend' is now required in
HarvestSource
#2962 - Fix: URL to organizations in mails are now independent from
udata-front
(show the URL of the API if noudata-front
) #2962 - Add harvested dcat properties as extras #2968:
- DCT.provenance [0..n]
- DCT.accessRights [0..1]
- Generate translations file #2974
- Fix contact point test with missing translation #2977
- Remove documentation about maintenance branches #2979
7.0.3 (2024-02-15)
- Add spam detection and prevention logic on discussion model #2954 #2963
- Fix reuses inside database without private information (default to public) #2951
- Fix: you can now remove schema from a resource in the admin #2950
- Fix: refuse an organisation access request when multiple access requests are pending #2960
- Add downloads count in datasets' CSV #2953
- Allow dicts in datasets' extras #2958
7.0.2 (2024-01-23)
- Improve search serialization perfs for datasets in big topics #2937
- Migrate to Flask-Babel because of Flask-BabelEx deprecation #2897
- Contact points feature #2914 #2943:
- Users and Organizations can now define a list of contact points
- Api endpoint for creating, updating and deleting contact points
- Datasets can define one contact point, among the list of the organization or the user owning the dataset.
- Defining a contact point for a dataset is done throught a form field
- Allow wildcards in redirect_uris for Oauth2Client #2935
- Allow for being one day late on update fulfilled in time #2941
- When a topic is deleted, corresponding discussions are purged #2944
7.0.1 (2023-12-06)
- Add sorting in geozone suggest API endpoint to return zones based on their admin level #2936
7.0.0 (2023-12-04)
- Prevent sending post_save signals on extras update #2919
- Add topic filter on datasets list #2915
- Topics: API v2 endpoints #2913
- Allow for discussions on Topics #2922
- Raise for status on DCAT harvester calls #2927
- Harvest dcterms:hasPart as 'other' resource in DCAT #2928
- Make sure harvested resources are marked as remote #2931
- Use GET and POST harvest BaseBackend utility to have user-agent #2930
- Use LazyReferenceField on Topic datasets and reuses #2924
- Use harvested dates and not max with internal #2932
- Better rdf frequency resilience #2933
- :warning: breaking change Geozone refactor #2878:
- Complete Geozone model refactor, keeping only fields
slug
,name
,code
,level
and addinguri
- Removed parent and validity concept
- To deploy:
- Datasets with geozone will return a 500 due to
mongoengine.errors.FieldDoesNotExist: The fields "{'flag', 'dbpedia', ...}" do not exist on the document "GeoZone"
udata spatial load -d
to load new geozones into the databaseudata spatial migrate
to migrate datasets geozones to new ones- Reindex datasets (
udata search index dataset
) if using udata-search-service
- Datasets with geozone will return a 500 due to
- Removed forgotten fields in search #2934
- Complete Geozone model refactor, keeping only fields
6.2.0 (2023-10-26)
New & Improved
-
Topics have been refactored and are no more deprecated:
- Topics creation, update and deletion are now opened to all users #2898
- Topics are now
db.Owned
and searchable byid
in dataset search #2901 #2917 - Remove
deleted
api field that does not exist #2903 - Add
created_at
field to topic's model #2904 - Topics can now be filtered by
tag
field #2904 - Topics can now be queried by test search in
name
field withq
argument #2904
-
Add support for a CSW harvester using DCAT format #2800
-
Add harvesters count to site metrics #2890
-
Use a single session for reindex #2891
-
Fix site title and keywords never get updated #2900
-
Reuse's extras are now exposed by API #2905
-
Add configuration settings to enhance cookies security #2910
-
Add items.dataset to HarvestJob indexes #2907
-
Consider acronym when suggesting organization #2918
Fixes
- Return 400 instead of 500 in case of not ObjectID arg in API #2889
- Fix default community resource sort parser #2908
Deprecation
- Python 3.7 is now deprecated and will be removed in upcoming release #2859
- GeoZone model will be heavily refactored for a simplified version #2878
6.1.7 (2023-09-01)
- Fix slug overflow with index suffix when reaching max_length #2874
- Add extra field to topic model and add it to the dataset search adapter #2876
- Upgrade pyyaml in develop and doc deps #2880
- Expose dataset's
*_internal
dates in a nestedinternal
nested field in api marshalling #2862 - Add
business_number_id
metadata for organizations #2871 #2887 - Return 403 when posting comment on discussion closed #2881
- Ensure rdf parsed frequency is lowercase #2883
- Add a dict of URIs to replace in a RDF graph at harvest time #2884
- Fix duplicate recipients in new comments mail #2886
- Add type to resource csv adapter #2888
6.1.6 (2023-07-19)
- Improve DCAT harvest of mime type #2857
- Don't crash on files not found when purging resources 2858
- Improve DCAT catalog exposed #2860
- Use the resource's extra
analysis:last-modified-at
in thelast_modified
property #2863 - Add optionnal harvest validation form #2864
- Fix dataset list default sorting #2867
- Update API doc link #2866
- Update admin quality progress bar #2872
6.1.5 (2023-06-19)
- Specify public datasets and reuses in admin count #2852
- Fix url params being stripped in markdown for internal URLs #2855
6.1.4 (2023-05-16)
- Upgrade development dependencies #2844
- Compile translations for testing #2845
- Add user arg to discussion list API #2842
- No more sending email, slug and user name to sentry #2846
- Add test for passwordless user #2848
- Parse IANA and EUROPA URIs format #2849
- Dataset last update sorting:
- Upgrade mongoengine and storage deps #2839:
- Upgrade flask-storage 1.0.0 -> 1.3.2
- Upgrade flask-mongoengine 0.9.5 -> 1.0.0, now returning a ValidationError on get_or_404 on invalid id
- Upgrade mongoengine 0.26.0 -> 0.27.0
- Prevent raising unecessary error in index command #2851
- Use
datetime.utcnow
to make sure to handle utc datetimes #2853
6.1.3 (2023-04-18)
- Fix XSS vulnerability: escape user content in selectize items in admin #2843
- Fix schema is undefined when checking for schema.url in admin resource form #2837
- Fix to_naive_datetime in harvest preview #2835
- :warning: Flask-Security update to enable
GenericResponses
#2826:- Upgrade Flask-Security 4.5.1 -> 5.1.1
- Upgrade WTForms 2.2.1 -> 3.0.1
- Upgrade WTForms-json 0.3.3 -> 0.3.5
- New security email template for existing users
- Fix SelectField validation failure following WTForms upgrade #2841
- Add
format_timedelta
toudata.i18n
#2836 - Improve send_mail resilience with refused address among recipients #2840
6.1.2 (2023-03-28)
- Resources schema can now have an URL field. #2825
- Fix URLField validation error message #2831
- Dates renaming to provide more relevant computed dates between internal and harvested dates #2815:
- Removed
published
attribute from Resource model - Renamed
created_at
andlast_modified
of Dataset model tocreated_at_internal
andlast_modified_internal
- Renamed
created_at
andmodified
of Resource model tocreated_at_internal
andlast_modified_internal
- Added
created_at
computed property in Dataset and Resource model to provide harvested date if present and internal otherwise - Added
last_modified
computed property in Dataset and Resource model to provide max date between internal and harvested date
- Removed
- Fix for PR #2815 #2832
- Fix following dates refactoring #2815 #2832
- Fix dcat harvesting on dcat:Dataset with blank nodes #2834
- Add dataset archived field in resource catalog #2833
6.1.1 (2023-03-17)
- Fix edge case on aware datetime string #2827
- :warning: MongoDB support up to 6.0.4 #2819:
- Older versions of MongoDB >=3.6 are still supported
- Upgrade must be done release by release to set the
FeatureCompatibilityVersion
variable like stated in this documentation. - Upgrade pymongo 3.10.1 -> 4.3.3
- Upgrade mongoengine 0.20.0 -> 0.26.0
- Add IATA
ssim
among allowed file extensions #2828 - Copy user mail card back from udata-front #2822
- Upgrade node to a version still available #2830
6.1.0 (2023-03-07)
- :warning: Upgrading Flask to 2.1.2, leading to an upgrade of click (8.0), Flask-BabelEx (0.9.4), Flask-Caching (2.0.2), flask-storage (1.0.0) instead of flask-fs, Flask-Login (0.6.2), flask-restx (1.0.5), Flask-Security-Too (4.1.5), Jinja2 (3.1.2), pillow (9.2.0), werkzeug (2.2.2) #2816
- Use the full path to the caching backend in
CACHE_TYPE
, ex:flask_caching.backends.redis
. Named backends are deprecated. - Werkzeug redirect now returns the relative url as location in response (https://github.com/pallets/werkzeug/issues/2352).
- Removed functions have been replaced (
contextfilter
andcontextfunction
from Jinja, root imports andHref
from Werkzeug,JSONWebSignatureSerializer
from itsdangerous) - Prevent multiple blueprint with same name registration (not supported anymore in Flask).
- Use the full path to the caching backend in
- Removed all code logic related to the
published
date in resource model, now deprecated. :warning: The attribute itself was left in the model because of the complexity of the migration #2807 - Add
xlsx
anddocx
as closed format for quality score #2814 - Flush latest rows in csv catalog export before storing file #2818
- Exposed dates through API are now timezone aware #2810
- Fix frequency reminder #2821
6.0.2 (2023-02-06)
- Handle None values in dataset and resource extras endpoints #2805
- Fix default license being selected in form in optional select group #2809
- Fix only SHA1 checksum is accepted when uploading resources #2808
- Fix organization metrics count #2811
- Fix setuptools version used in CI #2813
- Add
udata harvest clean
command #2812
6.0.1 (2023-01-18)
- Add python version requirement <3.10 #2798
- Fix date timezone and format for harvest previz #2799
- Add support for DCAT startDate and endDate in temporal coverage #2801
- New feature: Users can now change their email by themselves #2792
6.0.0 (2023-01-09)
- :warning: Kafka removal #2783#2794:
- Resources events publication now uses webhooks
- Search indexation (at runtime and with index command) are now made through HTTP requests.
- If you use udata-search-service, you need to upgrade to the >=2.0.0 version
- Add dedicated extras endpoints on resources and datasets #2779
- Enrich catalog with harvest infos #2789
- Add optionnal license select group custom setting for admin #2786
- Make index setup optional on init based on config #2797
5.0.2 (2022-11-29)
- :warning: Upgrade to
Flask-Security-Too
version 4.0.0 #2772:- New User model attribute
fs_uniquifier
, migration needed. - The
fs_uniquifier
is used to invalidate existing session in case of password reset. - The user's
fs_uniquifier
is used instead of theid
for auth mecanism including permissions. - Exhaustive list of changes here.
- New User model attribute
- Fix apiv2 swagger with harvest metadata and add apiv2 swagger tests #2782
- Improve frequency criterion in quality score #2771
- Add quality score to csv catalogs #2785
- Optimize DCAT harvesting on large multiple-paged catalogs, introduce
HARVEST_MAX_ITEMS
development setting #2781 - Add condition in security mail utils class to avoid mail sending according to config var #2788
5.0.1 (2022-11-14)
- Fix resource harvest uri validation error #2780
5.0.0 (2022-11-14)
- :warning: Breaking change Use dedicated dynamic harvest metadata for dataset and resources. A migration copies identifying fields from extras to this dedicated metadata field. Extras won't be used anymore for harvest-related information. udata-ckan, udata-ods and udata-front packages are impacted and should be upgraded accordingly #2762
4.1.3 (2022-11-02)
- Fix image URLs for suggest endpoints #2761
- Switch from
Flask-restplus
to its forkFlask-rest-x
2770 - Clean inactive harvest datasets. :warning: a migration archives datasets linked to inactive harvest sources #2764 #2773 #2777
- Fix randomly failing suggest tests #2775
- Fix alt attribute not shown on image #2776
4.1.2 (2022-09-01)
- Clean up event code #2751
- Replace mongo legacy image in CI #2754
- Fixes test
test_suggest_datasets_api
by modifying condition #2759 - Fix doc name duplicate on rdf endpoints #2763
4.1.1 (2022-07-08)
- Quality score computation refactoring and now returning it in list datasets endpoint. Update was made in admin too. #2746
- :warning: Manifest logic was removed and udata does now work as standalone #2747
- Remove map related stuff #2749
- Add library udata_event_service to produce Kafka messages #2743
4.1.0 (2022-06-09)
- Add html support for posts #2731
- Use mongo search if
SEARCH_SERVICE_API_URL
variable is not set #2728 - Improve resource extension detection #2729
- Remove resources in dataset search serialization #2730
- Add endpoint to directly get specific resource by rid #2732.
- Publish kafka message when resource is created, modified or deleted #2733
- Clean documentation and code with respect to independent search service #2738
- Fix size argument in suggests endpoint and corresponding tests #2739
- Add udata instance name prefix and action suffix for kafka topics #2736
- Fix tokenisation by building an
AND
query (see comments in code) for mongo text search and pagination #2740
4.0.2 (2022-05-04)
- Remove unused
_total_pages
search property #2726 - Use -followers as default suggest sort on datasets, reuses and orgas #2727
- Reintroduce user suggest with mongo contains #2725
4.0.1 (2022-04-11)
- Removed
post_save
signal withinadd_resource
andupdate_resource
methods. #2720 - Refactor and update documentation with latest udata updates #2717
- Add harvest csv adapter for a catalog of harvesters #2722
4.0.0 (2022-03-30)
Breaking change
Search refactor #2680
- :warning: Search changes #2692:
- The search feature is not within udata anymore and queries a distant service.
- The search feature is now optional and is enabled by setting the
SEARCH_SERVICE_API_URL
setting. - When search is not enabled, the search endpoints will return a
501 Not Implemented
error. - The ModelAdapter, SearchQuery and SearchResult patterns were kept but heavily refactored.
- udata uses a Kafka producer to send documents to index to the search service.
- udata uses HTTP request to query the search service.
- :warning: API changes #2669:
- List endpoints for organizations, datasets, reuses and users are now querying MongoDB instead of ElasticSearch.
- Those endpoints use MongoDB full text search when
q
argument is used. Some unused filters on this route were dropped. - A new API parser was implemented to replace the search one.
- The previous ElasticSearch endpoints were moved to APIv2 with the following url pattern:
/{object}/search
(ex:/datasets/search
).
- :warning: Suggest changes #2685 and #2696:
- Current suggest implementation moved from an Elasticsearch index to a MongoDB query using the term
contains
. - The user suggest was entirely removed, as its existence is now less relevant because of the full text search.
- Current suggest implementation moved from an Elasticsearch index to a MongoDB query using the term
3.3.3 (2022-03-29)
- Extend dcat properties support (frequency litteral, creation and modification date, landing page and abstract description) #2715
3.3.2 (2022-03-01)
- Deprecation: Topics are now deprecated and will be removed in upcoming releases.
- Use title to improve License guess #2697
- Add a
q
argument to the paginated datasets resources endpoint, to search through resources titles. #2701 - Delete discussion with deleted user as only participant #2702
- Fix error on post creation when adding related reuse #2704
- Redirect in endpoints routing now returns 308 instead of 302 in order to keep the method and body. #2706
- Delete badges from datasets fixtures. 2709
3.3.1 (2022-01-11)
- Fix fields empty value in admin form to allow for unsetting fields #2691
- :warning: Add a new required topic string field on reuses. The associated migration set default topic to
others
#2689
3.3.0 (2021-12-10)
- :warning: Removed
Issues
code and logic. The corresponding MongoDB collection should be deleted when upgrading Udata. #2681 - Fix transfer ownership from org to user #2678
- Fix discussion creation on posts #2687
3.2.2 (2021-11-23)
- Move template hook logic back to udata #2671 #2679
- Add dataset's acronym to catalog #2675
- Better URL-based License guess #2672
- New way of fixtures generation #2677:
- The command now uses a remote file (default) if a URL is provided or a local one if a path is provided.
- This file can be generated by using the command
generate-fixtures-file
, which takes as an argument the URL of the source queried to retieve the data dumped to the file. - The command
generate-fixtures-file
uses a customizable list of datasets slugs to know which datasets to query.
- Fixed the Geomform check for a GeoZone instance in formdata #2683
3.2.1 (2021-10-22)
- Fix default sort with right sort column creation date name, for posts in back-office editorial page #2665
- Meta read-only-enabled is back #2664
- First endpoints for APIv2! Add datasets hateoas and resources pagination endpoints #2663 #2667
- Add
archived
andresources_count
fields in the dataset catalog #2668
3.2.0 (2021-09-14)
- Update dependencies following setuptools 58.0.2 release that drop support for
use_2to3
#2660:- :warning: breaking change
rdfs
is not supported anymore jsonld
endpoints have a@context
dict directly instead of an url to the context endpoint
- :warning: breaking change
- Update documentation with udata-front plugin renaming #2661
- Various DCAT fixes (geonetwork compatibility) and debug command #2662
3.1.0 (2021-08-31)
- :warning: Use pip-tools for requirements management #2642#2650#2651. Please read the doc if you are a udata developer.
- :warning: Check db integrity and apply temporary and permanent fixes #2644 :warning: the associated migrations can take a long time to run.
- :warning: Upgrade to Flask-1.1.4 #2639
- Safeguard
User.delete()
#2646 - Fix user delete command #2647
- Protect
test_ignore_post_save_signal
from weak ref error while testing #2649 - Update translations following frontend refactoring (a lot of translations have been moved to udata-gouvfr) #2648
- Fix RDF output content negociation #2652
- Update Pillow dependency to 8.0.0 #2654
- Add more fixes on HarvestSource and HarvestJobs for db integrity #2653
3.0.4 (2021-08-12)
- Now returning notfound() http exception when router does not match any territory object instead of None #2637
- Add larger reuse thumbnail image #2638
- Activate plugins before creating app when testing #2643
3.0.3 (2021-07-30)
3.0.2 (2021-07-19)
3.0.1 (2021-07-09)
- Remove apidoc blueprint, moved to udata-gouvfr #2628
- New migration to update community resources schema from string to dict #2629
3.0.0 (2021-07-07)
- :warning: breaking change: most of the theme/templates logic has been moved to https://github.com/etalab/udata-gouvfr.
udata
no longer contains a default theme. In the 3.x series, we hope it will be usable as a "headless" open data platform, but for now you probably need to plug your own theme or use udata-gouvfr. More info about this change here. #2522 - Migrate from raven to sentry-sdk #2620
- Add a UdataCleaner class to use udata's markdown configuration on SafeMarkup as well #2619
- Fix schema name display in resource modal #2617
2.7.1 (2021-05-27)
- Add migration to roolback on resource's schema's name to None #2615
2.7.0 (2021-05-25)
- Modify
schema
field to resource. This field is now a nested field containing two sub-propertiesname
andversion
#2600. - Add a
schema_version
facet to the dataset search (need to be reindex to appear in results) #2600.
2.6.5 (2021-05-19)
- Fix create user by API #2609
- Add sqlite, db and ics to allowed extensions #2610
- Better markup parsing #2611:
- Geozone's and Resource type's labelize function return None if no object is found.
- New SafeMarkup class, which inherits from Markup, uses Bleach to sanitize Markup class.
2.6.4 (2021-03-24)
- Enhance self endpoint verification #2604
2.6.3 (2021-03-23)
- Extraction of translation's strings #2602
2.6.2 (2021-03-22)
- Fix SECURITY_CONFIRMABLE=False #2588
- Support dct:license on DCAT harvester #2589
- Admin small enhancements #2591:
- The sidebar "Me" label has been renamed "Profile"
- The user's profile now displays the user's email
- The button "Edit" and the dropdown were merged. The button is now only a dropdown listing the actions.
- "Edit" action has been renamed to "Edit the dataset/reuse/organization/profile" according to the current object to edit.
- Add
nofollow
attribute to links in discussions comments #2593 - Add pip upgrade in circle's publish step #2596
- Pin Twine's version #2597
- Pin twine'version in circle's publish step #2598
2.6.1 (2021-01-26)
- Fix url_for method in organization's catalog's view #2587
2.6.0 (2021-01-25)
2.5.1 (2020-12-31)
- Add title's and description's length limit in forms #2585
2.5.0 (2020-11-30)
- Change reuse's form's label name to title #2575
- Unpublished posts are no longer served by the
Post.list
API endpoint #2578 - Read only mode can now be toggled in settings #2565:
- Toggles a warning banner on the frontend view and a warning toast on the admin view.
- Prevents new users to register.
- Prevents non admin users to create new content such as organizations, datasets, community resources or discussions.
- Will return a
423
response code to any non-admin request to endpoints specified inMETHOD_BLOCKLIST
setting. - Existing content can still be updated.
- Add an alert block in layout template, to be overrided in installed theme #2580
2.4.1 (2020-11-09)
- Escaping XML's forbidden characters #2562
- Ignore pattern feature for linkchecker #2564
- Fix TypeError when creating a superuser with an incorrect password #2567
2.4.0 (2020-10-16)
- :warning: Resources and community resources creation API change #2545:
- Remove the RESOURCES_FILE_ALLOWED_DOMAINS setting and mechanism.
- The community resource's/resource's url could be set from the client side, even in the case of a hosted one, which is illogical. A hosted community resource's/resource's url should only be the sole responsibility of the backend.
- Consequently, the POST endpoint of the community resources/resources API is only meant for the remote ones and the PUT endpoint of the community resources/resources API will take the existing resource's url to override the one sent by the client.
- Community resources changes #2546:
- Dataset is now correctly set at community resource creation
- Remove now useless job 'purge-orphan-community-resources'
- Using the fs_filename logic when uploading a new resource on the data catalog.#2547
- Remove old file when updating resources and community resources from API #2548
- Sortable.js upgrade to fix an issue in udata's editorial page when reordering featured datasets #2550
- Password rotation mechanism #2551:
- Datetime fields
password_rotation_demanded
andpassword_rotation_performed
added to user model. - Override Flask-Security's login and reset password forms to implement the password rotation checks.
- Datetime fields
- Password complexity settings hardening #2554
- Migrate ODS datasets urls #2559
2.3.0 (2020-09-29)
- Plugin's translations are now correctly loaded #2529
- Vine version is now pinned in requirements #2532
- Fix reuses metrics #2531:
- Reuses "datasets" metrics are now triggered correctly
- New job to update the datasets "reuses" metrics:
update-datasets-reuses-metrics
to be scheduled
- Add a migration to set the reuses datasets metrics to the correct value #2540
- Add a specific dataset's method for resource removal #2534
- Flask-Security update #2535:
- Switch to fork Flask-Security-Too
- New settings to set the required password length and complexity
- Fix Flask-security sendmail overriding #2536
- Add a custom password complexity checker to Flask-Security #2537
- Change too short password error message #2538
2.2.1 (2020-08-25)
- Some fixes for the static files deletion #2526:
- New static files migration replacing the older one:
- The migration now uses FS_URL.
- Fixed the fs_filename string formating.
- Now checks the community ressource's URLs too.
- Removing the deletion script link in the CHANGELOG previous entry.
- New static files migration replacing the older one:
- Add a schema facet to the dataset search 🚧 requires datasets reindexation #2523
2.2.0 (2020-08-05)
- CORS are now handled by Flask-CORS instead of Flask-RestPlus#2485
- Oauth changes #2510:
- Authorization code Grant now support PKCE flow
- New command to create an OAuth client
- :warning: Implicit grant is no longer supported
- :warning: Deletion workflow changes #2488:
- Deleting a resource now triggers the deletion of the corresponding static file
- Deleting a dataset now triggers the deletion of the corresponding resources (including community resources) and their static files
- Adding a celery job
purge-orphan-community-resources
to remove community resources not linked to a dataset. This should be scheduled regularly. - Adding a migration file to populate resources fs_filename new field. Deleting the orphaned files is pretty deployment specific. A custom script should be writen in order to find and delete those files.
- Show traceback for migration errors #2513
- Add
schema
field to ressources. This field can be filled based on an external schema catalog #2512 - Add 2 new template hooks:
base.modals
(base template) anddataset.resource.card.extra-buttons
(dataset resource card) #2514
2.1.3 (2020-06-29)
- Fix internal links in markdown when not starting w/ slash #2500
- Fix JS error when uploading a resource in certain conditions #2483
2.1.2 (2020-06-17)
- Decoded api key byte string #2482
- Removed now useless metric fetching #2482
- Fix bug in harvester's cron schedule #2493
- Adding banner options in settings for a potential use in an udata's theme #2492
2.1.1 (2020-06-16)
- Broken release, use 2.1.2
2.1.0 (2020-05-12)
Breaking changes
- Full metrics refactoring 2459:
- Metric collection is now useless and will not be filled anymore, you can remove it or keep it for archival sake. It will not be automatically removed.
- udata-piwik now uses InfluxDB as a buffer for trafic data before injecting them into udata's models.
- Most of celery's tasks related to metrics are removed, this should help performance-wise on a big instance.
- Charts related to metrics are removed from admin and dashboard panel until we have accurate data to populate them.
- Site's metrics computation are not triggered by signals anymore.
- A specific celery job needs to be run periodically to compute site's metrics.
New features
- Nothing yet
2.0.4 (2020-05-04)
- Fix export-csv command (py3 compat) #2472
2.0.3 (2020-04-30)
- :warning: Security fix: fix XSS in markdown w/ length JS filter #2471
2.0.2 (2020-04-07)
- :warning: Breaking change / security fix: disallow html tags in markdown-it (JS markdown rendering) #2465
2.0.1 (2020-03-24)
- Allow images to be displayed in markdown by default #2462
- Fix deleted user's authentication on backend side #2460
2.0.0 (2020-03-11)
Breaking changes
- Migration to Python 3.7 #1766
- The new migration system (#1956) uses a new python based format. Pre-2.0 migrations are not compatible so you might need to upgrade to the latest
udata
version<2.0.0
, execute migrations and then upgrade toudata
2+. - The targeted mongo version is now Mongo 3.6. Backward support is not guaranteed
- Deprecated celery tasks have been removed, please ensure all old-style tasks (pre 1.6.20) have been consumed before migrating #2452
New features
- New migration system #1956:
- Use python based migrations instead of relying on mongo internal and deprecated
js_exec
- Handle rollback (optionnal)
- Detailled history
- Use python based migrations instead of relying on mongo internal and deprecated
- Template hooks generalization: allows to dynamically extend template with widgets and snippets from extensions. See the dedicated documentation section #2323
- Markdown now supports Github Flavored Markdown (GFM) specs (ie. the already supported CommonMark specs plus tables, strikethrough, autolinks support and predefined disallowed raw HTML) #2341
1.6.20 (2020-01-21)
- New Crowdin translations #2360
- Fix territory routing for @latest #2447
- Refactor Celery: py2/py3 compatibility, use ids as payload #2305
- Automatically archive dangling harvested datasets :warning: this is enabled by default #2368
- Refactor celery tasks to avoid models/documents in the transport layer #2305
1.6.19 (2020-01-06)
rel=nofollow
on remote source links #2364- Fix admin messages and fix user roles selector default value #2365
- Fix new harvester's form tooltip showup #2371
- Fix responsive design of search results #2372
- Fix non-unique ids in datasets' comments #2374
- Case insensitive license matching #2378
1.6.18 (2019-12-13)
- Remove embedded API doc #2343 :warning: Breaking change, please customize
API_DOC_EXTERNAL_LINK
for your needs. - Removed published date from community ressources #2350
- Added new size for avatars in user's model (
udata images render
must be run in order to update the size of existing images) #2353 - Fixed user's avatar change #2351
- Removed dead code #2355
- Resolved conflict between id and slug #2356
- Fix next link in posts pagination #2358
- Fix organization's members roles translation #2359
1.6.17 (2019-10-28)
- Disallow URLs in first and last names #2345
1.6.16 (2019-10-22)
- Prevent Google ranking spam attacks on reuse pages (
rel=nofollow
on reuse link) #2320 - Display admin resources list actions only if user has permissions to edit #2326
- Fix non-admin user not being able to change their profile picture #2327
1.6.15 (2019-09-11)
- Style links in admin modals #2292
- Add activity.key filter to activity.atom feed #2293
- Allow
Authorization
as CORS header and OAuth minor fixes #2298 - Set dataset.private to False by default (and fix stock) #2307
- Fixes some inconsistencies between admin display (buttons, actions...) and real permissions #2308
1.6.14 (2019-08-14)
- Cleanup
permitted_reuses
data (migration) #2244 - Proper form errors handling on nested fields #2246
- JS models load/save/update consistency (
loading
alwaystrue
on query, always handle error, no more silent errors) #2247 - Ensures that date ranges are always positive (ie.
start
<end
) #2253 - Enable completion on the "
MIME type
" resource form field (needs reindexing) #2238 - Ensure oembed rendering errors are not hidden by default error handlers and have cors headers #2254
- Handle dates before 1900 during indexing #2256
spatial load
command is more resilient: make use of a temporary collection when--drop
option is provided (avoid downtime during the load), in case of exception or keybord interrupt, temporary files and collections are cleaned up #2261- Configurable Elasticsearch timeouts. Introduce
ELASTICSEARCH_TIMEOUT
as default/read timeout andELASTICSEARCH_INDEX_TIMEOUT
as indexing/write timeout #2265 - OEmbed support for organizations #2273
- Extract search parameters as settings allowing fine tuning search without repackaging udata (see the Search configuration documentation) #2275
- Prevent
DoesNotExist
error in activity API: silence the error for the consumer but log it (ie. visible in Sentry) #2268 - Optimize CSV export generation memory wise #2277
1.6.13 (2019-07-11)
- Rename og:image target :warning: this will break your custom theme, please rename your logo image file to
logo-social.png
instead oflogo-600x600.png
#2217 - Don't automatically overwrite
last_update
field if manually set #2020 - Spatial completion: only index last version of each zone and prevent completion cluttering #2140
- Init: prompt to loads countries #2140
- Handle UTF-8 filenames in
spatial load_logos
command #2223 - Display the datasets, reuses and harvesters deleted state on listing when possible #2228
- Fix queryless (no
q
text parameter) search results scoring (or lack of scoring) #2231 - Miscellaneous fixes on completers #2215
- Ensure
filetype='remote'
is set when using the manual ressource form #2236 - Improve harvest sources listing (limit
last_job
fetched and serialized fields, reduce payload) #2214 - Ensure HarvestItems are cleaned up on dataset deletion #2214
- Added
config.HARVEST_JOBS_RETENTION_DAYS
and aharvest-purge-jobs
job to apply it #2214 (migration). Warning, the migration will enforceconfig.HARVEST_JOBS_RETENTION_DAYS
and can take some time on a bigHarvestJob
collection - Drop
no_dereference
on indexing to avoid the "dictionary changed size during iteration
" error until another solution is found. Warning: this might result in more resources consumption while indexing #2237 - Fix various issues around discussions UI #2190
1.6.12 (2019-06-26)
- Archive dataset feature #2172
- Refactor breadcrum includes #2173
- Better dependencies management #2182 and #2172/install.pip
- Reduce following to staring #2192
- Simplify display of spatial coverage in search results #2192
- Add cache for organization and topic display pages #2194
- Dataset of datasets: id as ref instead of slug #2195 :warning: this introduces some settings changes, cf documentation for EXPORT_CSV.
- Add meta og:type: make twitter cards work #2196
- Fix UI responsiveness #2199
- Remove social media sharing feature #2200
- Quick fix for activity.atom #2203
- Remove diff from js dependencies to fix CVE #2204
- Replace default sort label for better readability #2206
- Add a condition to up-to-dateness of a dataset #2208
- Prevent deleted harvesters from running until purged. Harvest jobs history is deleted too on purge. #2209
- Better quality.frequency management #2211
- Fix caching of topic pages #2213
1.6.11 (2019-05-29)
- Center incomplete rows of cards #2162
- Allow .dxf upload #2164
- Always use remote_url as harvesting source #2165
- Update jquery to ~3.4.1 #2161
- Fix various issues with search result page #2166
- Restore notbroken facet includes #2169
1.6.10 (2019-05-23)
- Remove
<br>
in badge display #2156 - Display user avatar and fix its sizing #2157
- Redirect unfiltered csv exports to dataset of datasets #2158
- Show organization id in a modal and add hyperlinks to ids in detail modal #2159
1.6.9 (2019-05-20)
- Add user slug to dataset cache key #2146
- Change display of cards of reuses on topic pages #2148
- Display remote source of harvested dataset #2150
- Prefill community resource type on upload form #2151
- Fix user profile UI #2152
- Remove concept of permitted reuse #2153
1.6.8 (2019-05-13)
- Configurable search autocomplete #2138
1.6.7 (2019-05-10)
- Refactor DCAT harvesting to store only one graph (and prevent MongoDB document size overflow) #2096
- Expose sane defaults for
TRACKING_BLACKLIST
#2098 - Bubble up uploader errors #2102
- Ensure
udata worker status --munin
always outputs zero values so munin won't see it has a "no data" response #2103 - Metrics tuning: breaks circular dependencies, drop exec_js/eval usage, proper logging... #2113
- Change reuse icon from "retweet" to "recycle" #2122
- Admins can delete a single comment in a discussion thread #2087
- Add cache directives to dataset display blocks #2129
- Export multiple models objects to CSV (dataset of datasets) #2124
1.6.6 (2019-03-27)
- Automatically loads default settings from plugins (if
plugin.settings
module exists) #2058 - Fixes some memory leaks on reindexing #2070
- Fixes minor UI bug #2072
- Prevent ExtrasField failure on null value #2074
- Improve ModelField errors handling #2075
- Fix territories home map #2077
- Prevent timeout on
udata index
in some cases #2079 - Pin werkzeug dependency to
0.14.1
until incompatibilities are fixed #2081 - Prevent client-side error while handling unparseable API response #2076
- Fix the
udata job schedule
erroneous help message #2083 - Fix upload button on replace resource file #2085
- Ensure harvest items statuses are updated on the right job #2089
- Added Serbian translations #2055
1.6.5 (2019-02-27)
- Replace "An user" by "A user" #2033
- Use "udata" and fix a few other typos in documentation and UI/translation strings #2023
- Add a surrounding block declaration around community section 2039
- Fix broken form validation on admin discussions and issues #2045
- Fix full reindexation by avoiding
SlugField.instance
deepcopy inno_dereference()
querysets #2048 - Ensure deleted user slug is pseudonymized #2049
- Prevent the "Add resource" modal from closing when using the frontend "Add resource" button #2052
1.6.4 (2019-02-02)
- Fix workers: pin redis version for Celery compatibility #2019
1.6.3 (2019-02-01)
- Remove extra attributes on user deletion #1961
- Pin phantomjs to version
2.1.7
#1975 - Protect membership accept route against flood #1984
- Ensure compatibility with IE11 and Firefox ESR #1990
- Lots of fixes on the resource form. Be explicit about uploading a new file #1991
- Centralize
selectize
handling and style inbase-completer
and apply some fixes 1992 - Added the missing
number
input field widget #1993 - Fix the organization private datasets and reuses counters #1994
- Disable autocorrect, spellcheck... on search and completion fields #1995
- Fix harvest preview in edit form not taking configuration (features and filters) #1996
- Ensure organization page react to URL hash changes (including those from right sidebar) #1997
- Updating community resource as admin keeps original owner #1999
- Major form fixes #2000
- Improved admin errors handling: visual feedback on all errors,
Sentry-ID
header if present, hide organization unauthorized actions #2005 - Expose and import licenses
alternate_urls
andalternate_titles
fields #2006 - Be consistent on search results wording and icons (Stars vs Followers) #2013
- Switch from a "full facet reset" to a "by term reset" approach in search facets #2014
- Ensures all modals have the same buttons styles and orders, same color code... #2012
- Ensure URLs from assets stored on
CDN_DOMAINS
are considered as valid and that associated error message is properly translated #2017
1.6.2 (2018-11-05)
- Display the owner/organization on harvester view #1921
- Improve harvest validation errors handling #1920
- Make extra TOS text customizable #1922
- Fixes an
UnicodeEncodeError
occuring when parsing RDF with unicode URLs #1919 - Fix some external assets handling cases #1918
- Harvest items can now match
source.id
beforesource.domain
— no more duplicates when changing an harvester URL #1923 - Ensure image picker/cropper only allows images #1925
- Make tags min and max length configurable and ensure admin takes its configuration from the backend #1935
- Prevent errors when there is no date available to focus on the calendar #1937
Internals
- Update authlib to 0.10 #1916
1.6.1 (2018-10-11)
- Allows arguments and keyword arguments in the task
@connect
decorator #1908 - Allows to restore assets after being deleted (Datasets, Organizations and Reuses) #1901
- Fixes form events not bubbling (and so fixes harvester config not displaying) #1914
1.6.0 (2018-10-02)
New features
- Harvest sources are now filterable through the harvest source create/edit admin form #1812
- Harvest sources can now enable or disable some optional backend features #1875
- Post UIs have been reworked: publication date, publish/unpublish action, save and continue editing, dynamic sidebar, alignments fixes... #1857
Minor changes
- Only display temporal coverage years on cards and search results #1833
- Add publisher's name on dataset template #1847
- Improved upload error handling: deduplicate notifications, localized generic error message, sentry identifier... #1842
- Allows to filter datasets on resource
type
(needs reindexing) #1848 - Switch the admin sidebar collapse icon from "hamburger"to left and right arrows #1855
- Discussion add card style coherence #1884
LINKCHECKING_UNCHECKED_TYPES
setting to prevent linkchecking on some ressource types #1892swagger.json
API specifications now pass validation #1898
Breaking changes
- Static assets are now compatible with long-term caching (ie. their hash is present in the filename). :warning: On your development environment you need to run
inv assets-build
to generate an initialmanifest.json
, both inudata
and in your theme extension if it uses manifest. See #1826 for full details. - Theme are now responsible for adding their CSS markup on template (no more assumptions on
theme.css
andadmin.css
). Most of the time, overridingraw.html
andadmin.html
should be sufficient - The discussions API
posted_by
attribute is now an embedded user instead of an user ID to avoid extra API calls #1839
Bugfixes
- Hide the
resource.type
attribute from JSON-LD output until handled by a dedicated vocabulary/property #1865 - RDFs, CSVs and resource redirect views are now handling CORS properly #1866
- Fix broken sorts on organization's datasets list in admin #1873
- Ensure harvest previewing is done against current form content #1888
- Ensure deleted objects are unindexed #1891
- Fix the dataset resources list layout wrapping #1893
- Fix wrong behavior for weblinks #1894
- Ensure
info config
command only displays configuration variables #1897
Internal
1.5.3 (2018-08-27)
- Prevent UnicodeError on unicode URL validation error #1844
- Hide save button in "Add resource" modal until form is visible (and prevent error) #1846
- The purge chunks tasks also remove the directory #1845
- Upgrade to latest Fine-Uploader version to benefit from bug fixes #1849
- Prevent front views from downloading
swagger.json
#1838 - Ensure API docs works without data #1840
- Expose the default spatial granularity in API specs #1841
- Fix missing dataset title on client-side card listing #1834
- Allows to clear the dataset form temporal coverage. #1832
- Ensure that admin notifications are displayed once and with a constant width. #1831
- Fix broken date range picker date parsing (ie. manual keyboard input) #1863
- Normalize uploaded filenames to avoid encoding issues, filesystem incompatibilities... #1852
1.5.2 (2018-08-08)
- Fix client-side temporal coverage rendering #1821
- Prevent word breaking when wrapping discussions messages #1822
- Properly render message content on issues and discussions mails #1823
1.5.1 (2018-08-03)
1.5.0 (2018-07-30)
New features
- Slugs are now redirected on change when changed until old slug are free #1771
- Improve usability of new organization form #1777
- Allows to serve assets on an external CDN domain using
CDN_DOMAIN
#1804
Breaking changes
None
Bug fixes and minor changes
- Sort dataset update frequencies by ascending frequency #1758
- Skip gov.uk references tests when site is unreachable #1767
- Fix resources reorder (registered extras validation logic) #1796
- Fix checksum display on resource modal #1797
- Use metrics.views on resource card #1778
- Fix dataset collapse on ie11 #1802
- Upgrade i18next (security) #1803
Internals
- Backports some Python 3 forward compatible changes and fixes some bugs #1769:
- avoid
filter
andmap
usage instead of list comprehension - explicit encoding handling
- avoid comparison to
None
- use
next()
instead of.next()
to iterate - unhide some implicit casts (in particular search weight)
- avoid
- Tests are now run against
local.test
instead oflocalhost
to avoid pytest warnings
1.4.1 (2018-06-15)
- Fix community resource creation and display #1733
- Failsafe JS cache storage: use a custom in-memory storage as fallback when access to
sessionStorage
is not allowed #1742 - Prevent errors when handling API errors without data/payload #1743
- Improve/fix validation error formatting on harvesting #1745
- Ensure daterange can be parsed from full iso datetime #1748
- API: enforce application/json content-type for forms #1751
- RDF parser can now process european frequencies #1752
- Fix images upload broken by chunked upload #1756
1.4.0 (2018-06-06)
New features
- Typed resources #1398
- Initial data preview implementation #1581 #1632
- Handle some alternate titles and alternate URLs on licenses for improved match on harvesting #1592
- Allow to specify a dataset acronym #1217
- Starts using harvest backend
config
(validation, API exposition,HarvestFilters
...) #1716 - The map widget can now be configured (tiles URL, initial position...) #1672
- New discussions layout #1623
- Dynamic API documentation, Enhancement to Pull #1542 - #1542
- Resource modal overhaul with markdown support #1547
Breaking changes
- Normalize resource.format (migration - :warning: need reindexing). #1563
- Enforce a domain whitelist when resource.filetype is file. See
RESOURCES_FILE_ALLOWED_DOMAINS
settings variable for details and configuration. #1567 - Remove extras from datasets search index (needs reindexation) #1718
Bug fixes and minor changes
- Switch to PyPI.org for package links #1583
- Show resource type in modal (front) #1714
- Adds ETag to internal avatar for efficient caching control #1712
- Fix 404/missing css on front pages #1709
- Fix markdown max image width (front) #1707
- Ensure registered extras types are properly parsed from JSON. Remove the need for custom
db.Extra
classes #1699 - Fix the temporal coverage facet query string parsing #1676
- Fix search auto-complete hitbox #1687
- Fix Firefox custom error handling, part 2 #1671
- Add resend confirmation email link to login screen #1653
- Audience metrics: use only
views
#1607 - Add missing spatial granularities translations #1636
- Protocol-relative URLs support #1599
Internals
- Simplify
ExtrasField
form field signature (no need anymore for theextras
parameter) #1698 - Register known extras types #1700
1.3.12 (2018-05-31)
1.3.11 (2018-05-29)
- Protect Resource.need_check against malformed/string dates #1691
- Fix search auto-complete loading on new page #1693
1.3.10 (2018-05-11)
1.3.9 (2018-05-07)
- Prevent linkchecker to pollute timeline as a side-effect. (migration). Warning, the migration will delete all dataset update activities #1643
- Fix OAuth authorization screen failing with unicode
SITE_TITLE
#1624 - Fix markdown handling of autolinks with angle brackets and factorize (and test) markdown
parse_html()
#1625 - Fix timeline order #1642
- Fix markdown rendering on IE11 #1645
- Consider bad UUID as 404 in routing #1646
- Add missing email templates #1647
- Polyfill
ChildNode.remove()
for IE11 #1648 - Improve Raven-js/Sentry error handling #1649
- Prevent regex special characters to break site search #1650
1.3.8 (2018-04-25)
- Fix sendmail regression #1620
1.3.7 (2018-04-24)
- Fix some search parameters validation #1601
- Prevent API tracking errors with unicode #1602
- Prevent a race condition error when uploading file with concurrent chunking #1606
- Disallow resources dict in API #1603
- Test and fix territories routing #1611
- Fix the client-side Raven/Sentry configuration #1612
- Raise a 404 in case of unknown RDF content type #1613
- Ensure current theme is available to macros requiring it in mails #1614
- Fix documentation about NGinx configuration for https #1615
- Remove unwanted commas in default
SECURITY_EMAIL_SUBJECT_*
parameters #1616
1.3.6 (2018-04-16)
- Prevent OEmbed card to be styled when loaded in bootstrap 4 #1569
- Fix organizations sort by last_modified #1576
- Fix dataset creation form (and any other form) #1584
- Fix an XSS on client-side markdown parsing #1585
- Ensure URLs validation is the same everywhere #1586
1.3.5 (2018-04-03)
- Upgrade
sifter
to0.5.3
#1548 - Upgrade
jquery-validation
to 1.17.0 and fixes some issues with client-side URL validation #1550 - Minor change on OEmbed cards to avoid theme to override the cards
font-family
#1549 - Improve cli unicode handling #1551
- Fix DCAT harvester mime type detection #1552
- Add the missing harvester URL in admin #1554
- Fix harvester preview/job layout #1553
- Fix some search unicode issues #1555
- Small fixes on OEmbed URL detection #1556
- Use nb_hits instead of views to count downloads #1560
- Prevent an XSS in TermFacet #1561
- Fix breadcrumb bar layout on empty search result #1562
1.3.4 (2018-03-28)
- Remove territory claim banner #1521
- Expose an OEmbed API endpoint using the new cards #1525
- Small topic fixes #1529
- Fixes the search result vertical cut off #1530
- Prevent visually disabled pagination buttons from being clicked #1539
- Fixes "sort organization by name" not working #1537
- Non-admin users should not see the "publish as anyone" filter field on "publish as" screen #1538
1.3.3 (2018-03-20)
- Fixes on upload: prevent double upload and bad chunks upload #1516
- Ensure OAuth2 tokens can be saved without
refresh_token
#1517
1.3.2 (2018-03-20)
- Support request-body credential in OAuth2 (Fix a regression introduced in 1.3.0) #1511
1.3.1 (2018-03-15)
- Fix some geozones/geoids bugs #1505
- Fix oauth scopes serialization in authorization template #1506
- Prevent error on site ressources metric #1507
- Fix some routing errors #1508
- Mongo connection is now lazy by default, preventing non fork-safe usage in celery as well as preventing commands not using the database to hit it #1509
- Fix udata version not exposed on Sentry #1510
1.3.0 (2018-03-13)
Breaking changes
- Switch to
flask-cli
and dropflask-script
. Deprecated commands have been removed. #1364 - Update card components to make them more consistent #1383 #1460
- udata is now protocol (
http
/https
) agnostic. This is now fully the reverse-proxy responsibility (please ensure that you are using SSL only in production for security purpose). #1463 - Added more entrypoints and document them. There is no more automatically enabled plugin by installation. Plugins can now properly contribute translations. #1431
New features
- Soft breaks in markdown is rendered as line return as allowed by the commonmark specifications, client-side rendering follows the same security rules #1432
- Switch from OAuthlib/Flask-OUAhtlib to Authlib and support all grants type as well as token revocation #1434
- Chunked upload support (big files support) #1468
- Improve tasks/jobs queues routing #1487
- Add the
udata schedule|unschedule|scheduled
commands #1497
Bug fixes and minor changes
- Added Geopackage as default allowed file formats #1425
- Fix completion/suggestion unicode handling #1452
- Added a link to change password into the admin #1462
- Fix organization widget (embed) #1474
- High priority for sendmail tasks #1484
- Add security.send_confirmation template #1475
Internals
- Switch to pytest as testing tool and expose a
udata
pytest plugin #1400
1.2.11 (2018-02-05)
- Translate Flask-Security email subjects #1413
- Fix organization admin pagination #1372
- Fix missing spinners on loading datatables #1401
- Fixes on the search facets #1410
1.2.10 (2018-01-24)
- Markdown rendering is now the same between the back and the frontend. #604
- Make the dataset page reuses section and cards themable. #1378
ValueError
is not hidden anymore by the Bad Request error page, it is logged. #1382- Spatial encoding fixes: prevent breaking unicode errors. #1381
- Ensure the multiple term search uses a
AND
operator #1384 - Facets encoding fixes: ensure lazy strings are propery encoded. #1388
- Markdown content is now easily themable (namespaced into a
markdown
class) #1389 - Fix discussions and community resources alignment on datasets and reuses pages #1390
- Fix discussions style on default theme #1393
- Ensure empty harvest jobs properly end #1395
1.2.9 (2018-01-17)
- Add extras field in discussions #1360
- Fix datepicker #1370
- Fix error on forbidden scheme in
is_url
harvest filter #1376 - Fix an error on rendering present territory date #1377
1.2.8 (2018-01-10)
- Fix html2text dependency version #1362
1.2.7 (2018-01-10)
1.2.6 (2018-01-04)
- Fix wrongly timed notification on dataset creation with misformed tags #1332
- Fix topic creation #1333
- Add a
udata worker status
command to list pending tasks.[breaking] Theudata worker
command is replaced byudata worker start
. #1324 - Prevent crawlers from indexing spammy datasets, reuses and organizations #1334 #1335
- Ensure Swagger.js properly set jQuery.ajax contentType parameter (and so data is properly serialized) #1126
- Allows theme to easily access the
owner_avatar_url
template filter #1336
1.2.5 (2017-12-14)
- Fix misused hand cursor over the spatial coverage map in dataset admin #1296
- Fix broken post edit page #1295
- Display date of comments in dataset discussions #1283
- Prevent
reindex
command from failing on a specific object and log error instead. #1293 - Position the community resource link icon correctly #1298
- Add a sort option to query of list of posts in API #1301
- Import dropdown behavior from
udata-gouvfr
and fix hidden submenus on mobile #1297 - show message for emtpy dataset search #1044
1.2.4 (2017-12-06)
- Fix flask_security celery tasks context #1249
- Fix
dataset.quality
handling when no format filled #1265 - Ignore celery tasks results except for tasks which require it and lower the default results expiration to 6 hours #1281
- Import community resource avatar style from udata-gouvfr #1288
- Terms are now handled from markdown and customizable with the
SITE_TERMS_LOCATION
setting. #1285 - Deeplink to resource #1289
1.2.3 (2017-10-27)
- Check only the uncollapsed resources at first on dataset view #1246
1.2.2 (2017-10-26)
- Fixes on the
search index command
#1245
1.2.1 (2017-10-26)
- Introduce
udata search index
commmand to replace both deprecatedudata search init
andudata search reindex
commands. They will be removed in udata 1.4. #1233 - Rollback oauthlib from 2.0.5 to 2.0.2, pending a permanent solution #1237
- Get cached linkchecker result before hitting API #1235
- Cleanup resources checksum (migration) #1239
- Show check results in resource modal #1242
- Cache avatar rendering #1243
1.2.0 (2017-10-20)
New features and big improvements
- Expose harvester scheduling through the API and the admin interface #1123
- Added a
udata info
command for diagnostic purpose #1179 - Switch from static theme avatars/placeholders to identicons for readability (mostly on discussions) #1193
- Move croquemort features to a generic link checker architecture #1110
- CKAN and OpenDataSoft backends are now optional separate udata extensions #1213
- Better search autocomplete #1222
- Big post improvements (discussions support, navigation, fixes...) #1224
Breaking changes
- Upgrade to Celery 4.1.0. All celery parameters should be updated. (See Celery options documentation #1150
- Switch to Crowdin to manage translations #1171
- Switch to
Flask-Security
.Flask-Security-Fork
should be uninstalled before installing the new requirements #958
Miscellaneous changes and fixes
- Display organization metrics in the organization page tab labels #1022
- Organization dashboard page has been merged into the main organization page #1023
- Fix an issue causing a loss of data input at the global search input level #1019
- Fixes a lot of encoding issues #1146
- Add
.ttl
and.n3
as supported file extensions #1183 - Improve logging for adhoc scripts #1184
- Improve URLs validation (support new tlds, unicode URLs...) #1182
- Properly serialize empty geometries for zones missing it and prevent leaflet crash on invalid bounds #1188
- Start validating some configuration parameters #1197
- Remove resources without title or url [migration] #1200
- Improve harvesting licenses detection #1203
- Added missing delete post and topic admin actions #1202
- Fix the scroll to a discussion sub-thread #1206
- Fix duplication in discussions [migration] #1209
- Display that a discussion has been closed #1216
- Explicit dataset search reuse facet context (only known reuses) #1219
- Optimize indexation a little bit #1215
- Fix some reversed temporal coverage [migration] #1214
1.1.8 (2017-09-28)
- Display membership modal actions buttons for site administrators and on membership display. #1176
- Fix organization avatar in admin profile #1175
1.1.7 (2017-09-25)
- Prevent a random territory from being displayed when query doesn't match #1124
- Display avatar when the community resource owner is an organization #1125
- Refactor the "publish as" screen to make it more obvious that an user is publishing under its own name #1122
- Make the "find your organization" screen cards clickable (send to the organization page) #1129
- Fix "Center the full picture" on user avatar upload #1130
- Hide issue modal forbidden actions #1128
- Ensure spatial coverage zones are resolved when submitted from the API or when querying oembed API. #1140
- Prevent user metrics computation when the object owner is an organization (and vice versa) #1152
1.1.6 (2017-09-11)
- Fix CircleCI automated publication on release tags #1120
1.1.5 (2017-09-11)
- Fix the organization members grid in admin #934
- Fix and tune harvest admin loading state and payload size #1113
- Automatically schedule validated harvesters and allow to (re)schedule them #1114
- Raise the minimum
raven
version to ensure sentry is filtering legit HTTP exceptions #774 - Pin GeoJSON version to avoid breaking changes #1118
- Deduplicate organization members #1111
1.1.4 (2017-09-05)
- Fix packaging
1.1.3 (2017-09-05)
- Make the spatial search levels exclusion list configurable through
SPATIAL_SEARCH_EXCLUDE_LEVELS
. #1101 - Fix facets labelizer with html handling #1102
- Ensure territories pages have image defined in metadatas #1103
- Strip tags in autocomplete results #1104
- Transmit link checker status to frontend #1048
- Remove plus signs from search query #1048
1.1.2 (2017-09-04)
- Handle territory URLs generation without validity #1068
- Added a contact button to trigger discussions #1076
- Improve harvest error handling #1078
- Improve elasticsearch configurability #1096
- Lots of fixes admin files upload 1094
- Prevent the "Bad request error" happening on search but only on some servers #1097
- Migrate spatial granularities to new identifiers
- Migrate remaining legacy spatial identifiers #1080
- Fix the discussion API documention #1093
1.1.1 (2017-07-31)
- Fix an issue preventing reuse edition: #1027
- Fix an issue preventing user display and edit in admin: #1030
- Fix an error when a membership request is accepted: #1028
- Fix issue modal on a reuse: #1026
- Fix sort by date on admin users list: #1029
- Improve the
purge
command #1039 - Ensure search does not fail when a deleted object has not been unindexed yet #1063
- Start using Celery queues to handle task priorities #1067
- Updated translations
1.1.0 (2017-07-05)
New features and improvements
-
Added a DCAT harvester and expose metadata as RDF/DCAT. #966 See the dedicated documentions:
-
Images are now optimized and you can force rerendering using the
udata images render
command. -
Allowed files extensions are now configurable via the
ALLOWED_RESOURCES_EXTENSIONS
setting and both admin and API will have the same behavior #833. -
Improve and fix notifications: #928
- Changed notification style to toast
- Fix notifications that weren't displayed on form submission
-
Add a toggle indicator on dataset quality blocks that are collapsible #915
-
Integrating latest versions of GeoZones and GeoLogos for territories. Especially using history of towns, counties and regions from GeoHisto. #499
Breaking Changes
- Themes are now entrypoint-based #829. There is also a new theming documention.
- Images placeholders are now entirely provided by themes #707 #1006
- Harvester declaration is now entrypoint-based #1004
Fixes
-
Ensure URLs are stripped #823
-
Lot of fixes and improvements on Harvest admin UI #817:
- harvester edition fixed (and missing API added)
- harvester deletion fixed
- harvester listing is now paginated
- more detailed harvesters widgets
- ensure harvest source are owned by a user or an organization, not both [migration]
-
Pure Vue.js search facets #880. Improve and fix the datepicker:
- Proper sizing and positionning in dropdowns
- Fix initial value not being displayed
- Make it usable on keyboard
- Allows to define
min
andmax
values to disable some dates - Keyboard input is reflected into the calendar #615
-
Disable
next
button when no file has been uploaded #930 -
Fix badges notification mails #894
-
Fix the
udata search reindex
command #1009 -
Reindex datasets when their parent organization is purged #1008
Miscellaneous / Internal
-
Upgrade to Flask-Mongoengine 0.9.3, Flask-WTF 0.14.2, mongoengine 0.13.0. #812 #871 #903
-
Upgrade to Flask-Login 0.4.0 and switch from Flask-Security to the latest Flask-Security-Fork #813
-
Migrated remaining widgets to Vue.js #828:
- bug fixes on migrated widgets (Issues button/modal, integrate popover, coverage map)
- more coherent JS environment for developpers
- lighter assets
- drop Handlebars dependency
-
bleach and html5lib have been updated leading to more secure html/markdown cleanup and better performances #838
-
Drop
jquery-slimscroll
and fix admin menu scrolling #851 -
drop jquery.dotdotdot for a lighter css-only solution (less memory consumption) #853
-
Lighter style #869:
- Drop glyphicons and use only Font-Awesome (more coherence, less fonts)
- lighter bootstrap style by importing only what's needed
- make use of bootstrap and admin-lte variables (easier for theming)
- proper separation between front and admin style
-
Drop
ExtractTextPlugin
on Vue components style: -
Pure Vue.js modals. Fix the default membership role. Added contribute modal. #873
-
Easier Vue.js development/debugging:
- Drop
Vue.config.replace = false
: compatible with Vue.js 1/2 and no more style guessing #760 name
on all components: no moreAnonymous Component
in Vue debugger- No more
Fragments
- More ES6 everywhere
- Drop
-
Make metrics deactivable for tests #905
1.0.11 (2017-05-25)
- Fix presubmit form errors handling #909
- Fix producer sidebar image sizing #913
- Fix js
Model.save()
not updating in some cases #910
1.0.10 (2017-05-11)
- Fix bad stored (community) resources URLs [migration] #882
- Proper producer logo display on dataset pages
- Fix CKAN harvester empty notes and
metadata
file type handling - Remove (temporary) badges metrics #885
- Test and fix topic search #892
1.0.9 (2017-04-23)
- Fix broken post view #877
- Fix new issue submission #874
- Display full images/logo/avatars URL in references too #824
1.0.8 (2017-04-14)
- Allow more headers in cors preflight headers #857 #860
- Fix editorialization admin #863
- Fix missing completer images and ensure completion API is usable on a different domain #864
1.0.7 (2017-04-07)
- Fix display for zone completer existing values #845
- Proper badge display on dataset and organization page #849
- Remove useless
discussions
from views contexts. #850 - Fix the inline resource edit button not redirecting to admin #852
- Fix broken checksum component #846
1.0.6 (2017-04-01)
- Default values are properly displayed on dataset form #745
- Prevent a redirect on discussion fetch #795
- API exposes both original and biggest thumbnail for organization logo, reuse image and user avatar #824
- Restore the broken URL check feature #840
- Temporarily ignore INSPIRE in ODS harvester #837
- Allow
X-API-KEY
andX-Fields
in cors preflight headers #841
1.0.5 (2017-03-27)
- Fixes error display in forms #830
- Fixes date range picker dates validation #830
- Fix badges entries not showing in admin #825
1.0.4 (2017-03-01)
- Fix badges trying to use API too early #799
- Some minor tuning on generic references #801
- Cleanup factories #808
- Fix user default metrics not being set [migration] #809
- Fix metric update after transfer #810
- Improve spatial completion ponderation (spatial zones reindexation required) #811
1.0.3 (2017-02-21)
- Fix JavaScript locales handling #786
- Optimize images sizes for territory placeholders #788
- Restore placeholders in search suggestions, fix #790
- Fix share popover in production build #793
1.0.2 (2017-02-20)
- Fix assets packaging for production #763 #765
- Transform
udata_version
jinja global into a reusable (by themes)package_version
#768 - Ensure topics datasets and reuses can display event with a topic parameter #769
- Raise a
400 Bad Request
when a badclass
attribute is provided to the API (for entry point not using forms). #772 - Fix datasets with spatial coverage not being indexed #778
- Ensure theme assets cache is versioned (and flushed when necessary) #781
- Raise maximum tag length to 96 in order to at least support official INSPIRE tags #782
- Properly raise 400 error on transfer API in case of bad subject or recipient #784
- Fix broken OEmbed rendering #783
- Improve crawlers behavior by adding some
meta[name=robots]
on pages requiring it #777
1.0.1 (2017-02-16)
- Pin PyMongo version (only compatible with PyMongo 3+)
1.0.0 (2017-02-16)
Breaking Changes
- 2016-05-11: Upgrade of ElasticSearch from 1.7 to 2.3 #449
You have to re-initialize the index from scratch, not just use the reindex
command given that ElasticSearch 2+ doesn't provide a way to delete mappings anymore. The command is udata search init
and may take some time given the amount of data you are dealing with.
- 2017-01-18: User search and listing has been removed (privacy concern)
New & Improved
-
2017-01-06: Add some dataset ponderation factor: temporal coverage, spatial coverage, certified provenance and more weight for featured ones. Need reindexation to be taken into account.
-
2016-12-20: Use all the Dublin Core Frequencies plus some extra frequencies.
-
2016-12-01: Add the possibility for a user to delete its account in the admin interface
In some configurations, this feature should be deactivated, typically when there is an SSO in front of udata which may cause some inconsistencies. In that case, the configuration parameter DELETE_ME should be set to False (True by default).
- 2016-05-12: Add fields masks to reduce API payloads #451
The addition of fields masks in Flask-RESTPlus allows us to reduce the retrieved payload within the admin — especially for datasets — and results in a performances boost.
Fixes
- 2016-11-29: Mark active users as confirmed #619
- 2016-11-28: Merge duplicate users #617 (A reindexation is necessary after this migration)
Deprecation
Theses are deprecated and support will be removed in some feature release. See Deprecation Policy.
- Theses frequencies are deprecated for their Dublin Core counter part:
fortnighly
⇨biweekly
biannual
⇨semiannual
realtime
⇨continuous
0.9.0 (2017-01-10)
- First published version