Plone 4.3b1

AccessControl: 3.0.4 → 3.0.6
----------------------------

DateTime: 3.0.1 → 3.0.2
-----------------------

plone.recipe.zope2instance: 4.2.5 → 4.2.6
-----------------------------------------

- Use interpreter script instead of setting PYTHONPATH. Fixes Windows
  "the environment variable is longer than 32767 bytes" error.
  [rossp]
- Make the zope.conf http-server optional by setting http-address to
  an empty string. Useful for configurations used under an external
  server such as a WSGI deployment.
  [rossp]

experimental.cssselect: 0.1 → 0.3
---------------------------------

mailinglogger: 3.4.1 → 3.7
--------------------------

repoze.xmliter: 0.4 → 0.5
-------------------------

- Add __len__ to serializer to help WSGI servers.
  [Laurence]
- Serializer should iter the entire string in one go.
  [Laurence]

simplejson: 2.1.6 → 2.5.2
-------------------------

Plone: 4.3a2 → 4.3b1
--------------------

- Release Plone 4.3b1
  [esteele]

Products.ATContentTypes: 2.1.9 → 2.1.10
---------------------------------------

- change string ownership to creators as it makes more sense
  refs https://dev.plone.org/ticket/8725
  [maartenkling]
- Make sure ATTopic.queryCatalog cannot be published. This fixes
  https://plone.org/products/plone/security/advisories/20121106/14
  [davisagli]

Products.Archetypes: 1.8.4 → 1.8.6
----------------------------------

- Add missing security declarations on the UIDResolver class.
  https://plone.org/products/plone/security/advisories/20121106/08
  [davisagli]
- Sanitize input to go_back script. This fixes
  https://plone.org/products/plone/security/advisories/20121106/11
  [davisagli]
- Disallow downloading files via the at_download script if the user does not
  have the field's read_permission. This addresses a security vulnerability
  discussed at http://plone.org/products/plone/security/advisories/20121106/17
  [davisagli]
- Add minute_step to CalendarWidget so we can define another minute step than
  hardcoded 5 for now
  [gbastien]
- If form tabbing is allowed, make sure we can still track the current fieldset
  if form submission returns to the edit form.
  [davisagli]
- Fix inline validation for items in the portal_factory.
  [davisagli]
- Change used event to update metadata during copy&paste fixes #13326 and makes
  1.8.5 compatible with LinguaPlone again.
  [do3cc]

Products.CMFEditions: 2.2.6 → 2.2.7
-----------------------------------

- put back the history legend for compare/diff versions, fixes #9371
  [maartenkling]
- Site administrators do revisioning

Products.CMFPlacefulWorkflow: 1.5.8 → 1.5.9
-------------------------------------------

- Fixed handling of "update security" option.
  [ericof]

Products.CMFPlone: 4.3a2 → 4.3b1
--------------------------------

Products.contentmigration: 2.0.3 → 2.1.2
----------------------------------------

- When Joe is the Creator of an object and Jane is the Owner, make
  sure Joe stays the Creator after migrating.
  [maurits]
- Migrate marker interfaces.
  Fixes http://dev.plone.org/ticket/11424
  [maurits]
- Migrate extension fields too (archetypes.schemaextender).
  [maurits]
- Use obj.__parent__ instead of obj getParentNode() for Zope trunk
  compatibility.
  [elro]
- Add support for a limit option for the catalog based walkers, so it only
  tries to load up to limit items at a time, defaulting to no limit.
  [hannosch]
- Catch attribute errors during brain.getObject and log them instead of
  breaking the upgrade.
  [hannosch]

Products.ExtendedPathIndex: 3.0.1 → 3.1
---------------------------------------

- The behavior is inconsistent, because as long as the input path length is
  shorter or equal to the longest indexed path, there is no requirement that
  the entire path is indexed already.
  [bosim]

Products.PasswordResetTool: 2.0.9 → 2.0.10
------------------------------------------

- Use system random when available. This is part of the fix for
  https://plone.org/products/plone/security/advisories/20121106/24
  [davisagli]
- registered_notify_template.pt: show login name instead of user id.
  Normally this is the same, but this is not necessarily true when
  using the email address as login name.
  [maurits]

Products.PloneLanguageTool: 3.2.5 → 3.2.6
-----------------------------------------

- Do not try to get content language for resources that are not
  content. Fixes http://dev.plone.org/plone/ticket/11263
  [keul]

Products.PlonePAS: 4.1a2 → 4.1
------------------------------

- Fix assignRoleToPrincipal to work with new Products.PluggableAuthService 1.10.0.
  [maurits]
- Fix saving, getting and deleting the user portrait for non-standard
  user ids like 'bob-jones' or '<email address hidden>'.
  [maurits]
- Fix the test for the current password if the user id differs from
  the login name.
  [maurits]

Products.PortalTransforms: 2.1.1 → 2.1.2
----------------------------------------

- Adjust safe_html transform to block various XSS vulnerabilities. This fixes
  https://plone.org/products/plone/security/advisories/20121106/18
  [davisagli]

Products.ResourceRegistries: 2.2.3 → 2.2.4
------------------------------------------

- Add some space between up/down and remove links in ZMI
  [maartenking]

Products.TinyMCE: 1.3b6 → 1.3b8
-------------------------------

archetypes.referencebrowserwidget: 2.4.14 → 2.4.15
--------------------------------------------------

- Make new added references sortable with already existing ones
  while editing a content. Fixes http://dev.plone.org/plone/ticket/13271
  [gbastien]
- Use HTML5 placeholder attribute on search box. Replaces deprecated
  inputLabel class.
  [danjacka]

diazo: 1.0.2 → 1.0.3
--------------------

plone.app.blob: 1.5.4 → 1.5.5
-----------------------------

- Added adapter for data wrapped in xmlrpclib.Binary
  https://github.com/plone/plone.app.blob/pull/1
  [aclark, garbas]
- Fix BLOB migration when LinguaPlone is installed.
  [rpatterson]

plone.app.caching: 1.1.1 → 1.1.2
--------------------------------

- Add other feed types to plone.content.feed purge policy
  [vangheem]
- Fix bug where resource registries etag is calculated incorrectly if a registry
  is missing.
  [davisagli]
- Fix bug 12038. If transformIterable
  iterates on the 'result' iterable, it must return a new one.
  [ebrehault]

plone.app.collection: 1.0.6 → 1.0.7
-----------------------------------

- Check if item isPrincipiaFolderish instead of the hardcoded portal_type
  Folder when searching for images
  [ichimdav]
- Fix thumbnail_view so it works with any portal_atct image types not just
  with Image and News Items
  [ichimdav]
- properly show dates on tabular view, fixes #12907
  [maartenkling]

plone.app.contentmenu: 2.0.6 → 2.0.7
------------------------------------

- add prefix to id tag for display menu dropdown items, fixes #11927 and #10894
  [maartenkling]

plone.app.contentlisting: 1.0.2 → 1.0.4
---------------------------------------

- 1.0.4 (2013-01-01)
- Whoever heard I liked batching was wrong. The Catalog results are
  already batched, so don't batch them again.
  [lentinj]

plone.app.contentrules: 2.2 → 2.2.1
-----------------------------------

- Remove KSS dependency.
  [davisagli]

plone.app.controlpanel: 2.3.2 → 2.3.3
-------------------------------------

- Fix description of 'email as login' security setting. It said
  existing users could go to the personalize information page and save
  it to start using their email as login, but that no longer works and
  is too hard to fix. We now only recommend using the
  migrate-to-emaillogin page as manager.
  Fixes http://dev.plone.org/ticket/11283
  [maurits]
- Only show the inline editing setting if plone.app.kss is present.
  [davisagli]
- Fix as site administrator modify users in controlpanel
  when a user in the list is in administrator group, refs #12307
  [maartenkling]
- When browsing users and groups, clear searchstring when adding
  or removing. Also do not show search results then.
  [maurits]
- When browsing users and groups, clear searchstring when selecting
  show all.
  [maartenkling]
- Add error class to portalMessage when portalMessage contains error
  [maartenkling]
- Fix 'Redirect immediately to link target' setting doesn't stick #12892
  [maartenkling]
- Change title and description for permitted styles so its correct
  [maartenkling]
- Fix @@usergroup-groupmembership "Show All users" batching broken
  [maartenkling]

plone.app.dexterity: 2.0.1 → 2.0.2
----------------------------------

- Added French translations
  [cedricmessiant]
- The behavior controlpanel now correctly invalidates any modified FTIs.
  [malthe]
- I18n improved by adding many missing strings
  [giacomos]
- better graphical integration in the control panel
  [giacomos]
- Allow discussion behavior added.
  [timo]

plone.app.discussion: 2.2 → 2.2.2
---------------------------------

- first check if captcha is installed before we open browsers zcml
  files that depend on these packages, fixes #12118 and #12774
  [maartenkling]
- Make conversation view not break when comment-id cannot be converted to long.
  Fixes #13327
  [khink]
- fix insufficient privileges when trying to view
  the RSS feed of a comment collection
  [maartenkling]
- removed inline border=0 and move it to css
  [maartenkling]
- For migrations of comments without a valid old_status, apply the 'published'
  state.
  [thet]
- Re-apply eleddy's "Revert modification date since this is fixed in
  p.a.caching now." as her commit was lost later on due to some git magic.
  [thet]
- Remove submitting the controlpanel form again after removing disabled tags
  fixes #13037 and #12357
  [maartenkling]
- Remove inline styles, fixes #12399
  [maartenkling]
- add fallback border color for i8, fixes #11324
  [maartenkling]
- Replace discussionitem_icon.gif with png version.
  [timo]
- Fix catalog updates for IObjectMovedEvent
  [gaudenz]
- Fix non-functioning user_notification feature
  [izak]

plone.app.form: 2.2 → 2.2.1
---------------------------

- Finish removing KSS-based inline editing support.
  [davisagli]

plone.app.jquerytools: 1.5.1 → 1.5.2
------------------------------------

- Dont be so strong with regexp in overlayhelpers.js
  [garbas]

plone.app.layout: 2.3.2 → 2.3.3
-------------------------------

- Changed the behaviour of the title viewlet for items in the portal_factory.
  See https://dev.plone.org/ticket/12117
  [alert]
- Fix an edge case where getNavigationRootObject could loop infinitely.
  [davisagli]
- Add 'subsection' prefix to the all sections below to avoid classnames
  that start with digits, which is not permitted by the CSS standard.
  [erral]
- Display publication date only if Effective date is set, regardless of object
  state. Tickets:
  https://dev.plone.org/ticket/13045 and https://dev.plone.org/ticket/13046
  [vipod]

plone.app.locales: 4.2.2 → 4.2.4
--------------------------------

- Updated translations.
- Updated Romanian translation for ATContenttypes
  [ichimdav]
- Updated Finnish translations.

plone.app.portlets: 2.4 → 2.4.1
-------------------------------

- Navigation portlet: Add "section-XXX" class for the top node, useful for
  background colors/images.
  [kleist]
- Don't break if a feed does not have an "rel=alternate type=html" link. It is
  possible for a valid Atom feed to omit a <link rel="alternate" type="html"
  href="http://server.com"/> element which is available through the feedparser
  object as a feed.link attribute. If the feed does not have this element then
  the RSS portlet will throw an AttributeError which will propagate to the page
  preventing the original page from rendering. This changeset adds support for
  such feeds.
  [dokai]

plone.app.querystring: 1.0.6 → 1.0.7
------------------------------------

- getVocabularyValues now checks if the vocabulary utility is missing,
  if it is the utility is just ignored. This makes the module tollarant to
  missing vocabulary utilities.
  [bosim]

plone.app.search: 1.1 → 1.1.1
-----------------------------

- Fixed translation problem with the @@updated_search responses.
  [dokai]
- fix search results when having done a seach and switching out some
  items and doing the same search again, refs #12880
  [maartenkling, robgietema]
- only fill query when there is at least one type selected
  [maartenkling]
- Fixed Google Chrome and Safari search compatibility problem
  https://dev.plone.org/ticket/13249
  [Manabu TERADA]

plone.app.testing: 4.2 → 4.2.1
------------------------------

- Allow testing with non standard port. Allows running multiple test suites
  in parallel.
  [do3cc]
- Documentation updates.
  [moo]

plone.app.textfield: 1.2.1 → 1.2.2
----------------------------------

- Add support for collective.ckeditor.
  [tschorr]

plone.app.theming: 1.1b1 → 1.1b2
--------------------------------

- Ensure host blacklist utilises SERVER_URL to correctly determine hostname
  for sites hosted as sub-folders at any depth.
  [davidjb]
- Add test about plone.app.theming / plone.app.caching integration when
  using GZIP compression for anonymous
  (see ticket 12038). [ebrehault]

plone.app.upgrade: 1.3a2 → 1.3b1
--------------------------------

- Make sure the syndication upgrade step unregisters the old tool
  as a utility.
  [davisagli]
- Add upgrade for version 4.3b1 to make sure TinyMCE is upgraded.
  [davisagli]
- In the UID index migration, if there are items whose key is None,
  skip them instead of complaining about there being multiple items.
  [davisagli]

plone.app.viewletmanager: 2.0.2 → 2.0.3
---------------------------------------

- Hiding viewlets for skinname="*" was not working properly.
  Closes http://dev.plone.org/plone/ticket/10903
  [garbas, WouterVH]
- Add plone.app.vocabularies as dependency to get the list of existing skins.
  [WouterVH]
- Add MANIFEST.in.
  [WouterVH]

plone.app.workflow: 2.1 → 2.1.1
-------------------------------

- Extensibility improvement on sharing view so developers can easily
  override this view and change what groups are always displayed (STICKY).
  [ispburger]
- Use HTML5 placeholder attribute on Sharing tab search box. Replaces
  deprecated inputLabel class.
  [danjacka]

plone.app.z3cform: 0.7 → 0.7.1
------------------------------

- Overrode ObjectSubForm for IObject field in order to provide get_closest_content
  method. Now it is possible to guess the closest content from a Multiwidget subform.
  [gborelli]
- Added utils.closest_content from plone.formwidget.contenttree.utils
  [gborelli]
- Primarily use form name for 'kssattr-formname' form attribute.
  [vipod]
- Rename the 'fieldset.current' hidden input to 'fieldset' for consistency
  with Archetypes.
  [davisagli]

plone.cachepurging: 1.0.3 → 1.0.4
---------------------------------

- Fixed purge paths for virtual hosting scenarios using virtual path components.
  [dokai]

plone.dexterity: 2.0 → 2.1
--------------------------

- The default attribute accessor now also looks through subtypes
  (behaviors) to find a field default.
  [malthe]
- Added support in the FTI to look up behaviors by utility name when
  getting additional schemata (i.e. fields provided by behaviors).

  This functionality makes it possible to create a behavior where the
  interface is dynamically generated.
  [malthe]
- Return early for attributes that begin with two underscores.
  https://github.com/plone/plone.dexterity/pull/11
  [malthe]
- Make it possible to define a SchemaPolicy for the FTI
  [Frédéric Péters]
  [gbastien]

plone.formwidget.namedfile: 1.0.3 → 1.0.4
-----------------------------------------

- added french translation
  [tschanzt]
- added danish translation
  https://github.com/plone/plone.formwidget.namedfile/pull/2
  [tmog]

plone.indexer: 1.0 → 1.0.1
--------------------------

- Relicense under modified BSD license; per Plone Foundation board
  approval on 2012-05-31.
  See: http://plone.org/foundation/materials/foundation-resolutions/plone-framework-components-relicensing-policy
  [supton]
- Add MANIFEST.in.
  [WouterVH]

plone.intelligenttext: 2.0.1 → 2.0.2
------------------------------------

- Allows an easy way to extend the converter through subclassing.
  One might want to override the regexps, or modify the HTML that one of
  the replace* methods produces.
  https://github.com/plone/plone.intelligenttext/pull/1
  [dnouri]
- Add MANIFEST.in.
  [WouterVH]

plone.keyring: 2.0 → 2.0.1
--------------------------

- Use system random when available. This is part of the fix for
  https://plone.org/products/plone/security/advisories/20121106/24
  [davisagli]
- Add MANIFEST.in.
  [WouterVH]

plone.openid: 2.0 → 2.0.1
-------------------------

- Fixed to store timestamp as part of nonce. This fixes
  http://dev.plone.org/plone/ticket/11987
  [datakurre]
- Add MANIFEST.in.
  [WouterVH]

plone.outputfilters: 1.6 → 1.8
------------------------------

- Fix packaging issue.
  [esteele]
- When resolving images, only look upward for the full image if the
  image that was traversed is not a content item (i.e. is a scale).
  [davisagli, datakurre]
- Also convert "resolveUid/" links (big 'U') that FCKeditor used to create.
  [hacklschorsch]
- Also escape double quotes, fixes #13219
  [maartenkling]

plone.portlet.collection: 2.1.2 → 2.1.3
---------------------------------------

- Fix for #12274 - missing icons for some contenttypes.
  [spereverde]

plone.protect: 2.0 → 2.0.2
--------------------------

- Use constant time comparison to verify the authenticator. This is part of the
  fix for https://plone.org/products/plone/security/advisories/20121106/23
  [davisagli]
- Add MANIFEST.in.
  [WouterVH]
- Add ability to customize the token created.
  [vangheem]

plone.resource: 1.0.1 → 1.0.2
-----------------------------

- Nothing changed yet.

plone.resourceeditor: 1.0b3 → 1.0b4
-----------------------------------

- Fixed a bug with saving files containing non-ASCII characters.
  [optilude]

plone.rfc822: 1.0 → 1.0.1
-------------------------

- 1.0.1 (2013-01-01)

plone.session: 3.5 → 3.5.2
--------------------------

- Use constant time comparison when validating tickets. This is part of the fix
  for https://plone.org/products/plone/security/advisories/20121106/23
  [davisagli]
- Handle encoded strings for userids.
  [elro]
- Add MANIFEST.in.
  [WouterVH]
- Fix for Python 2.4 under 64bit Mac OS generating incorrect mod_auth_tkt
  digests
  [MatthewWilkes]

plone.subrequest: 1.6.6 → 1.6.7
-------------------------------

- Ensure correct handling of bare virtual hosting urls.
  [elro]

plone.supermodel: 1.2 → 1.2.1
-----------------------------

- Allow XML comments in field definitions.
  [gweis]

plone.testing: 4.0.6 → 4.0.7
----------------------------

- Fix quoting of urls by the testbrowser.
  [do3cc]

plonetheme.classic: 1.2.4 → 1.3
-------------------------------

- Reinstate positioning for magnifying glass image on search results
  Search button.
  [danjacka]
- Fix sitemap display by making styles more specific than #content ul.
  [danjacka]

plonetheme.sunburst: 1.3 → 1.3.1
--------------------------------

- Apply .portalMessage styling to reST admonitions
  https://github.com/plone/plonetheme.sunburst/pull/4
  [rpatterson]
- style reset on th for table.plain and IE9, fixes #11589
  [maartenkling]
- more specific Sunburst CSS on content-core dd, fixes #11840
  [maartenkling]

wicked: 1.1.9 → 1.1.10
----------------------

- Fix minor white space test failures in combination with chameleon.
  [maurits]

zope.schema: 4.2 → 4.2.2
------------------------

plone.formwidget.autocomplete: 1.2.3 → 1.2.4
--------------------------------------------

- Switch the default parser to use the title as the value, so that titles
  are used to autocomplete what's in the text input box.
  [lentinj]
- Add a custom parse function that defaults to an identical function to the
  default one.
  [lentinj]

z3c.relationfield: 0.6.1 → 0.6.2
--------------------------------