|
95 | 95 | <section id="blog-list">
|
96 | 96 | <h1>Blog</h1>
|
97 | 97 |
|
| 98 | + <article class="blog-list"> |
| 99 | + <div class="header"> |
| 100 | + <a href="/blog/kiwi-tcms-team/2023/05/22/kiwi-tcms-123/" rel="bookmark" title="Permalink to Kiwi TCMS 12.3"> |
| 101 | + <h1 class="top-header">Kiwi TCMS 12.3</h1> |
| 102 | + </a> |
| 103 | + |
| 104 | + <p class="post-meta">Posted by |
| 105 | + <a href="/blog/kiwi-tcms-team/">Kiwi TCMS Team</a> |
| 106 | + on Mon 22 May 2023 |
| 107 | + </p> |
| 108 | + </div> |
| 109 | + |
| 110 | + <div class="content"> |
| 111 | + <p>We're happy to announce Kiwi TCMS version 12.3!</p> |
| 112 | +<p><strong>IMPORTANT:</strong> this is a small release which contains security related updates, |
| 113 | +general improvements and new translations!</p> |
| 114 | +<p>You can explore everything at |
| 115 | +<a class="reference external" href="https://public.tenant.kiwitcms.org/">https://public.tenant.kiwitcms.org</a>!</p> |
| 116 | +<blockquote> |
| 117 | +<p>Supported upgrade paths:</p> |
| 118 | +<pre class="literal-block"> |
| 119 | +5.3 (or older) -> 5.3.1 |
| 120 | +5.3.1 (or newer) -> 6.0.1 |
| 121 | +6.0.1 -> 6.1 |
| 122 | +6.1 -> 6.1.1 |
| 123 | +6.1.1 -> 6.2 (or newer) |
| 124 | +</pre> |
| 125 | +</blockquote> |
| 126 | +<p>---</p> |
| 127 | +<blockquote> |
| 128 | +<p>Upstream container images (x86_64):</p> |
| 129 | +<pre class="literal-block"> |
| 130 | +kiwitcms/kiwi latest 1cbaba8640d9 594MB |
| 131 | +</pre> |
| 132 | +</blockquote> |
| 133 | +<p><strong>IMPORTANT:</strong> version tagged and multi-arch |
| 134 | +<a class="reference external" href="/containers/">container</a> images are available only to |
| 135 | +<a class="reference external" href="/#subscriptions">subscribers</a>!</p> |
| 136 | +<div class="section" id="changes-since-kiwi-tcms-12-2"> |
| 137 | +<h2>Changes since Kiwi TCMS 12.2</h2> |
| 138 | +<div class="section" id="security"> |
| 139 | +<h3>Security</h3> |
| 140 | +<ul class="simple"> |
| 141 | +<li>Update Django from 4.1.8 to 4.2.1 which contains a fix for |
| 142 | +<a class="reference external" href="https://docs.djangoproject.com/en/4.2/releases/4.2.1/">CVE-2023-31047</a>. |
| 143 | +We believe this does not affect Kiwi TCMS</li> |
| 144 | +<li>Implement better scanning for embedded <tt class="docutils literal"><script></tt> tags in uploaded files</li> |
| 145 | +<li>Force <tt class="docutils literal"><span class="pre">Content-Type:</span> text/plain</tt> when serving uploaded files. See |
| 146 | +<a class="reference external" href="https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-x7c2-7wvg-jpx7">GHSA-x7c2-7wvg-jpx7</a></li> |
| 147 | +<li>Explicitly configure top-level permissions for CI jobs as <tt class="docutils literal"><span class="pre">read-all</span></tt></li> |
| 148 | +<li>Pass untrusted input via intermediate ENV variables in CI jobs</li> |
| 149 | +</ul> |
| 150 | +</div> |
| 151 | +<div class="section" id="improvements"> |
| 152 | +<h3>Improvements</h3> |
| 153 | +<ul class="simple"> |
| 154 | +<li>Update nginx from 1.20 to 1.22</li> |
| 155 | +<li>Update django-grappelli from 3.0.5 to 3.0.6</li> |
| 156 | +<li>Update pygithub from 1.58.1 to 1.58.2</li> |
| 157 | +<li>Add Helm chart examples (Michael Abramovich)</li> |
| 158 | +</ul> |
| 159 | +</div> |
| 160 | +<div class="section" id="refactoring-and-testing"> |
| 161 | +<h3>Refactoring and testing</h3> |
| 162 | +<ul class="simple"> |
| 163 | +<li>Update node_modules/webpack-cli from 5.0.1 to 5.1.1</li> |
| 164 | +<li>Update node_modules/webpack from 5.80.0 to 5.83.1</li> |
| 165 | +<li>Update node_modules/eslint from 8.38.0 to 8.40.0</li> |
| 166 | +<li>Update tests/bugzilla/fedora from 37 to 38</li> |
| 167 | +<li>Enable the checkov static linter</li> |
| 168 | +</ul> |
| 169 | +</div> |
| 170 | +<div class="section" id="translations"> |
| 171 | +<h3>Translations</h3> |
| 172 | +<ul class="simple"> |
| 173 | +<li>Updated <a class="reference external" href="https://crowdin.com/project/kiwitcms/ru#">Russian translation</a></li> |
| 174 | +</ul> |
| 175 | +</div> |
| 176 | +</div> |
| 177 | +<div class="section" id="kiwi-tcms-enterprise-v12-3-mt"> |
| 178 | +<h2>Kiwi TCMS Enterprise v12.3-mt</h2> |
| 179 | +<ul> |
| 180 | +<li><p class="first">Based on Kiwi TCMS v12.3</p> |
| 181 | +</li> |
| 182 | +<li><p class="first">Update dj-database-url from 1.3.0 to 2.0.0</p> |
| 183 | +</li> |
| 184 | +<li><p class="first">Update django-ses from 3.3.0 to 3.5.0</p> |
| 185 | +</li> |
| 186 | +<li><p class="first">Update kiwitcms-tenants from 2.5.0 to 2.5.1</p> |
| 187 | +</li> |
| 188 | +<li><p class="first">Explicitly set permissions to read-all</p> |
| 189 | +</li> |
| 190 | +<li><p class="first">Enable checkov linter</p> |
| 191 | +<blockquote> |
| 192 | +<p>Private images:</p> |
| 193 | +<pre class="literal-block"> |
| 194 | +quay.io/kiwitcms/version 12.3 (aarch64) 8bf8cd56c565 22 May 2023 601MB |
| 195 | +quay.io/kiwitcms/version 12.3 (x86_64) 1cbaba8640d9 22 May 2023 592MB |
| 196 | +quay.io/kiwitcms/enterprise 12.3-mt (aarch64) 36d6670c3fca 22 May 2023 845MB |
| 197 | +quay.io/kiwitcms/enterprise 12.3-mt (x86_64) e769e6bdb5c1 22 May 2023 835MB |
| 198 | +</pre> |
| 199 | +</blockquote> |
| 200 | +</li> |
| 201 | +</ul> |
| 202 | +<p><strong>IMPORTANT:</strong> version tagged, multi-arch and Enterprise |
| 203 | +<a class="reference external" href="/containers/">container</a> images are available only to |
| 204 | +<a class="reference external" href="/#subscriptions">subscribers</a>!</p> |
| 205 | +</div> |
| 206 | +<div class="section" id="how-to-upgrade"> |
| 207 | +<h2>How to upgrade</h2> |
| 208 | +<p><a class="reference external" href="/blog/atodorov/2018/07/30/how-to-backup-docker-volumes-for-kiwi-tcms/">Backup</a> first! |
| 209 | +Then execute the commands:</p> |
| 210 | +<pre class="literal-block"> |
| 211 | +cd path/containing/docker-compose/ |
| 212 | +docker-compose down |
| 213 | +docker-compose pull |
| 214 | +docker-compose up -d |
| 215 | +docker exec -it kiwi_web /Kiwi/manage.py upgrade |
| 216 | +</pre> |
| 217 | +<p>Refer to |
| 218 | +<a class="reference external" href="https://kiwitcms.readthedocs.io/en/latest/installing_docker.html#upgrading">our documentation</a> |
| 219 | +for more details!</p> |
| 220 | +<p>Happy testing!</p> |
| 221 | +<p>---</p> |
| 222 | +<p>If you like what we're doing and how Kiwi TCMS supports various communities |
| 223 | +please help us grow!</p> |
| 224 | +<ul class="simple"> |
| 225 | +<li><a class="reference external" href="https://github.com/kiwitcms/Kiwi/stargazers">Give ⭐ on GitHub</a>;</li> |
| 226 | +<li><a class="reference external" href="https://gitlab.com/gitlab-org/gitlab/-/issues/334558">Give 👍 on GitLab</a>;</li> |
| 227 | +<li><a class="reference external" href="https://opencollective.com/kiwitcms/donate">Donate via Open Collective</a> as low as 1 EUR;</li> |
| 228 | +<li><a class="reference external" href="https://kiwitcms.us17.list-manage.com/subscribe/post?u=9b57a21155a3b7c655ae8f922&id=c970a37581">Join our newsletter</a> |
| 229 | +and follow all project news;</li> |
| 230 | +<li><a class="reference external" href="https://kiwitcms.readthedocs.io/en/latest/contribution.html">Become a contributor</a> |
| 231 | +and an awesome open source hacker;</li> |
| 232 | +<li><a class="reference external" href="/#subscriptions">Become a subscriber</a> and help us sustain development</li> |
| 233 | +</ul> |
| 234 | +</div> |
| 235 | + |
| 236 | + </div> |
| 237 | + </article> |
98 | 238 | <article class="blog-list">
|
99 | 239 | <div class="header">
|
100 | 240 | <a href="/blog/kiwi-tcms-team/2023/04/23/kiwi-tcms-122/" rel="bookmark" title="Permalink to Kiwi TCMS 12.2">
|
@@ -2219,167 +2359,6 @@ <h1 class="top-header">Container Registry Credentials for Subscribers</h1>
|
2219 | 2359 | <p>Happy Testing!</p>
|
2220 | 2360 | </div>
|
2221 | 2361 | </article>
|
2222 |
| - <article class="blog-list"> |
2223 |
| - <div class="header"> |
2224 |
| - <a href="/blog/kiwi-tcms-team/2022/02/02/kiwi-tcms-111/" rel="bookmark" title="Permalink to Kiwi TCMS 11.1"> |
2225 |
| - <h1 class="top-header">Kiwi TCMS 11.1</h1> |
2226 |
| - </a> |
2227 |
| - |
2228 |
| - <p class="post-meta">Posted by |
2229 |
| - <a href="/blog/kiwi-tcms-team/">Kiwi TCMS Team</a> |
2230 |
| - on Wed 02 February 2022 |
2231 |
| - </p> |
2232 |
| - </div> |
2233 |
| - |
2234 |
| - <div class="content"> |
2235 |
| - <p>We're happy to announce Kiwi TCMS version 11.1.</p> |
2236 |
| -<p><strong>IMPORTANT:</strong> |
2237 |
| -This is a small release which contains security related updates, several improvements, |
2238 |
| -bug fixes and new translations!</p> |
2239 |
| -<p>You can explore everything at |
2240 |
| -<a class="reference external" href="https://public.tenant.kiwitcms.org/">https://public.tenant.kiwitcms.org</a>!</p> |
2241 |
| -<blockquote> |
2242 |
| -<p>Supported upgrade paths:</p> |
2243 |
| -<pre class="literal-block"> |
2244 |
| -5.3 (or older) -> 5.3.1 |
2245 |
| -5.3.1 (or newer) -> 6.0.1 |
2246 |
| -6.0.1 -> 6.1 |
2247 |
| -6.1 -> 6.1.1 |
2248 |
| -6.1.1 -> 6.2 (or newer) |
2249 |
| -</pre> |
2250 |
| -</blockquote> |
2251 |
| -<p>---</p> |
2252 |
| -<blockquote> |
2253 |
| -<p>Container images:</p> |
2254 |
| -<pre class="literal-block"> |
2255 |
| -kiwitcms/kiwi latest 72099aa8ee93 629 MB |
2256 |
| -kiwitcms/kiwi 6.2 7870085ad415 957 MB |
2257 |
| -kiwitcms/kiwi 6.1.1 49fa42ddfe4d 955 MB |
2258 |
| -kiwitcms/kiwi 6.1 b559123d25b0 970 MB |
2259 |
| -kiwitcms/kiwi 6.0.1 87b24d94197d 970 MB |
2260 |
| -kiwitcms/kiwi 5.3.1 a420465852be 976 MB |
2261 |
| -</pre> |
2262 |
| -</blockquote> |
2263 |
| -<p><strong>IMPORTANT:</strong> version tagged |
2264 |
| -<a class="reference external" href="/containers/">container</a> images are available only to |
2265 |
| -<a class="reference external" href="/#subscriptions">subscribers</a>!</p> |
2266 |
| -<div class="section" id="changes-since-kiwi-tcms-11-0"> |
2267 |
| -<h2>Changes since Kiwi TCMS 11.0</h2> |
2268 |
| -<div class="section" id="security"> |
2269 |
| -<h3>Security</h3> |
2270 |
| -<ul class="simple"> |
2271 |
| -<li>Update Django from 3.2.10 to 4.0.2 to fix several fulnerabilities: |
2272 |
| -CVE-2022-22818, CVE-2022-23833, CVE-2021-45115, CVE-2021-45116, |
2273 |
| -CVE-2021-45452. Of those we believe that only |
2274 |
| -<em>CVE-2022-23833: Denial-of-service possibility in file uploads</em> may directly |
2275 |
| -impact Kiwi TCMS</li> |
2276 |
| -</ul> |
2277 |
| -</div> |
2278 |
| -<div class="section" id="improvements"> |
2279 |
| -<h3>Improvements</h3> |
2280 |
| -<ul class="simple"> |
2281 |
| -<li>Update django-contrib-comments from 2.1.0 to 2.2.0</li> |
2282 |
| -<li>Update django-uuslug from 1.2.0 to 2.0.0</li> |
2283 |
| -<li>Update python-gitlab from 3.1.0 to 3.1.1</li> |
2284 |
| -<li>Update node_modules/marked from 4.0.10 to 4.0.12</li> |
2285 |
| -</ul> |
2286 |
| -</div> |
2287 |
| -<div class="section" id="database"> |
2288 |
| -<h3>Database</h3> |
2289 |
| -<ul class="simple"> |
2290 |
| -<li>New migration for django-simple-captcha</li> |
2291 |
| -</ul> |
2292 |
| -</div> |
2293 |
| -<div class="section" id="settings"> |
2294 |
| -<h3>Settings</h3> |
2295 |
| -<ul class="simple"> |
2296 |
| -<li><tt class="docutils literal">RECAPTCHA_PUBLIC_KEY</tt>, <tt class="docutils literal">RECAPTCHA_PRIVATE_KEY</tt> and <tt class="docutils literal">RECAPTCHA_USE_SSL</tt> |
2297 |
| -are no longer in use</li> |
2298 |
| -<li>New setting <tt class="docutils literal">USE_CAPTCHA</tt>, defaults to True</li> |
2299 |
| -<li>The string "captcha" is added to <tt class="docutils literal">INSTALLED_APPS</tt></li> |
2300 |
| -</ul> |
2301 |
| -</div> |
2302 |
| -<div class="section" id="bug-fixes"> |
2303 |
| -<h3>Bug fixes</h3> |
2304 |
| -<ul class="simple"> |
2305 |
| -<li>Fix inappropriate RPC calls causing Version and Build dropdown widgets to |
2306 |
| -display no values. Fixes |
2307 |
| -<a class="reference external" href="https://github.com/kiwitcms/Kiwi/issues/2704">Issue #2704</a></li> |
2308 |
| -</ul> |
2309 |
| -</div> |
2310 |
| -<div class="section" id="refactoring-and-testing"> |
2311 |
| -<h3>Refactoring and testing</h3> |
2312 |
| -<ul class="simple"> |
2313 |
| -<li>Add <tt class="docutils literal">tzdata</tt> to requirements</li> |
2314 |
| -<li>Replace django-recaptcha with django-simple-captcha</li> |
2315 |
| -<li>Adjust /init-db view to reliably detect when applying database migrations |
2316 |
| -is complete and not exit prematurely</li> |
2317 |
| -</ul> |
2318 |
| -</div> |
2319 |
| -<div class="section" id="translations"> |
2320 |
| -<h3>Translations</h3> |
2321 |
| -<ul class="simple"> |
2322 |
| -<li>Updated <a class="reference external" href="https://crowdin.com/project/kiwitcms/sl#">Slovenian translation</a></li> |
2323 |
| -</ul> |
2324 |
| -</div> |
2325 |
| -</div> |
2326 |
| -<div class="section" id="kiwi-tcms-enterprise-v11-1-mt"> |
2327 |
| -<h2>Kiwi TCMS Enterprise v11.1-mt</h2> |
2328 |
| -<ul> |
2329 |
| -<li><p class="first">Based on Kiwi TCMS v11.1</p> |
2330 |
| -</li> |
2331 |
| -<li><p class="first">Update kiwitcms-github-app from 1.3.2 to 1.3.3</p> |
2332 |
| -</li> |
2333 |
| -<li><p class="first">Update django-ses from 2.3.1 to 2.4.0</p> |
2334 |
| -</li> |
2335 |
| -<li><p class="first">Update python3-saml from 1.12.0 to 1.13.0</p> |
2336 |
| -</li> |
2337 |
| -<li><p class="first">Workaround UnicodeDecodeError while building the docker image</p> |
2338 |
| -<blockquote> |
2339 |
| -<p>Private images:</p> |
2340 |
| -<pre class="literal-block"> |
2341 |
| -quay.io/kiwitcms/enterprise 11.1-mt df5ce509fd41 854 MB |
2342 |
| -quay.io/kiwitcms/version 11.1 72099aa8ee93 629 MB |
2343 |
| -</pre> |
2344 |
| -</blockquote> |
2345 |
| -</li> |
2346 |
| -</ul> |
2347 |
| -<p><strong>IMPORTANT:</strong> version tagged and Enterprise |
2348 |
| -<a class="reference external" href="/containers/">container</a> images are available only to |
2349 |
| -<a class="reference external" href="/#subscriptions">subscribers</a>!</p> |
2350 |
| -</div> |
2351 |
| -<div class="section" id="how-to-upgrade"> |
2352 |
| -<h2>How to upgrade</h2> |
2353 |
| -<p><a class="reference external" href="/blog/atodorov/2018/07/30/how-to-backup-docker-volumes-for-kiwi-tcms/">Backup</a> first! |
2354 |
| -Then execute the commands:</p> |
2355 |
| -<pre class="literal-block"> |
2356 |
| -cd path/containing/docker-compose/ |
2357 |
| -docker-compose down |
2358 |
| -docker-compose pull |
2359 |
| -docker-compose up -d |
2360 |
| -docker exec -it kiwi_web /Kiwi/manage.py migrate |
2361 |
| -</pre> |
2362 |
| -<p>Refer to |
2363 |
| -<a class="reference external" href="https://kiwitcms.readthedocs.io/en/latest/installing_docker.html#upgrading">our documentation</a> |
2364 |
| -for more details!</p> |
2365 |
| -<p>Happy testing!</p> |
2366 |
| -<p>---</p> |
2367 |
| -<p>If you like what we're doing and how Kiwi TCMS supports various communities |
2368 |
| -please help us!</p> |
2369 |
| -<ul class="simple"> |
2370 |
| -<li><a class="reference external" href="https://github.com/kiwitcms/Kiwi/stargazers">Give ⭐ on GitHub</a>;</li> |
2371 |
| -<li><a class="reference external" href="https://gitlab.com/gitlab-org/gitlab/-/issues/334558">Give 👍 on GitLab</a>;</li> |
2372 |
| -<li><a class="reference external" href="https://opencollective.com/kiwitcms/donate">Donate via Open Collective</a> as low as 1 EUR;</li> |
2373 |
| -<li><a class="reference external" href="https://kiwitcms.us17.list-manage.com/subscribe/post?u=9b57a21155a3b7c655ae8f922&id=c970a37581">Join our newsletter</a> |
2374 |
| -and follow all project news;</li> |
2375 |
| -<li><a class="reference external" href="https://kiwitcms.readthedocs.io/en/latest/contribution.html">Become a contributor</a> |
2376 |
| -and an awesome open source hacker;</li> |
2377 |
| -<li><a class="reference external" href="/#subscriptions">Become a subscriber</a> and help us sustain development</li> |
2378 |
| -</ul> |
2379 |
| -</div> |
2380 |
| - |
2381 |
| - </div> |
2382 |
| - </article> |
2383 | 2362 |
|
2384 | 2363 | <section id="pagination">
|
2385 | 2364 | <a href="/blog/index.html" class="btn" icon="reversed"><i reversed></i> Newer Posts </a>
|
|
0 commit comments