diff options
Diffstat (limited to 'ReleaseNotes/ReleaseNotes-2.0.19.txt')
| -rw-r--r-- | ReleaseNotes/ReleaseNotes-2.0.19.txt | 372 |
1 files changed, 0 insertions, 372 deletions
diff --git a/ReleaseNotes/ReleaseNotes-2.0.19.txt b/ReleaseNotes/ReleaseNotes-2.0.19.txt deleted file mode 100644 index c9d9c561a6..0000000000 --- a/ReleaseNotes/ReleaseNotes-2.0.19.txt +++ /dev/null @@ -1,372 +0,0 @@ -= Release notes for Gerrit 2.0.19, 2.0.19.1, 2.0.19.2 - -Gerrit 2.0.19.2 is now available in the usual location: - -link:https://www.gerritcodereview.com/download/index.html[https://www.gerritcodereview.com/download/index.html] - -== Important Notices - -* Prior User Sessions -+ -The cookie used to identify a signed-in user has been changed. All users -will be automatically signed-out during this upgrade, and will need to -sign-in again after the upgrade is complete. -Users who try to use a web session from before the upgrade may receive the -obtuse error message "Invalid xsrfKey in request". Prior web clients are -misinterpreting the error from the server. Users need to sign-out and -sign-in again to pick up a new session. -This change was necessary to close GERRIT-83, see below. - -* Preserving Sessions Across Restarts -+ -Administrators who wish to preserve user sessions across server restarts must -set [http://gerrit.googlecode.com/svn/documentation/2.0/config-gerrit.html#cache.directory cache.directory] in gerrit.config. This allows Gerrit to flush the set -of active sessions to disk during shutdown, and load them back during startup. - -== Schema Change - -*WARNING: This version contains a schema change* (since 2.0.18) - -Important notes about this schema change: - -* Do not run the schema change while the server is running. -+ -This upgrade adds a new required column to the changes table, something -which cannot be done while users are creating records. Like .18, I _strongly_ -suggest a full shutdown, schema upgrade, then startup approach. -Apply the database specific schema script: ----- - java -jar gerrit.war --cat sql/upgrade016_017_postgres.sql | psql reviewdb - java -jar gerrit.war --cat sql/upgrade016_017_mysql.sql | mysql reviewdb ----- - - -== New Features -* New ssh create-project command -+ -Thanks to Ulrik Sjölin we now have `gerrit create-project` -available over SSH, to construct a new repository and database -record for a project. Documentation has also been updated to -reflect that the command is now available. - -* Be more liberal in accepting Signed-off-by lines -+ -The "Require Signed-off-by line" feature in a project is now -more liberal. Gerrit now requires that the commit be signed off -by either the author or the committer. This was relaxed because -kernel developers often cherry-pick in patches signed off by -the author and by Linus Torvalds, but not by the committer who -did the backport cherry-pick. - -* Allow cache.name.diskLimit = 0 to disable on disk cache -+ -Setting cache.name.diskLimit to 0 will disable the disk for -that cache, even though cache.directory was set. This allows -sites to set cache.diff.diskLimit to 0 to avoid caching the diff -records on disk, but still allow caching web_sessions to disk, -so that live sessions are maintained across server restarts. -This is a change in behavior, the prior meaning of diskLimit = -0 was "unlimited", which is not very sane given how Ehcache -manages the on disk cache files. - -* Allow human-readable units in config.name.maxage -+ -Timeouts for any cache.name.maxAge may now be specified in human -readable units, such as "12 days" or "3 hours". The server will -automatically convert them to minutes during parsing. If no -unit is specified, minutes are assumed, to retain compatibility -with prior releases. - -* Add native LDAP support to Gerrit -+ -Gerrit now has native LDAP support. Setting auth.type to -HTTP_LDAP and then configuring the handful of ldap properties -in gerrit.config will allow Gerrit to load group membership -directly from the organization's LDAP server. This replaces -the need for the sync-groups script posted in the wiki. See: -link:http://gerrit.googlecode.com/svn/documentation/2.0/config-gerrit.html#ldap[http://gerrit.googlecode.com/svn/documentation/2.0/config-gerrit.html#ldap] -If you use the sync-groups script from the wiki page, you would -also need to delete the group members after upgrading, to remove -unnecessary records in your database: -{{{ -DELETE FROM account_group_members -WHERE group_id IN ( -SELECT group_id FROM account_groups -WHERE automatic_membership = 'Y'); -}}} - -* Don't allow users to edit their name if it comes from LDAP -+ -User information loaded from LDAP, such as full name or SSH -username, cannot be modified by the end-user. This allows the -Gerrit site administrator to require that users conform to the -standard information published by the organization's directory -service. Updates in LDAP are automatically reflected in Gerrit -the next time the user signs-in. - -* Remembers anchor during HTTP logins -+ -When using an HTTP SSO product, clicking on a Gerrit link received -out-of-band (e.g. by email or IM) often required clicking the -link twice. On the first click Gerrit redirect you to the -organization's single-sign-on authentication system, which upon -success redirected to your dashboard. The actual target of the -link was often lost, so a second click was required. -With .19 and later, if the administrator changes the frontend web -server to perform authentication only for the /login/ subdirectory -of Gerrit, this can be avoided. For example with Apache: ----- - <Location "/login/"> - AuthType Basic - AuthName "Gerrit Code Review" - Require valid-user - ... - </Location> ----- - During a request for an arbitrary URL, such as '/#change,42', - Gerrit realizes the user is not logged in. Instead of sending an - immediate redirect for authentication, Gerrit sends JavaScript - to save the target token (the part after the '#' in the URL) - by redirecting the user to '/login/change,42'. This enters - the secured area, and performs the authentication. When the - authenticated user returns to '/login/change,42' Gerrit sends - a redirect back to the original URL, '/#change,42'. - - -* Create check_schema_version during schema creation -+ -Schema upgrades for PostgreSQL now validate that the current -schema version matches the expected schema version at the start -of the upgrade script. If the schema does not match, the script -aborts, although it will spew many errors. - -* Reject disconnected ancestries when creating changes -+ -Uploading commits to a project now requires that the new commits -share a common ancestry with the existing commits of that project. -This catches and prevents problems caused by a user making a typo -in the project name, and inadvertently selecting the wrong project. - -* Change-Id tags in commit messages to associate commits -+ -Gerrit now looks for 'Change-Id: I....' in the footer area of a -commit message and uses this to identify a change record within -the project. -If the listed Change-Id has not been seen before, a new change -record is created. If the Change-Id is already known, Gerrit -updates the change with the new commit. This simplifies updating -multiple changes at once, such as might happen when rebasing an -entire series of commits that are still being reviewed. -A commit-msg hook can be installed to automatically generate -these Change-Id lines during initial commit: -{{{ -scp -P 29418 review.example.com:hooks/commit-msg .git/hooks/ -}}} -Using this hook ensures that the Change-Id is predicatable once -the commit is uploaded for review. -For more details, please see the docs: -link:http://gerrit.googlecode.com/svn/documentation/2.0/user-changeid.html[http://gerrit.googlecode.com/svn/documentation/2.0/user-changeid.html] - -== Bug Fixes -* Fix yet another ArrayIndexOutOfBounds during side-by-s... -+ -We found yet another bug with the side-by-side view failing -under certain conditions. I think this is the last bug. - -* Apply URL decoding to parameter of /cat/ -* Fix old image when shown inline in unified diff -+ -Images weren't displaying correctly, even though -mimetype.image/png.safe was true in gerrit.config. -Turned out to be a problem with the parameter decoding of the -/cat/ servlet, as well as the link being generated wrong. - -* Fix high memory usage seen in `gerrit show-caches` -+ -In Gerrit 2.0.18 JGit had a bug where the repository wasn't being -reused in memory. This meant that we were constantly reloading -the repository data in from disk, so the server was always maxed -out at core.packedGitLimit and core.packedGitOpenFiles, as no -data was being reused from the cache. Fixed in this release. - -* Fix display of timeouts in `gerrit show-caches` -+ -Timeouts were not always shown correctly, sometimes 12 hours -was showing up as 2.5 days, which is completely wrong. Fixed. - -* GERRIT-261 Fix reply button when comment is on the last line -+ -The "Reply" button didn't work if the comment was on the last -line of the file, the browser caught an array index out of -bounds exception as we walked off the end of the table looking -for where to insert the new editor box. - -* GERRIT-83 Make sign-out really invalidate the user's session -+ -The sign-out link now does more than delete the cookie from the -user's browser, it also removes the token from the server side. -By removing it from the server, we prevent replay attacks where -an attacker has observed the user's cookie and then later tries -to issue their own requests with the user's cookie. Note that -this sort of attack is difficult if SSL is used, as the attacker -would have a much more difficult time of sniffing the user's -cookie while it was still live. - -* Evict account record after changing SSH username -+ -Changing the SSH username on the web immediately affected the -SSH daemon, but the web still showed the old username. This -was due to the change operation not flushing the cache that -the web code was displaying from. Fixed. - -* Really don't allow commits to replace in wrong project -+ -It was possible for users to upload replacement commits to the -wrong project, e.g. uploading a replacement commit to project -B while picking a change number from project A. Fixed. - -== =Fixes in 2.0.19.1= - -* Fix NPE during direct push to branch closing a change -+ -Closing changes by pushing their commits directly into the branch didn't -always work as expected, due to some data not being initialized correctly. - -* Ignore harmless "Pipe closed" in scp command -+ -scp command on the server side threw exceptions when a client aborted the -data transfer. We typically don't care to log such cases. - -* Refactor user lookup during permission checking -* GERRIT-264 Fix membership in Registered Users group -+ -Users were not a member of "Registered Users", this was a rather serious -bug in the code as it meant many users lost their access rights. - -* GERRIT-265 Correctly catch "Invalid xsrfKey in request" error as ... -+ -Above I mentioned we should handle this error as "Not Signed In", only -the pattern match wasn't quite right. Fixed. - -* GERRIT-263 Fix --re=bob to match bob@example.com when using HTTP_LDAP -+ -HTTP_LDAP broke using local usernames to match an account. Fixed. - -== =Fixes in 2.0.19.2= -* Don't line wrap project or group names in admin panels -+ -Line wrapping group names like "All Users" when the description column -has a very long name in it is ugly. - -* GERRIT-267 Don't add users to a change review if they cannot access -+ -If a user cannot access a change, let the owner know when they try to -add the user as a reviewer, or CC them on it. - -* commit-msg: Do not insert Change-Id if the message is ... -+ -The commit-msg hook didn't allow users to abort accidental git commit -invocations, as it still modified the file, making git commit think -that the end-user wanted to make a commit. Anyone who has a copy of -the hook should upgrade to the new hook, if possible. - -* Support recursive queries against LDAP directories -* Fix parsing of LDAP search scope properties -+ -As reported on repo-discuss, recursive search is sometimes necessary, -and is now the default. - -== Removed Features - -* Remove support for /user/email style URLs -+ -I decided to remove this URL, its a pain to support and not -discoverable. Its unlikely anyone is really using it, but if -they are, they could try using "#q,owner:email,n,z" instead. - -== Other Changes - -* Start 2.0.19 development -* Document the Failure and UnloggedFailure classes in Ba... -* Merge change 11109 -* Document gerrit receive-pack is alias for git receive-... -* Define a simple query language for Gerrit -* Create new projects on remote systems with mkdir -p -* Set the GIT_DIR/description file during gerrit create-... -* Remove unnecessary toLowerCase calls in AdminCreatePro... -* Remove unnecessary exception from AdminCreateProject -* Remove unused import from AccountExternalId -* Abstract out account creation and simplify sign-on for... -* Implement server side sign-out handling -* Cleanup private keys in system_config table -* Remove dead max_session_age field from system_config -* Report 'Invalid xsrfKey' as 'Not Signed In' -* Update gerrit flush-caches documentation about web_ses... -* Update documentation on cache "web_sessions" configura... -* Add getSchemeRest to AccountExternalId -* Cleanup ContactStore and WebModule injection -* Catch Bouncy Castle Crypto not installed when loading ... -* Declare caches in Guice rather than hardcoded in Cache... -* Remove old commented out cache configuration code -* Don't NPE in SSH keys panel when SSHD is bound to loca... -* Don't send users to #register,register,mine -* Document the new LDAP support -* Cleanup section anchors to be more useful -* Put anchors on every configuration variable section -* Add missing AOSP copyright header to WebSession -* Fix short header lines in gerrit-config.txt -* Update documentation about system_config private key f... -* Fetch groups from LDAP during user authentication -* Actually honor cache.ldap_groups.maxage -* Add enum parsing support to ConfigUtil -* Rename LoginType to AuthType -* Support loading the sshUserName from LDAP -* Change ldap.accountDisplayName to ldap.accountFullName -* Fix parsing set-to-nothing options in ldap section -* Report more friendly errors from gwtjsonrpc -* Ensure dialog box displays correctly on network failure -* Document how setting LDAP properties disables web UI -* Ensure the commit body is parsed before getting the co... -* Cleanup more section anchors -* Make documentation table of contents anchors human rea... -* Remove notes about HTML 5 offline support -* Fix typo in LegacyGerritServlet javadoc -* Use subList in server side change query code -* Remove unsupported /all_unclaimed -* Rewrite UrlRewriteFilter in terms of Guice bindings -* Create a commit-msg hook to generate Change-Id tags -* Add change_key to changes table in database -* Allow searching for changes by Change-Id strings -* Display the change key, aka Change-ID in the informati... -* Display abbreviated change ids in change lists -* Change javax.security AccountNotFoundException to NoSu... -* Automatically update existing changes during refs/for/... -* Automatically close changes when pushing into a branch... -* Document the new commit-msg hook supplied by Gerrit -* Correct title of "Command Line Tools" documentation pa... -* Correct URL example used in Google Analytics Integrati... -* Correct comment about customizing categories and caches -* Fix formatting of remote.name.timeout section in docum... -* Add anchors for remote settings in replication.config ... -* Widen the search panel now that Change-Ids are 41 char... -* Revert "Ensure dialog box displays correctly on networ... -* Allow searches for Change-Ids starting with lowercase ... -* Fix line wrapped formatting in ChangeListServiceImpl -* Move Change.Key abbreviation to Change.Key class -* Format change ids in listing tables with a fixed with ... -* Cleanup documentation of the commit-msg hook -* Cleanup the command line tool index page -* Correct stale documentation section about SSH authenti... -* Correct access control documentation about project own... -* Quote the current directory when running asciidoc -* Move the Default Workflow link into the top of the Use... -* Correct formatting of usage in gerrit-cherry-pick docu... -* Document how Gerrit uses Change-Id lines -* Add Change-Id lines during cherry-pick if not already ... -* Fix "no common ancestry" bug -* Fix commit-msg hook to handle first lines like "foo: f... -* Add a link to Gerrit's project to the top of gerrit-ch... -* Add full ASLv2 copyright notice to commit-msg hook -* Embed Gerrit's version number into shell scripts copie... -* Don't drop max_session_age column in transaction durin... -* gerrit 2.0.19
\ No newline at end of file |