This is a new feature release, but it also has quite a few bugfixes. Python 2.4 is required now. Everything is based on WSGI now. Differently sized sets of system/help pages are offered. Modular group/dict data access was added. Xapian indexing and searching was improved. Regex searching is based on Xapian now. Drawing support was improved for twikidraw and anywikidraw was added. Syntax highlighting is based on the Pygments library now. Authentication improvements were made for http_auth, ldap, and openid. SlideShow action was added. Lots of other small features and bugfixes were added.
This is primarily a bugfix release. Upgrading is recommended for all users. Xapian indexing and filtering was fixed. An i18n crash was fixed. Some redirects use 301 status now. httponly cookies are not used by default. Upgrading SHA to SSHA hash was fixed. In RenamePage, subpage renaming is aborted if renaming the main page is unsuccessful. Search result ordering was improved. An MS Powerpoint indexing filter was added. Migration scripts were added to make finding damaged edit-log entries easier. The SubscribeUser action now supports username regexes and unsubscribing.
This release is mostly a bugfix release. Fixes were made for attachment link attributes, PDF embedding HTML, rightsidebar CSS, the revert and diff actions, the comment in email notifications, an endless loop with mailimport, empty list items in the GUI editor, and openidrp/botbouncer param count. For Windows users, caching lock code was improved. For Xapian indexing, exceptions are now caught when a bad zip file is encountered. CAS authentication and support for httponly (session) cookies were added. HTTP and LDAP auth, the data browser widget, url_schemas, and mimetypes were improved.
This release fixes a hierarchical ACL security bug (the default, non-hierarchical ACLs were not affected). It fixes some bugs in the creole parser, msie.css (IE8 rendering), and HTTP authentication (better compliance with the specs). New features include an EmbedObject macro using a default width of 100% for PDF files (use a recent Adobe Reader to make this work) and CopyPage action using a TextCha now.
Some XSS security fixes were done. Some other bugs were fixed. FCKeditor was updated to 2.6.4. Some theme fixes were made. Anchor parsing and sanitizing were fixed to be more usable and consistent. Xapian search was fixed, especially historysearch. Miscellaneous other fixes were made. One new feature was added: the logging of IP addresses to edit-log and event-log can be disabled now.