Plone

Download project files

5.2.14 release from the 5.2 series released 2023-09-21

Release information

Release notes:

# Release notes for Plone 5.2.14

* Released: Thursday September 21, 2023
* This is expected to be the last maintenance release.
* Check the [release schedule](https://plone.org/download/release-schedule).
* Read the [upgrade guide](https://5.docs.plone.org/manage/upgrading/version_specific_migration/upgrade_to_52.html), explaining the biggest changes compared to 5.1.
* Canonical place for these [release notes](https://dist.plone.org/release/5.2.14/RELEASE-NOTES.md) and the full [packages changelog](https://dist.plone.org/release/5.2.14/changelog.txt).

If you want to jump straight in, here are two important links:

* With pip you can use the constraints file at [https://dist.plone.org/release/5.2.14/constraints.txt](https://dist.plone.org/release/5.2.14/constraints.txt)
* With Buildout...

Changelog:

Zope 4.8.7 → 4.8.10
-------------------

- Allow only some image types to be displayed inline. Force download for others, especially SVG images. By default we use a list of allowed types. You can switch a to a list of denied types by setting OS environment variable OFS_IMAGE_USE_DENYLIST=1. You can override the allowed list with environment variable ALLOWED_INLINE_MIMETYPES and the disallowed list with DISALLOWED_INLINE_MIMETYPES. Separate multiple entries by either comma or space. This change only affects direct URL access. <img src="image.svg" /> works the same as before. (CVE-2023-42458) See security advisory.
- Tighten down the ZMI frame source logic to only allow site-local sources. Problem reported by Miguel Segovia Gil.
- Update RestrictedPython to version 5.4 to fix a potential a security issue. (CVE-2023-41039)
- Update AccessControl to version 4.4 to fix a potential a security issue. (CVE-2023-41050)
- Sanitize tainting fixing #1095
- Restore filename on code objects of objects returned from App.Extensions.getObject(). This got lost in 4.0a6.
- Only set response header Content-Type as text/html on exception views when the response has content. (#1089)
Update dependencies to the latest releases for each supported Python version.

plone.recipe.zope2instance: 6.12.0 → 6.12.1
-------------------------------------------
Documentation:

- Update README: for ``RotatingFileHandler`` ``maxCount`` is not a valid keyword argument.
Use ``backupCount``.
[gforcada] (#190)

plone.releaser: 1.8.8 → 1.8.9
-----------------------------
Bug fixes:

- Allow disabling PyPI rights check, as this does not know how to check organisations.
  Set env variable ``PLONE_RELEASER_CHECK_PYPI_ACCESS=0`` if you want to disable it.
  Also, we do not check PyPI if the user is `__token__`, so using an API token.
  [maurits] (#50)

- Fix missing changelog entries when running ``bin/manage changelog``.
[maurits] (#60)

Plone: 5.2.13 → 5.2.14
----------------------
Bug fixes:

- Release Plone 5.2.14.
[maurits]

plone.app.multilingual: 5.6.4 → 5.6.6
-------------------------------------
Bug fixes:

- Fix setting Indonesian language cookie on site root: must be ``id``, not ``id-id``.
[maurits] (#304)

- Fix ``set_recursive_language`` to actually find child objects.
[maurits] (#304)

- Root language switcher: redirect to ``id-id`` if the Indonesian language is preferred.
[maurits] (#304)

- Do not unset the language on the Indonesian root language folder when saving the control panel.
  This language has ``id`` as code. This is not allowed as an id in Plone, so it is created as ``id-id`` instead.
  This needs some special handling.
  Added upgrade to recursively fix this language folder to set the Indonesian language. This is only done when the folder itself has the wrong language.
  [maurits] (#304)

plone.app.upgrade: 2.1.6 → 2.1.7
--------------------------------
Bug fixes:

- Added upgrade to 5222, Plone 5.2.14.
[maurits] (#5222)

plone.namedfile: 5.6.0 → 5.6.1
------------------------------
Bug fixes:

- Fix stored XSS (Cross Site Scripting) for SVG images.
  Done by forcing a download instead of displaying inline.
  See `security advisory <https://github.com/plone/plone.namedfile/security/advisories/GHSA-jj7c-jrv4-c65x>`_.
  [maurits] (#1)

plone.restapi: 7.8.2 → 7.8.3
----------------------------
Bug fixes:

- Fix content serializer with an old version of an item that was renamed. @davisagli (#1651)

Products.CMFCore: 2.7.0 → 2.7.1
-------------------------------
- Make ``decodeFolderFilter`` and ``encodeFolderFilter`` non-public.
This is the workaround from `CVE-2023-36814 <https://github.com/zopefoundation/Products.CMFCore/security/advisories/GHSA-4hpj-8rhv-9x87>`_.

Products.CMFPlone: 5.2.13 → 5.2.14
----------------------------------
Bug fixes:

- Update metadata version to 5222, Plone 5.2.14.
[maurits] (#5222)

File	Description	Downloads
Plone-5.2.14-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	272 last downloaded 24 hours ago
Plone-5.2.14-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	1,050 last downloaded 24 hours ago
Total downloads:		1,322

5.2.13 release from the 5.2 series released 2023-07-20

Release information

Release notes:

# Release notes for Plone 5.2.13

* Released: Thursday July 20, 2023
* Check the [release schedule](https://plone.org/download/release-schedule).
* Read the [upgrade guide](https://5.docs.plone.org/manage/upgrading/version_specific_migration/upgrade_to_52.html), explaining the biggest changes compared to 5.1.
* Canonical place for these [release notes](https://dist.plone.org/release/5.2.13/RELEASE-NOTES.md) and the full [packages changelog](https://dist.plone.org/release/5.2.13/changelog.txt).

If you want to jump straight in, here are two important links:

* With pip you can use the constraints file at [https://dist.plone.org/release/5.2.13/constraints.txt](https://dist.plone.org/release/5.2.13/constraints.txt)
* With Buildout you can use the versions file at [https://dist.plone.org/re...

Changelog:

plone.versioncheck: 1.8.0 → 1.8.1
---------------------------------
Bug fixes:

- Catch empty version and ignore invalid versions in more places.
Needed when a package is explicitly unpinned, for example ``Zope =``.
[maurits]

Plone: 5.2.12 → 5.2.13
----------------------
Bug fixes:

- Release Plone 5.2.13.
[maurits]

plone.app.caching: 2.2.0 → 2.2.1
--------------------------------
Bug fixes:

- Fixed tests that compared a stable time with a ten year old Expires handler.
[maurits] (#127)

plone.app.locales: 5.1.32 → 5.1.33
----------------------------------
- Update Italian widgets domain translations.
[cekk]

plone.app.portlets: 4.4.8 → 4.4.9
---------------------------------
Bug fixes:

- Fix login button name [wkbkhard] (#132)

plone.app.upgrade: 2.1.5 → 2.1.6
--------------------------------
Bug fixes:

- Added upgrade to 5221, Plone 5.2.13.
[maurits] (#5221)

plone.portlet.collection: 3.3.6 → 3.3.7
---------------------------------------
Bug fixes:

- Convert collection to list before randomizing it
[witsch] (#42)

Products.CMFPlone: 5.2.12 → 5.2.13
----------------------------------
Bug fixes:

- Officially drop Python 3.7 support, as this version is end of life.
We try not to break it though.
[maurits] (#37)

- Fixed TinyMCE menubar settings when creating new Plone Site.
  It contained "toolsview" instead of "tools" and "view" due to a missing comma.
  Nothing goes wrong in Plone 5, but it causes those two menus to miss in Plone 6.
  [maurits] (#3785)

- Do not publish unused CMFCore folder filter methods.
[maurits] (#3826)

- Update metadata version to 5221, Plone 5.2.13.
[maurits] (#5221)

File	Description	Downloads
Plone-5.2.13-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	134 last downloaded 6 weeks ago
Plone-5.2.13-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	15,711 last downloaded 24 hours ago
Total downloads:		15,845

5.2.12 release from the 5.2 series released 2023-04-21

Release information

Release notes:

# Release notes for Plone 5.2.12

* Released: Friday April 21, 2023
* Check the [release schedule](https://plone.org/download/release-schedule).
* Read the [upgrade guide](https://5.docs.plone.org/manage/upgrading/version_specific_migration/upgrade_to_52.html), explaining the biggest changes compared to 5.1.
* Canonical place for these [release notes](https://dist.plone.org/release/5.2.12/RELEASE-NOTES.md) and the full [packages changelog](https://dist.plone.org/release/5.2.12/changelog.txt).

If you want to jump straight in, here are two important links:

* With pip you can use the constraints file at [https://dist.plone.org/release/5.2.12/constraints.txt](https://dist.plone.org/release/5.2.12/constraints.txt)
* With Buildout you can use the versions file at [https://dist.plone.org/rel...

Changelog:

plone.recipe.zope2instance: 6.11.0 → 6.12.0
-------------------------------------------
New features:

- Add new option `asyncore_use_poll` to waitress config file.
[petschki] (#189)

plone.versioncheck: 1.7.0 → 1.8.0
---------------------------------
- Ignore invalid versions.
  Needed for ``setuptools`` 66 and higher when checking a package that has invalid versions on PyPI.
  Fixes `issue 52 <https://github.com/plone/plone.versioncheck/issues/52>`_.
  [maurits]

Plone: 5.2.11 → 5.2.12
----------------------
Bug fixes:

- Release Plone 5.2.12.
[maurits]

plone.app.locales: 5.1.31 → 5.1.32
----------------------------------
- Update Turkish translation
[uyar]

plone.app.textfield: 1.3.6 → 1.3.7
----------------------------------
Bug fixes:

- Remove dependency on ZODB3, use ZODB instead.
Add troove classifiers for Plone 6 and newer Python.
[jensens] (#47)

plone.app.upgrade: 2.1.4 → 2.1.5
--------------------------------
Bug fixes:

- Added upgrade to 5220, Plone 5.2.12.
[maurits] (#5220)

plone.app.users: 2.6.7 → 2.6.8
------------------------------
Bug fixes:

- For user schemas use a volatile cache on the request instead of on the portal.
  This prevents seeing an empty user profile when you have custom user schemas.
  This fixes `issue 76 <https://github.com/plone/plone.app.users/issues/76>`_.
  [maurits] (#76)

plone.contentrules: 2.1.2 → 2.1.3
---------------------------------
Bug fixes:

- Use `ZODB` as dependency rather than the deprecated `ZODB3`.
[gforcada] (#1)

plone.keyring: 3.1.3 → 3.2.1
----------------------------
Bug fixes:

- Use `ZODB` as dependency rather than the deprecated `ZODB3`.
[gforcada] (#1)

- Update to Zope4 only including troove classifiers. [jensens] (#7)

plone.locking: 2.2.5 → 2.3.0
----------------------------
Bug fixes:

- Update to Zope4 only including troove classifiers. [jensens] (#19)

plone.portlets: 2.3.2 → 2.3.3
-----------------------------
Bug fixes:

- Use `ZODB` as dependency rather than the deprecated `ZODB3`.
[gforcada] (#1)

- Fix deprecation warnings (#5)

plone.restapi: 7.8.1 → 7.8.2
----------------------------
Bug fixes:

- Tests: pin ``plone.schema`` to 1.4.0 in Plone 4.3.
  This is the latest version compatible with Python 2.
  On Plone 5.0 and higher this package is already pinned.
  [maurits] (#140)

- CI: run the tests on Ubuntu 20.04, instead of latest.
Python 2.7 and 3.6 are not available on latest.
[maurits] (#2004)

plonetheme.barceloneta: 2.1.10 → 2.1.11
---------------------------------------
Bug fixes:

- Fix Diazo rule problem with undefined footer_portlets and footer_portlets_count variables.

See: https://community.plone.org/t/error-theme-inherited-from-barceloneta-footer-portlets-count/8455 (#239)

Products.CMFPlone: 5.2.11 → 5.2.12
----------------------------------
Bug fixes:

- Show warning in Site Setup when using an unsupported Plone or Python version.
  This is based on dates in the `Plone release schedule <https://plone.org/download/release-schedule>`_
  and the `Status of Python versions <https://devguide.python.org/versions/>`_.
  [maurits] (#23)

- Removed dependencies on development versions.
  For example we were depending on ``plone.app.contentmenu >= 1.1.6dev-r22380`` and the 1.1.6 version was released in 2008.
  With setuptools 67 this development version is illegal and cannot be parsed, even though in ``versions.cfg`` or ``constraints.txt`` we explicitly request version 2.3.4.
  [maurits] (#67)

- Removed path query from search view when context is site root.
[malthe] (#3753)

- Fixed encoding issue on Python 3 for some mail servers.
This could result in missing characters in an email body.
[maurits] (#3754)

- Update metadata version to 5220, Plone 5.2.12.
[maurits] (#5220)

Products.PortalTransforms: 3.2.1 → 3.2.2
----------------------------------------
Bug fixes:

- Update to Zope4 only including troove classifiers. [jensens] (#50)

File	Description	Downloads
Plone-5.2.12-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	187 last downloaded 12 weeks ago
Plone-5.2.12-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	3,868 last downloaded 3 weeks ago
Total downloads:		4,055

5.2.11 release from the 5.2 series released 2023-01-30

Release information

Release notes:

# Release notes for Plone 5.2.11

* Released: Monday January 30, 2023
* Check the [release schedule](https://plone.org/download/release-schedule).
* Read the [upgrade guide](https://5.docs.plone.org/manage/upgrading/version_specific_migration/upgrade_to_52.html), explaining the biggest changes compared to 5.1.
* Canonical place for these [release notes](https://dist.plone.org/release/5.2.11/RELEASE-NOTES.md) and the full [packages changelog](https://dist.plone.org/release/5.2.11/changelog.txt).

For technical wizards who want to jump straight in, here are two important links:

* With pip you can use the constraints file at [https://dist.plone.org/release/5.2.11/constraints.txt](https://dist.plone.org/release/5.2.11/constraints.txt)
* With Buildout you can use the versions file at [https...

Changelog:

Zope: 4.8.3 → 4.8.7
-------------------

- Only set response header Content-Type as text/html on exception views when the response has content. (#1089)

- Update dependencies to the latest releases for each supported Python version.

- Explicitly serve App.Dialogs.MessageDialog and exception views as HTML due to the changed default content type from #1075.

- Fix some broken ZMI pages due to the changed default content type from PR https://github.com/zopefoundation/Zope/pull/1075 (#1078)

- Set the published default Content-Type header to text/plain if none has been set explicitly to prevent a cross-site scripting attack. Also remove the old behavior of constructing an HTML page for published methods returning a two-item tuple.

- Make Products.PageTemplates compatible with Chameleon 3.10.

plone.releaser: 1.8.7 → 1.8.8
-----------------------------
Bug fixes:

- Fix ValueError when calling ``bin/manage launchpad 5.2.10.1``.
[maurits] (#45)

python-dotenv: 0.15.0 → 0.18.0
------------------------------

z3c.template: 3.1.0 → 3.2
-------------------------

Products.ExternalMethod: 4.6 → 4.7
----------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.MailHost: 4.12 → 4.13
------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.PythonScripts: 4.14 → 4.15
-----------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.StandardCacheManagers: 4.0.3 → 4.2
-------------------------------------------

zope.app.locales: 4.1 → 4.3
---------------------------

zope.copy: 4.2 → 4.3
--------------------

zope.copypastemove: 4.1.0 → 4.2.1
---------------------------------

zope.dublincore: 4.2.0 → 4.3.0
------------------------------

zope.intid: 4.3.0 → 4.4.0
-------------------------

zope.password: 4.3.1 → 4.4
--------------------------

simplejson: 3.17.6 → 3.18.1
---------------------------

borg.localrole: 3.1.8 → 3.1.9
-----------------------------
Bug fixes:

- Add PEP 508 style requirements to not depend on Zope2 in Python 3. [jensens] (#12)

Plone: 5.2.10 → 5.2.11
----------------------
Bug fixes:

- Release Plone 5.2.11.
[maurits]

plone.app.caching: 2.1.0 → 2.2.0
--------------------------------
New features:

- Apply weak caching to GET requests of content with application/json.
See `plone.rest issue 73 <https://github.com/plone/plone.rest/issues/73>`_.
[maurits] (#73)

Bug fixes:

- Revert changes to tests to work with the Zope security fix.
  We must have an empty byte, not text, otherwise it is an indication that we get a possibly wrong Content-Type in a 304 status.
  See `Zope issue 1089 <https://github.com/zopefoundation/Zope/issues/1089>`_.
  [maurits] (#1089)

- Fix tests to work with the Zope security fix.
[maurits] (#106)

plone.app.content: 3.8.9 → 3.8.10
---------------------------------
Bug fixes:

- Fix ValueError: Circular reference detected for RelationValue.
[maurits] (#128)

- Fix ValueError: Circular reference detected for PersistentMapping.
[maurits] (#246)

plone.app.upgrade: 2.1.3 → 2.1.4
--------------------------------
Bug fixes:

- Apply weak caching to GET requests of content with application/json.
See `plone.rest issue 73 <https://github.com/plone/plone.rest/issues/73>`_.
[maurits] (#73)

- Added upgrade to 5219, Plone 5.2.11.
[maurits] (#5219)

plone.event: 1.4.1 → 1.4.2
--------------------------
Bug fixes:

- Fix AttributeError: 'NoneType' object has no attribute 'astimezone'.
Fixes `issue 13 <https://github.com/plone/plone.event/issues/13>`_.
[gogobd] (#13)

plone.protect: 4.1.6 → 4.1.8
----------------------------
Bug fixes:

- Testing: explicitly set response content type header to html. [jeromeperrin] (#97)

- Add missing z3c.zcmlhook dependency. [icemac] (#96)

Products.CMFCore: 2.6.0 → 2.7.0
-------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.CMFPlone: 5.2.10 → 5.2.11
----------------------------------
Bug fixes:

- During login, when login_time is invalid, warn and reset it to 2000/01/01.
Fixes `issue 3656 <https://github.com/plone/Products.CMFPlone/issues/3656>`_.
[maurits] (#3656)

- When autologin after password reset is enabled, use the same adapters as during normal login.
  Specifically: the ``IInitialLogin`` and ``IRedirectAfterLogin`` adapters.
  Autologin is enabled by default.
  Fixes `issue 3713 <https://github.com/plone/Products.CMFPlone/issues/3713>`_.
  [maurits] (#3713)

- Update metadata version to 5219, Plone 5.2.11.
[maurits] (#5219)

Products.CMFUid: 3.4 → 3.5
--------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.DCWorkflow: 2.6.0 → 2.7.0
----------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.GenericSetup: 2.2.0 → 2.3.0
------------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.PluggableAuthService: 2.7.1 → 2.8.1
--------------------------------------------
- Explicitly set the response `Content-Type` header where needed
due to the changed default content type from `Zope#1075
<https://github.com/zopefoundation/Zope/pull/1075>`_.

- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.PluginRegistry: 1.10 → 1.11
------------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.Sessions: 4.14 → 4.15
------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.SiteErrorLog: 5.6 → 5.7
--------------------------------
- Fix insidious buildout configuration bug for tests against Zope 4.

- Add support for Python 3.11.

Products.ZODBMountPoint: 1.0 → 1.3
----------------------------------

Products.ZSQLMethods: 3.9 → 3.16
--------------------------------

z3c.zcmlhook: 1.0b1 → 1.1
-------------------------

plone.app.debugtoolbar: 1.2.3 → 1.3.0
-------------------------------------
Bug fixes:

- Add support for Python 3.11 [pbauer] (#30)

z3c.objpath: 1.2 → 1.3
----------------------

plone.app.blocks: 5.2.0 → 5.2.1
-------------------------------

plone.jsonserializer: 0.9.10 → 0.9.11
-------------------------------------

html5lib: 1.0.1 → 1.1
---------------------

httplib2: 0.18.1 → 0.21.0
-------------------------

launchpadlib: 1.10.17 → 1.10.18
-------------------------------

progress: 1.5 → 1.6
-------------------

PyYAML: 5.3.1 → 5.4.1
---------------------

stdlib-list: 0.6.0 → 0.8.0
--------------------------

zest.pocompile: 1.5.0 → 1.6.0
-----------------------------

requests-toolbelt: 0.9.1 → 0.10.1
---------------------------------

tox: 3.24.5 → 3.28.0
--------------------

tqdm: 4.64.0 → 4.64.1
---------------------

virtualenv: 20.14.1 → 20.17.1
-----------------------------

zipp: 1.1.1 → 1.2.0
-------------------

jeepney: 0.4.3 → 0.8.0
----------------------

File	Description	Downloads
Plone-5.2.11-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	143 last downloaded 12 weeks ago
Plone-5.2.11-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	5,315 last downloaded 2 days ago
Total downloads:		5,458

5.2.10.2 release from the 5.2 series released 2022-12-21

Release information

Release notes:

# Release notes for Plone 5.2.10.2

* Released: Wednesday December 21, 2022
* Check the [release schedule](https://plone.org/download/release-schedule).
* Read the [upgrade guide](https://5.docs.plone.org/manage/upgrading/version_specific_migration/upgrade_to_52.html), explaining the biggest changes compared to 5.1.
* Canonical place for these [release notes](https://dist.plone.org/release/5.2.10.2/RELEASE-NOTES.md) and the full [packages changelog](https://dist.plone.org/release/5.2.10.2/changelog.txt).

For technical wizards who want to jump straight in, here are two important links:

* With pip you can use the constraints file at [https://dist.plone.org/release/5.2.10.2/constraints.txt](https://dist.plone.org/release/5.2.10.2/constraints.txt)
* With Buildout you can use the versions ...

Changelog:

plone.app.blocks: 5.2.0 → 5.2.1
-------------------------------

- Fix ``layout_view`` and ``tile_layout_view`` to work with the Zope security fix.
  Needed when you use Plone 5.2.10.1 or Plone 6.0.0.1.
  Fixes `issue 101 <https://github.com/plone/plone.app.blocks/issues/101>_`.
  [maurits]

plone.app.caching: 2.1.0 → 2.1.1
--------------------------------
Bug fixes:

- Fix tests to work with the Zope security fix.
[maurits] (#106)

File	Description	Downloads
Plone-5.2.10.1-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	20 last downloaded 17 weeks ago
Plone-5.2.10.1-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	3,533 last downloaded 3 days ago
Total downloads:		3,553

5.2.10.1 release from the 5.2 series released 2022-12-19

Release information

Release notes:

# Release notes for Plone 5.2.10.1

* Released: Monday December 19, 2022
* Check the [release schedule](https://plone.org/download/release-schedule).
* Read the [upgrade guide](https://5.docs.plone.org/manage/upgrading/version_specific_migration/upgrade_to_52.html), explaining the biggest changes compared to 5.1.
* Canonical place for these [release notes](https://dist.plone.org/release/5.2.10.1/RELEASE-NOTES.md) and the full [packages changelog](https://dist.plone.org/release/5.2.10.1/changelog.txt).

For technical wizards who want to jump straight in, here are two important links:

* With pip you can use the constraints file at [https://dist.plone.org/release/5.2.10.1/constraints.txt](https://dist.plone.org/release/5.2.10.1/constraints.txt)
* With Buildout you can use the versions fil...

Changelog:

Zope: 4.8.3 → 4.8.6
-------------------

Security fix for a Cross Site Scripting vulnerability.
See https://community.plone.org/t/zope-4-8-4-and-5-7-1-released/15992

plone.protect: 4.1.6 → 4.1.8
----------------------------
Bug fixes:

- Testing: explicitly set response content type header to html. [jeromeperrin] (#97)

- Add missing z3c.zcmlhook dependency. [icemac] (#96)

File	Description	Downloads
Plone-5.2.10.1-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	11 last downloaded 17 weeks ago
Plone-5.2.10.1-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	27 last downloaded 8 weeks ago
Total downloads:		38

5.2.10 release from the 5.2 series released 2022-11-01

Release information

Release notes:

# Release notes for Plone 5.2.10

Released: Monday October 31, 2022.

## Python compatibility

This release supports Python 2.7, 3.7, and 3.8.

**Python 3.6 is no longer supported.**
See the [community announcement](https://community.plone.org/t/plone-5-2-drops-python-3-6-support/15706).
Note that both Python 2.7 and 3.6 have reached end of life.
This means the wider Python community no longer supports it.
For example, the default WSGI server used by Plone, which is `waitress`, has a security problem that is only solved on Python 3.7 and higher. If you use `waitress` on earlier Python versions, you are vulnerable.

Python 3.7 will reach end of life in June 2023.
See https://devguide.python.org/versions/ for the canonical information.
It will get harder to test and support Plone on unsu...

Changelog:

Zope: 4.8.2 → 4.8.3
-------------------

- Update dependencies to the latest releases for each supported Python version.

- Fix cookie path parameter handling:
  If the cookie path value contains ``%`` it is assumed to be
  fully quoted and used as is;
  if it contains only characters allowed (unquoted)
  in an URL path (with the exception of ``;``),
  it is used as is; otherwise, it is quoted using Python's
  ``urllib.parse.quote``
  (`#1052 <https://github.com/zopefoundation/Zope/issues/1052>`_).

- Change functional testing utilities to support percent encoded and unicode
paths (`#1058 <https://github.com/zopefoundation/Zope/issues/1058>`_).

- Decode basic authentication header as utf-8, not latin1 anymore
(`#1061 <https://github.com/zopefoundation/Zope/issues/1061>`_).

- Make ``ZPublisher.utils.basic_auth_encode`` support non-ascii strings on
Python 2
(`#1062 <https://github.com/zopefoundation/Zope/issues/1062>`_).

zc.buildout: 2.13.7 → 2.13.8
----------------------------

- Support ``python310-315`` in conditional section expressions.

plone.releaser: 1.8.6 → 1.8.7
-----------------------------
Bug fixes:

- report: add sleep and start parameters.
[maurits] (#44)

i18ndude: 5.4.2 → 5.5.0
-----------------------
New features:

- Add boolean ``--no-line-numbers`` option to ``rebuild-pot``.
  Use this to prevent including line numbers in pot files.
  The default is to still include them, so no behavior change.
  The default could change in the future.
  If you want to be sure to keep your line numbers in the future, use the new ``--line-numbers`` option.
  [maurits] (#77)

Sphinx: 1.8.5 → 1.8.6
---------------------

python-dateutil: 2.8.1 → 2.8.2
------------------------------

simplejson: 3.17.0 → 3.17.6
---------------------------

diazo: 1.4.2 → 1.5.0
--------------------
New features:

- Remove dependency on `future` package.
[petschki] (#85)

Plone: 5.2.9 → 5.2.10
---------------------
Bug fixes:

- Release Plone 5.2.10.
[maurits]

plone.app.content: 3.8.8 → 3.8.9
--------------------------------
Bug fixes:

- Fix TypeError: 'NoneType' object is not subscriptable in reference browser widget.
[maurits] (#2921)

plone.app.contentlisting: 2.0.7 → 2.0.8
---------------------------------------
Bug fixes:

- Build the mime-type icon url with an absolute url. Fixes #44
[erral] (#44)

plone.app.layout: 3.5.1 → 3.5.2
-------------------------------
Bug fixes:

- get the title of the navigation root from the registry when the navigation root object is the portal object
[erral] (#317)

plone.app.portlets: 4.4.7 → 4.4.8
---------------------------------
Bug fixes:

- Use the portal url to build the mimetype icon url
[erral] (#168)

plone.app.theming: 4.1.7 → 4.1.8
--------------------------------
Bug fixes:

- Make sure Parameters Expressions are string when saving custom styles
[frapell] (#209)

plone.app.upgrade: 2.1.2 → 2.1.3
--------------------------------
Bug fixes:

- Add a timezone property to portal memberdata if it is missing
Backports #296 to Plone 5.2.
[ale-rt] (#296)

- Added upgrade to 5218, Plone 5.2.10.
[maurits] (#5218)

plone.app.users: 2.6.6 → 2.6.7
------------------------------
Bug fixes:

- Ensure that, when no timezone is selected, the value of the stored timezone is an empty string (#109)

plone.memoize: 2.1.1 → 3.0.0
----------------------------
Breaking changes:

- Drop support for Python 3.5 and 3.6.
Add support for Python 3.9, 3.10, and 3.11. [davisagli] (#27)

plone.restapi: 7.8.0 → 7.8.1
----------------------------
Bug fixes:

- Document needed version pins for Plone 4.3. [erral] (#1150)

plone.resourceeditor: 3.0.3 → 3.0.4
-----------------------------------
Bug fixes:

- Fix unclosed file warnings
[petschki] (#29)

Products.CMFEditions: 3.3.4 → 3.3.5
-----------------------------------
Bug fixes:

- Fix test to work with updated CMFUid.
[davisagli] (#89)

Products.CMFPlone: 5.2.9 → 5.2.10
---------------------------------
Bug fixes:

- Fixed an issue that prevented the user to select the preferred timezone (#1290)

- Fixed adding control panel action via ZMI.
[maurits] (#1959)

- Set portal title in registry when creating a new Plone site
[erral] (#3584)

- Change test to make sure email is sent in utf-8
[erral] (#3588)

- Update metadata version to 5218, Plone 5.2.10.
[maurits] (#5218)

Products.CMFUid: 3.3 → 3.4
--------------------------
- When an object is reindexed after its UID is set,
only reindex the ``cmf_uid`` index rather than all indexes.

Products.PluggableAuthService: 2.7.0 → 2.7.1
--------------------------------------------
- Set the Cookie Auth Helper cookies with ``SameSite`` set to ``Lax`` by
  default and allow admins to change the setting as well as the secure flag
  from the Properties tab in the ZMI.
  The ``SameSite`` cookie flag is not currently set, which causes modern
  browsers to show warnings at the console. Such cookies may be rejected in the
  future and break the Cookie Auth Helper. See
  https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/
  for information about the ``SameSite`` cookie attribute and why its handling
  in browsers is changing.

Products.PortalTransforms: 3.2.0 → 3.2.1
----------------------------------------
Bug fixes:

- Fixed regular expression in tests on Python 3.11.
[maurits] (#48)

- Tests: fixed incompatibility with lxml 3.9+ on Linux.
This gives slightly different output.
[maurits] (#818)

Products.Sessions: 4.13 → 4.14
------------------------------
- Add ability to set the session cookie's ``SameSite`` flag.
  See https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/
  for some background on how browsers change handling ``SameSite``.
  The behavior of existing sites will not change unless the site administrator
  changes the cookie configuration explicitly. New browser id managers will use
  ``Lax`` by default.

z3c.formwidget.query: 0.17 → 1.0.0
----------------------------------
- Add Chinese translation.

- Add support for Python 3.5, 3.8, 3.9, 3.10.

plone.app.blocks: 5.1.0 → 5.2.0
-------------------------------

plone.app.standardtiles: 2.4.2 → 2.5.0
--------------------------------------

launchpadlib: 1.10.16 → 1.10.17
-------------------------------

lazr.restfulclient: 0.14.4 → 0.14.5
-----------------------------------

smmap: 3.0.1 → 3.0.5
--------------------

wadllib: 1.3.3 → 1.3.6
----------------------

colorama: 0.4.5 → 0.4.6
-----------------------

distlib: 0.3.4 → 0.3.6
----------------------

virtualenv: 20.14.0 → 20.14.1
-----------------------------

File	Description	Downloads
Plone-5.2.10-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	437 last downloaded 9 days ago
Plone-5.2.10-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	735 last downloaded 4 days ago
Total downloads:		1,172

5.2.9 release from the 5.2 series released 2022-07-21

Release information

Release notes:

# Release notes for Plone 5.2.9

Released: Thursday July 21, 2022.

## Python compatibility

As usual, this release supports Python 2.7, 3.6, 3.7, and 3.8.

But note that both Python 2.7 and 3.6 have reached end of life.
This means the wider Python community no longer supports it.
For example, the default WSGI server used by Plone, which is `waitress`, has a security problem that is only solved on Python 3.7 and higher. If you use `waitress` on earlier Python versions, you are vulnerable.

Python 3.7 will reach end of life in June 2023.
See https://devguide.python.org/versions/ for the canonical information.
It will get harder to test and support Plone on unsupported Python versions.

Especially Python 2.7 should only be used as a temporary stepping stone before you migrate your Plone ...

Changelog:

Zope: 4.8.1 → 4.8.2
-------------------

- Update ``waitress`` to version 2.1.2.

- Fix version pin specifications for Python 3.6 compatibility.
(`#1036 <https://github.com/zopefoundation/Zope/issues/1036>`_)

- Fix version pin specifications for Python 3.5 compatibility.

- Add more notices to the documentation urging users to migrate to Zope 5.

- Quote all components of a redirect URL (not only the path component)
(`#1027 <https://github.com/zopefoundation/Zope/issues/1027>`_)

- Drop the convenience script generation from the buildout configuration
  in order to get rid of a lot of dependency version pins.
  These were only needed for maintainers who can install them manually.
  (`#1019 <https://github.com/zopefoundation/Zope/issues/1019>`_)

- Update dependencies to the latest releases that still support Python 2.

- Strip leading ``.`` in cookie domain names.
(`#1041 <https://github.com/zopefoundation/Zope/pull/1041>`_)

Genshi: 0.7.5 → 0.7.7
---------------------

i18ndude: 5.4.1 → 5.4.2
-----------------------
Bug fixes:

- Leading spaces in comments are kept stable. (#91)

- Test on Python 3.10. No code changes needed. [maurits] (#310)

Products.ExternalMethod: 4.5 → 4.6
----------------------------------
- Add support for Python 3.10.

Products.PythonScripts: 4.13 → 4.14
-----------------------------------
- Add support for Python 3.10.

- Remove unused classes ``SecurityManager`` and ``RivilegedUser`` from
``.tests.testBindings``.

five.customerize: 2.0.1 → 2.1.0
-------------------------------
- Add support for Python 3.5, 3.7, 3.8, 3.9, 3.10.

- Fix tests to run successfully on Zope >= 5.2.1.

icalendar: 4.0.9 → 4.1.0
------------------------

Plone: 5.2.8 → 5.2.9
--------------------
Bug fixes:

- Release Plone 5.2.9.
[maurits]

plone.app.querystring: 1.5.0 → 1.6.1
------------------------------------
New features:

- Add negation-query operators string.isNot and selection.none.
New ``plone.app.querystring.operation.string.isNot`` and ``plone.app.querystring.operation.selection.none`` including upgrade steps.
[thet] (#110)

Bug fixes:

- Make SearchableText work when using 'and' and 'or' as search items
[erral] (#111)

- Fix how to merge custom_query with parsedquery without overriding values. [cekk] (#103)

plone.app.upgrade: 2.1.1 → 2.1.2
--------------------------------
Bug fixes:

- Added upgrade to 5217, Plone 5.2.9. [maurits] (#5217)

plone.app.viewletmanager: 3.1.2 → 3.1.3
---------------------------------------
Bug fixes:

- Change default message for i18n msgid
[erral] (#25)

plone.supermodel: 1.6.3 → 1.6.5
-------------------------------

Bug fixes:

- Release 1.6.3 as 1.6.5.
  The 1.6.4 release in between was meant as a major release.
  I will rerelease that one as 2.0.0.
  [maurits] (#27)

Products.CMFCore: 2.5.4 → 2.6.0
-------------------------------
- Fix cookie test failure
(`#120 <https://github.com/zopefoundation/Products.CMFCore/pull/120>`_).

- Add support for Python 3.10.

Products.CMFPlone: 5.2.8 → 5.2.9
--------------------------------
Bug fixes:

- Update metadata version to 5217, Plone 5.2.9.
[maurits] (#5217)

Products.CMFUid: 3.1.0 → 3.3
----------------------------
- Add support for Python 3.10.

- Add support for Python 3.9.

- Change package structure to move package code into a ``src`` subfolder.

Products.DCWorkflow: 2.5.0 → 2.6.0
----------------------------------
New features:

- Add support for Python 3.10.

Products.ExternalEditor: 3.0.1 → 3.1.0
--------------------------------------
- Add support for Python 3.9, 3.10.

- Change package structure to move package code into a ``src`` subfolder.

- Fix bug which prevented ZMI from rendering, when Products.ExternalEdit was
installed.
(`#18 <https://github.com/zopefoundation/Products.ExternalEditor/pull/18>`_)

Products.PluginRegistry: 1.9 → 1.10
-----------------------------------
- Add support for Python 3.10

Products.Sessions: 4.9 → 4.13
-----------------------------
- Add support for Python 3.10.

- Fix PY2 bug in ``BrowserIdManager.getNewBrowserId``
(`#45 <https://github.com/zopefoundation/Products.Sessions/issues/45>`_)

- Improve out-of-the-box experience by instantiating a session data container
if the session data manager uses the default configuration that points
to a temporary folder

- Reinstate simple sessioning with ``Products.TemporaryFolder``
(`#43 <https://github.com/zopefoundation/Products.Sessions/issues/43>`_)

- Reduce usage of deprecated ``tempstorage`` for testing and remove warnings
(`#41 <https://github.com/zopefoundation/Products.Sessions/issues/41>`_)

Products.SiteErrorLog: 5.5 → 5.6
--------------------------------
- Add support for Python 3.10.

- Render date in addition to time in ZMI error log.
(`#31 <https://github.com/zopefoundation/Products.SiteErrorLog/pull/31>`_)

Products.ZopeVersionControl: 2.0.0 → 3.0.0
------------------------------------------
Breaking changes:

- Drop support for Zope 2.x.

New features:

- Add support for Python 3.9, 3.10

zodbverify: 1.1.0 → 1.2.0
-------------------------
New features:

- Improve debugging output: show all objects that reference a oid.
  See `Philip's blog post <https://www.starzel.de/blog/zodb-debugging>`_ for more information.
  See also discussion in `pull request 8 <https://github.com/plone/zodbverify/pull/8>`_.
  [pbauer] (#8)

plone.app.blocks: 5.0.1 → 5.1.0
-------------------------------

plone.app.mosaic: 2.2.3 → 2.2.5
-------------------------------

cached-property: 1.5.1 → 1.5.2
------------------------------

Deprecated: 1.2.10 → 1.2.13
---------------------------

launchpadlib: 1.10.13 → 1.10.16
-------------------------------

lazr.restfulclient: 0.14.3 → 0.14.4
-----------------------------------

lazr.uri: 1.0.3 → 1.0.6
-----------------------

pdbpp: 0.10.2 → 0.10.3
----------------------

File	Description	Downloads
Plone-5.2.9-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	595 last downloaded 3 weeks ago
Plone-5.2.9-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	23,265 last downloaded 3 days ago
Total downloads:		23,860

5.2.8 release from the 5.2 series released 2022-05-14

Release information

Release notes:

# Release notes for Plone 5.2.8

Released: Saturday May 14, 2022.

## Highlights

Interesting changes since 5.2.7:

* `Zope`: Enhance cookie support. For details, see [issue 1010](https://github.com/zopefoundation/Zope/issues/1010)
For more changes see https://zope.readthedocs.io/en/4.x/changes.html
* `waitress` is updated to version 2.1.1 to mitigate a vulnerability in that package. As waitress no longer supports Python versions less than 3.7 it is not advised to run Plone 5.2 on Python 2.7 or 3.6 any longer, even though they are still supported by Plone itself. You get an older `waitress` version then. If you must use an old Python version, please switch to a different WSGI server. See the [recommendations](https://zope.readthedocs.io/en/latest/operation.html#recommended-wsgi-serve...

Changelog:

Zope 4.6.3 → 4.8.1
------------------

- See https://zope.readthedocs.io/en/4.x/changes.html

zc.buildout: 2.13.4 → 2.13.7
----------------------------

plone.recipe.zope2instance: 6.10.2 → 6.11.0
-------------------------------------------
New features:

- By default, do not create a tempstorage on Plone 6.
See `issue 180 <https://github.com/plone/plone.recipe.zope2instance/issues/180>`_.
[maurits] (#180)

zest.releaser: 6.22.1 → 6.22.2
------------------------------

Products.MailHost: 4.11 → 4.12
------------------------------
- Add support for Python 3.9 and 3.10.

mockup: 3.2.7 → 3.2.8
---------------------
Bug fixes:

- Fix duplicated initialization of result collection. Ref: #1152
[petschki] (#1152)

Plone: 5.2.7 → 5.2.8
--------------------
Bug fixes:

- Release Plone 5.2.8.
[maurits]

plone.app.contentlisting: 2.0.6 → 2.0.7
---------------------------------------
Bug fixes:

- realobject: Do not throw an AttributeError when accessing attributes which return ``None``. (#42)

plone.app.customerize: 1.3.11 → 1.3.12
--------------------------------------
Bug fixes:

- Fixed tests when run with ``zope.component`` 5+.
[maurits] (#500)

plone.app.dexterity: 2.6.10 → 2.6.11
------------------------------------
Bug fixes:

- Don't acquire lanuage from portal root default_language for ICategorization.language.
Fixes https://github.com/plone/plone.app.dexterity/issues/258
[jaroel] (#351)

plone.app.discussion: 3.4.5 → 3.4.7
-----------------------------------
Bug fixes:

- Grant Site Administrators the same workflow permissions as Managers.
They were missing permissions on pending comments.
[maurits] (#199)

- Fix test after PortalTransforms uses lxml html method to serialize, instead of xml method.
[gotcha] (#192)

plone.app.iterate: 4.0.2 → 4.0.3
--------------------------------
Bug fixes:

- Fix a typo in a a call to reindexObject (#101)

plone.app.linkintegrity: 3.5.0 → 3.6.1
--------------------------------------
New features:

- Track link integrity of referenced PDFs and other site objects in IFRAME SRC references. (#84)

Bug fixes:

- Test fix: only load plone.app.contenttypes migration layer on Python 2.
[maurits] (#641)

plone.app.locales: 5.1.30 → 5.1.31
----------------------------------
- Fixes Portuguese integrity break message when deleting a content, to consider the
masculine and feminine gender of the content type.
[wesleybl]

plone.app.querystring: 1.4.15 → 1.5.0
-------------------------------------
New features:

- Add lazy attribute to vocabularies to prevent fetching any results
[reebalazs] (#104)

plone.app.upgrade: 2.1.0 → 2.1.1
--------------------------------
Bug fixes:

- Added upgrade to 5216, Plone 5.2.8. [maurits] (#5216)

plone.app.widgets: 3.0.6 → 3.0.7
--------------------------------
Bug fixes:

- fix robot tests
[petschki] (#215)

plone.app.z3cform: 3.2.3 → 3.2.4
--------------------------------
Bug fixes:

- Add ``name`` attribute to form, if ``view.form_name`` is defined.
See `easyform issue 325 <https://github.com/collective/collective.easyform/issues/325>`_.
[maurits] (#325)

plone.autoform: 1.9.0 → 1.9.1
-----------------------------
Bug fixes:

- Fix tests when used with latest z3c.form
[petschki] (#40)

plone.outputfilters: 4.0.2 → 4.1.0
----------------------------------
New features:

- Resolve UIDs in SRC= attribute of of SOURCE and IFRAME elements. (#47)

plone.restapi: 7.7.0 → 7.8.0
----------------------------
New features:

- Make masking specific validation errors configurable in DX DeserializeFromJson. [fredvd] (#1211)

Bug fixes:

- Prevent to create an empty AT content.
[gbastien] (#1386)

- Fix serializing revisions of Archetypes content. [pbauer] (#1335)

plone.schema: 1.3.0 → 1.4.0
---------------------------
New features:

- Use indent in json.dumps to make JSON readable in the widget [MrTango] (#16)

plone.staticresources: 1.4.4 → 1.4.6
------------------------------------
Bug fixes:

- pat-structure fix duplicate rendering
[petschki] (#210)

- Fix icon font loading.

Fix issue with Glyphicons and Fontello font loading on Portals where the portal root is a level higher.
The fonts are now loaded relative to the CSS requesting them.

Fixes: https://github.com/plone/plone.staticresources/issues/162
Fixes: https://github.com/plone/plone.staticresources/issues/203

  Ref: https://github.com/plone/plone.staticresources/pull/168
  Ref: https://github.com/plone/plone.staticresources/pull/171
  Ref: https://github.com/plone/plone.staticresources/pull/175
  Ref: https://community.plone.org/t/deployments-not-rooted-fail-to-load-the-fontello-icons/15047/12?u=thet (#203)

Products.CMFPlone: 5.2.7 → 5.2.8
--------------------------------
Bug fixes:

- Update WCAG version to 2.1 in the accessebility-info default content.
[marwanatef2] (#3273)

- Remove date range search fix, which was done in Products.ZCatalog.
[wesleybl] (#3432)

- Fix detection of initial login time [MrTango] (#3447)

- Update metadata version to 5216, Plone 5.2.8.
[maurits] (#5216)

Products.GenericSetup: 2.1.5 → 2.2.0
------------------------------------
- Add method ``tool.hasUpgrades``.
This is more efficient than checking if ``tool.listUpgrades`` returns a non-empty list.

- Add options ``dest`` and ``simple`` to ``tool.listUpgrades``.
Use this to simplify the ``upgradeProfile`` method.

- Fix #118: Import handler not found .
(`#118 <https://github.com/zopefoundation/Products.GenericSetup/issues/118>`_)

- Allow passing ``quiet=True`` to ``upgradeProfile``.
Then we do not complain when the profile is not installed or needs no upgrade.

Products.PortalTransforms: 3.1.12 → 3.2.0
-----------------------------------------
Bug fixes:

- Prevent auto-closed empty tags in safe_html output.
[cekk] (#43)

plone.app.versioningbehavior: 1.4.5 → 1.4.6
-------------------------------------------
Bug fixes:

- Removed deprecated `plone.namedfile[blobs]` from the test requirements.
[maurits] (#106)

plone.formwidget.autocomplete: 1.4.0 → 1.4.1
--------------------------------------------

plone.app.blocks: 5.0.0 → 5.0.1
-------------------------------

plone.app.standardtiles: 2.3.2 → 2.4.2
--------------------------------------

plone.app.tiles: 3.2.3 → 3.3.0
------------------------------

Products.ATContentTypes: 3.0.6 → 3.0.7
--------------------------------------
Bug fixes:

- Fix test after PortalTransforms uses lxml html method to serialize (instead of xml method).
[gotcha] (#68)

File	Description	Downloads
Plone-5.2.8-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	69 last downloaded 40 weeks ago
Plone-5.2.8-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	21,091 last downloaded 8 weeks ago
Total downloads:		21,160

5.2.7 release from the 5.2 series released 2022-01-28

Release information

Release notes:

Release notes for Plone 5.2.7
=============================

Released: Friday January 28, 2022.

Some highlights of this release are:

- `plone.app.contenttypes` and `Products.ATContentTypes`: Security fix: prevent cache poisoning with the Referer header.
   See `security advisory <https://github.com/plone/Products.CMFPlone/security/advisories/GHSA-8w54-22w9-3g8f>`.
- `plone.app.linkintegrity`: Track integrity of video and audio files in HTML source tags.
- `plone.app.z3cform` and `plone.app.textfield`: Enable multiple wysiwyg editors (use default editor registry setting).
- `plone.namedfile`: Make `DefaultImageScalingFactory` more flexible, with methods you can override.
- `plone.app.layout`: Improved the Global section viewlet:
  - Catalog based navigation.
  - Allow more customizatio...

Changelog:

collective.recipe.omelette: 1.0.0 â†’ 1.1.0
-----------------------------------------
- Fix 2to3 old setuptools hook [goschtl]

- mordernize to python3 code [goschtl]

- update to new zope.testing [goschtl]

- use pytest and tox [goschtl]

- Note: tested on Python 2.7 and 3.6-3.10.

plone.releaser: 1.8.4 â†’ 1.8.6
-----------------------------
Bug fixes:

- Insert buildout:docs-directory when reading sources.
Workaround for issue similar to `mr.roboto 89 <https://github.com/plone/mr.roboto/issues/89>`_.
[maurits] (#89)

- Fix InterpolationMissingOptionError when parsing coredev 6.0 sources.
[maurits] (#42)

repoze.xmliter: 0.6 â†’ 0.6.1
---------------------------
- Fixed tests with lxml 4.7.1 or higher.
Fixes `issue 8 <https://github.com/repoze/repoze.xmliter/issues/8>`_.
[maurits]

diazo: 1.4.1 â†’ 1.4.2
--------------------
Bug fixes:

- Remove FormEncode test dependency.
[maurits] (#83)

Plone: 5.2.6 â†’ 5.2.7
--------------------
Bug fixes:

- Release Plone 5.2.7 final.
[maurits]

plone.app.contentlisting: 2.0.4 â†’ 2.0.6
---------------------------------------
Bug fixes:

- Do not throw an error when the contenttype is not in the mimetypes_registry.
[tschorr] (#41)

- Adapt the tests for Plone 6 [ale-rt] (#39)

plone.app.contenttypes: 2.2.2 â†’ 2.2.3
-------------------------------------
Bug fixes:

- Security fix: prevent cache poisoning with the Referer header.
See `security advisory <https://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-f7qw-5fgj-247x>`.
[maurits] (#1)

- Depend on `plone.namedfile` core instead of its empty `[blobs]` extra.
[maurits] (#106)

plone.app.dexterity: 2.6.9 â†’ 2.6.10
-----------------------------------
Bug fixes:

- Depend on `plone.namedfile` core instead of its empty `[scales]` extra.
[maurits] (#106)

plone.app.layout: 3.4.6 â†’ 3.5.1
-------------------------------
New features:

- Global section viewlet: Catalog based navigation.
  Show the global sections also if navigation contains items but tabs are empty.
  This allows for disabling portal tabs rendering and constructing the navigation only from the catalog query.
  [thet] (273-1)

- Global sections viewlet: Customize entries and query.
Also allow customizing the tabs entries and the navigation query along with the other navigation entries.
[thet] (273-2)

- Global sections viewlet: Factor out types_using_view.
Factor out types_using_view so that this method can be re-used, e.g. in a subclass with a customize_entry method.
[thet] (273-3)

- Global sections viewlet performance optimizations:

  - Remove pointless caching on types_using_view,
  - Store settings in variable for multiple access, bypassing cache checks,
  - Remove now pointless caching on settings property,
  - Deprecate now unused navtree_depth property.

[thet] (#275)

- Remove pointless caching on types_using_view,

- Store settings in variable for multiple access, bypassing cache checks,

- Remove now pointless caching on settings property,

- Deprecate now unused navtree_depth property.

Bug fixes:

- Escape navigation titles only once.
[thomasmassmann] (#280)

plone.app.linkintegrity: 3.4.1 â†’ 3.5.0
--------------------------------------
New features:

- Track integrity of video and audio files in HTML source tags. (#77)

plone.app.textfield: 1.3.5 â†’ 1.3.6
----------------------------------
Bug fixes:

- Fix usage of wysiwyg editor settings from portal_properties to registry
[duchenean, gotcha] (#45)

plone.app.upgrade: 2.0.41 â†’ 2.1.0
---------------------------------
New features:

- Removed the Plone 6 upgrade code.
From now on, the 2.x branch is for Plone 5.2, master is for Plone 6.
[maurits] (#227)

Bug fixes:

- Added upgrade to 5215, Plone 5.2.7. [maurits] (#5215)

plone.app.z3cform: 3.2.2 â†’ 3.2.3
--------------------------------
New features:

- Enable multiple wysiwyg editors (use default editor registry setting) [duchenean, gotcha] (#45)

plone.cachepurging: 2.0.3 â†’ 2.0.4
---------------------------------
Bug fixes:

- Better debugging capabilities by enhancing the output of the purge views
`@@plone.cachepurging.purge` and `@@plone.cachepurging.queue`.
[jensens] (#21)

plone.dexterity: 2.10.4 â†’ 2.10.5
--------------------------------
Bug fixes:

- Incorporate ``plone.synchronize`` its one and only simple ``synchronized`` function into ``plone.dexterity``, which were the only consumer.
Also moves the test. Removes a dependency and a package to look after.
[jensens] (#157)

- Avoid setting a default value on methods.
  If a Schema Interface has a method in it, i.e. to be used as a
  constraint for another field, etc. the `default_from_schema` function
  would trip over it while trying to get a default value for it.
  [gforcada, jensens] (#158)

- Fixes schema name generated in Python 2. [wesleybl] (#159)

plone.namedfile: 5.5.1 â†’ 5.6.0
------------------------------
New features:

- Make DefaultImageScalingFactory more flexible, with methods you can override.
[maurits] (#104)

plone.restapi: 7.5.0 â†’ 7.7.0
----------------------------
Breaking changes:

- Be permissive when testing the schema of the querystring endpoint [reebalazs] (#1307)

New features:

- Format zcml files with collective.zpretty. Add zpretty Github workflow. @tiberiuichim (#1120)

- Fix tests for Plone 4.3 and 5.2 with Python 2.7 @ichim-david (#1243)

Products.CMFPlone: 5.2.6 â†’ 5.2.7
--------------------------------
Bug fixes:

- Release Plone 5.2.7 final.
No changes compared to last release candidate.
[maurits] (#3413)

- Add plone.synchronize as dependency, because plone.dexterity 2.10.5 has removed this dependency.
Core Plone does not need the package anymore, but in case someone uses it, it is not nice to lose it in a bugfix release of Plone.
[maurits] (#157)

- The portal catalog will not try to index itself anymore [ale-rt] (#3312)

- Load adapter for index location, only if Archetypes is installed. [wesleybl] (#3347)

- Add missing lxml dependency [MrTango] (#3356)

- Update metadata version to 5215, Plone 5.2.7.
[maurits] (#5215)

Products.GenericSetup: 2.1.4 â†’ 2.1.5
------------------------------------
- Fix #114: Problems using ZMI on multi-instance clusters due to instable hash key.
(`#114 <https://github.com/zopefoundation/Products.GenericSetup/issues/114>`_)

- Move several tabs to Zope 4+ ZMI-markup standard. [jensens]

Products.MimetypesRegistry: 2.1.8 â†’ 2.1.9
-----------------------------------------
Bug fixes:

- Fix missing comma in install_requires.
[maurits] (#21)

Products.PluggableAuthService: 2.6.4 â†’ 2.7.0
--------------------------------------------
- Add support for Python 3.10.

- Improve the PAS override for Zope's ``manage_zmi_logout`` (`#107
<https://github.com/zopefoundation/Products.PluggableAuthService/issues/107>`_)

- Fixed deprecation warning for ``AccessControl.AuthEncoding``.

- Pass the login name as ``updateCredentials``'s ``login`` parameter
  (not the user id) (`#105
  <https://github.com/zopefoundation/Products.PluggableAuthService/issues/105>`_).
  Fix docstring of ``PluggableAuthService._extractUserIds``.

plone.app.debugtoolbar: 1.2.2 â†’ 1.2.3
-------------------------------------
Bug fixes:

- Fix missing zcml directive when `plone.app.standardtiles` is installed.
[petschki] (#18)

- Fix brackets in toolbar-help
[djowett] (#25)

- Fix a compatibility issue with Python 3.8 (#27)

plone.app.versioningbehavior: 1.4.3 â†’ 1.4.5
-------------------------------------------
Bug fixes:

- Depend on `plone.namedfile` core instead of its empty `[blobs]` extra.
[maurits] (#106)

- Fix tests on Python 2 with newer plone.dexterity using repr for the schema.
[wesleybl] (#60)

z3c.jbot: 1.1.0 â†’ 1.1.1
-----------------------

plone.app.tiles: 3.2.0 â†’ 3.2.3
------------------------------

FormEncode: 1.3.1 â†’ 2.0.1
-------------------------

plone.app.blob: 1.8.1 â†’ 1.8.2
-----------------------------
Bug fixes:

- Minor package improvements. (#56)

Products.ATContentTypes: 3.0.5 â†’ 3.0.6
--------------------------------------
Bug fixes:

- Security fix: prevent cache poisoning with the Referer header.
See `security advisory <https://github.com/plone/Products.ATContentTypes/security/advisories/GHSA-g4c2-ghfg-g5rh>`.
[maurits] (#1)

File	Description	Downloads
Plone-5.2.7-UnifiedInstaller-1.0.zip (md5, sig)	Unified Installer zip -- same as tarball, but easier to extract on Windows	170 last downloaded 40 weeks ago
Plone-5.2.7-UnifiedInstaller-1.0.tgz (md5, sig)	Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems	1,725 last downloaded 4 days ago
Total downloads:		1,895