Plone 5.2.8

Milestone information

Project:
Plone
Series:
5.2
Version:
5.2.8
Released:
 
Registrant:
Maurits van Rees
Release registered:
Active:
Yes. Drivers can target bugs and blueprints to this milestone.  

Download RDF metadata

Activities

Assigned to you:
No blueprints or bugs assigned to you.
Assignees:
No users assigned to blueprints and bugs.
Blueprints:
No blueprints are targeted to this milestone.
Bugs:
No bugs are targeted to this milestone.

Download files for this release

After you've downloaded a file, you can verify its authenticity using its MD5 sum or signature. (How do I verify a download?)

File Description Downloads
download icon Plone-5.2.8-UnifiedInstaller-1.0.zip (md5, sig) Unified Installer zip -- same as tarball, but easier to extract on Windows 69
last downloaded 42 weeks ago
download icon Plone-5.2.8-UnifiedInstaller-1.0.tgz (md5, sig) Unified Installer tarball -- builds Plone on most Linux/macOS/Windows 10 systems 21,091
last downloaded 10 weeks ago
Total downloads: 21,160

Release notes 

# Release notes for Plone 5.2.8

Released: Saturday May 14, 2022.

## Highlights

Interesting changes since 5.2.7:

* `Zope`: Enhance cookie support. For details, see [issue 1010](https://github.com/zopefoundation/Zope/issues/1010)
  For more changes see https://zope.readthedocs.io/en/4.x/changes.html
* `waitress` is updated to version 2.1.1 to mitigate a vulnerability in that package. As waitress no longer supports Python versions less than 3.7 it is not advised to run Plone 5.2 on Python 2.7 or 3.6 any longer, even though they are still supported by Plone itself. You get an older `waitress` version then. If you must use an old Python version, please switch to a different WSGI server. See the [recommendations](https://zope.readthedocs.io/en/latest/operation.html#recommended-wsgi-servers) in the Zope documentation.
* WARNING: the new `waitress` 2.1.1 does seem to suffer from a possible [race condition](https://github.com/Pylons/waitress/issues/374) leading to the process quitting. If you are affected by this, you can downgrade to 2.1.0 (which has a known security vulnerability, as mentioned above) or use a different WSGI server.
* `plone.app.linkintegrity`: Track link integrity of referenced PDFs and other site objects in IFRAME SRC references.
* `plone.outputfilters`: Resolve UIDs in SRC attribute of of SOURCE and IFRAME elements.
* `plone.app.querystring`: Add lazy attribute to vocabularies to prevent fetching any results.
* `plone.schema`: Use indent in json.dumps to make JSON readable in the widget.

Changelog 

View the full changelog

Zope 4.6.3 → 4.8.1
------------------

- See https://zope.readthedocs.io/en/4.x/changes.html

zc.buildout: 2.13.4 → 2.13.7
----------------------------

plone.recipe.zope2instance: 6.10.2 → 6.11.0
-------------------------------------------
New features:

- By default, do not create a tempstorage on Plone 6.
  See `issue 180 <https://github.com/plone/plone.recipe.zope2instance/issues/180>`_.
  [maurits] (#180)

zest.releaser: 6.22.1 → 6.22.2
------------------------------

Products.MailHost: 4.11 → 4.12
------------------------------
- Add support for Python 3.9 and 3.10.

mockup: 3.2.7 → 3.2.8
---------------------
Bug fixes:

- Fix duplicated initialization of result collection. Ref: #1152
  [petschki] (#1152)

Plone: 5.2.7 → 5.2.8
--------------------
Bug fixes:

- Release Plone 5.2.8.
  [maurits]

plone.app.contentlisting: 2.0.6 → 2.0.7
---------------------------------------
Bug fixes:

- realobject: Do not throw an AttributeError when accessing attributes which return ``None``. (#42)

plone.app.customerize: 1.3.11 → 1.3.12
--------------------------------------
Bug fixes:

- Fixed tests when run with ``zope.component`` 5+.
  [maurits] (#500)

plone.app.dexterity: 2.6.10 → 2.6.11
------------------------------------
Bug fixes:

- Don't acquire lanuage from portal root default_language for ICategorization.language.
  Fixes https://github.com/plone/plone.app.dexterity/issues/258
  [jaroel] (#351)

plone.app.discussion: 3.4.5 → 3.4.7
-----------------------------------
Bug fixes:

- Grant Site Administrators the same workflow permissions as Managers.
  They were missing permissions on pending comments.
  [maurits] (#199)

- Fix test after PortalTransforms uses lxml html method to serialize, instead of xml method.
  [gotcha] (#192)

plone.app.iterate: 4.0.2 → 4.0.3
--------------------------------
Bug fixes:

- Fix a typo in a a call to reindexObject (#101)

plone.app.linkintegrity: 3.5.0 → 3.6.1
--------------------------------------
New features:

- Track link integrity of referenced PDFs and other site objects in IFRAME SRC references. (#84)

Bug fixes:

- Test fix: only load plone.app.contenttypes migration layer on Python 2.
  [maurits] (#641)

plone.app.locales: 5.1.30 → 5.1.31
----------------------------------
- Fixes Portuguese integrity break message when deleting a content, to consider the
  masculine and feminine gender of the content type.
  [wesleybl]

plone.app.querystring: 1.4.15 → 1.5.0
-------------------------------------
New features:

- Add lazy attribute to vocabularies to prevent fetching any results
  [reebalazs] (#104)

plone.app.upgrade: 2.1.0 → 2.1.1
--------------------------------
Bug fixes:

- Added upgrade to 5216, Plone 5.2.8. [maurits] (#5216)

plone.app.widgets: 3.0.6 → 3.0.7
--------------------------------
Bug fixes:

- fix robot tests
  [petschki] (#215)

plone.app.z3cform: 3.2.3 → 3.2.4
--------------------------------
Bug fixes:

- Add ``name`` attribute to form, if ``view.form_name`` is defined.
  See `easyform issue 325 <https://github.com/collective/collective.easyform/issues/325>`_.
  [maurits] (#325)

plone.autoform: 1.9.0 → 1.9.1
-----------------------------
Bug fixes:

- Fix tests when used with latest z3c.form
  [petschki] (#40)

plone.outputfilters: 4.0.2 → 4.1.0
----------------------------------
New features:

- Resolve UIDs in SRC= attribute of of SOURCE and IFRAME elements. (#47)

plone.restapi: 7.7.0 → 7.8.0
----------------------------
New features:

- Make masking specific validation errors configurable in DX DeserializeFromJson. [fredvd] (#1211)

Bug fixes:

- Prevent to create an empty AT content.
  [gbastien] (#1386)

- Fix serializing revisions of Archetypes content. [pbauer] (#1335)

plone.schema: 1.3.0 → 1.4.0
---------------------------
New features:

- Use indent in json.dumps to make JSON readable in the widget [MrTango] (#16)

plone.staticresources: 1.4.4 → 1.4.6
------------------------------------
Bug fixes:

- pat-structure fix duplicate rendering
  [petschki] (#210)

- Fix icon font loading.

  Fix issue with Glyphicons and Fontello font loading on Portals where the portal root is a level higher.
  The fonts are now loaded relative to the CSS requesting them.

  Fixes: https://github.com/plone/plone.staticresources/issues/162
  Fixes: https://github.com/plone/plone.staticresources/issues/203

  Ref: https://github.com/plone/plone.staticresources/pull/168
  Ref: https://github.com/plone/plone.staticresources/pull/171
  Ref: https://github.com/plone/plone.staticresources/pull/175
  Ref: https://community.plone.org/t/deployments-not-rooted-fail-to-load-the-fontello-icons/15047/12?u=thet (#203)

Products.CMFPlone: 5.2.7 → 5.2.8
--------------------------------
Bug fixes:

- Update WCAG version to 2.1 in the accessebility-info default content.
  [marwanatef2] (#3273)

- Remove date range search fix, which was done in Products.ZCatalog.
  [wesleybl] (#3432)

- Fix detection of initial login time [MrTango] (#3447)

- Update metadata version to 5216, Plone 5.2.8.
  [maurits] (#5216)

Products.GenericSetup: 2.1.5 → 2.2.0
------------------------------------
- Add method ``tool.hasUpgrades``.
  This is more efficient than checking if ``tool.listUpgrades`` returns a non-empty list.

- Add options ``dest`` and ``simple`` to ``tool.listUpgrades``.
  Use this to simplify the ``upgradeProfile`` method.

- Fix #118: Import handler not found .
  (`#118 <https://github.com/zopefoundation/Products.GenericSetup/issues/118>`_)

- Allow passing ``quiet=True`` to ``upgradeProfile``.
  Then we do not complain when the profile is not installed or needs no upgrade.

Products.PortalTransforms: 3.1.12 → 3.2.0
-----------------------------------------
Bug fixes:

- Prevent auto-closed empty tags in safe_html output.
  [cekk] (#43)

plone.app.versioningbehavior: 1.4.5 → 1.4.6
-------------------------------------------
Bug fixes:

- Removed deprecated `plone.namedfile[blobs]` from the test requirements.
  [maurits] (#106)

plone.formwidget.autocomplete: 1.4.0 → 1.4.1
--------------------------------------------

plone.app.blocks: 5.0.0 → 5.0.1
-------------------------------

plone.app.standardtiles: 2.3.2 → 2.4.2
--------------------------------------

plone.app.tiles: 3.2.3 → 3.3.0
------------------------------

Products.ATContentTypes: 3.0.6 → 3.0.7
--------------------------------------
Bug fixes:

- Fix test after PortalTransforms uses lxml html method to serialize (instead of xml method).
  [gotcha] (#68)

0 blueprints and 0 bugs targeted

There are no feature specifications or bug tasks targeted to this milestone. The project's maintainer, driver, or bug supervisor can target specifications and bug tasks to this milestone to track the things that are expected to be completed for the release.

This milestone contains Public information
Everyone can see this information.