Security

• Update Django from 4.1.8 to 4.2.1 which contains a fix for CVE-2023-31047. We believe this does not affect Kiwi TCMS
• Implement better scanning for embedded <script> tags in uploaded files
• Force Content-Type: text/plain when serving uploaded files. See GHSA-x7c2-7wvg-jpx7
• Explicitly configure top-level permissions for CI jobs as read-all
• Pass untrusted input via intermediate ENV variables in CI jobs

Improvements

• Update nginx from 1.20 to 1.22
• Update django-grappelli from 3.0.5 to 3.0.6
• Update pygithub from 1.58.1 to 1.58.2
• Add Helm chart examples (Michael Abramovich)

Refactoring and testing

• Update node_modules/webpack-cli from 5.0.1 to 5.1.1
• Update node_modules/webpack from 5.80.0 to 5.83.1
• Update node_modules/eslint from 8.38.0 to 8.40.0
• Update tests/bugzilla/fedora from 37 to 38
• Enable the checkov static linter

Translations

• Updated Russian translation

Security

• For security reasons updating email address is no longer allowed. Fixes CVE-2023-30544
• Block uploads of potentially harmful files. Fixes CVE-2023-30613

Improvements

• Update Django from 4.1.7 to 4.1.8
• Update django-attachments from 1.9.1 to 1.11
• Update psycopg2 from 2.9.5 to 2.9.6
• Update pygments from 2.14.0 to 2.15.1
• Update python-gitlab from 3.13.0 to 3.14.0
• Add INFO message for User/Group pages in Admin panel which indicates whether the user is viewing records from the main tenant or from an individual tenant to avoid confusion
• Add new Execution Dashboard telemetry report. Closes Issue #2918
• Add column visibility button on search pages. Fixes Issue #3149
• Add CSV, Excel, PDF and Print buttons on search pages. Fixes Issue #3150
• Allow manually resetting TestRun.stop_date when editing page. Refs Issue #3124
• Display child test plans on Search Test Plans page. Fixes Issue #2917
• Display nested test plans in drop down select widget on Search Test Cases page. Fixes Issue #3134
• Display nested test plans in drop down select widget on Telemetry pages
• Display pagination controls for search results both at the top and bottom
• On Search Test Runs page display start/stop timestamp columns. Closes Issue #2306
• On Search Test Cases page display results from child test plans. Fixes Issue #3135

API

• TestExecution.update() method will no longer update self.stop_date and self.run.stop_date fields when status has been changed! The appropriate behavior here should be specified by the client calling this API method. Refs Issue #3112
• TestPlan.filter() method now returns the children_count field. Refs Issue #3134, Issue #2917
• TestExecution.filter() method now returns status__icon & status__color fields

Bug fixes

• Fix test case filter widget on Test Plan page. Fixes Issue #3137
• Disable selection of inactive test plans on New Test Run page. Fixes Issue #3152
• Add styled page for attachment upload errors. Fixes Issue #1156
• Fix include syntax for uwsgi.override in uwsgi.conf

Refactoring

• Add additional query parameters for updateTestPlanSelectFromProduct()
• Add preProcessData callback to updateTestPlanSelectFromProduct()
• Remove unused telemetry.css file
• Remove unused parameter from updateTestPlanSelectFromProduct()
• Replace hand-crafted pagination controls with the ones built into DataTables
• Replace useless form_errors_to_list() function
• Skip RobotFramework tests on aarch64 b/c of Selenium error, tested on x86_64
• Update node_modules/webpack from 5.76.3 to 5.80.0
• Update node_modules/eslint from 8.37.0 to 8.38.0

Translations

• Updated Russian translation
• Updated Slovenian translation

Security

• Add the Content-Security-Policy header to block inline JavaScript. Fixes CVE-2023-27489
• Add the X-Frame-Options header to deny loading Kiwi TCMS into an iframe
• Add the X-Content-Type-Options header

Improvements

• Update django-grappelli from 3.0.4 to 3.0.5
• Update django-simple-history from 3.2.0 to 3.3.0
• Update jira from 3.4.1 to 3.5.0
• Update markdown from 3.4.1 to 3.4.3
• Update pygithub from 1.57 to 1.58.1
• Update tzdata from 2022.7 to 2023.3
• Do not allow last super-user to be deleted (Ivajlo Karabojkov)
• Improve loading time on test runs pages which have large number of executions with components, parameters and/or tags (@somenewacc)
• Expose all RPC methods in the documentation
• Update documentation to describe transitions for TestRun statuses. Closes Issue #3124

Settings

• Allow uWSGI configuration override via the file /Kiwi/etc/uwsgi.override

API

• New API method TestRun.add_attachment (David M. Johnson)
• New API method Environment.filter() method. Refs Issue #3034 (@somenewacc)
• New API method Environment.create(). Closes Issue #3034 (@somenewacc)

Bug fixes

• Fix /admin/testcases/template/ page not being able to render the text editor

Refactoring

• Refactor bugtracker integration
• Remove unnecessary onChanged function for DurationWidget
• Refactoring to avoid inline <script> tags

Translations

• Enable translation integration on Admin pages
• Updated Bulgarian translation
• Updated French translation
• Updated Slovenian translation

Security

• Update Django from 4.1.5 to 4.1.7 which includes fixes for CVE-2023-23969 and CVE-2023-24580
• Rate limit everything under /accounts/. Fixes CVE-2023-25156
• Require a captcha challenge on password reset form. Fixes CVE-2023-25171

Improvements

• Update bleach from 5.0.1 to 6.0.0

• Update django-tree-queries from 0.13.0 to 0.14.0

• Update python-gitlab from 3.12.0 to 3.13.0

• Update python-redmine from 2.3.0 to 2.4.0

• Update node_modules/json5 from 1.0.1 to 1.0.2

• Switch from Apache to Nginx + uWSGI

  • uWSGI will spawn worker processes for each available CPU core
  • reduce container image by around 50 MB

  Warning:

  No longer support KIWI_DONT_ENFORCE_HTTPS environment variable

Bug fixes

• Load SimpleMDE for Admin pages. Fixes Issue #3057
• Don't show all builds on Search Test Runs page before Product and Version fields are initialized when loading the page directly

Refactoring and testing

• Remove deprecated setDaemon() method (Ivajlo Karabojkov)
• Execute docker tests against localhost instead of container IP
• Test performance baseline on certain pages with wrk
• Conditionally execute top-level UI functions
• Raise RuntimeError instead of Exception to satisfy newer pylint checks

Translations

• Updated Chinese Simplified translation
• Updated German translation
• Updated Polish translation

Security

• Update bootstrap, bootstrap-select, eonasdan-bootstrap-datetimepicker, jquery and moment-timezone Node.js packages

• Enable password validators to avoid users choosing weak passwords:

  • password can’t be too similar to other personal information
  • password must contain at least 10 characters
  • password can’t be a commonly used password
  • password can’t be entirely numeric

  Warning:

  Existing users are advised to reset their passwords! For more information see GHSA-496x-2jqf-hp7g

Improvements

• Update django from 4.1.3 to 4.1.5
• Update django-colorfield from 0.7.2 to 0.8.0
• Update django-grappelli from 3.0.3 to 3.0.4
• Update django-simple-history from 3.0.0 to 3.2.0
• Update django-tree-queries from 0.11.0 to 0.13.0
• Update pygments from 2.13.0 to 2.14.0
• Update python-gitlab from 3.11.0 to 3.12.0
• Update tzdata from 2022.6 to 2022.7
• Make navigation menu more compact by moving it into the header
• Don't install development dependencies for Node.js packages when building the container image

Database

• Add migrations to reflect indexing changes in django-simple-history 3.1.0. On large databases these will take a while to complete!

Bug fixes

• Trigger on-change handler for Test Case Search pop-up. Fixes Issue #2679
• Fix the + Build button on Bug and TestRun pages which didn't properly select Product & Version
• Editing TestRun page now properly saves all datetime fields instead of reverting them to None
• Initialize planned_start and planned_stop fields when cloning a TestRun

Refactoring and testing

• Start using webpack for JavaScript assets. Closes Issue #1262
• Refactor duplicated setup in Telemetry pages. Closes Issue #1118
• Add CodeQL workflow for GitHub code scanning
• Make it possible to override attachments card title
• Remove useless tooltip from Telemetry pages
• Define page ID for each page that has a .ready() function
• Replace deprecated jQuery syntax for .ready()
• Remove duplicate populateProductVersion() function
• Resolve all of the remaining eslint issues
• Use more precise assert methods in tests

Translations

• Updated Russian translation
• Updated Slovenian translation
• Updated Spanish translation

Security

• Update Django from 4.0.7 to 4.1.3 which contains multiple bug fixes and security improvements. See https://docs.djangoproject.com/en/4.1/releases/4.1.3/
• Sanitize HTML input when generating history diff to prevent XSS attacks

Improvements

• Update django-extensions from 3.2.0 to 3.2.1

• Update jira from 3.4.0 to 3.4.1

• Update psycopg2 from 2.9.3 to 2.9.5

• Update pygithub from 1.55 to 1.57

• Update python-gitlab from 3.9.0 to 3.11.0

• Update tzdata from 2022.2 to 2022.6

• Container is now built on top of Red Hat Enteroprise Linux 9 and Python 3.9

  Warning:

  There is high risk of breaking downstream containers. Pay attention to bind-mounted settings files. Inspect downstream Dockerfile & docker-compose.yml files !!!

• Unify some translation strings

• Document add-on issue tracker integrations

• Rename Properties to Parameters because "test case parameters" is more widely used

Bug fixes

• JIRA.get_issue_type_from_jira() now accepts a second argument. Fixes Issue #2929 (@cmbahadir)
• Fix typo in documentation (Christian Clauss)
• Trim white-space after splitting parameter values. For example the inputs 'OS=Linux' and 'OS = Windows ' will result in Key: 'OS', Values: ['Linux', 'Windows']

Refactoring and testing

• Update Fedora from 32 to 36 in /tests/bugzilla
• Remove Travis CI config b/c we don't use it anymore
• Add Coverity Scan as a GitHub action
• Don't scan devel dependencies with Coverity Scan
• Redirect to where we came from in case posting a comment results in invalid form
• Configure Dependabot to update Docker containers and try tightening security around docker containers used during testing
• Use npm audit fix to automatically update some Node.js dependecies
• Execute npm audit signatures when installing Node.js packages
• Start using find_namespace_packages() to resolve 'Package would be ignored' warnings from setuptools
• Add missing field in setup() to avoid a warning

Translations

• Updated Chinese Simplified translation
• Updated Chinese Traditional translation
• Updated French translation
• Updated German translation
• Updated Slovak translation
• Updated Slovenian translation

Improvements

• Update jira from 3.3.1 to 3.4.0
• Update pygments from 2.12.0 to 2.13.0
• Update python-gitlab from 3.7.0 to 3.9.0
• Update tzdata from 2022.1 to 2022.2
• Add Product drop down field in Build admin page. Closes Issue #2818
• Add 'prune' argument required for Django 4.1 compatibility
• Improve documentation around DEFAULT_GROUPS
• Update docs about language preferences and add a Change language menu item. Closes Issue #2901, Issue #2902, Issue #2903
• Performance improvement for Status matrix telemetry
• Performance improvement for Execution trends telemetry
• Display a spinner widget while telemetry data is still loading. Closes Issue #1801

Bug fixes

• Fix error Jquery deferred: No length property of null object (@cmbahadir)

Refactoring and testing

• Add test for AnonymousViewBackend & auth. permissions
• Exclude auth.view_ permissions from AnonymousViewBackend
• Specify 30 seconds timeout for internal requests via the requests library

Translations

• Updated Chinese Simplified translation
• Updated French translation
• Updated Polish translation
• Updated Russian translation
• Updated Slovenian translation

Security

• Update django from 4.0.3 to 4.0.7, see https://docs.djangoproject.com/en/4.0/releases/4.0.7/, https://docs.djangoproject.com/en/4.0/releases/4.0.6/, https://docs.djangoproject.com/en/4.0/releases/4.0.5/ and https://docs.djangoproject.com/en/4.0/releases/4.0.4/ We don't think Kiwi TCMS has been affected by the security vulnerabilities fixed in Django.
• Use TLSv1.2 and 1.3 by default and disable older protocols

Improvements

• Update bleach from 5.0.0 to 5.0.1
• Update django-colorfield from 0.6.3 to 0.7.2
• Update django-extensions from 3.1.5 to 3.2.0
• Update django-tree-queries from 0.9.0 to 0.11.0
• Update jira from 3.2.0 to 3.3.1
• Update markdown from 3.3.6 to 3.4.1
• Update mysqlclient from 2.1.0 to 2.1.1
• Update python-gitlab from 3.3.0 to 3.7.0
• Update node_modules/marked from 4.0.14 to 4.0.18
• Relax docutils requirement. Use latest version
• Add template block which will allow logo customizations (Ivajlo Karabojkov)
• Don't show PLUGINS menu when no plugins are installed. References Issue #2729
• Add information about Kiwi TCMS user to 1-click bug reports. Closes Issue #2591
• Use a better icon to signify a manual test inside the user interface
• Change UserAdmin to be permission based instead of being role-based. Fixes Issue #2496
• Allow post-processing of automatically created issues. Closes Issue #2383
• Allow more customization over issue type discovery for Jira. Closes Issue #2833
• Allow more customization over project discovery for Jira
• Allow more customization over Redmine tracker. Closes Issue #2382
• Allow DB settings to be read from Docker Secret files. Fixes Issue #2606
• Add filter on TestRun page to show test executions assigned to the current user. Closes Issue #333
• Add URL for creating new TestRun from a TestPlan. The format is /runs/from-plan/<plan-id>/. Closes Issue #274
• Add bug.Severity attribute which is fully customizeable. Closes Issue #2703
• Update documentation around TCMS_ environment variables used by automation plugins
• Update documentation to denote that pytest plugin is now generally available
• Document necessary permissions for adding new users. References Issue #2496

Database

• New migration for bug.Severity model

Settings

• Remove deprecated setting USE_L10N. See https://docs.djangoproject.com/en/4.0/ref/settings/#use-l10n
• New setting EXTERNAL_ISSUE_POST_PROCESSORS
• New setting JIRA_ISSUE_TYPE
• New setting REDMINE_TRACKER_NAME
• New setting EXTERNAL_ISSUE_POST_PROCESSORS

API

• If default_tester field is not specified for TestRun.create() method then use the currently logged-in user.
• Return value for method TestExecution.filter() now contains fields expected_duration and actual_duration. Closes Issue #1924
• Return value for method Bug.filter() now contains fields severity__name, severity__icon and severity__color

Bug fixes

• Adjust field name when rendering test execution on TestRun page. Fixes Issue #2794
• Render rich text editor preview via backend API:
  • Makes display on HTML pages and editor preview the same. Fixes Issue #2659
  • Fixes a bug with markdown rendered in JavaScript. Fixes Issue #2711
• Stop propagation of HTML unescape which causes display issues with code snippets that contain XML values. Fixes Issue #2800
• Show bug text only when creating new records, not when editing
• Properly display & validate related form fields when editing bugs
• Don't send duplicate emails when editing bugs. Fixes Issue #2782

Refactoring and testing

• Convert two assignment statements to augmented source code. Closes Issue #2610 (Markus Elfring)

• Rename method IssueTrackerType.report_issue_from_testexecution():

  • Rename to _report_issue() which returns tuple of (object, str)
  • In case new issue was not created automatically and the method falls back to manual creation the return value will be (None, str)
  • report_issue_from_testexecution() will call _report_issue() internally and handle the change in return type

  Note

  • This change is backwards compatible!
  • For customized issue tracker integration you will have to apply the same changes to your customized code if you wish new functionality, like post-processing of automatically created issues to work.

• Add tests for backup & restore commands. Closes Issue #2695

• Update versions of several CI tools

• Updates around new version of pylint

• Use codecov-action to upload coverage results

• Remove setuptools and other workarounds in tests

• Don't special case dependencies which already provide wheel packages

• Workaround an issue with setuptools_git_archive introduced by jira==3.2.0

• Workaround the fact that django-ranged-response doesn't provide wheels

• Report test results via kiwitcms-django-plugin. Closes Issue #1757

Translations

• Updated Chinese Traditional translation
• Updated Slovak translation

Security

• Update django from 4.0.3 to 4.0.4, see https://docs.djangoproject.com/en/4.0/releases/4.0.4/

Improvements

• Update bleach from 4.1.0 to 5.0.0
• Update django-tree-queries from 0.7.0 to 0.9.0
• Update jira from 3.1.1 to 3.2.0
• Update pygments from 2.11.2 to 2.12.0
• Update python-gitlab from 3.2.0 to 3.3.0
• Update tzdata from 2021.5 to 2022.1
• Update node_modules/marked from 4.0.12 to 4.0.14
• Update node_modules/prismjs from 1.27.0 to 1.28.0
• Allow overriding of Azure Boards API version. Closes Issue #2717
• If tenant_groups is enabled then refresh_permissions command will update default tenant groups too
• Document tenant-group permissions

Settings

• New setting AZURE_BOARDS_API_VERSION, defaults to 6.0. Can be overriden directly in settings or via environment variable with the same name

Bug fixes

• Patch for repositories under GitLab subgroups. Fixes Issue #2643 (@cmeissl)
• Don't crash if a comment user has been removed. Fixes KIWI-TCMS-HZ

Refactoring

• Split Users & Groups menu items under ADMIN entry in navigation
• [pre-commit.ci] updates
• pylint adjustments

Translations

• Updated Chinese Simplified translation

Improvements

• Update django from 4.0.2 to 4.0.3
• Update django-grappelli from 3.0.2 to 3.0.3
• Update django-simple-captcha from 0.5.14 to 0.5.17
• Update python-bugzilla from 3.1.0 to 3.2.0
• Update python-gitlab from 3.1.1 to 3.2.0
• Update node_modules/prismjs from 1.26.0 to 1.27.0
• Add new command to perform a collection of post-upgrade tasks. Kiwi TCMS admins are advised to replace manage.py migrate with manage.py upgrade (Ivajlo Karabojkov)

API

• New API method Category.create(). Fixes Issue #2705 (Erik Heeren)
• New API method Classification.create(). Fixes Issue #2705 (Erik Heeren)

Refactoring and testing

• Add docker build & push automation
• Fix Bandit exclusion rule
• Test and build on aarch64
• Apply auto fixes fro pre-commit.ci
• Apply auto fixes from Deepsource
• Update versions of several GitHub Actions
• Use the appropriate path to package.json for Dependabot
• Remove old Telemetry link in menu to avoid confusion

Translations

• Updated Bulgarian translation
• Updated Japanese translation
• Updated Chinese Traditional translation
• Updated Slovenian translation
• Updated Spanish translation

Security

• Update Django from 3.2.10 to 4.0.2 to fix several fulnerabilities: CVE-2022-22818, CVE-2022-23833, CVE-2021-45115, CVE-2021-45116, CVE-2021-45452. Of those we believe that only CVE-2022-23833: Denial-of-service possibility in file uploads may directly impact Kiwi TCMS

Improvements

• Update django-contrib-comments from 2.1.0 to 2.2.0
• Update django-uuslug from 1.2.0 to 2.0.0
• Update python-gitlab from 3.1.0 to 3.1.1
• Update node_modules/marked from 4.0.10 to 4.0.12

Database

• New migration for django-simple-captcha

Settings

• RECAPTCHA_PUBLIC_KEY, RECAPTCHA_PRIVATE_KEY and RECAPTCHA_USE_SSL are no longer in use
• New setting USE_CAPTCHA, defaults to True
• The string "captcha" is added to INSTALLED_APPS

Bug fixes

• Fix inappropriate RPC calls causing Version and Build dropdown widgets to display no values. Fixes Issue #2704

Refactoring and testing

• Add tzdata to requirements
• Replace django-recaptcha with django-simple-captcha
• Adjust /init-db view to reliably detect when applying database migrations is complete and not exit prematurely

Translations

• Updated Slovenian translation

Improvements

• Update Django to 3.2.11
• Update django-colorfield from 0.4.5 to 0.6.3
• Update django-grappelli from 2.15.3 to 3.0.2
• Update psycopg2 from 2.9.2 to 2.9.3
• Update pygments from 2.10.0 to 2.11.2
• Update python-gitlab from 2.10.1 to 3.1.0
• Update node_modules/prismjs from 1.25.0 to 1.26.0
• Update node_modules/marked from 2.1.3 to 4.0.10
• Admin panel now allows to view, add, edit and delete Environment records
• Allow selection of environment when creating new TestRun and display the chosen values inside the TestRun page. Closes Issue #1344
• Creating a TestRun will now generate test execution matrix based on the available environment and test case properties. Closes Issue #1843
• When generating a test execution matrix the supported algorithms are "full" and "pairwise". Closes Issue #1931
  • Feature is enabled for test runs which contain test cases. This feature is not shown when creating an empty test run
  • This feature isn't supported when subsequently adding new test cases to test run
• Record a random hex number under /Kiwi/uploads/installation-id

Detailed information about properties, environments and test matrix generation can be found in a separate article.

Database

• New model testrun.Environment
• New model testrun.EnvironmentProperty
• New model testrun.Property

Warning:

These newly added models create additional permission labels with names testruns | environment | Can .... environment, testruns | property | Can .... property, testruns | environment property | Can .... environment property

Execute manage.py refresh_permissions and/or assign them manually to users and groups if they should be able to interact with the new objects!

Settings

• Update the value of MODERNRPC_METHODS_MODULES setting to include modules with the new API methods

API

• Method TestRun.add_case will now return a list.

  Warning

  This breaks API compatibility with older versions and will break all plugins which rely on this method. Use plugins v11 or greater!

• Method TestRun.add_case return value will now include a field named properties

• New methods Environment.properties, Environment.add_property and Environment.remove_property

• New method TestRun.properties

Bug fixes

• Send e-mail notification when adding comments to bugs. Fixes Issue #2232 (@cmbahadir)
• Disable the "+" button when there is no related element selected. Fixes Issue #2561 (@cmbahadir)
• When cloning test plans keep the existing test case sort order inside the resulting test plan. Fixes Issue #2218 (Nicolas Gelot)
• Configure en_US.UTF-8 locale inside container. Allows upload of files with unicode names. Fixes Issue #2600

Refactoring and testing

• Refresh logo design
• Pylint fixes
• Pin setuptools b/c of problem with django-extensions
• Remove redundant test scenario
• Shell script refactoring

Translations

• Updated Chinese Simplified translation
• Updated Chinese Traditional translation
• Updated French translation
• Updated Hebrew translation
• Updated Slovenian translation

Improvements

• Update django from 3.2.7 to 3.2.9
• Update django-colorfield from 0.4.3 to 0.4.5
• Update django-extensions from 3.1.3 to 3.1.5
• Update django-grappelli from 2.15.1 to 2.15.3
• Update django-tree-queries from 0.6.0 to 0.7.0
• Update jira from 3.0.1 to 3.1.1
• Update markdown from 3.3.4 to 3.3.6
• Update mysqlclient from 2.0.3 to 2.1.0
• Update psycopg2 from 2.9.1 to 2.9.2
• Display a warning if connection doesn't use HTTPS (Ivajlo Karabojkov)
• Account registration page can be turned on/off via settings. Fixes Issue #2500
• TestCase Search page can now filter by TestPlan. Fixes Issue #2283
• Allow template selection when creating new test case. Fixes Issue #957
• TestCase page now allows specification of properties, e.g. mobile devices on which the test should be executed. This feature serves as a building block for Issue #1843, Issue #1931 and Issue #1344 but isn't active anywhere else inside Kiwi TCMS at the moment
• TestExecution properties will be displayed inside TestRun page if they have been specified
• Rearrange help-text in admin page for better visibility
• Switch to official Postgres image from Docker Hub
• Switch to official MariaDB image from Docker Hub

Warning:

For Postgres data dir changed from /var/lib/pgsql/data to /var/lib/postgres/data. Environment variables inside docker-compose file changed as well, see docker-compose.postgres.

For MariaDB data dir changed from /var/lib/mysql/data to /var/lib/mysql. MYSQL_CHARSET & MYSQL_COLLATION environment variables are no longer recognized. Instead they are present as command line options passed to the container, see docker-compose.yml. Previous workaround for these variables was also removed.

If you want to migrate from the previous centos/mariadb-103-centos7 or centos/postgresql-12-centos7 containers to mariadb:latest and postgres:latest make sure to update your container control files!

Settings

• New setting REGISTRATION_ENABLED, default True, Can be controlled via environment variable KIWI_REGISTRATION_ENABLED. When set to False will disable account registration page

Database

• New model testcases.Property
• New model testcases.Template
• New model testruns.TestExecutionProperty
• Remove unique_together constraint for testruns.TestExecution model. This makes it possible to add multiple executions for the same test case in the same test run

Warning:

These newly added models create additional permission labels with names testcases | template | Can .... template, testcases | property | Can .... property, testruns | test execution property | Can .... test execution property

Execute manage.py refresh_permissions and/or assign them manually to users and groups if they should be able to interact with the new objects!

API

• Method TestCase.filter() now returns additional fields setup_duration, testing_duration, expected_duration - all serialized in seconds. Refs Issue #1923 (Mfon Eti-mfon)
• Method User.filter() will no longer return fields groups, user_permissions, date_joined and last_login
• New method TestExecution.properties()
• New method TestCase.properties()
• New method TestCase.add_property()
• New method TestCase.remove_property()

Bug fixes

• Unify tab size & tab indentation b/w Python & SimpleMDE. Fixes Issue #1802
• Use sane_list extension for rendering consecutive lists in markdown. Closes Issue #2511

Warning:

The visual markdown editor explicitly didn't follow markdown syntax rules by allowing indentation with 2 spaces and treating tabs as 2 spaces as well. See "Indentation/Tab Length" at https://python-markdown.github.io/#differences

The backend markdown rendering engine explicitly followed an undefined behavior which happens to be different from what the visual markdown editor does. See "Consecutive Lists" at https://python-markdown.github.io/#differences

The previous 2 changes make sure the visual editor and backend rendering engine follow the same rules. This may result is "broken" display of existing text which doesn't follow the markdown syntax rules. If you spot such text just edit to make it render the way you wish.

• Fix broken URL and minor updates to documentation
• Update GitLab tracker integration documentation to avoid confusion. Closes Issue #2559
• Limit tag input length to 255 characters. Closes Issue #2176
• Make error notifications in Admin to display with red color
• Select only visible rows for bulk-update in TestRun page. Fixes Issue #2222
• Remove Cache-Control header from httpd. Closes Issue #443

Refactoring and testing

• Add permissions test for add-hyperlink-bulk menu. Closes Issue #716
• Add explicit tests for issue tracker integration with GitLab.com
• Tests teardown - remove comments & close issues on GitLab.com
• Add missing rlPhaseEnd for docker tests
• Multiple pylint and eslint fixes

Translations

• Updated French translation
• Updated Hungarian translation
• Updated Slovenian translation

Security

• Update prismjs from 1.24.1 to 1.25.0. Includes patches against a Regular Expression Denial of Service vulnerability. See https://snyk.io/vuln/SNYK-JS-PRISMJS-1585202

Improvements

• Update bleach from 4.0.0 to 4.1.0
• Update django from 3.2.6 to 3.2.7
• Update django-colorfield from 0.4.2 to 0.4.3
• Update pygithub from 1.54.1 to 1.55
• Update pygments from 2.9.0 to 2.10.0
• Update python-gitlab from 2.10.0 to 2.10.1
• Allow filtering by TestRun ID in Test Case Search page
• Update test execution prefix in list of executions on TestRun page. Now includes both TE and TC numbers before the summary link
• Allow search by translated names on Test Run page
• Redirect "ADMIN -> Users and groups" menu item according to tenancy
• Allow creation of new test run from selected test cases inside existing test run. For example only select cases which are currently failing and re-test against a different build!
• The initial_setup command will create a schema called "empty" when executed inside a multi-tenant setup. Refs Issue #127

Settings

• Update values for MODERNRPC_HANDLERS setting
• Rename SafeJSONRPCHandler to KiwiTCMSJsonRpcHandler
• New RPC handler class KiwiTCMSXmlRpcHandler

Database

• New migrations for altered meta options

API

• TestCase.create method accepts setup_duration and testing_duration fields. Refs Issue #1923 (Mfon Eti-mfon)
• TestCase.update method acepts setup_duration and testing_duration fields. Refs Issue #1923 (Mfon Eti-mfon)
• New method Testing.individual_test_case_health
• Timedelta values are serialized to float, representing seconds

Bug fixes

• Fix wrong URL parameter passed to test cases clone page
• Show translated execution statuses for TestRun page. Closes Issue #1966
• Properly initialize Product value on TestRun Edit page. Closes Issue #2514
• Clone duration fields when cloning a test case

Refactoring and testing

• New automated test scenario for kiwi_auth.admin (Mariyan Garvanski)
• Unify similar strings to reduce translations burden
• Inside buildroot PyNaCl needs make in order to build a wheel package
• Adjust values for parametrized test to match existing scenarios
• Fix code smells from newer pylint
• eslint fixes for the JavaScript files

Translations

• Updated Chinese Simplified translation
• Updated German translation
• Updated Italian translation
• Updated Portuguese, Brazilian translation
• Updated Russian translation

Improvements

• Update bleach from 3.3.0 to 4.0.0

• Update django from 3.2.5 to 3.2.6

• Update django-colorfield from 0.4.1 to 0.4.2

• Update django-tree-queries from 0.5.2 to 0.6.0

• Update python-bugzilla from 3.0.2 to 3.1.0

• Update python-gitlab from 2.9.0 to 2.10.0

• Update node_modules/html5sortable from 0.13.2 to 0.13.3

• Docker image is now based on Red Hat's Universal Base Image instead of CentOS 8. See https://www.redhat.com/en/blog/introducing-red-hat-universal-base-image and https://catalog.redhat.com/software/containers/ubi8/ubi-minimal/5c359a62bed8bd75a2c3fba8.

  Important:

  The mysql and psql binaries in the container image are not available anymore! Backup and restore instructions have been updated accordingly, see https://kiwitcms.org/blog/atodorov/2018/07/30/how-to-backup-docker-volumes-for-kiwi-tcms/.

• Use initial_setup command to create public tenant in case we're running a multi-tenant instance. References Enterprise #88 (Ivajlo Karabojkov)

• Document that for Jira integration we use API tokens

Bug fixes

• Fix a bug where drop-down selectors for test plans would not show any values when product is changed. Fixes Issue #2467

Refactoring and testing

• Add tests for missing coverage in kiwi_auth.admin. References Issue #1607 (Mariyan Garvanski)
• Fix some eslint issues and formatting in testcases/js/get.js
• Use shorter URL when cloning test cases from TP page. References Issue #1054
• Limit URI size to 10KiB. This alone should allow for more than 1000 PKs specified for cloning. In addition Django itself limits the maximum number of GET/POST fields to 1000 via the DATA_UPLOAD_MAX_NUMBER_FIELDS setting, see https://docs.djangoproject.com/en/3.2/ref/settings/#data-upload-max-number-fields. Closes Issue #1054

Translations

• Updated Chinese Simplified translation
• Updated German translation
• Updated Hungarian translation
• Updated Portuguese, Brazilian translation
• Updated Slovenian translation

Improvements & security updates

• Update django from 3.2.3 to 3.2.5
• Update django-guardian from 2.3.0 to 2.4.0
• Update django-tree-queries from 0.5.1 to 0.5.2
• Update psycopg2 from 2.8.6 to 2.9.1
• Update python-gitlab from 2.7.1 to 2.9.0
• Update node_modules/marked from 2.0.3 to 2.1.3
• Update node_modules/html5sortable from 0.11.1 to 0.13.2
• Update node_modules/prismjs from 1.23.0 to 1.24.1
• Multiple select for filters on Telemetry pages. Fixes Issue #1940 (Shantanu Verma + Alex Todorov)
• Allow editting TestCase setup_duration & testing_duration fields. References Issue #1923 (@APiligrim + Alex Todorov)
• Move several checks to Dashboard page instead of performing them on every request (Ivajlo Karabojkov)
• Fix grammatical error in documentation (Kushal Beniwal)
• Add health check for Issue Tracker configuration. Fixes Issue #97
• Document API URL field for Jira integration. Closes Issue #2443

Settings

• tcms.core.middleware.CheckSettingsMiddleware has been removed
• tcms.core.middleware.CheckUnappliedMigrationsMiddleware has been removed

API

• Method Version.filter() now returns new field called product__name
• Method Build.filter() now returns new field called version__value
• Methods Build.filter(), Version.filter() and TestPlan.filter() will now order their results by product/version and then id.
• Method Telemetry.breakdown() now returns only distinct results

Bug fixes

• Make error messages in admin forms more legible. Fixes Issue #2404
• Large images will now fit into the available space on the screen, e.g. inside test case description cards. Fixes Issue #2220

Refactoring and testing

• Add automated tests for missing coverage in kiwi_auth.admin References Issue #1607 (Mariyan Garvanski)
• Apply eslint fixes (@sonyagennova + Alex Todorov)
• Refactor TestExecution.add_link method to use ModelForm and extend tests. Closes Issue #1327 (Rosen Sasov + Alex Todorov)
• Use context manager when opening files to make pylint happier
• Simplify 2 UI buttons on TestRun page
• Enable doc8 for README and CHANGELOG and fix formatting errors

Translations

• Updated Czech translation
• Updated French translation
• Updated German translation
• Updated Hungarian translation
• Updated Japanese translation
• Updated Polish translation
• Updated Russian translation
• Updated Slovenian translation