Publ v0.7.6

Both a minor update, and a major one; due to upstream vulnerabilities in Pillow, which are only resolved in a version which drops support Python 3.6, Publ now also drops support for Python 3.6.

There are no other changes.

Publ v0.7.5

Releasing v0.7.5 of Publ just to get some bugfixes out. Namely:

• Update Flask to v2.0 and refactor around typing issues
• Add missing test for path_alias_regex
• Handle normalization collisions better
• Don’t erroneously pre-strip markup from autosummary
• Improve handling of pre-paragraph block tags in paragraph extractor

Publ v0.7.4, Authl v0.6.0

Released new versions of Publ and Authl today.

First, the Authl changes:

• Fixed some test coverage
• Changed Twitter user URLs to be stable (but less readable)
• Added profile_url field to user profiles to make up for the Twitter URL thing

And the Publ changes:

• Fixed image cache stale directory removal
• Fix ETag output
• Full-text search now properly excludes future articles
• Added a filename normalization tool
• Fixed an Internal Server Error that occurred from a malformed or expired bearer token (AutoAuth et al)
• Updated to Authl 0.6.0 and made use of the new profile_url field

Publ v0.7.3

Publ v0.7.3 is now out, with the following changes:

• Properly handles markdown and HTML stripping in summary text
• Improves first-paragraph extraction for OpenGraph cards
• Reduces unnecessary image renditions for OpenGraph cards
• Finally deprecates the AUTHL_FORCE_SSL configuration setting
• Adds group display to the user information on the admin panel
• Fix the PyPI listing
• Make the image rendition cache purge mechanism actually, you know, work

Note that entry.summary now takes an optional parameter, markup, which defaults to True, for the sake of consistency with the rest of the Publ templating API. If you are using entry.summary to provide descriptive text for things (e.g. <a title="{{entry.summary}}"> or <meta name="description" content="{{entry.summary}}">) this will have to change to {{entry.summary(markup=False)}}.

Authl v0.5.2

Authl v0.5.2 is now out.

Changes:

• Fixed some caching-related issues on IndieAuth profiles
• The IndieAuth handler now supports PKCE
• IndieAuth takes detection priority over Fediverse
• Authl is now compatible with Flask 2.0

Authl v0.5.1 released

I’ve just released v0.5.1 of Authl. The only functional change is adding support for actually parsing IndieAuth server response profiles (rather than just requesting one and only using the h-card), now that there’s implementations in the wild, meaning that egg has hatched into a chicken.

There were also some minor documentation cleanups since v0.5.0.

Publ v0.7.2, Authl v0.5.0

Big new releases for Publ and Authl!

Publ changes:

• Added support for IndieAuth Ticket Auth, allowing aware readers to automatically log in on your behalf and get private entries
• Added support for HTML 5 lazy image loading; all images are now lazy-loaded by default

Authl changes:

• Improve the meta robots rules on the login form
• Add IndieWeb endpoint discovery to the profile

Publ 0.7.1, now with full-text search

I finally got around to adding whoosh full-text search to Publ, as an experimental feature. See it in operation.

Other changes:

• Improve the way that tag names get normalized
• Change entry.prev and entry.next to not default to subcategory recursion if a category context is specified

v0.7.0 finally released

It took me way longer than I should have, but I finally decided to bump the minor version of Publ to 0.7.0.

My original intention was to only do that after getting the unit test coverage up to 90%, then to 80%, then to 50%… but it’s at 45% and that’s Good Enough I guess. I’d still like to get some proper automated testing in place for the bits that are tricky to test but with a system as complex as Publ it’s not particularly clear how to do a lot of that. The main issue is a fundamental mismatch between how the underlying ORM works vs. how unit testing is supposed to work, and I’ve so far been unable to square that circle. But maybe someday I’ll get the test coverage number up where I want it to be.

In any case, the only actual code change since 0.6.14 was some fixes to how page redirection works, especially around private entries.

Publ v0.6.14

End-of-the-year updates to Publ, mostly bug/interoperability fixes but a couple of small new features:

• URL chasing (e.g. example.com/1234 → example.com/blog/1234-hello-world) now uses permanent redirects
• Tag displayname normalization only updates if the newly-seen version is mixed-case
• You can now configure template default layout options globally
• view now has a has_unauthorized property
• Hidden tags no longer appear in category.tags
• Generated tag-browsing URLs (e.g. view(tag=...).link, entry.archive(tag=...), etc.) will normalize the case and order of included tags

Assuming this is stable, this will become the basis of the long-overdue 0.7.0 release.

Publ v0.6.13 released

Just some minor fixes for v0.6.13:

• Database performance improvements
• SEO improvements
• Fix the Windows test runner (ironically untested)
• Remove the minimal sample site from the source repository, as this is better served by the git repository for this site and the getting started documentation.

Authl v0.4.6 released

Wow, it’s been a while since I’ve worked on this stuff, huh?

Anyway, IndieAuth validation rules have changed for the better, so Authl has been updated accordingly.

There’s a few other changes as well:

• On IndieAuth profiles, p-pronoun is treated as a fallback for p-pronouns
• The Flask templates add some rel="nofollow" in some appropriate places

v0.6.12 released

A mostly-bugfix update:

• Path-Canonical/Path-Mount now works properly in conjunction with Auth
• Path-Alias et al now support URL-encoded special characters for the path mapping
• Improved error handling; more cases of malformed and malicious URLs now result in a 400 Bad Request error instead of a 500 Internal Server Error

v0.6.11 released

Just some cleanups and usability fixes:

• Raise a 400 error on malformed URLs with known handling instead of 500
• Don’t include subcategories with no indexable entries (e.g. all GONE/HIDDEN/etc.)
• Improve the admin dashboard
• Miscellaneous code cleanups

Also I forgot to announce v0.6.10, released back on September 1; the changes from v0.6.9 were:

• Let 401 Unauthorized status overcome a path alias
• Improve the tests
• Sort the “recent users” display on the admin dashboard

Publ 0.6.9

Publ 0.6.9 is out and has the following changes:

• Removed the vestigial attempt at supporting AutoAuth
• Path-alias now works for all URL paths, and not just ones which happened to match Publ’s routing rules
• Fixed a bug in formatted code blocks that was generating extra newlines per line
• Added user bearer token generation to the public API
• Changing a user’s permissions now correctly invalidates their rendition cache

Important: In the incredibly unlikely event you were using the token_endpoint function, that has been removed, along with the token endpoint itself.

Publ 0.6.8, Authl 0.4.3

Some pretty big new features added. First, in Authl:

• Major documentation improvements
• Bug fixes with Fediverse instance caching
• All providers now normalize to the same profile format
• Some basic spam prevention for the email provider
• 100% unit test coverage on the Fediverse provider (which is now using mastodon.py instead of a hand-rolled OAuth client)

And in Publ:

• Fenced code now uses <figure> and <figcaption> instead of ad-hoc <div>s for its layout, and the overall HTML semantic has been greatly improved
• Individual code blocks are now configurable with respect to highlighting and line numbering
• The user object now provides a user profile and separates the identity URL from the familiar name

Publ v0.6.7

Publ v0.6.7 is out now. Various changes:

• Now using Poetry for the build system
• Cleaned up some Redirect-Url logic to cut down on the number of page load hops
• Renamed the main branch to main¹
• Bail out on files which repeatedly fail indexer fixups
• Default entry title and slug are now blank, rather than trying to guess from the filename
• Officially deprecated Python 3.5 support, which hasn’t worked for quite some time anyway
• Defer Authl loading, and other Authl-related changes to support the latest version
• Add support for line-numbering and captions in code blocks

I’m already regretting some of the decisions I made with the fenced code amendments; in the future it will almost certainly switch to using <figure> and <figcaption>, and change some of the other structural bits. Feel free to share your opinions.

There’s also a known issue where the quick-login link (for e.g. Twitter) doesn’t work on pages which are login-required; this is actually an issue with the Authl login template, and has already been fixed in Authl pending the next release.

And speaking of Authl, the online docs are way better now. Hopefully it’s finally in a state where other people will be able to use it!

Publ 0.6.6, Authl 0.4.0

I’ve just released new versions of Publ and Authl.

Publ v0.6.6 changes:

• Fixed a regression that made it impossible to log out
• Fixed a problem where WWW-Authenticate headers weren’t being cached properly
• Improve the changed-file cache-busting methodology
• Add object pooling to Entry, Category, and View (for a potentially big memory and performance improvement)

Authl v0.4.0 changes:

• Finally started to add unit tests
• Removed some legacy WebFinger code that was no longer relevant or ever touched
• Added a mechanism to allow providers to go directly to login, as appropriate
• Added friendly visual icons for providers which support them (a so-called “NASCAR interface”)

Publ v0.6.5

Publ v0.6.5 is now out. Has the following changes:

• Upgrading Publ will now invalidate the cache
• Fixes the missing database session around the authentication log viewer
• Fixes the way that the indexer works when an entry changes ID
• Fixes a bug where draft entries' temporary IDs were overriding the permanent/assigned IDs of visible entries
• Added some useful commandline tools

The next things I want to work on:

• Micropub endpoint (done as a separate component that you can optionally add)
• Adding more unit tests
• Maybe an actual (very basic) CMS UI? I dunno

Publ v0.6.4, now with attachments

There are several important bugfixes in this as well as one major new feature. Changes since v0.6.3:

• Rewrote the indexer scheduling logic both for better peformance and to (hopefully) stop clobbering entry text on content deployments
• Added entry attachments, which allows associating entries directly with one another
• Fixed a silly caching bug introduced in v0.6.3 which basically broke the cache