Release notes¶
2.6.1¶
This release fixes 4 issues with three commits.
Bugs¶
Release contributors¶
The following contributors submitted patches for Bodhi 2.6.1:
- Jeremy Cline
- Randy Barlow
2.6.0¶
Special instructions¶
- The database migrations have been trimmed in this release. To upgrade to this version of Bodhi from a version prior to 2.3, first upgrade to Bodhi 2.3, 2.4, or 2.5, run the database migrations, and then upgrade to this release.
- Bodhi cookies now expire, but cookies created before 2.6.0 will not automatically expire. To expire all existing cookies so that only expiring tickets exist, you will need to change authtkt.secret to a new value in your settings file.
Dependency adjustments¶
- zope.sqlalchemy is no longer a required dependency (#1414).
- WebOb is no longer a directly required dependency, though it is still indirectly required through pyramid.
Features¶
- The web UI footer has been restyled to fit better with the new theme (#1366).
- A link to documentation has been added to the web UI footer (#1321).
- The bodhi CLI now supports editing updates (#937).
- The CLI’s USERNAME environment variable is now documented, and its --user flag is clarified (28dd380a).
- The icons that we introduced in the new theme previously didn’t have titles. Consequently, a user might not have know what these icons meant. Now if a user hovers over these icons, they get a description of what they mean, for example: “This is a bugfix update” or “This update is in the critial path” (#1362).
- Update pages with lots of updates look cleaner (#1351).
- Update page titles are shorter now for large updates (#957).
- Add support for alternate architectures to the MasherThread.wait_for_sync() (#1343).
- Update lists now also include type icons next to the updates (5983d99c).
- Testing updates use a consistent label color now (62330644).
- openQA results are now displayed in the web ui (450dbafe).
- Bodhi cookies now expire. There is a new authtkt.timeout setting that sets Bodhi’s session lifetime, defaulting to 1 day.
Bugs¶
- Comments that don’t carry karma don’t count as a user’s karma vote (#829).
- The web UI now uses the update alias instead of the title so editors of large updates can click the edit button (#1161).
- Initialize the bugtracker in main() instead of on import so that docs can be built without installing Bodhi (#1359).
- Make the release graph easier to read when there are many datapoints (#1172).
- Optimize the JavaScript that loads automated test results from ResultsDB (#983).
- Bodhi’s testing approval comment now respects the karma reset event (#1310).
- pop and copy now lazily load the configuration (#1423).
Development improvements¶
- A new automated PEP-257 test has been introduced to enforce docblocks across the codebase. Converting the code will take some time, but the code will be expanded to fully support PEP-257 eventually. A few modules have now been documented.
- Test coverage is now 84%.
- The Vagrant environment now has vim with a simple vim config to make sure spaces are used instead of tabs (#1372).
- The Package database model has been converted into a single-table inheritance model, which will aid in adding multi-type support to Bodhi. A new RpmPackage model has been added. (#1392).
- The database initialization code is unified (e9a26042).
- The base model class now has a helpful query property (8167f262).
- .pyc files are now removed when running the tests in the dev environment (9e9adb61).
- An unused inherited column has been dropped from the builds table (e8a95b12).
Release contributors¶
The following contributors submitted patches for Bodhi 2.6.0:
- Jeremy Cline
- Ryan Lerch
- Clement Verna
- Caleigh Runge-Hottman
- Bianca Nenciu
- Adam Williamson
- Ankit Raj Ojha
- Jason Taylor
- Randy Barlow
2.5.0¶
Bodhi 2.5.0 is a feature and bugfix release.
Features¶
- The web interface now uses the Fedora Bootstrap theme. The layout of the update page has also been revamped to display the information about an update in a clearer manner. (#1313).
- The bodhi CLI now has a --url flag that can be used to switch which Bodhi server it communicates with. The BODHI_URL environment can also be used to configure this flag.
- The documentation has been reorganized.
- The Python bindings are now documented.
- Bodhi will now announce that karma has been reset to 0 when builds are added or removed from updates (6d6de4bc).
- Bodhi will now announce that autokarma has been disabled when an update received negative karma (d3ccc579).
- The docs theme is now Alabaster (57a80f42).
- The Bodhi documentation now has a description of Bodhi on the landing page (#1322).
- The REST API is now documented (#1323).
- The client Python bindings can now accept a base_url that doesn’t end in a slash (1087939b).
Bugs¶
- The position of the Add Comment button is now the bottom right. (#902).
- An unusuable --request flag has been removed from a CLI command (#1187).
- The cursor is now a pointer when hovering over Releases button (#1296).
- The number of days to stable is now correctly calculated on updates (#1305).
- Fix a query regular expression so that Fedora update ids work (d5bec3fa).
- Karma thresholds can now be set when autopush is disabled (#1033).
Development improvements¶
- The Vagrant development environment automatically configures the BODHI_URL environment variable so that the client talks to the local server instead of production or staging.
- Test coverage is up another percentage to 82%.
- Bodhi is now PEP-8 compliant.
- The development environment now displays all Python warnings once.
Release contributors¶
The following developers contributed to Bodhi 2.5.0:
- Ryan Lerch
- Trishna Guha
- Jeremy Cline
- Ankit Raj Ojha
- Ariel O. Barria
- Randy Barlow
2.4.0¶
Bodhi 2.4.0 is a feature and bugfix release.
Features¶
- The web interface now displays whether an update has autopush enabled (#999).
- Autopush is now disabled on any update that receives authenticated negative karma (#1191).
- Bodhi now links to Koji builds via TLS instead of plaintext (#1246).
- Some usage examples have been added to the bodhi man page.
- Bodhi’s server package has a new script called bodhi-clean-old-mashes that can recursively delete any folders with names that end in a dash followed by a string that can be interpreted as a float, sparing the newest 10 by lexigraphical sorting. This should help release engineers keep the Koji mashing folder clean.
- There is now a bodhi.client.bindings module provided by the Bodhi client package. It contains Python bindings to Bodhi’s REST API.
- The bodhi CLI now prints autokarma and thresholds when displaying updates.
- bodhi-push now has a --version flag.
- There are now man pages for bodhi-push and initialize_bodhi_db.
Bugs¶
- Users’ e-mail addresses will now be updated when they log in to Bodhi (#902).
- The masher now tests for repomd.xml instead of the directory that contains it (#908).
- Users can now only upvote an update once (#1018).
- Only comment on non-autokarma updates when they meet testing requirements (#1009).
- Autokarma can no longer be set to NULL (#1048).
- Users can now be more fickle than ever about karma (#1064).
- Critical path updates can now be free of past negative karma ghosts (#1065).
- Bodhi now comments on non-autokarma updates after enough time has passed (#1094).
- bodhi-push now does not crash when users abort a push (#1107).
- bodhi-push now does not print updates when resuming a push (#1113).
- Bodhi now says “Log in” and “Log out” instead of “Login” and “Logout” (#1146).
- Bodhi now configures the Koji client to retry, which should help make the masher more reliable (#1201).
- Bodhi is now compatible with Pillow-4.0.0 (#1262).
- The bodhi cli no longer prints update JSON when setting the request (#1408195).
- Bodhi’s signed handler now skips builds that were not assigned to a release.
- The comps file is now cloned into an explicit path during mashing.
- The buildsystem is now locked during login.
Development improvements¶
- A great deal of tests were written for Bodhi. Test coverage is now up to 81% and is enforced by the test suite.
- Bodhi’s server code is now PEP-8 compliant.
- The docs now contain contribution guidelines.
- The build system will now fail with a useful Exception if used without being set up.
- The Vagrantfile is a good bit fancier, with hostname, dnf caching, unsafe but performant disk I/O, and more.
- The docs now include a database schema image.
- Bodhi is now run by systemd in the Vagrant guest.
- The Vagrant environment now has several helpful shell aliases and a helpful MOTD to advertise them to developers.
- The development environment now uses Fedora 25 by default.
- The test suite is less chatty, as several unicode warnings have been fixed.
Dependency change¶
- Bodhi server now depends on click for bodhi-push.
Release contributors¶
The following contributors submitted patches for Bodhi 2.4.0:
- Trishna Guha
- Patrick Uiterwijk
- Jeremy Cline
- Till Mass
- Josef Sukdol
- Clement Verna
- andreas
- Ankit Raj Ojha
- Randy Barlow
2.3.3¶
Bodhi 2.3.3 converts koji auth to be done with krb5 and fixes one bug:
Thanks to Patrick Uiterwijk for contributing both of these commits!
2.3.2¶
Bodhi 2.3.2 is a bugfix release that addresses the following issues:
- push.py now defaults to the current releases (#1071).
- Fixed a typo in the masher in sending an ostree compose message (#1072).
- Fixed a typo in looking up an e-mail template (#1073).
- The fedmsg name is now passed explicitly (#1079).
- The man page was corrected to state that builds should be comma separated (#1095).
- Fixed a race condition between robosignatory and the signed handler (#1111).
- Fix querying the updates for resumption in push.py (e7cb3f13).
- push.py now prompts for the username if not given (abeca57e).
Release contributors¶
The following contributors authored patches for 2.3.2:
- Patrick Uiterwijk
- Randy Barlow
2.3.1¶
Bodhi 2.3.1 fixes #1067, such that edited updates now tag new builds into the pending_signing_tag instead of the pending_testing_tag. This is needed for automatic signing gating to work.
2.3.0¶
Bodhi 2.3.0 is a feature and bug fix release.
Features¶
- The package input field is now autofocused when creating new updates (#876).
- Releases now have a pending_signing_tag (3fe3e219).
- fedmsg notifications are now sent during ostree compositions (b972cad0).
- Critical path updates will have autopush disabled if they receive negative karma (b1f71006).
- The e-mail templates reference dnf for Fedora and yum for Enterprise Linux (1c1f2ab7).
- Updates are now obsoleted if they reach the unstable threshold while pending (f033c74c).
- Bodhi now gates Updates based on whether they are signed yet or not (#1011).
Bugs¶
- Candidate builds and bugs are no longer duplicated while searching (#897).
- The Bugzilla connection is only initialized when needed (950eee2c).
- A sorting issue was fixed on the metrics page so the data is presented correctly (487acaaf).
- The Copyright date in the footer of the web interface is updated (1447b6c7).
- Bodhi will comment with the required time instead of the elapsed time on updates (#1017).
- Bodhi will only comment once to say that non-autopush updates have reached the threshold (#1009).
- /masher/ is now allowed in addition to /masher for GET requests (cdb621ba).
Dependencies¶
Bodhi now depends on fedmsg-atomic-composer >= 2016.3, which addresses a few issues during mashing.
Development improvements¶
Bodhi 2.3.0 also has a few improvements to the development environment that make it easier to contribute to Bodhi or improve Bodhi’s automated tests:
- Documentation was added to describe how to connect development Bodhi to staging Koji (7f3b5fa2).
- An unused locked_date_for_update() method was removed (b87a6395).
- The development.ini.example base_address was changed to localhost so requests would be allowed (0fd5901d).
- The setup.py file has more complete metadata, making it more suitable for submission to PyPI (5c201ac2).
- The #bodhi and #fedora-apps channels are now documented in the readme file (52093069).
- A new test has been added to enforce PEP-8 style and a few modules have been converted to conform (bbafc9e6).
Release contributors¶
The following contributors authored patches for 2.3.0:
- Josef Sukdol
- Julio Faracco
- Patrick Uiterwijk
- Randy Barlow
- Richard Fearn
- Trishna Guha
2.2.4¶
This release fixes two issues:
2.2.3¶
This release fixes #951, which prevented updates with large numbers of packages to be viewable in web browsers.
2.2.2¶
This is another in a series of bug fix releases for Bodhi this week. In this release, we’ve fixed the following issues:
2.2.1¶
Bodhi 2.2.1 is a bug fix release, primarily focusing on mashing issues:
- Register date locked during mashing (#952).
- UTF-8 encode the updateinfo before writing it to disk (#955).
- Improved logging during updateinfo generation (#956).
- Removed some unused code (07ff664f).
- Fix some incorrect imports (9dd5bdbc and b1cc12ad).
- Rely on self.skip_mash to detect when it is ok to skip a mash (ad65362e).
2.2.0¶
Bodhi 2.2.0 is a security and feature release, with a few bug fixes as well.
Security¶
This update addresses CVE-2016-1000008 by disallowing the re-use of solved captchas. Additionally, the captcha is warped to make it more difficult to solve through automation. Thanks to Patrick Uiterwijk for discovering and reporting this issue.
Features¶
- Bodhi’s approve_testing.py script will now comment on updates when they have reached a stable karma threshold (5b0d1c7c).
- The web interface now displays a push to stable button when the karma reaches the right level when autokarma is disabled (#772 and #796).
- Masher messages now have an “agent”, so it is possible to tell which user ran the mash (45e4fc9f).
- Locked updates now list the time they were locked (#831).
- Bugs are closed and commented on in the same Bugzilla POST (#404).
- Karma values equal to 0 are no longer displayed with a green background to better distinguish them from positive karma reports (#799).
- Updates display a link to the feedback guidelines (#865).
- The new CLI now has a man page (95574831).
- The CLI now has a --version flag (#895).
Bugs¶
- Locked updates that aren’t part of a current push will now be pushed and warnings will be logged (bf4bdeef). This should help us to fix #838.
- Don’t show users an option to push to stable on obsoleted updates (#848).
- taskotron updates are shown per build, rather than per update (ce2394c6, 8e199668).
- The Sphinx documentation now builds again (b3f80b1b).
- Validator messages are now more useful and helpful (#630).
- The Bodhi CLI no longer depends on the server code to function (#900).
- Private bugs will no longer prevent the updates consumer from continuing (#905).
- bootstrap is now included in the setuptools manifest for the server package (#919).