You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
(20) |
Aug
(21) |
Sep
(1) |
Oct
(116) |
Nov
(98) |
Dec
(134) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(72) |
Feb
(56) |
Mar
(51) |
Apr
(46) |
May
(75) |
Jun
(106) |
Jul
(85) |
Aug
(104) |
Sep
(142) |
Oct
(145) |
Nov
(43) |
Dec
(122) |
| 2003 |
Jan
(125) |
Feb
(232) |
Mar
(232) |
Apr
(96) |
May
(137) |
Jun
(94) |
Jul
(44) |
Aug
(73) |
Sep
(31) |
Oct
(65) |
Nov
(125) |
Dec
(39) |
| 2004 |
Jan
(63) |
Feb
(87) |
Mar
(128) |
Apr
(122) |
May
(215) |
Jun
(134) |
Jul
(163) |
Aug
(31) |
Sep
(59) |
Oct
(157) |
Nov
(150) |
Dec
(101) |
| 2005 |
Jan
(85) |
Feb
(118) |
Mar
(79) |
Apr
(37) |
May
(34) |
Jun
(32) |
Jul
(40) |
Aug
(11) |
Sep
(18) |
Oct
(11) |
Nov
(10) |
Dec
(35) |
| 2006 |
Jan
(143) |
Feb
(100) |
Mar
(81) |
Apr
(41) |
May
(39) |
Jun
(76) |
Jul
(55) |
Aug
(103) |
Sep
(47) |
Oct
(45) |
Nov
(92) |
Dec
(38) |
| 2007 |
Jan
(37) |
Feb
(8) |
Mar
(36) |
Apr
(15) |
May
(18) |
Jun
(4) |
Jul
(4) |
Aug
(26) |
Sep
(50) |
Oct
(31) |
Nov
(12) |
Dec
|
| 2008 |
Jan
(21) |
Feb
(9) |
Mar
(23) |
Apr
(1) |
May
(2) |
Jun
|
Jul
|
Aug
(16) |
Sep
(9) |
Oct
|
Nov
(1) |
Dec
(4) |
| 2009 |
Jan
(6) |
Feb
(102) |
Mar
(44) |
Apr
(14) |
May
(20) |
Jun
(21) |
Jul
(30) |
Aug
(16) |
Sep
(28) |
Oct
(37) |
Nov
(9) |
Dec
(106) |
| 2010 |
Jan
(33) |
Feb
(24) |
Mar
|
Apr
(2) |
May
(15) |
Jun
(8) |
Jul
(11) |
Aug
(17) |
Sep
(11) |
Oct
(85) |
Nov
(32) |
Dec
|
| 2011 |
Jan
(3) |
Feb
(7) |
Mar
(18) |
Apr
(67) |
May
(53) |
Jun
(26) |
Jul
(22) |
Aug
(16) |
Sep
(27) |
Oct
(160) |
Nov
(62) |
Dec
(16) |
| 2012 |
Jan
(20) |
Feb
(58) |
Mar
(39) |
Apr
(83) |
May
(38) |
Jun
(38) |
Jul
(38) |
Aug
(70) |
Sep
(28) |
Oct
(20) |
Nov
(33) |
Dec
(75) |
| 2013 |
Jan
(120) |
Feb
(96) |
Mar
(79) |
Apr
(34) |
May
(20) |
Jun
(34) |
Jul
(6) |
Aug
(11) |
Sep
(30) |
Oct
(40) |
Nov
(4) |
Dec
(18) |
| 2014 |
Jan
(24) |
Feb
(3) |
Mar
(25) |
Apr
(21) |
May
(45) |
Jun
(14) |
Jul
(35) |
Aug
(6) |
Sep
(15) |
Oct
(21) |
Nov
(6) |
Dec
(15) |
| 2015 |
Jan
(8) |
Feb
(18) |
Mar
(41) |
Apr
(7) |
May
(1) |
Jun
(36) |
Jul
(12) |
Aug
(9) |
Sep
(33) |
Oct
(10) |
Nov
(6) |
Dec
(3) |
| 2016 |
Jan
(50) |
Feb
(6) |
Mar
(15) |
Apr
(16) |
May
(6) |
Jun
(24) |
Jul
(22) |
Aug
|
Sep
(2) |
Oct
(4) |
Nov
|
Dec
(2) |
| 2017 |
Jan
(4) |
Feb
(24) |
Mar
(29) |
Apr
(36) |
May
(10) |
Jun
|
Jul
(4) |
Aug
(32) |
Sep
(29) |
Oct
(3) |
Nov
(1) |
Dec
|
| 2018 |
Jan
(6) |
Feb
(6) |
Mar
(8) |
Apr
(8) |
May
(8) |
Jun
(34) |
Jul
(94) |
Aug
(55) |
Sep
(30) |
Oct
(19) |
Nov
(3) |
Dec
(9) |
| 2019 |
Jan
(28) |
Feb
(32) |
Mar
(71) |
Apr
(31) |
May
(11) |
Jun
(11) |
Jul
(8) |
Aug
(9) |
Sep
(7) |
Oct
(18) |
Nov
(18) |
Dec
(16) |
| 2020 |
Jan
(16) |
Feb
(10) |
Mar
(13) |
Apr
(18) |
May
(21) |
Jun
(8) |
Jul
(2) |
Aug
(8) |
Sep
(1) |
Oct
(14) |
Nov
(8) |
Dec
(7) |
| 2021 |
Jan
(3) |
Feb
(4) |
Mar
(26) |
Apr
(12) |
May
(19) |
Jun
(9) |
Jul
(9) |
Aug
(7) |
Sep
(9) |
Oct
(2) |
Nov
(12) |
Dec
(14) |
| 2022 |
Jan
(5) |
Feb
(9) |
Mar
(1) |
Apr
(11) |
May
(16) |
Jun
(7) |
Jul
(22) |
Aug
(3) |
Sep
(8) |
Oct
(1) |
Nov
(38) |
Dec
(8) |
| 2023 |
Jan
(2) |
Feb
(11) |
Mar
(5) |
Apr
(6) |
May
(5) |
Jun
(3) |
Jul
(6) |
Aug
(4) |
Sep
(4) |
Oct
(9) |
Nov
(6) |
Dec
(9) |
| 2024 |
Jan
(1) |
Feb
(13) |
Mar
(11) |
Apr
(17) |
May
(18) |
Jun
(8) |
Jul
(6) |
Aug
(5) |
Sep
(2) |
Oct
(5) |
Nov
(7) |
Dec
(11) |
| 2025 |
Jan
(14) |
Feb
(4) |
Mar
(5) |
Apr
(8) |
May
(3) |
Jun
(2) |
Jul
(2) |
Aug
|
Sep
(4) |
Oct
(1) |
Nov
|
Dec
|
|
From: John R. <is...@ro...> - 2025-10-22 16:48:51
|
New submission from John Rouillard: This is a test to see if I can get email into the roundup tracker. Google was refusing to deliver because of missing starttls on the smtp server. Jacob has merged a fix for this and I am testing. -- rouilj ---------- messages: 8413 nosy: rouilj severity: normal status: new title: testing to see if starttls is working for email from google. _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551412> _________________________________________________ |
|
From: abdulrohidsh <is...@ro...> - 2025-09-18 10:04:43
|
New submission from abdulrohidsh: Free Download iTop VPN latest version standalone offline installer for Windows. It is used to unblock restricted content and hide your IP address. Overview of iTop VPN This program encrypts your Internet traffic and hides your IP address from hackers and trackers, protecting your privacy and security. Just click the Connect button, we will pick the fastest and most stable servers for you. You can change different Network Solutions according to your needs. Safeguard Mode offers you higher security protection. Game Mode provides unlimited bandwidth and speeds, so you can stream your favorite movies and TV shows in high definition and enjoy the games without any delay. Moreover, If your connection drops unexpectedly, Kill Switch will disable the internet to protect your private data. With unlimited speeds and server switches, you can enjoy free and private access to any website anywhere. Features of iTop VPN Unlimited bandwidth Unblock restricted content Keep safe with best-in-class encryption Global connection No log policy Network solution Kill switch Technical Details and System Requirements Supported OS: Windows 11, Windows 10, Windows 8.1, Windows 7 RAM (Memory): 2 GB RAM (4 GB recommended) Free Hard Disk Space: 200 MB or more ---------- components: None messages: 8406 nosy: abdulrohidsharm severity: urgent status: new title: DOWNLOAD—iTop VPN Crack Latest Version 2025 Free type: crash versions: 2.4.0 _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551408> _________________________________________________ |
|
From: abdulrohidsh <is...@ro...> - 2025-09-18 09:56:44
|
New submission from abdulrohidsh: Free Download iTop VPN latest version standalone offline installer for Windows. It is used to unblock restricted content and hide your IP address. ### DOWNLOAD NOW 👉👉🔗 https://www.unlockpatch.com/ Overview of iTop VPN This program encrypts your Internet traffic and hides your IP address from hackers and trackers, protecting your privacy and security. Just click the Connect button, we will pick the fastest and most stable servers for you. You can change different Network Solutions according to your needs. Safeguard Mode offers you higher security protection. Game Mode provides unlimited bandwidth and speeds, so you can stream your favorite movies and TV shows in high definition and enjoy the games without any delay. Moreover, If your connection drops unexpectedly, Kill Switch will disable the internet to protect your private data. With unlimited speeds and server switches, you can enjoy free and private access to any website anywhere. Features of iTop VPN Unlimited bandwidth Unblock restricted content Keep safe with best-in-class encryption Global connection No log policy Network solution Kill switch Technical Details and System Requirements Supported OS: Windows 11, Windows 10, Windows 8.1, Windows 7 RAM (Memory): 2 GB RAM (4 GB recommended) Free Hard Disk Space: 200 MB or more ---------- components: None messages: 8409 nosy: abdulrohidsharm severity: minor status: new title: DOWNLOAD—iTop VPN Crack Latest Version 2025 Free type: crash versions: 2.5.0 _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551411> _________________________________________________ |
|
From: abdulrohidsh <is...@ro...> - 2025-09-18 09:56:26
|
New submission from abdulrohidsh: Free Download iTop VPN latest version standalone offline installer for Windows. It is used to unblock restricted content and hide your IP address. ### DOWNLOAD NOW 👉👉🔗 https://www.unlockpatch.com/ Overview of iTop VPN This program encrypts your Internet traffic and hides your IP address from hackers and trackers, protecting your privacy and security. Just click the Connect button, we will pick the fastest and most stable servers for you. You can change different Network Solutions according to your needs. Safeguard Mode offers you higher security protection. Game Mode provides unlimited bandwidth and speeds, so you can stream your favorite movies and TV shows in high definition and enjoy the games without any delay. Moreover, If your connection drops unexpectedly, Kill Switch will disable the internet to protect your private data. With unlimited speeds and server switches, you can enjoy free and private access to any website anywhere. Features of iTop VPN Unlimited bandwidth Unblock restricted content Keep safe with best-in-class encryption Global connection No log policy Network solution Kill switch Technical Details and System Requirements Supported OS: Windows 11, Windows 10, Windows 8.1, Windows 7 RAM (Memory): 2 GB RAM (4 GB recommended) Free Hard Disk Space: 200 MB or more ---------- components: None files: logo (7).png messages: 8408 nosy: abdulrohidsharm severity: minor status: new title: DOWNLOAD—iTop VPN Crack Latest Version 2025 Free type: crash versions: 2.5.0 _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551410> _________________________________________________ |
|
From: abdulrohidsh <is...@ro...> - 2025-09-18 09:52:03
|
New submission from abdulrohidsh: Free Download iTop VPN latest version standalone offline installer for Windows. It is used to unblock restricted content and hide your IP address. Overview of iTop VPN This program encrypts your Internet traffic and hides your IP address from hackers and trackers, protecting your privacy and security. Just click the Connect button, we will pick the fastest and most stable servers for you. You can change different Network Solutions according to your needs. Safeguard Mode offers you higher security protection. Game Mode provides unlimited bandwidth and speeds, so you can stream your favorite movies and TV shows in high definition and enjoy the games without any delay. Moreover, If your connection drops unexpectedly, Kill Switch will disable the internet to protect your private data. With unlimited speeds and server switches, you can enjoy free and private access to any website anywhere. Features of iTop VPN Unlimited bandwidth Unblock restricted content Keep safe with best-in-class encryption Global connection No log policy Network solution Kill switch Technical Details and System Requirements Supported OS: Windows 11, Windows 10, Windows 8.1, Windows 7 RAM (Memory): 2 GB RAM (4 GB recommended) Free Hard Disk Space: 200 MB or more ---------- components: None messages: 8407 nosy: abdulrohidsharm severity: urgent status: new title: DOWNLOAD—iTop VPN Crack Latest Version 2025 Free type: crash versions: 2.4.0 _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551409> _________________________________________________ |
|
From: John P. R. <ro...@cs...> - 2025-07-13 04:38:18
|
Hello all: I'm proud to release version 2.5.0 of the Roundup issue tracker. This release is a bugfix and feature release, so make sure to read https://www.roundup-tracker.org/docs/upgrading.html to bring your tracker up to date. The 42 changes, as usual, include some new features and many bug fixes. One bug fix is an XSS security issue with CVE-2025-53865 primarily with the responsve and devel templates. See: https://www.roundup-tracker.org/docs/upgrading.html#xss-security-issue-with-devel-and-responsive-templates-recommended Version 2.5.0 does not support Python 2. The minimum Python version is 3.7. Among the significant enhancements in version 2.5.0 compared to the 2.4.0 release are: * **XSS vulnerability with devel and responsive templates fixed** Just before release an XSS security issue with trackers based on the devel or responsive templates was discovered. The updating directions include instructions on fixing this issue with the html templates. * **The property/field advanced search expression feature has been enhanced and documented.** Search expressions are usually built using the expression editor on the search page. They can be built manually by modifying the search URL but the RPN search expression format was undocumented. Errors in expressions could return results that didn't match the user's intent. This release documents the RPN expression syntax, adds basic expression error detection, and improves error reporting. * **The default hash method for password storage is more secure.** We use PBKDF2 with SHA512 (was SHA1). With this change you can lower the value of password_pbkdf2_default_rounds in your tracker's config.ini. Check the upgrading documentation for more info. (Note this may cause longer authentication times, the upgrade doc describes how to downgrade the hash method if required.) * **Roundup's session token is now prefixed with the magic ``__Secure__`` tag when using HTTPS.** This adds another layer of protection in addition to the existing ``Secure`` property that comes with the session cookie. * **Data authorization can be done at the database level speeding up display of index pages.** Roundup verifies the user's authorization for the data fetched from the database after retrieving data from the database. A new optional ``filter`` argument has been added to Permission objects. When the administrator supplies a filter function, it can boost performance with SQL server databases by pushing selection criteria to the database. By offloading some permission checks to the database, less data is retrieved from the database. This leads to quicker display of index pages with reduced CPU and network traffic. * **The REST endpoint can supply binary data (images, pdf, ...) to its clients.** Requesting binary data from a REST endpoint has been a hassle. Since JSON can't handle binary data, images (and other binary data) need to be encoded. This makes them significantly larger. The workaround was to use a non-REST endpoint for fetching non-text attachments. This update lets the REST endpoint return raw message or file content data. You can utilize the ``binary_content`` endpoint along with an appropriate ``Accept`` header (e.g. ``image/jpeg``) in your request. * **Extract translatable strings from your tracker easily.** The ``roundup-gettext`` tool has been enhanced to extract translatable strings from detectors and extensions. This will simplify the process of translating your trackers. Other miscellaneous fixes include: * Fix a crash bug on Windows with Python 3.13. * Update documentation on required REST headers, along with other documentation updates. * Improve handling of an error condition generated when an invalid REST response format is requested. For example if XML output is requested, but dicttoxml is not installed, we now return an error without doing any work. * Fix an incorrect error report when a PUT REST request sets the user's email address to its current value. * Add support for the ``defusedxml`` Python module to enhance security when using XML. * Introduce the templating function: ``utils.set_http_response(integer)`` to set the HTTP return code directly from your template. This allows the template logic to return a 404 or other code when the user invokes a template incorrectly. * Add a new ``registerUtilMethod('name', my_function)``. which makes it easier to define and use complex templating utilities. It passes a default argument that allows access to the client instance, translation functions, and other templating utility functions. Previously you had to pass the arguments explicitly when calling the utility from the template. * Add the ability to generate native HTML date and number/integer inputs. Check the upgrading document for caveats. This feature is disabled by default. * Re-enable support for GPG/PGP signed emails, which requires installation from the test PyPi repository. The file CHANGES.txt has a detailed list of feature additions and bug fixes for each release. The most recent changes from there are at the end of this announcement. Also see the information in doc/upgrading.txt. If you find bugs, please report them to issues AT roundup-tracker.org or create an account at https://issues.roundup-tracker.org and open a new ticket. If you have patches to fix the issues they can be attached to the email or uploaded to the tracker. Upgrading ========= If you're upgrading from an older version of Roundup you *must* follow all the "Software Upgrade" guidelines given in the doc/upgrading.txt documentation. Note that you should run ``roundup-admin ... migrate`` for all your trackers to update the database schema version. Do this before you use the web, command-line or mail interface and before any users access the tracker. Roundup requires Python 3 newer than or equal to version 3.7 for correct operation. (Python 3.4 or 3.5, or 3.6 may work, but are not tested.) Note that Roundup 2.4.0 was the last release to support Python 2. You should deploy new trackers with Python 3 and plan on upgrading older trackers from Python 2 to Python 3. See the upgrade guide. You can install it with:: pip install roundup (preferably in a virtual environment). To download it, use:: pip download roundup then unpack and test/install from the tarball. To give Roundup a try, just download (directions above), unpack and run:: python demo.py then open the url printed by the demo app. Release info and download page: https://pypi.org/project/roundup/ Source and documentation is available at the website: https://www.roundup-tracker.org/ Mailing lists - the place to ask questions: https://sourceforge.net/p/roundup/mailman/ About Roundup ============= Roundup is a simple-to-use and install issue-tracking system with command-line, web and e-mail interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition. Roundup manages a number of issues (with flexible properties such as "description", "priority", and so on) and provides the ability to: (a) submit new issues, (b) find and edit existing issues, and (c) discuss issues with other participants. The system facilitates communication among the participants by managing discussions and notifying interested parties when issues are edited. One of the major design goals for Roundup that it be simple to get going. Roundup is therefore usable "out of the box" with any Python 3.7+ installation. It doesn't even need to be "installed" to be operational, though an install script is provided. It comes with five basic issue tracker templates * a classic bug/feature tracker * a more extensive devel tracker for bug/features etc. * a responsive version of the devel tracker * a jinja2 version of the devel template (work in progress) * a minimal skeleton and supports four database back-ends (anydbm, sqlite, mysql and postgresql). Recent Changes ============== From 2.4.0 to 2.5.0 Fixed: - issue2551343 - Remove support for PySQLite. It is unmaintained and sqlite3 is used which is the default for a Python distribution. (John Rouillard) - replace use of os.listdir with os.scandir. Performance improvement. Using with Python 2 requires 'pip install scandir'. (John Rouillard) - issue2551131 - Return accept-patch if patch body not accepted (415 code). Accept-Patch returned with acceptable values. (John Rouillard) - issue2551074 - In "responsive" template: click on hide comment leads to a red error msg. (Report by Ludwig Reiter; fix John Rouillard) - issue2550698 - added documentation on filtering using RPN property expressions. (John Rouillard) - issue2551372 - Better document necessary headers for REST and fix logging to log missing Origin header (Ralf Schlatterbeck with suggestions on documentation by John Rouillard) - issue2551289 - Invalid REST Accept header with post/put performs change before returning 406. Error before making any changes to the db if we can't respond with requested format. (John Rouillard) - issue2551356 - Add etag header when If-Modified-Since GET request returns not-modified (304). Breaking change to function signature for client.py-Client::_serve_file(). (John Rouillard) - issue2551381 - roundup-server parses URI's with multiple '?" incorrectly. (John Rouillard) - issue2551382 - invalid @verbose, @page_* values in rest uri's generate 409 not 400 error. (John Rouillard) - fix issues with rest doc and use of PUT on a property item. Response is similar to use of PUT on the item, not a GET on the item. Discovered while fuzz testing. (John Rouillard) - issue2551383 - Setting same address via REST PUT command results in an error. Now the userauditor does not trigger an error if a user sets the primary address to the existing value. (John Rouillard) - issue2551253 - Modify password PBKDF2 method to use SHA512. The default password hashing algorithm has been upgraded to PBKDF2-SHA512 from PBKDF2-SHA1. The default pbkdf2 rounds in the config file has been changed to 250000. The admin should change it manually if it is at 2 million. PBKDF2-SHA512 (PBKDF2S5) has been available since release 2.3, but it required a manual step to make it the default. (John Rouillard) - fixed a crash with roundup-admin perftest password when rounds not set on command line. (John Rouillard) - issue2551374 - Add error handling for filter expressions. Filter expression errors are now reported. (John Rouillard) - issue2551384: Modify flow in client.py's REST handler to verify authorization earlier. The validation order for REST requests has been changed. Checking user authorization to use the REST interface is done before validating the Origin header. As a result, incorrectly formatted CORS preflight requests (e.g. missing Origin header) can now return HTTP status 403 as well as status 400. (John Rouillard) - issue2551387 - TypeError: not indexable. Fix crash due to uninitialized list element on a (Mini)FieldStorage when unexpected input is posted via wsgi. (Reported and debugged by Christof Meerwald; fix John Rouillard) - close http socket and send a 408 status when a timeout exception is handed in roundup-server. This prevents another exception caused by using a timed out socket. (John Rouillard) - issue2551391, partial fix for issue1513369. input fields were not getting id's assigned. Fixed automatic id assignment to input fields. Thinko in the code. (John Rouillard) - issue1895197 - translated help texts in admin.py not displayed correctly. (Initial patch tobias-herp, John Rouillard) - issue2551238 - roundup-server should exit with error if -d <pidfile> is used without -l <logfile>. Added code to report the issue. Added issue with relative paths for log file whn using -L and -d with roundup-server. (John Rouillard) - Allow the specification of a "form" parameter for Date fields to make the popup calendar work when the enclosing form has a name different from "itemSynopsis". (Ralf Schlatterbeck) - issue2551376: Fix tracebacks in item templates (Ralf Schlatterbeck) - issue2551396: Use of os.path.stat.ST_MTIME in python 3.13 crashes roundup on windows. Replaced with equivalent stat.ST_MTIME. (Randy on IRC, fix: John Rouillard and R. David Murray (bitdancer)) - issue2551323: remove functions used for XHTML template support. XHTML was deprecated in Roundup 2.3.0 and an invalid value in 2.4.0. (John Rouillard) - issue2551406: 'Templating Error: too many values to unpack' crash fixed. (reported by and patch Christof Meerwald, commit/test John Rouillard) - fix potential HTTP Response Splitting issue in roundup-server. Discovered by CodeQL in CI. (John Rouillard) Features: - issue2551287 - Enhance roundup_gettext.py to extract strings from detectors/extensions. If the polib module is available, roundup-gettext will extract translatable strings from the tracker's Python code. If polib is missing, it will print a warning. (Patch Marcus Priesch, cleanup to remove python 2 issues, John Rouillard.) - issue2551315 - Document use of RestfulInstance.max_response_row_size to limit data returned from rest request. (John Rouillard) - issue2551330 - Add an optional 'filter' function to the Permission objects and the addPermission method. This is used to optimize search performance by not checking items returned from a database query one-by-one (using the check function) but instead offload the permission checks to the database. For SQL backends this performs the filtering in the database. (Ralf Schlatterbeck) - issue2551370 - mark roundup session cookie with __Secure- prefix. (John Rouillard) - add -P flag to roundup-server to log client address from X-Forwarded-For reverse proxy header rather than connecting address. This logs the actual client address when roundup-server is run behind a reverse proxy. It also appends a + sign to the logged address/name. (John Rouillard) - issue2551068 - Provide way to retrieve file/msg data via rest endpoint. Raw file/msg data can be retrieved using the /binary_content attribute and an Accept header to select the mime type for the data (e.g. image/png for a png file). The existing html interface method still works and is supported, but is legacy. (John Rouillard) - added fuzz testing for some code. Found issue2551382 and others. (John Rouillard) - issue2551116 - Replace xmlrpclib (xmlrpc.client) with defusedxml. Added support for defusedxml to better secure the xmlrpc endpoint. (John Rouillard) - Added new instance.registerUtilMethod() method to make using complex templating easier as it provides a default Client instance to the templating method. (John Rouillard) - Added new templating utils.set_http_response(integer) method to allow reporting an error to the user from a template. (John Rouillard) - issue2551390 - Replace text input/calendar popup with native date input. Also add double-click and exit keyboard handlers to allow copy/paste/editing the text version of the date. Configurable via the use_browser_date_input setting in the [web] section of config.ini. By default browser native dates are turned off. (John Rouillard, Ralf Schlatterbeck) - Use native number type input for Number() and Integer() properties. Integer() uses step=1 as well. Configurable via the use_browser_number_input setting in the [web] section of config.ini. Set off by default. See https://issues.roundup-tracker.org/issue2551398 for discussion of issues with native number inputs. (John Rouillard, Ralf Schlatterbeck) - issue2551231 - template.py-HTMLClass::classhelp doesn't merge user defined classes. It now merges them in. (John Rouillard) - re-enable support for GPG/PGP encrypted emails using new python gpg package on the test pypi instance. (Paul Schwabauer) -- -- rouilj John Rouillard =========================================================================== My employers don't acknowledge my existence much less my opinions. |
|
From: John R. <ro...@ie...> - 2025-07-08 16:23:21
|
Hi all:
An XSS issue with trackers based on devel or responsive templates
have been reported. I am waiting on a CVE for it.
If you have a devel or responsive template based tracker (check the
Name field in the tracker's TEMPLATE-INFO.txt), you want to replace
this construct in your templates:
tal:content="structure context/MUMBLE/plain"
with
tal:content="context/MUMBLE/plain"
where 'MUMBLE' is something like 'title'.
In the original templates this construct is all on one line. If you
made modifications it may be split across lines. Make sure to fix
those too.
Note that this construct has not been used by the classic template
since at least 2009. If your tracker pre-dates 2009, you should check
to see if this construct is used.
I still expect to release Roundup 2.5.0 on Sunday.
Thanks to 4bug of ChaMd5 Security Team H1 Group who disclosed the issue.
-- rouilj
|
|
From: John R. <ro...@ie...> - 2025-06-11 21:36:27
|
Hi all:
The 2.5 beta release is out. Please try installing and testing.
See:
https://pypi.org/project/roundup/2.5.0b1/
for the full announcement with changelog.
Installing using:
python3 -m pip install --pre roundup
or
python3 -m pip install roundup==2.5.0b1
should work.
Known issues:
man pages are not installed in html form
roundup-admin help test not installed in html form
config.ini docs not updated to the newest version
There are 41 changes since 2.4.0. Version 2.5.0b1
does not support Python 2. Python 3.6 should work, but it
has been removed from CI so it is not tested anymore.
Among the notable improvements in 2.5.0 from the 2.4.0
release are:
* detect more errors in RPN search expressions. Return more
useful error messages. Documented (advanced) RPN search expressions
in the user guide.
* change default password hash method to PBKDF2 with SHA512. You
may need to reset password_pbkdf2_default_rounds to a lower
value. See upgrading doc.
* add filter function to Permission objects. This pushes some
permission checks down to the SQL database and speeds up display of
index pages.
* fix crash bug on windows with Python 3.13
* update doc on required REST headers. Also other docs updates.
* detect error condition early when we can't respond with requested
REST format response (e.g. xml is requested).
* do not generate an error if a PUT REST request sets the user's
address to the current value.
* make ``roundup-gettext`` extract translatable strings from detectors
and extensions.
* improve security of session cookies by marking them with the magic
``__Secure__`` prefix.
* make the rest endpoint return raw message or file content data. Use
the ``binary_content`` endpoint and a suitable ``Accept``` header in
the request.
* add support for the ``defusedxml`` Python module to improve security when
using XML.
* add templating function: ``utils.set_http_response(integer)`` to set
HTTP return code from your template.
* add generation of native HTML date and number/integer inputs. See
Upgrading for caveats this is disabled by default.
* re-enable support for GPG/PGP signed emails. Requires installing
from the test PyPi repository.
* remove XHTML support simplifying the code base
The release of 2.5.0 is expected on July 13th.
Enjoy.
-- rouilj
|
|
From: Christof M. <is...@ro...> - 2025-06-02 11:40:18
|
New submission from Christof Meerwald:
In cgi/client.py we have:
# determine if view is oktmpl|errortmpl. If so assign the
# right one to the view parameter. If we don't have alternate
# templates, just leave view alone.
if (view and view.find('|') != -1):
# we have alternate templates, parse them apart.
(oktmpl, errortmpl) = view.split("|", 2)
Presumably, the last line should be:
(oktmpl, errortmpl) = view.split("|", 1)
to avoid a ValueError exception when there is more than one "|".
This can be triggered by something like
?%40template=forgotten%7c%7x
as a query parameter.
----------
components: Web interface
keywords: Effort-Low
messages: 8392
nosy: cmeerw
priority: high
severity: major
status: new
title: Templating Error: too many values to unpack (expected 2)
type: crash
versions: 2.5.0
_________________________________________________
Roundup tracker <is...@ro...>
<https://issues.roundup-tracker.org/issue2551406>
_________________________________________________
|
|
From: Ralf S. <is...@ro...> - 2025-05-23 07:33:49
|
New submission from Ralf Schlatterbeck:
Yesterday I was debugging a new deployment under uwsgi (behind apache aka httpd on redhat) which failed with a 500 error without any further information. Took me a long time and I resorted to print debugging to find the cause.
It turned out that the local templates in the tracker (in the locale directory) were not translated, i.e., the .mo files were missing.
By default the i18n framework will try to compile the .mo files but when they're not writeable it can't. But of course when deploying behind a webserver we do not want anything to be writeable by the webserver user.
This might be related to issue2551225, seems the error-handling is sub-optimal in wsgi.
Note that normal tracebacks make it to the uwsgi log in my setup. So if there was a traceback I should have seen it. Instead I got nothing at all.
This happens inside RequestDispatcher in cgi/wsgi_handler.py which in turn calls the Client constructor in cgi/client.py and proceeds to call client.main which in turn calls client.inner_main.
inner_main calls
- self.determine_user
- self.determine_context
- self.determine_language
all inside a try/except clause.
It looks like it never comes back from determine_language but this might be due to an ignored IOError in the try/except:
except IOError:
# IOErrors here are due to the client disconnecting before
# receiving the reply.
pass
So we probably should have more error-checking here, the assumption that IOError is only due to a client disconnect seems to be wrong. Note that this may also be the root-cause of issue2551225 where it seems we're also ignoring an I/O error (generated from a different execution path, though).
----------
messages: 8390
nosy: rouilj, schlatterbeck
severity: normal
status: new
title: Missing locale .mo files create 500 error on uwsgi without further info
type: behavior
versions: 2.5.0, devel
_________________________________________________
Roundup tracker <is...@ro...>
<https://issues.roundup-tracker.org/issue2551405>
_________________________________________________
|
|
From: Ralf S. <is...@ro...> - 2025-05-13 13:08:36
|
New submission from Ralf Schlatterbeck: I've set the roles of that user to Anonymous. I've not retired the user, I've also not bothered to change the password. No issue was created, I've removed the message .tmp and a file .tmp file (the latter resulting from a logo attached to the email). On Tue, May 13, 2025 at 12:34:21PM +0000, sakshi wrote: > > New submission from sakshi: Ralf -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: www.runtux.com Reichergasse 131, A-3411 Weidling email: of...@ru... ---------- messages: 8389 nosy: schlatterbeck severity: normal status: new title: Re: [Roundup-devel] [issue2551403] Defense [spam] [spam] _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551404> _________________________________________________ |
|
From: sakshi <is...@ro...> - 2025-05-13 12:34:33
|
New submission from sakshi: Roots Analysis has published its latest report titled ‘Defense Electronics Market’, which offers a detailed assessment of the global market and its regional components. This report outlines current performance indicators, estimates future growth, and provides a long-term outlook from 2025 to 2035. It presents an overview of how the market size has evolved in recent years and offers insights into future developments based on available data. Read More :- https://www.rootsanalysis.com/defense-electronics-market ---------- files: roots-analysis-logo1.png messages: 8388 nosy: sakshimore severity: normal status: new title: Defense Electronics Market Key Highlights and Future Opportunities Till 2035 type: security _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551403> _________________________________________________ |
|
From: John R. <ro...@ie...> - 2025-04-30 12:33:12
|
Hi all: On Wed, Apr 30, 2025 at 3:44 AM Jhanvi <is...@ro...> wrote: > New submission from Jhanvi: > > Global Long Acting Drugs Market Forecast to 2024-2035 I changed the password, set the role to Anonymous, and retired the user who sent this. There is a bug dealing with smart quotes and some other unicode values in roundup 1.6. My guess is it raised an error preventing the creation of an issue from this message. It left behind a temporary message file on the tracker and sent a notification email, but did not create an actual issue. So nothing else to clean up. -- rouilj |
|
From: Jhanvi <is...@ro...> - 2025-04-30 07:44:42
|
New submission from Jhanvi: Global Long Acting Drugs Market Forecast to 2024-2035 The latest drafted document on the global Long Acting Drugs Market by Roots Analysis, provides a brief discussion on industry size, current growth scenario and future opportunities. In the market study report, our authors extensively covered qualitative and quantitative analysis including investment opportunities to help stakeholders in evaluating the major growth drivers and business strategies to accelerate growth in the industry. In addition to comprehensive analysis, our researchers illustrated the market drivers, challenges, upcoming trends and partnerships between industrial leaders. The exclusive information about market dynamics serves as a valuable guide to predict economic scenarios and initiatives taken to enhance future growth. Our market study report aims to deliver value-pack information about supply chain ratio, product portfolio, consumption pattern, purchasing habits, macro and micro-economic factors. The primary objective is to help stakeholders update with current market scenarios and future opportunities to make considerable investment. Global Long Acting Drugs Segments Overview The global Long Acting Drugs market report highlights the discussion on the top segments across the Long Acting Drugs industry and the major share held by the segments. This segmentation dominance information helps businesses understand the major segments' distribution, products, end users, applications and key geographical regions. In addition, year wise discussion on three forecast models on the global Long Acting Drugs market help readers make a well-informed decision on business strategies for the future. Global Long Acting Drugs Market Statistical Analysis Data The global Long Acting Drugs market study report utilizes insightful processes for the analysis of statistical data associated with products provided in the industry. This elaborate discussion about the Long Acting Drugs market serves as an important document for understanding consumer requirements and future demand. Our market report provides invaluable data about leading companies and their business strategies that help vendors understand the competitiveness among them. The Long Acting Drugs industry is currently witnessing major expansion and growth dynamics driven by the entry of new players and rising collaborations between existing players. The market study outlines the growing market segments and insight into the evolving elements of the Long Acting Drugs industry. The primary objective of the market study report is to provide insightful information about current growth, transition, and future growth opportunities in the market. The global industry of Long Acting Drugs also features various acquisitions, mergers, agreements, partnerships, joint ventures, and product launches to help you make a strategic decision for future investment in this field. Key Companies Profiled in the Report are • Adare Pharma Solutions • AMW • Bostal Drug Delivery • Creative Biolabs • ForDoz Pharma • Innocore Pharmaceuticals • Integral BioSystems • LATITUDE Pharmaceuticals • Navin Saxena Research and Technology Centre (NSRT) • Samyang Biopharm Regional Analysis Covers: The market report provides you a brief discussion over key region, market share, regulatory guidelines and future trends to be availed by the key players in these regions. The market report also provides a detailed regional analysis of the Long Acting Drugs market with regard to market size, production and consumption patterns, market share in terms of volume and value, import / export and demand dynamics, and presence of leading players in the market. • North America (U.S., Canada) • Europe (U.K., Italy, Germany, France, Rest of EU) • Asia Pacific (India, Japan, China, South Korea, Australia, Rest of APAC) • Middle East & Africa (Saudi Arabia, U.A.E., South Africa, Rest of MEA) To know more about the report, visit @ https://www.rootsanalysis.com/reports/long-acting-drug- delivery-market.html Competitive Outlook of Long Acting Drugs Market Additionally, the report features in-depth analytical data segmented into charts, figures, graphs, tables, and diagrams in a well-organized format for quick analysis. The visual representation of data enables readers to understand the current market scenario in an easy and understandable way. Apart from the market study, the primary objective of the report is to provide a competitive outlook and offer a well-informed conclusion about opportunities to help readers make strategic business decisions. The SWOT analysis covered in the report, along with Porter's Five Forces analysis of the segment, provides information about future trends in the market. Thank you for reading our report. For further queries, please connect with us, and our team will provide you with the report best suited to your requirements. About Roots Analysis Roots Analysis is a global leader in the pharma / biotech market research. Having worked with over 750 clients worldwide, including Fortune 500 companies, start-ups, academia, and venture and strategic investors for more than a decade, we offer a highly analytical / data-driven perspective to a network of over 450,000 senior industry stakeholders looking for credible market insights. All reports provided by us are structured in a way that enables the reader to develop a thorough perspective on the given subject. Apart from writing reports on identified areas, we provide bespoke research / consulting services dedicated to serving our clients in the best possible way. Contact Details Roots Analysis Gaurav Chaudhary +1 (415) 800 3415 +44 (122) 391 1091 Gau...@ro... Website: https://www.rootsanalysis.com/ ---------- messages: 8378 nosy: jhanci88 severity: normal status: new title: Long Acting Drugs Market Estimated to Experience a Hike in Growth by 2035 _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551402> _________________________________________________ |
|
From: Ralf S. <rs...@ru...> - 2025-04-15 15:42:49
|
On Tue, Apr 15, 2025 at 10:43:30AM -0400, John Rouillard wrote: > We are running 1.6.1 there, so no REST capability 8-(. Oh. > To prevent new signups from spamming, should we change the default permissions > for a new user to Anonymous and have an admin change to User as needed? We can do this should the frequency of spams increase. I've replaced the spam-message with an empty file. Ralf -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: www.runtux.com Reichergasse 131, A-3411 Weidling email: of...@ru... |
|
From: John R. <ro...@ie...> - 2025-04-15 14:50:51
|
Hi Ralf: On Tue, Apr 15, 2025 at 3:21 AM Ralf Schlatterbeck <rs...@ru...> wrote: > We had some spam this morning (morning in Europe :-) on the SF roundup It's running on PSF equipment, not sourceforge. At the moment only the main web page (www.roundup-tracker.org), a redirector for old wiki links, and the repo are at sourceforge IIRC. > tracker. I started out adapting a removal script and discovered there is > no REST-API enabled. Shouldn't we enable REST access at least to the > Coordinator role? We are running 1.6.1 there, so no REST capability 8-(. To prevent new signups from spamming, should we change the default permissions for a new user to Anonymous and have an admin change to User as needed? If we do this, we should set up a detector for new user creation so we know when somebody has created a new account. If we get a lot of spam accounts, we may have to do the same as the wiki and add users on request to the mailing lists. I don't want to have to do a full manual user setup but we may need to if we have many accounts created. We could also use a couple of more volunteers as admin/coordinator users. Other thoughts on how to handle the spam registration? -- rouilj |
|
From: Ralf S. <rs...@ru...> - 2025-04-15 07:21:48
|
We had some spam this morning (morning in Europe :-) on the SF roundup tracker. I started out adapting a removal script and discovered there is no REST-API enabled. Shouldn't we enable REST access at least to the Coordinator role? Ralf -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: www.runtux.com Reichergasse 131, A-3411 Weidling email: of...@ru... |
|
From: zoyeford <is...@ro...> - 2025-04-15 05:31:56
|
New submission from zoyeford: The new market research report titled ‘Agricultural Biologicals Market’, published by Roots Analysis offers a comprehensive study of the Agricultural Biologicals Market, while estimating the overall market size and the size and share of the key regional segments of the global market over historical period, as well as the projected timeline of 2024-2035. The global agricultural biologicals market size is estimated to grow from USD 15.12 billion in 2024 to USD 43.53 billion by 2035, representing a CAGR of 10.0% during the forecast period 2023- 2035. The anticipated market growth is accredited to the significant surge in demand across the regional and global markets for the products and services offered by the Agricultural Biologicals Market. The latest study provides readers with a granular analysis of the major developmental elements of the global market, potential business avenues, and the overall market dynamics. The report has been specially curated to offer a deep understanding of the competitive terrain of the global market, highlighting the leading market rivals, their market positions, product portfolios, gross revenue shares, profit margins, pricing analysis, sales network & distribution channels, and financial standing. Distribution by Source of Product • Microbes • Plant Extracts • Other Sources Distribution by Mode of Application • Foliar Sprays • Seed Treatments • Soil Treatments • Other Application Methods Distribution by Type of Crop Treated • Cereals and Pulses • Fruits and Nuts • Oilseeds • Green Fodder, Vegetables and Tubers • Industrial Crops, Textile Crops and Others Key Geographical Regions • North America (U.S., Canada, Mexico) • Europe (UK, Germany, France, Italy, Spain, Rest of Europe) • Asia-Pacific (China, South Korea, Japan, India) • MENA (Turkey, Iran, Rest of the Middle East and North Africa) • Latin America (Brazil, Argentina, Rest of the Latin America) Key players • AMVAC • Andermatt • BASF SE • Bayer AG • BioSafe Systems • Brandt • Chr. Hansen • Certis Biologicals • Corteva Agriscience • FBSciences • Grow Indigo • Koppert Biological Systems The latest research report specializes in the in-depth analysis of the macroeconomic and microeconomic factors affecting the Agricultural Biologicals Market development. The report also concentrates on the regulatory framework that is shaping the future of the global market. New and existing pricing structures, emerging application areas, and upcoming investment opportunities have also been detailed in the report. The report further studies the projected growth factors that are expected to influence the market dynamics over the forecast timeframe. The study is inclusive of a comprehensive analysis of the commonly used marketing and promotional strategies adopted by the key market players. Taking into account the existing market development factors, historical events, and recent market trends, the study presents a balanced opinion on the future scenario of the Agricultural Biologicals Market. It thus supports its opinion by discussing the key corporate strategies, such as mergers & acquisitions, takeovers, joint ventures, and strategic alliances, used by the market players to strengthen their global footprint. Research Methodology Our analysts have performed an accurate examination of the various aspects of the global market leveraging avant-garde primary and secondary sources of data collection. The report has gathered the necessary data and information from several reliable sources. Additionally, the report offers many strategic recommendations for companies involved in this ever-growing business sector to help them attain a competitive edge in the Agricultural Biologicals Market. Thank you for reading our report. Kindly get in touch with us to know more about the report or to receive a customized copy of it. Our team will ensure the report is tailored according to your needs. To view more details on this report, click on the link https://www.rootsanalysis.com/reports/agricultural-biologicals-market.html ---------- components: None messages: 8376 nosy: zoyeford severity: normal status: new title: Agricultural Biologicals market Research Report by 2024, Forecast till 2035 type: behavior _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551401> _________________________________________________ |
|
From: zoyeford <is...@ro...> - 2025-04-15 05:21:07
|
New submission from zoyeford: The new market research report titled ‘Agricultural Biologicals Market’, published by Roots Analysis offers a comprehensive study of the Agricultural Biologicals Market, while estimating the overall market size and the size and share of the key regional segments of the global market over historical period, as well as the projected timeline of 2024-2035. The global agricultural biologicals market size is estimated to grow from USD 15.12 billion in 2024 to USD 43.53 billion by 2035, representing a CAGR of 10.0% during the forecast period 2023- 2035. The anticipated market growth is accredited to the significant surge in demand across the regional and global markets for the products and services offered by the Agricultural Biologicals Market. The latest study provides readers with a granular analysis of the major developmental elements of the global market, potential business avenues, and the overall market dynamics. The report has been specially curated to offer a deep understanding of the competitive terrain of the global market, highlighting the leading market rivals, their market positions, product portfolios, gross revenue shares, profit margins, pricing analysis, sales network & distribution channels, and financial standing. Distribution by Source of Product • Microbes • Plant Extracts • Other Sources Distribution by Mode of Application • Foliar Sprays • Seed Treatments • Soil Treatments • Other Application Methods Distribution by Type of Crop Treated • Cereals and Pulses • Fruits and Nuts • Oilseeds • Green Fodder, Vegetables and Tubers • Industrial Crops, Textile Crops and Others Key Geographical Regions • North America (U.S., Canada, Mexico) • Europe (UK, Germany, France, Italy, Spain, Rest of Europe) • Asia-Pacific (China, South Korea, Japan, India) • MENA (Turkey, Iran, Rest of the Middle East and North Africa) • Latin America (Brazil, Argentina, Rest of the Latin America) Key players • AMVAC • Andermatt • BASF SE • Bayer AG • BioSafe Systems • Brandt • Chr. Hansen • Certis Biologicals • Corteva Agriscience • FBSciences • Grow Indigo • Koppert Biological Systems The latest research report specializes in the in-depth analysis of the macroeconomic and microeconomic factors affecting the Agricultural Biologicals Market development. The report also concentrates on the regulatory framework that is shaping the future of the global market. New and existing pricing structures, emerging application areas, and upcoming investment opportunities have also been detailed in the report. The report further studies the projected growth factors that are expected to influence the market dynamics over the forecast timeframe. The study is inclusive of a comprehensive analysis of the commonly used marketing and promotional strategies adopted by the key market players. Taking into account the existing market development factors, historical events, and recent market trends, the study presents a balanced opinion on the future scenario of the Agricultural Biologicals Market. It thus supports its opinion by discussing the key corporate strategies, such as mergers & acquisitions, takeovers, joint ventures, and strategic alliances, used by the market players to strengthen their global footprint. Research Methodology Our analysts have performed an accurate examination of the various aspects of the global market leveraging avant-garde primary and secondary sources of data collection. The report has gathered the necessary data and information from several reliable sources. Additionally, the report offers many strategic recommendations for companies involved in this ever-growing business sector to help them attain a competitive edge in the Agricultural Biologicals Market. Thank you for reading our report. Kindly get in touch with us to know more about the report or to receive a customized copy of it. Our team will ensure the report is tailored according to your needs. To view more details on this report, click on the link https://www.rootsanalysis.com/reports/agricultural-biologicals-market.html ---------- messages: 8375 nosy: zoyeford severity: normal status: new title: Agricultural Biologicals market Research Report by 2024, Forecast till 2035 _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551400> _________________________________________________ |
|
From: John R. <is...@ro...> - 2025-04-02 17:33:33
|
New submission from John Rouillard:
roundup/anypy/vendored/cgi.py:85:5: F824 `global logfile` is unused: name is never assigned
in scope
global log, logfile, logfp
^
roundup/pygettext.py:234:5: F824 `global escapes` is unused: name is never assigned in scope
global escapes
^
2 F824 `global logfile` is unused: name is never assigned in scope
https://docs.astral.sh/ruff/rules/global-variable-not-assigned/
This is a new flake8 rule which happens in CI with 3.10 or newer, 3.6/3.8
pass.
Consider suppressing it as the error is flagged in cgi.py which is vendored
code.
Alternatively fix the issue if the change is simple and can be verified correct.
----------
components: Web interface
keywords: Blocker
messages: 8371
nosy: rouilj
severity: normal
status: new
title: CI is failing with flake8syntax error F824
type: behavior
versions: devel
_________________________________________________
Roundup tracker <is...@ro...>
<https://issues.roundup-tracker.org/issue2551399>
_________________________________________________
|
|
From: Ralf S. <is...@ro...> - 2025-03-20 09:16:12
|
New submission from Ralf Schlatterbeck: With the new web-interface default that the browser number input is used by default we see problems entering numbers with digits after the decimal point. The reason is probably that the browser with a german (or austrian) locale insists that a number must contain digits after a decimal *comma* (german and austrian locales have a decimal comma not a decimal point). Which in turn cannot be parsed by roundup's mechanisms. So we can neither enter a decimal comma (because the cgi mechanisms cannot parse this) nor a decimal point (because the browser won't let us). When, e.g., entering "3.5" the browser issues the message "Please enter a valid value. The two nearest valid values are 3 and 4." So I guess we should make the config-setting use_browser_number_input defaulting to "no" not "yes" as it currently doesn't work for non-english locales It might also be that some browsers allow only integers or that I've made an error when refactoring the html generation with the new config variable. I've not investigated further. The browser in use is probably Chrome. ---------- components: Web interface keywords: Effort-Low messages: 8367 nosy: rouilj, schlatterbeck severity: critical status: new title: Browser number input type: behavior versions: devel _________________________________________________ Roundup tracker <is...@ro...> <https://issues.roundup-tracker.org/issue2551398> _________________________________________________ |
|
From: John R. <ro...@ie...> - 2025-03-17 17:15:20
|
Hi Mathias: On Mon, Mar 17, 2025 at 3:57 AM Mathias Behrle via Roundup-devel <rou...@li...> wrote: > * Bernhard Reiter via Roundup-devel: " [Roundup-devel] Move to > https://foss.heptapod.net/ ?" (Fri, 7 Mar 2025 15:31:16 +0100): > > it offers Mercurial SCM, runners and a good experience > > based on Gitlab CC and hosted in France. > > > > E.g. see https://foss.heptapod.net/tryton/tryton/-/pipelines > > As a long time Tryton user I just want to put into perspective, that I have to > contradict the overall good experience. [...] > Another perspective (and for sure I don't want to open the can of worms of > another mercurial/git flamewar!) would be to return rather to the roots of the > project which was IIRC in git. I am aware about the switch from git to mercurial > (mostly?) to follow the development of Python as long as roundup was used as > their tracker and they used mercurial as SCM. Both facts are history. IIRC it was Subversion before Mercurial. There was a short interval where there was a git conversion. But many of the developers at the time wanted mercurial instead because of the poor DX of git at the time. I am not sure how many of the devs were also Python devs as well. -- rouilj |
|
From: Mathias B. <m9...@ma...> - 2025-03-17 07:57:50
|
* Bernhard Reiter via Roundup-devel: " [Roundup-devel] Move to https://foss.heptapod.net/ ?" (Fri, 7 Mar 2025 15:31:16 +0100): Hi all, > it offers Mercurial SCM, runners and a good experience > based on Gitlab CC and hosted in France. > > E.g. see https://foss.heptapod.net/tryton/tryton/-/pipelines As a long time Tryton user I just want to put into perspective, that I have to contradict the overall good experience. At least for parts of the Tryton project https://foss.heptapod.net/tryton/tryton is almost untolerable slow. May be that is caused by a somewhat bigger mono repos/project, but the fact is that it is no fun to work there. Another perspective (and for sure I don't want to open the can of worms of another mercurial/git flamewar!) would be to return rather to the roots of the project which was IIRC in git. I am aware about the switch from git to mercurial (mostly?) to follow the development of Python as long as roundup was used as their tracker and they used mercurial as SCM. Both facts are history. So whenever it should be question to move the base of this project elsewhere I would always rather recommend to switch to the existing git mirror which then also could be moved/mirrored more easily to/on other known free git forges. Really just my 2¢, Mathias -- Mathias Behrle MBSolutions Gilgenmatten 10 A D-79114 Freiburg Tel: +49(761)471023 Fax: +49(761)4770816 http://www.m9s.biz UStIdNr: DE 142009020 PGP/GnuPG key availabable from any keyserver, ID: 0xD6D09BE48405BBF6 AC29 7E5C 46B9 D0B6 1C71 7681 D6D0 9BE4 8405 BBF6 |
|
From: John R. <ro...@ie...> - 2025-03-17 02:05:11
|
Hi Bern: Sorry for the late reply. On Fri, Mar 7, 2025 at 9:51 AM Bernhard Reiter via Roundup-devel <roundup-devel at lists.sourceforge.net> wrote: > just an idea, we could consider moving our repo to > > https://foss.heptapod.net/ > > it offers Mercurial SCM, runners and a good experience > based on Gitlab CC and hosted in France. What benefit does it provide? The only one I can see is that we could commit to heptapod's mercurial repo and trigger a CI build. However, without replacing sourceforge's mercurial repo, it's still a separate step to trigger CI which is the same as the current github workflow. The current hg<->git mechanism is a bit annoying to set up, but it has worked for years without issues for me. We would not be able to delete our sourceforge instance. That's where the mailing lists are hosted and we have no way to transfer the mailing lists to a new provider. I claim we would want to maintain our instance on github as it is the default directory for open source software. Having an entry on github reduced the friction when proposing graduate student projects for the spring 2024 semester (which resulted in the new class helper). > I believe that the pipeline features are even better than what github offers. We have a working CI infrastructure using travis-ci, github actions and circle-ci on the github clone. Also we integrate with codecov and coveralls. All of those would have to be made to work with heptapod. I am not sure if there is native support for those integrations. Removing infrastructure from the US is a good secondary goal, but even that does not really make the case for spinning up new infrastructure that we would need to maintain/manage (e.g. adding new users, security groups etc.). -- rouilj |
|
From: Bernhard R. <ber...@in...> - 2025-03-07 14:49:56
|
Hi John, hi Ralf, just an idea, we could consider moving our repo to https://foss.heptapod.net/ it offers Mercurial SCM, runners and a good experience based on Gitlab CC and hosted in France. E.g. see https://foss.heptapod.net/tryton/tryton/-/pipelines We at Intevation have good experiences with the sister hosting offering at https://heptapod.host/intevation/ since a few years. I believe that the pipeline features are even better than what github offers. Best Regards, Bernhard -- https://intevation.de/~bernhard +49 541 33 508 3-3 Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998 Geschäftsführer: Frank Koormann, Bernhard Reiter |