This is an automated email from the ASF dual-hosted git repository. brondsem pushed a commit to branch asf-site in repository https://gitbox.apache.org/repos/asf/allura-site.git
commit 88da28fd1ca1b7109e12f835919d23becf15a0b8 Author: Dave Brondsema <d...@brondsema.net> AuthorDate: Tue Aug 12 17:01:38 2025 -0400 release 1.18 news --- _src/content/2025-allura-1.18.0.md | 45 +++++++++ _src/pelicanconf.py | 6 +- download.html | 8 +- feeds/all.atom.xml | 24 ++++- feeds/tag.release.atom.xml | 24 ++++- index.html | 8 +- news.html | 11 +++ download.html => posts/2025-allura-1.18.0.html | 127 +++++++++---------------- tag/release.html | 11 +++ 9 files changed, 168 insertions(+), 96 deletions(-) diff --git a/_src/content/2025-allura-1.18.0.md b/_src/content/2025-allura-1.18.0.md new file mode 100644 index 0000000..4ff539a --- /dev/null +++ b/_src/content/2025-allura-1.18.0.md @@ -0,0 +1,45 @@ +Title: Apache Allura 1.18.0 released +Date: 2025-08-12 +Tags: release +Slug: allura-1.18.0 +Summary: Version 1.18.0 of Allura released + +#### What's New? + +Apache Allura 1.18.0 has been released. + +For full details of all the changes and fixes, see the [CHANGES file](https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES). + +#### New Security Settings + +To upgrade to stronger password hashing with an existing .ini file, see `auth.password.algorithm` and `auth.password.algorithm.old` in development.ini. The adjacent comments explain the possible values. For LDAP users, see `auth.ldap.password.algorithm`. + +To require logins from new locations with MFA to verify a code by email, add this to your existing .ini file (enabled by default for new installs): +``` +auth.email_auth_code.enabled = true +``` + +To enforce stricter login session handling, add this to your existing .ini file (enabled by default for new installs). You may wish to run Allura 1.18.0 without this setting for a few weeks to allow users to log in from their existing sessions before enforcing it. +``` +auth.reject_untracked_sessions = true +``` + +#### Breaking Changes + +Python 3.8 is no longer supported. Python 3.9 through 3.11 are supported in this release. + +#### Upgrade Instructions + +To install updated dependencies, run: `pip install -r requirements.txt --no-deps --upgrade --upgrade-strategy=only-if-needed` + +Run: `paster ensure_index development.ini` in the Allura dir + +If using docker, rebuild the allura image and restart containers. + +Also, see the sections above about security settings. + +Feel free to ask any questions on the [dev mailing list](https://lists.apache.org/list.html?d...@allura.apache.org). + +#### Get 1.18.0 + +[Download Allura](https://allura.apache.org/download.html) and [install it](https://forge-allura.apache.org/docs/getting_started/installation.html) today. diff --git a/_src/pelicanconf.py b/_src/pelicanconf.py index fe2e169..1c531a7 100644 --- a/_src/pelicanconf.py +++ b/_src/pelicanconf.py @@ -45,9 +45,9 @@ TAG_FEED_ATOM = 'feeds/tag.{slug}.atom.xml' CURRENT_YEAR = dt.date.today().year -RELEASE_VERSION = '1.17.1' -RELEASE_DATE = 'June 2024' -RELEASE_NEWS = 'posts/2024-allura-1.17.1.html' +RELEASE_VERSION = '1.18.0' +RELEASE_DATE = 'August 2025' +RELEASE_NEWS = 'posts/2025-allura-1.18.0.html' DIST_URL = 'https://downloads.apache.org/allura/' FORGE_ALLURA_URL = 'https://forge-allura.apache.org/' diff --git a/download.html b/download.html index 8b78241..b5eebc6 100644 --- a/download.html +++ b/download.html @@ -54,15 +54,15 @@ <div class="col-20 no-float auto-margin"> <div class="row"> <p class="pad-md"> - <a href="https://www.apache.org/dyn/closer.cgi/allura/allura-1.17.1.tar.gz">Download Allura v1.17.1</a>. This is the latest release of Apache Allura, released June 2024. - <a href="posts/2024-allura-1.17.1.html">Read what's new.</a> + <a href="https://www.apache.org/dyn/closer.cgi/allura/allura-1.18.0.tar.gz">Download Allura v1.18.0</a>. This is the latest release of Apache Allura, released August 2025. + <a href="posts/2025-allura-1.18.0.html">Read what's new.</a> </p> <p> Verify the download: </p> <ul> - <li><a href="https://downloads.apache.org/allura/allura-1.17.1.tar.gz.sha512">SHA-512</a> checksum</li> - <li>PGP <a href="https://downloads.apache.org/allura/allura-1.17.1.tar.gz.asc">signature</a> & <a href="https://downloads.apache.org/allura/KEYS">keys</a></li> + <li><a href="https://downloads.apache.org/allura/allura-1.18.0.tar.gz.sha512">SHA-512</a> checksum</li> + <li>PGP <a href="https://downloads.apache.org/allura/allura-1.18.0.tar.gz.asc">signature</a> & <a href="https://downloads.apache.org/allura/KEYS">keys</a></li> </ul> <p> <a href="https://www.apache.org/info/verification.html">Instructions for how to verify a download using these files.</a> diff --git a/feeds/all.atom.xml b/feeds/all.atom.xml index 9104e63..fcb0ec1 100644 --- a/feeds/all.atom.xml +++ b/feeds/all.atom.xml @@ -1,5 +1,27 @@ <?xml version="1.0" encoding="utf-8"?> -<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura</title><link href="https://allura.apache.org/" rel="alternate"></link><link href="https://allura.apache.org/feeds/all.atom.xml" rel="self"></link><id>https://allura.apache.org/</id><updated>2024-06-21T00:00:00+00:00</updated><entry><title>Apache Allura 1.17.1 released, with security fix</title><link href="https://allura.apache.org/posts/2024-allura-1.17.1.html" rel="alternate"></link><published>2024-06-21T00:00:00+00:00</publ [...] +<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura</title><link href="https://allura.apache.org/" rel="alternate"></link><link href="https://allura.apache.org/feeds/all.atom.xml" rel="self"></link><id>https://allura.apache.org/</id><updated>2025-08-12T00:00:00+00:00</updated><entry><title>Apache Allura 1.18.0 released</title><link href="https://allura.apache.org/posts/2025-allura-1.18.0.html" rel="alternate"></link><published>2025-08-12T00:00:00+00:00</published><updated>2025 [...] +<p>Apache Allura 1.18.0 has been released.</p> +<p>For full details of all the changes and fixes, see the <a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES">CHANGES file</a>. </p> +<h4>New Security Settings</h4> +<p>To upgrade to stronger password hashing with an existing .ini file, see <code>auth.password.algorithm</code> and <code>auth.password.algorithm.old</code> in development.ini. The adjacent comments explain the possible values. For LDAP users, see <code>auth.ldap.password.algorithm</code>.</p> +<p>To require logins from new locations with MFA to verify a code by email, add this to your existing .ini file (enabled by default for new installs):</p> +<div class="highlight"><pre><span></span><code>auth.email_auth_code.enabled = true +</code></pre></div> + +<p>To enforce stricter login session handling, add this to your existing .ini file (enabled by default for new installs). You may wish to run Allura 1.18.0 without this setting for a few weeks to allow users to log in from their existing sessions before enforcing it.</p> +<div class="highlight"><pre><span></span><code>auth.reject_untracked_sessions = true +</code></pre></div> + +<h4>Breaking Changes</h4> +<p>Python 3.8 is no longer supported. Python 3.9 through 3.11 are supported in this release.</p> +<h4>Upgrade Instructions</h4> +<p>To install updated dependencies, run: <code>pip install -r requirements.txt --no-deps --upgrade --upgrade-strategy=only-if-needed</code></p> +<p>Run: <code>paster ensure_index development.ini</code> in the Allura dir</p> +<p>If using docker, rebuild the allura image and restart containers.</p> +<p>Also, see the sections above about security settings.</p> +<p>Feel free to ask any questions on the <a href="https://lists.apache.org/list.html?d...@allura.apache.org">dev mailing list</a>.</p> +<h4>Get 1.18.0</h4> +<p><a href="https://allura.apache.org/download.html">Download Allura</a> and <a href="https://forge-allura.apache.org/docs/getting_started/installation.html">install it</a> today.</p></content><category term="misc"></category><category term="release"></category></entry><entry><title>Apache Allura 1.17.1 released, with security fix</title><link href="https://allura.apache.org/posts/2024-allura-1.17.1.html" rel="alternate"></link><published>2024-06-21T00 [...] <p>Apache Allura 1.17.1 has been released. It includes a security fix.</p> <p>For full details of all the changes and fixes, see the <a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES">CHANGES file</a>. </p> <h4>Security Fix</h4> diff --git a/feeds/tag.release.atom.xml b/feeds/tag.release.atom.xml index 28e3932..1e5d0d7 100644 --- a/feeds/tag.release.atom.xml +++ b/feeds/tag.release.atom.xml @@ -1,5 +1,27 @@ <?xml version="1.0" encoding="utf-8"?> -<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura - release</title><link href="https://allura.apache.org/" rel="alternate"></link><link href="https://allura.apache.org/feeds/tag.release.atom.xml" rel="self"></link><id>https://allura.apache.org/</id><updated>2024-06-21T00:00:00+00:00</updated><entry><title>Apache Allura 1.17.1 released, with security fix</title><link href="https://allura.apache.org/posts/2024-allura-1.17.1.html" rel="alternate"></link><published>2024-06-21T00 [...] +<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura - release</title><link href="https://allura.apache.org/" rel="alternate"></link><link href="https://allura.apache.org/feeds/tag.release.atom.xml" rel="self"></link><id>https://allura.apache.org/</id><updated>2025-08-12T00:00:00+00:00</updated><entry><title>Apache Allura 1.18.0 released</title><link href="https://allura.apache.org/posts/2025-allura-1.18.0.html" rel="alternate"></link><published>2025-08-12T00:00:00+00:00</publi [...] +<p>Apache Allura 1.18.0 has been released.</p> +<p>For full details of all the changes and fixes, see the <a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES">CHANGES file</a>. </p> +<h4>New Security Settings</h4> +<p>To upgrade to stronger password hashing with an existing .ini file, see <code>auth.password.algorithm</code> and <code>auth.password.algorithm.old</code> in development.ini. The adjacent comments explain the possible values. For LDAP users, see <code>auth.ldap.password.algorithm</code>.</p> +<p>To require logins from new locations with MFA to verify a code by email, add this to your existing .ini file (enabled by default for new installs):</p> +<div class="highlight"><pre><span></span><code>auth.email_auth_code.enabled = true +</code></pre></div> + +<p>To enforce stricter login session handling, add this to your existing .ini file (enabled by default for new installs). You may wish to run Allura 1.18.0 without this setting for a few weeks to allow users to log in from their existing sessions before enforcing it.</p> +<div class="highlight"><pre><span></span><code>auth.reject_untracked_sessions = true +</code></pre></div> + +<h4>Breaking Changes</h4> +<p>Python 3.8 is no longer supported. Python 3.9 through 3.11 are supported in this release.</p> +<h4>Upgrade Instructions</h4> +<p>To install updated dependencies, run: <code>pip install -r requirements.txt --no-deps --upgrade --upgrade-strategy=only-if-needed</code></p> +<p>Run: <code>paster ensure_index development.ini</code> in the Allura dir</p> +<p>If using docker, rebuild the allura image and restart containers.</p> +<p>Also, see the sections above about security settings.</p> +<p>Feel free to ask any questions on the <a href="https://lists.apache.org/list.html?d...@allura.apache.org">dev mailing list</a>.</p> +<h4>Get 1.18.0</h4> +<p><a href="https://allura.apache.org/download.html">Download Allura</a> and <a href="https://forge-allura.apache.org/docs/getting_started/installation.html">install it</a> today.</p></content><category term="misc"></category><category term="release"></category></entry><entry><title>Apache Allura 1.17.1 released, with security fix</title><link href="https://allura.apache.org/posts/2024-allura-1.17.1.html" rel="alternate"></link><published>2024-06-21T00 [...] <p>Apache Allura 1.17.1 has been released. It includes a security fix.</p> <p>For full details of all the changes and fixes, see the <a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES">CHANGES file</a>. </p> <h4>Security Fix</h4> diff --git a/index.html b/index.html index dcb990b..fa86be2 100644 --- a/index.html +++ b/index.html @@ -84,18 +84,18 @@ <h3 class="text-center">Get the Latest Version of Allura</h3> <div class="row pad-vert-md"> <div id="release" class="col-12 auto-margin pad-vert-xs text-center"> - <a href="https://allura.apache.org/download.html"><button class="auto-margin">Download v1.17.1</button></a> - <span class="text-white">June 2024 —</span> - <a href="posts/2024-allura-1.17.1.html">What's New</a> + <a href="https://allura.apache.org/download.html"><button class="auto-margin">Download v1.18.0</button></a> + <span class="text-white">August 2025 —</span> + <a href="posts/2025-allura-1.18.0.html">What's New</a> </div> <div id="news" class="col-12 auto-margin pad-vert-xs text-center"> <h5>News</h5> <ul> + <li><a href="https://allura.apache.org/posts/2025-allura-1.18.0.html">Apache Allura 1.18.0 released</a></li> <li><a href="https://allura.apache.org/posts/2024-allura-1.17.1.html">Apache Allura 1.17.1 released, with security fix</a></li> <li><a href="https://allura.apache.org/posts/2024-allura-1.17.0.html">Apache Allura 1.17.0 released, including critical security fix</a></li> <li><a href="https://allura.apache.org/posts/2023-allura-1.16.0.html">Apache Allura 1.16.0 released with critical security fix</a></li> <li><a href="https://allura.apache.org/posts/2023-allura-1.15.0.html">Apache Allura 1.15.0 released</a></li> - <li><a href="https://allura.apache.org/posts/2022-allura-1.14.0.html">Apache Allura 1.14.0 released</a></li> <li><a href="https://allura.apache.org/news.html">All News →</a></li> </ul> </div> diff --git a/news.html b/news.html index b7c4e87..01aaa83 100644 --- a/news.html +++ b/news.html @@ -52,6 +52,17 @@ <h2>All News</h2> <div class="row bg-white pad-bot-md text-center"> + <div class="row pad-top-md"> + <h3><a class="text-black" href="https://allura.apache.org/posts/2025-allura-1.18.0.html">Apache Allura 1.18.0 released</a></h3> + </div> + + <div class="post-info"> + Published: + <abbr class="published" title="2025-08-12T00:00:00+00:00"> + Tue 12 August 2025 + </abbr> + </div> + <div class="entry-content"> <p>Version 1.18.0 of Allura released</p> </div> <div class="row pad-top-md"> <h3><a class="text-black" href="https://allura.apache.org/posts/2024-allura-1.17.1.html">Apache Allura 1.17.1 released, with security fix</a></h3> </div> diff --git a/download.html b/posts/2025-allura-1.18.0.html similarity index 54% copy from download.html copy to posts/2025-allura-1.18.0.html index 8b78241..b991692 100644 --- a/download.html +++ b/posts/2025-allura-1.18.0.html @@ -1,8 +1,9 @@ <!DOCTYPE html> <html lang="en"> <head> - <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> - <title>Apache Allura</title> + <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> + <title> Apache Allura 1.18.0 released +</title> <meta charset="utf-8"> <meta name="description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects."> <meta name="keywords" content=""> @@ -31,9 +32,12 @@ <link rel="stylesheet" type="text/css" href="https://allura.apache.org/theme/css/flex.min.css"> <link rel="stylesheet" type="text/css" href="https://allura.apache.org/theme/css/style.css"> + <link rel="stylesheet" type="text/css" href="https://allura.apache.org/theme/css/article.css"> + + </head> -<body cz-shortcut-listen="true" class="pg-download"> +<body cz-shortcut-listen="true" class="pg-"> <section id="content_wrapper" class="mobile-desktop row"> <div id="header" class="row "> <header id="login_header" class="row"> @@ -45,96 +49,52 @@ </header> </div> -<div id="about" class="row bg-white pad-vert-xl"> + <div class="article-content"> +<div class="row bg-white pad-vert-lg"> <div class="row"> - <h3 class="text-black text-center">Download Allura</h3> + <h3 class="text-black text-center">Apache Allura 1.18.0 released</h3> + </div> + + <div class="post-info text-center"> + Published: + <abbr class="published" title="2025-08-12T00:00:00+00:00"> + Tue 12 August 2025 + </abbr> + <br> + Tagged: + <a href="https://allura.apache.org/tag/release.html">release</a> </div> <div class="row"> <div class="col-20 no-float auto-margin"> <div class="row"> - <p class="pad-md"> - <a href="https://www.apache.org/dyn/closer.cgi/allura/allura-1.17.1.tar.gz">Download Allura v1.17.1</a>. This is the latest release of Apache Allura, released June 2024. - <a href="posts/2024-allura-1.17.1.html">Read what's new.</a> - </p> - <p> - Verify the download: - </p> - <ul> - <li><a href="https://downloads.apache.org/allura/allura-1.17.1.tar.gz.sha512">SHA-512</a> checksum</li> - <li>PGP <a href="https://downloads.apache.org/allura/allura-1.17.1.tar.gz.asc">signature</a> & <a href="https://downloads.apache.org/allura/KEYS">keys</a></li> - </ul> - <p> - <a href="https://www.apache.org/info/verification.html">Instructions for how to verify a download using these files.</a> - </p> + <div class="pad-md text-black"><h4>What's New?</h4> +<p>Apache Allura 1.18.0 has been released.</p> +<p>For full details of all the changes and fixes, see the <a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES">CHANGES file</a>. </p> +<h4>New Security Settings</h4> +<p>To upgrade to stronger password hashing with an existing .ini file, see <code>auth.password.algorithm</code> and <code>auth.password.algorithm.old</code> in development.ini. The adjacent comments explain the possible values. For LDAP users, see <code>auth.ldap.password.algorithm</code>.</p> +<p>To require logins from new locations with MFA to verify a code by email, add this to your existing .ini file (enabled by default for new installs):</p> +<div class="highlight"><pre><span></span><code>auth.email_auth_code.enabled = true +</code></pre></div> + +<p>To enforce stricter login session handling, add this to your existing .ini file (enabled by default for new installs). You may wish to run Allura 1.18.0 without this setting for a few weeks to allow users to log in from their existing sessions before enforcing it.</p> +<div class="highlight"><pre><span></span><code>auth.reject_untracked_sessions = true +</code></pre></div> + +<h4>Breaking Changes</h4> +<p>Python 3.8 is no longer supported. Python 3.9 through 3.11 are supported in this release.</p> +<h4>Upgrade Instructions</h4> +<p>To install updated dependencies, run: <code>pip install -r requirements.txt --no-deps --upgrade --upgrade-strategy=only-if-needed</code></p> +<p>Run: <code>paster ensure_index development.ini</code> in the Allura dir</p> +<p>If using docker, rebuild the allura image and restart containers.</p> +<p>Also, see the sections above about security settings.</p> +<p>Feel free to ask any questions on the <a href="https://lists.apache.org/list.html?d...@allura.apache.org">dev mailing list</a>.</p> +<h4>Get 1.18.0</h4> +<p><a href="https://allura.apache.org/download.html">Download Allura</a> and <a href="https://forge-allura.apache.org/docs/getting_started/installation.html">install it</a> today.</p></div> </div> </div> </div> </div> - -<div id="latest" class="row pad-vert-xl parallax" style="background-position: 0px 0px;"> - <div class="col-16 no-float auto-margin"> - <div class="row"> - <h3 class="text-center">More about Allura</h3> - <div class="text-center row text-white"> - <p class="pad-md"> - See the <a href="https://allura.apache.org/">Allura homepage</a> for latest news, instructions, and project information. - </p> - <p> - <a href="https://archive.apache.org/dist/allura/">Archive of older releases</a> - </p> - </div> - </div> - </div> - - <div class="col-8"> - <div class="row"> - <div class="col-12 no-float auto-margin"> - </div> - <div class="col-12 no-float auto-margin"> - </div> - </div> - </div> -</div> - - -<div id="apache" class="row bg-orange pad-vert-xl"> - <div class="col-20 no-float auto-margin"> - <div class="row"> - <h3 class="text-center">Apache Software Foundation</h3> - </div> - - <div class="row"> - <img class="auto-margin pad-vert-md" src="theme/img/logo-asf-apache.png" alt="apache software foundation logo"> - </div> - - <div class="row auto-margin button-container"> - <div class="col-8 pad-vert-sm"> - <a href="https://www.apache.org/licenses/"><button class="auto-margin">License</button></a> - </div> - - <div class="col-8 pad-vert-sm"> - <a href="https://www.apache.org/foundation/sponsorship.html"><button class="auto-margin">Sponsorship</button></a> - </div> - - <div class="col-8 pad-vert-sm"> - <a href="https://www.apache.org/foundation/thanks.html"><button class="auto-margin">Thanks</button></a> - </div> - </div> - <div class="row auto-margin button-container"> - <div class="col-8 pad-vert-sm"> - <a href="https://www.apache.org/security/"><button class="auto-margin">Security</button></a> - </div> - - <div class="col-8 pad-vert-sm"> - <a href="https://privacy.apache.org/policies/privacy-policy-public.html"><button class="auto-margin">Privacy Policy</button></a> - </div> - - <div class="col-8 pad-vert-sm"> - <a href="https://www.apache.org/"><button class="auto-margin">Apacheā¢</button></a> - </div> - </div> - </div> </div> <div class="row"> @@ -148,6 +108,7 @@ <script type="application/javascript" src="https://allura.apache.org/theme/js/jquery-1.11.2.min.js"></script> <script type="application/javascript" src="https://allura.apache.org/theme/js/frontend.js"></script> + <script type="application/javascript" src="https://allura.apache.org/theme/js/article.js"></script> <!-- Credits Logo Design: Will Leonard diff --git a/tag/release.html b/tag/release.html index 22f80e9..dff1404 100644 --- a/tag/release.html +++ b/tag/release.html @@ -52,6 +52,17 @@ <h2>Articles tagged 'release'</h2> <div class="row bg-white pad-bot-md text-center"> + <div class="row pad-top-md"> + <h3><a class="text-black" href="https://allura.apache.org/posts/2025-allura-1.18.0.html">Apache Allura 1.18.0 released</a></h3> + </div> + + <div class="post-info"> + Published: + <abbr class="published" title="2025-08-12T00:00:00+00:00"> + Tue 12 August 2025 + </abbr> + </div> + <div class="entry-content"> <p>Version 1.18.0 of Allura released</p> </div> <div class="row pad-top-md"> <h3><a class="text-black" href="https://allura.apache.org/posts/2024-allura-1.17.1.html">Apache Allura 1.17.1 released, with security fix</a></h3> </div>