13.4.0

Internal changes

• Upgrade kinto-admin to v1.25.0

13.3.0

Bug fixes

• Prevent password to be modified on modification of accounts metadata (fixes #2058)
• Fix unexpected exception in /__version__ endpoint
• Add Content-Type to default_cors_headers (refs #2220)
• Fix crash with non-allowed requests on __user_data__ (fixes #2063)
• Fix multiple event listeners on READ action (fixes #1755)

New features

• Allow StatsD counter to be incremented by an arbitrary number

13.2.2

Bug fixes

• Fix apparence of Admin notifications (fixes #2191)

13.2.1

Internal changes

• Upgrade kinto-admin to v1.24.1

13.2.0

Internal changes

• Upgrade kinto-admin to v1.24.0

13.1.1

Bug fixes

• Fix cache heartbeat test (fixes #2107)
• Fix support of sqlalchemy.pool.NullPool for PostgreSQL backends.
  The default pool_size of 25 is maintained on the default pool class
  (QueuePoolWithMaxBacklog). When using custom connection pools, please
  refer to SQLAlchemy documentation for default values.

Internal changes

• Remove dependency to kinto-redis in core tests

13.1.0

New features

• Expose the user_profile in the user field of the hello page. (#1989)
• Add an "account validation" option to the accounts plugin. (#1973)
• Add a validate endpoint at /accounts/{user id}/validate/{validation key} which can be used to validate an account when the account
  validation option is enabled on the accounts plugin.
• Add a reset-password endpoint at /accounts/(user id)/reset-password which can be used to reset a user's password when the account validation option is enabled on the accounts plugin.

Bug fixes

• Fixed two potential bugs relating to mutable default values.
• Fix crash on validating records with errors in arrays (#1508)
• Fix crash on deleting multiple accounts (#2009)

Documentation

• Fixed spelling and Filtering docs

Internal changes

• Use setup.cfg for package metadata (ref #1921)

API is now at version 1.22. See API changelog

13.0.1

Bug fixes

• Loosen up the Content-Security policies in the Kinto Admin plugin to prevent Webpack inline script to be rejected (fixes #2000)

13.0.0

New features

• Expose the user_profile in the user field of the hello page with OpenID authentication (#1989)

Breaking changes

• Update Kinto OpenID plugin to redirect with a base64 JSON encoded token. (#1988).
  This will work with kinto-admin 1.23

Bug fixes

• security: Fix a pagination bug in the PostgreSQL backend that could leak records between collections

Internal changes

• Upgrade kinto-admin to v1.23.0

12.0.2

Bug fixes

• security: Fix a pagination bug in the PostgreSQL backend that could leak records between collections