Mailman 3 April 2015 - Python-announce-list

Kallithea 0.2
by Andrew Shadura April 10, 2015

April 10, 2015

Kallithea 0.2 has been released. Kallithea is a Python-based GPLv3 source code management software for web-based hosting of Mercurial and Git repositories. This release brings many changes since 0.1. Notably, pull requests system have been improved, making contributing changes more robust. The visual appearance has also been refined: modern font-based symbolic icons from FontAwesome and GitHub Octicons have replaced the previously used bitmap icons, and revision graphs are now drawn with HiDPI display support. Kallithea now supports Mercurial 3.3 and Dulwich 0.9.9. Several fixes in the database code boosted performance significantly. We have also updated our Javascript libraries: jQuery, CodeMirror and Mergely. Javascript and CSS code have been cleaned up, with less and less code depending on Yahoo UI library. Since 0.1 we have discovered two security issues, so all users are strongly recommended to upgrade. For more details on these issues, please see our Security Notices page: https://kallithea-scm.org/security/ For more information, see https://kallithea-scm.org/ or http://docs.kallithea-scm.org/ virtualenv --no-site-packages dist/v . dist/v/bin/activate pip install kallithea paster make-config Kallithea my.ini python setup.py compile_catalog # for translation of the UI paster setup-db my.ini --user=user --email=user(a)example.com \ --password=password --repos=/tmp paster serve my.ini & firefox http://127.0.0.1:5000/ The summary of the changes since 0.1 release is below. Bug fixes: forms: add CSRF protection to all forms - CVE-2015-0276 api: don't send internal data unless asked for it - CVE-2015-0260 middleware: fix force_tls typo in force_https backward compatibility code (Issue #44) rebranddb: update user extern_type and _name to 'internal' instead of 'kallithea' (Issue #38) git: do not fail if git is not installed and has been removed from __init__.py BACKENDS git: fix "'name' must be bytestring, not unicode" error on browsing changesets git: close SubprocessIOChunker inputstream used for git (Issue #32) git: introduce hack for handling git failure on --depth cloning (Issue #33) git: fix version detection with unexpected version string (Issue #71) git: preserve line endings when calling out to git hg: fix clone from svn+http urls using hg-svn (Issue #72) migrate: add missing import (Issue #29) pullrequests: handle pull requests to empty repos (Issue #27) pullrequests: when creating PRs, fix handling of new ajax requests while other ajax requests are pending pullrequests: fix updates for PRs between different repositories pullrequests: preserve query parameters in pull request overview paging links compare: workaround unexpected Mercurial behaviour when finding ancestor of null rev javascript: remove trailing comma to please IE8 (Issue #39) download: fix for zip file downloads not being valid zips (Issue #35) helpers: fix crash on new users without email (Issue #28) middleware: change middleware ordering so we don't buffer hgweb output in redirect bin: give kallithea_config.py #!/usr/bin/env python so it can be executed directly bin: reintroduce cleanup-repos paster command bin: fix update_repoinfo command urlify: don't include trailing punctuation in markup urlify: markup of hashes in () styling: don't loop on trying to load kallithea-logo.png after kallithea-logo.svg failed error: don't crash on /error/document urls error: don't crash on response without status admin: prevent deletion of users that are owners of a repository/user group (Issue #64) admin: make settings hook name field smaller so it is less likely to overlap with the value field admin: when scanning for repos to add, ignore removed groups auth_crowd: fix Admin Group Membership when using the Atlassian Crowd plugin auth: enable selecting PAM authentication module auth_ldap: fix user automatically activated with LDAP authentication (Issue #78) db: fix beaker cache key for user groups - don't collide with users db: fix handling of (invalid) unicode email addresses db: don't use sql 'in' on empty sets in compare - avoid warning of bad performance db: to the extent it makes sense to have a one byte size limit, make it 255 instead of 256 to please MySQL (Issue #96) files: use current revision as default for 'show at' (Issue #31) files: fix HTML injection via file names files: use forward slash as path separator for consistency files: don't use HTML encoding where not needed (closes: #74). feed: urlify and escape the commit description diff: fix diff of renamed files with whitespace in their names diff: don't split lines on bare CR as python splitlines do mergely: update Mergely to v3.3.9 (Issue #83) jquery: upgrade to 1.11.1 codemirror: cleanup of integration and update to version 4.7 setup: constrain dulwich to version 0.9.9, fixes CVE-2015-0838 gists: add missing formencode.htmlfill import ini: Make celeryd.log.level default values uppercase - lowercase might not be recognized and cause failure notification: handle unicode translations (Issue #95) repos: fix redirect after repo creation (and user/group add focus) (Issue #98) changeset: don't crash on malformed whitespace parameter - return 400 Bad Request stats: fix display when no data ready yet stats: fix "show more" link Features and improvements: ui: use font based icons - FontAwesome and Git Hub Octicons from fontello ui: HiDPI / Retina support in graphs and other places paster: add install-iis command to automate IIS handler generation and update documentation email templates: send text/plain part as well docs: lots of improvements of structure and content and language translations: updated using WebLate admin: show links to added repos after repo scan admin: show links to created users and groups admin: when scanning for repos without 'remove', report the repos that could/would be removed setup: support Mercurial 3.3 db: drop most lazy joins - significant performance improvement db: add missing indices - significant performance improvement db: don't commit session if cache invalidation didn't change anything - improves performance comment: show full username in emails for PR/changeset comments changelog: added Settings to repo context menu utils: better display of ages >1 year when in short form remotes: add support to clone from Mercurial repositories over ssh hg: reimplement branch head listings more efficiently pullrequests: use same code and table ui for Repo Pull Requests and My Pull Requests pullrequests: add delete button to My Pull Requests overview pullrequests: on 'my pullrequests' show the user's own vote as second column next to 'latest vote' pullrequests: add option for adding repo owner as reviewer if none assigned pullrequests: make top pane one big form with meta data and one save button and preview changes in pane below - more like when creating the PR pullrequests: make 'update' functionality a separate submit button in the big form, automatically enabled when an update changeset is chosen pullrequests: show graph next to the list of changesets that are available for update pullrequests: for available changesets, also show changesets that not are descendants and thus not directly available but will be merged in pullrequests: show unrelated branch heads in the graph too - show the problem instead of trying to explain it pullrequests: show pending reviewer changes with "(not saved)" pullrequests: show comment count in top of summary box diff: improved parsing, be more strict and fail with good error messages diff: handle GIT delta binary patches diff: show renamed files as that diff: make trailing spaces more visible - make vertical line less transparent diff: show CR (\r) in diffs comment: warn before leaving page with open comments comment: clarify shown comment count (inline vs general) comment: extend next/previous links to global comments (issue #91) Changes (might influence workflows): i18n: en translation has been removed - make sure to update your .ini files to have 'lang =' (nothing) ini: turn show_revision_number off by default pullrequests: don't give changeset 'unreviewed' status just because it is added to a PR pullrequests: tweak readable titles - just append /_/ and branch name pullrequests: only author and admin can close pullrequests: don't add repo owner as reviewer in all PRs pullrequests: PRs between different repos should default to same destination/source branch pullrequests: use '-- ' as separator in the automatic text when "updating" pull requests and is it to put latest updates first diff: don't group diffs based on the kind of change admin: set current user as owner when running repo scan changelog: change default view to 100 changesets, max to 2000 date representation: use ISO8601 rather than a specific locale user groups: drop add/remove all buttons for member selection - they are too dangerous and multi-select can do the same hg: drop support for hg web.hidden template: link the last revision in the file browser to the changeset Cleanup: code: Fix typos and language in comments and code ui: Correct capitalization and improved English text in the UI javascript: use strict mode tags: rename old non-Kallithea tags and prefix them with 0.0 to show that Kallithea is superior javascript: more jQuery, less YUI, less clutter templates: better structure, less cut'n'paste coding html: various improvements css: various improvements exceptions: avoid silently catching exceptions - especially avoid catch all tests: stability fixes tests: remove large unused test fixture whitespacecleanup.sh: run it regularly to ensure consistent whitespace and avoid spurious changes controllers: consistently use formfill.render with force_defaults=False gists: use allow_extra_fields and filter_extra_fields in gist forms like in most other forms json: always use kallithea.lib.compat for json - and nothing else json: drop simplejson fallback and just use stdlib db: check for None instead of boolean false if that is what we mean -- Cheers, Andrew

1 0

PSF Python Brochure: Get your free copy at PyCon 2015
by M.-A. Lemburg April 10, 2015

April 10, 2015

[Please help spread the word by forwarding to other relevant mailing lists, user groups, etc. world-wide; thanks :-)] ________________________________________________________________________ ANNOUNCING PSF Python Brochure is available again: Get your free copy at PyCon 2015 ________________________________________________________________________ INTRODUCTION After having distributed the first 5,000 copies of the PSF Python Brochure to Python conferences and user groups around the world in the last 12 months, we have now finished the second print run with another 5,000 copies just in time for PyCon 2015 in Montreal. Many thanks go to JetBrains for jumping in as additional ad sponsor to help finance the printing and community order shipping costs for this second print run. We would also like to thank all our initial sponsors and contributors for their hard work. ________________________________________________________________________ PROMOTING PYTHON The feedback we have received for the brochure was positive all around. Conference attendees were really happy to be able to easily show and prove how Python changes the world, to make the point that learning and using Python is a good investment. The brochure helps them in promoting Python in their local and professional communities, especially to the many non-technical people we cannot easily reach with our python.org web site. ________________________________________________________________________ GET YOUR BROCHURE COPY Come and get your copy at the Python Software Foundation booth (booth number 101) at PyCon 2015 in Montreal. If you cannot fetch your hard copy in person, you can order copies from our project page (http://brochure.getpython.info/): * free Community Orders for conferences and user groups * paid Company Orders for companies and organizations The costs for the community orders are sponsored through sponsor ads, the PSF and the company orders. ________________________________________________________________________ MEET THE TEAM I was very happy to work together with our core team members in the last 4 years: * Jan Ulrich Hasecke who was responsible as editor in chief and managed the contribution side of things together with me. * Armin Stroß-Radschinski and his company evenios which did the initial coordination of funding, layout concept, artwork, production and distribution. Our efforts have resulted in a brochure of almost fully CC-3.0-BY-SA content that is reusable by the community. The feedback after one year of circulation is quite promising and we are considering doing a second volume with more success stories and use cases, provided we can get enough support from sponsors and the PSF. ________________________________________________________________________ MORE INFORMATION More information on the brochure, the idea behind it, media data and ordering links are available on our project page: http://brochure.getpython.info/ Enjoy, -- Marc-Andre Lemburg Director Python Software Foundation (PSF) http://www.python.org/psf/

1 0

Karlsruhe (Germany) Python User Group, April 17th 2015, 7pm
by Jürgen A. Erhard April 10, 2015

April 10, 2015

The Karlsruhe Python User Group (KaPy) meets again. Friday, 2015-04-17 (April 17th) at 19:00 (7pm) in the rooms of Entropia eV (the local affiliate of the CCC). See http://entropia.de/wiki/Anfahrt on how to get there. For your calendars: meetings are held monthly, on the 3rd Friday. There's also a mailing list at https://lists.bl0rg.net/cgi-bin/mailman/listinfo/kapy.

1 0

Re: Jython 2.7 release candidate 2 available!
by fwierzbicki＠gmail.com April 10, 2015

April 10, 2015

On behalf of the Jython development team, I'm pleased to announce that the second release candidate of Jython 2.7 is available. The windows installer issues from rc1 should now be fixed. Thanks to Amobee for sponsoring my work on Jython, and thanks to the many contributors to Jython! Details are here: http://fwierzbicki.blogspot.com/2015/04/jython-27-release-candidate-2-avail… -Frank

2 1

Hunter v0.5 released
by Ionel Cristian Mărieș April 5, 2015

April 5, 2015

Hello all, I'm pleased to announce hunter v0.5: https://pypi.python.org/pypi/hunter /0.5.0 *What is Hunter?===============* Hunter is a tracer tool, designed to be used for debugging or just to understand how an application works. It's designed to be flexible and extensible with custom actions or filters. It prints the executed code from locations of your choosing and can optionally print variables from the frames. It also colors the output if you're in a terminal. *Quick example-------------* To show all the executed code from `posixpath`: * import hunter hunter.trace(module='posixpath')* To show all the executed code from `posixpath` and a variable: * hunter.trace( module='posixpath', action=hunter.VarsPrinter('path') )* For convenience, you can also activate it via a `PYTHONHUNTER` environment variable, eg: *PYTHONHUNTER="module='**posixpath'" python yourapp.py* For more examples see: https://github.com/ionelmc/python-hunter *Changes in 0.5==============* * Fixed `And` and `Or` "single argument unwrapping". * Implemented predicate compression. Example: `Or(Or(a, b), c)` is converted to `Or(a, b, c)`. * Renamed the `Event.source` to `Event.fullsource`. * Added `Event.source` that doesn't do any fancy sourcecode tokenization. * Fixed `Event.fullsource` return value for situations where the tokenizer would fail. * Made the print function available in the PYTHONHUNTER env var payload. * Added a `__repr__` for `Event`. *Download page=============* https://pypi.python.org/pypi/hunter *Project page and issue tracker==============================* https://github.com/ionelmc/python-hunter Thanks, -- Ionel Cristian Mărieș, http://blog.ionelmc.ro

1 0

ANN: The Python 101 Screencast Series
by Mike Driscoll April 5, 2015

April 5, 2015

I am currently running a Kickstarter campaign for turning my book, Python 101, into a screencast series. The Kickstarter can be found here: https://www.kickstarter.com/projects/34257246/the-python-101-screencast Thanks, Mike ----------------- Mike Driscoll Blog: http://blog.pythonlibrary.org Book: https://gumroad.com/l/bppWr

1 0

ANN: polynice 0.7 - a nice(1) like utility for throttling processes
by garabik-news-2005-05＠kassiopeia.juls.savba.sk April 5, 2015

April 5, 2015

polynice is a nice(1)-like command line utility for unix systems to throttle long running processes beyond what can be achieved by nice(1), by repeatedly suspending and resuming the process. It is written for python3, though there is some python2.7 compatibility. Author: Radovan Garabík URL: http://kassiopeia.juls.savba.sk/~garabik/software/polynice.html License: GPL (v2) Notable changes: * This is the first public release under the name `polynice' - the utility has been renamed from `verynice' due to name clash with an existing software. * polynice can now emulate timeout(1) - terminate process after given time has passed * MacOS X improvements * better python2 compatiblity -- ----------------------------------------------------------- | Radovan Garabík http://kassiopeia.juls.savba.sk/~garabik/ | | __..--^^^--..__ garabik @ kassiopeia.juls.savba.sk | ----------------------------------------------------------- Antivirus alert: file .signature infected by signature virus. Hi! I'm a signature virus! Copy me into your signature file to help me spread!

1 0

MicroPython 1.4.1 released
by Damien George April 4, 2015

April 4, 2015

Hello everyone, We are pleased to announce the release of MicroPython version 1.4.1! MicroPython is an implementation of Python 3.4 which is optimised for systems with minimal resources, including microcontrollers. Since our last announcement, this release is both more "micro" and more "Python". Code size of the bare Thumb2 architecture version has dropped to under 71k (without reduction of features), the RAM usage has been further optimised, and support for 16-bit microcontrollers has been proven via the port to a PIC microcontroller with just 8k RAM. On the Python side of things, there is now a "stackless" mode with both strict and non-strict behaviour. Strict will always use the heap to allocate a call frame, where non-strict will fall back to the C stack if the heap is exhausted. More special methods have been implemented, along with proper descriptors, OrderedDict class, basic frozen module support and the ability to override builtins, among other things. The test suite has grown and coverage of the code is now beyond 91%. Many other features have been implemented for the ports to various microcontroller platforms, bugs have been fixed and the docs have been improved. A full change log is available at https://micropython.org/resources/micropython-ChangeLog.txt . For more information about the project please visit http://micropython.org/ https://github.com/micropython/micropython Best regards, Damien George.

1 0

Nose 1.3.5
by John Szakmeister April 4, 2015

April 4, 2015

1.3.5 ----- 1.3.5 fixes several minor issues, including the gathering of tests when using package notation, using the coverage plugin with multiprocessing, and several others. See the CHANGELOG for more details. Also note that nose 1.x is in maintenance mode. We will not be looking to add any features, and you should seriously consider looking at nose2 as the way forward. If you're interested in the future of nose, please take a look at the nose2 project on github (https://github.com/nose-devs/nose2) or pypi (http://pypi.python.org/pypi/nose2/0.5.0). -John

1 0

mergeall 2.1: automatic restores from automatic backups
by Mark Lutz April 1, 2015

April 1, 2015

mergeall is a directory tree synchronization system designed to offer a manual alternative to cloud storage. Its latest release (yes, after just two weeks) builds on 2.0's automatic backup of changes, to add full rollback of a prior run's modifications on demand. This is a failsafe, meant to be used if you accidentally corrupt an archive copy so badly that piecemeal restores won't help (unlikely, but bad things happen). Details: Main doc file: http://learning-python.com/mergeall/docs/Usage-Overview.html Latest changes: http://learning-python.com/mergeall/Readme.html#version21 Download mergeall.zip here: http://learning-python.com/downloads Unzipped content: http://learning-python.com/mergeall Screenshot: http://learning-python.com/mergeall/examples/Screenshots/main-quit-help.png --M. Lutz (http://www.rmi.net/~lutz | http://learning-python.com)

1 0