v3.8.23

What's Changed

• fix: expand refKeys wildcard patterns to actual bone names by @sveneberth in #1670
• fix: hmac_verify returns False for non-ASCII signatures instead of raising TypeError by @sveneberth in #1673
• cicd: upgrade Read the Docs build image to ubuntu-24.04 by @sveneberth in #1675
• fix: Reject invalid dest_key types early in RelationalBone.singleValueFromClient by @sveneberth in #1674

Full Changelog: v3.8.22...v3.8.23

v3.8.22

What's Changed

• fix: Add Argument for conf.user.redirect_whitelist by @ArneGudermann in #1663
• fix: postSavedHandler should ignore value == None by @sveneberth in #1664
• feat: SkeletonMaintenanceTask with code highlighting by @phorward in #1667
• feat: utils.get_base_url() refactors getHostUrl() by @phorward in #1665

Full Changelog: v3.8.21...v3.8.22

v3.8.21

What's Changed

• chore: update copyright year to 2026 by @Copilot in #1656
• feat: Implement endpoints for App Login Flow via session cookie by @sveneberth in #1657
• fix: Whitelist redirect_to in get_cookie_for_app to prevent open-redirect attacks by @sveneberth in #1660
• fix: BaseBone._get_distinct_hash by @phorward in #1662

New Contributors

• @Copilot made their first contribution in #1656

Full Changelog: v3.8.20...v3.8.21

v3.8.20

What's Changed

• fix: postSavedHandler should ignore value["rel"] == None by @sveneberth in #1645
• fix: PurePath.relative_to() does no longer support multiple arguments by @sveneberth in #1646
• refactor: db.fix_unindexable_properties by @sveneberth in #1647
• fix(cicd): Add RSA package by @sveneberth in #1650
• fix: Convert digit-only id_or_name attributes to int by @sveneberth in #1649

Full Changelog: v3.8.19...v3.8.20

v3.8.19

What's Changed

• fix: renderSkelValues and renderBoneValue for backward compatibility by @sveneberth in #1641
• fix: Unescape file name for serving_url generation by @sveneberth in #1643
• fix: Adding further cases for deprecation handling by @phorward in #1644

Full Changelog: v3.8.18...v3.8.19

v3.8.18

Full Changelog: v3.8.17...v3.8.18

v3.8.17

What's Changed

• Add setuptools to testing dependencies by @sveneberth in #1629
• fix: utils replace map by @sveneberth in #1632
• fix: Call Tree.canAdd with SkeletonInstance in Tree.clone by @sveneberth in #1631
• fix: viur-migrate by @sveneberth in #1634
• refactor: Use KeyType for ìsinstance checks by @sveneberth in #1638
• fix: Call postSavedHandler on UsingSkel (RelSkel) by @sveneberth in #1637

Full Changelog: v3.8.16...v3.8.17

v3.8.16

What's Changed

• fix: Use new vi-admin code-feature with syntax highlighting by @phorward in #1615
• fix: UserPassword.pwrecover should strip the recovery_key by @phorward in #1621
• fix: Propagate @property from Skeleton to SkeletonInstance that belongs to a RefSkel + reset renderPreparation by @sveneberth in #1623

Full Changelog: v3.8.15...v3.8.16

v3.8.15

What's Changed

• fix: ComputeMethod.Always fails when skeleton is being rendered by @phorward in #1614

Full Changelog: v3.8.14...v3.8.15

v3.8.14

What's Changed

• fix: No exception raise on compute attempt on deleted RefSkel by @phorward in #1608

Full Changelog: v3.8.13...v3.8.14