# Publ v0.7.14 released

Posted Wednesday, July 6 at 3:06 AM (3 months ago)

Publ v0.7.14 is now released. Changes:

• Images now only get rendered when they’re first retrieved
• Certain classes of date-handling issues are handled less-badly on 32-bit systems

# Publ v0.7.10 v0.7.11 released

Posted Wednesday, May 25 at 11:32 PM (5 months ago)

Version 0.7.10 0.7.11 of Publ has been released. Not much different from 0.7.9:

• Force an update of Pygments to remove a temporary backwards-compatibility hack
• Add proper support for WebP image compression (as seen in the image rendition options)
• Make the installations of whoosh and authl optional, to cut down on installation bloat for sites that don’t need them

The dependency changes have the potential for breaking functionality in existing sites. In order to restore full-text search and federated authentication, you’ll need to add whoosh and authl to your deployment options, respectively. If you’re using Poetry or another dependency manager which understands extras, you can specify the search and auth extras in your pyproject.toml; for example:

Hopefully this is a helpful change for some people, and not too annoying for others.

Update: Until I tried to roll out a site without Authl enabled, I had failed to realize one spot where Authl was still being unconditionally imported. If you actually want to run without Authl, update to v0.7.11.

# Publ v0.7.9 (a very minor update)

Posted Thursday, April 28 at 6:00 PM (6 months ago)

Publ v0.7.9 is out. The only change from 0.7.8 is a bugfix to fenced code blocks, which were broken by an excruciatingly subtle change to the pygments API. Oops.

# Publ v0.7.8 released

Posted Wednesday, March 23 at 1:24 PM (7 months ago)

Another update to Publ. Changes in this release:

• The TicketAuth request flow now supports rel="canonical" URLs on the profile page
• The Entry get and get_all APIs now respect the security model, as an extra helpful safety check

# Publ v0.7.7 released

Posted Sunday, March 20 at 9:35 PM (7 months ago)

It’s been a hot minute since I’ve worked on any Publ stuff, but v0.7.7 is now released. The following changes have been made since then:

• TicketAuth: added support for the provisional request flow and for refresh tokens
• Also added an optional scope parameter to the TicketAuth request (which Publ itself doesn’t use and it doesn’t make much sense in a TicketAuth context but maybe someone will have a use for it)
• Allow disabling the index watchdog
• Properly strip tables from auto-generated entry summaries

# Publ v0.7.6

Posted Tuesday, January 18 at 10:29 PM (9 months ago)

Both a minor update, and a major one; due to upstream vulnerabilities in Pillow, which are only resolved in a version which drops support Python 3.6, Publ now also drops support for Python 3.6.

There are no other changes.

# Publ v0.7.5

Posted Sunday, November 14 at 1:01 PM (11 months ago)

Releasing v0.7.5 of Publ just to get some bugfixes out. Namely:

• Update Flask to v2.0 and refactor around typing issues
• Add missing test for path_alias_regex
• Handle normalization collisions better
• Don’t erroneously pre-strip markup from autosummary
• Improve handling of pre-paragraph block tags in paragraph extractor

# Publ v0.7.4, Authl v0.6.0

Posted Thursday, October 14 at 10:02 PM (a year ago)

Released new versions of Publ and Authl today.

First, the Authl changes:

• Fixed some test coverage
• Added profile_url field to user profiles to make up for the Twitter URL thing

And the Publ changes:

• Fixed image cache stale directory removal
• Fix ETag output
• Full-text search now properly excludes future articles
• Added a filename normalization tool
• Fixed an Internal Server Error that occurred from a malformed or expired bearer token (AutoAuth et al)
• Updated to Authl 0.6.0 and made use of the new profile_url field

# Publ v0.7.3

Posted Wednesday, October 6 at 1:40 AM (a year ago)

Publ v0.7.3 is now out, with the following changes:

• Properly handles markdown and HTML stripping in summary text
• Improves first-paragraph extraction for OpenGraph cards
• Reduces unnecessary image renditions for OpenGraph cards
• Finally deprecates the AUTHL_FORCE_SSL configuration setting
• Adds group display to the user information on the admin panel
• Fix the PyPI listing
• Make the image rendition cache purge mechanism actually, you know, work

Note that entry.summary now takes an optional parameter, markup, which defaults to True, for the sake of consistency with the rest of the Publ templating API. If you are using entry.summary to provide descriptive text for things (e.g. <a title="{{entry.summary}}"> or <meta name="description" content="{{entry.summary}}">) this will have to change to {{entry.summary(markup=False)}}.

# Pushl v0.3.3

Posted Wednesday, September 1 at 9:08 PM (a year ago)

Pushl has been updated, specifically to rewrite the way that feeds are parsed to avoid a problem due to feedparser internals changing in a way that made the caching mechanism stop working.

# Authl v0.5.2

Posted Monday, August 30 at 10:51 PM (a year ago)

Authl v0.5.2 is now out.

Changes:

• Fixed some caching-related issues on IndieAuth profiles
• The IndieAuth handler now supports PKCE
• IndieAuth takes detection priority over Fediverse
• Authl is now compatible with Flask 2.0

# Authl v0.5.1 released

Posted Sunday, August 29 at 1:24 AM (a year ago)

I’ve just released v0.5.1 of Authl. The only functional change is adding support for actually parsing IndieAuth server response profiles (rather than just requesting one and only using the h-card), now that there’s implementations in the wild, meaning that egg has hatched into a chicken.

There were also some minor documentation cleanups since v0.5.0.

# Publ v0.7.2, Authl v0.5.0

Posted Thursday, July 8 at 8:56 PM (a year ago)

Big new releases for Publ and Authl!

Publ changes:

Authl changes:

• Improve the meta robots rules on the login form
• Add IndieWeb endpoint discovery to the profile

# SQLite vs. Postgres, at a glance

Posted Wednesday, May 5 at 11:28 AM (a year ago)

There’s a general belief that SQLite is a “slow” database and Postgres is “fast,” and many software packages (including FOSS) insist that SQLite is only suitable for testing and doesn’t scale. However, this doesn’t make much sense when you think about it; SQLite is an in-process database so there’s no communications overhead between the service and the database, and because it’s only designed to be accessed from a single process it can make use of optimistic locking to speed up transactions.

Since I was installing postgres for another purpose on my webserver, I decided to quickly see if Publ performs better on Postgres vs SQLite. To test the performance I compared the timing for my website on both doing a full site reindex, and rendering the Atom feed several times (using the debug Flask server and caching disabled).

# Publ 0.7.1, now with full-text search

Posted Thursday, March 4 at 11:53 AM (2 years ago)

I finally got around to adding whoosh full-text search to Publ, as an experimental feature. See it in operation.

Other changes:

• Improve the way that tag names get normalized
• Change entry.prev and entry.next to not default to subcategory recursion if a category context is specified

# v0.7.0 finally released

Posted Saturday, January 9 at 9:43 PM (2 years ago)

It took me way longer than I should have, but I finally decided to bump the minor version of Publ to 0.7.0.

My original intention was to only do that after getting the unit test coverage up to 90%, then to 80%, then to 50%… but it’s at 45% and that’s Good Enough I guess. I’d still like to get some proper automated testing in place for the bits that are tricky to test but with a system as complex as Publ it’s not particularly clear how to do a lot of that. The main issue is a fundamental mismatch between how the underlying ORM works vs. how unit testing is supposed to work, and I’ve so far been unable to square that circle. But maybe someday I’ll get the test coverage number up where I want it to be.

In any case, the only actual code change since 0.6.14 was some fixes to how page redirection works, especially around private entries.

# Publ v0.6.14

Posted Wednesday, December 30 at 9:49 PM (2 years ago)

End-of-the-year updates to Publ, mostly bug/interoperability fixes but a couple of small new features:

• URL chasing (e.g. example.com/1234example.com/blog/1234-hello-world) now uses permanent redirects
• Tag displayname normalization only updates if the newly-seen version is mixed-case
• You can now configure template default layout options globally
• view now has a has_unauthorized property
• Hidden tags no longer appear in category.tags
• Generated tag-browsing URLs (e.g. view(tag=...).link, entry.archive(tag=...), etc.) will normalize the case and order of included tags

Assuming this is stable, this will become the basis of the long-overdue 0.7.0 release.

# Publ v0.6.13 released

Posted Monday, December 7 at 6:23 PM (2 years ago)

Just some minor fixes for v0.6.13:

• Database performance improvements
• SEO improvements
• Fix the Windows test runner (ironically untested)
• Remove the minimal sample site from the source repository, as this is better served by the git repository for this site and the getting started documentation.

# Authl v0.4.6 released

Posted Friday, December 4 at 12:09 AM (2 years ago)

Wow, it’s been a while since I’ve worked on this stuff, huh?

Anyway, IndieAuth validation rules have changed for the better, so Authl has been updated accordingly.

There’s a few other changes as well:

• On IndieAuth profiles, p-pronoun is treated as a fallback for p-pronouns
• The Flask templates add some rel="nofollow" in some appropriate places

# v0.6.12 released

Posted Sunday, October 4 at 11:24 PM (2 years ago)

A mostly-bugfix update:

• Path-Canonical/Path-Mount now works properly in conjunction with Auth
• Path-Alias et al now support URL-encoded special characters for the path mapping
• Improved error handling; more cases of malformed and malicious URLs now result in a 400 Bad Request error instead of a 500 Internal Server Error