documentation for use of hashed passwords

[git.ikiwiki.info.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index e387af09561bdbd1fa7731addceb9610c9cc63c5..fb448e7ddaf7b0d1e002f94e0982f64cfbd0459c 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,12 +1,45 @@
-ikiwiki (2.47) UNRELEASED; urgency=low
+ikiwiki (2.48) UNRELEASED; urgency=low
+
+  * Add rel=nofollow to edit links. This may prevent some spiders from
+    pounding on the cgi following edit links.
+  * When calling decode_utf8 on known-problimatic content in aggregate,
+    explicitly pass 0 (FB_DEFAULT) as the second parameter. Apparently perl
+    5.8 needs this to avoid crashing on malformed utf-8, despite its docs
+    saying it is the default.
+  * passwordauth: If Authen::Passphrase is installed, use it to store
+    password hashes, crypted with Eksblowfish.
+  * Existing cleartext passwords in the userdb will be automatically hashed
+    (if Authen::Passphrase is installed) the next time a user logs in.
+    Or `ikiwiki-transition hashpassword /path/to/srcdir` can be used to force
+    a conversion.
+  * Passwords will no longer be mailed, but instead a password reset link
+    mailed.
+  * The password_cost config setting is provided as a "more security" knob.
+
+ -- Joey Hess <joeyh@debian.org>  Wed, 28 May 2008 03:07:37 -0400
+
+ikiwiki (2.47) unstable; urgency=low

 
   * mdwn: Add a multimarkdown setup file option.
   * If PERL5LIB is set to the libdir when building ikiwiki, calculate and 
     hardcode a proper 'use lib' statement anyway. This fixes a gotcha,
     since PERL5LIB won't work once ikiwiki is running via a wrapper or as
     a cgi.
 
   * mdwn: Add a multimarkdown setup file option.
   * If PERL5LIB is set to the libdir when building ikiwiki, calculate and 
     hardcode a proper 'use lib' statement anyway. This fixes a gotcha,
     since PERL5LIB won't work once ikiwiki is running via a wrapper or as
     a cgi.

-
- -- Joey Hess <joeyh@debian.org>  Tue, 13 May 2008 12:30:18 -0400
+  * orphans: As a special case, the toplevel index page is never considered
+    an orphaned page.
+  * inline: Display a message if the 'pages' parameter is missing, before
+    it just expanded to nothing.
+  * git: Skip over signed-off-by and similar lines in commit messages
+    when generating recentchanges.
+  * ENV can be used in the setup file to override environment variable
+    settings, such as TZ or PATH.
+  * Perls older than 5.10 need to use the old method of decoding utf-8 in CGI
+    values. Neither method will work for all versions of perl, so check
+    version number at runtime.
+  * Avoid unsightly warning message when evaling broken pagespecs.
+  * Improve error message when a pagespec fails to parse.
+
+ -- Joey Hess <joeyh@debian.org>  Sun, 25 May 2008 14:25:42 -0400

 
 ikiwiki (2.46) unstable; urgency=low
 
 
 ikiwiki (2.46) unstable; urgency=low