- [BUGFIX] fix issue where using "add" and "remove" shortcut routes would result in a 404. b3d8fd8
- [ENHANCEMENT] bump skipper version 29f983d
- [SECURITY] increase entropy in generating session secret b13c078
- [SECURITY] switch to @sailshq/express to incorporate security patch to underlying
qs
dependency 8c7234d - [INTERNAL] remove unused waterline dependency (waterline is now a dependency of sails-hook-orm) 0d0f58f
- [BUGFIX] fix typo in error message (see balderdashy#3902) Thanks Johnny and @appdevdesigns!
- [BUGFIX] backport fix for
_.isFunction()
from Lodash 4 (see lodash/lodash#2768 and balderdashy#3863) Thanks @adnan-kamili and @jdalton! - [INTERNAL] rebase changelog updates from master 223567c
- [BUGFIX] Fix issue where incorrect file size was computed for incoming (multi-)file uploads on skipper-disk and skipper-s3 #3847 (thanks @crobinson42, @NAlexandrov and @vbogdanov!) See also https://github.com/balderdashy/skipper/issues/109.
- [BUGFIX] Internationalization fix (#3833 fixes #3889 (thanks @josebaseba!)
- [INTERNAL] Added automated request latency benchmarks -- primarily in advance of 1.0 for the purpose of comparison (thanks @sgress454!)
- [BUGFIX] Fixed issue with defined-in-app adapters being improperly loaded #3884 (thanks @richdunajewski!)
- [INTERNAL] Fix deprecation warning from express-session 3872 (thanks @Boycce and @dougwilson!)
- [BUGFIX] Fix issue with multiple config files that have the same filename 3850
- [ENHANCEMENT] Add criteria validation for the
find
andfindOne
blueprint actions. ab9c2c3...c6e8ad0 - [INTERNAL] Fix Gitter link in README so it displays properly on NPM 284c660
- [ENHANCEMENT] Log warning when lifting in production with very permissive CORS settings (thanks @ejcx). See this comment for v1.0 plans.
- [BUGFIX] Fix issue with multiple config files that have the same filename 3846
- (revert a change to CORS config in 0.12.5, see f80252f for details)
- [INTERNAL] Upgrade version of
include-all
to ^1.0.0 f6e8d32 - [ENHANCEMENT] Add
sails console --dontLift
option 029fe06
- [INTERNAL] Upgrade Mocha to 3.0.0 to remove more of the deprecation notices when installing dependencies (see mocha:#2200)
- [INTERNAL] Simplify config-merging code in captains-log. This also gets rid of more deprecation notices during install (see captains-log:49f433eff348c05115a2caf292b4da0db9499887)
- [BUGFIX] Fix long-standing, low-priority (but super annoying) issue with logged dictionaries/arrays getting extra quote marks (due to a pecularity in the usage of util.format()) d67e9c8e6775
- [ENHANCEMENT] Add
sails.config.session.routesDisabled
config option to specify routes that should not use session middleware c712acf - [ENHANCEMENT] Use
res.forbidden()
when denying access to a route via a policy. Thanks @wulfsolter! 3764 - [ENHANCEMENT] Allow use of Express style path and RegExp in
sails.config.csrf.routesDisabled
. Thanks @bolasblack! - [BUGFIX] Fix for query / body params called
length
3738 - [BUGFIX] Fix view rendering when i18n hook is disabled. Thanks @mordred! 3741
- [BUGFIX] Allow
sails.renderView
to work with globals turned off 3753 d3f634c - [BUGFIX] Fix typo which could cause crashing when attempting to serialize non-json-compatible output in the response to a socket request.
- [UPGRADE] Update all Grunt dependencies 5f6be05
- [UPGRADE] Update "connect" dependency to 3.4.1 1d3c9e6
- [UPGRADE] Update "compression" dependency to version 1.6.2
- [UPGRADE] Upgraded version of Consolidate to
0.14.1
a70623c - [UPGRADE] Upgraded version of grunt-contrib-watch to
1.0.0
3678 - [INTERNAL] Use standalone CSRF package instead of using the one (formerly) bundled with Connect. Sails should be using all standalone middleware now. 1d3c9e6 98861ef
- [INTERNAL] Add some assertions to ensure custom hooks don't use reserved properties 2e76dac
- [INTERNAL] Update code that virtual response uses to read buffer to work with all Node versions a5ab134
- [INTERNAL] Remove un-maintained "wrench" module from tests; use "fs-extra" instead. Thanks @Ignigena! 4f90f78
- [BUGFIX] Allow
skipAssets
andskipRegex
to be used with direct/static view route target syntax 3682. Thanks @dottodot, @nikhilbedi, and @AlexanderKozhevin! - [BUGFIX] Automatically route to
index/
in deeply nested views when using direct/static view route target syntax - [BUGFIX] Add assertion about views which contain extra dots (
.
) in their paths when using direct/static view route target syntax - [INTERNAL] Use
chalk
instead ofcolors
for console output. Thanks @markelog! 3680
- [ENHANCEMENT] Allow use of
fn
in expanded route targets e1790b7 - [BUGFIX] Add blacklist to "update" blueprint action so that it can be used with primary keys that are not "id" 3625
- [ENHANCEMENT] Allow hooks to be turned off by setting their environment var to the string "false" 3618
- [BUGFIX] Allow view target syntax for routes to specify deeply-nested views 3604
- [BUGFIX] Allow custom bodyParser middleware config 3592
- [BUGFIX] When lifting with unknown validation rule, exit gracefully instead of throwing.
- [BUGFIX] Update validation rules from anchor 3649
- [BUGFIX] Respond with an error if attempting to use
req.file()
from a virtual request (i.e. when Skipper is not available). And don't pass inres
when building the mock request, since it is not available yet. 3656 - [BUGFIX] Fix incorrect handling of errors in responses hook. Thanks @tapuzzo-fsi! 3645
- [BUGFIX] Fix error from
routeCorsConfig
sometimes being undefined 3662 - [INTERNAL] Replace
ready
event with an asynchandleLift
lifecycle callback in order to simplify the behavior ofsails lift
and ensure the timing of the "done" callback is correct when using it programmatically. - [INTERNAL] Massive overhaul of tests. See b033f2d thru e85810a.
- [INTERNAL] Extrapolate ORM hook into sails-hook-orm.
- [INTERNAL] Force asynchronicity in the optional third argument of
res.view()
/res.render()
to pave the way for better, request-agnostic view rendering methods. This prevents double-calling of the callback if userland code throws an error. Thanks @lennym! cd413e15435947aa855e27aab16d9cd9e65ad493 - [ENHANCEMENT] Update version of i18n to
0.8.1
3631. - [ENHANCEMENT] Improve auto-migrate prompt, and skip the prompt and log an info message instead if
sails.config.models.migrate
is being automatically set to production anyways. sails-hook-orm/commit/3161c34edbe0aa07055f8665493734dda1688c2a - [ENHANCEMENT] Add production check in case sails-disk is being used, and experimental
sails.config.orm.skipProductionWarnings
flag for preventing the warning. sails-hook-orm/commit/9a0d46e135dadf00bc4576341624a31e50b12838 - [INTERNAL] Don't clone target function in expanded route syntax 6cfb2de
- [BUGFIX] Replace naughty code in implicit default res.forbidden() response; relevant when api/responses/ is deleted. See #3667 for more info. Thanks @Biktop! 4767585994c45e7a7040402a057f0e41660d341919
- [INCONSISTENCY] Fix embarassing old link that was being shown when you
console.log
thesails
app instance. Thanks @wulfsolter 52d45688fcfb6c4437348115f3e9c91595a8d379! - [INTERNAL] Get rid of a whimsical little
--require
in mocha.opts that must have gotten lost. Don't ask us how it ended up there. Thanks @markelog! 06837a53b48352de7c46a1be84e87e28a084ffe2 - [INTERNAL] Remove needless require from mocha opts. Thanks @markelog! 3681
- [INTERNAL] Expose private
loadAndRegisterControllers
method for now, since certain apps are relying on it 0ba7829 - [BUGFIX] Updated default HTTP cache config property to match what's documented 750d434
- [BUGFIX] Check for
sails.io
before checking forsails.io.httpServer
when lowering 92c4b19 - [ENHANCEMENT] Keep cookie middleware even if session middleware is deactivated d21ae2d
- [BUGFIX] Reset process.env.NODE_ENV after Sails lowers to whatever it was originally (to make it non-sticky when lifting/lowering multiple apps) f9db888
- [BUGFIX] Use correct extension config for Handlebars 3559
- [BUGFIX] Update usage of
sails.sockets.id()
in pubsub hook tosails.sockets.getId()
to avoid deprecation warning 3552 - [INTERNAL] Replace usage of Express middleware (e.g.
require('express').favicon
) with equivalent standalone packages (e.g.require('serve-favicon')
) - [BUGFIX] Allow passing in non-model instances to
publishCreate
3558
- [UPGRADE] Bump Waterline dependency to
0.11.0
and Sails-Disk to0.10.9
- [ENHANCEMENT] More core hooks are now fully documented (controllers|grunt|logger|cors|responses|orm)
- [ENHANCEMENT] Improve
sails --help
output (note that this removes support for common misspellings) #3539 - [ENHANCEMENT] Detect EMFILE warnings from grunt-contrib-watch and treat them as fatal (this is the too many open files /
ulimit -n 1024
thing) #3523 - [BUGFIX] Downgrade default grunt-contrib-watch dependency installed in new Sails apps to use v0.5.3 #3526
- [BUGFIX] Use locally-installed Sails (when available) with
sails console
instead of always using global 093ec01 - [UPGRADE] Update
express-handlebars
to3.0.0
1760604 - [BUGFIX] Don't attempt to run CSRF protection methods if session is not available
- [BUGFIX] Properly remove process listeners on sails.lower() to avoid EventEmitter leaks when lifting/lowering multiple apps (e.g. in tests) #2693
- [UPGRADE] Updated versions of Lodash (v3.10.1) and Async (v1.5.0) used in Sails (and globalized in Sails apps by default)
- [ENHANCEMENT] Support for newer versions of connect-redis session adapter (and other session adapters using express-session)
- [ENHANCEMENT] Set the useGlobal config option for REPL while using sails console, allows autoreload hook to reflect changes on global models and services
- [ENHANCEMENT] Support JSON sorting syntax in blueprints #2449
- [ENHANCEMENT] Support namespaced modules as hooks #3022, #3514
- [ENHANCEMENT] Allow installable hooks to override their default names #3168
- [BUGFIX] Fixed issues with subscribing sockets to new model instances in a clustered environment #2990, #3008
- [UPGRADE] Update
consolidate
to^0.12.1
- [BUGFIX] Don't allow changing a model's primary key via blueprints
- [ENHANCEMENT] Added sails.config.keepResponseErrors option to keep response errors in production mode #2853
- [ENHANCEMENT] Added Livescript support #2662, #2599
- [ENHANCEMENT] Added IcedCoffeeScript support (brrr) #2599
- [BUGFIX] Fix req.param() to work correctly with falsy params #2756
- [ENHANCEMENT] Support "exposeHeaders" option in CSRF config #2712
- [BUGFIX] Honor all route options when using policy target syntax (balderdashy#2609 (comment))
- [ENHANCEMENT] New
sails deploy
CLI command. See https://github.com/mikermcneil/sails-deploy-azure for an example deployment strategy. - [ENHANCEMENT] Support CSRF hook route configuration #2366
- [BUGFIX] Fix [RangeError: Maximum call stack size exceeded] error in PubSub hook
- [ENHANCEMENT] Support layout for Ractive template engine
- [ENHANCEMENT] Body parser error logs no longer outputted in production, unless
sails.config.keepResponseErrors
is set #3347 - [BUGFIX] Pluralize option works correctly for all routes #3223
- [BUGFIX] Blueprint create now works when POSTing arrays #3228
- [UPGRADE] Updated
sails-hook-sockets
to^0.13.0
, which uses an updated socket.io-client module and has some bugfixes - [BUGFIX] Default responses now work correctly when views hook is disabled #2770
- [BUGFIX] Restored troubleshooting messages in console when Sails server fails to lift
- [BUGFIX] app-wide locals (sails.config.views.locals) are combined using a shallow merge (
_.extend()
instead of_.merge()
) #3500 - [ENHANCEMENT] Added
sails.getRouteFor()
andsails.getUrlFor()
, utility methods for reverse routing #3402 - [BUGFIX] Improve interoperability of virtual requests to provide a more consistent API to Socket.io and
sails.request()
(e.g. for tests) 121f3feb8702d44420e86707ef05e3282461d136 - [INTERNAL] Use shallow merge in services hook when loading modules (37eceee9b0ff0a20a285ac2889f4a5e96f3f5b30)
- [INTERNAL] Don't expose sails.services until
loadModules
is called in the services hook (37eceee9b0ff0a20a285ac2889f4a5e96f3f5b30)
- [BUGFIX] Allow disabling of installed hooks #3550
- [ENHANCEMENT] Support namespaced modules as hooks (hotfix from #3022, #3514)
- [ENHANCEMENT] Allow installable hooks to override their default names (hotfix from #3168)
- [SECURITY] Updated several dependencies due to security vulnerabilities (balderdashy#3464 (comment))
- [BUGFIX] Fix [RangeError: Maximum call stack size exceeded] error in PubSub hook (balderdashy#2636)
- [ENHANCEMENT] Allow custom route options in policy target syntax (https://github.com/balderdashy/sails/commit/0990fc10709520a9f6c55923b991708d5eaf8aa0)
- [ENHANCEMENT] Support CSRF hook route configuration #2366
- [ENHANCEMENT] Added "exposeHeaders" option in CORS configuration (balderdashy#2712)
- [BUGFIX] Fixes to allow proper installation / execution in environments using Node 4 and/or NPM 3.
- Shhhh nothing to see here (version skipped)
- [ENHANCEMENT] Allow hooks to be installed in node_modules and dynamic changing of hook name
- [ENHANCEMENT] Pull out the
sockets
hook to its own repository - [ENHANCEMENT] Allow hooks to have individual timeouts, and a global
sails.config.hookTimeout
- [ENHANCEMENT] Pull out
sails.io
.js to its own generator - [UPGRADE] Update
sails.io.js
for the latest version of the sockets hook - [UPGRADE] Upgrade from Socket.IO 0.9.17 to 1.2.1
- [FEATURE] Add
restPrefix
setting in addition toprefix
setting for blueprints for finer control - [ENHANCEMENT] Support partials and layout with Handlebars for the
backend
generator - [BUGFIX] Blueprint creation returns 201 status code instead of 200
- [BUGFIX]
ractive.toHTML()
replacesractive.renderHTML()
for Ractive template engine - [BUGFIX] Fix arguments for publishAdd, publishRemove and publishUpdate
- [ENHANCEMENT] Enable views hook for all methods
- [BUGFIX] Resolve depreciation warnings
- [BUGFIX] Fix dependency for npm 2.0.0
- [BUGFIX] Fix Grunt launching when it's a peer dep
- [ENHANCEMENT] Upgrade express and skipper because of security vulnerabilities
- [BUGFIX] Fix Sails crashes if Redis goes down #2277
- [BUGFIX] Fix crash when using sessionless requests over WebSockets #2107
- [ENHANCEMENT] Checking npm-version on install
- [ENHANCEMENT] Updated "skipAssets" regex to ignore query string