14.1.0

New feature

• Add ability to disable explicit permissions at object level (ref #893). Use kinto.explicit_permissions = false to only rely on inherited permissions (see settings docs)

Internal Changes

• Distinguish readonly errors in storage backend (kinto.core.storage.exceptions.ReadonlyError)
• Upgrade kinto-admin to v1.27.0
• Add support to Python 3.9

14.0.1

Bug fixes

• Do not break storage implementations (ie. kinto-redis) that rely on json class attribute (removed in v14.0.0)
• Do not return 400 for ?_since=null (fixes #2595)

14.0.0

Breaking changes

• Drop the strict_json option, and use ultrajson everywhere

Internal Changes

• Upgrade kinto-admin to v1.26.2

13.6.6

Bug fixes

• Fix messages duplication in logs (#2513)
• Fix resource timestamp unicity (fixes #2472, #602)

Documentation

• Refer to proper terms in glossary (#2486)

13.6.5

Bug fixes

• Simplify get_objects_permissions query (#2475)

13.6.4

Security fix

• Fix permission checking with POST on plural endpoints (fixes #2459)

Bug fixes

• Apply CORS headers to EOL responses (#2452)

Internal Changes

• Remove auth parameter from postgresql/memory storage backends
• Removed pytest-sugar

13.6.3

Bug fixes

• History entries datetimes now carry timezone information
• Fix kinto init command (#2375)
• Fix float strings parsing in certain URL query parameters. (#2392)

Internal Changes

• Upgrade kinto-admin to v1.26.1
• Drop auth parameter from storage backend methods.

13.6.2

Bug fixes

• Second attempt at fixing loading of Kinto Admin (#2322)

13.6.1

Bug fixes

• Fix loading of Kinto Admin (#2320)

13.6.0

New Features

• Add Content-Security-Policy header and report URI (fixes #2303)

Internal Changes

• Use package-lock file for Kinto Admin packaging
• Use isort for formatting imports (Fixes #2270)
• Upgrade kinto-admin to v1.25.2