6.4.0

What's Changed

Security Fixes

• Fix a bug where attachment file can be replaced on existing records if one of the parent (bucket or collection) gives "read" permission (see GHSA-hvp4-vrv2-8wrq)

Other Changes

• Get ready moving master into main by @Natim in #693
• Modernize repo by @leplatrem in #710
• Do not run tests if lint fails by @leplatrem in #712
• Enable Dependabot on Github Actions versions by @leplatrem in #713

Full Changelog: 6.3.2...6.4.0

6.3.2

Bug fixes

• Catch TypeError when data/permissions are passed as files (#685)

Documentation

• Fix #617: document release process (#691)

6.3.1

• Remove upper bound for kinto version (#567)

6.3.0

New features

• Include the Google Cloud backend automatically when kinto.attachment.gcloud.* settings are used.

6.2.0

New features

• base_url field in server's capabilities will be added a trailing slash (/) if missing.

6.1.0

New features

• Allow to override mimetypes from config (#315)

6.0.4

Bug fixes

• Add missing content type when uploading to S3

6.0.3

Bug fixes

• Fix broken compatibility with Kinto 13.6.4

6.0.2

Bug fixes

• Fix attachment deletion not being committed (fixes #149)

Internal changes

• Use unittest.mock instead of the mock library

6.0.1

Bug fixes

• Fix support of kinto >= 12