Bump datasette from 0.27 to 0.45 #55

dependabot-preview · 2020-07-02T14:56:32Z

Bumps datasette from 0.27 to 0.45.

Release notes

0.45

Magic parameters for canned queries, a log out feature, improved plugin documentation and four new plugin hooks.

Magic parameters for canned queries

Canned queries now support Magic parameters, which can be used to insert or select automatically generated values. For example:
insert into logs
  (user_id, timestamp)
values
  (:_actor_id, :_now_datetime_utc)
This inserts the currently authenticated actor ID and the current datetime. (#842)

Log out

The ds_actor cookie can be used by plugins (or by Datasette's --root mechanism) to authenticate users. The new /-/logout page provides a way to clear that cookie.

A "Log out" button now shows in the global navigation provided the user is authenticated using the ds_actor cookie. (#840)

Better plugin documentation

The plugin documentation has been re-arranged into four sections, including a brand new section on testing plugins. (#687)

Plugins introduces Datasette's plugin system and describes how to install and configure plugins.

Writing plugins describes how to author plugins, from simple one-off plugins to packaged plugins that can be published to PyPI. It also describes how to start a plugin using the new datasette-plugin cookiecutter template.

Plugin hooks is a full list of detailed documentation for every Datasette plugin hook.

Testing plugins describes how to write tests for Datasette plugins, using pytest and HTTPX.

New plugin hooks

register_magic_parameters(datasette) can be used to define new types of magic canned query parameters.

startup(datasette) can run custom code when Datasette first starts up. datasette-init is a new plugin that uses this hook to create database tables and views on startup if they have not yet been created. (#834)

canned_queries(datasette, database, actor) lets plugins provide additional canned queries beyond those defined in Datasette's metadata. See datasette-saved-queries for an example of this hook in action. (#852)

forbidden(datasette, request, message) is a hook for customizing how Datasette responds to 403 forbidden errors. (#812)

Smaller changes

Cascading view permissons - so if a user has view-table they can view the table page even if they do not have view-database or view-instance. (#832)

CSRF protection no longer applies to Authentication: Bearer token requests or requests without cookies. (#835)

datasette.add_message() now works inside plugins. (#864)

Workaround for "Too many open files" error in test runs. (#846)

Respect existing scope["actor"] if already set by ASGI middleware. (#854)

New process for shipping Alpha and beta releases. (#807)

{{ csrftoken() }} now works when plugins render a template using datasette.render_template(..., request=request). (#863)

Datasette now creates a single Request object and uses it throughout the lifetime of the current HTTP request. (#870)

0.45a5

No release notes provided.

Changelog

Sourced from datasette's changelog.

0.45 (2020-07-01)

Magic parameters for canned queries, a log out feature, improved plugin documentation and four new plugin hooks.

Magic parameters for canned queries

Canned queries now support canned_queries_magic_parameters, which can be used to insert or select automatically generated values. For example:
insert into logs
  (user_id, timestamp)
values
  (:_actor_id, :_now_datetime_utc)
This inserts the currently authenticated actor ID and the current datetime. (#842)

Log out

The ds_actor cookie <authentication_ds_actor> can be used by plugins (or by Datasette's --root mechanism<authentication_root>) to authenticate users. The new /-/logout page provides a way to clear that cookie.

A "Log out" button now shows in the global navigation provided the user is authenticated using the ds_actor cookie. (#840)

Better plugin documentation

The plugin documentation has been re-arranged into four sections, including a brand new section on testing plugins. (#687)

plugins introduces Datasette's plugin system and describes how to install and configure plugins.

writing_plugins describes how to author plugins, from simple one-off plugins to packaged plugins that can be published to PyPI. It also describes how to start a plugin using the new datasette-plugin cookiecutter template.

plugin_hooks is a full list of detailed documentation for every Datasette plugin hook.

testing_plugins describes how to write tests for Datasette plugins, using pytest and HTTPX.

New plugin hooks

plugin_hook_register_magic_parameters can be used to define new types of magic canned query parameters.

plugin_hook_startup can run custom code when Datasette first starts up. datasette-init is a new plugin that uses this hook to create database tables and views on startup if they have not yet been created. (#834)

plugin_hook_canned_queries lets plugins provide additional canned queries beyond those defined in Datasette's metadata. See datasette-saved-queries for an example of this hook in action. (#852)

plugin_hook_forbidden is a hook for customizing how Datasette responds to 403 forbidden errors. (#812)

Smaller changes

Cascading view permissons - so if a user has view-table they can view the table page even if they do not have view-database or view-instance. (#832)

CSRF protection no longer applies to Authentication: Bearer token requests or requests without cookies. (#835)

datasette.add_message() now works inside plugins. (#864)

Workaround for "Too many open files" error in test runs. (#846)

Respect existing scope["actor"] if already set by ASGI middleware. (#854)

Commits

f1f581b Release notes for 0.45
c7e8a4a Handle missing request object, refs #884
1bae246 Only show 'log out' if ds_cookie present, closes #884
f7c3fc9 datasette-auth-tokens improved description
676bb64 Release 0.45a5
549b1c2 New forbidden() plugin hook, closes #812
3ec5b1a CSRF tests for canned query POST, closes #835
08b4928 asgi-csrf>=0.6, refs #835
2b85bbd Added logout button to pattern portfolio, closes #876
cfd6959 Removed hashes from examples on docs/pages - closes #879
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
@dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

Update frequency (including time of day and day of week)
Pull request limits (per update run and/or open at any time)
Out-of-range updates (receive only lockfile updates, if desired)
Security updates (receive only security updates, if desired)

Bumps [datasette](https://github.com/simonw/datasette) from 0.27 to 0.45. - [Release notes](https://github.com/simonw/datasette/releases) - [Changelog](https://github.com/simonw/datasette/blob/master/docs/changelog.rst) - [Commits](simonw/datasette@0.27...0.45) Signed-off-by: dependabot-preview[bot] <[email protected]>

dependabot-preview · 2020-08-10T18:21:09Z

Superseded by #69.

dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jul 2, 2020

dependabot-preview bot mentioned this pull request Jul 2, 2020

Bump datasette from 0.27 to 0.44 #51

Closed

dependabot-preview bot force-pushed the dependabot/pip/datasette-0.45 branch from 95cfc7f to 57c208a Compare July 8, 2020 20:18

dependabot-preview bot closed this Aug 10, 2020

dependabot-preview bot deleted the dependabot/pip/datasette-0.45 branch August 10, 2020 18:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump datasette from 0.27 to 0.45 #55

Bump datasette from 0.27 to 0.45 #55

dependabot-preview bot commented Jul 2, 2020 •

edited

Loading

dependabot-preview bot commented Aug 10, 2020

Bump datasette from 0.27 to 0.45 #55

Bump datasette from 0.27 to 0.45 #55

Conversation

dependabot-preview bot commented Jul 2, 2020 • edited Loading

0.45

Magic parameters for canned queries

Log out

Better plugin documentation

New plugin hooks

Smaller changes

0.45a5

0.45 (2020-07-01)

Magic parameters for canned queries

Log out

Better plugin documentation

New plugin hooks

Smaller changes

dependabot-preview bot commented Aug 10, 2020

dependabot-preview bot commented Jul 2, 2020 •

edited

Loading