Regular Maintenance

Changes:

• Fix: Social Accounts can now be deleted by the user. #306
• Update: Updated backend dependencies. #298, #294, #301, #310, #312, #361, #424
• Update: Dev environment no longer needs an external process to receive the sent emails. Email content is now printed on the console. #302
• Fix: When box dos not exist, the system should return 404. #308
• Fix: Handle missing 'fingerprint' when key is imported. #309
• Fix: Connect social account when email exists. #311
• Update: Python and Django to currently supported versions. #361
• Update: Move CI jobs from CircleCI to Github Actions.
• Update: Remove mentions to Freenode channel that is no longer in use.

How to update from previous version

No extra steps are required. You just need to update the code and the installed dependencies, everything else should work as previously.

Reply To

This release updates several components to more recent versions, adds better flow to set up self-hosted instances and adds many small improvements to the overall software package.
Logged users can now add their email to sent messages.

Major Changes

• Removed server sign experimental feature, since it had several compatibility issues #289
• Added reply_to field to messages sent by logged in users #290

Minor Changes and bug fixes

• Changed the development workflow to use pipenv #281
• Updated development environment setup instructions #81
• Fix box description multi-line issue #280
• Update OpenPGP.js to version 3 #284
• Added meta description and alt text to home page #283
• Fixed missing contact information on closed box page #287

How to update from previous version

Since the dependency management of the project changed. You will need to change the instruction you usually do to run the project. This time you will need to run the following commands after fetching the new code changes:

• $ pipenv install
• $ gulp build
• $ pipenv run python manage.py collectstatic

The deployment commands (such as celery and gunicorn) should now be preceded by pipenv run.

Key verification

This release brings more control to the user key state, automating reminders of expiration for all keys and letting the user audit recent key changes. Also several annoying issues were fixed and more clear instructions were added to the front-end.

Major changes:

• Improved key verification. Now all users are notified, more than once, when their key is about to expire. #274
• Key change log. In order to improve transparency and control to the user, all changes to their "public key" field are record and shown in the settings page. #275

Minor changes and bug-fixes:

• Updated the project dependencies (some with vulnerabilities) #256, #261
• Fixed settings overlapping button issue #252
• Added instructions to first time users, when the box list is empty #246
• Users can now update their passwords (those who signed up using email+password) #254
• Added instance information to the about page #262
• Added custom error pages #265
• Re-factor of the key verification function (key_state) #266
• When generating the submit page, the owner key is verified #267
• Updated openpgp.js to v2.5.3 #268 (solves the extended expiration problem described here)
• Fix syntax error caused by an invalid translation block #276

How to update from previous version

In this version SUPPORT_NAME and SUPPORT_EMAIL environment variables are now required. So before going through any of the following steps add them to your environment or .env file.

To update from the previous version, you need to run the following commands after fetching the new code changes:

• $ pip install -r requirements/requirements.txt
• $ gulp build
• $ python manage.py collectstatic

Files

Improvements in this release:

• It is now possible to send small files (#242)
• Hawkpost now supports multiple languages. At this moment the existing ones are Portuguese and English. (#237)
• Added an extra protection for brute-force attacks to all login forms. (#244).

How to upgrade:

To upgrade from the previous version you should follow the normal procedure:

• Pull sources
• Install new dependencies through pip
• Run Migrations
• Compile the new CSS (gulp build)
• Collect the new static assets
• Start your service

First Release

This is the first official version. This means that during the last few months the code has been tested and all critical issues (know to date), related to the main feature and purpose of the application, were addressed.