25 Commits

Author SHA1 Message Date
Kevin Chung
f878f63c5a Bump pybluemonday to 0.0.12 (#2369)
* Bump pybluemonday to 0.0.12 to support Apple Silicon
2023-07-18 15:41:50 -04:00
Kevin Chung
deae9e1941 Bump Dependencies (#2332)
* Bump dependencies
* Closes #2300 
* Closes #2331
2023-07-02 17:33:58 -04:00
Smyler
704e08c745 Add the optional rsa dependency to pymysql
This dependency is required to allow compatibility with MySQL instances that enforce specific authentication protocols. This is often the case with managed databases for some public cloud providers.
PyMySQL documentation: https://pymysql.readthedocs.io/en/latest/user/installation.html
2023-06-22 13:37:20 +02:00
Kevin Chung
635b0940e5 Add Translations layer (#2288)
* Add rough translations support into CTFd
* Add `flask-babel` dependency
* Adds language column to users table
* Closes #570 

---------

Co-authored-by: Miłosz Skaza <milosz.skaza@ctfd.io>
2023-06-01 15:24:00 -04:00
Kevin Chung
2474d6000d Bump pybluemonday version to support Python 3.11 (#2303)
* Bump pybluemonday version to `0.0.11` to support Python 3.11
* Closes #2301
2023-05-13 01:03:44 -04:00
skandix
25b3d77ed0 bump SQLAlchemy-Utils to version 0.41.0 (#2294)
* Bump down SQLAlchemy-Utils to version 0.41.0

* Update development dependencies

---------

Signed-off-by: Bendik Dyrli <skandix@datapor.no>
Co-authored-by: Kevin Chung <kchung@ctfd.io>
2023-04-27 01:38:31 -04:00
dependabot[bot]
440aaddfb1 Bump redis from 3.5.2 to 4.4.4 (#2275)
Bumps [redis](https://github.com/redis/redis-py) from 3.5.2 to 4.4.4.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/3.5.2...v4.4.4)

---
updated-dependencies:
- dependency-name: redis
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kevin Chung <kchung@ctfd.io>
2023-04-13 01:55:16 -04:00
Kevin Chung
c405fbb9b1 Bump pybluemonday version (#2285)
* Bump pybluemonday version
* Remove codecov from development.txt
2023-04-13 01:36:08 -04:00
Kevin Chung
68da00900a Add freezegun to runtime dependencies, generate cachable s3 urls (#2264)
* Add freezegun to application dependencies
* Generate cachable S3 URLs by rounding time down to the previous hour to generate a consistent URL
2023-02-19 15:01:28 -05:00
Kevin Chung
89289ad641 Mark 3.5.1 (#2246)
# 3.5.1 / 2023-01-23

**General**

- The public scoreboard page is no longer shown to users if account visibility is disabled
- Teams created by admins using the normal team creation flow are now hidden by default
- Redirect users to the team creation page if they access a certain pages before the CTF starts
- Added a notice on the Challenges page to remind Admins if they are in Admins Only mode
- Fixed an issue where users couldn't login to their team even though they were already on the team
- Fixed an issue with scoreboard tie breaking when an award results in a tie
- Fixed the order of solves, fails, and awards to always be in chronological ordering (latest first).
- Fixed an issue where certain custom fields could not be submitted

**Admin Panel**

- Improved the rendering of Admin Panel tables on mobile devices
- Clarified the behavior of Score Visibility with respect to Account Visibility in the Admin Panel help text
- Added user id and user email fields to the user mode scoreboard CSV export
- Add CSV export for `teams+members+fields` which is teams with Custom Field entries and their team members with Custom Field entries
- The import process will now catch all exceptions in the import process to report them in the Admin Panel
- Fixed issue where `field_entries` could not be imported under MariaDB
- Fixed issue where `config` entries sometimes would be recreated for some reason causing an import to fail
- Fixed issue with Firefox caching checkboxes by adding `autocomplete='off'` to Admin Panel pages
- Fixed issue where Next selection for a challenge wouldn't always load in Admin Panel

**API**

- Improve response time of `/api/v1/challenges` and `/api/v1/challenges/[challenge_id]/solves` by caching the solve count data for users and challenges
- Add `HEAD /api/v1/notifications` to get a count of notifications that have happened. 
  - This also includes a `since_id` parameter to allow for a notification cursor.
  - Unread notification count can now be tracked by themes that track which notifications a user has read
- Add `since_id` to `GET /api/v1/notifications` to get Notifications that have happened since a specific ID

**Deployment**

- Imports have been disabled when running with a SQLite database backend
  - See https://github.com/CTFd/CTFd/issues/2131
- Added `/healthcheck` endpoint to check if CTFd is ready
- There are now ARM Docker images for OSS CTFd
- Bump dependencies for passlib, bcrypt, requests, gunicorn, gevent, python-geoacumen-city
- Properly load `SAFE_MODE` config from environment variable
- The `AWS_S3_REGION` config has been added to allow specifying an S3 region. The default is `us-east-1`
- Add individual DATABASE config keys as an alternative to `DATABASE_URL`
  - `DATABASE_PROTOCOL`: SQLAlchemy DB protocol (+ driver, optionally)
  - `DATABASE_USER`: Username to access DB server with
  - `DATABASE_PASSWORD`: Password to access DB server with
  - `DATABASE_HOST`: Hostname of the DB server to access
  - `DATABASE_PORT`: Port of the DB server to access
  - `DATABASE_NAME`: Name of the database to use
- Add individual REDIS config keys as an alternative to `REDIS_URL`
  - `REDIS_PROTOCOL`: Protocol to access Redis server with (either redis or rediss)
  - `REDIS_USER`: Username to access Redis server with
  - `REDIS_PASSWORD`: Password to access Redis server with
  - `REDIS_HOST`: Hostname of the Redis server to access
  - `REDIS_PORT`: Port of the Redis server to access
  - `REDIS_DB`: Numeric ID of the database to access

**Plugins**

- Adds support for `config.json` to have multiple paths to add to the Plugins dropdown in the Admin Panel
- Plugins and their migrations now have access to the `get_all_tables` and `get_columns_for_table` functions
- Email sending functions have now been seperated into classes that can be customized via plugins.
  - Add `CTFd.utils.email.providers.EmailProvider`
  - Add `CTFd.utils.email.providers.mailgun.MailgunEmailProvider`
  - Add `CTFd.utils.email.providers.smtp.SMTPEmailProvider`
  - Deprecate `CTFd.utils.email.mailgun.sendmail`
  - Deprecate `CTFd.utils.email.smtp.sendmail`

**Themes**

- The beta interface `Assets.manifest_css` has been removed
- `event-source-polyfill` is now pinned to 1.0.19.
  - See https://github.com/CTFd/CTFd/issues/2159
  - Note that we will not be using this polyfill starting with the `core-beta` theme.
- Add autofocus to text fields on authentication pages
2023-01-23 10:34:49 -05:00
Eduardo Santos
7e575a2e47 Bump CTFd dependencies (#2229)
Bump bcrypt, gevent, greenlet, python-geoacumen-city, requests.
2022-11-18 12:42:34 -05:00
Kevin Chung
e1e68b8e99 Bump dependencies for passlib, bcrypt, requests, gunicorn, gevent, python-geoacumen-city (#2134)
* Bump dependencies for passlib, bcrypt, requests, gunicorn, gevent, python-geoacumen-city
* Closes #2132
2022-06-02 15:27:12 -04:00
Kevin Chung
a8a6db1aeb Bump cmarkgfm to 0.8.0 (#2058)
* Bump cmarkgfm to 0.8.0
2022-03-05 20:27:09 -05:00
Kevin Chung
54f0c46662 Bump pybluemonday to 0.0.9 (#2054)
* Bump pybluemonday to 0.0.9
* Bump python-geoacumen-city
* Use Python 3.7 in testing as Python 3.6 is EOL
2022-02-18 21:47:56 -05:00
dependabot[bot]
7fc05bd4e3 Bump pybluemonday from 0.0.7 to 0.0.8 (#2009)
Bumps [pybluemonday](https://github.com/ColdHeat/pybluemonday) from 0.0.7 to 0.0.8.
- [Release notes](https://github.com/ColdHeat/pybluemonday/releases)
- [Changelog](https://github.com/ColdHeat/pybluemonday/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ColdHeat/pybluemonday/compare/0.0.7...0.0.8)

---
updated-dependencies:
- dependency-name: pybluemonday
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kevin Chung <kchung@ctfd.io>
2021-10-23 03:25:00 -04:00
dependabot[bot]
6666248b2a Bump flask-restx from 0.2.0 to 0.5.1 (#1984)
Bumps [flask-restx](https://github.com/python-restx/flask-restx) from 0.2.0 to 0.5.1.
- [Release notes](https://github.com/python-restx/flask-restx/releases)
- [Changelog](https://github.com/python-restx/flask-restx/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-restx/flask-restx/compare/0.2.0...0.5.1)

---
updated-dependencies:
- dependency-name: flask-restx
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kevin Chung <kchung@ctfd.io>
2021-09-22 02:06:11 -04:00
Kevin Chung
995ef0a6e2 Bump pybluemonday to 0.0.7 (#1959)
* Bump pybluemonday to 0.0.7
2021-07-24 20:17:16 -04:00
Kevin Chung
021e151946 Switch python-geoacumen to python-geoacumen-city (#1911)
* Closes #1872 
* IP Addresses in the Admin Panel will now show the city of the IP address as well as the country
2021-06-11 17:30:27 -04:00
dependabot[bot]
ef6a5f8d64 Bump pydantic from 1.5.1 to 1.6.2 (#1890)
* Bump pydantic from 1.5.1 to 1.6.2

Bumps [pydantic](https://github.com/samuelcolvin/pydantic) from 1.5.1 to 1.6.2.
- [Release notes](https://github.com/samuelcolvin/pydantic/releases)
- [Changelog](https://github.com/samuelcolvin/pydantic/blob/master/HISTORY.md)
- [Commits](https://github.com/samuelcolvin/pydantic/compare/v1.5.1...v1.6.2)

Signed-off-by: dependabot[bot] <support@github.com>

* Update requirements.txt

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kevin Chung <kchung@ctfd.io>
Co-authored-by: Kevin Chung <kchung@nyu.edu>
2021-06-11 15:37:10 -04:00
Kevin Chung
3cb67a97ec Bump pybluemonday version to 0.0.6 and allow HTML comments in sanitized output (#1908)
* Bump pybluemonday version to 0.0.6 
* Allow HTML comments in sanitized output
* Closes #1906
2021-06-11 10:21:03 -04:00
Kevin Chung
21af356642 Bump pybluemonday version (#1869)
* Bump version of pybluemonday
2021-04-20 12:54:31 -04:00
dependabot[bot]
cd9ff1ec32 Bump jinja2 from 2.11.2 to 2.11.3 (#1838)
* Bump jinja2 from 2.11.2 to 2.11.3

Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.2 to 2.11.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/master/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/2.11.2...2.11.3)

Signed-off-by: dependabot[bot] <support@github.com>

* Run pip-compile our way

* Add newline

* Update CHANGELOG

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kevin Chung <kchung@nyu.edu>
Co-authored-by: Kevin Chung <kchung@ctfd.io>
2021-03-24 15:42:28 -04:00
Kevin Chung
a045114251 Use pybluemonday instead of lxml for html sanitization (#1837)
* Use `pybluemonday` instead of `lxml` for html sanitization
* Fix boolean optional configs in `config.py`
* Closes #1835
2021-03-19 01:29:49 -04:00
Kevin Chung
d3b8d49de8 Bump some Python dependencies (#1784)
* Bump lxml to 4.6.2
* Bump pip-compile to 5.4.0
2021-01-26 23:55:08 -05:00
Kevin Chung
1e9c0b43b1 Freeze python dependencies using pip-tools (#1722)
* Rename `requirements.txt` to `requirements.in`
* Generate `requirements.txt` using `pip-tools` under Python 3.6
* Add `pip-tools` to `development.txt`
* Closes #1679
2020-11-16 17:06:01 -05:00