Skip to content

Commit cbb2e2d

Browse files
committed
Merge remote-tracking branch 'upstream/main'
2 parents 018c186 + 0a9390f commit cbb2e2d

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

64 files changed

+1595
-397
lines changed

CHANGELOG.md

Lines changed: 20 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,21 @@
11
# CHANGELOG.md
22

3+
## 0.29
4+
- New columns component: `columns`. Useful to display a comparison between items, or large key figures to an user.
5+
- New foldable component: `foldable`. Useful to display a list of items that can be expanded individually.
6+
- CLI arguments parsing: SQLPage now processes command-line arguments to set the web root and configuration directory. It also allows getting the currently installed version of SQLPage with `sqlpage --version` without starting the server.
7+
- Configuration checks: SQLPage now checks if the configuration file is valid when starting the server. This allows to display a helpful error message when the configuration is invalid, instead of crashing or behaving unexpectedly. Notable, we now ensure critical configuration values like directories, timeouts, and connection pool settings are valid.
8+
- The configuration directory is now created if it does not exist. This allows to start the server without having to manually create the directory.
9+
- The default database URL is now computed from the configuration directory, instead of being hardcoded to `sqlite://./sqlpage/sqlpage.db`. So when using a custom configuration directory, the default SQLite database will be created inside it. When using the default `./sqlpage` configuration directory, or when using a custom database URL, the default behavior is unchanged.
10+
- New `navbar_title` property in the [shell](https://sql.datapage.app/documentation.sql?component=shell#component) component to set the title of the top navigation bar. This allows to display a different title in the top menu than the one that appears in the tab of the browser. This can also be set to the empty string to hide the title in the top menu, in case you want to display only a logo for instance.
11+
- Fixed: The `font` property in the [shell](https://sql.datapage.app/documentation.sql?component=shell#component) component was mistakingly not applied since v0.28.0. It works again.
12+
- Updated SQL parser to [v0.51.0](https://github.com/sqlparser-rs/sqlparser-rs/blob/main/CHANGELOG.md#0510-2024-09-11). Improved `INTERVAL` parsing.
13+
- **Important note**: this version removes support for the `SET $variable = ...` syntax in SQLite. This worked only with some databases. You should replace all occurrences of this syntax with `SET variable = ...` (without the `$` prefix).
14+
- slightly reduce the margin at the top of pages to make the content appear higher on the screen.
15+
- fix the display of the page title when it is long and the sidebar display is enabled.
16+
- Fix an issue where the color name `blue` could not be used in the chart component.
17+
- Add new properties to the foldable component: `id`, `class`, and `expanded` (to control the state of the foldable item). The old behavior was having the first foldable item initially opened and the others closed. To keep the old behavior, you need to explicitly set `true as expanded` on the first foldable item.
18+
319
## 0.28.0 (2024-08-31)
420
- Chart component: fix the labels of pie charts displaying too many decimal places.
521
- ![pie chart](https://github.com/user-attachments/assets/6cc4a522-b9dd-4005-92bc-dc92b16c7293)
@@ -184,7 +200,7 @@ select
184200
- reuse the existing opened database connection for the current query in `sqlpage.run_sql` instead of opening a new one. This makes it possible to create a temporary table in a file, and reuse it in an included script, create a SQL transaction that spans over multiple run_sql calls, and should generally make run_sql more performant.
185201
- Fixed a bug in the cookie component where removing a cookie from a subdirectory would not work.
186202
- [Updated SQL parser](https://github.com/sqlparser-rs/sqlparser-rs/blob/main/CHANGELOG.md#0470-2024-06-01). Fixes support for `AT TIME ZONE` in postgres. Fixes `GROUP_CONCAT()` in MySQL.
187-
- Add a new warning message in the logs when trying to use `SET $x = ` when there is already a form field named `x`.
203+
- Add a new warning message in the logs when trying to use `set x = ` when there is already a form field named `x`.
188204
- **Empty Uploaded files**: when a form contains an optional file upload field, and the user does not upload a file, the field used to still be accessible to SQLPage file-related functions such as `sqlpage.uploaded_file_path` and `sqlpage.uploaded_file_mime_type`. This is now fixed, and these functions will return `NULL` when the user does not upload a file. `sqlpage.persist_uploaded_file` will not create an empty file in the target directory when the user does not upload a file, instead it will do nothing and return `NULL`.
189205
- In the [map](https://sql.datapage.app/documentation.sql?component=map#component) component, when top-level latitude and longitude properties are omitted, the map will now center on its markers. This makes it easier to create zoomed maps with a single marker.
190206
- In the [button](https://sql.datapage.app/documentation.sql?component=button#component) component, add a `download` property to make the button download a file when clicked, a `target` property to open the link in a new tab, and a `rel` property to prevent search engines from following the link.
@@ -194,9 +210,9 @@ select
194210
195211
## 0.22.0 (2024-05-29)
196212
197-
- **Important Security Fix:** The behavior of `SET $x` has been modified to match `SELECT $x`.
198-
- **Security Risk:** Previously, `SET $x` could be overwritten by a POST parameter named `x`.
199-
- **Solution:** Upgrade to SQLPage v0.22. If not possible, then update your application to use `SET :x` instead of `SET $x`.
213+
- **Important Security Fix:** The behavior of `set x` has been modified to match `SELECT $x`.
214+
- **Security Risk:** Previously, `set x` could be overwritten by a POST parameter named `x`.
215+
- **Solution:** Upgrade to SQLPage v0.22. If not possible, then update your application to use `SET :x` instead of `set x`.
200216
- For more information, see [GitHub Issue #342](https://github.com/lovasoa/SQLpage/issues/342).
201217
- **Deprecation Notice:** Reading POST variables using `$x`.
202218
- **New Standard:** Use `:x` for POST variables and `$x` for GET variables.

0 commit comments

Comments
 (0)