What's new in CubicWeb 3.18?
============================

The migration script does not handle sqlite nor mysql instances.


New functionalities
--------------------

* add a security debugging tool
  (see `#2920304 <http://www.cubicweb.org/2920304>`_)

* introduce an `add` permission on attributes, to be interpreted at
  entity creation time only and allow the implementation of complex
  `update` rules that don't block entity creation (before that the
  `update` attribute permission was interpreted at entity creation and
  update time)

* the primary view display controller (uicfg) now has a
  `set_fields_order` method similar to the one available for forms

* new method `ResultSet.one(col=0)` to retrive a single entity and enforce the
  result has only one row (see `#3352314 https://www.cubicweb.org/ticket/3352314`_)

* new method `RequestSessionBase.find` to look for entities
  (see `#3361290 https://www.cubicweb.org/ticket/3361290`_)

* the embedded jQuery copy has been updated to version 1.10.2, and jQuery UI to
  version 1.10.3.

* initial support for wsgi for the debug mode, available through the new
  ``wsgi`` cubicweb-ctl command, which can use either python's builtin
  wsgi server or the werkzeug module if present.

* a ``rql-table`` directive is now available in ReST fields

* cubicweb-ctl upgrade can now generate the static data resource directory
  directly, without a manual call to gen-static-datadir.

API changes
-----------

* not really an API change, but the entity permission checks are now
  systematically deferred to an operation, instead of a) trying in a
  hook and b) if it failed, retrying later in an operation

* The default value storage for attributes is no longer String, but
  Bytes.  This opens the road to storing arbitrary python objects, e.g.
  numpy arrays, and fixes a bug where default values whose truth value
  was False were not properly migrated.

* `symmetric` relations are no more handled by an rql rewrite but are
  now handled with hooks (from the `activeintegrity` category); this
  may have some consequences for applications that do low-level database
  manipulations or at times disable (some) hooks.

* `unique together` constraints (multi-columns unicity constraints)
  get a `name` attribute that maps the CubicWeb contraint entities to
  corresponding backend index.

* BreadCrumbEntityVComponent's open_breadcrumbs method now includes
  the first breadcrumbs separator

* entities can be compared for equality and hashed

* the ``on_fire_transition`` predicate accepts a sequence of possible
  transition names

* the GROUP_CONCAT rql aggregate function no longer repeats duplicate
  values, on the sqlite and postgresql backends

Deprecation
---------------------

* ``pyrorql`` sources have been deprecated. Multisource will be fully dropped
  in the next version. If you are still using pyrorql, switch to ``datafeed``
  **NOW**!

* the old multi-source system

* `find_one_entity` and `find_entities` in favor of `find`
  (see `#3361290 https://www.cubicweb.org/ticket/3361290`_)

* the `TmpFileViewMixin` and `TmpPngView` classes (see `#3400448
  https://www.cubicweb.org/ticket/3400448`_)

Deprecated Code Drops
----------------------

* ``ldapuser`` have been dropped; use ``ldapfeed`` now
  (see `#2936496 <http://www.cubicweb.org/2936496>`_)

* action ``GotRhythm`` was removed, make sure you do not
  import it in your cubes (even to unregister it)
  (see `#3093362 <http://www.cubicweb.org/3093362>`_)

* all 3.8 backward compat is gone

* all 3.9 backward compat (including the javascript side) is gone

* the ``twisted`` (web-only) instance type has been removed