added tip on config file migration in scripts

[ms] ensure owned_by/created_by can't be crossed among pyro-rql sources

[ms] cleanups

[ms] fix a ms plannification bug with NOT is

backport stable

Added tag cubicweb-debian-version-3.9.4-1 for changeset 8d32d82134dc

Added tag cubicweb-version-3.9.4 for changeset 6cebb361dcb2

3.9.4

i18nupdate

[rql2sql] add test for rql bug #37423, which triggered a cw bug fixed by this changeset (infinite loop with some queries...)

[doc] started js/css coding standards

fix idownload view pb. for xhtml browsers

backport stable

[selectors] fix is_instance bug w/ parent classes. Also slight performance enhancements by changing what's returned by vreg['etypes'].parent_classes method (dedicated for this usage...) and removing no more necessary methods

[schema view] we don't support multiple inheritance

[view] use the new magic js object to generate javascript func call for auto reload user callbacks

[js/edition] fix pb with IE not handling long GETs #1203789

[migration] commit only sql script migration

[index page] refactor add_entity_link: no need to give request, nicer to check perm before calling the method, and use the new create url factory

[facet] refactor bookmark this search link creation: check perm before calling the method, and use the new create url factory

[view] deprecate create_url in favor of a cw_create_url class method on entity classes also kill view's output_url_builder method, unused anywhere...

small cleanups

[vreg debug] use classid to get cleaner output

[windmill] add xul-ext firefox plugin

[migration] unify process_script command - simplify wrapper by putting the logic in the migration module - enable sql script in shell invocation - adjust cmd_process_script docstring in interactive shell

tests: use larger timeouts in windmill tests

backport stable

[session] session auto reconnect feature has gone with the session-time refactoring in 6012:d56fd78006cd

[debug view] action moved

[test] check_session returns an int since 6012:d56fd78006cd

[editcontroller] turn eid into an int if possible, avoiding pbs. further down (case: preview cube)

[session] this log should be at the debug level, not info

[ms] log after preprocessing, else we don't see the query which is actually planned (may have been modified by security insertion)

backport stable

Added tag cubicweb-debian-version-3.9.3-1 for changeset ab1f9686ff3e

Added tag cubicweb-version-3.9.3 for changeset 900772fd9caa

[forms] default combobox view should accept arbitrary keyword arguments

3.9.3

i18n update

backport stable

backport oldstable

[security] don't put uncrypted password in query parameters, else it may be logged on error

[relations in ui] provide context information when computing label for a relation

[security] do not show sessions information to non managers users. Close security ticket #38246

[dbapi] update renamed argument

[debug] improve debug messages

[dbapi] cleanup shared data api: let access to transaction from dbapi, we can write it after all... Also, querydata is better named txdata

[session] cleanup session-time / cleanup-session-time... which are hard to grasp while there is no actual benefit to handle both. Now repo will close session without any activity since cleanup-session-time (24h by default), and the web authentication chain won't reconnect automatically anymore. I don't think there is a big deal in keeping repo session for such time. Also, ask the repo for latest session usage time, we can't know it for real on the web side (think of long running transactions). Closes #1083245.