# This file documents the revision history for Perl extension Catalyst.
-5.90069_TBA
+5.90076 - 2014-11-13
+ - If throwing an exception object that does the code method, make sure that
+ method returns an expected HTTP status code before passing it on to the
+ HTTP Exception middleware.
+
+5.90075 - 2014-10-06
+ - Documentation patch for $c->req->param to point out the recently discovered
+ potential security issues: http://blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/
+ - You don't need to install this update, but you should read about the exploit
+ and review if your code is vulnerable. If you use the $c->req->param interface
+ you really need to review this exploit.
+
+5.90074 - 2014-10-01
+ - Specify Carp minimum version to avoid pointless test fails (valy++)
+
+5.90073 - 2014-09-23
+ - Fixed a regression caused by the last release where we broke what happened
+ when you tried to set request parameters via $c->req->param('foo', 'bar').
+ You shouldn't do this, but I guess I shouldn't have busted it either :)
+ - Allow the term_width to be regenerated (see Catalyst::Utils::term_width,
+ Frew Schmidt)
+ - More aggressive skipping of value decoding if the value is undefined.
+
+5.90072 - 2014-09-15
+ - In the case where you call $c->req->param(undef), warn with a more useful
+ warning (now gives the line of your code that called param with the undef,
+ so you can go to hunt it out.
+
+5.90071 - 2014-08-10
+ - Travis config now performs basic reverse dependency testing.
+ - Restored deprecated 'env' code in Engine.pm b/c it is still being used out
+ in the wild (Catalyst-Plugin-Authentication-0.10023) - (removed in 5.90070)
+ - Reverted changes to debug log/handling (5.90069_003) to fix
+ rev dep Catalyst-Plugin-Static-Simple-0.32 test suite.
+ - Added italian translation of default error.
+
+5.90070 - 2014-08-07
+ - Retagged previous release as stable; no changes
+
+5.90069_004
+ - Fixed typo in middleware stash that was causing older Perls to fail
+ certain tests. No other changes.
+
+5.90069_003
+ - The default log level is now 'info', not 'debug'.
- Finished merging all the encoding plugin code to core code. The encoding
plugin is now just an empty package. Also tried to improve encoding docs
a bit.
- Some additional changes to the stash middleware that should not break
anything new.
+ - Documentation around using Sendfile type http headers with a filehandle
+ type response.
+ - Merged from master branch to pick up some additional fixes and documentation
+ improvements.
5.90069_002
- Catalyst stash functionality has been moved to Middleware. It should