Added to CONTRIBUTORS and updated copyright year

[catagits/Catalyst-Action-REST.git] / Changes

diff --git a/Changes b/Changes
index 0be6d66..83653a2 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,3 +1,71 @@
+Tue 03 Sep 2013 13:00:00 EST - Release 1.12
+
+ WARNING BACK COMPAT BREAKAGE FOLLOWS
+
+ Removed The YAML and HTML parser from the distro.  You 
+ should install these if you actually use them.  They are listed as
+ optional dependencies going forward.
+
+ This is possibly a breaking change, but necessary for security and
+ considered acceptable since those formats have not generally
+ become preferred for web services.
+
+ In addition, the default de/serialization mappings for HTML and YAML
+ have been removed.  You can add that back by adding the following to
+ you Configuration for the subclass of Catalyst::Controller::REST -
+
+    package Foo::Controller::Bar;
+
+    use Moose;
+    use namespace::autoclean;
+
+    BEGIN { extends 'Catalyst::Controller::REST' }
+    __PACKAGE__->config(
+      'map' => {
+        'text/html'          => 'YAML::HTML',
+        'text/x-yaml'        => 'YAML',
+      },
+    );
+
+ You should do this if you are using these de/serialization formats.
+
+Sun 16 Jun 2013 15:23:03 BST - Release 1.11
+ Fix infinite recursion in tests under Catalyst 5.90040
+
+Mon 22 Apr 2013 14:36:53 BST - Release 1.10
+ Use YAML rather than JSON in basic tests
+
+Fri 19 Apr 2013 13:34:38 BST - Release 1.09
+ Don't load Data::Serializer unnecessarily in tests
+
+Tue 16 Apr 2013 08:33:00 BST - Release 1.08
+ Factor Data::Serializable into it's own dist to stop breakages.
+
+   If you use any of:
+
+   * Data::Dumper
+   * Data::Denter
+   * Data::Taxi
+   * Config::General
+   * PHP::Serialization
+
+   You'll need to install Catalyst-Action-Serialize-Data-Serializer and add the
+   appropriate lines to your controller config.  Said lines may be:
+
+         'text/x-data-dumper' => [ 'Data::Serializer', 'Data::Dumper' ],
+         'text/x-data-denter' => [ 'Data::Serializer', 'Data::Denter' ],
+         'text/x-data-taxi'   => [ 'Data::Serializer', 'Data::Taxi'   ],
+         'text/x-config-general'    => [ 'Data::Serializer', 'Config::General' ],
+         'text/x-php-serialization' => [ 'Data::Serializer', 'PHP::Serialization' ],
+
+Thu 11 Apr 2013 20:20:00 BST - Release 1.07
+ Don't serialize if a view is explicitly set.
+
+   If the controller sets the view in $c->stash->{current_view} or
+   $c->stash->{current_view_instance}, then it is explicitly requesting a
+   certain kind of serialization and C::A::Serialize shouldn't override
+   that.
+
  Remove Storable and FreezeThaw from the list
  of serialization methods offered by default, and
  from the docs - they're totally unsafe :/