Buildbot 2.0.0 and 1.8.1

Pierre Tardy
Buildbot
Published in
2 min readFeb 3, 2019

I am pleased to announce the joint release of Buildbot 1.8.1 and 2.0.0.

[edit] 2.0.0 was wrongly marked in pypi as supporting python 2, and was removed from pypi. 2.0.1 is replacing it, now built only for python 3.

This release is a bit special as there has been a security vulnerability reported by mik317 and forwarded by mariadb folks. This vulnerability is of medium criticity as it could only allow to attack services hosted on the same domain (sub-domain cookie injection). Buildbot 1.8.1 is just Buildbot 1.8.0 with a patch for that bug.

Buildbot 2.0.0 is another story. 9039 deletion and 4098 additions over 711 files. Buildbot 2 is just the same as Buildbot 1, but cleaned up from a lot of legacy.

  • Python 2 support removal allowed us to remove a lot of unneeded boilerplate (#4569, #4470).
  • We removed the support for slave deprecation code (#4547), and other deprecated APIs.
  • Then we used the 2.0.0 opportunity to clarify an old implicit policy of supporting only APIs that are documented. If an API is not in the doc, then you can make a PR to improve it in a non backward compatible way. If it is documented, then you need to provide compatibility stubs.
  • The cleanup work is not yet finished, but those ones are already huge improvements to the codebase.

Apart from that, there is the usual set of bug fixes, details are as usual in the release notes

Thanks to our contributors!

git shortlog --no-merges -ns v2.0.0...v1.8.0
54 Povilas Kanapickas
26 Monika Kairaityte
25 Craig Rodrigues
17 Pierre Tardy
6 Sylvain Joyeux
5 Robin Jarry
4 Josh Bialkowski
2 Chih-Hsuan Yen
2 Curt J. Sampson
1 Felix Kastner
1 Joao Maia

--

--