RELEASE-NOTES

============================
 Invenio v1.2.1 is released
============================

Invenio v1.2.1 was released on May 21, 2015.

About
-----

Invenio is a digital library framework enabling you to build your own
digital library or document repository on the web.

This stable release update is recommended to all Invenio sites using
v1.2.0 or previous releases.

Security fixes
--------------

+ BibAuthorID:

  - Improves URL redirecting by properly quoting all URL parts, in
    order to better protect against possible XSS attacks.

+ WebStyle:

  - Adds back the `HttpOnly` cookie attribute in order to better
    protect against potential XSS vulnerabilities.  (#3064)

Improved features
-----------------

+ installation:

  - Apache virtual environments are now created with appropriate
    `WSGIDaemonProcess` user value, taken from the configuration
    variable `CFG_BIBSCHED_PROCESS_USER`, provided it is set.  This
    change makes it easier to run Invenio under non-Apache user
    identity.

  - Apache virtual environments are now created with appropriate
    `WSGIPythonHome` directive so that it would be easier to run
    Invenio from within Python virtual environments.

Bug fixes
---------

+ BibDocFile:

  - Safer upgrade recipe for migrations from the old document storage
    model (used in v1.1) to the new document storage model (used in
    v1.2).

+ WebSearch:

  - Removes special behaviour of the "subject" index that was hard-
    coded based on the index name.  Installations should rather
    specify wanted behaviour by means of configurable tokeniser
    instead.

  - Collection names containing slashes are now supported again.
    However we recommend not to use slashes in collection names; if
    slashes were wanted for aesthetic reasons, they can be added in
    visible collection translations.  (#2902)

+ global:

  - Replaces `invenio-demo.cern.ch` by `demo.invenio-software.org`
    which is the new canonical URL of the demo site.  (#2867)

+ installation:

  - Releases constraint on using an old version of `h5py` that was
    anyway no longer available on PyPI.

+ testutils:

  - Switches off SSL verification when running the test suite.  Useful
    for Python-2.7.9 where self-signed SSL certificates (that are
    usually used on development installations) would cause apparent
    test failures.  (#2868)

Download
--------

- http://invenio-software.org/download/invenio-1.2.1.tar.gz
- http://invenio-software.org/download/invenio-1.2.1.tar.gz.md5
- http://invenio-software.org/download/invenio-1.2.1.tar.gz.sig

Installation
------------

Please follow the INSTALL file bundled in the distribution tarball.

Upgrade
-------

Please proceed as follows:

a) Stop your bibsched queue and your Apache server.

b) Install the update::

     $ tar xvfz invenio-1.2.1.tar.gz
     $ cd invenio-1.2.1
     $ sudo rsync -a /opt/invenio/etc/ /opt/invenio/etc.OLD/
     $ sh /opt/invenio/etc/build/config.nice
     $ make
     $ make check-upgrade
     $ sudo -u www-data make install
     $ sudo rsync -a /opt/invenio/etc.OLD/ \
         --exclude invenio-autotools.conf \
         /opt/invenio/etc/ # (1)
     $ sudo -u www-data /opt/invenio/bin/inveniocfg --update-all
     $ sudo -u www-data /opt/invenio/bin/inveniocfg --upgrade

     (1) If you are upgrading from previous stable release series
         (v0.99, v1.0 or v1.1), please don't run this rsync command
         but diff, in order to inspect changes and adapt your old
         configuration to the new Invenio v1.2 release series.  For
         more information you may also want to consult release notes
         coming with Invenio v1.2.0.

c) Restart your Apache server and your bibsched queue.

Happy hacking and thanks for flying Invenio.

| Invenio Development Team
|   Email: info@invenio-software.org
|   IRC: #invenio on irc.freenode.net
|   Twitter: http://twitter.com/inveniosoftware
|   GitHub: http://github.com/inveniosoftware
|   URL: http://invenio-software.org