Skip to content

Commit

Permalink
Merge branch 'stable'
Browse files Browse the repository at this point in the history
* stable:
  (version) 0.10.1
  (GH-943) Remove Transaction Lock Even on Failure
  (doc) update CHANGELOG/nuspec
  (doc) add CHANGELOG title/summary
  (doc) update licensed changelog
  (GH-458) Warn To Verbose Log For Now
  (doc) add licensed changelog
  (maint) formatting
  (doc) Note Runtime Options For Checksums In Error
  • Loading branch information
ferventcoder committed Sep 19, 2016
2 parents 8fb7db1 + 1971ea1 commit f48be9e
Show file tree
Hide file tree
Showing 9 changed files with 345 additions and 44 deletions.
2 changes: 1 addition & 1 deletion .uppercut
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
<property name="version.use_semanticversioning" value="true" overwrite="false" />
<property name="version.major" value="0" overwrite="false" />
<property name="version.minor" value="10" overwrite="false" />
<property name="version.patch" value="0" overwrite="false" />
<property name="version.patch" value="1" overwrite="false" />
<property name="version.fix" value="0" overwrite="false" />
<property name="version.nuget.prerelease" value="" overwrite="false" />
<property name="version.use.build_date" value="false" overwrite="false" />
Expand Down
53 changes: 53 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,56 @@
# Chocolatey Open Source CHANGELOG

This covers changes for the "chocolatey" and "chocolatey.lib" packages, which are available as FOSS.

**NOTE**: If you have a licensed edition of Chocolatey ("chocolatey.extension"), refer to this in tandem with [Chocolatey Licensed CHANGELOG](https://github.com/chocolatey/choco/blob/master/CHANGELOG_LICENSED.md).

## [0.10.1](https://github.com/chocolatey/choco/issues?q=milestone%3A0.10.1+is%3Aclosed) (September 19, 2016)

We're dubbing this the "Shhh! Keep that secret please" release. We've found that when passing in passwords and other sensitive arguments, those items can end up in the logs in clear text. We've addressed this in [#948](https://github.com/chocolatey/choco/issues/948) and [#953](https://github.com/chocolatey/choco/issues/953). When it comes to passing sensitive arguments through to native installers, you can set up environment variables with those sensitive args and pass those arguments directly through to `Start-ChocolateyProcessAsAdmin`. If you prefer a better experience, the licensed version allows passing sensitive options directly through choco.exe as `--install-arguments-sensitive` and `--package-parameters-sensitive`. Read more in the [Licensed CHANGELOG](https://github.com/chocolatey/choco/blob/master/CHANGELOG_LICENSED.md).

Perhaps the biggest improvement in this release is that Chocolatey will automatically look to see if it can download binaries over HTTPS when provided an HTTP url. If so, Chocolatey will switch to downloading the binaries over SSL. This provides better security in downloading and knowing you are getting the binary from the source location instead of a possible man in the middle location, especially when the package does not provide checksums for verification.

Another improvement you may not even notice, but we think you will love is that Chocolatey now supports TLS v1.2 transport which presents a nice transparent increase in security. You will need to have at least .NET Framework 4.5 installed to take advantage of this feature.

### FEATURES

* [Security] Support TLS v1.2 - see [#458](https://github.com/chocolatey/choco/issues/458)
* [Security] Attempt to download packages via HTTPS connection - see [#746](https://github.com/chocolatey/choco/issues/746)
* [Security] Pro/Business - Pass sensitive arguments to installers - see [#948](https://github.com/chocolatey/choco/issues/948)
* Search (and info) by version - see [#935](https://github.com/chocolatey/choco/issues/935)

### BUG FIXES

* [Security] Fix - Passwords in command line options are logged in clear text - see [#953](https://github.com/chocolatey/choco/issues/953)
* [Security] Fix - For PowerShell v2 - if switch down to SSLv3 protocol fails, go back to original protocol - see [#958](https://github.com/chocolatey/choco/issues/958)
* Fix - Unzipping to ProgramFiles/System32 is Subject to File System Redirection - see [#960](https://github.com/chocolatey/choco/issues/960)
* Fix - Run without login - see [#945](https://github.com/chocolatey/choco/issues/945)
* Fix - Support Long Paths - see [#934](https://github.com/chocolatey/choco/issues/934)
* Fix - help should not issue warning about elevated command shell - see [#893](https://github.com/chocolatey/choco/issues/893)
* Fix - Licensed Feed cannot be disabled - see [#959](https://github.com/chocolatey/choco/issues/959)
* Fix - Choco with unknown command should show help menu - see [#938](https://github.com/chocolatey/choco/issues/938)
* Fix - Get-FtpFile error when file is missing (called through Get-ChocolateyWebFile) - see [#920](https://github.com/chocolatey/choco/issues/920)
* Fix - Skip Get-WebFileName for FTP - see [#957](https://github.com/chocolatey/choco/issues/957)
* Fix - Chocolatey-InstallChocolateyPackage fix for double chocolatey folder name is not also applied to the passed in file name - see [#908](https://github.com/chocolatey/choco/issues/908)
* Fix - Start-ProcessAsAdmin - working directory should be from the location of the executable - see [#937](https://github.com/chocolatey/choco/issues/937)
* [POSH Host] Fix - PowerShell Host - Package scripts setting values can affect packages that depend on them - see [#719](https://github.com/chocolatey/choco/issues/719)
* Fix - Transactional install - pending check may fail if the lib folder doesn't exist - see [#954](https://github.com/chocolatey/choco/issues/954)
* Fix - Start-ChocolateyProcessAsAdmin Module Import for PowerShell causes errors - see [#901](https://github.com/chocolatey/choco/issues/901)

### IMPROVEMENTS

* Transactional Install - Improve concurrent operations (pending) - see [#943](https://github.com/chocolatey/choco/issues/943)
* Uninstall-ChocolateyPackage should set unrecognized fileType to exe - see [#964](https://github.com/chocolatey/choco/issues/964)
* Powershell functions - Allow access to package title, not only ID - see [#925](https://github.com/chocolatey/choco/issues/925)
* Option to apply package parameters / install arguments to dependent packages - see [#839](https://github.com/chocolatey/choco/issues/839)
* Get-ChocolateyWebFile download check enhancements - see [#952](https://github.com/chocolatey/choco/issues/952)
* Do not treat unknown checksum types as MD5 - see [#932](https://github.com/chocolatey/choco/issues/932)
* Pro/Business - Install-ChocolateyPackage - UseOriginalLocation - see [#950](https://github.com/chocolatey/choco/issues/950)
* Auto determine checksum type - see [#922](https://github.com/chocolatey/choco/issues/922)
* Ensure PowerShell functions have parameter name parity - see [#941](https://github.com/chocolatey/choco/issues/941)
* Output from installer should go to verbose log - see [#940](https://github.com/chocolatey/choco/issues/940)


## [0.10.0](https://github.com/chocolatey/choco/issues?q=milestone%3A0.10.0+is%3Aclosed) (August 11, 2016)
What was planned for 0.9.10.4 is now 0.10.0. This is due partly to a breaking change we are making for security purposes and a move to provide better a better versioning scheme for the remainder of the sub-v1 versions of Chocolatey. Instead of 0.y.z.0 being considered where major verions occur in the sub 1 series, 0.y.0 will now be considered where those major versions occur. We also are moving right along towards v1 (and hope to be there in 2017).

Expand Down
196 changes: 196 additions & 0 deletions CHANGELOG_LICENSED.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,196 @@
# Chocolatey Licensed CHANGELOG

This covers changes for the "chocolatey.extension" package, where the licensed editions of Chocolatey get their enhanced functionality.

**NOTE**: If you have a licensed edition of Chocolatey, refer to this in tandem with [Chocolatey Open source CHANGELOG](https://github.com/chocolatey/choco/blob/master/CHANGELOG.md).

## 1.6.1 (Sep 8, 2016)

### BUG FIXES

* Package Builder (Choco New):
* Fix - Do not error on missing appsearch table in MSI.
* Fix - Do not add similarly named items from AppSearch table to template properties more than once


## 1.6.0 (Sep 8, 2016)

Some really big improvements are now available in v1.6.0. We are excited to share them with you!

### FEATURES

* Licensed Enhancements:
* install/upgrade - pass sensitive arguments that are not shown/logged in Chocolatey to an installer - useful when you want to pass passwords but don't want them logged. Need Chocolatey v0.10.1+.
* AutoUninstaller - determine type from original executable when FOSS is not able to detect installer type.
* Package Builder (Choco New):
* Now supports downloading from url/url64 and determining whether to keep those files remote.
* Switch to use original file location instead of copying into package
* Specify both 32-bit/64-bit file
* Work with zip files

### BUG FIXES

* Fix - changes related to working directory fixes for [#937](https://github.com/chocolatey/choco/issues/937)
* Fix - double chocolatey folder name is not also applied to the passed in file name - see [#908](https://github.com/chocolatey/choco/issues/908)
* Package Builder (Choco New):
* Fix - remove parentheses from package names
* Fix - keep template updated
* Package Internalizer (Choco Download):
* Fix - handle downloaded files with the same name Sometimes the file name is the same when the architecture is different. Handle that by using the url counter for all additional files with the same name.

### IMPROVEMENTS

* Remind About Upcoming Expiration - when the license is expiring within a month's time, remind the user about renewal
* Package Builder (Choco New):
* Handle -forcex86 with package creation
* Add shimgen ignore for exes
* Use ProductVersion when version 0.0.0.0
* Remove the word "installer" from package name
* Allow specifying name of the package
* Allow template override with warning
* Show MSI properties in install script (commented)
* Ensure `ALLUSERS=1` when an MSI is set to per user by default
* Automatically checksum files
* Allow files to stay remote - use remote helpers when files stay remote
* Package Internalizer (Choco Download):
* handle variables in urls set like ${word}
* Append `-UseOriginalLocation` to the end of the arguments passed to Install-ChocolateyPackage. Work with splatting properly as well


## 1.5.1 (Aug 9, 2016)

### BUG FIXES

* Fix - Valid Exit Codes do not support values bigger than Int32.MaxValue. - see [#900](https://github.com/chocolatey/choco/issues/900)

### IMPROVEMENTS

* Package Internalizer (Choco Download) - specify resources location (when not embedding into package)


## 1.5.0 (July 21, 2016)

### FEATURES

* [Business] Recompiled packages support aka Package Internalizer - Download a package and all remote resources, recompiling the package to use local resources instead.
* Synchronize w/Programs and Features - Chocolatey synchronizes manually uninstalled software with package state.

### BUG FIXES

* Fix - Silent Args being passed as a string array cause package failure - see [#808](https://github.com/chocolatey/choco/issues/808)

### IMPROVEMENTS

* VirusTotal - allow skipping check entirely - [#786](https://github.com/chocolatey/choco/issues/786)
* Trial allows more features to work, but in a way that is not automatable.


## 1.4.2 (June 20, 2016)

### BUG FIXES

* Fix - Logging is broken in some packages due to new TEMP directory - [#813](https://github.com/chocolatey/choco/issues/813)

### IMPROVEMENTS

* Ensure log file path exists - [#758](https://github.com/chocolatey/choco/issues/758)


## 1.4.1 (June 14, 2016)

### BUG FIXES

* PowerShell v2 assembly was not loading. There was a dependency on an incorrect version of PowerShell assemblies, causing it to only attempt to load System.Management.Automation v3 and above - [#799](https://github.com/chocolatey/choco/issues/799)


## 1.4.0 (June 13, 2016)

### FEATURES

* BETA Testers - Recompiled packages support - Download a package and all remote resources, recompiling the package to use local resources instead.
* BETA Testers - Synchronize w/Programs and Features - Chocolatey synchronizes manually uninstalled software with package state.
* [Business] Create Packages from Installers aka Package Builder! Create packages directly from software installers in seconds! **Chocolatey for Business can automatically create packages for all the software your organization uses in under 5 minutes!**
* New Command! choco support - quickly see how you can contact support - [#745](https://github.com/chocolatey/choco/issues/745)
* Web functions for local files support - [#781](https://github.com/chocolatey/choco/issues/781)

### IMPROVEMENTS

* Support FIPS compliant algorithms [#446](https://github.com/chocolatey/choco/issues/446)


## 1.3.2 (May 28, 2016)

### BUG FIXES

* Get-WebFile name changes related to [#753](https://github.com/chocolatey/choco/issues/753)

### IMPROVEMENTS

* Clarified options with version and better messaging.


## 1.3.1 (May 9, 2016)

### BUG FIXES

* Get-WebFile name changes related to [#727](https://github.com/chocolatey/choco/issues/727)

### IMPROVEMENTS

* Report directory switch override.


## 1.3.0 (May 2, 2016)

### FEATURES

* Ubiquitous Install Directory Switch! When working with properly formed packages that use Install-ChocolateyPackage (or Install-ChocolateyInstallPackage), Chocolatey is able to override the native installer's directory from one single option you provide to Chocolatey. You no longer need to know what the installer type is and provide that through install arguments. See `choco install -?` and `--install-directory` option for details.
* Generic Virus Scanner - for organizations that don't want to run checks using VirusTotal, we've provided a way for organizations to use their own virus scanner. See `choco config list` for details.

### BUG FIXES

* Fix - Content Length check may error if original location is changed. This means the permanent download location will not error on other checks.
* Fix - Original remote file name can be affected if original url has changed or is unavailable.

### IMPROVEMENTS

* Virus Scanner exits as soon as possible on files too big for the scanner. If the file is over 500MB, the scanner cannot upload the file, so it should not ask whether it can try to upload prior to failing on the size check (previous behavior).


## 1.2.0 (March 14, 2016)

### FEATURES

* Virus scanning for Pro users! See the [post](https://www.kickstarter.com/projects/ferventcoder/chocolatey-the-alternative-windows-store-like-yum/posts/1518468) for details!

## 1.1.0 (February 12, 2016)

### IMPROVEMENTS

* License can now be in user profile (like `c:\Users\yourname\chocolatey.license.xml`). This is great for roaming user profiles and in multiple machine usage scenarios.
* Download cache can be controlled with a feature flag and/or a command option. See `choco feature` and `choco install -h` for more details.

### For BETA Testers

* Virus Check improvements
* Throw if virus check has not been done before.
* Messaging is clarified
* Skip or run virus check with command options - see `choco install -h` for details.

## 1.0.2 (February 5, 2016)

### BUG FIXES

* Fix - PowerShell 5 respects Cmdlet aliases, causing overrides on functions not ready (Install-ChocolateyPackage). See the [post](https://www.kickstarter.com/projects/ferventcoder/chocolatey-the-alternative-windows-store-like-yum/posts/1484093) for details.

## 1.0.1 (February 2, 2016)

### BUG FIXES

* Fix - License location validation is incorrect.

## 1.0.0 (February 1, 2016)

### FEATURES

* Alternate Permanent Download Location - see the [post](https://www.kickstarter.com/projects/ferventcoder/chocolatey-the-alternative-windows-store-like-yum/posts/1479944) for details.
Loading

0 comments on commit f48be9e

Please sign in to comment.