Merge branch 'main' into issue-1325_part2

.github/release.yml

@@ -0,0 +1,18 @@
+# Configuration for Automated release notes.
+
+changelog:
+  exclude:
+    labels:
+      - ignore-for-release
+    authors:
+      - github-actions
+  categories:
+    - title: Implemented enhancements
+      labels:
+        - enhancement
+    - title: Fixed bugs
+      labels:
+        - bug
+    - title: Other changes
+      labels:
+        - '*'

.github/stale.yml

@@ -17,7 +17,7 @@ exemptLabels:
   - design
   - enhancement
   - 'help wanted'
-  - 'on going'
+  - ready
   - packaging
   - security
   - test

.github/workflows/make-check.yml

@@ -5,8 +5,8 @@ on:
     tags-ignore:
       - '*'
   pull_request:
-    branches:
-      - '*'
+    branches-ignore:
+      - 'translation'
 
 jobs:
   make-check:
@@ -15,10 +15,13 @@ jobs:
       fail-fast: false
       matrix:
         os:
-          - 'macos-latest'
+          - 'macos-13'
+          #- 'macos-latest'
           - 'ubuntu-latest'
         perl:
-          - '5.34'
+          - '5'
+          - '5.36'
+          #- '5.34'
           - '5.32'
           - '5.30'
           #- '5.28'
@@ -30,7 +33,7 @@ jobs:
           - '5.16'
     name: Perl ${{ matrix.perl }} on ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Install dependencies for Linux
         if: runner.os == 'Linux'
         run: |
@@ -40,11 +43,13 @@ jobs:
         if: runner.os == 'macOS'
         run: |
           brew install automake
+          brew install openssl
+          brew install pkg-config
       - name: Workaround for macOS
         if: runner.os == 'macOS'
         # For Crypt::SMIME
         run: >
-          echo "PKG_CONFIG_PATH=/usr/local/opt/openssl/lib/pkgconfig"
+          echo "PKG_CONFIG_PATH=$(brew --prefix openssl)/lib/pkgconfig"
           >> $GITHUB_ENV
       - name: Set up Perl
         uses: shogo82148/actions-setup-perl@v1
@@ -57,13 +62,14 @@ jobs:
             --with-feature=Data::Password --with-feature=ldap
             --with-feature=safe-unicode --with-feature=smime
             --with-feature=soap --with-feature=sqlite
+            ${{ startsWith(matrix.os, 'macos') && '--with-feature=macos' || '' }}
       - name: Run tests
         run: |
           if [ "$(uname -s)" = "Linux" ]; then
             # Workaround to avoid reference to older libcrypto by perl binary
             export LD_LIBRARY_PATH=/usr/lib/x86_64-linux-gnu
           fi
-          autoreconf -i
+          PERL5LIB= autoreconf -i
           ./configure --with-defaultdir=`pwd`/default
           cd src; make; cd ..
           #make check-local TEST_FILES='xt/perltidy.t' || true

.github/workflows/submit-pr-for-release-notes.yml

@@ -0,0 +1,21 @@
+on:
+  push:
+    branches:
+      - pr/release-*
+
+env:
+  GH_PR_BODY: 'This pull request is a workplace for editing release notes `NEWS.md`.'
+  GH_PR_LABEL: ready,ignore-for-release
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+jobs:
+  submit-pr-for-release-notes:
+    if: github.repository_owner == 'sympa-community'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Submit PR
+        run: >
+          gh pr create -H $GITHUB_REPOSITORY_OWNER:$GITHUB_REF_NAME
+          -t "Release ${GITHUB_REF_NAME#pr/release-}" -b "$GH_PR_BODY" -l "$GH_PR_LABEL"
+          || true

.github/workflows/submit-pr-for-translation.yml

@@ -0,0 +1,24 @@
+on:
+  push:
+    branches:
+      - translation
+    paths:
+      - 'po/**'
+
+env:
+  GH_PR_TITLE: Update translation
+  GH_PR_BODY: This pull request was automatically submitted.
+  GH_PR_LABEL: translation,ready,ignore-for-release
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+jobs:
+  submit-pr-for-translation:
+    if: github.repository_owner == 'sympa-community'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Submit PR to update translation
+        run: >
+          gh pr create -H $GITHUB_REPOSITORY_OWNER:$GITHUB_REF_NAME
+          -t "$GH_PR_TITLE" -b "$GH_PR_BODY" -l "$GH_PR_LABEL"
+          || true

Makefile.am

@@ -4,7 +4,7 @@
 # Copyright (c) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
 # 2006, 2007, 2008, 2009, 2010, 2011 Comite Reseau des Universites
 # Copyright (c) 2011, 2012, 2013, 2014, 2015, 2016, 2017 GIP RENATER
-# Copyright 2017, 2018, 2019, 2022 The Sympa Community. See the
+# Copyright 2017, 2018, 2019, 2022, 2023 The Sympa Community. See the
 # AUTHORS.md file at the top-level directory of this distribution and at
 # <https://github.com/sympa-community/sympa.git>.
 #
@@ -27,15 +27,18 @@ check_SCRIPTS = \
 	t/01_Conf.t \
 	t/Config_XML.t \
 	t/DataSource_LDAP2.t \
-	t/DatabaseManager.t \
 	t/Database_LDAP.t \
+	t/Database_SQLite.t \
+	t/HTMLSanitizer.t \
 	t/Language.t \
 	t/LockedFile.t \
 	t/Message_smime.t \
 	t/Message_urlize.t \
 	t/Regexps.t \
 	t/Request_Handler_add+del.t \
+	t/Request_Handler_set.t \
 	t/Scenario.t \
+	t/Spindle_TransformIncoming.t \
 	t/Tools_Data.t \
 	t/Tools_File.t \
 	t/Tools_Password.t \
@@ -52,7 +55,6 @@ check_DATA = \
 	src/lib/Sympa/Test/MockLDAP.pm \
 	t/data/list_data/test/config \
 	t/data/sympa.conf \
-	t/data/sympa.sqlite \
 	t/data/etc/auth.conf \
 	t/locale/cs/LC_MESSAGES/sympa.mo \
 	t/locale/cs/LC_MESSAGES/web_help.mo \
@@ -92,7 +94,6 @@ EXTRA_DIST = \
 	CONTRIBUTING.md \
 	INSTALL.md \
 	NEWS.md \
-	OChangeLog \
 	ONEWS \
 	README.md \
 	etc_README \

NEWS.md

@@ -1,5 +1,106 @@
 # Change Log
 
+## [6.2.72](https://github.com/sympa-community/sympa/tree/6.2.72) (2023-06-01)
+
+[Full Changelog](https://github.com/sympa-community/sympa/compare/6.2.71b.1...6.2.72)
+
+**Incompatible changes** (from 6.2.70) **:**
+
+- The `dkim` authentication method for scenarios was obsoleted.  Now it is a synonym of `smtp` method [\#1483](https://github.com/sympa-community/sympa/issues/1483).
+- The `antispam_feature` parameter was deprecated.  Instead, choose appropriate scenario with `spam_status` parameter [\#1470](https://github.com/sympa-community/sympa/pull/1470).  In particular, if you wish to disable this feature, set "`spam_status none`".
+- The Command line tools under `$SCRIPTDIR` either were deprecated or were integrated into the `sympa` command line tool.  See [\#1386](https://github.com/sympa-community/sympa/issues/1386) for details.
+
+**Implemented enhancements:**
+
+- Switch Font Awesome from 4 to 6 Free [\#1656](https://github.com/sympa-community/sympa/issues/1656)
+- Delete user account completely [\#1564](https://github.com/sympa-community/sympa/pull/1564)
+
+**Fixed bugs:**
+
+- Skip initial notification email for new user with nomail reception [\#1550](https://github.com/sympa-community/sympa/pull/1550)
+- Fix "sympa test soap" crashes due to undefined subroutine [\#1593](https://github.com/sympa-community/sympa/pull/1593)
+- Fix description for add CLI command bug [\#1565](https://github.com/sympa-community/sympa/pull/1565)
+- [CVE-2021-32850] Potential XSS in jquery-minicolors [\#1561](https://github.com/sympa-community/sympa/issues/1561)
+- Spurious error log adding subscriber [\#1532](https://github.com/sympa-community/sympa/issues/1532)
+- Spurious error log during upgrade on removing nonexisting column [\#939](https://github.com/sympa-community/sympa/issues/939)
+- [CVE-2023-24038] Sympa::HTMLSanitizer: Bug in HTML::StripScripts, ReDoS with style attribute [\#1573](https://github.com/sympa-community/sympa/issues/1573)
+- sympa.wsdl is incomplete [\#1548](https://github.com/sympa-community/sympa/issues/1548)
+
+**Merged pull requests:**
+
+- Adding translation catalogs for Georgian (ka) by request [\#1596](https://github.com/sympa-community/sympa/pull/1596)
+- Update support/sync_translation.sh [\#1556](https://github.com/sympa-community/sympa/pull/1556)
+- Replace obsolete Ansible role in README [\#1558](https://github.com/sympa-community/sympa/pull/1558)
+- Improve wording in README.support document. [\#1553](https://github.com/sympa-community/sympa/pull/1553)
+- Update copyright notices, add documentation and correct some typos [\#1552](https://github.com/sympa-community/sympa/pull/1552)
+
+## [6.2.71b.1](https://github.com/sympa-community/sympa/tree/6.2.71b.1) (2022-12-15)
+
+[Full Changelog](https://github.com/sympa-community/sympa/compare/6.2.70...6.2.71b.1)
+
+**Incompatible changes:**
+
+- The `dkim` authentication method for scenarios was obsoleted.  Now it is a synonym of `smtp` method [\#1483](https://github.com/sympa-community/sympa/issues/1483).
+- The `antispam_feature` parameter was deprecated.  Instead, choose appropriate scenario with `spam_status` parameter [\#1470](https://github.com/sympa-community/sympa/pull/1470).  In particular, if you wish to disable this feature, set "`spam_status none`".
+- The Command line tools under `$SCRIPTDIR` either were deprecated or were integrated into the `sympa` command line tool.  See [\#1386](https://github.com/sympa-community/sympa/issues/1386) for details.
+
+**Implemented enhancements:**
+
+- RFC 8058 One Click Unsubscribe [\#1210](https://github.com/sympa-community/sympa/issues/1210)
+- SympaSOAP: List description with SOAP [\#1542](https://github.com/sympa-community/sympa/issues/1542)
+- WWSympa: Authentication mechanism that does not require login if the authentication module allows it [\#1497](https://github.com/sympa-community/sympa/issues/1497)
+- Easy way to get permalinks for messages in web archives [\#1441](https://github.com/sympa-community/sympa/issues/1441)
+- Deprecate conf\_2\_db feature [\#1424](https://github.com/sympa-community/sympa/issues/1424)
+- Deprecate scripts under bin/ [\#1386](https://github.com/sympa-community/sympa/issues/1386)
+- CLI: Allow hyphens in options [\#1533](https://github.com/sympa-community/sympa/pull/1533)
+- Add --noout option to sympa command line \(see \#1518\) [\#1527](https://github.com/sympa-community/sympa/pull/1527)
+- Update `support/xgettext.pl` [\#1511](https://github.com/sympa-community/sympa/pull/1511)
+- Use DSN for the message to notify moderation [\#1508](https://github.com/sympa-community/sympa/pull/1508)
+- Improve "set" request handler [\#1503](https://github.com/sympa-community/sympa/pull/1503)
+- Update default of anonymous\_header\_fields parameter [\#1502](https://github.com/sympa-community/sympa/pull/1502)
+- Update SMTP status codes [\#1467](https://github.com/sympa-community/sympa/pull/1467)
+- Forwarded messages should also be ARC sealed if possible [\#1457](https://github.com/sympa-community/sympa/pull/1457)
+- ARC: Add Authentication-Results: field \(AR\), if useful one is not found [\#1453](https://github.com/sympa-community/sympa/pull/1453)
+- ARC: When ARC seal was added, DKIM signing should be forced [\#1450](https://github.com/sympa-community/sympa/pull/1450)
+
+**Fixed bugs:**
+
+- WWSympa: `msg` (ex. `arcsearch_id`) crashes [\#1551](https://github.com/sympa-community/sympa/pull/1551)
+- Some bugs with DKIM / ARC [\#1543](https://github.com/sympa-community/sympa/pull/1543)
+- Custom attributes synchronization fail [\#1535](https://github.com/sympa-community/sympa/issues/1535)
+- dmarc\_protection.phrase "From" format INCORRECT [\#1498](https://github.com/sympa-community/sympa/issues/1498)
+- accessing db\_additional\_subscriber\_fields fields in footer vs. tt2 templates [\#1494](https://github.com/sympa-community/sympa/issues/1494)
+- \[WWSympa\] Cannot allow owners to manage editors of a distribution list [\#1488](https://github.com/sympa-community/sympa/issues/1488)
+- Deprecate "dkim" authentication method for scenarios [\#1483](https://github.com/sympa-community/sympa/issues/1483)
+- Options for welcome\_return\_path & remind\_return\_path do not describe their function [\#1475](https://github.com/sympa-community/sympa/issues/1475)
+- Template error parsing not detected [\#1474](https://github.com/sympa-community/sympa/issues/1474)
+- Excess header fields are shown in the web archives [\#1447](https://github.com/sympa-community/sympa/issues/1447)
+- include\_sql\_query requests unuseful parameters for CSV database driver [\#1437](https://github.com/sympa-community/sympa/issues/1437)
+- include\_sql\_query broken for CSV database driver [\#1434](https://github.com/sympa-community/sympa/issues/1434)
+- Logs reflect Failure when include from SQL is carried out during nosync\_time\_ranges [\#1429](https://github.com/sympa-community/sympa/issues/1429)
+- Exim: Failed to get envelope sender in "Return-path:" field [\#1354](https://github.com/sympa-community/sympa/issues/1354)
+- WWSympa crashes by topics.conf with inappropriate format [\#1242](https://github.com/sympa-community/sympa/issues/1242)
+- `mailto:` link cannot be detected by some MUAs [\#1124](https://github.com/sympa-community/sympa/issues/1124)
+- Shared document configuration in edit list even if feature turned off [\#872](https://github.com/sympa-community/sympa/issues/872)
+- Fix 'sympa config' command return code to be 0 when there are no changes [\#1518](https://github.com/sympa-community/sympa/pull/1518)
+- Fix various typos in source comments [\#1517](https://github.com/sympa-community/sympa/pull/1517)
+- Fix SQLite upgrade with lowercase types [\#1516](https://github.com/sympa-community/sympa/pull/1516)
+- Let some obsoleted parameters be retired and add convenient spam\_status scenarios [\#1470](https://github.com/sympa-community/sympa/pull/1470)
+- WWSyjmpa: Page size cannot be changed on review and reviewbouncing [\#1466](https://github.com/sympa-community/sympa/pull/1466)
+- Import SOAP encoding schema in WSDL [\#1456](https://github.com/sympa-community/sympa/pull/1456)
+
+**Closed issues:**
+
+- New Sympa Logo [\#665](https://github.com/sympa-community/sympa/issues/665)
+
+**Merged pull requests:**
+
+- Update translations [\#1525](https://github.com/sympa-community/sympa/pull/1525)
+- Adjust branch in support README [\#1530](https://github.com/sympa-community/sympa/pull/1530)
+- Adding translation catalogs for Latvian \(lv\) by request [\#1520](https://github.com/sympa-community/sympa/pull/1520)
+- Adding GH workflow to submit the PR for translation [\#1515](https://github.com/sympa-community/sympa/pull/1515)
+- Remove OChangeLog [\#1471](https://github.com/sympa-community/sympa/pull/1471)
+
 ## [6.2.70](https://github.com/sympa-community/sympa/tree/6.2.70) (2022-11-11)
 
 [Full Changelog](https://github.com/sympa-community/sympa/compare/6.2.68...6.2.70)
@@ -459,7 +560,7 @@ No changes.
 
 **Changes** (since 6.2.54) **:**
 
-- `http_host` parameter has been deprecated by the new `wwsympa_url_local` parameter [\#916](https://github.com/sympa-community/sympa/pull/916) ([ikedas](https://github.com/ikedas)). If you used `http_host` parameter, you possiblly need removing it (See [note](https://sympa-community.github.io/manual/upgrade/notes.html#from-version-prior-to-6256)).
+- `http_host` parameter has been deprecated by the new `wwsympa_url_local` parameter [\#916](https://github.com/sympa-community/sympa/pull/916) ([ikedas](https://github.com/ikedas)). If you used `http_host` parameter, you possibly need removing it (See [note](https://sympa-community.github.io/manual/upgrade/notes.html#from-version-prior-to-6256)).
 
 **Implemented enhancements:**
 
@@ -1597,4 +1698,6 @@ Chrome and Internet Explorer.
   - \[12848\] \[\#10808\] \[Reported by X. Bachelot\] Suppressing some warnings by C compiler at build time.
 
 ---
-See the files [ONEWS](ONEWS) and [OChangeLog](OChangeLog) about earlier history.
+See the file [ONEWS](ONEWS) and the commit log of
+[Historic releases of Sympa](https://github.com/sympa-community/historic-sympa)
+about earlier history.