v2017.08.14

Technical:

• Add AntiForgery tokens to some actions that were missing them #4490

Functional:

• Merge in feature-redesign (#3770)
• Fix calculation of stats (#4513)

v2017.06.14

For more details, see the following deployment record:

#4068

Changes since the previous release:

• [730f54e] SemVer2 support #3758
• [83d258d], [344e6b2], [41e8931], [5316f6a] Update Terms of Use
• [acee6f7] Fix migration issue (#3865)
• [36d594f] Support MinClientVersion <= 4.1.0.0 (#3860)
• [ba13855], [7a586a6] Front page V3 feed compatibility should mention NuGet 4.x/VS 2017 (#3729)
• [b84d965] Improved the Gallery's Screen Reader Accessibility (#3902)
• [cdcb6a8] Pressing edit or undo on the verify package page does not reset focus (#3919)
• [b2c49c8] Adding recommended index to the Packages table (#3950)
• [b9d3484] Improved NuGet Gallery's Accessibility (#3936)
• [ce1bf4e] Update CSS to show focused elements. (#3939)
• [319bc79] Make PackageDownloadsDetail and PackageDownloadsByVersion graphs update without refreshing the page (#3951)
• [74cd45a] Scoped API keys UI - disabled elements are accessible using tab (#3963)
• [6a7b75c] Fix: "Example glob patterns" button and "close" button are not accessible using keyboard (#3968)
• [9ea3066] Key creation telemetry (#3855)
• [a1bc005] Temp keys policy onboarding (#3854)
• [cdc08cb] Temp keys telemetry and auditing (#3945)
• [3f25393] Allow auto outlining. Fix issue with outline on click. (#3983)
• [eddf514] Parse tags list before comparing on package validation completion (#3992)
• [d0bc5c0] Update Report Abuse Page (#3985)
• [863b88b] Fixed Report Abuse Page's Accessibility (#4001)
• [49747f1] Use ServerCommon's Response Code Processor (#3999)
• [b0edded] On package validation failure an actionable error message should be displayed. #3916
• [95f00cd] Fix the date format on stats page (#4057)
• [0aea0dd] Update telemetry processors (#4059)
• [2319b4b] Average download shown incorrectly when its 1.x #4039
• [68e84b6] Support for policy propagation (#4061)
• Gallery V2 autocomplete endpoint should be hijacked to search service #4097

v2017.04.28

For more details, see the following deployment record:

#3830

Changes since the previous release:

• [ea01818] Fix for 2483 Author and description null checks & tests (#3741)
• [b24f084] Update flaky assert dependent on system clocks (#3771)
• [718f406] Code and tests for issue 3732 (#3735)
• [a01b0f8] PR#3741 test fix, per integration with PR#3728 (#3794)
• [c3cac98] Ignore everything under App_Data (#3804)
• [d80197f] IsVerificationKeyUsed telemetry fix (#3806)
• [cd091c7] fix issue 3790 (#3798)
• [aaf3d8c] Fix gallery audit trail does not show full version string (#3801)
• [b5fd9b0] 100% Table width for Manage My Package overview (#3783)
• [53e74ae] Temp keys user policies (#3820)
• [764119d] Functional tests (disabled) for temp keys policies (#3829)
• [d0d025d] Log unhandled exceptions (#3833)
• [547931a] PR 3829 feedback (#3838)
• [f862709] Simplified development setup

v2017.03.27

For more details, see the following deployment record:

#3611

Changes since the previous release:

• [e6dd6e4] Change telemetry time to use correct format (#3690)
• [551fd86] UpdateIsLatest concurrent unlist fix (#3695)
• [9ccd227] Revert UpdateIsLatest optimistic concurrency changes (#3707)

The gallery will be deployed. There are no schema changes.

v2017.03.22

For more details, see the following deployment record:
#3611

The gallery will be deployed. There are no schema changes.

v2017.02.24

Full Changelog

• Contact-Page: Add Required-badge and use fieldset (#3418) … 48cfd9b
• Merge remote-tracking branch 'origin/master' into dev fcf18bb
• added required badge (#3415) d55c629
• Add certificate fingerprint (thumbprint) for new nuget.org SSL certif… … d4b91ba
• Enable trace listeners for app insights (#3523) 2b94a5e
• Prevent $BuildBranch overwriting (#3528) f8405f3
• Update Octopus link (#3533) 88624ed
• Fix P1 and P2 functional tests (#3539) … cf3c6df
• Make functional tests output xml instead of html and use VSTest inste… … 4b99fbf
• Add Deploy-StaticContent.ps1 (#3529) 2ed3fee
• Allow package title reuse with soft-deleted package (#3570) 81f0cd5
• refactor test hook (#3580) 5949008
• Enable delay signing on NuGetGallery.Core (#3583) … 6cb94e5
• Create symbols package for NuGetGallery.Core (#3584) 8ed911b
• Don't sign NuGetGallery.Core quite yet (NuGetDeployment is broken) (#… … e9d6651
• Import sign.targets only if it exists (#3590) … 32f16af
• Scoped api keys - bug fixes (#3592) … e79a969
• Fix api key add/remove e-mail message (#3591) … a151dae

Deployment 2017.01.30

Full details are available here: #3510

Changes

• Functional:
  • Multiple API keys (#3246)
  • Turn on query filtering on prod (#3464)
  • Handle case where $filter makes Package(Id=...,Version=...) yield an empty result (#3435)
  • Do not allow login on read-only gallery (#3503)

Deployment 2017.01.27

Full details are available here: #3508

Changes

• Build
  • Improved build script (PR #3477)
  • Enable UseBasicParsing on PowerShell web requests (PR #3488)
• Test
  • Allow functional tests to run against any URL (issue #3483, PR #3489)
  • Fix functional tests (issue NuGet/Engineering#188, PR #3501)
• Functional
  • Filter out unsupported credentials (PR #3479)

Deployment 2017.01.17

Full details are available here: #3476

Changes

• Functional
  • None
• Technical
  • Prevent overwriting of packages in blob storage (#3457)
  • Delete uploaded package from blob storage if saving changes to DB fails (#3469)
  • Enforce HttpOnly and Secure cookie attributes (#3463)

Deployment 2017.01

Changes

• Functional:
  • Filter specific OData query patterns. https://github.com/NuGet/Home/wiki/Filter-OData-query-requests. (#3373)
  • Enable angle brackets search queries.(#3388)
• Technical
  • Add more package validation to v2 API push (#3446)