Maintenance:

• Removed code to be able to start up MapProxy without PIL.

Fixes:

• Add python-dateutil dependency to avoid errors on startup.
• Add ogcapi to config-schema.json to avoid warnings on startup.

What's Changed

• feat: remove no PIL compatibility by @simonseyock in #1321
• OGCAPI related fixes by @rouault in #1337
• dev: prepare 6.0.1 release by @simonseyock in #1338

Full Changelog: 6.0.0...6.0.1

Breaking:

• The extension for mbtiles used in MapProxy was wrong. It used .mbtile instead of .mbtiles. Existing files in
  caches have to be renamed! Here is a small script to change all files in a directory recursively:
  find . -type f -name "*.mbtile" -exec sh -c 'mv "$1" "${1%.mbtile}.mbtiles"' _ {} \;
• lxml was updated. The new version is much stricter in its inputs and administrators might have to adjust
  featureinfo services to output valid HTML.

Improvements:

• New source types ogcapitiles and ogcapimaps are now available! See docs for further information.
• New util gridconf-from-ogcapitilematrixset to fetch grids from an OGC API compliant web service was added.
  See docs for further information.
• MapProxy now offers an OGCAPI compliant service for OGC API Maps and OGC API Tiles. Including landing page and
  preview maps! See docs for further information.
• The SERVICE parameter for WMS GetMap requests is no longer mandatory as according to spec.
• Added test pipeline for the documentation.
• The GitHub actions now have better fitting permissions, improving the security.
• WMTS capabilities now include OperationsMetadata for restful mode.
• TMS capabilities now include metadata similar to WMS and WMTS.

Maintenance:

• Some fixes in the documentation.
• As shapely is no longer optional, code to check for its existence has been removed.

Fixes:

• An error regarding unicode strings in the featureinfo parsing was fixed.
• An error in the debug logging of configurations was fixed

What's Changed

• fix(ows): make service non mandatory for WMS GetMap requests by @simonseyock in #1292
• Doc: fix warnings, and build doc as part of pull requests with warnings as errors by @rouault in #1266
• lint.yml and test.yml: set read permission only, and add concurrency … by @rouault in #1267
• Add ogcapitiles and ogcapimaps source types by @rouault in #1268
• Use correct command for Waitress serve by @symroe in #1294
• fix error: ValueError: Unicode strings with encoding declaration by @MarkusAlbrechtSWM in #1271
• restful encoding / style isdefault and urn:ogc:def:crs for SupportedCRS by @hschiebold in #1186
• chore(deps): bump pluggy from 1.5.0 to 1.6.0 by @dependabot[bot] in #1261
• chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1303
• fix: using correct extension for mbtiles by @simonseyock in #1251
• feat: remove code that makes shapely optional by @simonseyock in #1180
• Update lxml by @simonseyock in #1306
• chore(deps): bump pyasn1 from 0.5.1 to 0.6.1 by @dependabot[bot] in #1308
• Optional tms metadata by @hschiebold in #1160
• Add support for OGC API Maps and Tiles service (server side) by @rouault in #1284
• Add some license headers and files by @weskamm in #1314
• fix: do not sort keys of debug config output by @simonseyock in #1325
• dev: prepare 6.0.0 release by @simonseyock in #1327

New Contributors

• @symroe made their first contribution in #1294
• @MarkusAlbrechtSWM made their first contribution in #1271

Full Changelog: 5.1.1...6.0.0

Improvements:

• Better logging of http errors if mapproxy requests tiles

Fixes:

• Fixed logger for merged configuration files

What's Changed

• Add improved logging on http error by @navignaw in #1285
• fix(logging): actually output argument for mapproxy config debug log by @simonseyock in #1290
• dev: prepare 5.1.1 release by @simonseyock in #1291

New Contributors

• @navignaw made their first contribution in #1285

Full Changelog: 5.1.0...5.1.1

Improvements:

• Added query_layers option to wms_opts to be able to configure the QUERY_LAYERS of the wms request
• Added workflow to republish docker images if the base image changed, i.e. for security updates

Maintenance:

• Fixed some spelling and debug output
• Updated various dependencies

Fixes:

• Fixes some errors in the json schema regarding use_direct_level_from and use_direct_res_from
• Fixes an error with merging resolutions of grids

What's Changed

• Update mbtiles.py by @SantiagoHorcajo in #1198
• Fix test failure with jsonschema 4.25. by @sebastic in #1240
• chore(deps): bump python-jose from 3.3.0 to 3.5.0 by @dependabot[bot] in #1152
• chore(deps): bump jsonpickle from 3.0.2 to 4.1.1 by @dependabot[bot] in #1158
• chore(deps): bump requests from 2.32.3 to 2.32.4 by @dependabot[bot] in #1167
• chore(deps): bump pillow from 11.2.1 to 11.3.0 by @dependabot[bot] in #1193
• chore(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in #1223
• chore(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.33.1 by @dependabot[bot] in #1248
• chore(deps): bump actions/setup-python from 5 to 6 by @dependabot[bot] in #1249
• ci: update pillow version in test workflow by @simonseyock in #1250
• chore(deps): bump requests from 2.32.3 to 2.32.5 by @dependabot[bot] in #1229
• chore(deps): bump responses from 0.25.3 to 0.25.8 by @dependabot[bot] in #1221
• chore(deps): bump pytest-rerunfailures from 13.0 to 16.0.1 by @dependabot[bot] in #1241
• wms opts query_layers for featurinfo by @hschiebold in #1162
• Update sources.rst by @petersmythe in #1203
• chore(deps): bump decorator from 5.1.1 to 5.2.1 by @dependabot[bot] in #1252
• chore(deps): bump zipp from 3.20.1 to 3.23.0 by @dependabot[bot] in #1253
• chore(deps): bump soupsieve from 2.6 to 2.8 by @dependabot[bot] in #1254
• chore(deps): bump cffi from 1.17.1 to 2.0.0 by @dependabot[bot] in #1255
• chore: update mapproxy docker images when base images are updated by @ahennr in #1281
• Fix merge res by @simonseyock in #1287
• Fix use_direct_from_* spec by @simonseyock in #1257
• dev: prepare 5.1.0 release by @simonseyock in #1288

New Contributors

• @SantiagoHorcajo made their first contribution in #1198
• @hschiebold made their first contribution in #1162

Full Changelog: 5.0.0...5.1.0

Breaking:

• The dependencies lxml, shapely, pyproj, gdal and PyYAML are no longer optional

Maintenance:

• By default lxml, shapely, pyproj, Pillow and PyYAML are now installed via pip and are not recommended to be installed
  as apt packages anymore

Fixes:

• The alpine image uses the python3 plugin for uwsgi correctly
• An lxml encoding error is fixed

What's Changed

• fix: load uwsgi python3 plugin for alpine image by @simonseyock in #1169
• feat: use pip dependencies instead of system packages, make lxml mandatory by @simonseyock in #1175
• Fix decode lxml by @simonseyock in #1176
• docs: add docs about system python by @simonseyock in #1179
• dev: prepare 5.0.0 release by @simonseyock in #1181

Full Changelog: 4.1.2...5.0.0

Maintenance:

- Set Pillow versions in setup.py to actually supported versions
- Using PIL instead of Pillow was not working since Python 2, so it is removed from setup.py
- Using a higher pyproj version for Python 3.13 is necessary
- Added a test for an older Pillow version with Python 3.9

What's Changed

• chore(deps): bump certifi from 2024.7.4 to 2025.4.26 by @dependabot in #1130
• fix(deps): increase minimum version of pillow to 9.4.0 by @simonseyock in #1150
• dev: prepare 4.1.2 release by @simonseyock in #1151

Full Changelog: 4.1.1...4.1.2

Improvements:

• The scale denominator in the WMTS capabilites is now rounded to 10 digits after the decimal place.

What's Changed

• fix: round scale denominator to 10 digits after decimal point by @simonseyock in #1124
• chore(deps): bump rsa from 4.9 to 4.9.1 by @dependabot in #1126
• chore(deps): bump pillow from 10.3.0 to 11.2.1 by @dependabot in #1112
• dev: prepare 4.1.1 release by @simonseyock in #1127

Full Changelog: 4.1.0...4.1.1

Improvements:

• It is now possible to integrate the grid name into paths for AWS buckets. This allows storage of tiles for multiple
  grids in the same bucket.
• We are returning a 404 http status code instead of a 500 if no legend graphic is found for a service.
• We are using utf-8 in GetFeatureInfo requests now.

Maintenance:

• Updated some dependencies.
• Updated the GitHub runner versions.
• Refactored the grid.py file into multiple files.
• Removed the implementation of odict in favour of the builtin OrderedDict class.
• Added support for python 3.13.
• Skipping permissions tests if tests are run with root user. This is necessary to build and test MapProxy in a chroot
  environment which is used to package MapProxy for Debian. Normal testing is not affected.

Fixes:

• Fixed deprecation warnings for utctime, sqlite, ImageMath.eval, mock_s3.
• Fix entrypoint.sh to create default MapProxy configurations if none are found.
• Allowed the trivy security scan workflow to write the results to the GitHub security tab.
• We are not allowing the deprecated TLS Versions 1.1 or lower for connections to servers anymore.

What's Changed

• refactor: split grid.py and move all bbox related functions to util.bbox by @simonseyock in #1113
• ci: update ubuntu version in github workflows by @simonseyock in #1114
• fix: return 404 instead of 500 if no legendgraphic is available for layer by @simonseyock in #1115
• fix: use utf-8 in get feature info requests by @simonseyock in #1116
• chore(deps): bump cryptography from 44.0.0 to 44.0.2 by @dependabot in #1077
• chore(deps): bump JamesIves/github-pages-deploy-action from 4.7.2 to 4.7.3 by @dependabot in #1075
• Skip permissions test for root by @simonseyock in #1119
• fix: make entrypoint sh compatible by @simonseyock in #1118
• fix: remove odict in favour of builtin OrderedDict by @simonseyock in #1085
• Add python3.13 support by @simonseyock in #1088
• feat: add include_grid_name option for S3 cache configuration by @djbulsink in #1111
• fix: allow trivy to write security results to github by @simonseyock in #1120
• chore(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot in #1078
• chore(deps): bump pyparsing from 3.1.1 to 3.2.3 by @dependabot in #1093
• fix: remove usage of deprecated ssl wrap_socket method by @simonseyock in #1121
• chore(deps): bump wrapt from 1.16.0 to 1.17.2 by @dependabot in #1072
• Do not use tls1.1 by @simonseyock in #1123
• dev: prepare 4.1.0 release by @simonseyock in #1122

New Contributors

• @djbulsink made their first contribution in #1111

Full Changelog: 4.0.2...4.1.0

Fixes:

• Security fix to prevent XSS injections in demo pages
• Security fix to prevent reading file urls

What's Changed

• docs: update release process to use pull requests by @simonseyock in #1100
• fix: remove unneeded global statement by @simonseyock in #1101
• Security fixes by @simonseyock in #1102

Full Changelog: 4.0.1...4.0.2

Fixes:

• Security fix to prevent XSS injections in demo pages
• Security fix to prevent reading file urls

What's Changed

• backport: github workflows by @simonseyock in #1097
• Security fixes 3.x.x by @simonseyock in #1103

Full Changelog: 3.1.3...3.1.4