Fixes:

• Security fix to prevent XSS injections in demo pages
• Security fix to prevent reading file urls

What's Changed

• backport: github workflows by @simonseyock in #1098
• Security fixes 2.x.x by @simonseyock in #1104

Full Changelog: 2.2.0...2.2.1

Fixes:

• Security fix to prevent XSS injections in demo pages
• Security fix to prevent reading file urls

What's Changed

• backport: github workflows by @simonseyock in #1099
• Security fixes 1.x.x by @simonseyock in #1105
• fix: docker build and correct release version by @simonseyock in #1106
• fix: remove docs build by @simonseyock in #1107
• fix: dockerbuild by @simonseyock in #1108
• fix(dockerbuild): use github.ref_name as mapproxy version by @simonseyock in #1109

Full Changelog: 1.16.0...1.16.1

Improvements:

• Added docs regarding OGC API support

Fixes:

• WMTS Demo now works if kvp is disabled

What's Changed

• Restful wmts demo by @simonseyock in #1087
• docs: add docs for use of mapproxy with pygeoapi by @simonseyock in #1084

Full Changelog: 4.0.0...4.0.1

Breaking:

• Removed legacy seed configuration.
• Removed Python 3.8 support.
• Removed riak support as the client library is not maintained anymore. If you rely on the riak support you have to
  continue to use version 3.1.3 with Python 3.8.

Improvements:

• The tile removal and refresh code is improved by simplifying the usage of remove_timestamp and before_timestamp
  and complementing them by new remove_all and refresh_all parameters.
• Add a default logging config to the docker images.
• Add environment variables to the docker images to enable and configure multiapp support.
• Added a docker compose file to make it easy to run & build docker images and to use as reference.
• Updated and improved the documentation about usage of the docker images.

Maintenance:

• Use python build instead of invoking setup.py.
• Removal of the six library.
• Removed array initializers in function signatures.

Fixes:

• Added AdminstrativeArea to WMTS serviceprovider metadata.
• Fixed spelling & grammar in seed.rst.
• Fixed problem with combined usage of coverage and the remove_all cache config parameters.
• Fixed missing dimension parameters in the remove_tile functions of various caches.

What's Changed

• Fix spelling & grammar in seed.rst by @petersmythe in #1056
• feat: use python build instead of invoking setup.py by @simonseyock in #1047
• chore(deps): bump JamesIves/github-pages-deploy-action from 4.6.9 to 4.7.2 by @dependabot in #1055
• chore(deps): bump cryptography from 43.0.1 to 44.0.0 by @dependabot in #1051
• chore(deps): bump pytz from 2023.3.post1 to 2024.2 by @dependabot in #1048
• fix: remove_all with coverages by @simonseyock in #1030
• AdminstrativeArea added to WMTS serviceprovider metadata. by @emacgillavry in #1043
• finish six removal by @a-detiste in #1066
• feat: remove python 3.8 support by @simonseyock in #1064
• chore(deps): bump cffi from 1.16.0 to 1.17.1 by @dependabot in #1058
• chore(deps): bump python-dateutil from 2.8.2 to 2.9.0.post0 by @dependabot in #1059
• fix: add dimensions arg to delete_tile functions by @simonseyock in #1079
• fix: remove array initializers as default values for function arguments by @simonseyock in #1081
• Improve docker setup by @simonseyock in #1082
• Multiapp docker by @simonseyock in #1083

New Contributors

• @emacgillavry made their first contribution in #1043
• @a-detiste made their first contribution in #1066

Full Changelog: 3.1.3...4.0.0

Maintenance:

• Several dependencies for the tests and GitHub actions have been updated
• Spelling and grammar mistakes in the documentation corrected

Fixes:

• The chmod to update file permissions is now only called if the file was freshly created
• A bug with clipping polygons that become multi polygons due to the clipping is now fixed

What's Changed

• chore(deps): bump waitress from 2.1.2 to 3.0.2 by @dependabot in #1032
• fix: only use chmod if the file was created by @simonseyock in #1042
• fix: correctly iterate over multi polygon by @simonseyock in #1044
• Update configuration.rst by @petersmythe in #1046
• chore(deps): bump beautifulsoup4 from 4.12.2 to 4.12.3 by @dependabot in #1037
• chore(deps): bump docker from 7.0.0 to 7.1.0 by @dependabot in #1039
• chore(deps): bump urllib3 from 1.26.19 to 1.26.20 by @dependabot in #1040
• chore(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 by @dependabot in #1045

Full Changelog: 3.1.2...3.1.3

Maintenance:

• Several dependencies for the tests and github actions have been updated

Fixes:

• Metadata URLs are now required to have a url, type and format
• The layers of a wms req are now correctly splitted at , for validation
• The validation for seeding configs is fixed
• Single color tiles are now created with configured file_permissions

What's Changed

• fix: use array instead of dict to iterate over in same grid check by @simonseyock in #1029
• fix: split supported layers if they are given as a string by @simonseyock in #1028
• Metadataurl type required by @simonseyock in #1026
• fix: create single color tiles with the correct permissions by @simonseyock in #1033
• chore(deps): bump requests from 2.32.2 to 2.32.3 by @dependabot in #994
• chore(deps): bump responses from 0.24.1 to 0.25.3 by @dependabot in #996
• chore(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.28.0 by @dependabot in #1015
• chore(deps): bump packaging from 23.2 to 24.2 by @dependabot in #1021
• chore(deps): bump JamesIves/github-pages-deploy-action from 4.6.4 to 4.6.9 by @dependabot in #1022
• chore: update dependencies depending on python versions by @simonseyock in #1035

Full Changelog: 3.1.1...3.1.2

Maintenance:

• Werkzeug version is no longer pinned and can be chosen freely.

Fixes:

• The permission handling for file locks now also sets permissions on the files not just on the directories.

What's Changed

• Removed pin of werkzeug version in setup.py by @ricardogsilva in #1013
• Update release doc by @simonseyock in #1018
• docs: correct docs for autodetect coverages by @simonseyock in #1023
• feat: better exception logging in the seeding tasks by @simonseyock in #1024
• fix: use file permissions also for lock files by @simonseyock in #1025

New Contributors

• @ricardogsilva made their first contribution in #1013

Full Changelog: 3.1.0...3.1.1

Improvements:

• Add new config parameters file_permissions and directory_permissions to set file and directory
  permissions on newly created cache files and directories.

Maintenance:

• Dependency updates

Fixes:

• Fix transparency in TMS demo page.

What's Changed

• chore(deps): bump JamesIves/github-pages-deploy-action from 4.5.0 to 4.6.4 by @dependabot in #991
• chore(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #990
• chore(deps): bump pycparser from 2.21 to 2.22 by @dependabot in #988
• chore(deps): bump websocket-client from 1.7.0 to 1.8.0 by @dependabot in #987
• chore(deps): bump soupsieve from 2.0.1 to 2.6 by @dependabot in #986
• chore(deps): bump cryptography from 43.0.0 to 43.0.1 by @dependabot in #992
• chore(deps): bump zipp from 3.19.1 to 3.20.1 by @dependabot in #984
• feat: improve ensure_directory and add tests by @simonseyock in #1006
• Permissions fix static legend source by @simonseyock in #1007
• feat: file permissions for geopackage by @simonseyock in #1008
• fix: always use cached connection, add test by @simonseyock in #1009
• Permissions compact by @simonseyock in #1010
• Permissions legend by @simonseyock in #1011
• doc: document permission configuration by @simonseyock in #1012
• Fix transparency in TMS demo page by @RichyHBM in #1016
• Initial work on configurable file and dir permissions by @weskamm in #997
• dev: prepare 3.1.0 release by @hblitza in #1017

New Contributors

• @RichyHBM made their first contribution in #1016

Full Changelog: 3.0.1...3.1.0

Fixes:

• Fix capabilities links in demo page and config template
• Trivy report format

What's Changed

• Fix trivy result upload by @weskamm in #982
• Fix capabilities links in demo and config template by @weskamm in #981

Full Changelog: 3.0.0...3.0.1

Breaking:

• Add proper XML Exception when service parameter disabled / invalid or missing
  In the past MapProxy returned WMS Capabilities when no explicit service parameter was given in
  GetCapabilities requests. With this change, an OGC exception will be returned instead.
  Invalid service types now also return a proper exception instead of an internal error.
  Besides, the status code of exception responses now have a 400 or 500 code instead of 200
  for better conformity.

Maintenance:

• Add test for seeding sqlite cache
• Documentation updates and clarifications
• Dependency updates

Fixes:

• Fix gh-pages workflow

What's Changed

• feat: add test for seeding sqlite cache by @simonseyock in #934
• ci: fix gh-pages workflow by @simonseyock in #964
• Minor documentation updates 2 by @zabop in #965
• Add proper XML Exception when service parameter disabled / invalid or missing by @weskamm in #967
• build(deps): bump actions/cache from 3 to 4 by @dependabot in #877
• chore(deps): bump certifi from 2023.11.17 to 2024.7.4 by @dependabot in #970
• Add flaky annotation to sporadically failing tests by @weskamm in #975
• chore(deps): bump moto from 4.2.12 to 5.0.13 by @dependabot in #974
• chore(deps): bump webob from 1.8.7 to 1.8.8 by @dependabot in #973
• chore(deps): bump requests from 2.31.0 to 2.32.2 by @dependabot in #971
• chore(deps): bump urllib3 from 1.26.18 to 1.26.19 by @dependabot in #969
• chore(deps): bump lxml from 4.9.4 to 5.3.0 by @dependabot in #979
• chore(deps): bump cryptography from 41.0.7 to 43.0.0 by @dependabot in #980
• chore(deps): bump pytest from 7.4.3 to 8.3.2 by @dependabot in #978
• chore(deps): bump zipp from 3.17.0 to 3.19.1 by @dependabot in #972
• chore(deps): bump pillow from 10.2.0 to 10.3.0 by @dependabot in #918
• chore(deps): bump aws-sam-translator from 1.82.0 to 1.91.0 by @dependabot in #976
• chore(deps): bump s3transfer from 0.9.0 to 0.10.2 by @dependabot in #977

Full Changelog: 2.2.0...3.0.0