14 KiB
Release Notes
Release Early, Release Often
— Eric S. Raymond, The Cathedral and the Bazaar.
Versioning
Minor version numbers (0.0.x) are used for changes that are API compatible. You should be able to upgrade between minor point releases without any other code changes.
Medium version numbers (0.x.0) may include API changes, in line with the deprecation policy. You should read the release notes carefully before upgrading between medium point releases.
Major version numbers (x.0.0) are reserved for substantial project milestones. No major point releases are currently planned.
Deprecation policy
REST framework releases follow a formal deprecation policy, which is in line with Django's deprecation policy.
The timeline for deprecation of a feature present in version 1.0 would work as follows:
-
Version 1.1 would remain fully backwards compatible with 1.0, but would raise
PendingDeprecationWarning
warnings if you use the feature that are due to be deprecated. These warnings are silent by default, but can be explicitly enabled when you're ready to start migrating any required changes. For example if you start running your tests usingpython -Wd manage.py test
, you'll be warned of any API changes you need to make. -
Version 1.2 would escalate these warnings to
DeprecationWarning
, which is loud by default. -
Version 1.3 would remove the deprecated bits of API entirely.
Note that in line with Django's policy, any parts of the framework not mentioned in the documentation should generally be considered private API, and may be subject to change.
Upgrading
To upgrade Django REST framework to the latest version, use pip:
pip install -U djangorestframework
You can determine your currently installed version using pip freeze
:
pip freeze | grep djangorestframework
2.2.x series
Master
- Bugfix: request.DATA should return an empty
QueryDict
with no data, notNone
. - Bugfix: Remove unneeded field validation, which caused extra queries.
2.2.0
Date: 13th Feb 2013
- Python 3 support.
- Added a
post_save()
hook to the generic views. - Allow serializers to handle dicts as well as objects.
- Deprecate
ManyRelatedField()
syntax in favor ofRelatedField(many=True)
- Deprecate
null=True
on relations in favor ofrequired=False
. - Deprecate
blank=True
on CharFields, just userequired=False
. - Deprecate optional
obj
argument in permissions checks in favor ofhas_object_permission
. - Deprecate implicit hyperlinked relations behavior.
- Bugfix: Fix broken DjangoModelPermissions.
- Bugfix: Allow serializer output to be cached.
- Bugfix: Fix styling on browsable API login.
- Bugfix: Fix issue with deserializing empty to-many relations.
- Bugfix: Ensure model field validation is still applied for ModelSerializer subclasses with an custom
.restore_object()
method.
Note: See the 2.2 announcement for full details.
2.1.x series
2.1.17
Date: 26th Jan 2013
- Support proper 401 Unauthorized responses where appropriate, instead of always using 403 Forbidden.
- Support json encoding of timedelta objects.
format_suffix_patterns()
now supportsinclude
style URL patterns.- Bugfix: Fix issues with custom pagination serializers.
- Bugfix: Nested serializers now accept
source='*'
argument. - Bugfix: Return proper validation errors when incorrect types supplied for relational fields.
- Bugfix: Support nullable FKs with
SlugRelatedField
. - Bugfix: Don't call custom validation methods if the field has an error.
Note: If the primary authentication class is TokenAuthentication
or BasicAuthentication
, a view will now correctly return 401 responses to unauthenticated access, with an appropriate WWW-Authenticate
header, instead of 403 responses.
2.1.16
Date: 14th Jan 2013
- Deprecate
django.utils.simplejson
in favor of Python 2.6's built-in json module. - Bugfix:
auto_now
,auto_now_add
and othereditable=False
fields now default to read-only. - Bugfix: PK fields now only default to read-only if they are an AutoField or if
editable=False
. - Bugfix: Validation errors instead of exceptions when serializers receive incorrect types.
- Bugfix: Validation errors instead of exceptions when related fields receive incorrect types.
- Bugfix: Handle ObjectDoesNotExist exception when serializing null reverse one-to-one
Note: Prior to 2.1.16, The Decimals would render in JSON using floating point if simplejson
was installed, but otherwise render using string notation. Now that use of simplejson
has been deprecated, Decimals will consistently render using string notation. See #582 for more details.
2.1.15
Date: 3rd Jan 2013
- Added
PATCH
support. - Added
RetrieveUpdateAPIView
. - Remove unused internal
save_m2m
flag onModelSerializer.save()
. - Tweak behavior of hyperlinked fields with an explicit format suffix.
- Relation changes are now persisted in
.save()
instead of in.restore_object()
. - Bugfix: Fix issue with FileField raising exception instead of validation error when files=None.
- Bugfix: Partial updates should not set default values if field is not included.
2.1.14
Date: 31st Dec 2012
- Bugfix: ModelSerializers now include reverse FK fields on creation.
- Bugfix: Model fields with
blank=True
are nowrequired=False
by default. - Bugfix: Nested serializers now support nullable relationships.
Note: From 2.1.14 onwards, relational fields move out of the fields.py
module and into the new relations.py
module, in order to separate them from regular data type fields, such as CharField
and IntegerField
.
This change will not affect user code, so long as it's following the recommended import style of from rest_framework import serializers
and referring to fields using the style serializers.PrimaryKeyRelatedField
.
2.1.13
Date: 28th Dec 2012
- Support configurable
STATICFILES_STORAGE
storage. - Bugfix: Related fields now respect the required flag, and may be required=False.
2.1.12
Date: 21st Dec 2012
- Bugfix: Fix bug that could occur using ChoiceField.
- Bugfix: Fix exception in browseable API on DELETE.
- Bugfix: Fix issue where pk was was being set to a string if set by URL kwarg.
2.1.11
Date: 17th Dec 2012
- Bugfix: Fix issue with M2M fields in browseable API.
2.1.10
Date: 17th Dec 2012
- Bugfix: Ensure read-only fields don't have model validation applied.
- Bugfix: Fix hyperlinked fields in paginated results.
2.1.9
Date: 11th Dec 2012
- Bugfix: Fix broken nested serialization.
- Bugfix: Fix
Meta.fields
only working as tuple not as list. - Bugfix: Edge case if unnecessarily specifying
required=False
on read only field.
2.1.8
Date: 8th Dec 2012
- Fix for creating nullable Foreign Keys with
''
as well asNone
. - Added
null=<bool>
related field option.
2.1.7
Date: 7th Dec 2012
- Serializers now properly support nullable Foreign Keys.
- Serializer validation now includes model field validation, such as uniqueness constraints.
- Support 'true' and 'false' string values for BooleanField.
- Added pickle support for serialized data.
- Support
source='dotted.notation'
style for nested serializers. - Make
Request.user
settable. - Bugfix: Fix
RegexField
to work withBrowsableAPIRenderer
.
2.1.6
Date: 23rd Nov 2012
- Bugfix: Unfix DjangoModelPermissions. (I am a doofus.)
2.1.5
Date: 23rd Nov 2012
- Bugfix: Fix DjangoModelPermissions.
2.1.4
Date: 22nd Nov 2012
- Support for partial updates with serializers.
- Added
RegexField
. - Added
SerializerMethodField
. - Serializer performance improvements.
- Added
obtain_token_view
to get tokens when usingTokenAuthentication
. - Bugfix: Django 1.5 configurable user support for
TokenAuthentication
.
2.1.3
Date: 16th Nov 2012
- Added
FileField
andImageField
. For use withMultiPartParser
. - Added
URLField
andSlugField
. - Support for
read_only_fields
onModelSerializer
classes. - Support for clients overriding the pagination page sizes. Use the
PAGINATE_BY_PARAM
setting or set thepaginate_by_param
attribute on a generic view. - 201 Responses now return a 'Location' header.
- Bugfix: Serializer fields now respect
max_length
.
2.1.2
Date: 9th Nov 2012
- Filtering support.
- Bugfix: Support creation of objects with reverse M2M relations.
2.1.1
Date: 7th Nov 2012
- Support use of HTML exception templates. Eg.
403.html
- Hyperlinked fields take optional
slug_field
,slug_url_kwarg
andpk_url_kwarg
arguments. - Bugfix: Deal with optional trailing slashes properly when generating breadcrumbs.
- Bugfix: Make textareas same width as other fields in browsable API.
- Private API change:
.get_serializer
now uses sameinstance
anddata
ordering as serializer initialization.
2.1.0
Date: 5th Nov 2012
- Serializer
instance
anddata
keyword args have their position swapped. queryset
argument is now optional on writable model fields.- Hyperlinked related fields optionally take
slug_field
andslug_url_kwarg
arguments. - Support Django's cache framework.
- Minor field improvements. (Don't stringify dicts, more robust many-pk fields.)
- Bugfix: Support choice field in Browseable API.
- Bugfix: Related fields with
read_only=True
do not require aqueryset
argument.
API-incompatible changes: Please read this thread regarding the instance
and data
keyword args before updating to 2.1.0.
2.0.x series
2.0.2
Date: 2nd Nov 2012
- Fix issues with pk related fields in the browsable API.
2.0.1
Date: 1st Nov 2012
- Add support for relational fields in the browsable API.
- Added SlugRelatedField and ManySlugRelatedField.
- If PUT creates an instance return '201 Created', instead of '200 OK'.
2.0.0
Date: 30th Oct 2012
- Fix all of the things. (Well, almost.)
- For more information please see the 2.0 announcement.
0.4.x series
0.4.0
- Supports Django 1.5.
- Fixes issues with 'HEAD' method.
- Allow views to specify template used by TemplateRenderer
- More consistent error responses
- Some serializer fixes
- Fix internet explorer ajax behavior
- Minor xml and yaml fixes
- Improve setup (e.g. use staticfiles, not the defunct ADMIN_MEDIA_PREFIX)
- Sensible absolute URL generation, not using hacky set_script_prefix
0.3.x series
0.3.3
- Added DjangoModelPermissions class to support
django.contrib.auth
style permissions. - Use
staticfiles
for css files.- Easier to override. Won't conflict with customized admin styles (e.g. grappelli)
- Templates are now nicely namespaced.
- Allows easier overriding.
- Drop implied 'pk' filter if last arg in urlconf is unnamed.
- Too magical. Explicit is better than implicit.
- Saner template variable auto-escaping.
- Tidier setup.py
- Updated for URLObject 2.0
- Bugfixes:
- Bug with PerUserThrottling when user contains unicode chars.
0.3.2
- Bugfixes:
- Fix 403 for POST and PUT from the UI with UserLoggedInAuthentication (#115)
- serialize_model method in serializer.py may cause wrong value (#73)
- Fix Error when clicking OPTIONS button (#146)
- And many other fixes
- Remove short status codes
- Zen of Python: "There should be one-- and preferably only one --obvious way to do it."
- get_name, get_description become methods on the view - makes them overridable.
- Improved model mixin API - Hooks for build_query, get_instance_data, get_model, get_queryset, get_ordering
0.3.1
- [not documented]
0.3.0
- JSONP Support
- Bugfixes, including support for latest markdown release
0.2.x series
0.2.4
- Fix broken IsAdminUser permission.
- OPTIONS support.
- XMLParser.
- Drop mentions of Blog, BitBucket.
0.2.3
- Fix some throttling bugs.
X-Throttle
header on throttling.- Support for nesting resources on related models.
0.2.2
- Throttling support complete.
0.2.1
- Couple of simple bugfixes over 0.2.0
0.2.0
-
Big refactoring changes since 0.1.0, ask on the discussion group if anything isn't clear. The public API has been massively cleaned up. Expect it to be fairly stable from here on in.
-
Resource
becomes decoupled intoView
andResource
, your views should now inherit fromView
, notResource
. -
The handler functions on views
.get() .put() .post()
etc, no longer have thecontent
andauth
args. Useself.CONTENT
inside a view to access the deserialized, validated content. Useself.user
inside a view to access the authenticated user. -
allowed_methods
andanon_allowed_methods
are now defunct. if a method is defined, it's available. Thepermissions
attribute on aView
is now used to provide generic permissions checking. Use permission classes such asFullAnonAccess
,IsAuthenticated
orIsUserOrIsAnonReadOnly
to set the permissions. -
The
authenticators
class becomesauthentication
. Class names change toAuthentication
. -
The
emitters
class becomesrenderers
. Class names change toRenderers
. -
ResponseException
becomesErrorResponse
. -
The mixin classes have been nicely refactored, the basic mixins are now
RequestMixin
,ResponseMixin
,AuthMixin
, andResourceMixin
You can reuse these mixin classes individually without using theView
class.
0.1.x series
0.1.1
- Final build before pulling in all the refactoring changes for 0.2, in case anyone needs to hang on to 0.1.
0.1.0
- Initial release.