- Username modification is a potential security risk, but sysadmins can access any account anyway

- Should be populated from the profile being edited, not from g.userobj.
For regular users editing their own profiles it doesn't matter,
but when sysadmins edit other profiles it does.

…ons-checkbox

fix email notifications checkbox

definition list for data dictionary view

Evaluate use_default_schema as boolean

…age that can't be found

use translated notes field in package meta block

Add an error notification when rebuilding the search index for a package that can't be found

- Add more classes to view list items.

- Added change log file.

Moved the cleanup code to a fixture

The new Cypress version renames a lot of files but the suite itself
hasn't been changed

Remove completely our own version parsing and rely on the one from
packaging. Older versions of packaging used to be more lenient with our
release tags ("ckan-x.y.z") but now they will fail. We need to remove
the `ckan-` bit before parsing.

When upgrading cypress to >= 12.0.0 many of our tests started failing.
That's because starting from Cypress 12.0.0 the `testIsolation` option
is enabled by default:

https://docs.cypress.io/guides/references/migration-guide#Test-Isolation

As our old Pylons server side tests, it looks like the frontend ones
were written in a way where tests are not isolated and rely
on previous state. To get the tests working again we are passing
`{testIsolation: false}` to each test spec, but as stated in the docs
above this is not recommended and we should rewrite our tests so they
can be run independently.

The updated accessibility tests were flagging issues with the `link-in-text-block`
check, that ensures that links can be suficiently distinct from
surrounding text. Rather than changing the color, this adds an underline
to links **within paragraphs**, following the available guidelines:

https://accessibilityinsights.io/info-examples/web/needs-review/link-in-text-block/

`urlparse` got more strict with the values it considers valid so this
"URL" used in our tests is no longer correctly parsed:

'sh+eme://[net:loc]:12345/a/path?a=b&c=d'

This should help turn some of the versions green here:

https://github.com/ckan/ckan-python-monitor

For reference:
python/cpython#103848

More CSS Classes on Resource View List Items

'styles' block gets overridden. Use 'custom_styles' instead.
Entire 'customizing css' page in docs does not work.

…solr-down

[8002]Fix dataset respond 200 when solr down

Adapt test for Python 3.11 support

…recaptcha

Fixes #8181

This commit includes the configuration file for an action that:

* When a PR that has a label like "Backport <branch>" is merged,
  it will trigger a backport action
* If the PR commits merge cleanly into the target branch, a new PR will
  be created against it, assigned to the same user as the merged one.
  The usual checks will be run on the new PR
* If the commits don't merge cleanly, a comment will be posted on the
  orginal PR with the manual commands to fix the conflicts, and the PR
  will be labelled with "Backport failed"
* Additionally, Tech Team members can trigger a backport on open or
  already closed PRs adding a comment starting with `/backport` (and
  adding the relevant label)

Some more details:
* The action is run using a token from the @ckanbot account, this needs
  to be stored in the repository secrets (`BACKPORT_ACTION_PAT`)
* There are also two public variables (`TECH_TEAM_USER_IDS` and
  `CKANBOT_USER_ID`) that need to be added to the repository variables.
* The action used source code code can be found at
  https://github.com/korthout/backport-action

Clarify installation assumptions in getting started

…recaptcha

- We need the global object so we can retrieve the reCAPTCHA key

 into add-login-recaptcha

add reCAPTCHA protection to login and password reset

…3-username-editing

Correct package_patch docstring re: updating resources

- Pass API token via 'headers' parameter instead of 'extra_environ'

…ement-CSRF

[8021]FIX datatables does not implement CSRF support

allow sysadmins to edit usernames, #4193

This involved two internal changes:

1. The import path for `RedisSessionInterface` changed
2. The __init__ parameters for `RedisSessionInterface` changed, now
   requiring `app` to be passed first (see [1])

[1] pallets-eco/flask-session@d30039a#diff-7c52990e5016192ede98e2b9e699d49ef84f7c6735bd10eb9b8e5eba4758c810

Hide invite user form if can't create users

Requirements April 2024

Requirements April 2024 (JS)

Fix customize css instructions.