Update NEWS

Since we're heading for a 1.14.x branch (dbus#350), also draft the
summary of what has changed since 1.12.x.

Signed-off-by: Simon McVittie <smcv@collabora.com>

2 files changed, 200 insertions, 1 deletions

diff --git a/NEWS b/NEWS
index 6baa3a46..f26e3b6f 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,199 @@
+dbus 1.14.0 (UNRELEASED)
+========================
+
+1.14.x will be a new stable branch.
+
+Summary of major changes between 1.12.x and 1.14.0
+--------------------------------------------------
+
+Dependencies:
+
+• dbus now requires at least a basic level of support for C99 variadic
+  macros, as implemented in gcc >= 3, all versions of Clang, and
+  MSVC >= 2005. In practice this requirement has existed since version
+  1.9.2, but it is now official.
+
+• dbus now requires a C99-compatible va_copy() macro (or a __va_copy()
+  macro with the same behaviour), except when building for Windows using
+  MSVC and CMake.
+
+• On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented,
+  they must be POSIX-conformant. The non-POSIX signature seen in ancient
+  Solaris versions will no longer work.
+
+• All Windows builds now require Windows Vista or later.
+  (Note that we do not recommend or support use of dbus on operating
+  systems outside their vendor's security support lifetime, such as Vista.)
+
+• GLib >= 2.38 is required if full test coverage is enabled
+  (reduced from 2.40 in dbus 1.12.x.)
+
+• Building documentation using CMake now requires xsltproc, Docbook DTDs
+  (for example docbook-xml on Debian derivatives), and Docbook XSLT
+  stylesheets (for example docbook-xsl on Debian derivatives). Using
+  KDE's meinproc4 documentation processor is no longer supported.
+
+Build-time configuration changes:
+
+• Move CMake build system to top level, matching normal practice for
+  CMake projects
+
+Deprecations:
+
+• Third-party software should install default dbus policies for the system
+  bus into ${datadir}/dbus-1/system.d (this has been supported since dbus
+  1.10, released in August 2015). Installing default dbus policies in
+  ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy
+  files in ${sysconfdir}/dbus-1/system.d continue to be read, but this
+  directory should only be used by system administrators wishing to
+  override the default policies.
+
+  The ${datadir} applicable to dbus is usually /usr/share and the
+  ${sysconfdir} is usually /etc.
+
+• A similar pattern applies to the session bus policies in session.d.
+
+• The dbus-send(1) man page now documents --bus and --peer instead of
+  the old --address synonym for --peer, which has been deprecated since
+  the introduction of --bus and --peer in 1.7.6
+
+• The dbus-daemon man page now has scarier warnings about
+  <allow_anonymous/> and non-local TCP, which are insecure and should
+  not be used, particularly for the standard system and session buses
+
+• DBusServer (and hence the dbus-daemon) no longer accepts usernames
+  (login names) for the recommended EXTERNAL authentication mechanism,
+  only numeric user IDs or the empty string. See 1.13.0 release notes
+  for full details.
+
+New features:
+
+• On Linux 4.13 or later when built against a suitable glibc version,
+  GetConnectionCredentials() now includes UnixGroupIDs, the effective
+  group IDs of the initiator of the connection, taken from
+  SO_PEERGROUPS.
+
+• On Linux 4.13 or later, <policy group="…"> now uses the SO_PEERGROUPS
+  credentials-passing socket option to get the effective group IDs
+  of the initiator of the connection. See 1.13.4 release notes for details.
+
+• Add a --sender option to dbus-send, which requests a name and holds it
+  until the signal has been sent
+
+• dbus-daemon <allow> and <deny> rules can now specify a
+  send_destination_prefix attribute, which is like a combination of
+  send_destination and the arg0namespace keyword in match rules.
+  See 1.13.12 release notes for more details
+
+• The dbus-daemon now filters the messages that it relays, removing
+  header fields that it does not understand. Clients must not rely on
+  this behaviour unless they have confirmed that they are connected to
+  a suitable message bus implementation, for example by querying its
+  Features property.
+
+• It is now possible to disable traditional (non-systemd) service
+  activation at build-time (Autotools: --disable-traditional-activation,
+  CMake: -DENABLE_TRADITIONAL_ACTIVATION=OFF). See 1.13.10 release notes
+  for details.
+
+• The API reference manual can be built as a Qt compiled help file if
+  qhelpgenerator(-qt5) is available. See 1.13.16 release notes for details.
+
+Miscellaneous behaviour changes:
+
+• When using the "user bus" (--enable-user-session), put the dbus-daemon
+  in the session slice
+
+• Several environment variables set by systemd are no longer passed
+  on to activated services
+
+• If the dbus-daemon is compiled for Linux with systemd support, it
+  now informs systemd that it is ready for use via the sd_notify()
+  mechanism
+
+• Tarball releases no longer contain pre-2007 changelogs and are now
+  compressed with xz, so they should be somewhat smaller
+
+dbus 1.13.20 (UNRELEASED)
+=========================
+
+Enhancements:
+
+• D-Bus Specification 0.37:
+  · Update recommendations for DBUS_COOKIE_SHA1 timeouts
+    (dbus!171, Simon McVittie)
+  · Clarify padding requirements for arrays and variants
+    (dbus!203, Zeeshan Ali)
+  · Describe where the interoperable machine ID comes from
+    (dbus!198, Thomas Kluyver)
+  · Clarify use of dictionary (array of dict-entry) types
+    (dbus#347, Ralf Habacker)
+
+• When using the "user bus" (--enable-user-session), put the dbus-daemon
+  in the session slice (dbus!219, David Redondo)
+
+Feature removal:
+
+• Disable the experimental Containers1 interface that was added in 1.13.0.
+  It is incomplete and not ready for production use, so we're disabling it
+  in preparation for a new 1.14.x stable branch; the code remains present
+  and will be re-enabled later, but there is no longer a build-time
+  configuration option to enable it. (dbus!236, Simon McVittie)
+
+Bug fixes:
+
+• Avoid malloc() after fork on non-GNU libc (dbus!181, Jean-Louis Fuchs)
+
+• Don't return successfully from RemoveMatch if the match rule didn't
+  exist (dbus#351, Simon McVittie)
+
+• On Windows, fix a race condition where dbus-run-session could start the
+  wrapped application before the dbus-daemon was ready
+  (dbus#297, Ralf Habacker)
+
+• Fix build of tests on FreeBSD (dbus!167, Simon McVittie)
+
+• Various CMake build improvements
+  (dbus#310, dbus!213, dbus#319, dbus!217, dbus#346, dbus#356;
+  Ralf Habacker)
+
+• Set IMPORTED_IMPLIB property in CMake metadata installed via Autotools
+  with mingw toolchain
+  (dbus!172, Julien Schueller)
+
+• Make documentation build more reproducible (dbus!189, Arnout Engelen)
+
+• On Unix, make X11 autolaunch cope with slashes in DISPLAY
+  (dbus#8, dbus#311; William Earley)
+
+• Don't try to raise RLIMIT_NOFILE beyond OPEN_MAX on macOS
+  (dbus#309, William Earley)
+
+• Improve SELinux audit messages (dbus!173, Chris PeBenito)
+
+• Validate various strings in dbus-send to avoid client-side assertion
+  failures on invalid input (dbus#338, Simon McVittie)
+
+• Fix a memory leak in a unit test (dbus!208, David King)
+
+• In Autotools builds, use pkg-config in preference to AC_PATH_XTRA
+  (dbus!212, Scott Hamilton)
+
+• On Windows, prevent (theoretical?) stack buffer overflow with very
+  long paths (dbus!221, Ralf Habacker)
+
+• Fix build with newer mingw compilers (dbus#355, Ralf Habacker)
+
+• Various Windows error-handling fixes
+  (dbus!229, dbus#357, dbus#279, dbus#360; Ralf Habacker, Simon McVittie)
+
+• CI improvements
+  (dbus#318, dbus!197, dbus!187, dbus!196, dbus!201, dbus#359;
+  Simon McVittie, Ralf Habacker, Arnout Engelen, Marc-André Lureau)
+
+• Typo fixes, etc.
+  (dbus!183, dbus!182; Chigozirim Chukwu, Samy Mahmoudi)
+
 dbus 1.13.18 (2020-07-02)
 =========================
 
diff --git a/doc/dbus-specification.xml b/doc/dbus-specification.xml
index 556d9a7b..1a33b759 100644
--- a/doc/dbus-specification.xml
+++ b/doc/dbus-specification.xml
@@ -84,7 +84,10 @@
        <authorinitials></authorinitials>
        <revdescription>
          <itemizedlist>
-           <listitem><simpara>Clean up use of the term for an array of dict entries</simpara></listitem>
+           <listitem><simpara>Update recommendations for interoperable DBUS_COOKIE_SHA1 timeouts</simpara></listitem>
+           <listitem><simpara>Clarify padding requirements for arrays and variants</simpara></listitem>
+           <listitem><simpara>Describe where the interoperable machine ID comes from</simpara></listitem>
+           <listitem><simpara>Clarify use of dictionary (array of dict-entry) types</simpara></listitem>
          </itemizedlist>
        </revdescription>
      </revision>