fixes #3889 - don't reload nested lookup keys during render, so validation errors aren't lost

fixed #3905 - wrong route in apidoc for reports delete (API v2)

fixes #3280 - authenticate returns true for API requests when login:false

fixes #3339 - nested fact support, allow fact importers to be registered by plugins

fixes #3693 - API v2 - accept GET json format of object in PUT/POST requests to add/remove has_many associations

Fixes #3720 - Add description field to operatingsystem

Fixes #3753 - always use main_app to determine paths for running an isolated namespace plugin

fixes #2983 - Add autosign#index to API v1 and v2 and remove from UI controller

fixes #2572 - FreeBSD unattended installation support via mfsbsd

fixes #3776 - change NAME_MAP to be a method

Fixes #3777 - typo in Settings cleanup message

fixes #3137 - API v2 - show error if optional nested object does not exist for nested route

fixes #3018 - API v2 metadata for pagination, search, order in index collection json response

fixes #3011 - default root node name for api collections json response to :results but make it configurable

fixes #3736 - users API uses login name as an identifying attribute

fixes #3510 - plugin interface for registering a plugin, updated menu system

fixes #2763 - correcting doco links

fixes #3603 - replaced a relation with a collection in 'where' conditions

fixes #3516 - resource names (inc. domains) are now being parametrized when used to construct urls

fixes #3017 - split APIv2 controllers from v1 parents

fixes #3312 - support /users/extlogin as a login page based on REMOTE_USER

fixes #3587, #2855 - print an error on invalid json vs 500 error

fixes #3578 - minor SQL and whitespaces updates to the smart proxy class

fixes #3566 - exposes orchestration tasks via the API at /api/orchestration/id/tasks

fixes #3577 - do not treat `params[:dryrun]` with value `false` as true

fixes #2951 - Host API documentation lacks compute_resource_id

fixes #3550 - correct HTTP method for puppet class import API

fixes #1830 - auto assign puppet proxy if its not defined upon facts/reports event

fixes #3538 - workaround for broken #pluck on lower Rails versions

fixes #3140 continue - apipie params fix

fixes #3140 - API to allow importing of puppet classes

fixes #3239 - pxelinux spoofing on postgres now works

fixes #2741 - rails 3 syntax

fixes #3136 - host cloning should auto-suggest a new IP address

fixes #3111 - v2 API calls to /api/[class]/[object]/parameters/[parameter] return wrong object

fixes #3207 avoid extra validation calls when importing a report

fixes #2986 - remove #show method from controllers and routes.rb when not used

Fixes #3128 - add json format back to images_controller

fixes #1244 - add smart proxy feature refresh link + API call

fixes #3141: SmartPrpxyAuth no longer calls #render_403 method defined in ApplicationController

fixes #2810 - more restful API v2 JSON responses in puppetclasses

NOTE: breaking changes to API v2 api/lookup_keys does not exist, replaced by api/smart_variables and api/smart_class_parameters

fixes #3101 - list available images for CRs, add iam_role field to images API

Fixes #3130 - Use the standard CentOS mirror

Fixes #2984 - API v1/v2 StatisticsController and remove JSON from UI controller

fixes #3089 - Updating settings causes settings page to load again within the page

fixes #3110 Association of vSphere VMs fails

fixes #3087 - fix space before parenthesis warning

fixes #2969 - remove all legacy api code in UI controllers, add deprecation response

i18n - fixing malformed strings

fixes #1853 - Users now have a new filter to subscribe to new hostgroups

fixes #3046 - add NIC CRUD, power and boot operations API

fixes #1923 - matches vms on a compute resource to hosts

Fixes #2414 - Move puppet report processing code to the report processor

This creates a API route for POST:/api/reports which matches the GET
format for reports. Tests are updated, with the report model tests
moving to the puppet-foreman module (along with the report fixtures).

fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)

fixes #2860 - don't convert arbitrary input into symbols (CVE-2013-4180)

Refs #2414 - Remove Puppet from facts API and Settings

Reports are still in progress and will come in a later PR
DB schema is updated to not need puppet/rails

fixes #2988 - merge authentication code, enables REMOTE_USER auth on new API controllers

fixes #2891 Openstack power control operations support

Compute resource helper Strings should be possible to translate

Compute resource permission to pause vms

Tests for Openstack VM pausing/resuming

VMs UI shows only available actions

I18n string issues. Vm power state cannot be properly translated yet...

fixes #2877: deletion of the organization or location in the context no longer breaks the session

fixes #2933 - add missing fields to installation media API

fixes #2869 - refactor method find_nested_obj into API::BaseController

fixes #2424 - encrypts compute resource password

fixes #2766 Setting categories not consistently loaded and shown in dev

fixes #2838 - taxonomies controller - fix in params and finder

fixes #2788 - adding / removing puppet classes updates the change even if the form is not submitted

fixes #2837 add an interface to add repositories to kickstart, cleanup similar methods

Fixes #2576 - Add optional update of Host.ip from built request

fixes #2757 - show model validation errors in production.log

Fixes #2817 - wrong param types in lookup keys API documentation

fixes #2411 - move to controller/concerns

fixes #2739 - add ActiveSupport::Concern syntax to mixins

fixes #2741 - remove unnecessary require statements

fixes #2411 - move files in /models to /concerns, /services, /mailers, /observers

fixes #2803 - apipie docs, rabl definition matches conventions

fixes #2142 add Smart Parameters and Smart Class Parameters to API v2

remove incorrect documentation in API v1 lookup_keys_controller

fixes #2802 controller methods fail for name-spaced controllers

fixes #2782 - LDAP password overwritten as blank

fixes #2734 - wrong taxonomy scope on hostgroup and host form

fixes #2728 - POST /api/hostgroups does not accept ancestry

fixes #2484 - host, hostgroup, and BMC passwords were overwritten as blank

fixes #2639 After creating user with empty e-mail it becomes impossible to add it.

fixes #2656 error connecting to vsphere after upgrade to ruby 1.9.3

Fixes #2667 - Don't save during process_hostgroup

Fixes #2619 - don't display full output from proxy

Proxy output is logged alongside with backtrace of exception. We display
only exception message in UI.

fixes #2660 - settings, improve tests and fixes

- added string settings type
- fixed tests previously commented out due to CI failures
- more tests for core settings functionality
- parsing of string values enhanced and extracted to a separate method
- setting value to nil when it equals default is back...

Fixes #2644 - Refactor Host find_by_name to use several ways to find a
host, and refactor my_hosts scope to Host::Base, allowing us to remove
unnecessary permissions check from find_by_name

Fixes #2641 - Add type_changed check to JS to allow form to refresh when provisioning a discovered host

fixes #2631 - fix remote code execution via controller name (CVE-2013-2121)

fixes #2616 - Hostgroup fields not populating when parent fields are selected

fixes #2625 - hostgroup nest and clone methods

re-fixes #2549 - default location bug was introduced in commit 66afbc33 that is fixed

fixes #2606 fix display of compute resource errors

fixes #2549, fixes #2544 - new host organization and location should default to current context if it exists

fixes #2539 - puppetrun API added.

fixes #2539 - added API puppetrun access permission and test

fixes #2335 - update puppetclass redirects to referrer page

fixes #2553 let setting admin attribute on user creation

fixes #2525 - apipie documentation of actions defined in a concern

Apipie now supports defining actions defined in module by including
`Apipie::DSL::Concern`. Some substitutions are preformed while
including the documentation in each controller, so that instead of...

Fixes #2502 - session expiration updates

Signo now allows to transparently prolong user session which got
expired. Also when you now logout from Foreman you will end up in Signo
login form. This brings some code clean up and test changes and small
SSO method API change.