20181206 New Ref nr format and security updates

• Use Estonian reference number format instead of ISO 11649 #998
• Rails upgrade to 4.2.11 (CVE-2018-16476) #1045
• Rack gem upgrade to 1.6.11 (CVE-2018-16471) #1036
• Removed override that reset transfer_wait_time oparam on every reboot #1041
• Regenerated structure.sql #1014
• Improved WhoisRecord tests #1039
• Deprecated custom test case for rake tasks #1043
• Removed SyslogLogger gem #1033
• Removed unused JSON key #1038
• Removed unused whois_records.body DB column #1037

20181105 Direct registrant contact updates

• Registrants contact update and new change poll messages #849
• Update Ruby to 2.4.5 #1030
• Upgrade Loofah to 2.2.3 - CVE-2018-16468 #1032
• BUG: mID auth now also works with IE11 #982
• BUG: Creating admin user works again after initial deploy #1019
• Same serializer for all contact requests #1034
• Added handling of OPTIONS request to /api namespace #1010
• Return Access-Control-Allow-Origin for all requests #1012
• Documentation fix #1005
• Elliminate mystery guest #1001
• Git-ignore assets #1025
• Remove dead code #1027

20181015 Nokogiri update (CVE-2018-14404)

• Nokogiri update 1.8.5 #1007
• Registrant API: added admin, tech and registrar contacts to domain info response #991
• Registrant API: added nameserver and registrar details to domain info response #1000
• Registrant API: added registry lock date to domain info response #996

20181002 Bug fixes and gem updates

• EPP: datetime in poll messages is not UTC as required by RFC5730 #948
• BUG: user_session_timeout is now always respected #966
• BUG: fixed method name in registrar portal's billing #971
• RubyZip gem update to 1.2.2 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000544) #987
• Rubocop gem update to 0.5.8 #963
• Money gem update to 6.12.0 #968
• Admin: Removing PKI certs revoke the cert first #887
• Admin: removed duplicate billing email field from registrar profile #967
• Removed duplicate require function #979
• Improved EPP poll tests #943
• Refactored EPP poll messages #703
• Registrant portal small improvements #932
• Fixed invoice mailer whitelist for staging env enablig invoice forwarding to an email #989
• Removed unused domain delete views #951
• Removed unused generator #990

20180912 Quick fix for billing user registrar login

• Bug: user with billing access only can now login to the portal for Regsitrars #973

20180906 Quick fix for registrant confirmation

• Bug: registrant confirmation does not require authentication any more #969
• Whois JSON tests order independent #965

20180904 Registrant API and registry lock

• New registrant portal API #902
• Registry lock in Registrant API #927
• Password encryption for EPP #914
• Registrar: 0 amount invoices invalidated #651
• Ruby upgrade to 2.4 #938
• Admin: removig deleteCandidate status removes Que job as well #790
• Admin: Cancel force delete no possible with deleteCandidate status set #791
• Contact tests added #930
• Change test structure #924
• Grape gem update to 1.1.0 (CVE-2018-3769) #934
• Remove changelog from codeclimate analysis #961
• Remove dead code #925
• Quote value in fixture #937
• Generate CSS class for every action #939
• Add TaskTestCase #941
• Set NOT NULL constraint for contact.email field #936
• Remove duplicate fixture #946

20180726 Gem updates

• Grape (1.0.3), mustermann (1.0.2), multi_json (1.13.1) gem updates #912
• Capybara (3.3.1), mini_mime (0.1.3), nokogiri (1.8), rack (1.6.0), xpath (3.1) gem updates #980
• Webmock (3.4.2), addressable (2.5.2), hashdiff (0.3.7), public_suffix (3.0.2) gem updates #907
• fixed typo in assertions filename #920
• regenerate structure.sql #915

20180712 JS testing framework

• Implemented JavaScript testing framework to catch web UI problems #900

20180710 NS bulk change affected domains

• Nameserver bulk change returns list of affected doamins #835