html_url,id,node_id,tag_name,target_commitish,name,draft,author,author_label,prerelease,created_at,published_at,body,repo,repo_label,reactions https://github.com/simonw/datasette/releases/tag/0.52.5,35063580,MDc6UmVsZWFzZTM1MDYzNTgw,0.52.5,0.52.x,0.52.5,0,9599,simonw,0,2020-12-09T20:03:44Z,2020-12-09T20:10:23Z,- Fix for error caused by combining the `_searchmode=raw` and `?_search_COLUMN` parameters. ([#1134](https://github.com/simonw/datasette/issues/1134)),107914493,datasette, https://github.com/simonw/datasette/releases/tag/0.54.1,37262719,MDc6UmVsZWFzZTM3MjYyNzE5,0.54.1,0.54.x,0.54.1,0,9599,simonw,0,2021-02-02T21:23:39Z,2021-02-02T21:30:12Z,- Fixed a bug where `?_search=` and `?_sort=` parameters were incorrectly duplicated when the filter form on the table page was re-submitted. ([#1214](https://github.com/simonw/datasette/issues/1214)),107914493,datasette, https://github.com/simonw/datasette/releases/tag/0.56.1,44155459,MDc6UmVsZWFzZTQ0MTU1NDU5,0.56.1,0.56.x,0.56.1,0,9599,simonw,0,2021-06-05T21:54:47Z,2021-06-05T22:00:01Z,- Fix for a security hole: [reflected cross-site scripting](https://owasp.org/www-community/attacks/xss/#reflected-xss-attacks) in the `?_trace=1` feature. [#1360](https://github.com/simonw/datasette/issues/1360),107914493,datasette, https://github.com/simonw/datasette/releases/tag/0.60.1,57629048,RE_kwDOBm6k_c4Db1l4,0.60.1,0.60.x,0.60.1,0,9599,simonw,0,2022-01-21T02:08:20Z,2022-01-21T02:12:54Z,"- Fixed a bug where installation on Python 3.6 stopped working due to a change to an underlying dependency. This release can now be installed on Python 3.6, but is the last release of Datasette that will support anything less than Python 3.7. ([#1609](https://github.com/simonw/datasette/issues/1609)) ",107914493,datasette,"{""url"": ""https://api.github.com/repos/simonw/datasette/releases/57629048/reactions"", ""total_count"": 1, ""+1"": 1, ""-1"": 0, ""laugh"": 0, ""hooray"": 0, ""confused"": 0, ""heart"": 0, ""rocket"": 0, ""eyes"": 0}" https://github.com/simonw/datasette/releases/tag/0.60.2,58950482,RE_kwDOBm6k_c4Dg4NS,0.60.2,0.60.x,0.60.2,0,9599,simonw,0,2022-02-07T23:42:59Z,2022-02-07T23:49:38Z,- Fixed a bug where Datasette would open the same file twice with two different database names if you ran `datasette file.db file.db`. ([#1632](https://github.com/simonw/datasette/issues/1632)),107914493,datasette,"{""url"": ""https://api.github.com/repos/simonw/datasette/releases/58950482/reactions"", ""total_count"": 1, ""+1"": 0, ""-1"": 0, ""laugh"": 0, ""hooray"": 1, ""confused"": 0, ""heart"": 0, ""rocket"": 0, ""eyes"": 0}" https://github.com/simonw/datasette/releases/tag/0.63.2,83624627,RE_kwDOBm6k_c4E_AKz,0.63.2,0.63.x,0.63.2,0,9599,simonw,0,2022-11-19T00:53:05Z,2022-11-19T00:58:27Z,"- Fixed a bug in `datasette publish heroku` where deployments failed due to an older version of Python being requested. ([#1905](https://github.com/simonw/datasette/issues/1905)) - New `datasette publish heroku --generate-dir ` option for generating a Heroku deployment directory without deploying it.",107914493,datasette, https://github.com/simonw/datasette/releases/tag/0.63.3,86425242,RE_kwDOBm6k_c4FJr6a,0.63.3,0.63.x,0.63.3,0,9599,simonw,0,2022-12-18T03:08:01Z,2022-12-18T03:10:52Z,"- Fixed a bug where `datasette --root`, when running in Docker, would only output the URL to sign in as root when the server shut down, not when it started up. ([#1958](https://github.com/simonw/datasette/issues/1958)) - You no longer need to ensure `await datasette.invoke_startup()` has been called in order for Datasette to start correctly serving requests - this is now handled automatically the first time the server receives a request. This fixes a bug experienced when Datasette is served directly by an ASGI application server such as Uvicorn or Gunicorn. It also fixes a bug with the [datasette-gunicorn](https://datasette.io/plugins/datasette-gunicorn) plugin. ([#1955](https://github.com/simonw/datasette/issues/1955))",107914493,datasette, https://github.com/simonw/datasette/releases/tag/0.64,88331580,RE_kwDOBm6k_c4FQ9U8,0.64,0.63.x,0.64,0,9599,simonw,0,2023-01-09T16:37:21Z,2023-01-09T16:49:04Z,"- Datasette now **strongly recommends against allowing arbitrary SQL queries if you are using SpatiaLite**. SpatiaLite includes SQL functions that could cause the Datasette server to crash. See [SpatiaLite](https://docs.datasette.io/en/stable/spatialite.html#spatialite) for more details. - New [default_allow_sql](https://docs.datasette.io/en/stable/settings.html#setting-default-allow-sql) setting, providing an easier way to disable all arbitrary SQL execution by end users: `datasette --setting default_allow_sql off`. See also [Controlling the ability to execute arbitrary SQL](https://docs.datasette.io/en/stable/authentication.html#authentication-permissions-execute-sql). ([#1409](https://github.com/simonw/datasette/issues/1409)) - [Building a location to time zone API with SpatiaLite](https://datasette.io/tutorials/spatialite) is a new Datasette tutorial showing how to safely use SpatiaLite to create a location to time zone API. - New documentation about [how to debug problems loading SQLite extensions](https://docs.datasette.io/en/stable/installation.html#installation-extensions). The error message shown when an extension cannot be loaded has also been improved. ([#1979](https://github.com/simonw/datasette/issues/1979)) - Fixed an accessibility issue: the `