From 74237d56c5634ecce18b22c1aaaaa70443ee50e8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Orhun=20Parmaks=C4=B1z?= <orhunparmaksiz@gmail.com>
Date: Sat, 26 Mar 2022 00:54:15 +0300
Subject: [PATCH] chore(release): prepare for v0.7.0

---
 CHANGELOG.md | 28 ++++++++++++++++++++++++++++
 Cargo.lock   |  2 +-
 Cargo.toml   |  2 +-
 3 files changed, 30 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cd75e26..a2384f5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,34 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.0] - 2022-03-26
+### Added
+- Support auto-deletion of expired files
+
+`rustypaste` can now delete the expired files by itself. To enable this feature, add the following line to the `[paste]` section in the configuration file:
+
+```toml
+# expired files will be cleaned up hourly
+delete_expired_files = { enabled = true, interval = "1h" }
+```
+
+For users who want to have this feature disabled, there is an alternative [shell script](README.md#cleaning-up-expired-files) recommended in the documentation.
+
+- Add systemd service files
+  - [systemd files](./extra/systemd/) have been added to serve files from `/var/lib/rustypaste`, create `rustypaste` user automatically via `systemd-sysusers` and configure `AUTH_TOKEN` via `rustypaste.env`.
+  - For the installation and usage, see the Arch Linux [PKGBUILD](https://github.com/archlinux/svntogit-community/blob/packages/rustypaste/trunk/PKGBUILD).
+
+### Updated
+- Upgrade Actix dependencies
+  - `actix-web` is updated to [`4.0.*`](https://github.com/actix/actix-web/blob/master/actix-web/CHANGES.md#401---2022-02-25)
+- Strip the binaries during automated builds
+  - Size of the Docker image is reduced by ~20%
+
+### Fixed
+- Prevent invalid attempts of serving directories
+  - This fixes an issue where requesting a directory was possible via e.g. `curl --path-as-is 0.0.0.0:8080/.`
+  - This issue had no security impact (path traversal wasn't possible) since internal server error was returned.
+
 ## [0.6.5] - 2022-03-13
 ### Added
 - Add instructions for installing [rustypaste](https://archlinux.org/packages/community/x86_64/rustypaste/) on Arch Linux
diff --git a/Cargo.lock b/Cargo.lock
index a4bd0fb..dea33e9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1403,7 +1403,7 @@ dependencies = [
 
 [[package]]
 name = "rustypaste"
-version = "0.6.5"
+version = "0.7.0"
 dependencies = [
  "actix-files",
  "actix-multipart",
diff --git a/Cargo.toml b/Cargo.toml
index 26791ba..eb2361c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "rustypaste"
-version = "0.6.5"
+version = "0.7.0"
 edition = "2021"
 description = "A minimal file upload/pastebin service"
 authors = ["Orhun Parmaksız <orhunparmaksiz@gmail.com>"]