-
v1.15.0-rc2
* BUGFIXES * Restore creation of git-daemon-export-ok files (#16508) (#16514) * Fix data race in bleve indexer (#16474) (#16509) * Restore CORS on git smart http protocol (#16496) (#16506) * Fix race in log (#16490) (#16505) * Fix prepareWikiFileName to respect existing unescaped files (#16487) (#16498) * Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479) (#16480) * Update notification table with only latest data (#16445) (#16469) * Revert to use alpine 3.13 to fix multiple seccomp related issues with Docker <20 (#16451) (#16452) * Fix crash following ldap authentication update (#16447) (#16448)
-
v1.14.5
* SECURITY * Hide mirror passwords on repo settings page (#16022) (#16355) * Update bluemonday to v1.0.15 (#16379) (#16380) * BUGFIXES * Retry rename on lock induced failures (#16435) (#16439) * Validate issue index before querying DB (#16406) (#16410) * Fix crash following ldap authentication update (#16447) (#16449) * ENHANCEMENTS * Redirect on bad CSRF instead of presenting bad page (#14937) (#16378)
-
v1.15.0-rc1
1.15.0-rc1 * BREAKING * Make app.ini permissions more restrictive (#16266) * Refactor Webhook + Add X-Hub-Signature (#16176) * Add asymmetric JWT signing (#16010) * Clean-up the settings hierarchy for issue_indexer queue (#16001) * Change default queue settings to be low go-routines (#15964) * Improve assets handler middleware (#15961) * Rename StaticUrlPrefix to AssetUrlPrefix (#15779) * Use a generic markup class to display externally rendered files and diffs (#15735) * Add frontend testing, require node 12 (#15315) * Move (custom) assets into subpath `/assets` (#15219) * Use level config in log section when sub log section not set level (#15176) * Links in markdown should be absolute to the repository not the server (#15088) * SECURITY * Encrypt LDAP bind password in db with SECRET_KEY (#15547) * Remove random password in Dockerfiles (#15362) * FEATURES * Update Go-Git to take advantage of LargeObjectThreshold (#16316) * Support custom mime type mapping for text files (#16304) * Link to previous blames in file blame page (#16259) * Add LRU mem cache implementation (#16226) * Localize Email Templates (#16200) * Make command in authorized keys a template (#16003) * Add possibility to make branch in branch page (#15960) * Add email headers (#15939) * Make tasklist checkboxes clickable (#15791) * Add selecting tags on the compare page (#15723) * Add cron job to delete old actions from database (#15688) * On open repository open common cat file batch and batch-check (#15667) * Add tag protection (#15629) * Add push to remote mirror repository (#15157) * Add Image Diff for SVG files (#14867) * Add dashboard milestone search and repo milestone search by name. (#14866) * Add LFS Migration and Mirror (#14726) * Improve notifications for WIP draft PR's (#14663) * Disable Stars config option (#14653) * Add option to provide signature for a token to verify key ownership (#14054) * OAuth2 auto-register (#5123) * API * Return updated repository when changing repository using API (#16420) * Let branch/tag name be a valid ref to get CI status (#16400) * Add endpoint to get commits of PR (#16300) * Allow COMMENT reviews to not specify a body (#16229) * Add subject-type filter to list notification API endpoints (#16177) * ListReleases add filter for draft and pre-releases (#16175) * ListIssues add more filters (#16174) * Issue Search Add filter for MilestoneNames (#16173) * GET / SET User Settings (#16169) * Expose repo.GetReviewers() & repo.GetAssignees() (#16168) * User expose counters (#16167) * Add repoGetTag (#16166) * Add repoCreateTag (#16165) * Creating a repo from a template repo via API (#15958) * Add Active and ProhibitLogin to API (#15689) * Add Location, Website and Description to API (#15675) * Expose resolver via API (#15167) * ENHANCEMENTS * Support HTTP/2 in Let's Encrypt (#16371) * Introduce NotifySubjectType (#16320) * Add forge emojies (#16296) * Implemented head_commit for webhooks (#16282) * Upgrade Gliderlabs SSH to 0.3.3 and add FailedConnectionCallback (#16278) * Add previous/next buttons to review comments (#16273) * Review comments: break-word for long file names (#16272) * Add configuration to restrict allowed user visibility modes (#16271) * Add scroll-margin-top to account for sticky header (#16269) * Add --quiet and --verbose to gitea web to control initial logging (#16260) * Use gitea logging module for git module (#16243) * Add tests for all webhooks (#16214) * Add button to delete undeleted repositories from failed migrations (#16197) * Speed up git diff highlight generation (#16180) * Add OpenID claims "profile" and "email". (#16141) * Reintroduce squash merge default comment as a config setting (#16134) * Add sanitizer rules per renderer (#16110) * Improve performance of dashboard list orgs (#16099) * Refactor assert statements in tests (#16089) * Add sso.Group, context.Auth, context.APIAuth to allow auth special routes (#16086) * Remove unnecessary goroutine (#16080) * Add attachments for PR reviews (#16075) * Make the github migration less rate limit waiting to get comment per page from repository but not per issue (#16070) * Add Visible modes function from Organisation to Users too (#16069) * Add checkbox to delete pull branch after successful merge (#16049) * Make commit info cancelable (#16032) * Make modules/context.Context a context.Context (#16031) * Unified custom config creation (#16012) * Make sshd_config more flexible regarding connections (#16009) * Append to existing trailers in generated squash commit message (#15980) * Always store primary email address into email_address table and also the state (#15956) * Load issue/PR context popup data only when needed (#15955) * Remove remaining fontawesome usage in templates (#15952) * Remove fomantic accordion module (#15951) * Small refactoring of modules/private (#15947) * Double the avatar size factor (#15941) * Add curl to rootless docker image (#15908) * Replace clipboard.js with async clipboard api (#15899) * Allow custom highlight mapping beyond file extensions (#15808) * Add trace logging to SSO methods (#15803) * Refactor routers directory (#15800) * Allow only internal registration (#15795) * Add a new internal hook to save ssh log (#15787) * Respect default merge message syntax when parsing item references (#15772) * OAuth2 login: Set account link to "login" as default behavior (#15768) * Use single shared random string generation function (#15741) * Hold the event source when there are no listeners (#15725) * Code comments improvements (#15722) * Provide OIDC compliant user info endpoint (#15721) * Fix webkit calendar icon color on arc-green (#15713) * Improve Light Chroma style (#15699) * Only use boost workers for leveldb shadow queues (#15696) * Add compare tag dropdown to releases page (#15695) * Add caret styling CSS (#15651) * Remove x-ua-compatible meta tag (#15640) * Refactor of link creation (#15619) * Add a new table issue_index to store the max issue index so that issue could be deleted with no duplicated index (#15599) * Rewrite of the LFS server (#15523) * Display more repository type on admin repository management (#15440) * Remove usage of some JS globals (#15378) * SHA in merged commit comment should be rendered ui sha (#15376) * Add well-known config for OIDC (#15355) * Use route rather than use thus reducing the number of stack frames (#15301) * Code Formats, Nits & Unused Func/Var deletions (#15286) * Let package git depend on setting but not opposite (#15241) * Fixed sanitize errors (#15240) * response simple text message for not html request when 404 (#15229) * Remove file-loader dependency (#15196) * Refactor renders (#15175) * Add mimetype mapping settings (#15133) * Add Status Updates whilst Gitea migrations are occurring (#15076) * Reload locales in initialisation if needed by utilizing i18n.Reset (#15073) * Counterwork seemingly unclickable repo button labels (#15064) * Add DefaultMergeStyle option to repository (#14789) * Added support for gopher URLs. (#14749) * Rework repository archive (#14723) * Add links to toggle WIP status (#14677) * Add Tabular Diff for CSV files (#14661) * Use milestone deadline when sorting issues (#14551) * BUGFIXES * Fix invalid params and typo of email templates (#16394) * Fix activation of primary email addresses (#16385) * Fix calculation for finalPage in repo-search component (#16382) * Specify user in rootless container numerically (#16361) * Detect encoding changes while parsing diff (#16330) * Fix U2F error reasons always hidden (#16327) * Prevent zombie processes (#16314) * Escape reference to `user` table in models.SearchEmails (#16313) * Fix default push instructions on empty repos (#16302) * Fix modified files list in webhooks when there is a space (#16288) * Fix webhook commits wrong hash on HEAD reset (#16283) * Fuzzer finds an NPE due to incorrect URLPrefix (#16249) * Don't WARN log UserNotExist errors on ExternalUserLogin failure (#16238) * Do not show No match found for tribute (#16231) * Fix "Copy Link" for pull requests (#16230) * Fix diff expansion is missing final line in a file (#16222) * Fix private repo permission problem (#16142) * Fix not able to update local created non-urlencoded wiki pages (#16139) * More efficiently parse shas for shaPostProcessor (#16101) * Fix `doctor --run check-db-consistency --fix` with label fix (#16094) * Prevent webhook action buttons from shifting (#16087) * Change default TMPDIR path in rootless containers (#16077) * Fix typo and add TODO notice (#16064) * Use git log name-status in get last commit (#16059) * Fix 500 Error with branch and tag sharing the same name (#16040) * Fix get tag when migration (#16014) * Add custom emoji support (#16004) * Use filepath.ToSlash and Join in indexer defaults and queues (#15971) * Add permission check for ``GenerateRepository`` (#15946) * Ensure settings for Service and Mailer are read on the install page (#15943) * Fix layout of milestone view (#15927) * Unregister non-matching serviceworkers (#15834) * Multiple Queue improvements: LevelDB Wait on empty, shutdown empty shadow level queue, reduce goroutines etc (#15693) * Attachment support repository route (#15580) * Fix missing icons and colorpicker when mounted on suburl (#15501) * Create a session on ReverseProxy and ensure that ReverseProxy users cannot change username (#15304) * Prevent double-login for Git HTTP and LFS and simplify login (#15303) * Resolve Object { type: "error", data: undefined } in stopwatch.js (#15278) * Fix heatmap activity (#15252) * Remove vendored copy of fomantic-dropdown (#15193) * Update repository size on cron gc task (#15177) * Add NeedPostProcess for Parser interface to improve performance of csv parser and some external parser (#15153) * Add code block highlight to orgmode back (#14222) * Remove User.GetOrganizations() (#14032) * TESTING * Bump `postgres` and `mysql` versions (#15710) * Add tests for clone from wiki (#15513) * Fix Benchmark tests, remove a broken one & add two new (#15250) * Create Proper Migration tests (#15116) * TRANSLATION * Use a special name for update default branch on repository setting (#15893) * Fix mirror_lfs source string in en-US locale (#15369) * BUILD * Upgrade xorm to v1.1.1 (#16339) * Alpine 3.14 released (#16170) * Disable legal comments in esbuild (#15929) * Switch to Node 16 to build fronted (#15804) * Use esbuild to minify CSS (#15756) * Use binary version of revive linter (#15739) * Fix: npx webpack make: *** [Makefile:699: public/js/index.js] Error -… (#15465) * Stop packaging node_modules in release tarballs (#15273) * Introduce esbuild on webpack (#14578) * DOCS * Update queue workers documentation (#15999) * Comment out app.example.ini (#15807) * Improve logo customization docs (#15754) * Add some response status on api docs (#15399) * Rework Token API comments (#15162) * Add better errors for disabled account recovery (#15117) * MISC * Remove utf8 option from installation page (#16126) * Use Wants= over Requires= in systemd file (#15897) -
v1.14.4
* BUGFIXES * Fix relative links in postprocessed images (#16334) (#16340) * Fix list_options GetStartEnd (#16303) (#16305) * Fix API to use author for commits instead of committer (#16276) (#16277) * Handle misencoding of login_source cfg in mssql (#16268) (#16275) * Fixed issues not updated by commits (#16254) (#16261) * Improve efficiency in FindRenderizableReferenceNumeric and getReference (#16251) (#16255) * Use html.Parse rather than html.ParseFragment (#16223) (#16225) * Fix milestone counters on new issue (#16183) (#16224) * reqOrgMembership calls need to be preceded by reqToken (#16198) (#16219)
-
v1.14.3
v1.14.3 * SECURITY * Encrypt migration credentials at rest (#15895) (#16187) * Only check access tokens if they are likely to be tokens (#16164) (#16171) * Add missing SameSite settings for the i_like_gitea cookie (#16037) (#16039) * Fix setting of SameSite on cookies (#15989) (#15991) * API * Repository object only count releases as releases (#16184) (#16190) * EditOrg respect RepoAdminChangeTeamAccess option (#16184) (#16190) * Fix overly strict edit pr permissions (#15900) (#16081) * BUGFIXES * Run processors on whole of text (#16155) (#16185) * Class `issue-keyword` is being incorrectly stripped off spans (#16163) (#16172) * Fix language switch for install page (#16043) (#16128) * Fix bug on getIssueIDsByRepoID (#16119) (#16124) * Set self-adjusting deadline for connection writing (#16068) (#16123) * Fix http path bug (#16117) (#16120) * Fix data URI scramble (#16098) (#16118) * Merge all deleteBranch as one function and also fix bug when delete branch don't close related PRs (#16067) (#16097) * git migration: don't prompt interactively for clone credentials (#15902) (#16082) * Fix case change in ownernames (#16045) (#16050) * Don't manipulate input params in email notification (#16011) (#16033) * Remove branch URL before IssueRefURL (#15968) (#15970) * Fix layout of milestone view (#15927) (#15940) * GitHub Migration, migrate draft releases too (#15884) (#15888) * Close the gitrepo when deleting the repository (#15876) (#15887) * Upgrade xorm to v1.1.0 (#15869) (#15885) * Fix blame row height alignment (#15863) (#15883) * Fix error message when saving generated LOCAL_ROOT_URL config (#15880) (#15882) * Backport Fix LFS commit finder not working (#15856) (#15874) * Stop calling WriteHeader in Write (#15862) (#15873) * Add timeout to writing to responses (#15831) (#15872) * Return go-get info on subdirs (#15642) (#15871) * Restore PAM user autocreation functionality (#15825) (#15867) * Fix truncate utf8 string (#15828) (#15854) * Fix bound address/port for caddy's certmagic library (#15758) (#15848) * Upgrade unrolled/render to v1.1.1 (#15845) (#15846) * Queue manager FlushAll can loop rapidly - add delay (#15733) (#15840) * Tagger can be empty, as can Commit and Author - tolerate this (#15835) (#15839) * Set autocomplete off on branches selector (#15809) (#15833) * Add missing error to Doctor log (#15813) (#15824) * Move restore repo to internal router and invoke from command to avoid open the same db file or queues files (#15790) (#15816) * ENHANCEMENTS * Removable media support to snap package (#16136) (#16138) * Move sans-serif fallback font higher than emoji fonts (#15855) (#15892) * DOCKER * Only write config in environment-to-ini if there are changes (#15861) (#15868) * Only offer hostcertificates if they exist (#15849) (#15853)
-
v1.14.2
v1.14.2 * API * Make change repo settings work on empty repos (#15778) (#15789) * Add pull "merged" notification subject status to API (#15344) (#15654) * BUGFIXES * Ensure that ctx.Written is checked after issues(...) calls (#15797) (#15798) * Use pulls in commit graph unless pulls are disabled (#15734 & #15740 & #15774) (#15775) * Set GIT_DIR correctly if it is not set (#15751) (#15769) * Fix bug where repositories appear unadopted (#15757) (#15767) * Not show `ref-in-new-issue` pop when issue was disabled (#15761) (#15765) * Drop back to use IsAnInteractiveSession for SVC (#15749) (#15762) * Fix setting version table in dump (#15753) (#15759) * Fix close button change on delete in simplemde area (#15737) (#15747) * Defer closing the gitrepo until the end of the wrapped context functions (#15653) (#15746) * Fix some ui bug about draft release (#15137) (#15745) * Only log Error on getLastCommitStatus error to let pull list still be visible (#15716) (#15715) * Move tooltip down to allow selection of Remove File on error (#15672) (#15714) * Fix setting redis db path (#15698) (#15708) * Fix DB session cleanup (#15697) (#15700) * Fixed several activation bugs (#15473) (#15685) * Delete references if repository gets deleted (#15681) (#15684) * Fix orphaned objects deletion bug (#15657) (#15683) * Delete protected branch if repository gets removed (#15658) (#15676) * Remove spurious set name from eventsource.sharedworker.js (#15643) (#15652) * Not update updated uinx for `git gc` (#15637) (#15641) * Fix commit graph author link (#15627) (#15630) * Fix webhook timeout bug (#15613) (#15621) * Resolve panic on failed interface conversion in migration v156 (#15604) (#15610) * Fix missing storage init (#15589) (#15598) * If the default branch is not present do not report error on stats indexing (#15546 & #15583) (#15594) * Fix lfs management find (#15537) (#15578) * Fix NPE on view commit with notes (#15561) (#15573) * Fix bug on commit graph (#15517) (#15530) * Send size to /avatars if requested (#15459) (#15528) * Prevent migration 156 failure if tag commit missing (#15519) (#15527) * ENHANCEMENTS * Display conflict-free merge messages for pull requests (#15773) (#15796) * Exponential Backoff for ByteFIFO (#15724) (#15793) * Issue list alignment tweaks (#15483) (#15766) * Implement delete release attachments and update release attachments' name (#14130) (#15666) * Add placeholder text to deploy key textarea (#15575) (#15576) * Project board improvements (#15429) (#15560) * Repo branch page: label size, PR ref, new PR button alignment (#15363) (#15365) * MISC * Fix webkit calendar icon color on arc-green (#15713) (#15728) * Performance improvement for last commit cache and show-ref (#15455) (#15701) * Bump unrolled/render to v1.1.0 (#15581) (#15608) * Add ETag header (#15370) (#15552)
-
v1.14.1
v1.14.1 * BUGFIXES * Fix bug clone wiki (#15499) (#15502) * Github Migration ignore rate limit, if not enabled (#15490) (#15495) * Use subdir for URL (#15446) (#15493) * Query the DB for the hash before inserting in to email_hash (#15457) (#15491) * Ensure review dismissal only dismisses the correct review (#15477) (#15489) * Use index of the supported tags to choose user lang (#15452) (#15488) * Fix wrong file link in code search page (#15466) (#15486) * Quick template fix for built-in SSH server in admin config (#15464) (#15481) * Prevent superfluous response.WriteHeader (#15456) (#15476) * Fix ambiguous argument error on tags (#15432) (#15474) * Add created_unix instead of expiry to migration (#15458) (#15463) * Fix repository search (#15428) (#15442) * Prevent NPE on avatar direct rendering if federated avatars disabled (#15434) (#15439) * Fix wiki clone urls (#15430) (#15431) * Fix dingtalk icon url at webhook (#15417) (#15426) * Standardise icon on projects PR page (#15387) (#15408) * ENHANCEMENTS * Add option to skip LFS/attachment files for `dump` (#15407) (#15492) * Clone panel fixes (#15436) * Use semantic dropdown for code search query type (#15276) (#15364) * BUILD * Build go-git variants for windows (#15482) (#15487) * Lock down build-images dependencies (Partial #15479) (#15480) * MISC * Performance improvement for list pull requests (#15447) (#15500) * Fix potential copy lfs records failure when fork a repository (#15441) (#15485)
-
v1.14.0
v1.14.0 * SECURITY * Respect approved email domain list for externally validated user registration (#15014) * Add reverse proxy configuration support for remote IP address detection (#14959) * Ensure validation occurs on clone addresses too (#14994) * BREAKING * Fix double 'push tag' action feed (#15078) (#15083) * Remove possible resource leak (#15067) (#15082) * Handle unauthorized user events gracefully (#15071) (#15074) * Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (#14475) * Migrate from Macaron to Chi framework (#14293) * Deprecate building for mips (#14174) * Consolidate Logos and update README header (#14136) * Inline manifest.json (#14038) * Store repository data in data path if not previously set (#13991) * Rename "gitea" png to "logo" (#13974) * Standardise logging of failed authentication attempts in internal SSH (#13962) * Add markdown support in organization description (#13549) * Improve users management through the CLI (#6001) (#10492) * FEATURES * Create a new issue with reference to lines of code from file view (#14863) * Repository transfer has to be confirmed, if user can not create repo for new owner (#14792) * Allow blocking some email domains from registering an account (#14667) * Create a new issue based on reference to an issue comment (#14366) * Add support to migrate from gogs (#14342) * Add pager to the branches page (#14202) * Minimal OpenID Connect implementation (#14139) * Display current stopwatch in navbar (#14122) * Display SVG files as images instead of text (#14101) * Disable SSH key deletion of externally managed Keys (#13985) * Add support for ed25519_sk and ecdsa_sk SSH keys (#13462) * Add support for Mastodon OAuth2 provider (#13293) * Add gitea sendmail command (#13079) * Create DB session provider(based on xorm) (#13031) * Add dismiss review feature (#12674) * Make manual merge autodetection optional and add manual merge as merge method (#12543) * Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) * Create Rootless Docker image (#10154) * API * Speedup issue search (#15179) (#15192) * Get pull, return head branch sha, even if deleted (#14931) * Export LFS & TimeTracking function status (#14753) * Show Gitea version in swagger (#14654) * Fix PATCH /repos/{owner}/{repo} panic (#14637) * Add Restricted Field to User (#14630) * Add support for ref parameter to get raw file API (#14602) * Add affected files of commits to commit struct (#14579) * Fix CJK fonts again and misc. font issues (#14575) * Add delete release by tag & delete tag (#14563) & (#13358) * Add pagination to ListBranches (#14524) * Add signoff option in commit form (#14516) * GetRelease by tag only return release (#14397) * Add MirrorInterval to the API (#14163) * Make BasicAuth Prefix case insensitive (#14106) * Add user filter to issueTrackedTimes, enable usage for issue managers (#14081) * Add ref to create/edit issue options & deprecated assignee (#13992) * Add Ref to Issue (#13946) * Expose default theme in meta and API (#13809) * Send error message when CSRF token is missing (#13676) * List, Check, Add & delete endpoints for repository teams (#13630) * Admin EditUser: Make FullName, Email, Website & Location optional (#13562) * Add more filters to issues search (#13514) * Add review request api (#11355) * BUGFIXES * Fix delete nonexist oauth application 500 and prevent deadlock (#15384) (#15396) * Always set the merge base used to merge the commit (#15352) (#15385) * Upgrade to bluemonday 1.0.7 (#15379) (#15380) * Turn RepoRef and RepoAssignment back into func(*Context) (#15372) (#15377) * Move FCGI req.URL.Path fix-up to the FCGI listener (#15292) (#15361) * Show diff on rename with diff changes (#15338) (#15339) * Fix handling of logout event (#15323) (#15337) * Fix CanCreateRepo check (#15311) (#15321) * Fix xorm log stack level (#15285) (#15316) * Fix bug in Wrap (#15302) (#15309) * Drop the event source if we are unauthorized (#15275) (#15280) * Backport Fix graph pagination (#15225) (#15249) * Prevent NPE in CommentMustAsDiff if no hunk header (#15199) (#15200) * should run RetrieveRepoMetas() for empty pr (#15187) (#15190) * Move setting to enable closing issue via commit in non default branch to repo settings (#14965) * Show correct issues for team dashboard (#14952) * Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (#14932) * Only allow issue labels from owner repository or organization (#14928) * Fix alignment of People and Teams right arrow on org homepage (#14924) * Fix overdue marking of closed issues and milestones (#14923) * Prevent panic when empty MilestoneID in repo/issue/list (#14911) * Fix migration context data (#14910) * Handle URLs with trailing slash (#14852) * Add CORS config on to /login/oauth/access_token endpoint (#14850) * Make searching issues by keyword case insensitive on DB (#14848) * Prevent use of double sub-path and incorrect asset path in manifest (#14827) * Fix link account ui (#14763) * Fix preview status switch button on wiki editor (#14742) * Fix github download on migration (#14703) * Fix svg spacing (#14638) * Prevent adding nil label to .AddedLabels or .RemovedLabels (#14623) * Truncated organizations name (#14615) * Exclude the current dump file from the dump (#14606) * Use OldRef instead of CommitSHA for DeleteBranch comments (#14604) * Ensure memcache caching works when TTL greater than 30 days (#14592) * Remove NULs byte arrays passed to PostProcess (#14587) * Restore detection of branches are equal on compare page (#14586) * Fix incorrect key name so registerManualConfirm works (#14455) * Fix close/reopen with comment (#14436) * Allow passcode invalid error to appear (#14371) * Escape branch names in compare url (#14364) * Label and milestone webhooks on issue/pull creation (#14363) * Handle NotifyCreateRef as create branch in feeds (#14245) * Prevent clipping input text in Chrome + Segoe UI Font (#14179) * Fix UI on edit auth source page (#14137) * Fix git.parseTagData (#14105) * Refactor get tag to remove unnecessary steps (#14058) * Fix integrations test error with space in CURDIR path (#14056) * Dropdown triangle fixes (#14028) * Fix label of --id in admin delete user (#14005) * Cause NotifyMigrateRepository to emit a repo create webhook (#14004) * Update HEAD to match defaultBranch in template generation (#13948) * Fix action avatar loading (#13909) * Fix issue participants (#13893) * Fix avatar template error (#13833) * Fix review request notification email links when external issue tracker is enabled (#13723) * Fix blame line alignment (#13542) * Include OriginalAuthor in Reaction constraint (#13505) * Comments on review should have the same sha (#13448) * Fix whitespace rendering in diff (#13415) * Fixed git args duplication (#13411) * Fix bug on release publisherid migrations (#13410) * Fix --port setting (#13288) * Keep database transactions not too big (#13254) * Git version check, ignore pre-releases constraints (#13234) * Handle and propagate errors when checking if paths are Dirs, Files or Exist (#13186) * Update Mirror IsEmpty status on synchronize (#13185) * Use GO variable in go-check target (#13146) (#13147) * ENHANCEMENTS * UI style improvements * Dropzone styling improvements (#15291) (#15374) * Add size to Save function (#15264) (#15270) * Monaco improvements (#15333) (#15345) * Support .mailmap in code activity stats (#15009) * Sort release attachments by name (#15008) * Add ui.explore settings to control view of explore pages (#14094) * Make internal SSH server host key path configurable (#14918) * Hide resync all ssh principals when using internal ssh server (#14904) * Add SameSite setting for cookies (#14900) * Move Bleve and Elastic code indexers to use a common cat-file --batch (#14781) * Add environment-to-ini to docker image (#14762) * Add preview support for wiki editor when disable simpleMDE (#14757) * Add easyMDE(simpleMDE) support for release content editor (#14744) * Organization removal confirmation using name not password (#14738) * Make branch names in PR description clickable (#14716) * Add Password Algorithm option to install page (#14701) * Add fullTextSearch to dropdowns by default (#14694) * Fix truncated organization names (#14655) * Whitespace in commits (#14650) * Sort / move project boards (#14634) * Make fileheader sticky in diffs (#14616) * Add helper descriptions on new repo page (#14591) * Move the stopwatches to the eventsource stream (#14588) * Add Content-Length header to HEAD requests (#14542) * Add Image Diff options in Diff view (#14450) * Improve Description in new/ edit Project template (#14429) * Allow ssh-keygen on Windows to detect ssh key type (#14413) * Display error if twofaSecret cannot be retrieved (#14372) * Sort issue search results by revelance (#14353) * Implement ghost comment mitigation (#14349) * Upgrade blevesearch dependency to v2.0.1 (#14346) * Add edit, delete and reaction support to code review comments on issue page (#14339) * Merge default and system webhooks under one menu (#14244) * Add option for administrator to reset user 2FA (#14243) * Add option to change username to the admin panel (#14229) * Check for 'main' as potential default branch name (#14193) * Project: show referenced PRs in issue cards (#14183) * Use caddy's certmagic library for extensible/robust ACME handling (#14177) * CLI support for OAuth sources custom icons (#14166) * Custom icons for OAuth sources (#14161) * Team dashboards (#14159) * KanBan: be able to set default board (#14147) * Disable Fomantic's custom scrollbars (#14109) * Add UI to delete tracked times (#14100) * Rework heatmap permissions (#14080) * Issue and pull request filters on organization dashboard (#14072) * Fix webhook list styling (#14001) * Show dropdown with all statuses for commit (#13977) * Show status check for merged PRs (#13975) * Diff stat improvements (#13954) * Report permissions denied in internal SSH (#13953) * Markdown task list improvements (#13952) * Heatmap days clickable (#13935) * chore: use octicon-mirror for feeds display (#13928) * Move diff split code into own template file (#13919) * Markdown: Enable wrapping in code blocks and a color tweak (#13894) * Do not reload page after adding comments in Pull Request reviews (#13877) * Add pull request manually merge instruction (#13840) * add thumbnail preview section to issue attachments (#13826) * Move Repo APIFormat to convert package (#13787) * Move notification APIFormat (#13783) * Swap swagger-ui with swagger-ui-dist (#13777) * User Settings: Ignore empty language codes & validate (#13755) * Improve migrate page and add card CSS (#13751) * Add block on official review requests branch protection (#13705) * Add review requested filter on pull request overview (#13701) * Use chronological commit order in default squash message (#13696) * Clickable links in pull request (and issue) titles (#13695) * Support shortened commit SHAs in URLs (#13686) * Use native git variants by default with go-git variants as build tag (#13673) * Don't render dropdown when only 1 merge style is available (#13670) * Move webhook type from int to string (#13664) * Direct avatar rendering (#13649) * Verify password for local-account activation (#13631) * Prevent clone protocol button flash on page load (#13626) * Remove fetch request from heatmap (#13623) * Refactor combine label comments with tests (#13619) * Move metrics from macaron to chi (#13601) * Issue and Pulls lists rework (#13594) * HTTP cache rework and enable caching for storage assets (#13569) * Use mount but not register for chi routes (#13555) * Use monaco for the git hook editor (#13552) * Make heatmap colors more distinct (#13533) * Lazy-load issue reviewers and assignees avatars (#13526) * Change search and filter icons to SVG (#13473) * Create tag on ui (#13467) * updateSize when create a repo with init commit (#13441) * Added title and action buttons to Project view page (#13437) * Override fomantic monospace fonts and set size (#13435) * Rework focused comment styling (#13434) * Tags cleanup (#13428) * Various style tweaks (#13418) * Refactor push update (#13381) * Comment box tweaks and SVG dropdown triangles (#13376) * Various style fixes (#13372) * Change repo home page icons to SVG (#13364) * Use CSS Vars for primary color (#13361) * Refactor image paste code (#13354) * Switch from SimpleMDE to EasyMDE (#13333) * Group Label Changed Comments in timeline (#13304) * Make the logger an interface (#13294) * Fix PR/Issue titles on mobile (#13292) * Rearrange the order of the merged by etc. in locale (#13284) * Replace footer and modal icons with SVG (#13245) * Issues overview should not show issues from archived repos (#13220) * Show stale label for stale code comment which is marked as resolved (#13213) * Use CSS Variables for fonts, remove postcss-loader (#13204) * Add mentionable teams to tributeValues and change team mention rules to gh's style (#13198) * Move install pages out of main macaron routes (#13195) * Update outdated label to use Fomantic UI style (#13181) * Added option to disable webhooks (#13176) * Change order of possible-owner organizations to alphabetical (#13160) * Log IP on SSH authentication failure for Built-in SSH server (#13150) * Added option to disable migrations (#13114) * New "Add Mirror" Button in the Organization view (#13105) * Manually approve new registration (#13083) * Cron job to cleanup hook_task table (#13080) * Use the headline comment of pull-request as the squash commit's message (#13071) * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (#12999) * Slightly simplify the queue settings code to help reduce the risk of problems (#12976) * Add precise search type for Elastic Search (#12869) * Move APIFormat functions into convert package (#12856) * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (#12766) * Add TrN for repository limit (#12492) * Refactor doctor (#12264) * Add the tag list page to the release page (#12096) * Redirect on changed user and org name (#11649) * load U2F js only on pages which need it (#11585) * Make archival asynchronous (#11296) * Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (#7420) * Improve vfsgen to not unzip bindata files but send to browser directly (#7109) * Enhance release list (#6025) * DOCS * Swagger show models by default (#14880) * Add missing repo.projects unit into swagger (#14876) * Update docs and comments to remove macaron (#14491) * Issue template addition: Are you using Gitea behind CloudFlare? (#14098) * Generate man pages (#13901) * Reformat/fine-tune docs (#13897) * Added Table of Contents to long documentation pages (#13890) * Add docs command (#13429) * Update external-renderers.en-us.md (#13165) * MISC * Add builds for apple M1 (darwin arm64) (#14951) * Migrate to use jsoniter instead of encoding/json (#14841) * Reduce make verbosity (#13803) * Add git command error directory on log (#13194) -
v1.13.7
v1.13.7 * SECURITY * Update to bluemonday-1.0.6 (#15294) (#15298) * Clusterfuzz found another way (#15160) (#15169) * API * Fix wrong user returned in API (#15139) (#15150) * BUGFIXES * Add 'fonts' into 'KnownPublicEntries' (#15188) (#15317) * Speed up `enry.IsVendor` (#15213) (#15246) * Response 404 for diff/patch of a commit that not exist (#15221) (#15238) * Prevent NPE in CommentMustAsDiff if no hunk header (#15199) (#15201) * MISC * Add size to Save function (#15264) (#15271)
-
v1.14.0-rc2
v1.14.0-rc2 * SECURITY * Fix bug on avatar middleware (#15124) (#15125) * Fix another clusterfuzz identified issue (#15096) (#15113) * Update to goldmark 1.3.3 (#15059) (#15060) * BUGFIXES * Fix the v176 migration (#15110) (#15111) * Fix double 'push tag' action feed (#15078) (#15083) * Remove possible resource leak (#15067) (#15082) * Handle unauthorized user events gracefully (#15071) (#15074)
-
v1.13.6
v1.13.6 * SECURITY * Fix bug on avatar middleware (#15124) (#15125) * Fix another clusterfuzz identified issue (#15096) (#15114) * API * Fix nil exeption for get pull reviews API #15104 (#15106) * BUGFIXES * Fix markdown rendering in milestone content (#15056) (#15092)
-
v1.13.5
v1.13.5 * SECURITY * Update to goldmark 1.3.3 (#15059) (#15061) * API * Fix set milestone on PR creation (#14981) (#15001) * Prevent panic when editing forked repos by API (#14960) (#14963) * BUGFIXES * Fix bug when upload on web (#15042) (#15055) * Delete Labels & IssueLabels on Repo Delete too (#15039) (#15051) * another clusterfuzz spotted issue (#15032) (#15034) * Fix postgres ID sequences broken by recreate-table (#15015) (#15029) * Fix several render issues (#14986) (#15013) * Make sure sibling images get a link too (#14979) (#14995) * Fix Anchor jumping with escaped query components (#14969) (#14977) * fix release mail html template (#14976) * Fix excluding more than two labels on issues list (#14962) (#14973) * don't mark each comment poster as OP (#14971) (#14972) * Add "captcha" to list of reserved usernames (#14930) * Re-enable import local paths after reversion from #13610 (#14925) (#14927)
-
v1.14.0-rc1
* SECURITY * Respect approved email domain list for externally validated user registration (#15014) * Add reverse proxy configuration support for remote IP address detection (#14959) * Ensure validation occurs on clone addresses too (#14994) * BREAKING * Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (#14475) * Migrate from Macaron to Chi framework (#14293) * Deprecate building for mips (#14174) * Consolidate Logos and update README header (#14136) * Inline manifest.json (#14038) * Store repository data in data path if not previously set (#13991) * Rename "gitea" png to "logo" (#13974) * Standardise logging of failed authentication attempts in internal SSH (#13962) * Add markdown support in organization description (#13549) * Improve users management through the CLI (#6001) (#10492) * FEATURES * Create a new issue with reference to lines of code from file view (#14863) * Repository transfer has to be confirmed, if user can not create repo for new owner (#14792) * Allow blocking some email domains from registering an account (#14667) * Create a new issue based on reference to an issue comment (#14366) * Add support to migrate from gogs (#14342) * Add pager to the branches page (#14202) * Minimal OpenID Connect implementation (#14139) * Display current stopwatch in navbar (#14122) * Display SVG files as images instead of text (#14101) * Disable SSH key deletion of externally managed Keys (#13985) * Add support for ed25519_sk and ecdsa_sk SSH keys (#13462) * Add support for Mastodon OAuth2 provider (#13293) * Add gitea sendmail command (#13079) * Create DB session provider(based on xorm) (#13031) * Add dismiss review feature (#12674) * Make manual merge autodetection optional and add manual merge as merge method (#12543) * Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244) * Create Rootless Docker image (#10154) * API * Get pull, return head branch sha, even if deleted (#14931) * Export LFS & TimeTracking function status (#14753) * Show Gitea version in swagger (#14654) * Fix PATCH /repos/{owner}/{repo} panic (#14637) * Add Restricted Field to User (#14630) * Add support for ref parameter to get raw file API (#14602) * Add affected files of commits to commit struct (#14579) * Fix CJK fonts again and misc. font issues (#14575) * Add delete release by tag & delete tag (#14563) & (#13358) * Add pagination to ListBranches (#14524) * Add signoff option in commit form (#14516) * GetRelease by tag only return release (#14397) * Add MirrorInterval to the API (#14163) * Make BasicAuth Prefix case insensitive (#14106) * Add user filter to issueTrackedTimes, enable usage for issue managers (#14081) * Add ref to create/edit issue options & deprecated assignee (#13992) * Add Ref to Issue (#13946) * Expose default theme in meta and API (#13809) * Send error message when CSRF token is missing (#13676) * List, Check, Add & delete endpoints for repository teams (#13630) * Admin EditUser: Make FullName, Email, Website & Location optional (#13562) * Add more filters to issues search (#13514) * Add review request api (#11355) * BUGFIXES * Move setting to enable closing issue via commit in non default branch to repo settings (#14965) * Show correct issues for team dashboard (#14952) * Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (#14932) * Only allow issue labels from owner repository or organization (#14928) * Fix alignment of People and Teams right arrow on org homepage (#14924) * Fix overdue marking of closed issues and milestones (#14923) * Prevent panic when empty MilestoneID in repo/issue/list (#14911) * Fix migration context data (#14910) * Handle URLs with trailing slash (#14852) * Add CORS config on to /login/oauth/access_token endpoint (#14850) * Make searching issues by keyword case insensitive on DB (#14848) * Prevent use of double sub-path and incorrect asset path in manifest (#14827) * Fix link account ui (#14763) * Fix preview status switch button on wiki editor (#14742) * Fix github download on migration (#14703) * Fix svg spacing (#14638) * Prevent adding nil label to .AddedLabels or .RemovedLabels (#14623) * Truncated organizations name (#14615) * Exclude the current dump file from the dump (#14606) * Use OldRef instead of CommitSHA for DeleteBranch comments (#14604) * Ensure memcache caching works when TTL greater than 30 days (#14592) * Remove NULs byte arrays passed to PostProcess (#14587) * Restore detection of branches are equal on compare page (#14586) * Fix incorrect key name so registerManualConfirm works (#14455) * Fix close/reopen with comment (#14436) * Allow passcode invalid error to appear (#14371) * Escape branch names in compare url (#14364) * Label and milestone webhooks on issue/pull creation (#14363) * Handle NotifyCreateRef as create branch in feeds (#14245) * Prevent clipping input text in Chrome + Segoe UI Font (#14179) * Fix UI on edit auth source page (#14137) * Fix git.parseTagData (#14105) * Refactor get tag to remove unnecessary steps (#14058) * Fix integrations test error with space in CURDIR path (#14056) * Dropdown triangle fixes (#14028) * Fix label of --id in admin delete user (#14005) * Cause NotifyMigrateRepository to emit a repo create webhook (#14004) * Update HEAD to match defaultBranch in template generation (#13948) * Fix action avatar loading (#13909) * Fix issue participants (#13893) * Fix avatar template error (#13833) * Fix review request notification email links when external issue tracker is enabled (#13723) * Fix blame line alignment (#13542) * Include OriginalAuthor in Reaction constraint (#13505) * Comments on review should have the same sha (#13448) * Fix whitespace rendering in diff (#13415) * Fixed git args duplication (#13411) * Fix bug on release publisherid migrations (#13410) * Fix --port setting (#13288) * Keep database transactions not too big (#13254) * Git version check, ignore pre-releases constraints (#13234) * Handle and propagate errors when checking if paths are Dirs, Files or Exist (#13186) * Update Mirror IsEmpty status on synchronize (#13185) * Use GO variable in go-check target (#13146) (#13147) * ENHANCEMENTS * UI style improvements * Support .mailmap in code activity stats (#15009) * Sort release attachments by name (#15008) * Add ui.explore settings to control view of explore pages (#14094) * Make internal SSH server host key path configurable (#14918) * Hide resync all ssh principals when using internal ssh server (#14904) * Add SameSite setting for cookies (#14900) * Move Bleve and Elastic code indexers to use a common cat-file --batch (#14781) * Add environment-to-ini to docker image (#14762) * Add preview support for wiki editor when disable simpleMDE (#14757) * Add easyMDE(simpleMDE) support for release content editor (#14744) * Organization removal confirmation using name not password (#14738) * Make branch names in PR description clickable (#14716) * Add Password Algorithm option to install page (#14701) * Add fullTextSearch to dropdowns by default (#14694) * Fix truncated organization names (#14655) * Whitespace in commits (#14650) * Sort / move project boards (#14634) * Make fileheader sticky in diffs (#14616) * Add helper descriptions on new repo page (#14591) * Move the stopwatches to the eventsource stream (#14588) * Add Content-Length header to HEAD requests (#14542) * Add Image Diff options in Diff view (#14450) * Improve Description in new/ edit Project template (#14429) * Allow ssh-keygen on Windows to detect ssh key type (#14413) * Display error if twofaSecret cannot be retrieved (#14372) * Sort issue search results by revelance (#14353) * Implement ghost comment mitigation (#14349) * Upgrade blevesearch dependency to v2.0.1 (#14346) * Add edit, delete and reaction support to code review comments on issue page (#14339) * Merge default and system webhooks under one menu (#14244) * Add option for administrator to reset user 2FA (#14243) * Add option to change username to the admin panel (#14229) * Check for 'main' as potential default branch name (#14193) * Project: show referenced PRs in issue cards (#14183) * Use caddy's certmagic library for extensible/robust ACME handling (#14177) * CLI support for OAuth sources custom icons (#14166) * Custom icons for OAuth sources (#14161) * Team dashboards (#14159) * KanBan: be able to set default board (#14147) * Disable Fomantic's custom scrollbars (#14109) * Add UI to delete tracked times (#14100) * Rework heatmap permissions (#14080) * Issue and pull request filters on organization dashboard (#14072) * Fix webhook list styling (#14001) * Show dropdown with all statuses for commit (#13977) * Show status check for merged PRs (#13975) * Diff stat improvements (#13954) * Report permissions denied in internal SSH (#13953) * Markdown task list improvements (#13952) * Heatmap days clickable (#13935) * chore: use octicon-mirror for feeds display (#13928) * Move diff split code into own template file (#13919) * Markdown: Enable wrapping in code blocks and a color tweak (#13894) * Do not reload page after adding comments in Pull Request reviews (#13877) * Add pull request manually merge instruction (#13840) * add thumbnail preview section to issue attachments (#13826) * Move Repo APIFormat to convert package (#13787) * Move notification APIFormat (#13783) * Swap swagger-ui with swagger-ui-dist (#13777) * User Settings: Ignore empty language codes & validate (#13755) * Improve migrate page and add card CSS (#13751) * Add block on official review requests branch protection (#13705) * Add review requested filter on pull request overview (#13701) * Use chronological commit order in default squash message (#13696) * Clickable links in pull request (and issue) titles (#13695) * Support shortened commit SHAs in URLs (#13686) * Use native git variants by default with go-git variants as build tag (#13673) * Don't render dropdown when only 1 merge style is available (#13670) * Move webhook type from int to string (#13664) * Direct avatar rendering (#13649) * Verify password for local-account activation (#13631) * Prevent clone protocol button flash on page load (#13626) * Remove fetch request from heatmap (#13623) * Refactor combine label comments with tests (#13619) * Move metrics from macaron to chi (#13601) * Issue and Pulls lists rework (#13594) * HTTP cache rework and enable caching for storage assets (#13569) * Use mount but not register for chi routes (#13555) * Use monaco for the git hook editor (#13552) * Make heatmap colors more distinct (#13533) * Lazy-load issue reviewers and assignees avatars (#13526) * Change search and filter icons to SVG (#13473) * Create tag on ui (#13467) * updateSize when create a repo with init commit (#13441) * Added title and action buttons to Project view page (#13437) * Override fomantic monospace fonts and set size (#13435) * Rework focused comment styling (#13434) * Tags cleanup (#13428) * Various style tweaks (#13418) * Refactor push update (#13381) * Comment box tweaks and SVG dropdown triangles (#13376) * Various style fixes (#13372) * Change repo home page icons to SVG (#13364) * Use CSS Vars for primary color (#13361) * Refactor image paste code (#13354) * Switch from SimpleMDE to EasyMDE (#13333) * Group Label Changed Comments in timeline (#13304) * Make the logger an interface (#13294) * Fix PR/Issue titles on mobile (#13292) * Rearrange the order of the merged by etc. in locale (#13284) * Replace footer and modal icons with SVG (#13245) * Issues overview should not show issues from archived repos (#13220) * Show stale label for stale code comment which is marked as resolved (#13213) * Use CSS Variables for fonts, remove postcss-loader (#13204) * Add mentionable teams to tributeValues and change team mention rules to gh's style (#13198) * Move install pages out of main macaron routes (#13195) * Update outdated label to use Fomantic UI style (#13181) * Added option to disable webhooks (#13176) * Change order of possible-owner organizations to alphabetical (#13160) * Log IP on SSH authentication failure for Built-in SSH server (#13150) * Added option to disable migrations (#13114) * New "Add Mirror" Button in the Organization view (#13105) * Manually approve new registration (#13083) * Cron job to cleanup hook_task table (#13080) * Use the headline comment of pull-request as the squash commit's message (#13071) * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (#12999) * Slightly simplify the queue settings code to help reduce the risk of problems (#12976) * Add precise search type for Elastic Search (#12869) * Move APIFormat functions into convert package (#12856) * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (#12766) * Add TrN for repository limit (#12492) * Refactor doctor (#12264) * Add the tag list page to the release page (#12096) * Redirect on changed user and org name (#11649) * load U2F js only on pages which need it (#11585) * Make archival asynchronous (#11296) * Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (#7420) * Improve vfsgen to not unzip bindata files but send to browser directly (#7109) * Enhance release list (#6025) * DOCS * Swagger show models by default (#14880) * Add missing repo.projects unit into swagger (#14876) * Update docs and comments to remove macaron (#14491) * Issue template addition: Are you using Gitea behind CloudFlare? (#14098) * Generate man pages (#13901) * Reformat/fine-tune docs (#13897) * Added Table of Contents to long documentation pages (#13890) * Add docs command (#13429) * Update external-renderers.en-us.md (#13165) * MISC * Add builds for apple M1 (darwin arm64) (#14951) * Migrate to use jsoniter instead of encoding/json (#14841) * Reduce make verbosity (#13803) * Add git command error directory on log (#13194) -
v1.15.0-dev
v1.15.0-dev
-
v1.13.4
v1.13.4 * SECURITY * Fix issue popups (#14898) (#14899) * BUGFIXES * Fix race in LFS ContentStore.Put(...) (#14895) (#14913) * Fix a couple of issues with a feeds (#14897) (#14903) * When transfering repository and database transaction failed, rollback the renames (#14864) (#14902) * Fix race in local storage (#14888) (#14901) * Fix 500 on pull view page if user is not loged in (#14885) (#14886) * DOCS * Fix how lfs data path is set (#14855) (#14884)
-
v1.13.3
v1.13.3 * BREAKING * Turn default hash password algorithm back to pbkdf2 from argon2 until we find a better one (#14673) (#14675) * BUGFIXES * Fix paging of file commit logs (#14831) (#14879) * Print useful error if SQLite is used in settings but not supported (#14476) (#14874) * Fix display since time round (#14226) (#14873) * When Deleting Repository only explicitly close PRs whose base is not this repository (#14823) (#14842) * Set HCaptchaSiteKey on Link Account pages (#14834) (#14839) * Fix a couple of CommentAsPatch issues. (#14804) (#14820) * Disable broken OAuth2 providers at startup (#14802) (#14811) * Repo Transfer permission checks (#14792) (#14794) * Fix double alert in oauth2 application edit view (#14764) (#14768) * Fix broken spans in diffs (#14678) (#14683) * Prevent race in PersistableChannelUniqueQueue.Has (#14651) (#14676) * HasPreviousCommit causes recursive load of commits unnecessarily (#14598) (#14649) * Do not assume all 40 char strings are SHA1s (#14624) (#14648) * Allow org labels to be set with issue templates (#14593) (#14647) * Accept multiple SSH keys in single LDAP SSHPublicKey attribute (#13989) (#14607) * Fix bug about ListOptions and stars/watchers pagnation (#14556) (#14573) * Fix GPG key deletion during account deletion (#14561) (#14569)
-
v1.13.2
v1.13.2 * SECURITY * Prevent panic on fuzzer provided string (#14405) (#14409) * Add secure/httpOnly attributes to the lang cookie (#14279) (#14280) * API * If release publisher is deleted use ghost user (#14375) * BUGFIXES * Internal ssh server respect Ciphers, MACs and KeyExchanges settings (#14523) (#14530) * Set the name Mapper in migrations (#14526) (#14529) * Fix wiki preview (#14515) * Update code.gitea.io/sdk/gitea v0.13.1 -> v0.13.2 (#14497) * ChangeUserName: rename user files back on DB issue (#14447) * Fix lfs preview bug (#14428) (#14433) * Ensure timeout error is shown on u2f timeout (#14417) (#14431) * Fix Deadlock & Delete affected reactions on comment deletion (#14392) (#14425) * Use path not filepath in routers/editor (#14390) (#14396) * Check if label template exist first (#14384) (#14389) * Fix migration v141 (#14387) (#14388) * Use Request.URL.RequestURI() for fcgi (#14347) * Use ServerError provided by Context (#14333) (#14345) * Fix edit-label form init (#14337) * Fix mailIssueCommentBatch for pull request (#14252) (#14296) * Render links for commit hashes followed by comma (#14224) (#14227) * Send notifications for mentions in pulls, issues, (code-)comments (#14218) (#14221) * Fix avatar bugs (#14217) (#14220) * Ensure that schema search path is set with every connection on postgres (#14131) (#14216) * Fix dashboard issues labels filter bug (#14210) (#14214) * When visit /favicon.ico but the static file is not exist return 404 but not continue to handle the route (#14211) (#14213) * Fix branch selector on new issue page (#14194) (#14207) * Check for notExist on profile repository page (#14197) (#14203)
-
v1.13.1
v1.13.1 * SECURITY * Hide private participation in Orgs (#13994) (#14031) * Fix escaping issue in diff (#14153) (#14154) * BUGFIXES * Fix bug of link query order on markdown render (#14156) (#14171) * Drop long repo topics during migration (#14152) (#14155) * Ensure that search term and page are not lost on adoption page-turn (#14133) (#14143) * Fix storage config implementation (#14091) (#14095) * Fix panic in BasicAuthDecode (#14046) (#14048) * Always wait for the cmd to finish (#14006) (#14039) * Don't use simpleMDE editor on mobile devices for 1.13 (#14029) * Fix incorrect review comment diffs (#14002) (#14011) * Trim the branch prefix from action.GetBranch (#13981) (#13986) * Ensure template renderer is available before storage handler (#13164) (#13982) * Whenever the password is updated ensure that the hash algorithm is too (#13966) (#13967) * Enforce setting HEAD in wiki to master (#13950) (#13961) * Fix feishu webhook caused by API changed (#13938) * Fix Quote Reply button on review diff (#13830) (#13898) * Fix Pull Merge when tag with same name as base branch exist (#13882) (#13896) * Fix mermaid chart size (#13865) * Fix branch/tag notifications in mirror sync (#13855) (#13862) * Fix crash in short link processor (#13839) (#13841) * Update font stack to bootstrap's latest (#13834) (#13837) * Make sure email recipients can see issue (#13820) (#13827) * Reply button is not removed when deleting a code review comment (#13824) * When reinitialising DBConfig reset the database use flags (#13796) (#13811) * ENHANCEMENTS * Add emoji in label to project boards (#13978) (#14021) * Send webhook when tag is removed via Web UI (#14015) (#14019) * Use Process Manager to create own Context (#13792) (#13793) * API * GetCombinedCommitStatusByRef always return json & swagger doc fixes (#14047) * Return original URL of Repositories (#13885) (#13886)
-
v1.13.0
* SECURITY * Add Allow-/Block-List for Migrate & Mirrors (#13610) (#13776) * Prevent git operations for inactive users (#13527) (#13536) * Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13524) * Mitigate Security vulnerability in the git hook feature (#13058) * Disable DSA ssh keys by default (#13056) * Set TLS minimum version to 1.2 (#12689) * Use argon as default password hash algorithm (#12688) * BREAKING * Set RUN_MODE prod by default (#13765) (#13767) * Don't replace underscores in auto-generated IDs in goldmark (#12805) * Add Primary Key to Topic and RepoTopic tables (#12639) * Disable password complexity check default (#12557) * Change PIDFile default from /var/run/gitea.pid to /run/gitea.pid (#12500) * Add extension Support to Attachments (allow all types for releases) (#12465) * Remove IE11 Support (#11470) * FEATURES * Adopt repositories (#12920) * Check passwords against HaveIBeenPwned (#12716) * Gitea 2 Gitea migration (#12657) * Support storing Avatars in minio (#12516) * Allow addition of gpg keyring with multiple keys (#12487) * Add email notify for new release (#12463) * Add Access-Control-Expose-Headers (#12446) * UserProfile Page: Render Description (#12415) * Add command to recreate tables (#12407) * Add mermaid JS renderer (#12334) * Add ssh certificate support (#12281) * Add spent time to referenced issue in commit message (#12220) * Initial support for push options (#12169) * Provide option to unlink a fork (#11858) * Show exact tag for commit on diff view (#11846) * Pause, Resume, Release&Reopen, Add and Remove Logging from command line (#11777) * Issue templates directory (#11450) * Add a storage layer for attachments (#11387) * Add hide activity option (#11353) * Add push commits history comment on PR time-line (#11167) * Support elastic search for code search (#10273) * Kanban board (#8346) * API * If User is Admin, show 500 error message on PROD mode too (#13115) * Add Timestamp to Tag list API (#13026) * Return sample message for login error in api context (#12994) * Add IsTemplate option in create repo ui and api (#12942) * GetReleaseByID return 404 if not found (#12933) * Get release by tags endpoint (#12932) * NotificationSubject show Issue/Pull State (#12901) * Expose its limitation settings (#12714) * Add Created & Updated to Milestone (#12662) * Milestone endpoints accept names too (#12649) * Expose Attachment Settings in the API (#12514) * Add Issue and Repo info to StopWatch (#12458) * Add cron running API (#12421) * Add Update Pull HeadBranch Function (#12419) * Add TOTP header to Swagger Documentation (#12402) * Delete Token accept names too (#12366) * Add name filter for GetMilestoneList (#12336) * Fixed count of filtered issues when api request. (#12275) * Do not override API issue pagination with UI settings (#12068) * Expose useful General Repo settings settings (#11758) * Return error when trying to create Mirrors but Mirrors are globally disabled (#11757) * Provide diff and patch API endpoints (#11751) * Allow to create closed milestones (#11745) * Add language Statistics endpoint (#11737) * Add Endpoint to get GetGeneralUI Settings (#11735) & (#11854) * Issue/Pull expose IsLocked Property on API (#11708) * Add endpoint for Branch Creation (#11607) * Add pagination headers on endpoints that support total count from database (#11145) * BUGFIXES * Fix bogus http requests on diffs (#13760) (#13761) * Show 'owner' tag for real owner (#13689) (#13743) * Validate email before inserting/updating (#13475) (#13666) * Fix issue/pull request list assignee filter (#13647) (#13651) * Gitlab migration support for subdirectories (#13563) (#13591) * Fix logic for preferred license setting (#13550) (#13557) * Add missed sync branch/tag webhook (#13538) (#13556) * Migration won't fail on non-migrated reactions (#13507) * Fix Italian language file parsing error (#13156) * Show outdated comments in pull request (#13148) (#13162) * Fix parsing of pre-release git version (#13169) (#13172) * Fix diff skipping lines (#13154) (#13155) * When handling errors in storageHandler check underlying error (#13178) (#13193) * Fix size and clickable area on file table back link (#13205) (#13207) * Add better error checking for inline html diff code (#13251) * Fix initial commit page & binary munching problem (#13249) (#13258) * Fix migrations from remote Gitea instances when configuration not set (#13229) (#13273) * Store task errors following migrations and display them (#13246) (#13287) * Fix bug isEnd detection on getIssues/getPullRequests (#13299) (#13301) * When the git ref is unable to be found return broken pr (#13218) (#13303) * Ensure topics added using the API are added to the repository (#13285) (#13302) * Fix avatar autogeneration (#13233) (#13282) * Add migrated pulls to pull request task queue (#13331) (#13334) * Issue comment reactions should also check pull type on API (#13349) (#13350) * Fix links to repositories in /user/setting/repos (#13360) (#13362) * Remove obsolete change of email on profile page (#13341) (#13347) * Fix scrolling to resolved comment anchors (#13343) (#13371) * Storage configuration support `[storage]` (#13314) (#13379) * When creating line diffs do not split within an html entity (#13357) (#13375) (#13425) (#13427) * Fix reactions on code comments (#13390) (#13401) * Add missing full names when DEFAULT_SHOW_FULL_NAME is enabled (#13424) * Replies to outdated code comments should also be outdated (#13217) (#13433) * Fix panic bug in handling multiple references in commit (#13486) (#13487) * Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13491) * Show original author's reviews on pull summary box (#13127) * Update golangci-lint to version 1.31.0 (#13102) * Fix line break for MS teams webhook (#13081) * Fix Issue & Pull Request comment headers on mobile (#13039) * Avoid setting the CONN_STR in queues unless it is meant to be set (#13025) * Remove code-view class from diff view (#13011) * Fix the color of PR comment hyperlinks. (#13009) * (Re)Load issue labels when changing them (#13007) * Fix Media links in org files not liked to media files (#12997) * Always return a list from GetCommitsFromIDs (#12981) * Only set the user password if the password field would have been shown (#12980) * Fix admin/config page (#12979) * Changed width of commit signature avatar (#12961) * Completely quote AppPath and CustomConf paths (#12955) * Fix handling of migration errors (#12928) * Fix anonymous GL migration (#12862) * Fix git open close bug (#12834) * Fix markdown meta parsing (#12817) * Add default storage configurations (#12813) * Show PR settings on empty repos (#12808) * Disable watch and star if not signed in (#12807) * Whilst changing the character set to utf8mb4 we should set ROW_FORMAT=dynamic too (#12804) * Set opengraph attributes on org pages (#12803) * Return error when creating gitlabdownloader failed (#12790) * Add migration for password algorithm change (#12784) * Compare SSH_DOMAIN when parsing submodule URLs (#12753) * Fix editor.commit_empty_file_text locale string (#12744) * Fix wrong poster message for code comment on Pull view (#11721) * Escape failed highlighted files (#12685) * Ensure that all migration requests are cancellable (#12669) * Ensure RepoPath is lowercased in gitea serv (#12668) * Do not disable commit changes button on repost (#12644) * Dark theme for line numbers in blame view (#12632) * Fix message when deleting last owner from an organization (#12628) * Use shellquote to unpack arguments to gitea serv (#12624) * Fix signing.wont_sign.%!s(<nil>) if Require Signing commits but not signed in. (#12581) * Set utf8mb4 as the default charset on MySQL if CHARSET is unset (#12563) * Set context for running CreateArchive to that of the request (#12555) * Prevent redirect back to /user/events (#12462) * Re-attempt to delete temporary upload if the file is locked by another process (#12447) * Mirror System Notice reports are too frequent (#12438) * Do not show arrows on comment diffs on pull comment pages (#12434) * Fix milestone links (#12405) * Increase size of the language column in language_stat (#12396) * Use transaction in V102 migration (#12395) * Only use --exclude on name-rev with git >= 2.13 (#12347) * Add action feed for new release (#12324) * Set NoAutoTime when updating is_archived (#12266) * Support Force-update in Mirror and improve Tracing in mirror (#12242) * Avoid sending "0 new commits" webhooks (#12212) * Fix U2F button icon (#12167) * models/repo_sign.go: break out of loops (#12159) * Ensure that git commit tree continues properly over the page (#12142) * Rewrite GitGraph.js (#12137) * Fix repo API listing stability (#12057) * Add team support for review request (#12039) * Fix 500 error on repos with no tags (#11870) * Fix nil pointer in default issue mail template (#11862) * Fix commit search in all branches (#11849) * Don't consider tag refs as valid for branch name (#11847) * Don't add same line code comment box twice (#11837) * Fix visibility of forked public repos from private orgs (#11717) * Fix chardet test and add ordering option (#11621) * Fix number of files, total additions, and deletions on Diff pages (#11614) * Properly handle and return empty string for dangling commits in GetBranchName (#11587) * Include query in sign in redirect (#11579) * Fix Enter not working in SimpleMDE (#11564) * Fix bug about can't skip commits base on base branch (#11555) * ENHANCEMENTS * Only Return JSON for responses (#13511) (#13565) * Use existing analyzer module for language detection for highlighting (#13522) (#13551) * Return the full rejection message and errors in flash errors (#13221) (#13237) * Remove PAM from auth dropdown when unavailable (#13276) (#13281) * Add HostCertificate to sshd_config in Docker image (#13143) * Save TimeStamps for Star, Label, Follow, Watch and Collaboration to Database (#13124) * Improve error feedback for duplicate deploy keys (#13112) * Set appropriate `autocomplete` attributes on password fields (#13078) * Adding visual cue for "Limited" & "Private" organizations. (#13040) * Fix Pull Request merge buttons on mobile (#13035) * Gitea serv, hooks, manager and the like should always display Fatals (#13032) * CSS tweaks to warning/error segments and misc fixes (#13024) * Fix formatting of branches ahead-behind on narrow windows (#12989) * Add config option to make create-on-push repositories public by default (#12936) * Disable migration items when mirror is selected (#12918) * Add the checkbox quick button to the comment tool bar also (#12885) * Support GH enterprise (#12863) * Simplify CheckUnitUser logic (#12854) * Fix background of signed-commits on arc-green of timeline commits (#12837) * Move git update-server-info to hooks (#12826) * Add ui style for "Open a blank issue" button (#12824) * Use a simple format for the big number on ui (#12822) * Make SVG size argument optional (#12814) * Add placeholder text for bio profile text form (#12792) * Set language via AJAX (#12785) * Show git-pull-request icon for closed pull request (#12742) * Migrate version parsing library to hashicorp/go-version (#12719) * Only use async pre-empt hack if go < 1.15 (#12718) * Inform user about meaning of an hourglass on reviews (#12713) * Add a migrate service type switch page (#12697) * Migrations: Gitlab Add Reactions Support for Issues & MergeRequests (#12695) * Remove duplicate logic in initListSubmits (#12660) * Set avatar image dimensions (#12654) * Rename models.ProtectedBranchRepoID/PRID to models.EnvRepoID/PRID and ensure EnvPusherEmail is set (#12646) * Set setting.AppURL as GITEA_ROOT_URL environment variable during pushes (#12752) * Add postgres schema to the search_path on database connection (#12634) * Git migration UX improvements (#12619) * Add link to home page on swagger ui (#12601) * hCaptcha Support (#12594) * OpenGraph: use repo avatar if exist (#12586) * Reaction picker display improvements (#12576) * Fix emoji replacements, make emoji images consistent (#12567) * Increase clickable area on files table links (#12553) * Set z-index for sticky diff box lower (#12537) * Report error if API merge is not allowed (#12528) * LFS support to be stored on minio (#12518) * Show 2FA info on Admin Pannel: Users List (#12515) * Milestone Issue/Pull List: Add octicons type (#12499) * Make dashboard newsfeed list length a configurable item (#12469) * Add placeholder text for send testing email button in admin/config (#12452) * Add SVG favicon (#12437) * In issue comments, put issue participants also in completion list when hitting @ (#12433) * Collapse Swagger UI tags by default (#12428) * Detect full references to issues and pulls in commit messages (#12399) * Allow common redis and leveldb connections (#12385) * Don't use legacy method to send Matrix Webhook (#12348) * Remove padding/border-radius on image diffs (#12346) * Render the git graph on the server (#12333) * Fix clone panel in wiki position not always align right (#12326) * Rework 'make generate-images' (#12316) * Refactor webhook payload convertion (#12310) * Move jquery-minicolors to npm/webpack (#12305) * Support use nvarchar for all varchar columns when using mssql (#12269) * Update Octicons to v10 (#12240) * Disable search box autofocus (#12229) * Replace code fold icons with octicons (#12222) * Ensure syntax highlighting is the same inside diffs (#12205) * Auto-init repo on license, .gitignore select (#12202) * Default to showing closed Issues/PR list when there are only closed issues/PRs (#12200) * Enable cloning via Git Wire Protocol v2 over HTTP (#12170) * Direct SVG rendering (#12157) * Improve arc-green code colors (#12111) * Allow admin to merge pr with protected file changes (#12078) * Show description on individual milestone view (#12055) * Update the wiki repository remote origin while update the mirror repository's Clone From URL (#12053) * Server-side syntax highlighting for all code (#12047) * Use Fomantic's fluid padded for blame full width (#12023) * Use custom SVGs for commit signing lock icon (#12017) * Make tabs smaller (#12003) * Fix sticky diff stats container (#12002) * Move fomantic and jQuery to main webpack bundle (#11997) * Use enry language type to detect special languages (#11974) * Use only first line of commit when creating referenced comment (#11960) * Rename custom/conf/app.ini.sample to custom/conf/app.example.ini for better syntax light on editor (#11926) * Fix double divider on issue sidebar (#11919) * Shorten markdown heading anchors links (#11903) * Add org avatar on top of internal repo icon (#11895) * Use label to describe repository type (#11891) * Make repository size unclickable on repo summary bar (#11887) * Rework blame template and styling (#11885) * Fix icon alignment for show/hide outdated link on resolved conversation (#11881) * Vertically align review icons on repository sidebar (#11880) * Better align items using flex within review request box (#11879) * Only write to global gitconfig if necessary (#11876) * Disable all typographic replacements in markdown renderer (#11871) * Improve label edit buttons labels (#11841) * Use crispEdges rendering for octicon-internal-repo (#11801) * Show update branch item in merge box when it's necessary (#11761) * Add compare link to releases (#11752) * Allow site admin to disable mirrors (#11740) * Export monaco editor on window.codeEditors (#11739) * Add configurable Trust Models (#11712) * Show full GPG commit status on PR commit history (#11702) * Fix align issues and decrease avatar size on PR timeline (#11689) * Replace jquery-datetimepicker with native date input (#11684) * Change Style of Tags on Comments (#11668) * Fix missing styling for shabox on PR commit history (#11625) * Apply padding to approval icons on PR list (#11622) * Fix message wrapping on PR commit list (#11616) * Right-align status icon on pull request commit history (#11594) * Add missing padding for multi-commit list on PR view (#11593) * Do not show avatar for "{{user}} added X commits" (#11591) * Fix styling and padding for commit list on PR view (#11588) * Style code review comment for arc-green (#11572) * Use default commit message for wiki edits (#11550) * Add internal-repo octicon for public repos of private org (#11529) * Fix dropzone color on arc-green (#11514) * Insert ui divider directly in templates instead of from inside heatmap vue component (#11508) * Move tributejs to npm/webpack (#11497) * Fix text-transform on wiki revisions page (#11486) * Do not show lock icon on repo list for public repos in private org (#11445) * Include LFS when calculating repo size (#11060) * Add check for LDAP group membership (#10869) * When starting new stopwatch stop previous if it is still running (#10533) * Add queue for code indexer (#10332) * Move all push update operations to a queue (#10133) * Cache last commit when pushing for big repository (#10109) * Change/remove a branch of an open issue (#9080) * Sortable Tables Header By Click (#7980) * TESTING * Use community codecov drone plugin (#12468) * Add more tests for diff highlighting (#12467) * Don't put integration test data outside of test folder (#11746) * Add debug option to hooks (#11624) * Log slow tests (#11487) * TRANSLATION * Translate two small lables on commit statuse list (#12821) * Make issues.force_push_codes message shorter (#11575) * BUILD * Bump min required golang to 1.13 (#12717) * Add 'make watch' (#12636) * Extract Swagger CSS to its own file (#12616) * Update eslint config (#12609) * Avoid unnecessary system-ui expansion (#12522) * Make the default PID file compile-time settable (#12485) * Add 'watch-backend' (#12330) * Detect version of sed in Makefile (#12319) * Update gitea-vet to v0.2.1 (#12282) * Add logic to build stable and edge builds for gitea snap (#12052) * Fix missing CGO_EXTRA_FLAGS build arg for docker (#11782) * Alpine 3.12 (#11720) * Enable stylelint's shorthand-property-no-redundant-values (#11436) * DOCS * Change default log configuration (#13088) * Add automatic JS license generation (#11810) * Remove page size limit comment from swagger (#11806) * Narrow down Edge version in browser support docs (#11640)