Releases: go-gitea/gitea
Releases · go-gitea/gitea
v1.13.7
- SECURITY
- Update to bluemonday-1.0.6 (#15294) (#15298) CVE-2021-29272
- Clusterfuzz found another way (#15160) (#15169)
- API
- BUGFIXES
- MISC
v1.14.0-rc2
- SECURITY
- BUGFIXES
v1.13.6
v1.13.5
- SECURITY
- API
- BUGFIXES
- Fix bug when upload on web (#15042) (#15055)
- Delete Labels & IssueLabels on Repo Delete too (#15039) (#15051)
- Fix postgres ID sequences broken by recreate-table (#15015) (#15029)
- Fix several render issues (#14986) (#15013)
- Make sure sibling images get a link too (#14979) (#14995)
- Fix Anchor jumping with escaped query components (#14969) (#14977)
- Fix release mail html template (#14976)
- Fix excluding more than two labels on issues list (#14962) (#14973)
- Don't mark each comment poster as OP (#14971) (#14972)
- Add "captcha" to list of reserved usernames (#14930)
- Re-enable import local paths after reversion from #13610 (#14925) (#14927)
v1.14.0-rc1
- SECURITY
- BREAKING
- Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (#14475)
- Migrate from Macaron to Chi framework (#14293)
- Deprecate building for mips (#14174)
- Consolidate Logos and update README header (#14136)
- Inline manifest.json (#14038)
- Store repository data in data path if not previously set (#13991)
- Rename "gitea" png to "logo" (#13974)
- Standardise logging of failed authentication attempts in internal SSH (#13962)
- Add markdown support in organization description (#13549)
- Improve users management through the CLI (#6001) (#10492)
- FEATURES
- Create a new issue with reference to lines of code from file view (#14863)
- Repository transfer has to be confirmed, if user can not create repo for new owner (#14792)
- Allow blocking some email domains from registering an account (#14667)
- Create a new issue based on reference to an issue comment (#14366)
- Add support to migrate from gogs (#14342)
- Add pager to the branches page (#14202)
- Minimal OpenID Connect implementation (#14139)
- Display current stopwatch in navbar (#14122)
- Display SVG files as images instead of text (#14101)
- Disable SSH key deletion of externally managed Keys (#13985)
- Add support for ed25519_sk and ecdsa_sk SSH keys (#13462)
- Add support for Mastodon OAuth2 provider (#13293)
- Add gitea sendmail command (#13079)
- Create DB session provider(based on xorm) (#13031)
- Add dismiss review feature (#12674)
- Make manual merge autodetection optional and add manual merge as merge method (#12543)
- Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244)
- Create Rootless Docker image (#10154)
- API
- Get pull, return head branch sha, even if deleted (#14931)
- Export LFS & TimeTracking function status (#14753)
- Show Gitea version in swagger (#14654)
- Fix PATCH /repos/{owner}/{repo} panic (#14637)
- Add Restricted Field to User (#14630)
- Add support for ref parameter to get raw file API (#14602)
- Add affected files of commits to commit struct (#14579)
- Fix CJK fonts again and misc. font issues (#14575)
- Add delete release by tag & delete tag (#14563) & (#13358)
- Add pagination to ListBranches (#14524)
- Add signoff option in commit form (#14516)
- GetRelease by tag only return release (#14397)
- Add MirrorInterval to the API (#14163)
- Make BasicAuth Prefix case insensitive (#14106)
- Add user filter to issueTrackedTimes, enable usage for issue managers (#14081)
- Add ref to create/edit issue options & deprecated assignee (#13992)
- Add Ref to Issue (#13946)
- Expose default theme in meta and API (#13809)
- Send error message when CSRF token is missing (#13676)
- List, Check, Add & delete endpoints for repository teams (#13630)
- Admin EditUser: Make FullName, Email, Website & Location optional (#13562)
- Add more filters to issues search (#13514)
- Add review request api (#11355)
- BUGFIXES
- Move setting to enable closing issue via commit in non default branch to repo settings (#14965)
- Show correct issues for team dashboard (#14952)
- Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (#14932)
- Only allow issue labels from owner repository or organization (#14928)
- Fix alignment of People and Teams right arrow on org homepage (#14924)
- Fix overdue marking of closed issues and milestones (#14923)
- Prevent panic when empty MilestoneID in repo/issue/list (#14911)
- Fix migration context data (#14910)
- Handle URLs with trailing slash (#14852)
- Add CORS config on to /login/oauth/access_token endpoint (#14850)
- Make searching issues by keyword case insensitive on DB (#14848)
- Prevent use of double sub-path and incorrect asset path in manifest (#14827)
- Fix link account ui (#14763)
- Fix preview status switch button on wiki editor (#14742)
- Fix github download on migration (#14703)
- Fix svg spacing (#14638)
- Prevent adding nil label to .AddedLabels or .RemovedLabels (#14623)
- Truncated organizations name (#14615)
- Exclude the current dump file from the dump (#14606)
- Use OldRef instead of CommitSHA for DeleteBranch comments (#14604)
- Ensure memcache caching works when TTL greater than 30 days (#14592)
- Remove NULs byte arrays passed to PostProcess (#14587)
- Restore detection of branches are equal on compare page (#14586)
- Fix incorrect key name so registerManualConfirm works (#14455)
- Fix close/reopen with comment (#14436)
- Allow passcode invalid error to appear (#14371)
- Escape branch names in compare url (#14364)
- Label and milestone webhooks on issue/pull creation (#14363)
- Handle NotifyCreateRef as create branch in feeds (#14245)
- Prevent clipping input text in Chrome + Segoe UI Font (#14179)
- Fix UI on edit auth source page (#14137)
- Fix git.parseTagData (#14105)
- Refactor get tag to remove unnecessary steps (#14058)
- Fix integrations test error with space in CURDIR path (#14056)
- Dropdown triangle fixes (#14028)
- Fix label of --id in admin delete user (#14005)
- Cause NotifyMigrateRepository to emit a repo create webhook (#14004)
- Update HEAD to match defaultBranch in template generation (#13948)
- Fix action avatar loading (#13909)
- Fix issue participants (#13893)
- Fix avatar template error (#13833)
- Fix review request notification email links when external issue tracker is enabled (#13723)
- Fix blame line alignment (#13542)
- Include OriginalAuthor in Reaction constraint (#13505)
- Comments on review should have the same sha (#13448)
- Fix whitespace rendering in diff (#13415)
- Fixed git args duplication (#13411)
- Fix bug on release publisherid migrations (#13410)
- Fix --port setting (#13288)
- Keep database transactions not too big (#13254)
- Git version check, ignore pre-releases constraints (#13234)
- Handle and propagate errors when checking if paths are Dirs, Files or Exist (#13186)
- Update Mirror IsEmpty status on synchronize (#13185)
- Use GO variable in go-check target (#13146) (#13147)
- ENHANCEMENTS
- UI style improvements
- Support .mailmap in code activity stats (#15009)
- Sort release attachments by name (#15008)
- Add ui.explore settings to control view of explore pages (#14094)
- Make internal SSH server host key path configurable (#14918)
- Hide resync all ssh principals when using internal ssh server (#14904)
- Add SameSite setting for cookies (#14900)
- Move Bleve and Elastic code indexers to use a common cat-file --batch (#14781)
- Add environment-to-ini to docker image (#14762)
- Add preview support for wiki editor when disable simpleMDE (#14757)
- Add easyMDE(simpleMDE) support for release content editor (#14744)
- Organization removal confirmation using name not password (#14738)
- Make branch names in PR description clickable (#14716)
- Add Password Algorithm option to install page (#14701)
- Add fullTextSearch to dropdowns by default (#14694)
- Fix truncated organization names (#14655)
- Whitespace in commits (#14650)
- Sort / move project boards (#14634)
- Make fileheader sticky in diffs (#14616)
- Add helper descriptions on new repo page (#14591)
- Move the stopwatches to the eventsource stream (#14588)
- Add Content-Length header to HEAD requests (#14542)
- Add Image Diff options in Diff view (#14450)
- Improve Description in new/ edit Project template (#14429)
- Allow ssh-keygen on Windows to detect ssh key type (#14413)
- Display error if twofaSecret cannot be retrieved (#14372)
- Sort issue search results by revelance (#14353)
- Implement ghost comment mitigation (#14349)
- Upgrade blevesearch dependency to v2.0.1 (#14346)
- Add edit, delete and reaction support to code review comments on issue page (#14339)
- Merge default and system webhooks under one menu (#14244)
- Add option for administrator to reset user 2FA (#14243)
- Add option to change username to the admin panel (#14229)
- Check for 'main' as potential default branch name (#14193)
- Project: show referenced PRs in issue cards (#14183)
- Use caddy's certmagic library for extensible/robust ACME handling (#14177)
- CLI support for OAuth sources custom icons (#14166)
- Custom icons for OAuth sources (#14161)
- Team dashboards (#14159)
- KanBan: be able to set default board (#14147)
- Disable Fomantic's custom scrollbars (#14109)
- Add UI to delete tracked times (#14100)
- Rework heatmap permissions (#14080)
- Issue and pull request filters on organization dashboard (#14072)
- Fix webhook list styling (#14001)
- Show dropdown with all statuses for commit (#13977)
- Show status check for merged PRs (#13975)
- Diff stat improvements (#13954)
- Report permissions denied in internal SSH (#13953)
- Markdown task list improvements (#13952)
- Heatmap days clickable (#13935)
- chore: use octicon-mirror for feeds display (#13928)
- Move diff split code into own template file (#13919)
- Markdown: Enable wrapping in code blocks and a color tweak (#13894)
- Do not reload page after adding comments in Pull Request reviews (#13877)
- Add pull request manually merge instruction (#13840)
- add thumbnail preview section to issue attachments (#13826)
- Move Repo APIFormat to convert package (#13787)
- Move notification APIFormat (#13783)
- Swap swagger-ui with swagger-ui-dist (#13777)
- User Settings: Ignore empty langu...
v1.13.4
- SECURITY
- Fix issue popups (#14898) (#14899) CVE-2021-28378
- BUGFIXES
- Fix race in LFS ContentStore.Put(...) (#14895) (#14913)
- Fix a couple of issues with a feeds (#14897) (#14903)
- When transfering repository and database transaction failed, rollback the renames (#14864) (#14902)
- Fix race in local storage (#14888) (#14901)
- Fix 500 on pull view page if user is not loged in (#14885) (#14886)
- DOCS
v1.13.3
- BREAKING & SECURITY
- BUGFIXES
- Fix paging of file commit logs (#14831) (#14879)
- Print useful error if SQLite is used in settings but not supported (#14476) (#14874)
- Fix display since time round (#14226) (#14873)
- When Deleting Repository only explicitly close PRs whose base is not this repository (#14823) (#14842)
- Set HCaptchaSiteKey on Link Account pages (#14834) (#14839)
- Fix a couple of CommentAsPatch issues. (#14804) (#14820)
- Disable broken OAuth2 providers at startup (#14802) (#14811)
- Repo Transfer permission checks (#14792) (#14794)
- Fix double alert in oauth2 application edit view (#14764) (#14768)
- Fix broken spans in diffs (#14678) (#14683)
- Prevent race in PersistableChannelUniqueQueue.Has (#14651) (#14676)
- HasPreviousCommit causes recursive load of commits unnecessarily (#14598) (#14649)
- Do not assume all 40 char strings are SHA1s (#14624) (#14648)
- Allow org labels to be set with issue templates (#14593) (#14647)
- Accept multiple SSH keys in single LDAP SSHPublicKey attribute (#13989) (#14607)
- Fix bug about ListOptions and stars/watchers pagnation (#14556) (#14573)
- Fix GPG key deletion during account deletion (#14561) (#14569)
v1.13.2
- SECURITY
- API
- If release publisher is deleted use ghost user (#14375)
- BUGFIXES
- Internal ssh server respect Ciphers, MACs and KeyExchanges settings (#14523) (#14530)
- Set the name Mapper in migrations (#14526) (#14529)
- Fix wiki preview (#14515)
- Update code.gitea.io/sdk/gitea v0.13.1 -> v0.13.2 (#14497)
- ChangeUserName: rename user files back on DB issue (#14447)
- Fix lfs preview bug (#14428) (#14433)
- Ensure timeout error is shown on u2f timeout (#14417) (#14431)
- Fix Deadlock & Delete affected reactions on comment deletion (#14392) (#14425)
- Check if label template exist first (#14384) (#14389)
- Fix migration v141 (#14387) (#14388)
- Use Request.URL.RequestURI() for fcgi (#14347)
- Use ServerError provided by Context (#14333) (#14345)
- Fix edit-label form init (#14337)
- Fix mailIssueCommentBatch for pull request (#14252) (#14296)
- Render links for commit hashes followed by comma (#14224) (#14227)
- Send notifications for mentions in pulls, issues, (code-)comments (#14218) (#14221)
- Fix avatar bugs (#14217) (#14220)
- Ensure that schema search path is set with every connection on postgres (#14131) (#14216)
- Fix dashboard issues labels filter bug (#14210) (#14214)
- When visit /favicon.ico but the static file is not exist return 404 but not continue to handle the route (#14211) (#14213)
- Fix branch selector on new issue page (#14194) (#14207)
- Check for notExist on profile repository page (#14197) (#14203)
v1.13.1
Support Gitea development, we now have a shop for Swag
- SECURITY
- BUGFIXES
- Fix bug of link query order on markdown render (#14156) (#14171)
- Drop long repo topics during migration (#14152) (#14155)
- Ensure that search term and page are not lost on adoption page-turn (#14133) (#14143)
- Fix storage config implementation (#14091) (#14095)
- Fix panic in BasicAuthDecode (#14046) (#14048)
- Always wait for the cmd to finish (#14006) (#14039)
- Don't use simpleMDE editor on mobile devices for 1.13 (#14029)
- Fix incorrect review comment diffs (#14002) (#14011)
- Trim the branch prefix from action.GetBranch (#13981) (#13986)
- Ensure template renderer is available before storage handler (#13164) (#13982)
- Whenever the password is updated ensure that the hash algorithm is too (#13966) (#13967)
- Enforce setting HEAD in wiki to master (#13950) (#13961)
- Fix feishu webhook caused by API changed (#13938)
- Fix Quote Reply button on review diff (#13830) (#13898)
- Fix Pull Merge when tag with same name as base branch exist (#13882) (#13896)
- Fix mermaid chart size (#13865)
- Fix branch/tag notifications in mirror sync (#13855) (#13862)
- Fix crash in short link processor (#13839) (#13841)
- Update font stack to bootstrap's latest (#13834) (#13837)
- Make sure email recipients can see issue (#13820) (#13827)
- Reply button is not removed when deleting a code review comment (#13824)
- When reinitialising DBConfig reset the database use flags (#13796) (#13811)
- ENHANCEMENTS
- API
v1.13.0
Support Gitea development, we now have a shop for Swag
- SECURITY
- Add Allow-/Block-List for Migrate & Mirrors (#13610) (#13776)
- Prevent git operations for inactive users (#13527) (#13536)
- Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13524)
- Mitigate Security vulnerability in the git hook feature (#13058)
- Disable DSA ssh keys by default (#13056)
- Set TLS minimum version to 1.2 (#12689)
- Use argon as default password hash algorithm (#12688)
- BREAKING
- Set RUN_MODE prod by default (#13765) (#13767)
- Don't replace underscores in auto-generated IDs in goldmark (#12805)
- Add Primary Key to Topic and RepoTopic tables (#12639)
- Disable password complexity check default (#12557)
- Change PIDFile default from /var/run/gitea.pid to /run/gitea.pid (#12500)
- Add extension Support to Attachments (allow all types for releases) (#12465)
- Remove IE11 Support (#11470)
- FEATURES
- Adopt repositories (#12920)
- Check passwords against HaveIBeenPwned (#12716)
- Gitea 2 Gitea migration (#12657)
- Support storing Avatars in minio (#12516)
- Allow addition of gpg keyring with multiple keys (#12487)
- Add email notify for new release (#12463)
- Add Access-Control-Expose-Headers (#12446)
- UserProfile Page: Render Description (#12415)
- Add command to recreate tables (#12407)
- Add mermaid JS renderer (#12334)
- Add ssh certificate support (#12281)
- Add spent time to referenced issue in commit message (#12220)
- Initial support for push options (#12169)
- Provide option to unlink a fork (#11858)
- Show exact tag for commit on diff view (#11846)
- Pause, Resume, Release&Reopen, Add and Remove Logging from command line (#11777)
- Issue templates directory (#11450)
- Add a storage layer for attachments (#11387)
- Add hide activity option (#11353)
- Add push commits history comment on PR time-line (#11167)
- Support elastic search for code search (#10273)
- Kanban board (#8346)
- API
- If User is Admin, show 500 error message on PROD mode too (#13115)
- Add Timestamp to Tag list API (#13026)
- Return sample message for login error in api context (#12994)
- Add IsTemplate option in create repo ui and api (#12942)
- GetReleaseByID return 404 if not found (#12933)
- Get release by tags endpoint (#12932)
- NotificationSubject show Issue/Pull State (#12901)
- Expose its limitation settings (#12714)
- Add Created & Updated to Milestone (#12662)
- Milestone endpoints accept names too (#12649)
- Expose Attachment Settings in the API (#12514)
- Add Issue and Repo info to StopWatch (#12458)
- Add cron running API (#12421)
- Add Update Pull HeadBranch Function (#12419)
- Add TOTP header to Swagger Documentation (#12402)
- Delete Token accept names too (#12366)
- Add name filter for GetMilestoneList (#12336)
- Fixed count of filtered issues when api request. (#12275)
- Do not override API issue pagination with UI settings (#12068)
- Expose useful General Repo settings settings (#11758)
- Return error when trying to create Mirrors but Mirrors are globally disabled (#11757)
- Provide diff and patch API endpoints (#11751)
- Allow to create closed milestones (#11745)
- Add language Statistics endpoint (#11737)
- Add Endpoint to get GetGeneralUI Settings (#11735) & (#11854)
- Issue/Pull expose IsLocked Property on API (#11708)
- Add endpoint for Branch Creation (#11607)
- Add pagination headers on endpoints that support total count from database (#11145)
- BUGFIXES
- Fix bogus http requests on diffs (#13760) (#13761)
- Show 'owner' tag for real owner (#13689) (#13743)
- Validate email before inserting/updating (#13475) (#13666)
- Fix issue/pull request list assignee filter (#13647) (#13651)
- Gitlab migration support for subdirectories (#13563) (#13591)
- Fix logic for preferred license setting (#13550) (#13557)
- Add missed sync branch/tag webhook (#13538) (#13556)
- Migration won't fail on non-migrated reactions (#13507)
- Fix Italian language file parsing error (#13156)
- Show outdated comments in pull request (#13148) (#13162)
- Fix parsing of pre-release git version (#13169) (#13172)
- Fix diff skipping lines (#13154) (#13155)
- When handling errors in storageHandler check underlying error (#13178) (#13193)
- Fix size and clickable area on file table back link (#13205) (#13207)
- Add better error checking for inline html diff code (#13251)
- Fix initial commit page & binary munching problem (#13249) (#13258)
- Fix migrations from remote Gitea instances when configuration not set (#13229) (#13273)
- Store task errors following migrations and display them (#13246) (#13287)
- Fix bug isEnd detection on getIssues/getPullRequests (#13299) (#13301)
- When the git ref is unable to be found return broken pr (#13218) (#13303)
- Ensure topics added using the API are added to the repository (#13285) (#13302)
- Fix avatar autogeneration (#13233) (#13282)
- Add migrated pulls to pull request task queue (#13331) (#13334)
- Issue comment reactions should also check pull type on API (#13349) (#13350)
- Fix links to repositories in /user/setting/repos (#13360) (#13362)
- Remove obsolete change of email on profile page (#13341) (#13347)
- Fix scrolling to resolved comment anchors (#13343) (#13371)
- Storage configuration support
[storage]
(#13314) (#13379) - When creating line diffs do not split within an html entity (#13357) (#13375) (#13425) (#13427)
- Fix reactions on code comments (#13390) (#13401)
- Add missing full names when DEFAULT_SHOW_FULL_NAME is enabled (#13424)
- Replies to outdated code comments should also be outdated (#13217) (#13433)
- Fix panic bug in handling multiple references in commit (#13486) (#13487)
- Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13491)
- Show original author's reviews on pull summary box (#13127)
- Update golangci-lint to version 1.31.0 (#13102)
- Fix line break for MS teams webhook (#13081)
- Fix Issue & Pull Request comment headers on mobile (#13039)
- Avoid setting the CONN_STR in queues unless it is meant to be set (#13025)
- Remove code-view class from diff view (#13011)
- Fix the color of PR comment hyperlinks. (#13009)
- (Re)Load issue labels when changing them (#13007)
- Fix Media links in org files not liked to media files (#12997)
- Always return a list from GetCommitsFromIDs (#12981)
- Only set the user password if the password field would have been shown (#12980)
- Fix admin/config page (#12979)
- Changed width of commit signature avatar (#12961)
- Completely quote AppPath and CustomConf paths (#12955)
- Fix handling of migration errors (#12928)
- Fix anonymous GL migration (#12862)
- Fix git open close bug (#12834)
- Fix markdown meta parsing (#12817)
- Add default storage configurations (#12813)
- Show PR settings on empty repos (#12808)
- Disable watch and star if not signed in (#12807)
- Whilst changing the character set to utf8mb4 we should set ROW_FORMAT=dynamic too (#12804)
- Set opengraph attributes on org pages (#12803)
- Return error when creating gitlabdownloader failed (#12790)
- Add migration for password algorithm change (#12784)
- Compare SSH_DOMAIN when parsing submodule URLs (#12753)
- Fix editor.commit_empty_file_text locale string (#12744)
- Fix wrong poster message for code comment on Pull view (#11721)
- Escape failed highlighted files (#12685)
- Ensure that all migration requests are cancellable (#12669)
- Ensure RepoPath is lowercased in gitea serv (#12668)
- Do not disable commit changes button on repost (#12644)
- Dark theme for line numbers in blame view (#12632)
- Fix message when deleting last owner from an organization (#12628)
- Use shellquote to unpack arguments to gitea serv (#12624)
- Fix signing.wont_sign.%!s() if Require Signing commits but not signed in. (#12581)
- Set utf8mb4 as the default charset on MySQL if CHARSET is unset (#12563)
- Set context for running CreateArchive to that of the request (#12555)
- Prevent redirect back to /user/events (#12462)
- Re-attempt to delete temporary upload if the file is locked by another process (#12447)
- Mirror System Notice reports are too frequent (#12438)
- Do not show arrows on comment diffs on pull comment pages (#12434)
- Fix milestone links (#12405)
- Increase size of the language column in language_stat (#12396)
- Use transaction in V102 migration (#12395)
- Only use --exclude on name-rev with git >= 2.13 (#12347)
- Add action feed for new release (#12324)
- Set NoAutoTime when updating is_archived (#12266)
- Support Force-update in Mirror and improve Tracing in mirror (#12242)
- Avoid sending "0 new commits" webhooks (#12212)
- Fix U2F button icon (#12167)
- models/repo_sign.go: break out of loops (#12159)
- Ensure that git commit tree continues properly over the page (#12142)
- Rewrite GitGraph.js (#12137)
- Fix repo API listing stability (#12057)
- Add team support for review request (#12039)
- Fix 500 error on repos with no tags (#11870)
- Fix nil pointer in default issue mail template (#11862)
- Fix commit search in all branches (#11849)
- Don't consider tag refs as valid for branch name (#11847)
- Don't add same line code comment box twice (#11837)
- Fix visibility of forked public repos from private orgs (#11717)
- Fix chardet test and add ordering option (#11621)
- Fix number of files, total additions, and deletions on Diff pages (#11614)
- Properly handle and return empty string for dangling commits in GetBranchName (#11587)
- Include query in sign in redirect (#11579)
- Fix Enter not working in SimpleMDE...