Gitea Changelog

What's new in Gitea 1.22.0 RC 1

Apr 29, 2024
  • Remember login for a month by default (#30150)
  • Breaking summary for template refactoring (#29395)
  • Recommend/convert to use case-sensitive collation for MySQL/MSSQL (#28662)
  • Make offline mode as default to no connect external avatar service by default (#28548)
  • Include public repos in doer's dashboard for issue search (#28304)
  • Support storage base path as prefix (#27827)
  • Enhanced auth token / remember me (#27606)
  • Rename the default themes to gitea-light, gitea-dark, gitea-auto (#27419)
  • If you didn't see the new themes, please remove the [ui].THEMES config option from app.ini
  • Require MySQL 8.0 (MariaDB 10), PostgreSQL 12, MSSQL 2012 (#27337)

New in Gitea 1.21.11 (Apr 16, 2024)

  • SECURITY:
  • Use go1.21.9 to include Golang security fix
  • Fix possible renderer security problem (#30136) (#30315)
  • BUGFIXES:
  • Fix close file in the Upload func (#30262) (#30269)
  • Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250)
  • Fix missing 0 prefix of GPG key id (#30245) (#30247)
  • Include encoding in signature payload (#30174) (#30181)
  • Move from max( id ) to max( index ) for latest commit statuses (#30076) (#30155)
  • Load attachments for code comments (#30124) (#30126)
  • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#30094) (#30120)
  • Fix possible data race on tests (#30093) (#30108)
  • Performance optimization for git push (#30104)
  • Fix duplicate migrated milestones (#30102) (#30105)
  • Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100)
  • Fix incorrect SVGs (#30087)
  • Fix create commit status (#30225) (#30340)
  • Performance optimization for git push (#30104) (#30354)
  • Fix misuse of unsupported global variables (#30402)
  • Fix to delete the cookie when AppSubURL is non-empty (#30375) (#30468)
  • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30408)
  • Change the default maxPerPage for gitbucket (#30392) (#30471)
  • Check the token's owner and repository when registering a runner (#30406) (#30412)
  • Avoid losing token when updating mirror settings (#30429) (#30466)
  • Fix commit status cache which missed target_url (#30426) (#30445)
  • Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437)
  • Fix mirror error when mirror repo is empty (#30432) (#30467)
  • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#29990) (#30447)
  • Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497)
  • DOCS:
  • Update actions variables documents (#30394) (#30405)
  • MISC:
  • Update katex to 0.16.10 (#30089)
  • Upgrade go-sqlite to v1.14.22 (#30467)

New in Gitea 1.21.10 (Mar 26, 2024)

  • BUGFIXES:
  • Fix Add/Remove WIP on pull request title failure (#29999) (#30066)
  • Fix misuse of TxContext (#30061) (#30062)
  • Respect DEFAULT_ORG_MEMBER_VISIBLE setting when adding creator to org (#30013) (#30035)
  • MISC:
  • Escape paths for find file correctly (#30026) (#30031)
  • Remove duplicate option in admin screen and now-unused translation keys (#28492) (#30024)
  • Fix manual merge form and 404 page templates (#30000)

New in Gitea 1.21.9 (Mar 22, 2024)

  • PERFORMANCE:
  • Only do counting when count_only=true for repo dashboard (#29884) (#29905)
  • Add cache for dashboard commit status (#29932)
  • ENHANCEMENT:
  • Make runs-on support variable expression (#29468) (#29782)
  • Show Actions post step when it's running (#29926) (#29928)
  • BUGFIXES:
  • Fix PR creation via API between branches of the same repo with head field namespaced (#26986) (#29857)
  • Fix and rewrite markup anchor processing (#29931) (#29946)
  • Notify reviewers added via CODEOWNERS (#29842) (#29902)
  • Fix template error when comment review doesn't exist (#29888) (#29889)
  • Fix user id column case (#29863) (#29867)
  • Make meilisearch do exact search for issues (#29740 & #29671) (#29846)
  • Fix the for attribute not pointing to the ID of the color picker (#29813) (#29815)
  • Fix codeowner detected diff base branch to mergebase (#29783) (#29807)
  • Fix Safari spinner rendering (#29801) (#29802)
  • Fix missing translation on milestones (#29785) (#29789)
  • Fix user router possible panic (#29751) (#29786)
  • Fix possible NPE in ToPullReviewList (#29759) (#29775)
  • Fix the wrong default value of ENABLE_OPENID_SIGNIN on docs (#29925) (#29927)
  • Solving the issue of UI disruption when the review is deleted without refreshing (#29951) (#29968)
  • Fix loadOneBranch panic (#29938) (#29939)
  • Fix invalid link of the commit status when ref is tagged (#29752) (#29908)
  • Editor error message misleading due to re-used key. (#29859) (#29876)
  • Fix double border and border-radius on empty action steps (#29845) (#29850)
  • Use Temporal.PlainDate for absolute dates (#29804) (#29808)
  • Fix incorrect package link method calls in templates (#29580) (#29764)
  • Fix the bug that the user may log out if GetUserByID returns unknown error (#29962) (#29964)
  • Performance improvements for pull request list page (#29900) (#29972)
  • Fix bugs in rerunning jobs (#29983) (#29955)

New in Gitea 1.21.8 (Mar 13, 2024)

  • SECURITY:
  • Only use supported sort orders for "/explore/users" page
  • ENHANCEMENTS:
  • Fix wrong line number in code search result
  • BUGFIXES:
  • Use Get but not Post to get actions artifacts
  • Fix inconsistent rendering of block mathematical expressions
  • Fix rendering internal file links in org
  • Don't show AbortErrors on logout
  • Fix user-defined markup links targets
  • Fix incorrect rendering csv file when file size is larger than UI.CSV.MaxFileSize
  • Fix hidden test's failure
  • Add empty repo check-in DetectAndHandleSchedules
  • Fix 500 when deleting an account with an incorrect password or unsupported login type
  • Use strict protocol check when redirect
  • Avoid issue info panic
  • Avoid unexpected panic in graceful manager
  • Make "/user/login" page redirect if the current user has signed in
  • Fix workflow trigger event IssueChangeXXX bug
  • Fix incorrect cookie path for AppSubURL
  • Fix queue worker incorrectly stopped when there are still more items in the queue
  • Fix incorrect redirection when creating a PR fails
  • Fix incorrect subpath in links
  • Fix issue link does not support quotes
  • Fix issue & comment history bugs
  • Set pre-step status to skipped if the job is skipped
  • Fix/Improve processWindowErrorEvent
  • Fix counter display number incorrectly displayed on the page
  • Fix workflow trigger event bugs
  • Fix URL calculation in the clone input box
  • The job should always run when if is always()
  • Fix template bug
  • Not trigger all jobs anymore when re-running the first job
  • Ignore empty repo for CreateRepository in action notifier
  • Fix incorrect tree path value for patch editor
  • Add missing database transaction for new issues
  • Fix 500 when pushing release to an empty repo
  • Fix incorrect relative/absolute URL usages
  • Fix wrong test usage of AppSubURL
  • Fix missed return
  • Fixing the issue when status checks per rule matches multiple actions
  • Improve contrast on blame timestamp, fix double border

New in Gitea 1.21.7 (Feb 26, 2024)

  • ENHANCEMENTS:
  • Users with read permission of pull requests can be assigned too (#27263) (#29372)
  • BUGFIXES:
  • Do not double close reader (#29354) (#29370)
  • Display friendly error message (#29105) (#29363)
  • Fix project counter in organization/individual profile (#28068) (#29361)
  • Fix validity of the FROM email address not being checked (#29347) (#29360)
  • Fix tarball/zipball download bug (#29342) (#29352)
  • DOCS:
  • Docker Tag Information in Docs (#29047) (#29362)
  • MISC:
  • Enforce maxlength in frontend (#29389) (#29396)

New in Gitea 1.21.6 (Feb 23, 2024)

  • SECURITY:
  • Fix XSS vulnerabilities (#29336)
  • Use general token signing secret (#29205) (#29325)
  • API:
  • Refactor issue template parsing and fix API endpoint (#29069) (#29140)
  • Fix swift packages not resolving (#29095) (#29102)
  • ENHANCEMENTS:
  • Refactor git version functions and check compatibility (#29155) (#29157)
  • Improve user experience for outdated comments (#29050) (#29086)
  • Hide code links on release page if user cannot read code (#29064) (#29066)
  • Wrap contained tags and branches again (#29021) (#29026)
  • Fix incorrect button CSS usages (#29015) (#29023)
  • Strip trailing newline in markdown code copy (#29019) (#29022)
  • BUGFIXES:
  • Remove SSH workaround (#27893) (#29332)
  • Only log error when tag sync fails (#29295) (#29327)
  • Fix SSPI user creation (#28948) (#29323)
  • Improve the issue_comment workflow trigger event (#29277) (#29322)
  • Discard unread data of git cat-file (#29297) (#29310)
  • Fix error display when merging PRs (#29288) (#29309)
  • Prevent double use of git cat-file session. (#29298) (#29301)
  • Fix missing link on outgoing new release notifications (#29079) (#29300)
  • Fix debian InRelease Acquire-By-Hash newline (#29204) (#29299)
  • Always write proc-receive hook for all git versions (#29287) (#29291)
  • Do not show delete button when time tracker is disabled (#29257) (#29279)
  • Workaround to clean up old reviews on creating a new one (#28554) (#29264)
  • Fix bug when the linked account was disactived and list the linked accounts (#29263)
  • Do not use lower tag names to find releases/tags (#29261) (#29262)
  • Fix missed edit issues event for actions (#29237) (#29251)
  • Only delete scheduled workflows when needed (#29091) (#29235)
  • Make submit event code work with both jQuery event and native event (#29223) (#29234)
  • Fix push to create with capitalize repo name (#29090) (#29206)
  • Use ghost user if user was not found (#29161) (#29169)
  • Dont load Review if Comment is CommentTypeReviewRequest (#28551) (#29160)
  • Refactor parseSignatureFromCommitLine (#29054) (#29108)
  • Avoid showing unnecessary JS errors when there are elements with different origin on the page (#29081) (#29089)
  • Fix gitea-origin-url with default ports (#29085) (#29088)
  • Fix orgmode link resolving (#29024) (#29076)
  • Fix: Elasticsearch: Request Entity Too Large #28117 (#29062) (#29075)
  • Do not render empty comments (#29039) (#29049)
  • Avoid sending update/delete release notice when it is draft (#29008) (#29025)
  • DOCS:
  • Rm outdated docs from some languages (#27530) (#29208)
  • MISC:
  • Implement some action notifier functions (#29173) (#29308)
  • Fix gitea-action user avatar broken on edited menu (#29190) (#29307)
  • Disallow merge when required checked are missing (#29143) (#29268)
  • Convert visibility to number (#29226) (#29244)
  • Load outdated comments when (un)resolving conversation on PR timeline (#29203) (#29221)
  • Fix incorrect link to swift doc and swift package-registry login command (#29096) (#29103)
  • Fix typos in the documentation (#29048) (#29056)
  • Explained where create issue/PR template (#29035)

New in Gitea 1.21.5 (Feb 1, 2024)

  • SECURITY:
  • Prevent anonymous container access if RequireSignInView is enabled (#28877) (#28882)
  • Update go dependencies and fix go-git (#28893) (#28934)
  • BUGFIXES:
  • Revert "Speed up loading the dashboard on mysql/mariadb (#28546)" (#29006) (#29007)
  • Fix an actions schedule bug (#28942) (#28999)
  • Fix update enable_prune even if mirror_interval is not provided (#28905) (#28929)
  • Fix uploaded artifacts should be overwritten (#28726) backport v1.21 (#28832)
  • Preserve BOM in web editor (#28935) (#28959)
  • Strip / from relative links (#28932) (#28952)
  • Don't remove all mirror repository's releases when mirroring (#28817) (#28939)
  • Implement MigrateRepository for the actions notifier (#28920) (#28923)
  • Respect branch info for relative links (#28909) (#28922)
  • Don't reload timeline page when (un)resolving or replying conversation (#28654) (#28917)
  • Only migrate the first 255 chars of a Github issue title (#28902) (#28912)
  • Fix sort bug on repository issues list (#28897) (#28901)
  • Fix DeleteCollaboration transaction behaviour (#28886) (#28889)
  • Fix schedule not trigger bug because matching full ref name with short ref name (#28874) (#28888)
  • Fix migrate storage bug (#28830) (#28867)
  • Fix archive creating LFS hooks and breaking pull requests (#28848) (#28851)
  • Fix reverting a merge commit failing (#28794) (#28825)
  • Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate (#28891) (#28895)
  • Fix incorrect PostgreSQL connection string for Unix sockets (#28865) (#28870)
  • ENHANCEMENTS:
  • Make loading animation less aggressive (#28955) (#28956)
  • Avoid duplicate JS error messages on UI (#28873) (#28881)
  • Bump @github/relative-time-element to 4.3.1 (#28819) (#28826)
  • MISC:
  • Warn that DISABLE_QUERY_AUTH_TOKEN is false only if it's explicitly defined (#28783) (#28868)
  • Remove duplicated checkinit on git module (#28824) (#28831)

New in Gitea 1.21.4 (Jan 17, 2024)

  • SECURITY:
  • Update github.com/cloudflare/circl (#28789) (#28790)
  • Require token for GET subscription endpoint (#28765) (#28768)
  • BUGFIXES:
  • Use refname:strip-2 instead of refname:short when syncing tags (#28797) (#28811)
  • Fix links in issue card (#28806) (#28807)
  • Fix nil pointer panic when exec some gitea cli command (#28791) (#28795)
  • Require token for GET subscription endpoint (#28765) (#28778)
  • Fix button size in "attached header right" (#28770) (#28774)
  • Fix convert.ToTeams on empty input (#28426) (#28767)
  • Hide code related setting options in repository when code unit is disabled (#28631) (#28749)
  • Fix incorrect URL for "Reference in New Issue" (#28716) (#28723)
  • Fix panic when parsing empty pgsql host (#28708) (#28709)
  • Upgrade xorm to new version which supported update join for all supported databases (#28590) (#28668)
  • Fix alpine package files are not rebuilt (#28638) (#28665)
  • Avoid cycle-redirecting user/login page (#28636) (#28658)
  • Fix empty ref for cron workflow runs (#28640) (#28647)
  • Remove unnecessary syncbranchToDB with tests (#28624) (#28629)
  • Use known issue IID to generate new PR index number when migrating from GitLab (#28616) (#28618)
  • Fix flex container width (#28603) (#28605)
  • Fix the scroll behavior for emoji/mention list (#28597) (#28601)
  • Fix wrong due date rendering in issue list page (#28588) (#28591)
  • Fix status_check_contexts matching bug (#28582) (#28589)
  • Fix 500 error of searching commits (#28576) (#28579)
  • Use information from previous blame parts (#28572) (#28577)
  • Update mermaid for 1.21 (#28571)
  • Fix 405 method not allowed CORS / OIDC (#28583) (#28586) (#28587) (#28611)
  • Fix GetCommitStatuses (#28787) (#28804)
  • Forbid removing the last admin user (#28337) (#28793)
  • Fix schedule tasks bugs (#28691) (#28780)
  • Fix issue dependencies (#27736) (#28776)
  • Fix system webhooks API bug (#28531) (#28666)
  • Fix when private user following user, private user will not be counted in his own view (#28037) (#28792)
  • Render code block in activity tab (#28816) (#28818)
  • ENHANCEMENTS:
  • Rework markup link rendering (#26745) (#28803)
  • Modernize merge button (#28140) (#28786)
  • Speed up loading the dashboard on mysql/mariadb (#28546) (#28784)
  • Assign pull request to project during creation (#28227) (#28775)
  • Show description as tooltip instead of title for labels (#28754) (#28766)
  • Make template DateTime show proper tooltip (#28677) (#28683)
  • Switch destination directory for apt signing keys (#28639) (#28642)
  • Include heap pprof in diagnosis report to help debugging memory leaks (#28596) (#28599)
  • DOCS:
  • Suggest to use Type=simple for systemd service (#28717) (#28722)
  • Extend description for ARTIFACT_RETENTION_DAYS (#28626) (#28630)
  • MISC:
  • Add -F to commit search to treat keywords as strings (#28744) (#28748)
  • Add download attribute to release attachments (#28739) (#28740)
  • Concatenate error in checkIfPRContentChanged (#28731) (#28737)
  • Improve 1.21 document for Database Preparation (#28643) (#28644)

New in Gitea 1.21.3 (Dec 21, 2023)

  • SECURITY:
  • Update golang.org/x/crypto (#28519)
  • API:
  • Fix merging artifact chunks error when minio storage basepath is set (#28555) (#28568) chore(api): support ignore password if login source type is LDAP for creating user API (#28491) (#28525)
  • Add endpoint for not implemented Docker auth (#28457) (#28462)
  • ENHANCEMENTS:
  • Add option to disable ambiguous unicode characters detection (#28454) (#28499) Refactor SSH clone URL generation code (#28421) (#28480)
  • Polyfill SubmitEvent for PaleMoon (#28441) (#28478)
  • BUGFIXES:
  • Fix the issue ref rendering for wiki (#28556) (#28559)
  • Fix duplicate ID when deleting repo (#28520) (#28528)
  • Only check online runner when detecting matching runners in workflows (#28286) (#28512)
  • Initalize stroage for orphaned repository doctor (#28487) (#28490)
  • Fix possible nil pointer access (#28428) (#28440)
  • Don't show unnecessary citation JS error on UI (#28433) (#28437)
  • DOCS: Update actions document about comparsion as Github Actions (#28560) (#28564)
  • Fix documents for "custom/public/assets/" (#28465) (#28467)
  • MISC:
  • Fix inperformant query on retrifing review from database. (#28552) (#28562)
  • Improve the prompt for "ssh-keygen sign" (#28509) (#28510)
  • Update docs for DISABLE_QUERY_AUTH_TOKEN (#28485) (#28488)
  • Fix Chinese translation of config cheat sheet[API] (#28472) (#28473)
  • Retry SSH key verification with additional CRLF if it failed (#28392) (#28464)

New in Gitea 1.21.2 (Dec 12, 2023)

  • SECURITY:
  • Rebuild with recently released golang version
  • Fix missing check
  • Do some missing checks
  • BUGFIXES:
  • Fix margin in server signed signature verification view
  • Fix object does not exist error when checking citation file
  • Use filepath instead of path to create SQLite3 database file
  • Fix the runs will not be displayed bug when the main branch have no workflows but other branches have
  • Handle repository.size column being NULL in migration v263
  • Convert git commit summary to valid UTF8.
  • Fix migration panic due to an empty review comment diff
  • Add HEAD support for rpm repo files
  • Fix RPM/Debian signature key creation
  • Keep profile tab when clicking on Language
  • Fix missing issue search index update when changing status
  • Fix wrong link in protect_branch_name_pattern_desc
  • Read previous info from git blame
  • Ignore "non-existing" errors when getDirectorySize calculates the size
  • Use appSubUrl for OAuth2 callback URL tip
  • Meilisearch: require all query terms to be matched
  • Fix required error for token name
  • Fix issue will be detected as pull request when checking First-time contributor
  • Use full width for project boards
  • Increase "version" when update the setting value to a same value as before
  • Also sync DB branches on push if necessary
  • Make gogit Repository.GetBranchNames consistent
  • Recover from panic in cron task
  • Deprecate query string auth tokens
  • ENHANCEMENTS:
  • Improve doctor cli behavior
  • Fix margin in server signed signature verification view
  • Refactor template empty checks
  • Read previous info from git blame
  • Use full width for project boards
  • Enable system users search via the API

New in Gitea 1.21.1 (Nov 27, 2023)

  • SECURITY:
  • Fix comment permissions (#28213) (#28216)
  • BUGFIXES:
  • Fix delete-orphaned-repos (#28200) (#28202)
  • Make CORS work for oauth2 handlers (#28184) (#28185)
  • Fix missing buttons (#28179) (#28181)
  • Fix no ActionTaskOutput table waring (#28149) (#28152)
  • Fix empty action run title (#28113) (#28148)
  • Use "is-loading" to avoid duplicate form submit for code comment (#28143) (#28147)
  • Fix Matrix and MSTeams nil dereference (#28089) (#28105)
  • Fix incorrect pgsql conn builder behavior (#28085) (#28098)
  • Fix system config cache expiration timing (#28072) (#28090)
  • Restricted users only see repos in orgs which their team was assigned to (#28025) (#28051)
  • API
  • Fix permissions for Token DELETE endpoint to match GET and POST (#27610) (#28099)
  • ENHANCEMENTS:
  • Do not display search box when there's no packages yet (#28146) (#28159)
  • Add missing packages.cleanup.success (#28129) (#28132)
  • DOCS:
  • Docs: Replace deprecated IS_TLS_ENABLED mailer setting in email setup (#28205) (#28208)
  • Fix the description about the default setting for action in quick start document (#28160) (#28168)
  • Add guide page to actions when there's no workflows (#28145) (#28153)
  • MISC:
  • Use full width for PR comparison (#28182) (#28186)

New in Gitea 1.20.5 (Oct 3, 2023)

  • ENHANCEMENTS:
  • Fix z-index on markdown completion (#27237) (#27242 & #27238)
  • Use secure cookie for HTTPS sites (#26999) (#27013)
  • BUGFIXES:
  • Fix git 2.11 error when checking IsEmpty (#27393) (#27396)
  • Allow get release download files and lfs files with oauth2 token format (#26430) (#27378)
  • Fix orphan check for deleted branch (#27310) (#27320)
  • Quote table release in sql queries (#27205) (#27219)
  • Fix release URL in webhooks (#27182) (#27184)
  • Fix successful return value for SyncAndGetUserSpecificDiff (#27152) (#27156)
  • fix pagination for followers and following (#27127) (#27138)
  • Fix issue templates when blank isses are disabled (#27061) (#27082)
  • Fix context cache bug & enable context cache for dashabord commits' authors(#26991) (#27017)
  • Fix INI parsing for value with trailing slash (#26995) (#27001)
  • Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27249)
  • Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27167 & #27162)
  • Fix bug of review request number (#27406) (#27104)
  • TESTING:
  • services/wiki: Close() after error handling (#27129) (#27137)
  • DOCS:
  • Improve actions docs related to pull_request event (#27126) (#27145)
  • MISC:
  • Add logs for data broken of comment review (#27326) (#27344)
  • Load reviewer before sending notification (#27063) (#27064)

New in Gitea 1.20.4 (Sep 8, 2023)

  • SECURITY:
  • Check blocklist for emails when adding them to account
  • ENHANCEMENTS:
  • Add branch_filter to hooks API endpoints
  • Fix incorrect "tabindex" attributes
  • Use line-height: normal by default
  • Fix unable to display individual-level project
  • BUGFIXES:
  • Fix wrong review requested number
  • Avoid double-unescaping of form value
  • Redirect from {repo}/issues/new to {repo}/issues/new/choose when blank issues are disabled
  • Sync tags when adopting repos
  • Fix verifyCommits error when push a new branch
  • Include the GITHUB_TOKEN/GITEA_TOKEN secret for fork pull requests
  • Fix some slice append usages
  • Add fix incorrect can_create_org_repo for org owner team
  • Fix bug for ctx usage
  • Make issue template field template access correct template data
  • Use correct minio error
  • Ignore the trailing slashes when comparing oauth2 redirect_uri
  • Set errwriter for urfave/cli v1
  • Fix reopen logic for agit flow pull request
  • Fix context filter has no effect in dashboard
  • Fix being unable to use a repo that prohibits accepting PRs as a PR source.
  • Fix Page Not Found error

New in Gitea 1.20.3 (Aug 21, 2023)

  • BREAKING:
  • Fix the wrong derive path (#26271) (#26318)
  • SECURITY:
  • Fix API leaking Usermail if not logged in (#25097) (#26350)
  • FEATURES:
  • Add ThreadID parameter for Telegram webhooks (#25996) (#26480)
  • ENHANCEMENTS:
  • Add minimum polyfill to support "relative-time-element" in PaleMoon (#26575) (#26578)
  • Fix dark theme highlight for "NameNamespace" (#26519) (#26527)
  • Detect ogg mime-type as audio or video (#26494) (#26505)
  • Use object-fit: contain for oauth2 custom icons (#26493) (#26498)
  • Move dropzone progress bar to bottom to show filename when uploading (#26492) (#26497)
  • Remove last newline from config file (#26468) (#26471)
  • Minio: add missing region on client initialization (#26412) (#26438)
  • Add pull request review request webhook event (#26401) (#26407)
  • Fix text truncate (#26354) (#26384)
  • Fix incorrect color of selected assignees when create issue (#26324) (#26372)
  • Display human-readable text instead of cryptic filemodes (#26352) (#26358)
  • Hide last indexed SHA when a repo could not be indexed yet (#26340) (#26345)
  • Fix the topic validation rule and suport dots (#26286) (#26303)
  • Fix due date rendering the wrong date in issue (#26268) (#26274)
  • Don't autosize textarea in diff view (#26233) (#26244)
  • Fix commit compare style (#26209) (#26226)
  • Warn instead of reporting an error when a webhook cannot be found (#26039) (#26211)
  • BUGFIXES:
  • Use "input" event instead of "keyup" event for migration form (#26602) (#26605)
  • Do not use deprecated log config options by default (#26592) (#26600)
  • Fix "issueReposQueryPattern does not match query" (#26556) (#26564)
  • Sync repo's IsEmpty status correctly (#26517) (#26560)
  • Fix project filter bugs (#26490) (#26558)
  • Use hidden over clip for text truncation (#26520) (#26522)
  • Set "type=button" for editor's toolbar buttons (#26510) (#26518)
  • Fix NuGet search endpoints (#25613) (#26499)
  • Fix storage path logic especially for relative paths (#26441) (#26481)
  • Close stdout correctly for "git blame" (#26470) (#26473)
  • Check first if minio bucket exists before trying to create it (#26420) (#26465)
  • Avoiding accessing undefined tributeValues #26461 (#26462)
  • Call git.InitSimple for runRepoSyncReleases (#26396) (#26450)
  • Add transaction when creating pull request created dirty data (#26259) (#26437)
  • Fix wrong middleware sequence (#26428) (#26436)
  • Fix admin queue page title and fix CI failures (#26409) (#26421)
  • Introduce ctx.PathParamRaw to avoid incorrect unescaping (#26392) (#26405)
  • Bypass MariaDB performance bug of the "IN" sub-query, fix incorrect IssueIndex (#26279) (#26368)
  • Fix incorrect CLI exit code and duplicate error message (#26346) (#26347)
  • Prevent newline errors with Debian packages (#26332) (#26342)
  • Fix bug with sqlite load read (#26305) (#26339)
  • Make git batch operations use parent context timeout instead of default timeout (#26325) (#26330)
  • Support getting changed files when commit ID is EmptySHA (#26290) (#26316)
  • Clarify the logger's MODE config option (#26267) (#26281)
  • Use shared template for webhook icons (#26242) (#26246)
  • Fix pull request check list is limited (#26179) (#26245)
  • Fix attachment clipboard copy on insecure origin (#26224) (#26231)
  • Fix access check for org-level project (#26182) (#26223)
  • MISC:
  • Improve profile readme rendering (#25988) (#26453)
  • [docs] Add missing backtick in quickstart.zh-cn.md (#26349) (#26357)
  • Upgrade x/net to 0.13.0 (#26301)

New in Gitea 1.20.2 (Jul 30, 2023)

  • ENHANCEMENTS:
  • Calculate MAX_WORKERS default value by CPU number (#26177) (#26183)
  • Display deprecated warning in admin panel pages as well as in the log file (#26094) (#26154)
  • BUGFIXES:
  • Fix allowed user types setting problem (#26200) (#26206)
  • Fix handling of plenty Nuget package versions (#26075) (#26173)
  • Fix UI regression of asciinema player (#26159) (#26162)
  • Fix LFS object list style (#26133) (#26147)
  • Fix allowed user types setting problem (#26200) (#26206)
  • Prevent primary key update on migration (#26192) (#26199)
  • Fix bug when pushing to a pull request which enabled dismiss approval automatically (#25882) (#26158)
  • Fix bugs in LFS meta garbage collection (#26122) (#26157)
  • Update xorm version (#26128) (#26150)
  • Remove "misc" scope check from public API endpoints (#26134) (#26149)
  • Fix CLI allowing creation of access tokens with existing name (#26071) (#26144)
  • Fix incorrect router logger (#26137) (#26143)
  • Improve commit graph alignment and truncating (#26112) (#26127)
  • Avoid writing config file if not installed (#26107) (#26113)
  • Fix escape problems in the branch selector (#25875) (#26103)
  • Fix handling of Debian files with trailing slash (#26087) (#26098)
  • Fix Missing 404 swagger response docs for /admin/users/{username} (#26086) (#26089)
  • Use stderr as fallback if the log file can't be opened (#26074) (#26083)
  • Increase table cell horizontal padding (#26140) (#26142)
  • Fix wrong workflow status when rerun a job in an already finished workflow (#26119) (#26124)
  • Fix duplicated url prefix on issue context menu (#26066) (#26067)

New in Gitea 1.20.1 (Jul 22, 2023)

  • SECURITY:
  • Disallow dangerous URL schemes
  • ENHANCEMENTS:
  • Show the mismatched ROOT_URL warning on the sign-in page if OAuth2 is enabled
  • Make pending commit status yellow again
  • BUGFIXES:
  • Fix version in rpm repodata/primary.xml.gz
  • Fix env config parsing for "GITEA____APP_NAME"
  • ParseScope with owner/repo always sets owner to zero
  • Fix SSPI auth panic
  • Avoid creating directories when loading config
  • Make environment-to-ini work with INSTALL_LOCK=true
  • Ignore runs-on with expressions when warning no matched runners
  • Avoid opening/closing PRs which are already merged
  • DOCS:
  • RPM Registry: Show zypper commands for SUSE based distros as well
  • Correctly refer to dev tags as nightly in the docker docs
  • Update path related documents
  • MISC:
  • Adding remaining enum for migration repo model type.
  • Fix the route for pull-request's authors
  • Fix commit status color on dashboard repolist
  • Avoid hard-coding height in language dropdown menu
  • Add shutting down notice
  • Fix incorrect milestone count when provide a keyword

New in Gitea 1.20.0 (Jul 17, 2023)

  • BREAKING:
  • Fix WORK_DIR for docker (root) image (#25738) (#25811)
  • Restrict [actions].DEFAULT_ACTIONS_URL to only github or self (#25581) (#25604)
  • Refactor path & config system (#25330) (#25416)
  • Fix all possible setting error related storages and added some tests (#23911) (#25244)
  • Use a separate admin page to show global stats, remove actions stat (#25062)
  • Remove the service worker (#25010)
  • Remove meta tags theme-color and default-theme (#24960)
  • Use [git.config] for reflog cleaning up (#24958)
  • Allow all URL schemes in Markdown links by default (#24805)
  • Redesign Scoped Access Tokens (#24767)
  • Fix team members API endpoint pagination (#24754)
  • Rewrite logger system (#24726)
  • Increase default LFS auth timeout from 20m to 24h (#24628)
  • Rewrite queue (#24505)
  • Remove unused setting time.FORMAT (#24430)
  • Refactor setting.Other and remove unused SHOW_FOOTER_BRANDING (#24270)
  • Correct the access log format (#24085)
  • Reserve ".png" suffix for user/org names (#23992)
  • Prefer native parser for SSH public key parsing (#23798)
  • Editor preview support for external renderers (#23333)
  • Add Gitea Profile Readmes (#23260)
  • Refactor ctx in templates (#23105)
  • SECURITY:
  • Test if container blob is accessible before mounting (#22759) (#25784)
  • Set type="password" on all auth_token fields (#22175)
  • FEATURES:
  • Add button on diff header to copy file name, misc diff header tweaks (#24986)
  • API endpoint for changing/creating/deleting multiple files (#24887)
  • Support changing git config through app.ini, use diff.algorithm=histogram by default (#24860)
  • Add up and down arrows to selected lookup repositories (#24727)
  • Add Go package registry (#24687)
  • Add status indicator on main home screen for each repo (#24638)
  • Support for status check pattern (#24633)
  • Implement Cargo HTTP index (#24452)
  • Add Debian package registry (#24426)
  • Add the ability to pin Issues (#24406)
  • Add follow organization and fix the logic of following page (#24345)
  • Allow webp images as avatars (#24248)
  • Support upload outputs and use needs context on Actions (#24230)
  • Allow adding new files to an empty repo (#24164)
  • Make wiki title supports dashes and improve wiki name related features (#24143)
  • Add monospace toggle button to textarea (#24034)
  • Use auto-updating, natively hoverable, localized time elements (#23988)
  • Add ntlm authentication support for mail (#23811)
  • Add CLI command to register runner tokens (#23762)
  • Add Alpine package registry (#23714)
  • Expand/Collapse all changed files (#23639)
  • Add unset default project column (#23531)
  • Add activity feeds API (#23494)
  • Add RPM registry (#23380)
  • Add meilisearch support (#23136)
  • Add API for License templates (#23009)
  • Add admin API email endpoints (#22792)
  • Add user rename endpoint to admin api (#22789)
  • Add API for gitignore templates (#22783)
  • Implement actions artifacts (#22738)
  • Add RSS Feeds for branches and files (#22719)
  • Display when a repo was archived (#22664)
  • Add Swift package registry (#22404)
  • Add CRAN package registry (#22331)
  • Add user webhooks (#21563)
  • Implement systemd-notify protocol (#21151)
  • Implement Issue Config (#20956)
  • Add API to manage issue dependencies (#17935)
  • API:
  • Use correct response code in push mirror creation response in v1_json.tmpl (#25476) (#25571)
  • Fix Permission in API returned repository struct (#25388) (#25441)
  • Add API for Label templates (#24602)
  • Filters for GetAllCommits (#24568)
  • Add ability to specify '--not' from GetAllCommits (#24409)
  • Support uploading file to empty repo by API (#24357)
  • Add absent repounits to create/edit repo API (#23500)
  • Add login name and source id for admin user searching API (#23376)
  • Create a branch directly from commit on the create branch API (#22956)
  • ENHANCEMENTS:
  • Make add line comment buttons focusable (#25894) (#25896)
  • Always pass 6-digit hex color to monaco (#25780) (#25782)
  • Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764)
  • Hide add file button for pull mirrors (#25748) (#25751)
  • Allow/fix review (approve/reject) of empty PRs (#25690) (#25732)
  • Fix tags header and pretty format numbers (#25624) (#25694)
  • Actions list enhancements (#25601) (#25678)
  • Fix show more for image on diff page (#25672) (#25673)
  • Prevent SVG shrinking (#25652) (#25669)
  • Fix UI misalignment on user setting page (#25629) (#25656)
  • Use css on labels (#25626) (#25636)
  • Read-only checkboxes don't appear and don't entirely act the way one might expect (#25573) (#25602)
  • Redirect to package after version deletion (#25594) (#25599)
  • Reduce table padding globally (#25568) (#25577)
  • Change Regenerate Secret button display (#25534) (#25541)
  • Fix rerun icon on action view component (#25531) (#25536)
  • Move some regexp out of functions (#25430) (#25445)
  • Diff page enhancements (#25398) (#25437)
  • Various UI fixes (#25264) (#25431)
  • Fix label list divider (#25312) (#25372)
  • Fix UI on mobile view (#25315) (#25340)
  • When viewing a file, hide the add button (#25320) (#25339)
  • Show if File is Executable (#25287) (#25300)
  • Fix edit OAuth application width (#25262) (#25263)
  • Use flex to align SVG and text (#25163) (#25260)
  • Revert overflow: overlay (revert #21850) (#25231) (#25239)
  • Use inline SVG for built-in OAuth providers (#25171) (#25234)
  • Change access token UI to select dropdowns (#25109) (#25230)
  • Remove hacky patch for "safari emoji glitch fix" (#25208) (#25211)
  • Minor arc-green color tweaks (#25175) (#25205)
  • Button and color enhancements (#24989) (#25176)
  • Fix mobile navbar and misc cleanups (#25134) (#25169)
  • Modify OAuth login ui and fix display name, iconurl related logic (#25030) (#25161)
  • Improve notification icon and navbar (#25111) (#25124)
  • Add details summary for vertical menus in settings to allow toggling (#25098)
  • Don't display select all issues checkbox when no issues are available (#25086)
  • Use RepositoryList instead of []*Repository (#25074)
  • Add ability to set multiple redirect URIs in OAuth application UI (#25072)
  • Use git command instead of the ini package to remove the origin remote (#25066)
  • Remove cancel button from branch protection form (#25063)
  • Show file tree by default (#25052)
  • Add Progressbar to Milestone Page (#25050)
  • Minor UI improvements: logo alignment, auth map editor, auth name display (#25043)
  • Allow for PKCE flow without client secret + add docs (#25033)
  • Refactor INI package (first step) (#25024)
  • Various style fixes (#25008)
  • Fix delete user account modal (#25004)
  • Refactor diffFileInfo / DiffTreeStore (#24998)
  • Add user level action runners (#24995)
  • Rename NotifyPullReviewRequest to NotifyPullRequestReviewRequest (#24988)
  • Add step start time to ViewStepLog (#24980)
  • Add dark mode to API Docs (#24971)
  • Display file mode for new file and file mode changes (#24966)
  • Make the 500 page load themes (#24953)
  • Show bot label next to username when rendering autor link if the user is a bot (#24943)
  • Repo list improvements, fix bold helper classes (#24935)
  • Improve queue and logger context (#24924)
  • Improve RunMode / dev mode (#24886)
  • Improve some Forms (#24878)
  • Add show timestamp/seconds and fullscreen options to action page (#24876)
  • Fix double border and adjust width for user profile page (#24870)
  • Improve Actions CSS (#24864)
  • Fix @font-face overrides (#24855)
  • Remove In your repositories link in milestones dashboard (#24853)
  • Fix missing yes/no in delete time log modal (#24851)
  • Show new pull request button also on subdirectories and files (#24842)
  • Make environment-to-ini support loading key value from file (#24832)
  • Support wildcard in email domain allow/block list (#24831)
  • Use CommentList instead of []*Comment (#24828)
  • Add RTL rendering support to Markdown (#24816)
  • Rework notifications list (#24812)
  • Mute repo names in dashboard repo list (#24811)
  • Fix max width and margin of comment box on conversation page (#24809)
  • Some refactors for issues stats (#24793)
  • Rework label colors (#24790)
  • Fix OAuth login loading state (#24788)
  • Remove duplicated issues options and some more refactors (#24787)
  • Decouple the different contexts from each other (#24786)
  • Remove background on user dashboard filter bar (#24779)
  • Improve and fix bugs surrounding reactions (#24760)
  • Make the color of zero-contribution-squares in the activity heatmap more subtle (#24758)
  • Fix WEBP image copying (#24743)
  • Rework OAuth login buttons, swap github logo to monocolor (#24740)
  • Consolidate the two review boxes into one (#24738)
  • Unification of registration fields order (#24737)
  • Refactor Pull Mirror and fix out-of-sync bugs (#24732)
  • Improvements for action detail page (#24718)
  • Fix flash of unstyled content in action view page (#24712)
  • Don't filter action runs based on state (#24711)
  • Optimize actions list by removing an unnecessary git call (#24710)
  • Support no label/assignee filter and batch clearing labels/assignees (#24707)
  • Add icon support for safari (#24697)
  • Use standard HTTP library to serve files (#24693)
  • Improve button-ghost, remove tertiary button (#24692)
  • Only hide tooltip tippy instances (#24688)
  • Support migrating storage for actions log via command line (#24679)
  • Remove highlight in repo list (#24675)
  • Add markdown preview to Submit Review Textarea (#24672)

New in Gitea 1.19.4 (Jul 4, 2023)

  • SECURITY:
  • Fix open redirect check for more cases
  • API:
  • Return 404 in the API if the requested webhooks were not found
  • Fix organization field being null in GET /api/v1/teams/{id}
  • ENHANCEMENTS:
  • Set --font-weight-bold to 600
  • Make mailer SMTP check have timed context
  • Do not select line numbers when selecting text from the action run logs
  • BUGFIXES:
  • Fix bug when change user name
  • Fix task list checkbox toggle to work with YAML front matter
  • Hide limited users if viewed by anonymous ghost
  • Add WithPullRequest for actionsNotifier
  • Fix parallelly generating index failure with Mysql
  • GitLab migration: Sanitize response for reaction list
  • Fix users cannot visit issue attachment bug
  • Fix missing reference prefix of commits when sync mirror repository
  • Only validate changed columns when update user
  • Make DeleteIssue use correct context
  • Fix topics deleted via API not being deleted in org page
  • Fix Actions being enabled accidentally
  • Fix missed table name on iterate lfs meta objects
  • Fix safari cookie session bug
  • Respect original content when creating secrets
  • Fix Pull Mirror out-of-sync bugs
  • Fix run list broken when trigger user deleted
  • Fix issues list page multiple selection update milestones
  • Fix: release page for empty or non-existing target
  • Fix close org projects
  • Refresh the refernce of the closed PR when reopening
  • Fix the permission of team's Actions unit issue
  • Bump go.etcd.io/bbolt and blevesearch deps
  • Fix new wiki page mirror
  • Match unqualified references when syncing pulls as well
  • DOCS:
  • Change branch name from master to main in some documents' links
  • Remove unnecessary content on docs
  • Unify doc links to use paths relative to doc folder
  • Fix docs documenting invalid @every for OLDER_THAN cron settings
  • MISC:
  • Merge different languages for language stats
  • Hiding Secrets options when Actions feature is disabled
  • Improve decryption failure message
  • Makefile: Use portable !, not GNUish -not, with find(1).

New in Gitea 1.20.0 RC 0 (Jun 8, 2023)

  • Fix swagger documentation for multiple files API endpoint (#25110)
  • Fixes some issues with the swagger documentation for the new multiple
  • Files API endpoint (#24887) which were overlooked when submitting the original PR:
  • Add some missing parameter descriptions
  • Set correct `required` option for required parameters
  • Change endpoint description to match it full functionality (every
  • Kind of file modification is supported, not just creating and updating)

New in Gitea 1.19.3 (May 3, 2023)

  • SECURITY:
  • Use golang 1.20.4 to fix CVE-2023-24539, CVE-2023-24540, and CVE-2023-29400
  • ENHANCEMENTS:
  • Enable whitespace rendering on selection in Monaco (#24444) (#24485)
  • Improve milestone filter on issues page (#22423) (#24440)
  • BUGFIXES:
  • Fix api error message if fork exists (#24487) (#24493)
  • Fix user-cards format (#24428) (#24431)
  • Fix incorrect CurrentUser check for docker rootless (#24435)
  • Getting the tag list does not require being signed in (#24413) (#24416)

New in Gitea 1.19.2 (Apr 28, 2023)

  • BREAKING:
  • Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
  • Only delete secrets belonging to its owner (#24284) (#24286)
  • API:
  • Fix typo in API route (#24310) (#24332)
  • Fix access token issue on some public endpoints (#24194) (#24259)
  • ENHANCEMENTS:
  • Fix broken clone script on an empty archived repo (#24339) (#24348)
  • Fix Monaco IOS keyboard button (#24341) (#24347)
  • Don't set meta theme-color by default (#24340) (#24346)
  • Wrap too long push mirror addresses (#21120) (#24334)
  • Add --font-weight-bold and set previous bold to 601 (#24307) (#24331)
  • Unify nightly naming across binaries and docker images (#24116) (#24308)
  • Fix footer display (#24251) (#24269)
  • Fix label color, fix divider in dropdown (#24215) (#24244)
  • Vertical widths of containers removed (#24184) (#24211)
  • Use correct locale key for forks page (#24172) (#24175)
  • Sort repo topic labels by name (#24123) (#24153)
  • Highlight selected file in the PR file tree (#23947) (#24126)
  • BUGFIXES:
  • Fix auth check bug (#24382) (#24387)
  • Add tags list for repos whose release setting is disabled (#23465) (#24369)
  • Fix wrong error info in RepoRefForAPI (#24344) (#24351)
  • Fix no edit/close/delete button in org repo project view page (#24349)
  • Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) (#24333)
  • Remove org users who belong to no teams (#24247) (#24313)
  • Fix bug when deleting wiki with no code write permission (#24274) (#24295)
  • Handle canceled workflow as a warning instead of a fail (#24282) (#24292)
  • Load reviewer for comments when dismissing a review (#24281) (#24288)
  • Show commit history for closed/merged PRs (#24238) (#24261)
  • Fix owner team access mode value in team_unit table (#24224)
  • Fix issue attachment handling (#24202) (#24221)
  • Fix incorrect CORS default values (#24206) (#24217)
  • Fix template error in pull request with deleted head repo (#24192) (#24216)
  • Don't list root repository on compare page if pulls not allowed (#24183) (#24210)
  • Fix calReleaseNumCommitsBehind (#24148) (#24197)
  • Fix Org edit page bugs: renaming detection, maxlength (#24161) (#24171)
  • Update redis library to support redis v7 (#24114) (#24156)
  • Use 1.18's aria role for dropdown menus (#24144) (#24155)
  • Fix 2-dot direct compare to use the right base commit (#24133) (#24150)
  • Fix incorrect server error content in RunnersList (#24118) (#24121)
  • Fix mismatch between hook events and github event types (#24048) (#24091)
  • BUILD:
  • Support converting varchar to nvarchar for mssql database (#24105) (#24168)

New in Gitea 1.19.1 (Apr 13, 2023)

  • Rename actions unit to `repo.actions` and add docs for it (#23733) (#23881)
  • ENHANCEMENTS:
  • Add card type to org/user level project on creation, edit and view (#24043) (#24066)
  • Refactor commit status for Actions jobs (#23786) (#24060)
  • Show errors for KaTeX and mermaid on the preview tab (#24009) (#24019)
  • Show protected branch rule names again (#23907) (#24018)
  • Adjust sticky PR header to cover background (#23956) (#23999)
  • Discolor pull request tab labels (#23950) (#23987)
  • Treat PRs with agit flow as fork PRs when triggering actions. (#23884) (#23967)
  • Left-align review comments (#23937)
  • Fix image border-radius (#23886) (#23930)
  • Scroll collapsed file into view (#23702) (#23929)
  • Fix code view (diff) broken layout (#23096) (#23918)
  • Org pages style fixes (#23901) (#23914)
  • Fix user profile description rendering (#23882) (#23902)
  • Fix review box viewport overflow issue (#23800) (#23898)
  • Prefill input values in OAuth settings as intended (#23829) (#23871)
  • CSS color tweaks (#23828) (#23842)
  • Fix incorrect visibility dropdown list in add/edit user page (#23804) (#23833)
  • Add CSS rules for basic colored labels (#23774) (#23777)
  • Add creation time in tag list page (#23693) (#23773)
  • Fix br display for packages curls (#23737) (#23764)
  • Fix issue due date edit toggle bug (#23723) (#23758)
  • Improve commit graph page UI alignment (#23751) (#23754)
  • Use GitHub Actions compatible globbing for `branches`, `tag`, `path` filter (#22804) (#23740)
  • Redirect to project again after editing it (#23326) (#23739)
  • Remove row clicking from notification table (#22695) (#23706)
  • Remove conflicting CSS rules on notifications, improve notifications table (#23565) (#23621)
  • Fix diff tree height and adjust target file style (#23616)
  • BUGFIXES:
  • Improve error logging for LFS (#24072) (#24082)
  • Fix custom mailer template on Windows platform (#24081)
  • Update the value of `diffEnd` when clicking the `Show More` button in the DiffFileTree (#24069) (#24078)
  • Make label templates have consistent behavior and priority (#23749)
  • Fix accidental overwriting of LDAP team memberships (#24050) (#24065)
  • Fix branch protection priority (#24045) (#24061)
  • Use actions job link as commit status URL instead of run link (#24023) (#24032)
  • Add actions support to package auth verification (#23729) (#24028)
  • Fix protected branch for API (#24013) (#24027)
  • Do not escape space between PyPI repository URL and package name… (#23981) (#24008)
  • Fix redirect bug when creating issue from a project (#23971) (#23997)
  • Set `ref` to fully-formed of the tag when trigger event is `release` (#23944) (#23989)
  • Use Get/Set instead of Rename when regenerating session ID (#23975) (#23983)
  • Ensure RSS icon is present on all repo tabs (#23904) (#23973)
  • Remove `Repository.getFilesChanged` to fix Actions `paths` and `paths-ignore` filter (#23920) (#23969)
  • Delete deleted release attachments immediately from storage (#23913) (#23958)
  • Use ghost user if package creator does not exist (#23822) (#23915)
  • User/Org Feed render description as per web (#23887) (#23906)
  • Fix `cases.Title` crash for concurrency (#23885) (#23903)
  • Convert .Source.SkipVerify to $cfg.SkipVerify (#23839) (#23899)
  • Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874) (#23878)
  • Fix JS error when changing PR's target branch (#23862) (#23864)
  • Fix 500 error if there is a name conflict when editing authentication source (#23832) (#23852)
  • Fix closed PR also triggers Webhooks and actions (#23782) (#23834)
  • Fix checks for `needs` in Actions (#23789) (#23831)
  • Fix "Updating branch by merge" bug in "update_branch_by_merge.tmpl" (#23790) (#23825)
  • Fix cancel button in the page of project edit not work (#23655) (#23813)
  • Don't apply the group filter when listing LDAP group membership if it is empty (#23745) (#23788)
  • Fix profile page email display, respect settings (#23747) (#23756)
  • Fix project card preview select and template select (#23684) (#23731)
  • Check LFS/Packages settings in dump and doctor command (#23631) (#23730)
  • Add git dashes separator to some "log" and "diff" commands (#23606) (#23720)
  • Create commit status when event is `pull_request_sync` (#23683) (#23691)
  • Fix incorrect `HookEventType` of pull request review comments (#23650) (#23678)
  • Fix incorrect `show-modal` and `show-panel` class (#23660) (#23663)
  • Improve workflow event triggers (#23613) (#23648)
  • Introduce path Clean/Join helper functions, partially backport&refactor (#23495) (#23607)
  • Fix pagination on `/notifications/watching` (#23564) (#23603)
  • Fix submodule is nil panic (#23588) (#23601)
  • Polyfill the window.customElements (#23592) (#23595)
  • Avoid too long names for actions (#23162) (#23190)
  • TRANSLATION:
  • Backport locales (with manual fixes) (#23808, #23634, #24083)
  • BUILD:
  • Hardcode the path to docker images (#23955) (#23968)
  • DOCS:
  • Update documentation to explain which projects allow Gitea to host static pages (#23993) (#24058)
  • Merge `push to create`, `open PR from push`, and `push options` docs articles into one (#23744) (#23959)
  • Fix code blocks in the cheat sheet (#23664) (#23669)
  • MISC:
  • Do not crash when parsing an invalid workflow file (#23972) (#23976)
  • Remove assertion debug code for show/hide refactoring (#23576) (#23868)
  • Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) (#23791)
  • Make minio package support legacy MD5 checksum (#23768) (#23770)
  • Improve template error reporting (#23396) (#23600)

New in Gitea 1.19.0 (Mar 20, 2023)

  • BREAKING:
  • Add loading yaml label template files (#22976) (#23232)
  • Make issue and code search support camel case for Bleve (#22829)
  • Repositories: by default disable all units except code and pulls on forks (#22541)
  • Support template for merge message description (#22248)
  • Remove ONLY_SHOW_RELEVANT_REPOS setting (#21962)
  • Implement actions (#21937)
  • Remove deprecated DSA host key from Docker Container (#21522)
  • Improve valid user name check (#20136)
  • SECURITY:
  • Return 404 instead of 403 if user can not access the repo (#23155) (#23158)
  • Support scoped access tokens (#20908)
  • FEATURES:
  • Add support for commit cross references (#22645)
  • Scoped labels (#22585)
  • Add Chef package registry (#22554)
  • Support asciicast files as new markup (#22448)
  • cgo cross-compile for freebsd (#22397)
  • Add cron method to gc LFS MetaObjects (#22385)
  • Add new captcha: cloudflare turnstile (#22369)
  • Enable @<user>- completion popup on the release description textarea (#22359)
  • make /{username}.png redirect to user/org avatar (#22356)
  • Add Conda package registry (#22262)
  • Support org/user level projects (#22235)
  • Add Mermaid copy button (#22225)
  • Add user secrets (#22191)
  • Secrets storage with SecretKey encrypted (#22142)
  • Preview images for Issue cards in Project Board view (#22112)
  • Add support for incoming emails (#22056)
  • Add Cargo package registry (#21888)
  • Add option to prohibit fork if user reached maximum limit of repositories (#21848)
  • Add attention blocks within quote blocks for Note and Warning (#21711)
  • Add Feed for Releases and Tags (#21696)
  • Add package registry cleanup rules (#21658)
  • Add "Copy" button to file view of raw text (#21629)
  • Allow disable sitemap (#21617)
  • Add package registry quota limits (#21584)
  • Map OIDC groups to Orgs/Teams (#21441)
  • Keep languages defined in .gitattributes (#21403)
  • Add Webhook authorization header (#20926)
  • Supports wildcard protected branch (#20825)
  • Copy citation file content, in APA and BibTex format, on repo home page (#19999)
  • API:
  • Match api migration behavior to web behavior (#23552) (#23573)
  • Purge API comment (#23451) (#23452)
  • User creation API: allow custom "created" timestamps (#22549)
  • Add updated_at field to PullReview API object (#21812)
  • Add API management for issue/pull and comment attachments (#21783)
  • Add API endpoint to get latest release (#21267)
  • Support system hook API (#14537)
  • ENHANCEMENTS:
  • Add .patch to attachment.ALLOWED_TYPES (#23580) (#23582)
  • Fix sticky header in diff view (#23554) (#23568)
  • Refactor merge/update git command calls (#23366) (#23544)
  • Fix review comment context menu clipped bug (#23523) (#23543)
  • Imrove scroll behavior to hash issuecomment(scroll position, auto expand if file is folded, and on refreshing) (#23513) (#23540)
  • Increase horizontal page padding (#23507) (#23537)
  • Use octicon-verified for gpg signatures (#23529) (#23536)
  • Make time tooltips interactive (#23526) (#23527)
  • Replace Less with CSS (#23508)
  • Fix 'View File' button in code search (#23478) (#23483)
  • Convert GitHub event on actions and fix some pull_request events. (#23037) (#23471)
  • Support reflogs (#22451) (#23438)
  • Fix actions frontend bugs (pagination, long name alignment) and small simplify (#23370) (#23436)
  • Scoped label display and documentation tweaks (#23430) (#23433)
  • Add missing tabs to org projects page (#22705) (#23412)
  • Fix and move "Use this template" button (#23398) (#23408)
  • Handle OpenID discovery URL errors a little nicer when creating/editing sources (#23397) (#23403)
  • Rename canWriteUnit to canWriteProjects (#23386) (#23399)
  • Refactor and tidy-up the merge/update branch code (#22568) (#23365)
  • Refactor setting.Database.UseXXX to methods (#23354) (#23356)
  • Fix incorrect project links and use symlink icon for org-wide projects (#23325) (#23336)
  • Fix PR view misalignment caused by long name file (#23321) (#23335)
  • Scoped labels: don't require holding alt key to remove (#23303) (#23331)
  • Add context when rendering labels or emojis (#23281) (#23319)
  • Change interactiveBorder to fix popup preview (#23169) (#23314)
  • Scoped labels: set aria-disabled on muted Exclusive option for a11y (#23306) (#23311)
  • update to mermaid v10 (#23178) (#23299)
  • Fix code wrap for unbroken lines (#23268) (#23293)
  • Use async await to fix empty quote reply at first time (#23168) (#23256)
  • Fix switched citation format (#23250) (#23253)
  • Allow <video> in MarkDown (#22892) (#23236)
  • Order pull request conflict checking by recently updated, for each push (#23220) (#23225)
  • Fix Fomantic UI's touchstart fastclick, always use click for click events (#23065) (#23195)
  • Add word-break to sidebar-item-link (#23146) (#23180)
  • Add InsecureSkipVerify to Minio Client for Storage (#23166) (#23177)
  • Fix height for sticky head on large screen on PR page (#23111) (#23123)
  • Change style to improve whitespaces trimming inside inline markdown code (#23093) (#23120)
  • Avoid warning for system setting when start up (#23054) (#23116)
  • Add accessibility to the menu on the navbar (#23059) (#23095)
  • Improve accessibility for issue comments (#22612) (#23083)
  • Remove delete button for review comment (#23036)
  • Remove dashes between organization member avatars on hover (#23034)
  • Use gt-relative class instead of the ambiguous gt-pr class (#23008)
  • handle deprecated settings (#22992)
  • Add scopes to API to create token and display them (#22989)
  • Improve PR Review Box UI (#22986)
  • Improve issues.LoadProject (#22982)
  • Add all units to the units permission list in org team members sidebar (#22971)
  • Rename GetUnits to LoadUnits (#22970)
  • Rename repo.GetOwner to repo.LoadOwner (#22967)
  • Rename "People" to "Members" in organization page and use a better icon (#22960)
  • Fix avatar misalignment (#22955)
  • Sort issues and pulls by recently updated in user and organization home (#22925)
  • Add title to PR file tree items (#22918)
  • First step to refactor the .hide to .gt-hidden (#22916)
  • Add tooltip to issue reference (#22913)
  • Always show the command line instructions button even if there are conflicts (#22909)
  • Fix dark-colored description text in arc-green theme (#22908)
  • Remove Fomantic-UI's .hidden CSS class for menu elements (#22895)
  • Move helpers to be prefixed with gt- (#22879)
  • Move IsReadmeFile* from modules/markup/ to modules/util (#22877)
  • Highlight focused diff file (#22870)
  • Add some headings to repo views (#22869)
  • Fix milestone title font problem (#22863)
  • Pull Requests: setting to allow edits by maintainers by default, tweak UI (#22862)
  • Introduce customized HTML elements, fix incorrect AppUrl usages in templates (#22861)
  • Add /$count endpoints for NuGet v2 (#22855)
  • Remove Fomantic-UI's .hidden CSS class for checkbox elements (#22851)
  • Fix notification and stopwatch empty states (#22845)
  • Always go full width in PR view (#22844)
  • Improve AppUrl/ROOT_URL checking (#22836)
  • Fix style of actions rerun button (#22835)
  • Fix more HTMLURL in templates (#22831)
  • Fix inconsistent Filter Project name in issue list (#22827)
  • include build info in Prometheus metrics (#22819)
  • Make clone URL use current page's host (#22808)
  • Refactor legacy strange git operations (#22756)
  • Improve error report when user passes a private key (#22726)
  • set user dashboard org visibility to basic (#22706)
  • Fix diff UI for unexpandable items (#22700)
  • Remove 'primary' class from tab counter labels (#22687)
  • Add more events details supports for actions (#22680)
  • Refactor git command package to improve security and maintainability (#22678)
  • Use relative url in actions view (#22675)
  • set user visibility class to basic (#22674)
  • Add repository setting to enable/disable releases unit (#22671)
  • Remove label color from global issue filters (#22660)
  • Fix poor alignment of organization description on organization home page (#22656)
  • Small refactor for loading PRs (#22652)
  • Allow setting access token scope by CLI (#22648)
  • Improve accessibility of navigation bar and footer (#22635)
  • Fixes accessibility behavior of Watching, Staring and Fork buttons (#22634)
  • Fixes accessibility of empty repository commit status (#22632)
  • Pull request yaml template support for including commit body in a field (#22629)
  • Show migration validation error (#22619)
  • set org visibility class to basic in header (#22605)
  • Fix cache-control header clearing comment text when editing issue (#22604)
  • Add ARIA support for Fomantic UI checkboxes (#22599)
  • Add templates to customize text when creating and migrating repositories (#22597)
  • Allow setting redirect_to cookie on OAuth login (#22594)
  • Improve checkbox accessibility a bit by adding the title attribute (#22593)
  • Allow issue templates to not render title (#22589)
  • Webhooks: for issue close/reopen action, add commit ID that caused it (#22583)
  • Fix missing title and filter in issue sidebar project menu (#22557)
  • Issues: support setting issue template field values with query (#22545)
  • Issues: add Project filter to issues list and search (#22544)
  • Pull Requests: add color to approved/reject icon in pull requests list (#22543)
  • Mute all links in issue timeline (#22533)
  • Dropzone: Add "Copy link" button for new uploads (#22517)
  • Support importing comment types (#22510)
  • Load asciicast css async (#22502)
  • Move delete user to service (#22478)
  • Change use of Walk to WalkDir to improve disk performance (#22462)
  • Add reply hint to mail text (#22459...

New in Gitea 1.18.5 (Feb 21, 2023)

  • ENHANCEMENTS:
  • Hide 2FA status from other members in organization members list (#22999) (#23023)
  • BUGFIXES:
  • Add force_merge to merge request and fix checking mergable (#23010) (#23032)
  • Use --message=%s for git commit message (#23028) (#23029)
  • Render access log template as text instead of HTML (#23013) (#23025)
  • Fix the Manually Merged form (#23015) (#23017)
  • Use beforeCommit instead of baseCommit (#22949) (#22996)
  • Display attachments of review comment when comment content is blank (#23035) (#23046)
  • Return empty url for submodule tree entries (#23043) (#23048)

New in Gitea 1.18.4 (Feb 20, 2023)

  • Provide the ability to set password hash algorithm parameters (#22942) (#22943)
  • Add command to bulk set must-change-password (#22823) (#22928)
  • ENHANCEMENTS:
  • Use import of OCI structs (#22765) (#22805)
  • Fix color of tertiary button on dark theme (#22739) (#22744)
  • Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642)
  • BUGFIXES:
  • Notify on container image create (#22806) (#22965)
  • Fix blame view missing lines (#22826) (#22929)
  • Fix incorrect role labels for migrated issues and comments (#22914) (#22923)
  • Fix PR file tree folders no longer collapsing (#22864) (#22872)
  • Escape filename when assemble URL (#22850) (#22871)
  • Fix isAllowed of escapeStreamer (#22814) (#22837)
  • Load issue before accessing index in merge message (#22822) (#22830)
  • Improve trace logging for pulls and processes (#22633) (#22812)
  • Fix restore repo bug, clarify the problem of ForeignIndex (#22776) (#22794)
  • Add default user visibility to cli command "admin user create" (#22750) (#22760)
  • Escape path for the file list (#22741) (#22757)
  • Fix bugs with WebAuthn preventing sign in and registration. (#22651) (#22721)
  • Add missing close bracket in imagediff (#22710) (#22712)
  • Move code comments to a standalone file and fix the bug when adding a reply to an outdated review appears to not post(#20821) (#22707)
  • Fix line spacing for plaintext previews (#22699) (#22701)
  • Fix wrong hint when deleting a branch successfully from pull request UI (#22673) (#22698)
  • Fix README TOC links (#22577) (#22677)
  • Fix missing message in git hook when pull requests disabled on fork (#22625) (#22658)
  • Improve checkIfPRContentChanged (#22611) (#22644)
  • Prevent duplicate labels when importing more than 99 (#22591) (#22598)
  • Don't return duplicated users who can create org repo (#22560) (#22562)
  • BUILD:
  • Upgrade golangcilint to v1.51.0 (#22764)
  • MISC:
  • Use proxy for pull mirror (#22771) (#22772)
  • Use `--index-url` in PyPi description (#22620) (#22636)

New in Gitea 1.18.3 (Jan 23, 2023)

  • Prevent multiple `To` recipients (#22566) (#22569)
  • BUGFIXES:
  • Truncate commit summary on repo files table. (#22551) (#22552)
  • Mute all links in issue timeline (#22534)

New in Gitea 1.18.2 (Jan 20, 2023)

  • This version also includes docker images with a patched git binary for the CVE reported.
  • For anyone who doesn't use docker, you will need to update your version of git to a version with the security patch applied.
  • BUGFIXES:
  • When updating by rebase we need to set the environment for head repo (#22535) (#22536)
  • Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521)
  • Fix invalid issue branch reference if not specified in template (#22513) (#22520)
  • Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515)
  • Reliable selection of admin user (#22509) (#22511)
  • Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496)
  • BUILD:
  • cgo cross-compile for freebsd (#22397) (#22519)

New in Gitea 1.18.1 (Jan 17, 2023)

  • API:
  • Add sync_on_commit option for push mirrors api (#22271) (#22292)
  • BUGFIXES:
  • Update github.com/zeripath/zapx/v15 (#22485)
  • Fix pull request API field closed_at always being null (#22482) (#22483)
  • Fix container blob mount (#22226) (#22476)
  • Fix error when calculating repository size (#22392) (#22474)
  • Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454) (#22472)
  • Fix environments for KaTeX and error reporting (#22453) (#22473)
  • Remove the netgo tag for Windows build (#22467) (#22468)
  • Fix migration from GitBucket (#22477) (#22465)
  • Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458)
  • Fix PR status layout on mobile (#21547) (#22441)
  • Fix wechatwork webhook sends empty content in PR review (#21762) (#22440)
  • Remove duplicate "Actions" label in mobile view (#21974) (#22439)
  • Fix leaving organization bug on user settings -> orgs (#21983) (#22438)
  • Fixed colour transparency regex matching in project board sorting (#22092) (#22437)
  • Correctly handle select on multiple channels in Queues (#22146) (#22428)
  • Prepend refs/heads/ to issue template refs (#20461) (#22427)
  • Restore function to "Show more" buttons (#22399) (#22426)
  • Continue GCing other repos on error in one repo (#22422) (#22425)
  • Allow HOST has no port (#22280) (#22409)
  • Fix omit avatar_url in discord payload when empty (#22393) (#22394)
  • Don't display stop watch top bar icon when disabled and hidden when click other place (#22374) (#22387)
  • Don't lookup mail server when using sendmail (#22300) (#22383)
  • Fix gravatar disable bug (#22337)
  • Fix update settings table on install (#22326) (#22327)
  • Fix sitemap (#22272) (#22320)
  • Fix code search title translation (#22285) (#22316)
  • Fix due date rendering the wrong date in issue (#22302) (#22306)
  • Fix get system setting bug when enabled redis cache (#22298)
  • Fix bug of DisableGravatar default value (#22297)
  • Fix key signature error page (#22229) (#22230)
  • TESTING:
  • Remove test session cache to reduce possible concurrent problem (#22199) (#22429)
  • MISC:
  • Restore previous official review when an official review is deleted (#22449) (#22460)
  • Log STDERR of external renderer when it fails (#22442) (#22444)

New in Gitea 1.18.0 (Dec 29, 2022)

  • SECURITY:
  • Remove ReverseProxy authentication from the API (#22219) (#22251)
  • Support Go Vulnerability Management (#21139)
  • Forbid HTML string tooltips (#20935)
  • BREAKING:
  • Rework mailer settings (#18982)
  • Remove U2F support (#20141)
  • Refactor i18n to locale (#20153)
  • Enable contenthash in filename for dynamic assets (#20813)
  • FEATURES:
  • Add color previews in markdown (#21474)
  • Allow package version sorting (#21453)
  • Add support for Chocolatey/NuGet v2 API (#21393)
  • Add API endpoint to get changed files of a PR (#21177)
  • Add filetree on left of diff view (#21012)
  • Support Issue forms and PR forms (#20987)
  • Add support for Vagrant packages (#20930)
  • Add support for npm unpublish (#20688)
  • Add badge capabilities to users (#20607)
  • Add issue filter for Author (#20578)
  • Add KaTeX rendering to Markdown. (#20571)
  • Add support for Pub packages (#20560)
  • Support localized README (#20508)
  • Add support mCaptcha as captcha provider (#20458)
  • Add team member invite by email (#20307)
  • Added email notification option to receive all own messages (#20179)
  • Switch Unicode Escaping to a VSCode-like system (#19990)
  • Add user/organization code search (#19977)
  • Only show relevant repositories on explore page (#19361)
  • User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
  • Add sitemap support (#18407)
  • Allow creation of OAuth2 applications for orgs (#18084)
  • Add system setting table with cache and also add cache supports for user setting (#18058)
  • Add pages to view watched repos and subscribed issues/PRs (#17156)
  • Support Proxy protocol (#12527)
  • Implement sync push mirror on commit (#19411)
  • API:
  • Allow empty assignees on pull request edit (#22150) (#22214)
  • Make external issue tracker regexp configurable via API (#21338)
  • Add name field for org api (#21270)
  • Show teams with no members if user is admin (#21204)
  • Add latest commit's SHA to content response (#20398)
  • Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
  • Add new endpoints for push mirrors management (#19841)
  • ENHANCEMENTS:
  • Add setting to disable the git apply step in test patch (#22130) (#22170)
  • Multiple improvements for comment edit diff (#21990) (#22007)
  • Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21928)
  • Fix flex layout for repo list icons (#21896) (#21920)
  • Fix vertical align of committer avatar rendered by email address (#21884) (#21918)
  • Fix setting HTTP headers after write (#21833) (#21877)
  • Color and Style enhancements (#21784, #21799) (#21868)
  • Ignore line anchor links with leading zeroes (#21728) (#21776)
  • Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  • Use CSS color-scheme instead of invert (#21616) (#21623)
  • Respect user's locale when rendering the date range in the repo activity page (#21410)
  • Change commits-table column width (#21564)
  • Refactor git command arguments and make all arguments to be safe to be used (#21535)
  • CSS color enhancements (#21534)
  • Add link to user profile in markdown mention only if user exists (#21533, #21554)
  • Add option to skip index dirs (#21501)
  • Diff file tree tweaks (#21446)
  • Localize all timestamps (#21440)
  • Add code highlighting in issue titles (#21432)
  • Use Name instead of DisplayName in LFS Lock (#21415)
  • Consolidate more CSS colors into variables (#21402)
  • Redirect to new repository owner (#21398)
  • Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
  • Use weighted algorithm for string matching when finding files in repo (#21370)
  • Show private data in feeds (#21369)
  • Refactor parseTreeEntries, speed up tree list (#21368)
  • Add GET and DELETE endpoints for Docker blob uploads (#21367)
  • Add nicer error handling on template compile errors (#21350)
  • Add stat to ToCommit function for speed (#21337)
  • Support instance-wide OAuth2 applications (#21335)
  • Record OAuth client type at registration (#21316)
  • Add new CSS variables --color-accent and --color-small-accent (#21305)
  • Improve error descriptions for unauthorized_client (#21292)
  • Case-insensitive "find files in repo" (#21269)
  • Consolidate more CSS rules, fix inline code on arc-green (#21260)
  • Log real ip of requests from ssh (#21216)
  • Save files in local storage as group readable (#21198)
  • Enable fluid page layout on medium size viewports (#21178)
  • File header tweaks (#21175)
  • Added missing headers on user packages page (#21172)
  • Display image digest for container packages (#21170)
  • Skip dirty check for team forms (#21154)
  • Keep path when creating a new branch (#21153)
  • Remove fomantic image module (#21145)
  • Make labels clickable in the comments section. (#21137)
  • Sort branches and tags by date descending (#21136)
  • Better repo API unit checks (#21130)
  • Improve commit status icons (#21124)
  • Limit length of repo description and repo url input fields (#21119)
  • Show .editorconfig errors in frontend (#21088)
  • Allow poster to choose reviewers (#21084)
  • Remove black labels and CSS cleanup (#21003)
  • Make e-mail sanity check more precise (#20991)
  • Use native inputs in whitespace dropdown (#20980)
  • Enhance package date display (#20928)
  • Display total blob size of a package version (#20927)
  • Show language name on hover (#20923)
  • Show instructions for all generic package files (#20917)
  • Refactor AssertExistsAndLoadBean to use generics (#20797)
  • Move the official website link at the footer of gitea (#20777)
  • Add support for full name in reverse proxy auth (#20776)
  • Remove useless JS operation for relative time tooltips (#20756)
  • Replace some icons with SVG (#20741)
  • Change commit status icons to SVG (#20736)
  • Improve single repo action for issue and pull requests (#20730)
  • Allow multiple files in generic packages (#20661)
  • Add option to create new issue from /issues page (#20650)
  • Background color of private list-items updated (#20630)
  • Added search input field to issue filter (#20623)
  • Increase default item listing size ISSUE_PAGING_NUM to 20 (#20547)
  • Modify milestone search keywords to be case insensitive again (#20513)
  • Show hint to link package to repo when viewing empty repo package list (#20504)
  • Add Tar ZSTD support (#20493)
  • Make code review checkboxes clickable (#20481)
  • Add "X-Gitea-Object-Type" header for GET /raw/ & /media/ API (#20438)
  • Display project in issue list (#20434)
  • Prepend commit message to template content when opening a new PR (#20429)
  • Replace fomantic popup module with tippy.js (#20428)
  • Allow to specify colors for text in markup (#20363)
  • Allow access to the Public Organization Member lists with minimal permissions (#20330)
  • Use default values when provided values are empty (#20318)
  • Vertical align navbar avatar at middle (#20302)
  • Delete cancel button in repo creation page (#21381)
  • Include login_name in adminCreateUser response (#20283)
  • Fix: icon margin in user/settings/repos (#20281)
  • Remove blue text on migrate page (#20273)
  • Modify milestone search keywords to be case insensitive (#20266)
  • Move some files into models' sub packages (#20262)
  • Add tooltip to repo icons in explore page (#20241)
  • Remove deprecated licenses (#20222)
  • Webhook for Wiki changes (#20219)
  • Share HTML template renderers and create a watcher framework (#20218)
  • Allow enable LDAP source and disable user sync via CLI (#20206)
  • Adds a checkbox to select all issues/PRs (#20177)
  • Refactor i18n to locale (#20153)
  • Disable status checks in template if none found (#20088)
  • Allow manager logging to set SQL (#20064)
  • Add order by for assignee no sort issue (#20053)
  • Take a stab at porting existing components to Vue3 (#20044)
  • Add doctor command to write commit-graphs (#20007)
  • Add support for authentication based on reverse proxy email (#19949)
  • Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
  • Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
  • Rework mailer settings (#18982)
  • Add option to purge users (#18064)
  • Add author search input (#21246)
  • Make rss/atom identifier globally unique (#21550)
  • BUGFIXES:
  • Auth interface return error when verify failure (#22119) (#22259)
  • Use complete SHA to create and query commit status (#22244) (#22257)
  • Update bleve and zapx to fix unaligned atomic (#22031) (#22218)
  • Prevent panic in doctor command when running default checks (#21791) (#21807)
  • Load GitRepo in API before deleting issue (#21720) (#21796)
  • Ignore line anchor links with leading zeroes (#21728) (#21776)
  • Set last login when activating account (#21731) (#21755)
  • Fix UI language switching bug (#21597) (#21749)
  • Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  • Allow local package identifiers for PyPI packages (#21690) (#21727)
  • Deal with markdown template without metadata (#21639) (#21654)
  • Fix opaque background on mermaid diagrams (#21642) (#21652)
  • Fix repository adoption on Windows (#21646) (#21650)
  • Sync git hooks when config file path changed (#21619) (#21626)
  • Fix 500 on PR files API (#21602) (#21607)
  • Fix Timestamp.IsZero (#21593) (#21603)
  • Fix viewing user subscriptions (#21482)
  • Fix mermaid-related bugs (#21431)
  • Fix branch dropdown shifting on page load (#21428)
  • Fix default theme-auto selector when nologin (#21346)
  • Fix and improve incorrect error messages (#21342)
  • Fix formatted link for PR revie...

New in Gitea 1.17.4 (Dec 22, 2022)

  • Do not allow Ghost access to limited visible user/org (#21849) (#21875)
  • Fix package access for admins and inactive users (#21580) (#21592)
  • ENHANCEMENTS:
  • Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21927)
  • Fix vertical align of committer avatar rendered by email address (#21884) (#21919)
  • Fix setting HTTP headers after write (#21833) (#21874)
  • Ignore line anchor links with leading zeroes (#21728) (#21777)
  • Enable Monaco automaticLayout (#21516)
  • BUGFIXES:
  • Do not list active repositories as unadopted (#22034) (#22167)
  • Correctly handle moved files in apply patch (#22118) (#22136)
  • Fix condition for is_internal (#22095) (#22131)
  • Fix permission check on issue/pull lock (#22114)
  • Fix sorting admin user list by last login (#22081) (#22106)
  • Workaround for container registry push/pull errors (#21862) (#22069)
  • Fix issue/PR numbers (#22037) (#22045)
  • Handle empty author names (#21902) (#22028)
  • Fix ListBranches to handle empty case (#21921) (#22025)
  • Fix enabling partial clones on 1.17 (#21809)
  • Prevent panic in doctor command when running default checks (#21791) (#21808)
  • Upgrade golang.org/x/crypto (#21792) (#21794)
  • Init git module before database migration (#21764) (#21766)
  • Set last login when activating account (#21731) (#21754)
  • Add HEAD fix to gitea doctor (#21352) (#21751)
  • Fix UI language switching bug (#21597) (#21748)
  • Remove semver compatible flag and change pypi to an array of test cases (#21708) (#21729)
  • Allow local package identifiers for PyPI packages (#21690) (#21726)
  • Fix repository adoption on Windows (#21646) (#21651)
  • Sync git hooks when config file path changed (#21619) (#21625)
  • Added check for disabled Packages (#21540) (#21614)
  • Fix `Timestamp.IsZero` (#21593) (#21604)
  • Fix issues count bug (#21600)
  • Support binary deploy in npm packages (#21589)
  • Update milestone counters when issue is deleted (#21459) (#21586)
  • SessionUser protection against nil pointer dereference (#21581)
  • Case-insensitive NuGet symbol file GUID (#21409) (#21575)
  • Suppress `ExternalLoginUserNotExist` error (#21504) (#21572)
  • Prevent Authorization header for presigned LFS urls (#21531) (#21569)
  • Update binding to fix bugs (#21560)
  • Fix generating compare link (#21519) (#21530)
  • Ignore error when retrieving changed PR review files (#21487) (#21524)
  • Fix incorrect notification commit url (#21479) (#21483)
  • Display total commit count in hook message (#21400) (#21481)
  • Enforce grouped NuGet search results (#21442) (#21480)
  • Return 404 when user is not found on avatar (#21476) (#21477)
  • Normalize NuGet package version on upload (#22186) (#22201)
  • MISC:
  • Check for zero time instant in TimeStamp.IsZero() (#22171) (#22173)
  • Fix warn in database structs sync (#22111)
  • Allow for resolution of NPM registry paths that match upstream (#21568) (#21723)

New in Gitea 1.18.0 RC 1 (Nov 24, 2022)

  • BREAKING:
  • Remove U2F support (#20141)
  • FEATURES:
  • Add color previews in markdown (#21474)
  • Allow package version sorting (#21453)
  • Add support for Chocolatey/NuGet v2 API (#21393)
  • Add API endpoint to get changed files of a PR (#21177)
  • Add filetree on left of diff view (#21012)
  • Support Issue forms and PR forms (#20987)
  • Add support for Vagrant packages (#20930)
  • Add support for npm unpublish (#20688)
  • Add badge capabilities to users (#20607)
  • Add issue filter for Author (#20578)
  • Add KaTeX rendering to Markdown. (#20571)
  • Add support for Pub packages (#20560)
  • Support localized README (#20508)
  • Add support mCaptcha as captcha provider (#20458)
  • Add team member invite by email (#20307)
  • Added email notification option to receive all own messages (#20179)
  • Switch Unicode Escaping to a VSCode-like system (#19990)
  • Add user/organization code search (#19977)
  • Only show relevant repositories on explore page (#19361)
  • User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
  • Add sitemap support (#18407)
  • Allow creation of OAuth2 applications for orgs (#18084)
  • Add system setting table with cache and also add cache supports for user setting (#18058)
  • Add pages to view watched repos and subscribed issues/PRs (#17156)
  • Support Proxy protocol (#12527)
  • Implement sync push mirror on commit (#19411)
  • API:
  • Make external issue tracker regexp configurable via API (#21338)
  • Add name field for org api (#21270)
  • Show teams with no members if user is admin (#21204)
  • Add latest commit's SHA to content response (#20398)
  • Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
  • Add new endpoints for push mirrors management (#19841)
  • ENHANCEMENTS:
  • Use CSS color-scheme instead of invert (#21616) (#21623)
  • Respect user's locale when rendering the date range in the repo activity page (#21410)
  • Change commits-table column width (#21564)
  • Refactor git command arguments and make all arguments to be safe to be used (#21535)
  • CSS color enhancements (#21534)
  • Add link to user profile in markdown mention only if user exists (#21533, #21554)
  • Add option to skip index dirs (#21501)
  • Diff file tree tweaks (#21446)
  • Localize all timestamps (#21440)
  • Add code highlighting in issue titles (#21432)
  • Use Name instead of DisplayName in LFS Lock (#21415)
  • Consolidate more CSS colors into variables (#21402)
  • Redirect to new repository owner (#21398)
  • Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
  • Use weighted algorithm for string matching when finding files in repo (#21370)
  • Show private data in feeds (#21369)
  • Refactor parseTreeEntries, speed up tree list (#21368)
  • Add GET and DELETE endpoints for Docker blob uploads (#21367)
  • Add nicer error handling on template compile errors (#21350)
  • Add stat to ToCommit function for speed (#21337)
  • Support instance-wide OAuth2 applications (#21335)
  • Record OAuth client type at registration (#21316)
  • Add new CSS variables --color-accent and --color-small-accent (#21305)
  • Improve error descriptions for unauthorized_client (#21292)
  • Case-insensitive "find files in repo" (#21269)
  • Consolidate more CSS rules, fix inline code on arc-green (#21260)
  • Log real ip of requests from ssh (#21216)
  • Save files in local storage as group readable (#21198)
  • Enable fluid page layout on medium size viewports (#21178)
  • File header tweaks (#21175)
  • Added missing headers on user packages page (#21172)
  • Display image digest for container packages (#21170)
  • Skip dirty check for team forms (#21154)
  • Keep path when creating a new branch (#21153)
  • Remove fomantic image module (#21145)
  • Make labels clickable in the comments section. (#21137)
  • Sort branches and tags by date descending (#21136)
  • Better repo API unit checks (#21130)
  • Improve commit status icons (#21124)
  • Limit length of repo description and repo url input fields (#21119)
  • Show .editorconfig errors in frontend (#21088)
  • Allow poster to choose reviewers (#21084)
  • Remove black labels and CSS cleanup (#21003)
  • Make e-mail sanity check more precise (#20991)
  • Use native inputs in whitespace dropdown (#20980)
  • Enhance package date display (#20928)
  • Display total blob size of a package version (#20927)
  • Show language name on hover (#20923)
  • Show instructions for all generic package files (#20917)
  • Refactor AssertExistsAndLoadBean to use generics (#20797)
  • Move the official website link at the footer of gitea (#20777)
  • Add support for full name in reverse proxy auth (#20776)
  • Remove useless JS operation for relative time tooltips (#20756)
  • Replace some icons with SVG (#20741)
  • Change commit status icons to SVG (#20736)
  • Improve single repo action for issue and pull requests (#20730)
  • Allow multiple files in generic packages (#20661)
  • Add option to create new issue from /issues page (#20650)
  • Background color of private list-items updated (#20630)
  • Added search input field to issue filter (#20623)
  • Increase default item listing size ISSUE_PAGING_NUM to 20 (#20547)
  • Modify milestone search keywords to be case insensitive again (#20513)
  • Show hint to link package to repo when viewing empty repo package list (#20504)
  • Add Tar ZSTD support (#20493)
  • Make code review checkboxes clickable (#20481)
  • Add "X-Gitea-Object-Type" header for GET /raw/ & /media/ API (#20438)
  • Display project in issue list (#20434)
  • Prepend commit message to template content when opening a new PR (#20429)
  • Replace fomantic popup module with tippy.js (#20428)
  • Allow to specify colors for text in markup (#20363)
  • Allow access to the Public Organization Member lists with minimal permissions (#20330)
  • Use default values when provided values are empty (#20318)
  • Vertical align navbar avatar at middle (#20302)
  • Delete cancel button in repo creation page (#21381)
  • Include login_name in adminCreateUser response (#20283)
  • fix: icon margin in user/settings/repos (#20281)
  • Remove blue text on migrate page (#20273)
  • Modify milestone search keywords to be case insensitive (#20266)
  • Move some files into models' sub packages (#20262)
  • Add tooltip to repo icons in explore page (#20241)
  • Remove deprecated licenses (#20222)
  • Webhook for Wiki changes (#20219)
  • Share HTML template renderers and create a watcher framework (#20218)
  • Allow enable LDAP source and disable user sync via CLI (#20206)
  • Adds a checkbox to select all issues/PRs (#20177)
  • Refactor i18n to locale (#20153)
  • Disable status checks in template if none found (#20088)
  • Allow manager logging to set SQL (#20064)
  • Add order by for assignee no sort issue (#20053)
  • Take a stab at porting existing components to Vue3 (#20044)
  • Add doctor command to write commit-graphs (#20007)
  • Add support for authentication based on reverse proxy email (#19949)
  • Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
  • Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
  • Rework mailer settings (#18982)
  • Add option to purge users (#18064)
  • Add author search input (#21246)
  • Make rss/atom identifier globally unique (#21550)
  • BUGFIXES:
  • Prevent panic in doctor command when running default checks (#21791) (#21807)
  • Load GitRepo in API before deleting issue (#21720) (#21796)
  • Ignore line anchor links with leading zeroes (#21728) (#21776)
  • Set last login when activating account (#21731) (#21755)
  • Fix UI language switching bug (#21597) (#21749)
  • Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  • Allow local package identifiers for PyPI packages (#21690) (#21727)
  • Deal with markdown template without metadata (#21639) (#21654)
  • Fix opaque background on mermaid diagrams (#21642) (#21652)
  • Fix repository adoption on Windows (#21646) (#21650)
  • Sync git hooks when config file path changed (#21619) (#21626)
  • Fix 500 on PR files API (#21602) (#21607)
  • Fix Timestamp.IsZero (#21593) (#21603)
  • Fix viewing user subscriptions (#21482)
  • Fix mermaid-related bugs (#21431)
  • Fix branch dropdown shifting on page load (#21428)
  • Fix default theme-auto selector when nologin (#21346)
  • Fix and improve incorrect error messages (#21342)
  • Fix formatted link for PR review notifications to matrix (#21319)
  • Center-aligning content of WebAuthN page (#21127)
  • Remove follow from commits by file (#20765)
  • Fix commit status popup (#20737)
  • Fix init mail render logic (#20704)
  • Use correct page size for link header pagination (#20546)
  • Preserve unix socket file (#20499)
  • Use tippy.js for context popup (#20393)
  • Add missing parameter for error in log message (#20144)
  • Do not allow organisation owners add themselves as collaborator (#20043)
  • Rework file highlight rendering and fix yaml copy-paste (#19967)
  • Improve code diff highlight, fix incorrect rendered diff result (#19958)

New in Gitea 1.17.3 (Oct 15, 2022)

  • SECURITY:
  • Sanitize and Escape refs in git backend
  • Bump golang.org/x/text
  • Update bluemonday
  • ENHANCEMENTS:
  • Fix empty container layer history and UI
  • Use en-US as fallback when using other default language
  • Make the vscode clone link respect transport protocol
  • BUGFIXES:
  • Do DB update after merge in hammer context
  • Add Num{Issues,Pulls} stats checks
  • Stop logging CheckPath returns error: context canceled
  • Parse OAuth Authorization header when request omits client secret
  • Ignore port for loopback redirect URIs
  • Set SemverCompatible to false for Conan packages
  • Tag list should include draft releases with existing tags
  • Fix linked account translation
  • Make NuGet service index publicly accessible
  • Foreign ID conflicts if ID is 0 for each item
  • Use absolute links in feeds
  • Prevent invalid behavior for file reviewing when loading more files
  • Respect REQUIRE_SIGNIN_VIEW for packages
  • Treat git object mode 40755 as directory
  • Allow uppercase ASCII alphabet in PyPI package names
  • Fix limited user cannot view himself's profile
  • Fix template bug of admin monitor
  • Fix reaction of issues
  • Fix CSV diff for added/deleted files
  • Fix pagination limit parameter problem
  • TESTING:
  • Fix missing m.Run() in TestMain
  • BUILD:
  • Use Go 1.19 fmt for Gitea 1.17, sync emoji data

New in Gitea 1.17.2 (Sep 6, 2022)

  • SECURITY:
  • Double check CloneURL is acceptable (#20869) (#20892)
  • Add more checks in migration code (#21011) (#21050)
  • ENHANCEMENTS:
  • Fix hard-coded timeout and error panic in API archive download endpoint (#20925) (#21051)
  • Improve arc-green code theme (#21039) (#21042)
  • Enable contenthash in filename for dynamic assets (#20813) (#20932)
  • Don't open new page for ext wiki on same repository (#20725) (#20910)
  • Disable doctor logging on panic (#20847) (#20898)
  • Remove calls to load Mirrors in user.Dashboard (#20855) (#20897)
  • Update codemirror to 5.65.8 (#20875)
  • Rework repo buttons (#20602, #20718) (#20719)
  • BUGFIXES:
  • Ensure delete user deletes all comments (#21067) (#21068)
  • Delete unreferenced packages when deleting a package version (#20977) (#21060)
  • Redirect if user does not exist on admin pages (#20981) (#21059)
  • Set uploadpack.allowFilter etc on gitea serv to enable partial clones with ssh (#20902) (#21058)
  • Fix 500 on time in timeline API (#21052) (#21057)
  • Fill the specified ref in webhook test payload (#20961) (#21055)
  • Add another index for Action table on postgres (#21033) (#21054)
  • Fix broken insecureskipverify handling in redis connection uris (#20967) (#21053)
  • Add Dev, Peer and Optional dependencies to npm PackageMetadataVersion (#21017) (#21044)
  • Do not add links to Posters or Assignees with ID < 0 (#20577) (#21037)
  • Fix modified due date message (#20388) (#21032)
  • Fix missed sort bug (#21006)
  • Fix input.value attr for RequiredClaimName/Value (#20946) (#21001)
  • Change review buttons to icons to make space for text (#20934) (#20978)
  • Fix download archiver of a commit (#20962) (#20971)
  • Return 404 NotFound if requested attachment does not exist (#20886) (#20941)
  • Set no-tags in git fetch on compare (#20893) (#20936)
  • Allow multiple metadata files for Maven packages (#20674) (#20916)
  • Increase Content field size of gpg_key and public_key to MEDIUMTEXT (#20896) (#20911)
  • Fix mirror address setting not working (#20850) (#20904)
  • Fix push mirror address backend get error Address cause setting page display error (#20593) (#20901)
  • Fix panic when an invalid oauth2 name is passed (#20820) (#20900)
  • In PushMirrorsIterate and MirrorsIterate if limit is negative do not set it (#20837) (#20899)
  • Ensure that graceful start-up is informed of unused SSH listener (#20877) (#20888)
  • Pad GPG Key ID with preceding zeroes (#20878) (#20885)
  • Fix SQL Query for SearchTeam (#20844) (#20872)
  • Fix the mode of custom dir to 0700 in docker-rootless (#20861) (#20867)
  • Fix UI mis-align for PR commit history (#20845) (#20859)

New in Gitea 1.17.1 (Aug 18, 2022)

  • SECURITY:
  • Correctly escape within tribute.js (#20831) (#20832)
  • ENHANCEMENTS:
  • Add support for NuGet API keys (#20721) (#20734)
  • Display project in issue list (#20583)
  • Add disable download source configuration (#20548) (#20579)
  • Add username check to doctor (#20140) (#20671)
  • Enable Wire 2 for Internal SSH Server (#20616) (#20617)
  • BUGFIXES:
  • Use the total issue count for UI (#20785) (#20827)
  • Add proxy host into allow list (#20798) (#20819)
  • Add missing translation for queue flush workers (#20791) (#20792)
  • Improve comment header for mobile (#20781) (#20789)
  • Fix git.Init for doctor sub-command (#20782) (#20783)
  • Check webhooks slice length before calling xorm (#20642) (#20768)
  • Remove manual rollback for failed generated repositories (#20639) (#20762)
  • Use correct field name in npm template (#20675) (#20760)
  • Keep download count on Container tag overwrite (#20728) (#20735)
  • Fix v220 migration to be compatible for MSSQL 2008 r2 (#20702) (#20707)
  • Use request timeout for git service rpc (#20689) (#20693)
  • Send correct NuGet status codes (#20647) (#20677)
  • Use correct context to get package content (#20673) (#20676)
  • Fix the JS error "EventSource is not defined" caused by some non-standard browsers (#20584) (#20663)
  • Add default commit messages to PR for squash merge (#20618) (#20645)
  • Fix package upload for files >32mb (#20622) (#20635)
  • Fix the new-line copy-paste for rendered code (#20612)
  • Clean up and fix clone button script (#20415 & #20600) (#20599)
  • Fix default merge style (#20564) (#20565)
  • Add repository condition for issue count (#20454) (#20496)
  • Make branch icon stand out more (#20726) (#20774)
  • Fix loading button with invalid form (#20754) (#20759)
  • Fix SecToTime edge-cases (#20610) (#20611)
  • Executable check always returns true for windows (#20637) (#20835)
  • Check issue labels slice length before calling xorm Insert (#20655) (#20836)
  • Fix owners cannot create organization repos bug (#20841) (#20854)
  • Prevent 500 is head repo does not have PullRequest unit in IsUserAllowedToUpdate (#20839) (#20848)

New in Gitea 1.17.0 (Jul 31, 2022)

  • BREAKING:
  • Require go1.18 for Gitea 1.17 (#19918)
  • Make AppDataPath absolute against the AppWorkPath if it is not (#19815)
  • Nuke the incorrect permission report on /api/v1/notifications (#19761)
  • Refactor git module, make Gitea use internal git config (#19732)
  • Remove RequireHighlightJS field, update plantuml example. (#19615)
  • Increase minimal required git version to 2.0 (#19577)
  • Add a directory prefix gitea-src-VERSION to release-tar-file (#19396)
  • Use "main" as default branch name (#19354)
  • Make cron task no notice on success (#19221)
  • Add pam account authorization check (#19040)
  • Show messages for users if the ROOT_URL is wrong, show JavaScript errors (#18971)
  • Refactor mirror code & fix StartToMirror (#18904)
  • Remove deprecated SSH ciphers from default (#18697)
  • Add the possibility to allow the user to have a favicon which differs from the main logo (#18542)
  • Update reserved usernames list (#18438)
  • Support custom ACME provider (#18340)
  • Change initial TrustModel to committer (#18335)
  • Update HTTP status codes (#18063)
  • Upgrade Alpine from 3.13 to 3.15 (#18050)
  • Restrict email address validation (#17688)
  • Refactor Router Logger (#17308)
  • SECURITY:
  • Use git.HOME_PATH for Git HOME directory (#20114) (#20293)
  • Add write check for creating Commit Statuses (#20332) (#20333)
  • Remove deprecated SSH ciphers from default (#18697)
  • FEDERATION:
  • Return statistic information for nodeinfo (#19561)
  • Add Webfinger endpoint (#19462)
  • Store the foreign ID of issues during migration (#18446)
  • FEATURES:
  • Automatically render wiki TOC (#19873)
  • Adding button to link accounts from user settings (#19792)
  • Allow set default merge style while creating repo (#19751)
  • Auto merge pull requests when all checks succeeded (#9307 & #19648)
  • Improve reviewing PR UX (#19612)
  • Add support for rendering console output with colors (#19497)
  • Add Helm Chart registry (#19406)
  • Add Goroutine stack inspector to admin/monitor (#19207)
  • RSS/Atom support for Orgs & Repos (#17714 & #19055)
  • Add button for issue deletion (#19032)
  • Allow to mark files in a PR as viewed (#19007)
  • Add Index to comment for migrations and mirroring (#18806)
  • Add health check endpoint (#18465)
  • Add packagist webhook (#18224)
  • Add "Allow edits from maintainer" feature (#18002)
  • Add apply-patch, basic revert and cherry-pick functionality (#17902)
  • Add Package Registry (#16510)
  • Add LDAP group sync to Teams (#16299)
  • Pause queues (#15928)
  • Added auto-save whitespace behavior if it changed manually (#15566)
  • Find files in repo (#15028)
  • Provide configuration to allow camo-media proxying (#12802)
  • API:
  • Add endpoint to serve blob or LFS file content (#19689)
  • Add endpoint to check if team has repo access (#19540)
  • More commit info (#19252)
  • Allow to create file on empty repo (#19224)
  • Allow removing issues (#18879)
  • Add endpoint to query collaborators permission for a repository (#18761)
  • Return primary language and repository language stats API URL (#18396)
  • Implement http signatures support for the API (#17565)
  • ENHANCEMENTS:
  • Make notification bell more prominent on mobile (#20108, #20236, #20251) (#20269)
  • Adjust max-widths for the repository file table (#20243) (#20247)
  • Display full name (#20171) (#20246)
  • Add dbconsistency checks for Stopwatches (#20010)
  • Add fetch.writeCommitGraph to gitconfig (#20006)
  • Add fgprof pprof profiler (#20005)
  • Move agit dependency (#19998)
  • Empty log queue on flush and close (#19994)
  • Remove tab/TabName usage where it's not needed (#19973)
  • Improve file header on mobile (#19945)
  • Move issues related files into models/issues (#19931)
  • Add breaking email restrictions checker in doctor (#19903)
  • Improve UX on modal for deleting an access token (#19894)
  • Add alt text to logo (#19892)
  • Move some code into models/git (#19879)
  • Remove customized (unmaintained) dropdown, improve aria a11y for dropdown (#19861)
  • Make user profile image show full image on mobile (#19840)
  • Replace blue button and label classes with primary (#19763)
  • Remove fomantic progress module (#19760)
  • Allows repo search to match against "owner/repo" pattern strings (#19754)
  • Move org functions (#19753)
  • Move almost all functions' parameter db.Engine to context.Context (#19748)
  • Show source/target branches on PR's list (#19747)
  • Use http.StatusTemporaryRedirect(307) when serve avatar directly (#19739)
  • Add doctor orphan check for orphaned pull requests without an existing base repo (#19731)
  • Make Ctrl+Enter (quick submit) work for issue comment and wiki editor (#19729)
  • Update go-chi/cache to utilize Ping() (#19719)
  • Improve commit list/view on mobile (#19712)
  • Move some repository related code into sub package (#19711)
  • Use a better OlderThan for DeleteInactiveUsers (#19693)
  • Introduce eslint-plugin-jquery (#19690)
  • Tidy up <head> template (#19678)
  • Calculate filename hash only once (#19654)
  • Simplify IsVendor (#19626)
  • Add "Reference" section to Issue view sidebar (#19609)
  • Only set CanColorStdout / CanColorStderr to true if the stdout/stderr is a terminal (#19581)
  • Use for a repo action one database transaction (#19576)
  • Simplify loops to copy (#19569)
  • Added X-Mailer header to outgoing emails (#19562)
  • use middleware to open gitRepo (#19559)
  • Mute link in diff header (#19556)
  • Improve UI on mobile (#19546)
  • Fix Pull Request comment filename word breaks (#19535)
  • Permalink files In PR diff (#19534)
  • PullService lock via pullID (#19520)
  • Make repository file list useable on mobile (#19515)
  • more context for models (#19511)
  • Refactor readme file renderer (#19502)
  • By default force vertical tabs on mobile (#19486)
  • Github style following followers (#19482)
  • Improve action table indices (#19472)
  • Use horizontal tabs for repo header on mobile (#19468)
  • pass gitRepo down since its used for main repo and wiki (#19461)
  • Admin should not delete himself (#19423)
  • Use queue instead of memory queue in webhook send service (#19390)
  • Simplify the code to get issue count (#19380)
  • Add commit status popup to issuelist (#19375)
  • Add RSS Feed buttons to Repo, User and Org pages (#19370)
  • Add logic to switch between source/rendered on Markdown (#19356)
  • Move some helper files out of models (#19355)
  • Move access and repo permission to models/perm/access (#19350)
  • Disallow selecting the text of buttons (#19330)
  • Allow custom redirect for landing page (#19324)
  • Remove dependent on session auth for api/v1 routers (#19321)
  • Never use /api/v1 from Gitea UI Pages (#19318)
  • Remove legacy unmaintained packages, refactor to support change default locale (#19308)
  • Move milestone to models/issues/ (#19278)
  • Configure OpenSSH log level via Environment in Docker (#19274)
  • Move reaction to models/issues/ (#19264)
  • Make git.OpenRepository accept Context (#19260)
  • Move some issue methods as functions (#19255)
  • Show last cron messages on monitor page (#19223)
  • New cron task: delete old system notices (#19219)
  • Add Redis Sentinel Authentication Support (#19213)
  • Add auto logging of goroutine pid label (#19212)
  • Set OpenGraph title to DisplayName in profile pages (#19206)
  • Add pprof labels in processes and for lifecycles (#19202)
  • Let web and API routes have different auth methods group (#19168)
  • Move init repository related functions to modules (#19159)
  • Feeds: render markdown to html (#19058)
  • Allow users to self-request a PR review (#19030)
  • Allow render HTML with css/js external links (#19017)
  • Fix script compatiable with OpenWrt (#19000)
  • Support ignore all santize for external renderer (#18984)
  • Add note to GPG key response if user has no keys (#18961)
  • Improve Stopwatch behavior (#18930)
  • Improve mirror iterator (#18928)
  • Uncapitalize errors (#18915)
  • Prevent Stats Indexer reporting error if repo dir missing (#18870)
  • Refactor SecToTime() function (#18863)
  • Replace deprecated String.prototype.substr() with String.prototype.slice() (#18796)
  • Move deletebeans into models/db (#18781)
  • Fix display time of milestones (#18753)
  • Add config option to disable "Update branch by rebase" (#18745)
  • Display template path of current page in dev mode (#18717)
  • Add number in queue status to monitor page (#18712)
  • Change git.cmd to RunWithContext (#18693)
  • Refactor i18n, use Locale to provide i18n/translation related functions (#18648)
  • Delete old git.NewCommand() and use it as git.NewCommandContext() (#18552)
  • Move organization related structs into sub package (#18518)
  • Warn at startup if the provided SCRIPT_TYPE is not on the PATH (#18467)
  • Use CryptoRandomBytes instead of CryptoRandomString (#18439)
  • Use explicit jQuery import, remove unused eslint globals (#18435)
  • Allow to filter repositories by language in explore, user and organization repositories lists (#18430)
  • Use base32 for 2FA scratch token (#18384)
  • Unexport var git.GlobalCommandArgs (#18376)
  • Don't underline commit status icon on hover (#18372)
  • Always use git command but not os.Command (#18363)
  • Switch to non-deprecation setting (#18358)
  • Set the LastModified header for raw files (#18356)
  • Refactor jwt.StandardClaims to RegisteredClaims (#18344)
  • Enable deprecation error for v1.17.0 (#18341)
  • Refactor httplib (#18338)
  • Limit max-height of CodeMirror editors for issue comment and wiki (#18271)
  • Validate migration files (#18203)
  • Format with gofumpt (#18184)
  • Allow custom default merge message with .gitea/default_merge_message/<merge_style>_TEMPLATE.md (#18177)
  • Prettify number of issues (#17760)
  • Add a "admin user generate-access-token" subcommand (#17722)
  • Custom regexp external issues (#17624)
  • Add smtp password to install page (#17564)
  • Add config options to hide issue events (#17414)
  • Prevent double click new issue/pull/comment button (#16157)
  • Show issue assignee on project board (#15232)
  • BUGFIXES:
  • WebAuthn CredentialID field needs to be increased in size (#20530) (#20555)
  • Ensure that all unmerged files are merged when conflict checking (#20528) (#20536)
  • Stop logging EOFs and exit(1)s in ssh handler (#20476) (#20529)
  • Add labels to two buttons that were missing them (#20419) (#20524)
  • Fix ROOT_URL detection for URLs without trailing slash (#20502) (#20503)
  • Dismiss prior pull reviews if done via web in review dismiss (#20197) (#20407)
  • Allow RSA 2047 bit keys (#20272) (#20396)
  • Add missing return for when topic isn't found (#20351) (#20395)
  • Fix commit status icon when in subdirectory (#20285) (#20385)
  • Initialize cron last (#20373) (#20384)
  • Set target on create release with existing tag (#20381) (#20382)
  • Update xorm.io/xorm to fix a interpreting db column sizes issue on 32bit systems (#20371) (#20372)
  • Make sure repo_dir is an empty directory or doesn't exist before 'dump-repo' (#20205) (#20370)
  • Prevent context deadline error propagation in GetCommitsInfo (#20346) (#20361)
  • Correctly handle draft releases without a tag (#20314) (#20335)
  • Prevent "empty" scrollbars on Firefox (#20294) (#20308)
  • Refactor SSH init code, fix directory creation for TrustedUserCAKeys file (#20299) (#20306)
  • Bump goldmark to v1.4.13 (#20300) (#20301)
  • Do not create empty ".ssh" directory when loading config (#20289) (#20298)
  • Fix NPE when using non-numeric (#20277) (#20278)
  • Store read access in access for team repositories (#20275) (#20276)
  • EscapeFilter the group dn membership (#20200) (#20254)
  • Only show Followers that current user can access (#20220) (#20252)
  • Update Bluemonday to v1.0.19 (#20199) (#20209)
  • Refix indices on actions table (#20158) (#20198)
  • Check if project has the same repository id with issue when assign project to issue (#20133) (#20188)
  • Fix remove file on initial comment (#20127) (#20128)
  • Catch the error before the response is processed by goth (#20000) (#20102)
  • Dashboard feed respect setting.UI.FeedPagingNum again (#20094) (#20099)
  • Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041)
  • Respond with a 401 on git push when password isn't changed yet (#20026) (#20027)
  • Return 404 when tag is broken (#20017) (#20024)
  • Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041)
  • Respond with a 401 on git push when password isn't changed yet (#20026) (#20027)
  • Return 404 when tag is broken (#20017) (#20024)
  • Write Commit-Graphs in RepositoryDumper (#20004)
  • Use DisplayName() instead of FullName in Oauth Provider (#19991)
  • Don't buffer doctor logger (#19982)
  • Always try to fetch repo for mirrors (#19975)
  • Uppercase first languages letters (#19965)
  • Fix cli command restore-repo: "units" should be parsed as StringSlice (#19953)
  • Ensure minimum mirror interval is reported on settings page (#19895)
  • Exclude Archived repos from Dashboard Milestones (#19882)
  • gitconfig: set safe.directory = * (#19870)
  • Prevent NPE on update mirror settings (#19864)
  • Only return valid stopwatches to the EventSource (#19863)
  • Prevent NPE whilst migrating if there is a team request review (#19855)
  • Fix inconsistency in doctor output (#19836)
  • Fix release tag for webhook (#19830)
  • Add title attribute to dependencies in sidebar (#19807)
  • Estimate Action Count in Statistics (#19775)
  • Do not update user stars numbers unless fix is specified (#19750)
  • Improved ref comment link when origin is body/title (#19741)
  • Fix nodeinfo caching and prevent NPE if cache non-existent (#19721)
  • Fix duplicate entry error when add team member (#19702)
  • Fix sending empty notifications (#19589)
  • Update image URL for Discord webhook (#19536)
  • Don't let repo clone URL overflow (#19517)
  • Allow commit status popup on /pulls page (#19507)
  • Fix two UI bugs: JS error in imagediff.js, 500 error in diff/compare.tmpl (#19494)
  • Fix logging of Transfer API (#19456)
  • Fix panic in teams API when requesting members (#19360)
  • Refactor CSRF protection modules, make sure CSRF tokens can be up-to-date. (#19337)
  • An attempt to sync a non-mirror repo must give 400 (Bad Request) (#19300)
  • Move checks for pulls before merge into own function (#19271)
  • Fix contrib/upgrade.sh (#19222)
  • Set the default branch for repositories generated from templates (#19136)
  • Fix EasyMDE error when input Enter (#19004)
  • Don't clean up hardcoded tmp (#18983)
  • Delete related notifications on issue deletion too (#18953)
  • Fix trace log to show value instead of pointers (#18926)
  • Fix behavior or checkbox submission. (#18851)
  • Add ContextUser (#18798)
  • Fix some mirror bugs (#18649)
  • Quote MAKE to prevent path expansion with space error (#18622)
  • Preserve users if restoring a repository on the same Gitea instance (#18604)
  • Fix non-ASCII search on database (#18437)
  • Automatically pause queue if index service is unavailable (#15066)
  • TESTING:
  • Allow postgres integration tests to run over unix pipe (#19875)
  • Prevent intermittent NPE in queue tests (#19301)
  • Add test for importing pull requests in gitea uploader for migrations (#18752)
  • Remove redundant comparison in repo dump/restore (#18660)
  • More repo dump/restore tests, including pull requests (#18621)
  • Add test coverage for original author conversion during migrations (#18506)
  • TRANSLATION:
  • Update issue_no_dependencies description (#19112)
  • Refactor webhooks i18n (#18380)
  • BUILD:
  • Use alpine 3.16 (#19797)
  • Require node 14.0 (#19451)
  • DOCS:
  • Update documents (git/fomantic/db, etc) (#19868)
  • Update the ROOT documentation and error messages (#19832)
  • Update document to use FHS /usr/local/bin/gitea instead of /app/... for Docker (#19794)
  • Update documentation to disable duration settings with -1 instead of 0 (#19647)
  • Add warning to set SENDMAIL_ARGS to -- (#19102)
  • Update nginx reverse proxy docs (#18922)
  • Add example to render html files (#18736)
  • Make SSH passtrough documentation better (#18687)
  • Changelog 1.16.0 & 1.15.11 (#18468 & #18455) (#18470)
  • Update the SSH passthrough documentation (#18366)
  • Add contrib/upgrade.sh (#18286)
  • MISC:
  • Fix aria for logo (#19955)
  • In code search, get code unit accessible repos in one (main) query (#19764)
  • Add tooltip to pending PR comments (#19662)
  • Improve sync performance for pull-mirrors (#19125)
  • Improve dashboard's repo list performance (#18963)
  • Avoid database lookups for DescriptionHTML (#18924)
  • Remove CodeMirror dependencies (#18911)
  • Disable unnecessary mirroring elements (#18527)
  • Disable unnecessary OpenID/OAuth2 elements (#18491)
  • Disable unnecessary GitHooks elements (#18485)
  • Change some logging levels (#18421)
  • Prevent showing webauthn error for every time visiting /user/settings/security (#18385)
  • Use correct translation key for errors (#18342)

New in Gitea 1.17.0 RC 2 (Jul 19, 2022)

  • SECURITY:
  • Use git.HOME_PATH for Git HOME directory (#20114) (#20293)
  • Add write check for creating Commit Statuses (#20332) (#20333)
  • ENHANCEMENTS:
  • Make notification bell more prominent on mobile (#20108, #20236, #20251) (#20269)
  • Adjust max-widths for the repository file table (#20243) (#20247)
  • Display full name (#20171) (#20246)
  • BUGFIXES:
  • Allow RSA 2047 bit keys (#20272) (#20396)
  • Add missing return for when topic isn't found (#20351) (#20395)
  • Fix commit status icon when in subdirectory (#20285) (#20385)
  • Initialize cron last (#20373) (#20384)
  • Set target on create release with existing tag (#20381) (#20382)
  • Update xorm.io/xorm to fix a interpreting db column sizes issue on 32bit systems (#20371) (#20372)
  • Make sure repo_dir is an empty directory or doesn't exist before 'dump-repo' (#20205) (#20370)
  • Prevent context deadline error propagation in GetCommitsInfo (#20346) (#20361)
  • Correctly handle draft releases without a tag (#20314) (#20335)
  • Prevent "empty" scrollbars on Firefox (#20294) (#20308)
  • Refactor SSH init code, fix directory creation for TrustedUserCAKeys file (#20299) (#20306)
  • Bump goldmark to v1.4.13 (#20300) (#20301)
  • Do not create empty ".ssh" directory when loading config (#20289) (#20298)
  • Fix NPE when using non-numeric (#20277) (#20278)
  • Store read access in access for team repositories (#20275) (#20276)
  • EscapeFilter the group dn membership (#20200) (#20254)
  • Only show Followers that current user can access (#20220) (#20252)
  • Update Bluemonday to v1.0.19 (#20199) (#20209)
  • Refix indices on actions table (#20158) (#20198)
  • Check if project has the same repository id with issue when assign project to issue (#20133) (#20188)
  • Fix remove file on initial comment (#20127) (#20128)
  • Catch the error before the response is processed by goth (#20000) (#20102)
  • Dashboard feed respect setting.UI.FeedPagingNum again (#20094) (#20099)
  • Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041)
  • Respond with a 401 on git push when password isn't changed yet (#20026) (#20027)
  • Return 404 when tag is broken (#20017) (#20024)

New in Gitea 1.16.9 (Jul 12, 2022)

  • SECURITY:
  • Add write check for creating Commit status (#20332) (#20334)
  • Check for permission when fetching user controlled issues (#20133) (#20196)
  • BUGFIXES:
  • Hide notify mail setting ui if not enabled (#20138) (#20337)
  • Add write check for creating Commit status (#20332) (#20334)
  • Only show Followers that current user can access (#20220) (#20253)
  • Release page show all tags in compare dropdown (#20070) (#20071)
  • Fix permission check for delete tag (#19985) (#20001)
  • Only log non ErrNotExist errors in git.GetNote (#19884) (#19905)
  • Use exact search instead of fuzzy search for branch filter dropdown (#19885) (#19893)
  • Set Setpgid on child git processes (#19865) (#19881)
  • Import git from alpine 3.16 repository as 2.30.4 is needed for safe.directory = '*' to work but alpine 3.13 has 2.30.3 (#19876)
  • Ensure responses are context.ResponseWriters (#19843) (#19859)
  • Fix incorrect usage of Count function (#19850)
  • Fix raw endpoint PDF file headers (#19825) (#19826)
  • Make WIP prefixes case insensitive, e.g. allow Draft as a WIP prefix (#19780) (#19811)
  • Don't return 500 on NotificationUnreadCount (#19802)
  • Prevent NPE when cache service is disabled (#19703) (#19783)
  • Detect truncated utf-8 characters at the end of content as still representing utf-8 (#19773) (#19774)
  • Fix doctor pq: syntax error at or near "." quote user table name (#19765) (#19770)
  • Fix bug with assigneees (#19757)

New in Gitea 1.17.0 RC 1 (Jun 20, 2022)

  • BREAKING:
  • Require go1.18 for Gitea 1.17 (#19918)
  • Make AppDataPath absolute against the AppWorkPath if it is not (#19815)
  • Nuke the incorrect permission report on /api/v1/notifications (#19761)
  • Refactor git module, make Gitea use internal git config (#19732)
  • Remove RequireHighlightJS field, update plantuml example. (#19615)
  • Increase minimal required git version to 2.0 (#19577)
  • Add a directory prefix gitea-src-VERSION to release-tar-file (#19396)
  • Use "main" as default branch name (#19354)
  • Make cron task no notice on success (#19221)
  • Add pam account authorization check (#19040)
  • Show messages for users if the ROOT_URL is wrong, show JavaScript errors (#18971)
  • Refactor mirror code & fix StartToMirror (#18904)
  • Remove deprecated SSH ciphers from default (#18697)
  • Add the possibility to allow the user to have a favicon which differs from the main logo (#18542)
  • Update reserved usernames list (#18438)
  • Support custom ACME provider (#18340)
  • Change initial TrustModel to committer (#18335)
  • Update HTTP status codes (#18063)
  • Upgrade Alpine from 3.13 to 3.15 (#18050)
  • Restrict email address validation (#17688)
  • Refactor Router Logger (#17308)
  • SECURITY:
  • Remove deprecated SSH ciphers from default (#18697)
  • FEDERATION:
  • Return statistic information for nodeinfo (#19561)
  • Add Webfinger endpoint (#19462)
  • Store the foreign ID of issues during migration (#18446)
  • FEATURES:
  • Automatically render wiki TOC (#19873)
  • Adding button to link accounts from user settings (#19792)
  • Allow set default merge style while creating repo (#19751)
  • Auto merge pull requests when all checks succeeded (#9307 & #19648)
  • Improve reviewing PR UX (#19612)
  • Add support for rendering console output with colors (#19497)
  • Add Helm Chart registry (#19406)
  • Add Goroutine stack inspector to admin/monitor (#19207)
  • RSS/Atom support for Orgs & Repos (#17714 & #19055)
  • Add button for issue deletion (#19032)
  • Allow to mark files in a PR as viewed (#19007)
  • Add Index to comment for migrations and mirroring (#18806)
  • Add health check endpoint (#18465)
  • Add packagist webhook (#18224)
  • Add "Allow edits from maintainer" feature (#18002)
  • Add apply-patch, basic revert and cherry-pick functionality (#17902)
  • Add Package Registry (#16510)
  • Add LDAP group sync to Teams (#16299)
  • Pause queues (#15928)
  • Added auto-save whitespace behavior if it changed manually (#15566)
  • Find files in repo (#15028)
  • Provide configuration to allow camo-media proxying (#12802)
  • API:
  • Add endpoint to serve blob or LFS file content (#19689)
  • Add endpoint to check if team has repo access (#19540)
  • More commit info (#19252)
  • Allow to create file on empty repo (#19224)
  • Allow removing issues (#18879)
  • Add endpoint to query collaborators permission for a repository (#18761)
  • Return primary language and repository language stats API URL (#18396)
  • Implement http signatures support for the API (#17565)
  • ENHANCEMENTS:
  • Add dbconsistency checks for Stopwatches (#20010)
  • Add fetch.writeCommitGraph to gitconfig (#20006)
  • Add fgprof pprof profiler (#20005)
  • Move agit dependency (#19998)
  • Empty log queue on flush and close (#19994)
  • Remove tab/TabName usage where it's not needed (#19973)
  • Improve file header on mobile (#19945)
  • Move issues related files into models/issues (#19931)
  • Add breaking email restrictions checker in doctor (#19903)
  • Improve UX on modal for deleting an access token (#19894)
  • Add alt text to logo (#19892)
  • Move some code into models/git (#19879)
  • Remove customized (unmaintained) dropdown, improve aria a11y for dropdown (#19861)
  • Make user profile image show full image on mobile (#19840)
  • Replace blue button and label classes with primary (#19763)
  • Remove fomantic progress module (#19760)
  • Allows repo search to match against "owner/repo" pattern strings (#19754)
  • Move org functions (#19753)
  • Move almost all functions' parameter db.Engine to context.Context (#19748)
  • Show source/target branches on PR's list (#19747)
  • Use http.StatusTemporaryRedirect(307) when serve avatar directly (#19739)
  • Add doctor orphan check for orphaned pull requests without an existing base repo (#19731)
  • Make Ctrl+Enter (quick submit) work for issue comment and wiki editor (#19729)
  • Update go-chi/cache to utilize Ping() (#19719)
  • Improve commit list/view on mobile (#19712)
  • Move some repository related code into sub package (#19711)
  • Use a better OlderThan for DeleteInactiveUsers (#19693)
  • Introduce eslint-plugin-jquery (#19690)
  • Tidy up <head> template (#19678)
  • Calculate filename hash only once (#19654)
  • Simplify IsVendor (#19626)
  • Add "Reference" section to Issue view sidebar (#19609)
  • Only set CanColorStdout / CanColorStderr to true if the stdout/stderr is a terminal (#19581)
  • Use for a repo action one database transaction (#19576)
  • Simplify loops to copy (#19569)
  • Added X-Mailer header to outgoing emails (#19562)
  • use middleware to open gitRepo (#19559)
  • Mute link in diff header (#19556)
  • Improve UI on mobile (#19546)
  • Fix Pull Request comment filename word breaks (#19535)
  • Permalink files In PR diff (#19534)
  • PullService lock via pullID (#19520)
  • Make repository file list useable on mobile (#19515)
  • more context for models (#19511)
  • Allow package dump skipping (#19506)
  • Refactor readme file renderer (#19502)
  • By default force vertical tabs on mobile (#19486)
  • Github style following followers (#19482)
  • Improve action table indices (#19472)
  • Use horizontal tabs for repo header on mobile (#19468)
  • pass gitRepo down since its used for main repo and wiki (#19461)
  • Admin should not delete himself (#19423)
  • Use queue instead of memory queue in webhook send service (#19390)
  • Simplify the code to get issue count (#19380)
  • Add commit status popup to issuelist (#19375)
  • Add RSS Feed buttons to Repo, User and Org pages (#19370)
  • Add logic to switch between source/rendered on Markdown (#19356)
  • Move some helper files out of models (#19355)
  • Move access and repo permission to models/perm/access (#19350)
  • Disallow selecting the text of buttons (#19330)
  • Allow custom redirect for landing page (#19324)
  • Repository level enable package or disable (#19323)
  • Remove dependent on session auth for api/v1 routers (#19321)
  • Never use /api/v1 from Gitea UI Pages (#19318)
  • Remove legacy unmaintained packages, refactor to support change default locale (#19308)
  • Move milestone to models/issues/ (#19278)
  • Configure OpenSSH log level via Environment in Docker (#19274)
  • Move reaction to models/issues/ (#19264)
  • Make git.OpenRepository accept Context (#19260)
  • Move some issue methods as functions (#19255)
  • Show last cron messages on monitor page (#19223)
  • New cron task: delete old system notices (#19219)
  • Add Redis Sentinel Authentication Support (#19213)
  • Add auto logging of goroutine pid label (#19212)
  • Set OpenGraph title to DisplayName in profile pages (#19206)
  • Add pprof labels in processes and for lifecycles (#19202)
  • Let web and API routes have different auth methods group (#19168)
  • Move init repository related functions to modules (#19159)
  • Feeds: render markdown to html (#19058)
  • Allow users to self-request a PR review (#19030)
  • Allow render HTML with css/js external links (#19017)
  • Fix script compatiable with OpenWrt (#19000)
  • Support ignore all santize for external renderer (#18984)
  • Add note to GPG key response if user has no keys (#18961)
  • Improve Stopwatch behavior (#18930)
  • Improve mirror iterator (#18928)
  • Uncapitalize errors (#18915)
  • Prevent Stats Indexer reporting error if repo dir missing (#18870)
  • Refactor SecToTime() function (#18863)
  • Replace deprecated String.prototype.substr() with String.prototype.slice() (#18796)
  • Move deletebeans into models/db (#18781)
  • Fix display time of milestones (#18753)
  • Add config option to disable "Update branch by rebase" (#18745)
  • Display template path of current page in dev mode (#18717)
  • Add number in queue status to monitor page (#18712)
  • Change git.cmd to RunWithContext (#18693)
  • Refactor i18n, use Locale to provide i18n/translation related functions (#18648)
  • Delete old git.NewCommand() and use it as git.NewCommandContext() (#18552)
  • Move organization related structs into sub package (#18518)
  • Warn at startup if the provided SCRIPT_TYPE is not on the PATH (#18467)
  • Use CryptoRandomBytes instead of CryptoRandomString (#18439)
  • Use explicit jQuery import, remove unused eslint globals (#18435)
  • Allow to filter repositories by language in explore, user and organization repositories lists (#18430)
  • Use base32 for 2FA scratch token (#18384)
  • Unexport var git.GlobalCommandArgs (#18376)
  • Don't underline commit status icon on hover (#18372)
  • Always use git command but not os.Command (#18363)
  • Switch to non-deprecation setting (#18358)
  • Set the LastModified header for raw files (#18356)
  • Refactor jwt.StandardClaims to RegisteredClaims (#18344)
  • Enable deprecation error for v1.17.0 (#18341)
  • Refactor httplib (#18338)
  • Limit max-height of CodeMirror editors for issue comment and wiki (#18271)
  • Validate migration files (#18203)
  • Format with gofumpt (#18184)
  • Allow custom default merge message with .gitea/default_merge_message/<merge_style>_TEMPLATE.md (#18177)
  • Prettify number of issues (#17760)
  • Add a "admin user generate-access-token" subcommand (#17722)
  • Move project files into models/project sub package (#17704)
  • Custom regexp external issues (#17624)
  • Add smtp password to install page (#17564)
  • Add config options to hide issue events (#17414)
  • Prevent double click new issue/pull/comment button (#16157)
  • Show issue assignee on project board (#15232)
  • BUGFIXES:
  • Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041)
  • Respond with a 401 on git push when password isn't changed yet (#20026) (#20027)
  • Return 404 when tag is broken (#20017) (#20024)
  • Write Commit-Graphs in RepositoryDumper (#20004)
  • Use DisplayName() instead of FullName in Oauth Provider (#19991)
  • Don't buffer doctor logger (#19982)
  • Always try to fetch repo for mirrors (#19975)
  • Uppercase first languages letters (#19965)
  • Fix cli command restore-repo: "units" should be parsed as StringSlice (#19953)
  • Ensure minimum mirror interval is reported on settings page (#19895)
  • Exclude Archived repos from Dashboard Milestones (#19882)
  • gitconfig: set safe.directory = * (#19870)
  • Prevent NPE on update mirror settings (#19864)
  • Only return valid stopwatches to the EventSource (#19863)
  • Prevent NPE whilst migrating if there is a team request review (#19855)
  • Fix inconsistency in doctor output (#19836)
  • Fix release tag for webhook (#19830)
  • Add title attribute to dependencies in sidebar (#19807)
  • Estimate Action Count in Statistics (#19775)
  • Do not update user stars numbers unless fix is specified (#19750)
  • Improved ref comment link when origin is body/title (#19741)
  • Fix nodeinfo caching and prevent NPE if cache non-existent (#19721)
  • Fix duplicate entry error when add team member (#19702)
  • Fix sending empty notifications (#19589)
  • Update image URL for Discord webhook (#19536)
  • Don't let repo clone URL overflow (#19517)
  • Allow commit status popup on /pulls page (#19507)
  • Fix two UI bugs: JS error in imagediff.js, 500 error in diff/compare.tmpl (#19494)
  • Fix logging of Transfer API (#19456)
  • Fix panic in teams API when requesting members (#19360)
  • Refactor CSRF protection modules, make sure CSRF tokens can be up-to-date. (#19337)
  • An attempt to sync a non-mirror repo must give 400 (Bad Request) (#19300)
  • Move checks for pulls before merge into own function (#19271)
  • Fix contrib/upgrade.sh (#19222)
  • Set the default branch for repositories generated from templates (#19136)
  • Fix EasyMDE error when input Enter (#19004)
  • Don't clean up hardcoded tmp (#18983)
  • Delete related notifications on issue deletion too (#18953)
  • Fix trace log to show value instead of pointers (#18926)
  • Fix behavior or checkbox submission. (#18851)
  • Add ContextUser (#18798)
  • Fix some mirror bugs (#18649)
  • Quote MAKE to prevent path expansion with space error (#18622)
  • Preserve users if restoring a repository on the same Gitea instance (#18604)
  • Fix non-ASCII search on database (#18437)
  • Automatically pause queue if index service is unavailable (#15066)
  • TESTING:
  • Allow postgres integration tests to run over unix pipe (#19875)
  • Prevent intermittent NPE in queue tests (#19301)
  • Add test for importing pull requests in gitea uploader for migrations (#18752)
  • Remove redundant comparison in repo dump/restore (#18660)
  • More repo dump/restore tests, including pull requests (#18621)
  • Add test coverage for original author conversion during migrations (#18506)
  • TRANSLATION:
  • Update issue_no_dependencies description (#19112)
  • Refactor webhooks i18n (#18380)
  • BUILD:
  • Use alpine 3.16 (#19797)
  • Require node 14.0 (#19451)
  • DOCS:
  • Update documents (git/fomantic/db, etc) (#19868)
  • Update the ROOT documentation and error messages (#19832)
  • Update document to use FHS /usr/local/bin/gitea instead of /app/... for Docker (#19794)
  • Update documentation to disable duration settings with -1 instead of 0 (#19647)
  • Add warning to set SENDMAIL_ARGS to -- (#19102)
  • Update nginx reverse proxy docs (#18922)
  • Add example to render html files (#18736)
  • Make SSH passtrough documentation better (#18687)
  • Changelog 1.16.0 & 1.15.11 (#18468 & #18455) (#18470)
  • Update the SSH passthrough documentation (#18366)
  • Add contrib/upgrade.sh (#18286)
  • MISC:
  • Fix aria for logo (#19955)
  • In code search, get code unit accessible repos in one (main) query (#19764)
  • Enable packages by default again (#19746)
  • Add tooltip to pending PR comments (#19662)
  • Improve sync performance for pull-mirrors (#19125)
  • Improve dashboard's repo list performance (#18963)
  • Avoid database lookups for DescriptionHTML (#18924)
  • Remove CodeMirror dependencies (#18911)
  • Disable unnecessary mirroring elements (#18527)
  • Disable unnecessary OpenID/OAuth2 elements (#18491)
  • Disable unnecessary GitHooks elements (#18485)
  • Change some logging levels (#18421)
  • Prevent showing webauthn error for every time visiting /user/settings/security (#18385)
  • Use correct translation key for errors (#18342)

New in Gitea 1.16.8 (May 16, 2022)

  • ENHANCEMENTS:
  • Add doctor check/fix for bogus action rows (#19656) (#19669)
  • Make .cs highlighting legible on dark themes (#19604) (#19605)
  • BUGFIXES:
  • Fix oauth setting list bug (#19681)
  • Delete user related oauth stuff on user deletion too (#19677) (#19680)
  • Fix new release from tags list UI (#19670) (#19673)
  • Prevent NPE when checking repo units if the user is nil (#19625) (#19630)
  • GetFeeds must always discard actions with dangling repo_id (#19598) (#19629)
  • Call MultipartForm.RemoveAll when request finishes (#19606) (#19607)
  • Avoid MoreThanOne error when creating a branch whose name conflicts with other ref names (#19557) (#19591)
  • Fix sending empty notifications (#19589) (#19590)
  • Ignore DNS error when doing migration allow/block check (#19566) (#19567)
  • Fix issue overview for teams (#19652) (#19653)

New in Gitea 1.16.7 (May 2, 2022)

  • SECURITY:
  • Escape git fetch remote (#19487) (#19490)
  • BUGFIXES:
  • Don't overwrite err with nil (#19572) (#19574)
  • On Migrations, only write commit-graph if wiki clone was successful (#19563) (#19568)
  • Respect DefaultUserIsRestricted system default when creating new user (#19310) (#19560)
  • Don't error when branch's commit doesn't exist (#19547) (#19548)
  • Support hostname:port to pass host matcher's check (#19543) (#19544)
  • Prevent intermittent race in attribute reader close (#19537) (#19539)
  • Fix 64-bit atomic operations on 32-bit machines (#19531) (#19532)
  • Prevent dangling archiver goroutine (#19516) (#19526)
  • Fix migrate release from github (#19510) (#19523)
  • When view _Siderbar or _Footer, just display once (#19501) (#19522)
  • Fix blame page select range error and some typos (#19503)
  • Fix name of doctor fix "authorized-keys" in hints (#19464) (#19484)
  • User specific repoID or xorm builder conditions for issue search (#19475) (#19476)
  • Prevent dangling cat-file calls (goroutine alternative) (#19454) (#19466)
  • RepoAssignment ensure to close before overwrite (#19449) (#19460)
  • Set correct PR status on 3way on conflict checking (#19457) (#19458)
  • Mark TemplateLoading error as "UnprocessableEntity" (#19445) (#19446)

New in Gitea 1.16.6 (Apr 21, 2022)

  • ENHANCEMENTS:
  • Only request write when necessary
  • Disable service worker by default
  • BUGFIXES:
  • When dumping trim the standard suffices instead of a random suffix
  • Fix DELETE request for non-existent public key
  • Don't panic on ErrEmailInvalid
  • Add uploadpack.allowAnySHA1InWant to allow --filter=blob:none with older git clients
  • Warn on SSH connection for incorrect configuration
  • Search Issues via API, dont show 500 if filter result in empty list
  • When updating mirror repo intervals by API reschedule next update too
  • Fix nil error when some pages are rendered outside request context
  • Fix double blob-hunk on diff page
  • Don't allow merging PR's which are being conflict checked
  • Fix middleware function's placements
  • Fix invalid CSRF token bug, make sure CSRF tokens can be up-to-date
  • Restore user autoregistration with email addresses
  • Move checks for pulls before merge into own function
  • Granular webhook events in editHook
  • Only send webhook events to active system webhooks and only deliver to active hooks
  • Use full output of git show-ref --tags to get tags for PushUpdateAddTag
  • Touch mirrors on even on fail to update
  • Hide sensitive content on admin panel progress monitor
  • Fix clone url JS error for the empty repo page
  • Bump goldmark to v1.4.11
  • TESTING:
  • Prevent intermittent failures in RepoIndexerTest
  • BUILD:
  • Revert the minimal golang version requirement from 1.17 to 1.16 and add a warning in Makefile
  • MISC:
  • Performance improvement for add team user when org has more than 1000 repositories
  • Check go and nodejs version by go.mod and package.json

New in Gitea 1.16.5 (Mar 24, 2022)

  • BREAKING:
  • Bump to build with go1.18.
  • SECURITY:
  • Prevent redirect to Host (2).
  • Try to prevent autolinking of displaynames by email readers.
  • Clean paths when looking in Storage.
  • Do not send notification emails to inactive users.
  • Do not send activation email if manual confirm is set.
  • ENHANCEMENTS:
  • Use the new/choose link for New Issue on project page.
  • BUGFIXES:
  • Fix showing issues in your repositories.
  • Fix compare link in active feeds for new branch.
  • Redirect .wiki/* ui link to /wiki.
  • Ensure deploy keys with write access can push.
  • Ensure that setting.LocalURL always has a trailing slash.
  • Cleanup protected branches when deleting users & teams.
  • Use IterateBufferSize whilst querying repositories during adoption check.
  • Fix NPE /repos/issues/search when not signed in.
  • Use custom favicon when viewing static files if it exists.
  • Fix the editor height in review box.
  • Ensure isSSH is set whenever DISABLE_HTTP_GIT is set.
  • Fix wrong scopes caused by empty scope input.
  • Make migrations SKIP_TLS_VERIFY apply to git too.
  • Handle email address not exist.
  • MISC:
  • Update json-iterator to allow compilation with go1.18.
  • Update golang.org/x/crypto.

New in Gitea 1.16.4 (Mar 22, 2022)

  • SECURITY:
  • Restrict email address validation (#17688) (#19085)
  • Fix lfs bug (#19072) (#19080)
  • ENHANCEMENTS:
  • Improve SyncMirrors logging (#19045) (#19050)
  • BUGFIXES:
  • Refactor mirror code & fix StartToMirror (#18904) (#19075)
  • Update the webauthn_credential_id_sequence in Postgres (#19048) (#19060)
  • Prevent 500 when there is an error during new auth source post (#19041) (#19059)
  • If rendering has failed due to a net.OpError stop rendering (attempt 2) (#19049) (#19056)
  • Fix flag validation (#19046) (#19051)
  • Add pam account authorization check (#19040) (#19047)
  • Ignore missing comment for user notifications (#18954) (#19043)
  • Set rel="nofollow noindex" on new issue links (#19023) (#19042)
  • Upgrading binding package (#19034) (#19035)
  • Don't show context cancelled errors in attribute reader (#19006) (#19027)
  • Fix update hint bug (#18996) (#19002)
  • MISC:
  • Fix potential assignee query for repo (#18994) (#18999)