[go: up one dir, main page]

Tags

Tags give the ability to mark specific points in history as being important
  • v1.19.3

    * SECURITY
      * Use golang 1.20.4 to fix CVE-2023-24539, CVE-2023-24540, and CVE-2023-29400
    * ENHANCEMENTS
      * Enable whitespace rendering on selection in Monaco (#24444) (#24485)
      * Improve milestone filter on issues page (#22423) (#24440)
    * BUGFIXES
      * Fix api error message if fork exists (#24487) (#24493)
      * Fix user-cards format (#24428) (#24431)
      * Fix incorrect CurrentUser check for docker rootless (#24435)
      * Getting the tag list does not require being signed in (#24413) (#24416)
    
  • v1.19.2

    4bc6bfb4 · Changelog 1.19.2 (#24365) ·
    * SECURITY
      * Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
      * Only delete secrets belonging to its owner (#24284) (#24286)
    * API
      * Fix typo in API route (#24310) (#24332)
      * Fix access token issue on some public endpoints (#24194) (#24259)
    * ENHANCEMENTS
      * Fix broken clone script on an empty archived repo (#24339) (#24348)
      * Fix Monaco IOS keyboard button (#24341) (#24347)
      * Don't set meta `theme-color` by default (#24340) (#24346)
      * Wrap too long push mirror addresses (#21120) (#24334)
      * Add --font-weight-bold and set previous bold to 601 (#24307) (#24331)
      * Unify nightly naming across binaries and docker images (#24116) (#24308)
      * Fix footer display (#24251) (#24269)
      * Fix label color, fix divider in dropdown (#24215) (#24244)
      * Vertical widths of containers removed (#24184) (#24211)
      * Use correct locale key for forks page (#24172) (#24175)
      * Sort repo topic labels by name (#24123) (#24153)
      * Highlight selected file in the PR file tree (#23947) (#24126)
    * BUGFIXES
      * Fix auth check bug (#24382) (#24387)
      * Add tags list for repos whose release setting is disabled (#23465) (#24369)
      * Fix wrong error info in RepoRefForAPI (#24344) (#24351)
      * Fix no edit/close/delete button in org repo project view page (#24349)
      * Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) (#24333)
      * Remove org users who belong to no teams (#24247) (#24313)
      * Fix bug when deleting wiki with no code write permission (#24274) (#24295)
      * Handle canceled workflow as a warning instead of a fail (#24282) (#24292)
      * Load reviewer for comments when dismissing a review (#24281) (#24288)
      * Show commit history for closed/merged PRs (#24238) (#24261)
      * Fix owner team access mode value in team_unit table (#24224)
      * Fix issue attachment handling (#24202) (#24221)
      * Fix incorrect CORS default values (#24206) (#24217)
      * Fix template error in pull request with deleted head repo (#24192) (#24216)
      * Don't list root repository on compare page if pulls not allowed (#24183) (#24210)
      * Fix calReleaseNumCommitsBehind (#24148) (#24197)
      * Fix Org edit page bugs: renaming detection, maxlength (#24161) (#24171)
      * Update redis library to support redis v7 (#24114) (#24156)
      * Use 1.18's aria role for dropdown menus (#24144) (#24155)
      * Fix 2-dot direct compare to use the right base commit (#24133) (#24150)
      * Fix incorrect server error content in RunnersList (#24118) (#24121)
      * Fix mismatch between hook events and github event types (#24048) (#24091)
    * BUILD
      * Support converting varchar to nvarchar for mssql database (#24105) (#24168)
    
  • v1.19.1

    * BREAKING
      * Rename actions unit to `repo.actions` and add docs for it (#23733) (#23881)
    * ENHANCEMENTS
      * Add card type to org/user level project on creation, edit and view (#24043) (#24066)
      * Refactor commit status for Actions jobs (#23786) (#24060)
      * Show errors for KaTeX and mermaid on the preview tab (#24009) (#24019)
      * Show protected branch rule names again (#23907) (#24018)
      * Adjust sticky PR header to cover background (#23956) (#23999)
      * Discolor pull request tab labels (#23950) (#23987)
      * Treat PRs with agit flow as fork PRs when triggering actions. (#23884) (#23967)
      * Left-align review comments (#23937)
      * Fix image border-radius (#23886) (#23930)
      * Scroll collapsed file into view (#23702) (#23929)
      * Fix code view (diff) broken layout (#23096) (#23918)
      * Org pages style fixes (#23901) (#23914)
      * Fix user profile description rendering (#23882) (#23902)
      * Fix review box viewport overflow issue (#23800) (#23898)
      * Prefill input values in OAuth settings as intended (#23829) (#23871)
      * CSS color tweaks (#23828) (#23842)
      * Fix incorrect visibility dropdown list in add/edit user page (#23804) (#23833)
      * Add CSS rules for basic colored labels (#23774) (#23777)
      * Add creation time in tag list page (#23693) (#23773)
      * Fix br display for packages curls (#23737) (#23764)
      * Fix issue due date edit toggle bug (#23723) (#23758)
      * Improve commit graph page UI alignment (#23751) (#23754)
      * Use GitHub Actions compatible globbing for `branches`, `tag`, `path` filter (#22804) (#23740)
      * Redirect to project again after editing it (#23326) (#23739)
      * Remove row clicking from notification table (#22695) (#23706)
      * Remove conflicting CSS rules on notifications, improve notifications table (#23565) (#23621)
      * Fix diff tree height and adjust target file style (#23616)
    * BUGFIXES
      * Improve error logging for LFS (#24072) (#24082)
      * Fix custom mailer template on Windows platform (#24081)
      * Update the value of `diffEnd` when clicking the `Show More` button in the DiffFileTree (#24069) (#24078)
      * Make label templates have consistent behavior and priority (#23749)
      * Fix accidental overwriting of LDAP team memberships (#24050) (#24065)
      * Fix branch protection priority (#24045) (#24061)
      * Use actions job link as commit status URL instead of run link (#24023) (#24032)
      * Add actions support to package auth verification (#23729) (#24028)
      * Fix protected branch for API (#24013) (#24027)
      * Do not escape space between PyPI repository URL and package name… (#23981) (#24008)
      * Fix redirect bug when creating issue from a project (#23971) (#23997)
      * Set `ref` to fully-formed of the tag when trigger event is `release` (#23944) (#23989)
      * Use Get/Set instead of Rename when regenerating session ID (#23975) (#23983)
      * Ensure RSS icon is present on all repo tabs (#23904) (#23973)
      * Remove `Repository.getFilesChanged` to fix Actions `paths` and `paths-ignore` filter (#23920) (#23969)
      * Delete deleted release attachments immediately from storage (#23913) (#23958)
      * Use ghost user if package creator does not exist (#23822) (#23915)
      * User/Org Feed render description as per web (#23887) (#23906)
      * Fix `cases.Title` crash for concurrency (#23885) (#23903)
      * Convert .Source.SkipVerify to $cfg.SkipVerify (#23839) (#23899)
      * Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874) (#23878)
      * Fix JS error when changing PR's target branch (#23862) (#23864)
      * Fix 500 error if there is a name conflict when editing authentication source (#23832) (#23852)
      * Fix closed PR also triggers Webhooks and actions (#23782) (#23834)
      * Fix checks for `needs` in Actions (#23789) (#23831)
      * Fix "Updating branch by merge" bug in "update_branch_by_merge.tmpl" (#23790) (#23825)
      * Fix cancel button in the page of project edit not work (#23655) (#23813)
      * Don't apply the group filter when listing LDAP group membership if it is empty (#23745) (#23788)
      * Fix profile page email display, respect settings (#23747) (#23756)
      * Fix project card preview select and template select (#23684) (#23731)
      * Check LFS/Packages settings in dump and doctor command (#23631) (#23730)
      * Add git dashes separator to some "log" and "diff" commands (#23606) (#23720)
      * Create commit status when event is `pull_request_sync` (#23683) (#23691)
      * Fix incorrect `HookEventType` of pull request review comments (#23650) (#23678)
      * Fix incorrect `show-modal` and `show-panel` class (#23660) (#23663)
      * Improve workflow event triggers (#23613) (#23648)
      * Introduce path Clean/Join helper functions, partially backport&refactor (#23495) (#23607)
      * Fix pagination on `/notifications/watching` (#23564) (#23603)
      * Fix submodule is nil panic (#23588) (#23601)
      * Polyfill the window.customElements (#23592) (#23595)
      * Avoid too long names for actions (#23162) (#23190)
    * TRANSLATION
      * Backport locales (with manual fixes) (#23808, #23634, #24083)
    * BUILD
      * Hardcode the path to docker images (#23955) (#23968)
    * DOCS
      * Update documentation to explain which projects allow Gitea to host static pages (#23993) (#24058)
      * Merge `push to create`, `open PR from push`, and `push options` docs articles into one (#23744) (#23959)
      * Fix code blocks in the cheat sheet (#23664) (#23669)
    * MISC
      * Do not crash when parsing an invalid workflow file (#23972) (#23976)
      * Remove assertion debug code for show/hide refactoring (#23576) (#23868)
      * Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) (#23791)
      * Make minio package support legacy MD5 checksum (#23768) (#23770)
      * Improve template error reporting (#23396) (#23600)
    
  • v1.19.0

    * BREAKING
      * Add loading yaml label template files (#22976) (#23232)
      * Make issue and code search support camel case for Bleve (#22829)
      * Repositories: by default disable all units except code and pulls on forks (#22541)
      * Support template for merge message description (#22248)
      * Remove ONLY_SHOW_RELEVANT_REPOS setting (#21962)
      * Implement actions (#21937)
      * Remove deprecated DSA host key from Docker Container (#21522)
      * Improve valid user name check (#20136)
    * SECURITY
      * Return 404 instead of 403 if user can not access the repo (#23155) (#23158)
      * Support scoped access tokens (#20908)
    * FEATURES
      * Add support for commit cross references (#22645)
      * Scoped labels (#22585)
      * Add Chef package registry (#22554)
      * Support asciicast files as new markup (#22448)
      * cgo cross-compile for freebsd (#22397)
      * Add cron method to gc LFS MetaObjects (#22385)
      * Add new captcha: cloudflare turnstile (#22369)
      * Enable `@<user>`- completion popup on the release description textarea (#22359)
      * make /{username}.png redirect to user/org avatar (#22356)
      * Add Conda package registry (#22262)
      * Support org/user level projects (#22235)
      * Add Mermaid copy button (#22225)
      * Add user secrets (#22191)
      * Secrets storage with SecretKey encrypted (#22142)
      * Preview images for Issue cards in Project Board view (#22112)
      * Add support for incoming emails (#22056)
      * Add Cargo package registry (#21888)
      * Add option to prohibit fork if user reached maximum limit of repositories (#21848)
      * Add attention blocks within quote blocks for `Note` and `Warning` (#21711)
      * Add Feed for Releases and Tags (#21696)
      * Add package registry cleanup rules (#21658)
      * Add "Copy" button to file view of raw text (#21629)
      * Allow disable sitemap (#21617)
      * Add package registry quota limits (#21584)
      * Map OIDC groups to Orgs/Teams (#21441)
      * Keep languages defined in .gitattributes (#21403)
      * Add Webhook authorization header (#20926)
      * Supports wildcard protected branch (#20825)
      * Copy citation file content, in APA and BibTex format, on repo home page (#19999)
    * API
      * Match api migration behavior to web behavior (#23552) (#23573)
      * Purge API comment (#23451) (#23452)
      * User creation API: allow custom "created" timestamps (#22549)
      * Add `updated_at` field to PullReview API object (#21812)
      * Add API management for issue/pull and comment attachments (#21783)
      * Add API endpoint to get latest release (#21267)
      * Support system hook API (#14537)
    * ENHANCEMENTS
      * Add `.patch` to `attachment.ALLOWED_TYPES` (#23580) (#23582)
      * Fix sticky header in diff view (#23554) (#23568)
      * Refactor merge/update git command calls (#23366) (#23544)
      * Fix review comment context menu clipped bug (#23523) (#23543)
      * Imrove scroll behavior to hash issuecomment(scroll position, auto expand if file is folded, and on refreshing) (#23513) (#23540)
      * Increase horizontal page padding (#23507) (#23537)
      * Use octicon-verified for gpg signatures (#23529) (#23536)
      * Make time tooltips interactive (#23526) (#23527)
      * Replace Less with CSS (#23508)
      * Fix 'View File' button in code search (#23478) (#23483)
      * Convert GitHub event on actions and fix some pull_request events. (#23037) (#23471)
      * Support reflogs (#22451) (#23438)
      * Fix actions frontend bugs (pagination, long name alignment) and small simplify (#23370) (#23436)
      * Scoped label display and documentation tweaks (#23430) (#23433)
      * Add missing tabs to org projects page (#22705) (#23412)
      * Fix and move "Use this template" button (#23398) (#23408)
      * Handle OpenID discovery URL errors a little nicer when creating/editing sources (#23397) (#23403)
      * Rename `canWriteUnit` to `canWriteProjects` (#23386) (#23399)
      * Refactor and tidy-up the merge/update branch code (#22568) (#23365)
      * Refactor `setting.Database.UseXXX` to methods (#23354) (#23356)
      * Fix incorrect project links and use symlink icon for org-wide projects (#23325) (#23336)
      * Fix PR view misalignment caused by long name file (#23321) (#23335)
      * Scoped labels: don't require holding alt key to remove (#23303) (#23331)
      * Add context when rendering labels or emojis (#23281) (#23319)
      * Change interactiveBorder to fix popup preview  (#23169) (#23314)
      * Scoped labels: set aria-disabled on muted Exclusive option for a11y (#23306) (#23311)
      * update to mermaid v10 (#23178) (#23299)
      * Fix code wrap for unbroken lines (#23268) (#23293)
      * Use async await to fix empty quote reply at first time (#23168) (#23256)
      * Fix switched citation format (#23250) (#23253)
      * Allow `<video>` in MarkDown (#22892) (#23236)
      * Order pull request conflict checking by recently updated, for each push (#23220) (#23225)
      * Fix Fomantic UI's `touchstart` fastclick, always use `click` for click events (#23065) (#23195)
      * Add word-break to sidebar-item-link (#23146) (#23180)
      * Add InsecureSkipVerify to Minio Client for Storage (#23166) (#23177)
      * Fix height for sticky head on large screen on PR page (#23111) (#23123)
      * Change style to improve whitespaces trimming inside inline markdown code (#23093) (#23120)
      * Avoid warning for system setting when start up (#23054) (#23116)
      * Add accessibility to the menu on the navbar (#23059) (#23095)
      * Improve accessibility for issue comments (#22612) (#23083)
      * Remove delete button for review comment (#23036)
      * Remove dashes between organization member avatars on hover (#23034)
      * Use `gt-relative` class instead of the ambiguous `gt-pr` class  (#23008)
      * handle deprecated settings (#22992)
      * Add scopes to API to create token and display them (#22989)
      * Improve PR Review Box UI (#22986)
      * Improve issues.LoadProject (#22982)
      * Add all units to the units permission list in org team members sidebar (#22971)
      * Rename `GetUnits` to `LoadUnits` (#22970)
      * Rename `repo.GetOwner` to `repo.LoadOwner` (#22967)
      * Rename "People" to "Members" in organization page and use a better icon (#22960)
      * Fix avatar misalignment (#22955)
      * Sort issues and pulls by recently updated in user and organization home (#22925)
      * Add `title` to PR file tree items (#22918)
      * First step to refactor the `.hide` to `.gt-hidden` (#22916)
      * Add tooltip to issue reference (#22913)
      * Always show the `command line instructions` button even if there are conflicts (#22909)
      * Fix dark-colored description text in arc-green theme (#22908)
      * Remove Fomantic-UI's `.hidden` CSS class for menu elements (#22895)
      * Move helpers to be prefixed with `gt-` (#22879)
      * Move `IsReadmeFile*` from `modules/markup/` to `modules/util` (#22877)
      * Highlight focused diff file (#22870)
      * Add some headings to repo views (#22869)
      * Fix milestone title font problem (#22863)
      * Pull Requests: setting to allow edits by maintainers by default, tweak UI (#22862)
      * Introduce customized HTML elements, fix incorrect AppUrl usages in templates (#22861)
      * Add `/$count` endpoints for NuGet v2 (#22855)
      * Remove Fomantic-UI's `.hidden` CSS class for checkbox elements (#22851)
      * Fix notification and stopwatch empty states (#22845)
      * Always go full width in PR view (#22844)
      * Improve AppUrl/ROOT_URL checking (#22836)
      * Fix style of actions rerun button (#22835)
      * Fix more HTMLURL in templates (#22831)
      * Fix inconsistent Filter Project name in issue list (#22827)
      * include build info in Prometheus metrics (#22819)
      * Make clone URL use current page's host (#22808)
      * Refactor legacy strange git operations (#22756)
      * Improve error report when user passes a private key (#22726)
      * set user dashboard org visibility to basic (#22706)
      * Fix diff UI for unexpandable items (#22700)
      * Remove 'primary' class from tab counter labels (#22687)
      * Add more events details supports for actions (#22680)
      * Refactor git command package to improve security and maintainability (#22678)
      * Use relative url in actions view (#22675)
      * set user visibility class to basic (#22674)
      * Add repository setting to enable/disable releases unit (#22671)
      * Remove label color from global issue filters (#22660)
      * Fix poor alignment of organization description on organization home page (#22656)
      * Small refactor for loading PRs (#22652)
      * Allow setting access token scope by CLI (#22648)
      * Improve accessibility of navigation bar and footer (#22635)
      * Fixes accessibility behavior of Watching, Staring and Fork buttons (#22634)
      * Fixes accessibility of empty repository commit status (#22632)
      * Pull request yaml template support for including commit body in a field (#22629)
      * Show migration validation error (#22619)
      * set org visibility class to basic in header (#22605)
      * Fix cache-control header clearing comment text when editing issue (#22604)
      * Add ARIA support for Fomantic UI checkboxes (#22599)
      * Add templates to customize text when creating and migrating repositories (#22597)
      * Allow setting `redirect_to` cookie on OAuth login (#22594)
      * Improve checkbox accessibility a bit by adding the title attribute (#22593)
      * Allow issue templates to not render title (#22589)
      * Webhooks: for issue close/reopen action, add commit ID that caused it (#22583)
      * Fix missing title and filter in issue sidebar project menu (#22557)
      * Issues: support setting issue template field values with query (#22545)
      * Issues: add Project filter to issues list and search (#22544)
      * Pull Requests: add color to approved/reject icon in pull requests list (#22543)
      * Mute all links in issue timeline (#22533)
      * Dropzone: Add "Copy link" button for new uploads (#22517)
      * Support importing comment types (#22510)
      * Load asciicast css async (#22502)
      * Move delete user to service (#22478)
      * Change use of Walk to WalkDir to improve disk performance (#22462)
      * Add reply hint to mail text (#22459)
      * fix wrong theme class when logged out if default theme is changed (#22408)
      * Refactor the setting to make unit test easier (#22405)
      * Improve utils of slices (#22379)
      * Use context parameter in models/git (#22367)
      * Always reuse transaction (#22362)
      * Fix unstable emoji sort (#22346)
      * Add context cache as a request level cache (#22294)
      * Reminder for no more logs to console (#22282)
      * Support estimated count with multiple schemas (#22276)
      * Move `convert` package to services (#22264)
      * Use dynamic package type list (#22263)
      * Hide file borders on sticky diff box (#22217)
      * Improve notification and stopwatch styles (#22169)
      * Fixed Project view .board-column height for tall screens. (#22108)
      * Use multi reader instead to concat strings (#22099)
      * Use git command instead of exec.Cmd in blame (#22098)
      * Fix autofilled text visibility in dark mode (#22088)
      * Rename almost all Ctx functions (#22071)
      * Rename actions to operations on UI (#22067)
      * refactor bind functions based on generics (#22055)
      * Support disabling database auto migration (#22053)
      * remove duplicated read file code (#22042)
      * Use link in UI which returned a relative url but not html_url which contains an absolute url (#21986)
      * Skip initing disabled storages (#21985)
      * Add doctor command for full GC of LFS (#21978)
      * Util type to parse ref name (#21969)
      * Replace fmt.Sprintf with hex.EncodeToString (#21960)
      * Use random bytes to generate access token (#21959)
      * Add index for access_token (#21908)
      * Move all remaining colors into CSS variables (#21903)
      * Webhook list enhancements (#21893)
      * Embed Matrix icon as SVG (#21890)
      * Remove useless "Cancel" buttons (#21872)
      * fix(web): keep the pages of the navigation in the center (#21867)
      * fix(web): reduce page jitter on browsers that support overlay scrollbar (#21850)
      * Improvements for Content Copy (#21842)
      * Tweak katex options (#21828)
      * Show syntax lexer name in file view/blame (#21814)
      * Remove `href="javascript:;"` in "save topics (Done)" button (#21813)
      * Render number of commits in repo page in a user friendly way (#21786)
      * Adjust clone timeout error to suggest increasing timeout (#21769)
      * Update message of reach_limit_of_creation (#21757)
      * Allow detect whether it's in a database transaction for a context.Context (#21756)
      * Add configuration for CORS allowed headers (#21747)
      * Move svg html render to modules/svg (#21716)
      * Release and Tag List tweaks (#21712)
      * Remove template previewer (#21701)
      * Clean up formatting on install page (#21668)
      * Configure update checker on installation page (#21655)
      * Merge db.Iterate and IterateObjects (#21641)
      * Add option to enable CAPTCHA validation for login (#21638)
      * Allow disable RSS/Atom feed (#21622)
      * Use CSS color-scheme instead of invert (#21616)
      * Localize time units on activity heatmap (#21570)
      * Fix UI column width, button overflow Fomantic's grid (#21559)
      * feat: notify doers of a merge when automerging (#21553)
      * Split migrations folder (#21549)
      * feat: add button to quickly clear merge message (#21548)
      * Add `context.Context` to more methods (#21546)
      * Add index for hook_task table (#21545)
      * Allow disable code tab (#20805)
    * BUGFIXES
      * Fix template error when reference Project (#23584)
      * Fix dropdown icon misalignment when using fomantic icon (#23558) (#23577)
      * Fix diff detail buttons wrapping, use tippy for review box (#23271) (#23546)
      * Handle missing `README` in create repos API (#23387) (#23510)
      * Disable sending email after push a commit to a closed PR (#23462) (#23492)
      * Fix aria.js bugs: incorrect role element problem, mobile focus problem, tippy problem (#23450) (#23486)
      * Fix due date being wrong on issue list (#23475) (#23477)
      * Remove wrongly added column on migration test fixtures (#23456) (#23470)
      * Make branches list page operations remember current page (#23420) (#23460)
      * Fix missing commit status in PR which from forked repo (#23351) (#23453)
      * Show edit/close/delete button on organization wide repositories (#23388) (#23429)
      * Preserve file size when creating attachments (#23406) (#23426)
      * Fix broken Chroma CSS styles (#23174) (#23402)
      * Fix incorrect NotFound conditions in org/projects.go (#23384) (#23395)
      * Set `X-Gitea-Debug` header once (#23361) (#23381)
      * Pass context to avatar for projects view (#23359) (#23378)
      * Fix panic when getting notes by ref (#23372) (#23377)
      * Do not recognize text files as audio (#23355) (#23368)
      * Fix adding of empty class name (#23352) (#23360)
      * Fix various ImageDiff/SVG bugs (#23312) (#23358)
      * Fix incorrect display for comment context menu (#23343) (#23344)
      * Remove unnecessary space on link (#23334) (#23340)
      * Fix incorrect redirect link of delete org project (#23327) (#23339)
      * Fix cannot reopen after pushing commits to a closed PR (#23189) (#23324)
      * Fix broken code editor diff preview (#23307) (#23320)
      * Support sanitising the URL by removing extra slashes in the URL (#21333) (#23300)
      * Avoid panic caused by broken payload when creating commit status (#23216) (#23294)
      * Fill head commit to in payload when notifying push commits for mirroring (#23215) (#23292)
      * Fix various bugs for "install" page (#23194) (#23286)
      * Fix GetFilesChangedBetween if the file name may be escaped (#23272) (#23279)
      * Revert relative links to absolute links in mail templates (#23267) (#23269)
      * Fix commit retrieval by tag (#21804) (#23266)
      * Use correct README link to render the README (#23152) (#23264)
      * Close the temp file when dumping database to make the temp file can be deleted on Windows (#23249) (#23251)
      * Use the correct selector to hide the checkmark of selected labels on clear (#23224) (#23228)
      * Fix incorrect checkbox behaviors in the dashboard repolist's filter (#23147) (#23205)
      * Properly flush unique queues on startup (#23154) (#23201)
      * Pass `--global` when calling `git config --get`, for consistency with `git config --set` (#23157) (#23199)
      * Make `gitea serv` respect git binary home (#23138) (#23197)
      * Change button text for commenting and closing an issue at the same time (#23135) (#23182)
      * Fix DBConsistency checks on MSSQL (#23132) (#23134)
      * Show empty repos in Admin Repository Management page (#23114) (#23130)
      * Redirect to the commit page after applying patch (#23056) (#23127)
      * Fix nil context in RenderMarkdownToHtml (#23092) (#23108)
      * Make issue meta dropdown support Enter, confirm before reloading (#23014) (#23102)
      * Fix SyncOnCommit always return false in API of push_mirrors (#23088) (#23100)
      * Fix commit name in Apply Patch page (#23086) (#23099)
      * Fix some more hidden problems (#23074) (#23075)
      * Bump golang.org/x/net from 0.4.0 to 0.7.0 (#22980)
      * Get rules by id when editing branch protection rule (#22932)
      * Fix panic when call api (/repos/{owner}/{repo}/pulls/{index}/files) (#22921)
      * Increase Content field size of gpg_import_key to MEDIUMTEXT (#22897)
      * Fix hidden commit status on multiple checks (#22889)
      * Fix update by rebase being wrongly disabled by protected base branch (#22825)
      * Make issue title edit buttons focusable and fix incorrect ajax requests (#22807)
      * Fix rerun button of Actions (#22798)
      * remove update language in ProfilePost (#22748)
      * Do not overwrite empty DefaultBranch (#22708)
      * Fix ref to trigger Actions (#22679)
      * Fix time to NotifyPullRequestSynchronized (#22650)
      * Show all projects, not just repo projects and open/closed projects  (#22640)
      * Project links should use parent link methods (#22587)
      * Fix group filter for ldap source sync (#22506)
      * Check quota limits for container uploads (#22450)
      * Fix halfCommitter and WithTx (#22366)
      * Attempt to fix TestExportUserGPGKeys (#22159)
      * Fix heatmap first color being unused (#22157)
      * Fix scroll over mermaid frame (#21925)
      * Move migration test fixtures to the correct directories (#21901)
      * fix(web): add `alt` for logo in home page (#21887)
      * Fix webhook attachment text is not set in review comment (#21763)
      * Alter package_version.metadata_json to LONGTEXT (#21667)
      * Ensure that Webhook tasks are not double delivered (#21558)
    * TESTING
      * Make CI use a dummy password hasher for all tests (#22983)
      * Disable test for incoming email (#22686)
      * Move fuzz tests into tests/fuzz (#22376)
      * Test views of LFS files (#22196)
      * Specify ID in `TestAPITeam` (#22192)
      * verify nodeinfo response by schema  (#22137)
      * Skip GitHub migration tests if the API token is undefined (#21824)
      * Add a simple test for external renderer (#20033)
    * TRANSLATION
      * Use "Title Case" for text "Reference in new issue" (#22936)
    * BUILD
      * Wrap unless-check in docker manifests (#23079) (#23081)
      * Adjust manifest to prevent tagging latest on rcs (#22811)
      * update to build with go1.20 (#22732)
      * Add Bash and Zsh completion scripts (#22646)
      * Add Contributed backport command (#22643)
      * Remove deprecated packages & staticcheck fixes (#22012)
      * Update to Alpine 3.17 (#21904)
      * Fix webpack license warning (#21815)
    * DOCS
      * Update documentation for the new YAML label file format  (#23020) (#23341)
      * Update hacking-on-gitea-zh_cn documentation (#23315) (#23323)
      * Add basic documentation for labels, including scoped labels (#23304) (#23309)
      * Re-add accidentally removed `hacking-on-gitea.zh-cn.md` (#23297) (#23305)
      * Fix secrets overview page missing from docs sidebar (#23143) (#23145)
      * Add some guidelines for refactoring (#22880)
      * Explain that the no-access team unit does not affect public repositories (#22661)
      * Fix incorrect Redis URL snippets in the example app.ini (#22573)
      * docs: add swagger.json file location to FAQ (#22489)
      * Update index.de-de.md (#22363)
      * Update Gmail mailer configuration (#22291)
      * Add missed reverse proxy authentication documentation (#22250)
      * Add plural definitions for German translations (#21802)
      * Attempt clarify AppWorkPath etc. (#21656)
      * Add some documentation to packages (#21648)
    * MISC
      * Use `<nav>` instead of `<div>` in the global navbar (#23125) (#23533)
      * Do not create commit graph for temporary repos (#23219) (#23229)
      * Update button is shown when a Pull Request is marked WIP - Issue #21740 (#22683)
      * Add main landmark to templates and adjust titles (#22670)
      * Fix error on account activation with wrong passwd (#22609)
      * Update JS dependencies (#22538)
      * Display unreferenced packages total size in package admin panel (#22498)
      * Mobile fix for Project view: Add delay to Sortable.js on mobile, to ensure scrolling is possible. (#22152)
      * Update chroma to v2.4.0 (#22000)
      * Hide collapse icon in diff with no lines (#21094)
    
    
  • v1.19.0-rc1

    Second release candidate for 1.19.0
    
  • v1.18.5

    48eb5ac6 · Changelog 1.18.5 (#23045) ·
    * ENHANCEMENTS
      * Hide 2FA status from other members in organization members list (#22999) (#23023)
    * BUGFIXES
      * Add force_merge to merge request and fix checking mergable (#23010) (#23032)
      * Use `--message=%s` for git commit message (#23028) (#23029)
      * Render access log template as text instead of HTML (#23013) (#23025)
      * Fix the Manually Merged form (#23015) (#23017)
      * Use beforeCommit instead of baseCommit (#22949) (#22996)
      * Display attachments of review comment when comment content is blank (#23035) (#23046)
      * Return empty url for submodule tree entries (#23043) (#23048)
    
  • v1.18.4

    * SECURITY
      * Provide the ability to set password hash algorithm parameters (#22942) (#22943)
      * Add command to bulk set must-change-password (#22823) (#22928)
    * ENHANCEMENTS
      * Use import of OCI structs (#22765) (#22805)
      * Fix color of tertiary button on dark theme (#22739) (#22744)
      * Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642)
    * BUGFIXES
      * Notify on container image create (#22806) (#22965)
      * Fix blame view missing lines (#22826) (#22929)
      * Fix incorrect role labels for migrated issues and comments (#22914) (#22923)
      * Fix PR file tree folders no longer collapsing (#22864) (#22872)
      * Escape filename when assemble URL (#22850) (#22871)
      * Fix isAllowed of escapeStreamer (#22814) (#22837)
      * Load issue before accessing index in merge message (#22822) (#22830)
      * Improve trace logging for pulls and processes (#22633) (#22812)
      * Fix restore repo bug, clarify the problem of ForeignIndex (#22776) (#22794)
      * Add default user visibility to cli command "admin user create" (#22750) (#22760)
      * Escape path for the file list (#22741) (#22757)
      * Fix bugs with WebAuthn preventing sign in and registration. (#22651) (#22721)
      * Add missing close bracket in imagediff (#22710) (#22712)
      * Move code comments to a standalone file and fix the bug when adding a reply to an outdated review appears to not post(#20821) (#22707)
      * Fix line spacing for plaintext previews (#22699) (#22701)
      * Fix wrong hint when deleting a branch successfully from pull request UI (#22673) (#22698)
      * Fix README TOC links (#22577) (#22677)
      * Fix missing message in git hook when pull requests disabled on fork (#22625) (#22658)
      * Improve checkIfPRContentChanged (#22611) (#22644)
      * Prevent duplicate labels when importing more than 99 (#22591) (#22598)
      * Don't return duplicated users who can create org repo (#22560) (#22562)
    * BUILD
      * Upgrade golangcilint to v1.51.0 (#22764)
    * MISC
      * Use proxy for pull mirror (#22771) (#22772)
      * Use `--index-url` in PyPi description (#22620) (#22636)
    
  • v1.18.3

    f6cb7860 · Changelog 1.18.3 (#22575) ·
    * SECURITY
      * Prevent multiple `To` recipients (#22566) (#22569)
    * BUGFIXES
      * Truncate commit summary on repo files table. (#22551) (#22552)
      * Mute all links in issue timeline (#22534)
    
  • v1.18.2

    * BUGFIXES
      * When updating by rebase we need to set the environment for head repo (#22535) (#22536)
      * Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521)
      * Fix invalid issue branch reference if not specified in template (#22513) (#22520)
      * Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515)
      * Reliable selection of admin user (#22509) (#22511)
      * Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496)
    * BUILD
      * cgo cross-compile for freebsd (#22397) (#22519)
    
  • v1.18.1

    * API
      * Add `sync_on_commit` option for push mirrors api (#22271) (#22292)
    * BUGFIXES
      * Update `github.com/zeripath/zapx/v15` (#22485)
      * Fix pull request API field `closed_at` always being `null` (#22482) (#22483)
      * Fix container blob mount (#22226) (#22476)
      * Fix error when calculating repository size (#22392) (#22474)
      * Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454) (#22472)
      * Fix environments for KaTeX and error reporting (#22453) (#22473)
      * Remove the netgo tag for Windows build (#22467) (#22468)
      * Fix migration from GitBucket (#22477) (#22465)
      * Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458)
      * Fix PR status layout on mobile (#21547) (#22441)
      * Fix wechatwork webhook sends empty content in PR review (#21762) (#22440)
      * Remove duplicate "Actions" label in mobile view (#21974) (#22439)
      * Fix leaving organization bug on user settings -> orgs (#21983) (#22438)
      * Fixed colour transparency regex matching in project board sorting (#22092) (#22437)
      * Correctly handle select on multiple channels in Queues (#22146) (#22428)
      * Prepend refs/heads/ to issue template refs (#20461) (#22427)
      * Restore function to "Show more" buttons (#22399) (#22426)
      * Continue GCing other repos on error in one repo (#22422) (#22425)
      * Allow HOST has no port (#22280) (#22409)
      * Fix omit avatar_url in discord payload when empty (#22393) (#22394)
      * Don't display stop watch top bar icon when disabled and hidden when click other place (#22374) (#22387)
      * Don't lookup mail server when using sendmail (#22300) (#22383)
      * Fix gravatar disable bug (#22337)
      * Fix update settings table on install (#22326) (#22327)
      * Fix sitemap (#22272) (#22320)
      * Fix code search title translation (#22285) (#22316)
      * Fix due date rendering the wrong date in issue (#22302) (#22306)
      * Fix get system setting bug when enabled redis cache (#22298)
      * Fix bug of DisableGravatar default value (#22297)
      * Fix key signature error page (#22229) (#22230)
    * TESTING
      * Remove test session cache to reduce possible concurrent problem (#22199) (#22429)
    * MISC
      * Restore previous official review when an official review is deleted (#22449) (#22460)
      * Log STDERR of external renderer when it fails (#22442) (#22444)
    
  • v1.18.0

    * SECURITY
      * Remove ReverseProxy authentication from the API (#22219) (#22251)
      * Support Go Vulnerability Management (#21139)
      * Forbid HTML string tooltips (#20935)
    * BREAKING
      * Rework mailer settings (#18982)
      * Remove U2F support (#20141)
      * Refactor `i18n` to `locale` (#20153)
      * Enable contenthash in filename for dynamic assets (#20813)
    * FEATURES
      * Add color previews in markdown (#21474)
      * Allow package version sorting (#21453)
      * Add support for Chocolatey/NuGet v2 API (#21393)
      * Add API endpoint to get changed files of a PR (#21177)
      * Add filetree on left of diff view (#21012)
      * Support Issue forms and PR forms (#20987)
      * Add support for Vagrant packages (#20930)
      * Add support for `npm unpublish` (#20688)
      * Add badge capabilities to users (#20607)
      * Add issue filter for Author (#20578)
      * Add KaTeX rendering to Markdown. (#20571)
      * Add support for Pub packages (#20560)
      * Support localized README (#20508)
      * Add support mCaptcha as captcha provider (#20458)
      * Add team member invite by email (#20307)
      * Added email notification option to receive all own messages (#20179)
      * Switch Unicode Escaping to a VSCode-like system (#19990)
      * Add user/organization code search (#19977)
      * Only show relevant repositories on explore page (#19361)
      * User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
      * Add sitemap support (#18407)
      * Allow creation of OAuth2 applications for orgs (#18084)
      * Add system setting table with cache and also add cache supports for user setting (#18058)
      * Add pages to view watched repos and subscribed issues/PRs (#17156)
      * Support Proxy protocol (#12527)
      * Implement sync push mirror on commit (#19411)
    * API
      * Allow empty assignees on pull request edit (#22150) (#22214)
      * Make external issue tracker regexp configurable via API (#21338)
      * Add name field for org api (#21270)
      * Show teams with no members if user is admin (#21204)
      * Add latest commit's SHA to content response (#20398)
      * Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
      * Add new endpoints for push mirrors management (#19841)
    * ENHANCEMENTS
      * Add setting to disable the git apply step in test patch (#22130) (#22170)
      * Multiple improvements for comment edit diff (#21990) (#22007)
      * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21928)
      * Fix flex layout for repo list icons (#21896) (#21920)
      * Fix vertical align of committer avatar rendered by email address (#21884) (#21918)
      * Fix setting HTTP headers after write (#21833) (#21877)
      * Color and Style enhancements (#21784, #21799) (#21868)
      * Ignore line anchor links with leading zeroes (#21728) (#21776)
      * Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
      * Use CSS color-scheme instead of invert (#21616) (#21623)
      * Respect user's locale when rendering the date range in the repo activity page (#21410)
      * Change `commits-table` column width (#21564)
      * Refactor git command arguments and make all arguments to be safe to be used (#21535)
      * CSS color enhancements (#21534)
      * Add link to user profile in markdown mention only if user exists (#21533, #21554)
      * Add option to skip index dirs (#21501)
      * Diff file tree tweaks (#21446)
      * Localize all timestamps (#21440)
      * Add `code` highlighting in issue titles (#21432)
      * Use Name instead of DisplayName in LFS Lock (#21415)
      * Consolidate more CSS colors into variables (#21402)
      * Redirect to new repository owner (#21398)
      * Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
      * Use weighted algorithm for string matching when finding files in repo (#21370)
      * Show private data in feeds (#21369)
      * Refactor parseTreeEntries, speed up tree list (#21368)
      * Add GET and DELETE endpoints for Docker blob uploads (#21367)
      * Add nicer error handling on template compile errors (#21350)
      * Add `stat` to `ToCommit` function for speed (#21337)
      * Support instance-wide OAuth2 applications (#21335)
      * Record OAuth client type at registration (#21316)
      * Add new CSS variables --color-accent and --color-small-accent (#21305)
      * Improve error descriptions for unauthorized_client (#21292)
      * Case-insensitive "find files in repo" (#21269)
      * Consolidate more CSS rules, fix inline code on arc-green (#21260)
      * Log real ip of requests from ssh (#21216)
      * Save files in local storage as group readable (#21198)
      * Enable fluid page layout on medium size viewports (#21178)
      * File header tweaks (#21175)
      * Added missing headers on user packages page (#21172)
      * Display image digest for container packages (#21170)
      * Skip dirty check for team forms (#21154)
      * Keep path when creating a new branch (#21153)
      * Remove fomantic image module (#21145)
      * Make labels clickable in the comments section. (#21137)
      * Sort branches and tags by date descending (#21136)
      * Better repo API unit checks (#21130)
      * Improve commit status icons (#21124)
      * Limit length of repo description and repo url input fields (#21119)
      * Show .editorconfig errors in frontend (#21088)
      * Allow poster to choose reviewers (#21084)
      * Remove black labels and CSS cleanup (#21003)
      * Make e-mail sanity check more precise (#20991)
      * Use native inputs in whitespace dropdown (#20980)
      * Enhance package date display (#20928)
      * Display total blob size of a package version (#20927)
      * Show language name on hover (#20923)
      * Show instructions for all generic package files (#20917)
      * Refactor AssertExistsAndLoadBean to use generics (#20797)
      * Move the official website link at the footer of gitea (#20777)
      * Add support for full name in reverse proxy auth (#20776)
      * Remove useless JS operation for relative time tooltips (#20756)
      * Replace some icons with SVG (#20741)
      * Change commit status icons to SVG (#20736)
      * Improve single repo action for issue and pull requests (#20730)
      * Allow multiple files in generic packages (#20661)
      * Add option to create new issue from /issues page (#20650)
      * Background color of private list-items updated (#20630)
      * Added search input field to issue filter (#20623)
      * Increase default item listing size `ISSUE_PAGING_NUM` to 20 (#20547)
      * Modify milestone search keywords to be case insensitive again (#20513)
      * Show hint to link package to repo when viewing empty repo package list (#20504)
      * Add Tar ZSTD support (#20493)
      * Make code review checkboxes clickable (#20481)
      * Add "X-Gitea-Object-Type" header for GET `/raw/` & `/media/` API (#20438)
      * Display project in issue list (#20434)
      * Prepend commit message to template content when opening a new PR (#20429)
      * Replace fomantic popup module with tippy.js (#20428)
      * Allow to specify colors for text in markup (#20363)
      * Allow access to the Public Organization Member lists with minimal permissions (#20330)
      * Use default values when provided values are empty (#20318)
      * Vertical align navbar avatar at middle (#20302)
      * Delete cancel button in repo creation page (#21381)
      * Include login_name in adminCreateUser response (#20283)
      * fix: icon margin in user/settings/repos (#20281)
      * Remove blue text on migrate page (#20273)
      * Modify milestone search keywords to be case insensitive (#20266)
      * Move some files into models' sub packages (#20262)
      * Add tooltip to repo icons in explore page (#20241)
      * Remove deprecated licenses (#20222)
      * Webhook for Wiki changes (#20219)
      * Share HTML template renderers and create a watcher framework (#20218)
      * Allow enable LDAP source and disable user sync via CLI (#20206)
      * Adds a checkbox to select all issues/PRs (#20177)
      * Refactor `i18n` to `locale` (#20153)
      * Disable status checks in template if none found (#20088)
      * Allow manager logging to set SQL (#20064)
      * Add order by for assignee no sort issue (#20053)
      * Take a stab at porting existing components to Vue3 (#20044)
      * Add doctor command to write commit-graphs (#20007)
      * Add support for authentication based on reverse proxy email (#19949)
      * Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
      * Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
      * Rework mailer settings (#18982)
      * Add option to purge users (#18064)
      * Add author search input (#21246)
      * Make rss/atom identifier globally unique (#21550)
    * BUGFIXES
      * Auth interface return error when verify failure (#22119) (#22259)
      * Use complete SHA to create and query commit status (#22244) (#22257)
      * Update bleve and zapx to fix unaligned atomic (#22031) (#22218)
      * Prevent panic in doctor command when running default checks (#21791) (#21807)
      * Load GitRepo in API before deleting issue (#21720) (#21796)
      * Ignore line anchor links with leading zeroes (#21728) (#21776)
      * Set last login when activating account (#21731) (#21755)
      * Fix UI language switching bug (#21597) (#21749)
      * Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
      * Allow local package identifiers for PyPI packages (#21690) (#21727)
      * Deal with markdown template without metadata (#21639) (#21654)
      * Fix opaque background on mermaid diagrams (#21642) (#21652)
      * Fix repository adoption on Windows (#21646) (#21650)
      * Sync git hooks when config file path changed (#21619) (#21626)
      * Fix 500 on PR files API (#21602) (#21607)
      * Fix `Timestamp.IsZero` (#21593) (#21603)
      * Fix viewing user subscriptions (#21482)
      * Fix mermaid-related bugs (#21431)
      * Fix branch dropdown shifting on page load (#21428)
      * Fix default theme-auto selector when nologin (#21346)
      * Fix and improve incorrect error messages (#21342)
      * Fix formatted link for PR review notifications to matrix (#21319)
      * Center-aligning content of WebAuthN page (#21127)
      * Remove follow from commits by file (#20765)
      * Fix commit status popup (#20737)
      * Fix init mail render logic (#20704)
      * Use correct page size for link header pagination (#20546)
      * Preserve unix socket file (#20499)
      * Use tippy.js for context popup (#20393)
      * Add missing parameter for error in log message (#20144)
      * Do not allow organisation owners add themselves as collaborator (#20043)
      * Rework file highlight rendering and fix yaml copy-paste (#19967)
      * Improve code diff highlight, fix incorrect rendered diff result (#19958)
    * TESTING
      * Improve OAuth integration tests (#21390)
      * Add playwright tests (#20123)
    * BUILD
      * Switch to building with go1.19 (#20695)
      * Update JS dependencies, adjust eslint (#20659)
      * Add more linters to improve code readability (#19989)
    
    
  • v1.17.4

    * SECURITY
      * Do not allow Ghost access to limited visible user/org (#21849) (#21875)
      * Fix package access for admins and inactive users (#21580) (#21592)
    * ENHANCEMENTS
      * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21927)
      * Fix vertical align of committer avatar rendered by email address (#21884) (#21919)
      * Fix setting HTTP headers after write (#21833) (#21874)
      * Ignore line anchor links with leading zeroes (#21728) (#21777)
      * Enable Monaco automaticLayout (#21516)
    * BUGFIXES
      * Do not list active repositories as unadopted (#22034) (#22167)
      * Correctly handle moved files in apply patch (#22118) (#22136)
      * Fix condition for is_internal (#22095) (#22131)
      * Fix permission check on issue/pull lock (#22114)
      * Fix sorting admin user list by last login (#22081) (#22106)
      * Workaround for container registry push/pull errors (#21862) (#22069)
      * Fix issue/PR numbers (#22037) (#22045)
      * Handle empty author names (#21902) (#22028)
      * Fix ListBranches to handle empty case (#21921) (#22025)
      * Fix enabling partial clones on 1.17 (#21809)
      * Prevent panic in doctor command when running default checks (#21791) (#21808)
      * Upgrade golang.org/x/crypto (#21792) (#21794)
      * Init git module before database migration (#21764) (#21766)
      * Set last login when activating account (#21731) (#21754)
      * Add HEAD fix to gitea doctor (#21352) (#21751)
      * Fix UI language switching bug (#21597) (#21748)
      * Remove semver compatible flag and change pypi to an array of test cases (#21708) (#21729)
      * Allow local package identifiers for PyPI packages (#21690) (#21726)
      * Fix repository adoption on Windows (#21646) (#21651)
      * Sync git hooks when config file path changed (#21619) (#21625)
      * Added check for disabled Packages (#21540) (#21614)
      * Fix `Timestamp.IsZero` (#21593) (#21604)
      * Fix issues count bug (#21600)
      * Support binary deploy in npm packages (#21589)
      * Update milestone counters when issue is deleted (#21459) (#21586)
      * SessionUser protection against nil pointer dereference (#21581)
      * Case-insensitive NuGet symbol file GUID (#21409) (#21575)
      * Suppress `ExternalLoginUserNotExist` error (#21504) (#21572)
      * Prevent Authorization header for presigned LFS urls (#21531) (#21569)
      * Update binding to fix bugs (#21560)
      * Fix generating compare link (#21519) (#21530)
      * Ignore error when retrieving changed PR review files (#21487) (#21524)
      * Fix incorrect notification commit url (#21479) (#21483)
      * Display total commit count in hook message (#21400) (#21481)
      * Enforce grouped NuGet search results (#21442) (#21480)
      * Return 404 when user is not found on avatar (#21476) (#21477)
      * Normalize NuGet package version on upload (#22186) (#22201)
    * MISC
      * Check for zero time instant in TimeStamp.IsZero() (#22171) (#22173)
      * Fix warn in database structs sync (#22111)
      * Allow for resolution of NPM registry paths that match upstream (#21568) (#21723)
    
  • v1.18.0-rc1

    * BREAKING
      * Remove U2F support (#20141)
    * FEATURES
      * Add color previews in markdown (#21474)
      * Allow package version sorting (#21453)
      * Add support for Chocolatey/NuGet v2 API (#21393)
      * Add API endpoint to get changed files of a PR (#21177)
      * Add filetree on left of diff view (#21012)
      * Support Issue forms and PR forms (#20987)
      * Add support for Vagrant packages (#20930)
      * Add support for `npm unpublish` (#20688)
      * Add badge capabilities to users (#20607)
      * Add issue filter for Author (#20578)
      * Add KaTeX rendering to Markdown. (#20571)
      * Add support for Pub packages (#20560)
      * Support localized README (#20508)
      * Add support mCaptcha as captcha provider (#20458)
      * Add team member invite by email (#20307)
      * Added email notification option to receive all own messages (#20179)
      * Switch Unicode Escaping to a VSCode-like system (#19990)
      * Add user/organization code search (#19977)
      * Only show relevant repositories on explore page (#19361)
      * User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
      * Add sitemap support (#18407)
      * Allow creation of OAuth2 applications for orgs (#18084)
      * Add system setting table with cache and also add cache supports for user setting (#18058)
      * Add pages to view watched repos and subscribed issues/PRs (#17156)
      * Support Proxy protocol (#12527)
      * Implement sync push mirror on commit (#19411)
    * API
      * Make external issue tracker regexp configurable via API (#21338)
      * Add name field for org api (#21270)
      * Show teams with no members if user is admin (#21204)
      * Add latest commit's SHA to content response (#20398)
      * Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
      * Add new endpoints for push mirrors management (#19841)
    * ENHANCEMENTS
      * Use CSS color-scheme instead of invert (#21616) (#21623)
      * Respect user's locale when rendering the date range in the repo activity page (#21410)
      * Change `commits-table` column width (#21564)
      * Refactor git command arguments and make all arguments to be safe to be used (#21535)
      * CSS color enhancements (#21534)
      * Add link to user profile in markdown mention only if user exists (#21533, #21554)
      * Add option to skip index dirs (#21501)
      * Diff file tree tweaks (#21446)
      * Localize all timestamps (#21440)
      * Add `code` highlighting in issue titles (#21432)
      * Use Name instead of DisplayName in LFS Lock (#21415)
      * Consolidate more CSS colors into variables (#21402)
      * Redirect to new repository owner (#21398)
      * Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
      * Use weighted algorithm for string matching when finding files in repo (#21370)
      * Show private data in feeds (#21369)
      * Refactor parseTreeEntries, speed up tree list (#21368)
      * Add GET and DELETE endpoints for Docker blob uploads (#21367)
      * Add nicer error handling on template compile errors (#21350)
      * Add `stat` to `ToCommit` function for speed (#21337)
      * Support instance-wide OAuth2 applications (#21335)
      * Record OAuth client type at registration (#21316)
      * Add new CSS variables --color-accent and --color-small-accent (#21305)
      * Improve error descriptions for unauthorized_client (#21292)
      * Case-insensitive "find files in repo" (#21269)
      * Consolidate more CSS rules, fix inline code on arc-green (#21260)
      * Log real ip of requests from ssh (#21216)
      * Save files in local storage as group readable (#21198)
      * Enable fluid page layout on medium size viewports (#21178)
      * File header tweaks (#21175)
      * Added missing headers on user packages page (#21172)
      * Display image digest for container packages (#21170)
      * Skip dirty check for team forms (#21154)
      * Keep path when creating a new branch (#21153)
      * Remove fomantic image module (#21145)
      * Make labels clickable in the comments section. (#21137)
      * Sort branches and tags by date descending (#21136)
      * Better repo API unit checks (#21130)
      * Improve commit status icons (#21124)
      * Limit length of repo description and repo url input fields (#21119)
      * Show .editorconfig errors in frontend (#21088)
      * Allow poster to choose reviewers (#21084)
      * Remove black labels and CSS cleanup (#21003)
      * Make e-mail sanity check more precise (#20991)
      * Use native inputs in whitespace dropdown (#20980)
      * Enhance package date display (#20928)
      * Display total blob size of a package version (#20927)
      * Show language name on hover (#20923)
      * Show instructions for all generic package files (#20917)
      * Refactor AssertExistsAndLoadBean to use generics (#20797)
      * Move the official website link at the footer of gitea (#20777)
      * Add support for full name in reverse proxy auth (#20776)
      * Remove useless JS operation for relative time tooltips (#20756)
      * Replace some icons with SVG (#20741)
      * Change commit status icons to SVG (#20736)
      * Improve single repo action for issue and pull requests (#20730)
      * Allow multiple files in generic packages (#20661)
      * Add option to create new issue from /issues page (#20650)
      * Background color of private list-items updated (#20630)
      * Added search input field to issue filter (#20623)
      * Increase default item listing size `ISSUE_PAGING_NUM` to 20 (#20547)
      * Modify milestone search keywords to be case insensitive again (#20513)
      * Show hint to link package to repo when viewing empty repo package list (#20504)
      * Add Tar ZSTD support (#20493)
      * Make code review checkboxes clickable (#20481)
      * Add "X-Gitea-Object-Type" header for GET `/raw/` & `/media/` API (#20438)
      * Display project in issue list (#20434)
      * Prepend commit message to template content when opening a new PR (#20429)
      * Replace fomantic popup module with tippy.js (#20428)
      * Allow to specify colors for text in markup (#20363)
      * Allow access to the Public Organization Member lists with minimal permissions (#20330)
      * Use default values when provided values are empty (#20318)
      * Vertical align navbar avatar at middle (#20302)
      * Delete cancel button in repo creation page (#21381)
      * Include login_name in adminCreateUser response (#20283)
      * fix: icon margin in user/settings/repos (#20281)
      * Remove blue text on migrate page (#20273)
      * Modify milestone search keywords to be case insensitive (#20266)
      * Move some files into models' sub packages (#20262)
      * Add tooltip to repo icons in explore page (#20241)
      * Remove deprecated licenses (#20222)
      * Webhook for Wiki changes (#20219)
      * Share HTML template renderers and create a watcher framework (#20218)
      * Allow enable LDAP source and disable user sync via CLI (#20206)
      * Adds a checkbox to select all issues/PRs (#20177)
      * Refactor `i18n` to `locale` (#20153)
      * Disable status checks in template if none found (#20088)
      * Allow manager logging to set SQL (#20064)
      * Add order by for assignee no sort issue (#20053)
      * Take a stab at porting existing components to Vue3 (#20044)
      * Add doctor command to write commit-graphs (#20007)
      * Add support for authentication based on reverse proxy email (#19949)
      * Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
      * Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
      * Rework mailer settings (#18982)
      * Add option to purge users (#18064)
      * Add author search input (#21246)
      * Make rss/atom identifier globally unique (#21550)
    * BUGFIXES
      * Prevent panic in doctor command when running default checks (#21791) (#21807)
      * Load GitRepo in API before deleting issue (#21720) (#21796)
      * Ignore line anchor links with leading zeroes (#21728) (#21776)
      * Set last login when activating account (#21731) (#21755)
      * Fix UI language switching bug (#21597) (#21749)
      * Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
      * Allow local package identifiers for PyPI packages (#21690) (#21727)
      * Deal with markdown template without metadata (#21639) (#21654)
      * Fix opaque background on mermaid diagrams (#21642) (#21652)
      * Fix repository adoption on Windows (#21646) (#21650)
      * Sync git hooks when config file path changed (#21619) (#21626)
      * Fix 500 on PR files API (#21602) (#21607)
      * Fix `Timestamp.IsZero` (#21593) (#21603)
      * Fix viewing user subscriptions (#21482)
      * Fix mermaid-related bugs (#21431)
      * Fix branch dropdown shifting on page load (#21428)
      * Fix default theme-auto selector when nologin (#21346)
      * Fix and improve incorrect error messages (#21342)
      * Fix formatted link for PR review notifications to matrix (#21319)
      * Center-aligning content of WebAuthN page (#21127)
      * Remove follow from commits by file (#20765)
      * Fix commit status popup (#20737)
      * Fix init mail render logic (#20704)
      * Use correct page size for link header pagination (#20546)
      * Preserve unix socket file (#20499)
      * Use tippy.js for context popup (#20393)
      * Add missing parameter for error in log message (#20144)
      * Do not allow organisation owners add themselves as collaborator (#20043)
      * Rework file highlight rendering and fix yaml copy-paste (#19967)
      * Improve code diff highlight, fix incorrect rendered diff result (#19958)
    * TESTING
      * Improve OAuth integration tests (#21390)
      * Add playwright tests (#20123)
    * BUILD
      * Switch to building with go1.19 (#20695)
      * Update JS dependencies, adjust eslint (#20659)
      * Add more linters to improve code readability (#19989)
    
    
  • v1.17.3

    Changelog
    * SECURITY
      * Sanitize and Escape refs in git backend (#21464) (#21463)
      * Bump `golang.org/x/text` (#21412) (#21413)
      * Update bluemonday (#21281) (#21287)
    * ENHANCEMENTS
      * Fix empty container layer history and UI (#21251) (#21278)
      * Use en-US as fallback when using other default language (#21200) (#21256)
      * Make the vscode clone link respect transport protocol (#20557) (#21128)
    * BUGFIXES
      * Do DB update after merge in hammer context (#21401) (#21416)
      * Add Num{Issues,Pulls} stats checks (#21404) (#21414)
      * Stop logging CheckPath returns error: context canceled (#21064) (#21405)
      * Parse OAuth Authorization header when request omits client secret (#21351) (#21374)
      * Ignore port for loopback redirect URIs (#21293) (#21373)
      * Set SemverCompatible to false for Conan packages (#21275) (#21366)
      * Tag list should include draft releases with existing tags (#21263) (#21365)
      * Fix linked account translation (#21331) (#21334)
      * Make NuGet service index publicly accessible (#21242) (#21277)
      * Foreign ID conflicts if ID is 0 for each item (#21271) (#21272)
      * Use absolute links in feeds (#21229) (#21265)
      * Prevent invalid behavior for file reviewing when loading more files (#21230) (#21234)
      * Respect `REQUIRE_SIGNIN_VIEW` for packages (#20873) (#21232)
      * Treat git object mode 40755 as directory (#21195) (#21218)
      * Allow uppercase ASCII alphabet in PyPI package names (#21095) (#21217)
      * Fix limited user cannot view himself's profile (#21212)
      * Fix template bug of admin monitor (#21209)
      * Fix reaction of issues (#21185) (#21196)
      * Fix CSV diff for added/deleted files (#21189) (#21193)
      * Fix pagination limit parameter problem (#21111)
    * TESTING
      * Fix missing m.Run() in TestMain (#21341)
    * BUILD
      * Use Go 1.19 fmt for Gitea 1.17, sync emoji data (#21239)
    
  • v1.17.2

    * SECURITY
      * Double check CloneURL is acceptable (#20869) (#20892)
      * Add more checks in migration code (#21011) (#21050)
    * ENHANCEMENTS
      * Fix hard-coded timeout and error panic in API archive download endpoint (#20925) (#21051)
      * Improve arc-green code theme (#21039) (#21042)
      * Enable contenthash in filename for dynamic assets (#20813) (#20932)
      * Don't open new page for ext wiki on same repository (#20725) (#20910)
      * Disable doctor logging on panic (#20847) (#20898)
      * Remove calls to load Mirrors in user.Dashboard (#20855) (#20897)
      * Update codemirror to 5.65.8 (#20875)
      * Rework repo buttons (#20602, #20718) (#20719)
    * BUGFIXES
      * Ensure delete user deletes all comments (#21067) (#21068)
      * Delete unreferenced packages when deleting a package version (#20977) (#21060)
      * Redirect if user does not exist on admin pages (#20981) (#21059)
      * Set uploadpack.allowFilter etc on gitea serv to enable partial clones with ssh (#20902) (#21058)
      * Fix 500 on time in timeline API (#21052) (#21057)
      * Fill the specified ref in webhook test payload (#20961) (#21055)
      * Add another index for Action table on postgres (#21033) (#21054)
      * Fix broken insecureskipverify handling in redis connection uris (#20967) (#21053)
      * Add Dev, Peer and Optional dependencies to npm PackageMetadataVersion (#21017) (#21044)
      * Do not add links to Posters or Assignees with ID < 0 (#20577) (#21037)
      * Fix modified due date message (#20388) (#21032)
      * Fix missed sort bug (#21006)
      * Fix input.value attr for RequiredClaimName/Value (#20946) (#21001)
      * Change review buttons to icons to make space for text (#20934) (#20978)
      * Fix download archiver of a commit (#20962) (#20971)
      * Return 404 NotFound if requested attachment does not exist (#20886) (#20941)
      * Set no-tags in git fetch on compare (#20893) (#20936)
      * Allow multiple metadata files for Maven packages (#20674) (#20916)
      * Increase Content field size of gpg_key and public_key to MEDIUMTEXT (#20896) (#20911)
      * Fix mirror address setting not working (#20850) (#20904)
      * Fix push mirror address backend get error Address cause setting page display error (#20593) (#20901)
      * Fix panic when an invalid oauth2 name is passed (#20820) (#20900)
      * In PushMirrorsIterate and MirrorsIterate if limit is negative do not set it (#20837) (#20899)
      * Ensure that graceful start-up is informed of unused SSH listener (#20877) (#20888)
      * Pad GPG Key ID with preceding zeroes (#20878) (#20885)
      * Fix SQL Query for `SearchTeam` (#20844) (#20872)
      * Fix the mode of custom dir to 0700 in docker-rootless (#20861) (#20867)
      * Fix UI mis-align for PR commit history (#20845) (#20859)