• SECURITY
  • Add replacement module for mholt/archiver (#31267) (#31270)
• API
  • Fix missing images in editor preview due to wrong links (#31299) (#31393)
  • Fix duplicate sub-path for avatars (#31365) (#31368)
  • Reduce memory usage for chunked artifact uploads to MinIO (#31325) (#31338)
  • Remove sub-path from container registry realm (#31293) (#31300)
  • Fix NuGet Package API for $filter with Id equality (#31188) (#31242)
  • Add an immutable tarball link to archive download headers for Nix (#31139) (#31145)
  • Add missed return after ctx.ServerError (#31130) (#31133)
• BUGFIXES
  • Fix avatar radius problem on the new issue page (#31506) (#31508)
  • Fix overflow menu flickering on mobile (#31484) (#31488)
  • Fix poor table column width due to breaking words (#31473) (#31477)
  • Support relative paths to videos from Wiki pages (#31061) (#31453)
  • Fix new issue/pr avatar (#31419) (#31424)
  • Increase max length of org team names from 30 to 255 characters (#31410) (#31421)
  • Fix line number width in code preview (#31307) (#31316)
  • Optimize runner-tags layout to enhance visual experience (#31258) (#31263)
  • Fix overflow on push notification (#31179) (#31238)
  • Fix overflow on notifications (#31178) (#31237)
  • Fix overflow in issue card (#31203) (#31225)
  • Split sanitizer functions and fine-tune some tests (#31192) (#31200)
  • use correct l10n string (#31487) (#31490)
  • Fix dropzone JS error when attachment is disabled (#31486)
  • Fix web notification icon not updated once you read all notifications (#31447) (#31466)
  • Switch to "Write" tab when edit comment again (#31445) (#31461)
  • Fix the link for .git-blame-ignore-revs bypass (#31432) (#31442)
  • Fix the wrong line number in the diff view page when expanded twice. (#31431) (#31440)
  • Fix labels and projects menu overflow on issue page (#31435) (#31439)
  • Fix Account Linking UpdateMigrationsByType (#31428) (#31434)
  • Fix markdown math brackets render problem (#31420) (#31430)
  • Fix rendered wiki page link (#31398) (#31407)
  • Fix natural sort (#31384) (#31394)
  • Allow downloading attachments of draft releases (#31369) (#31380)
  • Fix repo graph JS (#31377)
  • Fix incorrect localization explorer.go (#31348) (#31350)
  • Fix hash render end with colon (#31319) (#31346)
  • Fix line number widths (#31341) (#31343)
  • Fix navbar + menu flashing on page load (#31281) (#31342)
  • Fix adopt repository has empty object name in database (#31333) (#31335)
  • Delete legacy cookie before setting new cookie (#31306) (#31317)
  • Fix some URLs whose sub-path is missing (#31289) (#31292)
  • Fix admin oauth2 custom URL settings (#31246) (#31247)
  • Make pasted "img" tag has the same behavior as markdown image (#31235) (#31243)
  • Fix agit checkout command line hint & fix ShowMergeInstructions checking (#31219) (#31222)
  • Fix the possible migration failure on 286 with postgres 16 (#31209) (#31218)
  • Fix branch order (#31174) (#31193)
  • Fix markup preview (#31158) (#31166)
  • Fix push multiple branches error with tests (#31151) (#31153)
  • Fix API repository object format missed (#31118) (#31132)
  • Fix missing memcache import (#31105) (#31109)
  • Upgrade github.com/hashicorp/go-retryablehttp (#31499)
  • Fix double border in system status table (#31363) (#31401)
  • Fix bug filtering issues which have no project (#31337) (#31367)
  • Fix #31185 try fix lfs download from bitbucket failed (#31201) (#31329)
  • Add nix flake for dev shell (#30967) (#31310)
  • Fix and clean up ConfirmModal (#31283) (#31291)
  • Optimize repo-list layout to enhance visual experience (#31272) (#31276)
  • fixed the dropdown menu for the top New button to expand to the left (#31273) (#31275)
  • Fix Activity Page Contributors dropdown (#31264) (#31269)
  • fix: allow actions artifacts storage migration to complete succesfully (#31251) (#31257)
  • Make blockquote attention recognize more syntaxes (#31240) (#31250)
  • Remove .segment from .project-column (#31204) (#31239)
  • Ignore FindRecentlyPushedNewBranches err (#31164) (#31171)
  • Use vertical layout for multiple code expander buttons (#31122) (#31152)
  • Remove duplicate ProxyPreserveHost in Apache httpd doc (#31143) (#31147)
  • Improve mobile review ui (#31091) (#31136)
  • Fix DashboardRepoList margin (#31121) (#31128)
  • Update pip related commands for docker (#31106) (#31111)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

This release stands as a monumental milestone in our development journey with a record-breaking incorporation of 1481 pull requests. It marks the most extensive update in Gitea's history, showcasing a plethora of new features and infrastructure improvements.

Noteworthy advancements in this release include the introduction of HTMX and Tailwind, signaling a strategic shift as we gradually phase out jquery and Fomantic UI. These changes reflect our commitment to embracing modern technologies and enhancing the user experience.

Key highlights of this release encompass significant changes categorized under BREAKING, FEATURES, ENHANCEMENTS, and PERFORMANCE, each contributing to a more robust and efficient Gitea platform.

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

Known Issues

• Gitea 1.22.0 fails to start when cache ADAPTER=memcache ("Init failed: cache: unknown adapter 'memcache'(forgot to import?)"), it has been fixed in 1.22-nightly.
• When visiting some repositories, a 500 error occurs (admin could see error FindRecentlyPushedNewBranches), it has been fixed in 1.22-nightly.

BREAKING

• Improve reverse proxy documents and clarify the AppURL guessing behavior (#31003) (#31020)
• Remember log in for a month by default (#30150)
• Breaking summary for template refactoring (#29395)
  • All custom templates need to follow these changes
• Recommend/convert to use case-sensitive collation for MySQL/MSSQL (#28662)
• Make offline mode as default to not connect external avatar service by default (#28548)
• Include public repos in the doer's dashboard for issue search (#28304)
• Use restricted sanitizer for repository description (#28141)
• Support storage base path as prefix (#27827)
• Enhanced auth token / remember me (#27606)
• Rename the default themes to gitea-light, gitea-dark, gitea-auto (#27419)
  • If you didn't see the new themes, please remove the [ui].THEMES config option from app.ini
• Require MySQL 8.0, PostgreSQL 12, MSSQL 2012 (#27337)

FEATURES

• Allow everyone to read or write a wiki by a repo unit setting (#30495)
• Use raw Wiki links for non-renderable Wiki files (#30273)
• Render embedded code preview by permalink in markdown (#30234) (#30249)
• Support repo code search without setting up an indexer (#29998)
• Support pasting URLs over markdown text (#29566)
• Allow to change primary email before account activation (#29412)
• Customizable "Open with" applications for repository clone (#29320)
• Allow options to disable user deletion from the interface on app.ini (#29275)
• Extend issue template YAML engine (#29274)
• Add support for linguist-detectable and linguist-documentation (#29267)
• Implement code frequency graph (#29191)
• Show commit status for releases (#29149)
• Add user blocking (#29028)
• Actions Artifacts v4 backend (#28965)
• Add merge style fast-forward-only (#28954)
• Retarget depending pulls when the parent branch is deleted (#28686)
• Add global setting on how timestamps should be rendered (#28657)
• Implement actions badge SVGs (#28102)
• Add skip ci functionality (#28075)
• Show latest commit for file (#28067)
• Allow to sync tags from the admin dashboard (#28045)
• Add Profile Readme for Organisations (#27955)
• Implement contributors graph (#27882)
• Artifact deletion in actions ui (#27172)
• Add API routes to get runner registration token (#27144)
• Add support for forking single branch (#25821)
• Add support for sha256 repositories (#23894)
• Add admin API route for managing user's badges (#23106)

ENHANCEMENTS

• Make gitea webhooks openproject compatible (#28435) (#31081)
• Support using label names when changing issue labels (#30943) (#30958)
• Fix various problems around project board view (#30696) (#30902)
• Improve context popup rendering (#30824) (#30829)
• Allow to save empty comment (#30706)
• Prevent allow/reject reviews on merged/closed PRs (#30686)
• Initial support for colorblindness-friendly themes (#30625)
• Some NuGet package enhancements (#30280) (#30324)
• Markup color and font size fixes (#30282) (#30310)
• Show 12 lines in markup code preview (#30255) (#30257)
• Add [other].SHOW_FOOTER_POWERED_BY setting to hide Powered by (#30253)
• Pulse page improvements (#30149)
• Render code tags in commit messages (#30146)
• Prevent re-review and dismiss review actions on closed and merged PRs (#30065)
• Cancel previous runs of the same PR automatically (#29961)
• Drag-and-drop improvements for projects and issue pins (#29875)
• Add default board to new projects, remove uncategorized pseudo-board (#29874)
• Prevent layout shift in <overflow-menu> items (#29831)
• Add skip ci support for pull request title (#29774)
• Add more stats tables (#29730)
• Update API to return 'source_id' for users (#29718)
• Determine fuzziness of bleve indexer by keyword length (#29706)
• Expose fuzzy search for issues/pulls (#29701)
• Put an edit file button on pull request files to allow a quick operation (#29697)
• Fix action runner offline label padding (#29691)
• Update allowed attachment types (#29688)
• Completely style the webkit autofill (#29683)
• Highlight archived labels (#29680)
• Add a warning for disallowed email domains (#29658)
• Set user's 24h preference from their current OS locale (#29651)
• Add setting to disable user features when user login type is not plain (#29615)
• Improve natural sort (#29611)
• Make wiki default branch name changeable (#29603)
• Unify search boxes (#29530)
• Add support for API blob upload of release attachments (#29507)
• Detect broken git hooks (#29494)
• Sync branches to DB immediately when handling git hook calling (#29493)
• Allow options to disable user GPG key configuration from the interface on app.ini (#29486)
• Allow options to disable user SSH key configuration from the interface on app.ini (#29447)
• Use relative links for commits, mentions, and issues in markdown (#29427)
• Add <overflow-menu>, rename webcomponents (#29400)
• Include resource state events in Gitlab downloads (#29382)
• Properly migrate target branch change GitLab comment (#29340)
• Recolor dark theme to blue shade (#29283)
• Partially enable MSSQL case-sensitive collation support (#29238)
• Auto-update the system status in the admin dashboard (#29163)
• Integrate alpine noarch packages into other architectures index (#29137)
• Document how the TOC election process works (#29135)
• Tweak repo header (#29134)
• Make blockquote border size less aggressive (#29124)
• Downscale pasted PNG images based on metadata (#29123)
• Show View at this point in history for every commit (#29122)
• Add support for action artifact serve direct (#29120)
• Change webhook-type in create-view (#29114)
• Drop "@" from the email sender to avoid spam filters (#29109)
• Allow non-admin users to delete review requests (#29057)
• Improve user search display name (#29002)
• Include username in email headers (#28981)
• Show whether a PR is WIP inside popups (#28975)
• Also match weakly validated ETags (#28957)
• Support nuspec manifest download for Nuget packages (#28921)
• Fix hardcoded GitHub icon used as migrated release avatar (#28910)
• Propagate install_if and provider_priority to APKINDEX (#28899)
• Add artifacts v4 JWT to job message and accept it (#28885)
• Enable/disable owner and repo projects independently (#28805)
• Add non-JS fallback for reaction tooltips (#28785)
• Add the ability to see open and closed issues at the same time (#28757)
• Move sign-in labels to be above inputs (#28753)
• Display the latest sync time for pull mirrors on the repo page (#28712)
• Show in Web UI if the file is vendored and generated (#28620)
• Add orphaned topic consistency check (#28507)
• Add branch protection setting for ignoring stale approvals (#28498)
• Add option to set language in admin user view (#28449)
• Fix incorrect run order of action jobs (#28367)
• Add missing exclusive in advanced label options (#28322)
• Added instance-level variables (#28115)
• Add edit option for README.md (#28071)
• Fix link to Code tab on wiki commits (#28041)
• Allow to set explore page default sort (#27951)
• Improve PR diff view on mobile (#27883)
• Properly migrate automatic merge GitLab comments (#27873)
• Display issue task list on project cards (#27865)
• Add Index to pull_auto_merge.doer_id (#27811)
• Fix display member unit in the menu bar if there are no hidden members in public org (#27795)
• List all Debian package versions in Packages (#27786)
• Allow pull requests Manually Merged option to be used by non-admins (#27780)
• Only show diff file tree when more than one file changed (#27775)
• Show placeholder email in privacy popup (#27770)
• Revamp repo header (#27760)
• Add must-change-password command line parameter (#27626)
• Unify password changing and invalidate auth tokens (#27625)
• Add border to file tree 'sub-items' and add padding to 'item-file' (#27593)
• Add slow SQL query warning (#27545)
• Pre-register OAuth application for tea (#27509)
• Differentiate between push and pull mirror sync in progress (#27390)
• Link to file from its history (#27354)
• Add a shortcut to user's profile page to admin user details (#27299)
• Doctor: delete action entries without existing user (#27292)
• Show total TrackedTime on issue/pull/milestone lists (#26672)
• Don't show the new pull request button when the page is not comp...

Breaking Changes

• Remember login for a month by default (#30150)
• Breaking summary for template refactoring (#29395)
  • All custom templates need to follow these changes
• Recommend/convert to use case-sensitive collation for MySQL/MSSQL (#28662)
• Make offline mode as default to no connect external avatar service by default (#28548)
• Include public repos in doer's dashboard for issue search (#28304)
• Support storage base path as prefix (#27827)
• Enhanced auth token / remember me (#27606)
• Rename the default themes to gitea-light, gitea-dark, gitea-auto (#27419)
  • If you didn't see the new themes, please remove the [ui].THEMES config option from app.ini
• Require MySQL 8.0 (MariaDB 10), PostgreSQL 12, MSSQL 2012 (#27337)

Features & Enhancements

• Render embedded code preview by permlink in markdown (#30234)
• Support repo code search without setting up an indexer (#29998)
• Support pasting URLs over markdown text (#29566)
• Allow to change primary email before account activation (#29412)
• Customizable "Open with" applications for repository clone (#29320)
• Allow options to disable user deletion from the interface on app.ini (#29275)
• Extend issue template yaml engine (#29274)
• Add support for linguist-detectable and linguist-documentation (#29267)
• Filter Repositories by type (#29231)
• Implement code frequency graph (#29191)
• Advertise WebAuthn support (#29176)
• Show commit status for releases (#29149)
• Add alert blocks in markdown (#29121)
• Add user blocking (#29028)
• Actions Artifacts v4 backend (#28965)
• Add merge style fast-forward-only (#28954)
• Retarget depending pulls when the parent branch is deleted (#28686)
• Add global setting how timestamps should be rendered (#28657)
• Implement actions badge svgs (#28102)
• add skip ci functionality (#28075)
• Show latest commit for file (#28067)
• Allow to sync tags from admin dashboard (#28045)
• Add Profile Readme for Organisations (#27955)
• Implement contributors graph (#27882)
• Enhanced auth token / remember me (#27606)
• Artifact deletion in actions ui (#27172)
• Add API routes to get runner registration token (#27144)
• Add support for forking single branch (#25821)
• Add support for sha256 repositories (#23894)
• Add admin API route for managing user's badges (#23106)
• Use raw Wiki links for non-renderable Wiki files (#30273)
• Allow to save empty comment (#30706)
• Prevent allow/reject reviews on merged/closed PRs (#30686)
• Initial support for colorblindness-friendly themes (#30625)
• Suppress browserslist warning in webpack target (#30571)
• Allow everyone to read or write a wiki by a repo unit setting (#30495)
• Some NuGet package enhancements (#30280)
• Markup color and font size fixes (#30282)
• Show 12 lines in markup code preview (#30255)
• Add [other].SHOW_FOOTER_POWERED_BY setting to hide Powered by (#30253)
• Pulse page improvements (#30149)
• Render code tags in commit messages (#30146)
• Prevent re-review and dismiss review actions on closed and merged PRs (#30065)
• Cancel previous runs of the same PR automatically (#29961)
• Drag-and-drop improvements for projects and issue pins (#29875)
• Add default board to new projects, remove uncategorized pseudo-board (#29874)
• Prevent layout shift in items (#29831)
• add skip ci support for pull request title (#29774)
• Add more stats tables (#29730)
• Update API to return 'source_id' for users (#29718)
• Expose fuzzy search for issues/pulls (#29701)
• Put an edit file button on pull request files to allow a quick operation (#29697)
• Fix action runner offline label padding (#29691)
• Update allowed attachment types (#29688)
• Completely style the webkit autofill (#29683)
• Highlight archived labels (#29680)
• Add a warning for disallowed email domains (#29658)
• Set user's 24h preference from their current OS locale (#29651)
• Improve CSV rendering (#29638)
• Add setting to disable user features when user login type is not plain (#29615)
• Improve natural sort (#29611)
• Make wiki default branch name changable (#29603)
• Unify search boxes (#29530)
• Add support for API blob upload of release attachments (#29507)
• Detect broken git hooks (#29494)
• Sync branches to DB immediately when handle git hook calling (#29493)
• Allow options to disable user gpg keys configuration from the interface on app.ini (#29486)
• Allow options to disable user ssh keys configuration from the interface on app.ini (#29447)
• Use relative links for commits, mentions, and issues in markdown (#29427)
• Add , rename webcomponents (#29400)
• Include resource state events in Gitlab downloads (#29382)
• Properly migrate target branch change GitLab comment (#29340)
• Don't show third-party JS errors in production builds (#29303)
• Recolor dark theme to blue shade (#29283)
• Partially enable MSSQL case-sensitive collation support (#29238)
• Auto-update the system status in admin dashboard (#29163)
• Refactor git version functions and check compatibility (#29155)
• [REFACTOR] store webhook event in database (#29145)
• Integrate alpine noarch packages into other architectures index (#29137)
• Document how the TOC election process works (#29135)
• Tweak repo header (#29134)
• Show more settings for empty repositories (#29130)
• Make blockquote border size less aggressive (#29124)
• Downscale pasted PNG images based on metadata (#29123)
• Show View at this point in history for every commit (#29122)
• Add support for action artifact serve direct (#29120)
• Change webhook-type in create-view (#29114)
• Drop "@" from email sender to avoid spam filters (#29109)
• Allow non-admin users to delete review requests (#29057)
• Improve user experience for outdated comments (#29050)
• Strip trailing newline in markdown code copy (#29019)
• Fix incorrect button CSS usages (#29015)
• Improve user search display name (#29002)
• Include username in email headers (#28981)
• Show whether a PR is WIP inside popups (#28975)
• Also match weakly validated ETags (#28957)
• Make loading animation less aggressive (#28955)
• Support nuspec manifest download for nuget packages (#28921)
• Fix hardcoded GitHub icon used as migrated release avatar (#28910)
• fix: update enable_prune even if mirror_interval is not provided (#28905)
• Propagate install_if and provider_priority to APKINDEX (#28899)
• Add artifacts v4 jwt to job message and accept it (#28885)
• Avoid duplicate JS error messages on UI (#28873)
• Enable/disable owner and repo projects independently (#28805)
• Add non-JS fallback for reaction tooltips (#28785)
• Add ability to see open and closed issues at the same time (#28757)
• Show description as tooltip instead of title for labels (#28754)
• move sign in labels to be above inputs (#28753)
• Display latest sync time for pull mirrors on the repo page (#28712)
• switch destination directory for apt signing keys (#28639)
• Show in Web UI if file is vendored and generated (#28620)
• Include heap pprof in diagnosis report to help debugging memory leaks (#28596)
• Speed up loading the dashboard on mysql/mariadb (#28546)
• Add orphaned topic consistency check (#28507)
• Add branch protection setting for ignoring stale approvals (#28498)
• Add endpoint for not implemented Docker auth (#28457)
• Add option to disable ambiguous unicode characters detection (#28454)
• Add option to set language in admin user view (#28449)
• Polyfill SubmitEvent for PaleMoon (#28441)
• Improve doctor cli behavior (#28422)
• Fix incorrect run order of action jobs (#28367)
• Add missing exclusive in advanced label options (#28322)
• Add HEAD support for rpm repo files (#28309)
• Assign pull request to project during creation (#28227)
• Use full width for project boards (#28225)
• Modernize merge button (#28140)
• Added instance-level variables (#28115)
• Add edit option for README.md (#28071)
• Fix project counter in organization/individual profile (#28068)
• Fix link to Code tab on wiki commits (#28041)
• Render email addresses as such if followed by punctuation (#27987)
• Fix citation error when the file size is larger than 1024 bytes (#27958)
• Allow to set explore page default sort (#27951)
• Remove action runners on user deletion (#27902)
• Improve PR diff view on mobile (#27883)
• Properly migrate automatic merge GitLab comments (#27873)
• Display issue task list on project cards (#27865)
• Support storage base path as prefix (#27827)
• Change katex limits (#27823)
• Add Index to pull_auto_merge.doer_id (#27811)
• Fix display member unit in the menu bar if there are no hidden members in public org (#27795)
• Add dedicated class for empty placeholders (#27788)
• List all Debian package versions in Packages (#27786)
• Allow pull requests Manually Merged option to be used by non-admins (#27780)
• Add gap between diff boxes (#27776)
• Only show diff file tree when more than one file changed (#27775)
• Show placeholder email in privacy popup (#27770)
• Revamp repo header (#27760)
• Improve diff tree spacing (#27714)
• Add must-change-password cli parameter (#27626)
• Unify password changing and invalidate auth tokens (#27625)
• Add border to file tree 'sub-items' and add padding to 'item-file' (#27593)
• Fix required checkboxes in issue forms (#27592)
• Increase queue length (#27555)
• Add slow SQL query warning (#27545)
• Pre-register OAuth application for tea (#27509)
• Improve feed icons and feed merge text color (#27498)
• Avoid run change title process when the title is same (#27467)
• Make Actions tasks/jobs timeouts configurable by the user (#27400)
• Differentiate between push and pull mirror sync in progress (#27390)
• Add support for HEAD ref in /src/branch and /src/commit routes (#27384)
• Feed UI Improvements (#27356)
• link to file from its history (#27354)
• add a shortcut to user's profile page to admin user detai...

• SECURITY
  • Use go1.21.9 to include Golang security fix
  • Fix possible renderer security problem (#30136) (#30315)
  • Performance optimization for git push and check permissions for push options (#30104) (#30354)
• BUGFIXES
  • Fix close file in the Upload func (#30262) (#30269)
  • Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250)
  • Fix missing 0 prefix of GPG key id (#30245) (#30247)
  • Include encoding in signature payload (#30174) (#30181)
  • Move from max( id ) to max( index ) for latest commit statuses (#30076) (#30155)
  • Load attachments for code comments (#30124) (#30126)
  • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#30094) (#30120)
  • Fix possible data race on tests (#30093) (#30108)
  • Fix duplicate migrated milestones (#30102) (#30105)
  • Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100)
  • Fix incorrect SVGs (#30087) (#30086)
  • Fix create commit status (#30225) (#30340)
  • Fix misuse of unsupported global variables (#30402)
  • Fix to delete the cookie when AppSubURL is non-empty (#30375) (#30468)
  • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30408)
  • Change the default maxPerPage for gitbucket (#30392) (#30471)
  • Check the token's owner and repository when registering a runner (#30406) (#30412)
  • Avoid losing token when updating mirror settings (#30429) (#30466)
  • Fix commit status cache which missed target_url (#30426) (#30445)
  • Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437)
  • Fix mirror error when mirror repo is empty (#30432) (#30467)
  • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#29990) (#30447)
  • Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497)
• DOCS
  • Update actions variables documents (#30394) (#30405)
• MISC
  • Update katex to 0.16.10 (#30089)
  • Upgrade go-sqlite to v1.14.22 (#30462)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

• BUGFIXES
  • Fix Add/Remove WIP on pull request title failure (#29999) (#30066)
  • Fix misuse of TxContext (#30061) (#30062)
  • Respect DEFAULT_ORG_MEMBER_VISIBLE setting when adding creator to org (#30013) (#30035)
• MISC
  • Escape paths for find file correctly (#30026) (#30031)
  • Remove duplicate option in admin screen and now-unused translation keys (#28492) (#30024)
  • Fix manual merge form and 404 page templates (#30000)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

• PERFORMANCE
  • Only do counting when count_only=true for repo dashboard (#29884) (#29905)
  • Add cache for dashboard commit status (#29932)
• ENHANCEMENT
  • Make runs-on support variable expression (#29468) (#29782)
  • Show Actions post step when it's running (#29926) (#29928)
• BUGFIXES
  • Fix PR creation via API between branches of the same repo with head field namespaced (#26986) (#29857)
  • Fix and rewrite markup anchor processing (#29931) (#29946)
  • Notify reviewers added via CODEOWNERS (#29842) (#29902)
  • Fix template error when comment review doesn't exist (#29888) (#29889)
  • Fix user id column case (#29863) (#29867)
  • Make meilisearch do exact search for issues (#29740 & #29671) (#29846)
  • Fix the for attribute not pointing to the ID of the color picker (#29813) (#29815)
  • Fix codeowner detected diff base branch to mergebase (#29783) (#29807)
  • Fix Safari spinner rendering (#29801) (#29802)
  • Fix missing translation on milestones (#29785) (#29789)
  • Fix user router possible panic (#29751) (#29786)
  • Fix possible NPE in ToPullReviewList (#29759) (#29775)
  • Fix the wrong default value of ENABLE_OPENID_SIGNIN on docs (#29925) (#29927)
  • Solving the issue of UI disruption when the review is deleted without refreshing (#29951) (#29968)
  • Fix loadOneBranch panic (#29938) (#29939)
  • Fix invalid link of the commit status when ref is tagged (#29752) (#29908)
  • Editor error message misleading due to re-used key. (#29859) (#29876)
  • Fix double border and border-radius on empty action steps (#29845) (#29850)
  • Use Temporal.PlainDate for absolute dates (#29804) (#29808)
  • Fix incorrect package link method calls in templates (#29580) (#29764)
  • Fix the bug that the user may log out if GetUserByID returns unknown error (#29962) (#29964)
  • Performance improvements for pull request list page (#29900) (#29972)
  • Fix bugs in rerunning jobs (#29983) (#29955)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

• KNOWN ISSUES
  • Browsing "packages" pages might cause 500 error, it could be fixed by updating to 1.21.9:
• SECURITY
  • Only use supported sort orders for "/explore/users" page (#29430) (#29443)
• ENHANCEMENTS
  • Fix wrong line number in code search result (#29260) (#29623)
• BUGFIXES
  • Use Get but not Post to get actions artifacts (#29734) (#29737)
  • Fix inconsistent rendering of block mathematical expressions (#29677) (#29711)
  • Fix rendering internal file links in org (#29669) (#29705)
  • Don't show AbortErrors on logout (#29639) (#29667)
  • Fix user-defined markup links targets (#29305) (#29666)
  • Fix incorrect rendering csv file when file size is larger than UI.CSV.MaxFileSize (#29653) (#29663)
  • Fix hidden test's failure (#29254) (#29662)
  • Add empty repo check-in DetectAndHandleSchedules (#29606) (#29659)
  • Fix 500 when deleting an account with an incorrect password or unsupported login type (#29579) (#29656)
  • Use strict protocol check when redirect (#29642) (#29644)
  • Avoid issue info panic (#29625) (#29632)
  • Avoid unexpected panic in graceful manager (#29629) (#29630)
  • Make "/user/login" page redirect if the current user has signed in (#29583) (#29599)
  • Fix workflow trigger event IssueChangeXXX bug (#29559) (#29565)
  • Fix incorrect cookie path for AppSubURL (#29534) (#29552)
  • Fix queue worker incorrectly stopped when there are still more items in the queue (#29532) (#29546)
  • Fix incorrect redirection when creating a PR fails (#29537) (#29543)
  • Fix incorrect subpath in links (#29535) (#29541)
  • Fix issue link does not support quotes (#29484) (#29487) (#29536)
  • Fix issue & comment history bugs (#29525) (#29527)
  • Set pre-step status to skipped if the job is skipped (#29489) (#29523)
  • Fix/Improve processWindowErrorEvent (#29407) (#29480)
  • Fix counter display number incorrectly displayed on the page (#29448) (#29478)
  • Fix workflow trigger event bugs (#29467) (#29475)
  • Fix URL calculation in the clone input box (#29470) (#29473)
  • The job should always run when if is always() (#29464) (#29469)
  • Fix template bug (#27581) (#29446)
  • Not trigger all jobs anymore when re-running the first job (#29439) (#29441)
  • Ignore empty repo for CreateRepository in action notifier (#29416) (#29424)
  • Fix incorrect tree path value for patch editor (#29377) (#29421)
  • Add missing database transaction for new issues (#29490) (#29607)
  • Fix 500 when pushing release to an empty repo (#29554) (#29564)
  • Fix incorrect relative/absolute URL usages (#29531) (#29547)
  • Fix wrong test usage of AppSubURL (#29459) (#29488)
  • Fix missed return (#29450) (#29453)
  • Fixing the issue when status checks per rule matches multiple actions (#29631) (#29655)
  • Improve contrast on blame timestamp, fix double border (#29482) (#29485)

• ENHANCEMENTS
  • Users with read permission of pull requests can be assigned too (#27263) (#29372)
• BUGFIXES
  • Do not double close reader (#29354) (#29370)
  • Display friendly error message (#29105) (#29363)
  • Fix project counter in organization/individual profile (#28068) (#29361)
  • Fix validity of the FROM email address not being checked (#29347) (#29360)
  • Fix tarball/zipball download bug (#29342) (#29352)
• DOCS
  • Docker Tag Information in Docs (#29047) (#29362)
• MISC
  • Enforce maxlength in frontend (#29389) (#29396)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

• SECURITY
  • Fix XSS vulnerabilities (#29336)
  • Use general token signing secret (#29205) (#29325)
• ENHANCEMENTS
  • Refactor git version functions and check compatibility (#29155) (#29157)
  • Improve user experience for outdated comments (#29050) (#29086)
  • Hide code links on release page if user cannot read code (#29064) (#29066)
  • Wrap contained tags and branches again (#29021) (#29026)
  • Fix incorrect button CSS usages (#29015) (#29023)
  • Strip trailing newline in markdown code copy (#29019) (#29022)
  • Implement some action notifier functions (#29173) (#29308)
  • Load outdated comments when (un)resolving conversation on PR timeline (#29203) (#29221)
• BUGFIXES
  • Refactor issue template parsing and fix API endpoint (#29069) (#29140)
  • Fix swift packages not resolving (#29095) (#29102)
  • Remove SSH workaround (#27893) (#29332)
  • Only log error when tag sync fails (#29295) (#29327)
  • Fix SSPI user creation (#28948) (#29323)
  • Improve the issue_comment workflow trigger event (#29277) (#29322)
  • Discard unread data of git cat-file (#29297) (#29310)
  • Fix error display when merging PRs (#29288) (#29309)
  • Prevent double use of git cat-file session. (#29298) (#29301)
  • Fix missing link on outgoing new release notifications (#29079) (#29300)
  • Fix debian InRelease Acquire-By-Hash newline (#29204) (#29299)
  • Always write proc-receive hook for all git versions (#29287) (#29291)
  • Do not show delete button when time tracker is disabled (#29257) (#29279)
  • Workaround to clean up old reviews on creating a new one (#28554) (#29264)
  • Fix bug when the linked account was disactived and list the linked accounts (#29263)
  • Do not use lower tag names to find releases/tags (#29261) (#29262)
  • Fix missed edit issues event for actions (#29237) (#29251)
  • Only delete scheduled workflows when needed (#29091) (#29235)
  • Make submit event code work with both jQuery event and native event (#29223) (#29234)
  • Fix push to create with capitalize repo name (#29090) (#29206)
  • Use ghost user if user was not found (#29161) (#29169)
  • Dont load Review if Comment is CommentTypeReviewRequest (#28551) (#29160)
  • Refactor parseSignatureFromCommitLine (#29054) (#29108)
  • Avoid showing unnecessary JS errors when there are elements with different origin on the page (#29081) (#29089)
  • Fix gitea-origin-url with default ports (#29085) (#29088)
  • Fix orgmode link resolving (#29024) (#29076)
  • Fix: Elasticsearch: Request Entity Too Large #28117 (#29062) (#29075)
  • Do not render empty comments (#29039) (#29049)
  • Avoid sending update/delete release notice when it is draft (#29008) (#29025)
  • Fix gitea-action user avatar broken on edited menu (#29190) (#29307)
  • Disallow merge when required checked are missing (#29143) (#29268)
  • Fix incorrect link to swift doc and swift package-registry login command (#29096) (#29103)
• DOCS
  • Rm outdated docs from some languages (#27530) (#29208)
  • Fix typos in the documentation (#29048) (#29056)
  • Explained where create issue/PR template (#29035)
• MISC
  • Convert visibility to number (#29226) (#29244)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

• SECURITY
  • Prevent anonymous container access if RequireSignInView is enabled (#28877) (#28882)
  • Update go dependencies and fix go-git (#28893) (#28934)
• BUGFIXES
  • Revert "Speed up loading the dashboard on mysql/mariadb (#28546)" (#29006) (#29007)
  • Fix an actions schedule bug (#28942) (#28999)
  • Fix update enable_prune even if mirror_interval is not provided (#28905) (#28929)
  • Fix uploaded artifacts should be overwritten (#28726) backport v1.21 (#28832)
  • Preserve BOM in web editor (#28935) (#28959)
  • Strip / from relative links (#28932) (#28952)
  • Don't remove all mirror repository's releases when mirroring (#28817) (#28939)
  • Implement MigrateRepository for the actions notifier (#28920) (#28923)
  • Respect branch info for relative links (#28909) (#28922)
  • Don't reload timeline page when (un)resolving or replying conversation (#28654) (#28917)
  • Only migrate the first 255 chars of a Github issue title (#28902) (#28912)
  • Fix sort bug on repository issues list (#28897) (#28901)
  • Fix DeleteCollaboration transaction behaviour (#28886) (#28889)
  • Fix schedule not trigger bug because matching full ref name with short ref name (#28874) (#28888)
  • Fix migrate storage bug (#28830) (#28867)
  • Fix archive creating LFS hooks and breaking pull requests (#28848) (#28851)
  • Fix reverting a merge commit failing (#28794) (#28825)
  • Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate (#28891) (#28895)
  • Fix incorrect PostgreSQL connection string for Unix sockets (#28865) (#28870)
• ENHANCEMENTS
  • Make loading animation less aggressive (#28955) (#28956)
  • Avoid duplicate JS error messages on UI (#28873) (#28881)
  • Bump @github/relative-time-element to 4.3.1 (#28819) (#28826)
• MISC
  • Warn that DISABLE_QUERY_AUTH_TOKEN is false only if it's explicitly defined (#28783) (#28868)
  • Remove duplicated checkinit on git module (#28824) (#28831)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.