Tags: go-gitea/gitea
Tags
This release stands as a monumental milestone in our development jour… …ney with a record-breaking incorporation of [1528](https://github.com/go-gitea/gitea/pulls?q=is%3Apr+milestone%3A1.22.0+is%3Amerged) pull requests. It marks the most extensive update in Gitea's history, showcasing a plethora of new features and infrastructure improvements. Noteworthy advancements in this release include the introduction of `HTMX` and `Tailwind`, signaling a strategic shift as we gradually phase out `jquery` and `Fomantic UI`. These changes reflect our commitment to embracing modern technologies and enhancing the user experience. Key highlights of this release encompass significant changes categorized under `BREAKING`, `FEATURES`, `ENHANCEMENTS`, and `PERFORMANCE`, each contributing to a more robust and efficient Gitea platform. * BREAKING * Improve reverse proxy documents and clarify the AppURL guessing behavior (#31003) (#31020) * Remember log in for a month by default (#30150) * Breaking summary for template refactoring (#29395) * All custom templates need to follow these changes * Recommend/convert to use case-sensitive collation for MySQL/MSSQL (#28662) * Make offline mode as default to not connect external avatar service by default (#28548) * Include public repos in the doer's dashboard for issue search (#28304) * Use restricted sanitizer for repository description (#28141) * Support storage base path as prefix (#27827) * Enhanced auth token / remember me (#27606) * Rename the default themes to `gitea-light`, `gitea-dark`, `gitea-auto` (#27419) * If you didn't see the new themes, please remove the `[ui].THEMES` config option from `app.ini` * Require MySQL 8.0, PostgreSQL 12, MSSQL 2012 (#27337) * FEATURES * Allow everyone to read or write a wiki by a repo unit setting (#30495) * Use raw Wiki links for non-renderable Wiki files (#30273) * Render embedded code preview by permalink in markdown (#30234) (#30249) * Support repo code search without setting up an indexer (#29998) * Support pasting URLs over markdown text (#29566) * Allow to change primary email before account activation (#29412) * Customizable "Open with" applications for repository clone (#29320) * Allow options to disable user deletion from the interface on app.ini (#29275) * Extend issue template YAML engine (#29274) * Add support for `linguist-detectable` and `linguist-documentation` (#29267) * Implement code frequency graph (#29191) * Show commit status for releases (#29149) * Add user blocking (#29028) * Actions Artifacts v4 backend (#28965) * Add merge style `fast-forward-only` (#28954) * Retarget depending pulls when the parent branch is deleted (#28686) * Add global setting on how timestamps should be rendered (#28657) * Implement actions badge SVGs (#28102) * Add skip ci functionality (#28075) * Show latest commit for file (#28067) * Allow to sync tags from the admin dashboard (#28045) * Add Profile Readme for Organisations (#27955) * Implement contributors graph (#27882) * Artifact deletion in actions ui (#27172) * Add API routes to get runner registration token (#27144) * Add support for forking single branch (#25821) * Add support for sha256 repositories (#23894) * Add admin API route for managing user's badges (#23106) * ENHANCEMENTS * Make gitea webhooks openproject compatible (#28435) (#31081) * Support using label names when changing issue labels (#30943) (#30958) * Fix various problems around project board view (#30696) (#30902) * Improve context popup rendering (#30824) (#30829) * Allow to save empty comment (#30706) * Prevent allow/reject reviews on merged/closed PRs (#30686) * Initial support for colorblindness-friendly themes (#30625) * Some NuGet package enhancements (#30280) (#30324) * Markup color and font size fixes (#30282) (#30310) * Show 12 lines in markup code preview (#30255) (#30257) * Add `[other].SHOW_FOOTER_POWERED_BY` setting to hide `Powered by` (#30253) * Pulse page improvements (#30149) * Render code tags in commit messages (#30146) * Prevent re-review and dismiss review actions on closed and merged PRs (#30065) * Cancel previous runs of the same PR automatically (#29961) * Drag-and-drop improvements for projects and issue pins (#29875) * Add default board to new projects, remove uncategorized pseudo-board (#29874) * Prevent layout shift in `<overflow-menu>` items (#29831) * Add skip ci support for pull request title (#29774) * Add more stats tables (#29730) * Update API to return 'source_id' for users (#29718) * Determine fuzziness of bleve indexer by keyword length (#29706) * Expose fuzzy search for issues/pulls (#29701) * Put an edit file button on pull request files to allow a quick operation (#29697) * Fix action runner offline label padding (#29691) * Update allowed attachment types (#29688) * Completely style the webkit autofill (#29683) * Highlight archived labels (#29680) * Add a warning for disallowed email domains (#29658) * Set user's 24h preference from their current OS locale (#29651) * Add setting to disable user features when user login type is not plain (#29615) * Improve natural sort (#29611) * Make wiki default branch name changeable (#29603) * Unify search boxes (#29530) * Add support for API blob upload of release attachments (#29507) * Detect broken git hooks (#29494) * Sync branches to DB immediately when handling git hook calling (#29493) * Allow options to disable user GPG key configuration from the interface on app.ini (#29486) * Allow options to disable user SSH key configuration from the interface on app.ini (#29447) * Use relative links for commits, mentions, and issues in markdown (#29427) * Add `<overflow-menu>`, rename webcomponents (#29400) * Include resource state events in Gitlab downloads (#29382) * Properly migrate target branch change GitLab comment (#29340) * Recolor dark theme to blue shade (#29283) * Partially enable MSSQL case-sensitive collation support (#29238) * Auto-update the system status in the admin dashboard (#29163) * Integrate alpine `noarch` packages into other architectures index (#29137) * Document how the TOC election process works (#29135) * Tweak repo header (#29134) * Make blockquote border size less aggressive (#29124) * Downscale pasted PNG images based on metadata (#29123) * Show `View at this point in history` for every commit (#29122) * Add support for action artifact serve direct (#29120) * Change webhook-type in create-view (#29114) * Drop "@" from the email sender to avoid spam filters (#29109) * Allow non-admin users to delete review requests (#29057) * Improve user search display name (#29002) * Include username in email headers (#28981) * Show whether a PR is WIP inside popups (#28975) * Also match weakly validated ETags (#28957) * Support nuspec manifest download for Nuget packages (#28921) * Fix hardcoded GitHub icon used as migrated release avatar (#28910) * Propagate install_if and provider_priority to APKINDEX (#28899) * Add artifacts v4 JWT to job message and accept it (#28885) * Enable/disable owner and repo projects independently (#28805) * Add non-JS fallback for reaction tooltips (#28785) * Add the ability to see open and closed issues at the same time (#28757) * Move sign-in labels to be above inputs (#28753) * Display the latest sync time for pull mirrors on the repo page (#28712) * Show in Web UI if the file is vendored and generated (#28620) * Add orphaned topic consistency check (#28507) * Add branch protection setting for ignoring stale approvals (#28498) * Add option to set language in admin user view (#28449) * Fix incorrect run order of action jobs (#28367) * Add missing exclusive in advanced label options (#28322) * Added instance-level variables (#28115) * Add edit option for README.md (#28071) * Fix link to `Code` tab on wiki commits (#28041) * Allow to set explore page default sort (#27951) * Improve PR diff view on mobile (#27883) * Properly migrate automatic merge GitLab comments (#27873) * Display issue task list on project cards (#27865) * Add Index to pull_auto_merge.doer_id (#27811) * Fix display member unit in the menu bar if there are no hidden members in public org (#27795) * List all Debian package versions in `Packages` (#27786) * Allow pull requests Manually Merged option to be used by non-admins (#27780) * Only show diff file tree when more than one file changed (#27775) * Show placeholder email in privacy popup (#27770) * Revamp repo header (#27760) * Add `must-change-password` command line parameter (#27626) * Unify password changing and invalidate auth tokens (#27625) * Add border to file tree 'sub-items' and add padding to 'item-file' (#27593) * Add slow SQL query warning (#27545) * Pre-register OAuth application for tea (#27509) * Differentiate between `push` and `pull` `mirror sync in progress` (#27390) * Link to file from its history (#27354) * Add a shortcut to user's profile page to admin user details (#27299) * Doctor: delete action entries without existing user (#27292) * Show total TrackedTime on issue/pull/milestone lists (#26672) * Don't show the new pull request button when the page is not compare pull (#26431) * Add `Hide/Show all checks` button to commit status check (#26284) * Improvements of releases list and tags list (#25859) * PERFORMANCE * Fix package list performance (#30520) (#30616) * Add commit status summary table to reduce query from commit status table (#30223) * Refactor markup/csv: don't read all to memory (#29760) * Lazy load object format with command line and don't do it in OpenRepository (#29712) * Add cache for branch divergence on branch list page (#29577) * Do some performance optimization for issues list and view issue/pull (#29515) * Cache repository default branch commit status to reduce query on commit status table (#29444) * Use `crypto/sha256` (#29386) * Some performance optimization on the dashboard and issues page (#29010) * Add combined index for issue_user.uid and issue_id (#28080)
Replace deprecated `math/rand` functions (#30733) Suggested by logs in #30729 - Remove `math/rand.Seed` `rand.Seed is deprecated: As of Go 1.20 there is no reason to call Seed with a random value.` - Replace `math/rand.Read` `rand.Read is deprecated: For almost all use cases, [crypto/rand.Read] is more appropriate.` - Replace `math/rand` with `math/rand/v2`, which is available since Go 1.22
* SECURITY * Use go1.21.9 to include Golang security fix * Fix possible renderer security problem (#30136) (#30315) * BUGFIXES * Fix close file in the Upload func (#30262) (#30269) * Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250) * Fix missing 0 prefix of GPG key id (#30245) (#30247) * Include encoding in signature payload (#30174) (#30181) * Move from `max( id )` to `max( index )` for latest commit statuses (#30076) (#30155) * Load attachments for code comments (#30124) (#30126) * Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#30094) (#30120) * Fix possible data race on tests (#30093) (#30108) * Performance optimization for git push (#30104) * Fix duplicate migrated milestones (#30102) (#30105) * Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100) * Fix incorrect SVGs (#30087) * Fix create commit status (#30225) (#30340) * Performance optimization for git push (#30104) (#30354) * Fix misuse of unsupported global variables (#30402) * Fix to delete the cookie when AppSubURL is non-empty (#30375) (#30468) * Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30408) * Change the default maxPerPage for gitbucket (#30392) (#30471) * Check the token's owner and repository when registering a runner (#30406) (#30412) * Avoid losing token when updating mirror settings (#30429) (#30466) * Fix commit status cache which missed target_url (#30426) (#30445) * Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437) * Fix mirror error when mirror repo is empty (#30432) (#30467) * Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#29990) (#30447) * Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497) * DOCS * Update actions variables documents (#30394) (#30405) * MISC * Update katex to 0.16.10 (#30089) * Upgrade go-sqlite to v1.14.22 (#30462)
v1.21.10 * BUGFIXES * Fix Add/Remove WIP on pull request title failure (#29999) (#30066) * Fix misuse of `TxContext` (#30061) (#30062) * Respect DEFAULT_ORG_MEMBER_VISIBLE setting when adding creator to org (#30013) (#30035) * Escape paths for find file correctly (#30026) (#30031) * Remove duplicate option in admin screen and now-unused translation keys (#28492) (#30024) * Fix manual merge form and 404 page templates (#30000)
* PERFORMANCE * Only do counting when count_only=true for repo dashboard (#29884) (#29905) * Add cache for dashboard commit status (#29932) * ENHANCEMENT * Make runs-on support variable expression (#29468) (#29782) * Show Actions post step when it's running (#29926) (#29928) * BUGFIXES * Fix PR creation via API between branches of the same repo with head field namespaced (#26986) (#29857) * Fix and rewrite markup anchor processing (#29931) (#29946) * Notify reviewers added via CODEOWNERS (#29842) (#29902) * Fix template error when comment review doesn't exist (#29888) (#29889) * Fix user id column case (#29863) (#29867) * Make meilisearch do exact search for issues (#29740 & #29671) (#29846) * Fix the `for` attribute not pointing to the ID of the color picker (#29813) (#29815) * Fix codeowner detected diff base branch to mergebase (#29783) (#29807) * Fix Safari spinner rendering (#29801) (#29802) * Fix missing translation on milestones (#29785) (#29789) * Fix user router possible panic (#29751) (#29786) * Fix possible NPE in ToPullReviewList (#29759) (#29775) * Fix the wrong default value of ENABLE_OPENID_SIGNIN on docs (#29925) (#29927) * Solving the issue of UI disruption when the review is deleted without refreshing (#29951) (#29968) * Fix loadOneBranch panic (#29938) (#29939) * Fix invalid link of the commit status when ref is tagged (#29752) (#29908) * Editor error message misleading due to re-used key. (#29859) (#29876) * Fix double border and border-radius on empty action steps (#29845) (#29850) * Use `Temporal.PlainDate` for absolute dates (#29804) (#29808) * Fix incorrect package link method calls in templates (#29580) (#29764) * Fix the bug that the user may log out if GetUserByID returns unknown error (#29962) (#29964) * Performance improvements for pull request list page (#29900) (#29972) * Fix bugs in rerunning jobs (#29983) (#29955)
* SECURITY * Only use supported sort orders for "/explore/users" page (#29430) (#29443) * ENHANCEMENTS * Fix wrong line number in code search result (#29260) (#29623) * BUGFIXES * Use Get but not Post to get actions artifacts (#29734) (#29737) * Fix inconsistent rendering of block mathematical expressions (#29677) (#29711) * Fix rendering internal file links in org (#29669) (#29705) * Don't show AbortErrors on logout (#29639) (#29667) * Fix user-defined markup links targets (#29305) (#29666) * Fix incorrect rendering csv file when file size is larger than UI.CSV.MaxFileSize (#29653) (#29663) * Fix hidden test's failure (#29254) (#29662) * Add empty repo check-in DetectAndHandleSchedules (#29606) (#29659) * Fix 500 when deleting an account with an incorrect password or unsupported login type (#29579) (#29656) * Use strict protocol check when redirect (#29642) (#29644) * Avoid issue info panic (#29625) (#29632) * Avoid unexpected panic in graceful manager (#29629) (#29630) * Make "/user/login" page redirect if the current user has signed in (#29583) (#29599) * Fix workflow trigger event IssueChangeXXX bug (#29559) (#29565) * Fix incorrect cookie path for AppSubURL (#29534) (#29552) * Fix queue worker incorrectly stopped when there are still more items in the queue (#29532) (#29546) * Fix incorrect redirection when creating a PR fails (#29537) (#29543) * Fix incorrect subpath in links (#29535) (#29541) * Fix issue link does not support quotes (#29484) (#29487) (#29536) * Fix issue & comment history bugs (#29525) (#29527) * Set pre-step status to `skipped` if the job is skipped (#29489) (#29523) * Fix/Improve `processWindowErrorEvent` (#29407) (#29480) * Fix counter display number incorrectly displayed on the page (#29448) (#29478) * Fix workflow trigger event bugs (#29467) (#29475) * Fix URL calculation in the clone input box (#29470) (#29473) * The job should always run when `if` is `always()` (#29464) (#29469) * Fix template bug (#27581) (#29446) * Not trigger all jobs anymore when re-running the first job (#29439) (#29441) * Ignore empty repo for CreateRepository in action notifier (#29416) (#29424) * Fix incorrect tree path value for patch editor (#29377) (#29421) * Add missing database transaction for new issues (#29490) (#29607) * Fix 500 when pushing release to an empty repo (#29554) (#29564) * Fix incorrect relative/absolute URL usages (#29531) (#29547) * Fix wrong test usage of `AppSubURL` (#29459) (#29488) * Fix missed return (#29450) (#29453) * Fixing the issue when status checks per rule matches multiple actions (#29631) (#29655) * Improve contrast on blame timestamp, fix double border (#29482) (#29485)
* ENHANCEMENTS * Users with `read` permission of pull requests can be assigned too (#27263) (#29372) * BUGFIXES * Do not double close reader (#29354) (#29370) * Display friendly error message (#29105) (#29363) * Fix project counter in organization/individual profile (#28068) (#29361) * Fix validity of the FROM email address not being checked (#29347) (#29360) * Fix tarball/zipball download bug (#29342) (#29352) * DOCS * Docker Tag Information in Docs (#29047) (#29362) * MISC * Enforce maxlength in frontend (#29389) (#29396)
v1.21.6 * SECURITY * Fix XSS vulnerabilities (#29336) * Use general token signing secret (#29205) (#29325) * API * Refactor issue template parsing and fix API endpoint (#29069) (#29140) * Fix swift packages not resolving (#29095) (#29102) * ENHANCEMENTS * Refactor git version functions and check compatibility (#29155) (#29157) * Improve user experience for outdated comments (#29050) (#29086) * Hide code links on release page if user cannot read code (#29064) (#29066) * Wrap contained tags and branches again (#29021) (#29026) * Fix incorrect button CSS usages (#29015) (#29023) * Strip trailing newline in markdown code copy (#29019) (#29022) * BUGFIXES * Remove SSH workaround (#27893) (#29332) * Only log error when tag sync fails (#29295) (#29327) * Fix SSPI user creation (#28948) (#29323) * Improve the `issue_comment` workflow trigger event (#29277) (#29322) * Discard unread data of `git cat-file` (#29297) (#29310) * Fix error display when merging PRs (#29288) (#29309) * Prevent double use of `git cat-file` session. (#29298) (#29301) * Fix missing link on outgoing new release notifications (#29079) (#29300) * Fix debian InRelease Acquire-By-Hash newline (#29204) (#29299) * Always write proc-receive hook for all git versions (#29287) (#29291) * Do not show delete button when time tracker is disabled (#29257) (#29279) * Workaround to clean up old reviews on creating a new one (#28554) (#29264) * Fix bug when the linked account was disactived and list the linked accounts (#29263) * Do not use lower tag names to find releases/tags (#29261) (#29262) * Fix missed edit issues event for actions (#29237) (#29251) * Only delete scheduled workflows when needed (#29091) (#29235) * Make submit event code work with both jQuery event and native event (#29223) (#29234) * Fix push to create with capitalize repo name (#29090) (#29206) * Use ghost user if user was not found (#29161) (#29169) * Dont load Review if Comment is CommentTypeReviewRequest (#28551) (#29160) * Refactor parseSignatureFromCommitLine (#29054) (#29108) * Avoid showing unnecessary JS errors when there are elements with different origin on the page (#29081) (#29089) * Fix gitea-origin-url with default ports (#29085) (#29088) * Fix orgmode link resolving (#29024) (#29076) * Fix: Elasticsearch: Request Entity Too Large #28117 (#29062) (#29075) * Do not render empty comments (#29039) (#29049) * Avoid sending update/delete release notice when it is draft (#29008) (#29025) * DOCS * Rm outdated docs from some languages (#27530) (#29208) * MISC * Implement some action notifier functions (#29173) (#29308) * Fix gitea-action user avatar broken on edited menu (#29190) (#29307) * Disallow merge when required checked are missing (#29143) (#29268) * Convert visibility to number (#29226) (#29244) * Load outdated comments when (un)resolving conversation on PR timeline (#29203) (#29221) * Fix incorrect link to swift doc and swift package-registry login command (#29096) (#29103) * Fix typos in the documentation (#29048) (#29056) * Explained where create issue/PR template (#29035)
PreviousNext