v1.13.4

• SECURITY
  • Fix issue popups (#14898) (#14899) CVE-2021-28378
• BUGFIXES
  • Fix race in LFS ContentStore.Put(...) (#14895) (#14913)
  • Fix a couple of issues with a feeds (#14897) (#14903)
  • When transfering repository and database transaction failed, rollback the renames (#14864) (#14902)
  • Fix race in local storage (#14888) (#14901)
  • Fix 500 on pull view page if user is not loged in (#14885) (#14886)
• DOCS
  • Fix how lfs data path is set (#14855) (#14884)

v1.13.3

• BREAKING & SECURITY
  • Turn default hash password algorithm back to pbkdf2 from argon2 until we find a better one (#14673) (#14675)
• BUGFIXES
  • Fix paging of file commit logs (#14831) (#14879)
  • Print useful error if SQLite is used in settings but not supported (#14476) (#14874)
  • Fix display since time round (#14226) (#14873)
  • When Deleting Repository only explicitly close PRs whose base is not this repository (#14823) (#14842)
  • Set HCaptchaSiteKey on Link Account pages (#14834) (#14839)
  • Fix a couple of CommentAsPatch issues. (#14804) (#14820)
  • Disable broken OAuth2 providers at startup (#14802) (#14811)
  • Repo Transfer permission checks (#14792) (#14794)
  • Fix double alert in oauth2 application edit view (#14764) (#14768)
  • Fix broken spans in diffs (#14678) (#14683)
  • Prevent race in PersistableChannelUniqueQueue.Has (#14651) (#14676)
  • HasPreviousCommit causes recursive load of commits unnecessarily (#14598) (#14649)
  • Do not assume all 40 char strings are SHA1s (#14624) (#14648)
  • Allow org labels to be set with issue templates (#14593) (#14647)
  • Accept multiple SSH keys in single LDAP SSHPublicKey attribute (#13989) (#14607)
  • Fix bug about ListOptions and stars/watchers pagnation (#14556) (#14573)
  • Fix GPG key deletion during account deletion (#14561) (#14569)

v1.13.2

• SECURITY
  • Prevent panic on fuzzer provided string (#14405) (#14409)
  • Add secure/httpOnly attributes to the lang cookie (#14279) (#14280)
  • Use path not filepath in routers/editor (#14390) (#14396) CVE-2021-3382
• API
  • If release publisher is deleted use ghost user (#14375)
• BUGFIXES
  • Internal ssh server respect Ciphers, MACs and KeyExchanges settings (#14523) (#14530)
  • Set the name Mapper in migrations (#14526) (#14529)
  • Fix wiki preview (#14515)
  • Update code.gitea.io/sdk/gitea v0.13.1 -> v0.13.2 (#14497)
  • ChangeUserName: rename user files back on DB issue (#14447)
  • Fix lfs preview bug (#14428) (#14433)
  • Ensure timeout error is shown on u2f timeout (#14417) (#14431)
  • Fix Deadlock & Delete affected reactions on comment deletion (#14392) (#14425)
  • Check if label template exist first (#14384) (#14389)
  • Fix migration v141 (#14387) (#14388)
  • Use Request.URL.RequestURI() for fcgi (#14347)
  • Use ServerError provided by Context (#14333) (#14345)
  • Fix edit-label form init (#14337)
  • Fix mailIssueCommentBatch for pull request (#14252) (#14296)
  • Render links for commit hashes followed by comma (#14224) (#14227)
  • Send notifications for mentions in pulls, issues, (code-)comments (#14218) (#14221)
  • Fix avatar bugs (#14217) (#14220)
  • Ensure that schema search path is set with every connection on postgres (#14131) (#14216)
  • Fix dashboard issues labels filter bug (#14210) (#14214)
  • When visit /favicon.ico but the static file is not exist return 404 but not continue to handle the route (#14211) (#14213)
  • Fix branch selector on new issue page (#14194) (#14207)
  • Check for notExist on profile repository page (#14197) (#14203)

v1.13.1

Support Gitea development, we now have a shop for Swag

• SECURITY
  • Hide private participation in Orgs (#13994) (#14031)
  • Fix escaping issue in diff (#14153) (#14154)
• BUGFIXES
  • Fix bug of link query order on markdown render (#14156) (#14171)
  • Drop long repo topics during migration (#14152) (#14155)
  • Ensure that search term and page are not lost on adoption page-turn (#14133) (#14143)
  • Fix storage config implementation (#14091) (#14095)
  • Fix panic in BasicAuthDecode (#14046) (#14048)
  • Always wait for the cmd to finish (#14006) (#14039)
  • Don't use simpleMDE editor on mobile devices for 1.13 (#14029)
  • Fix incorrect review comment diffs (#14002) (#14011)
  • Trim the branch prefix from action.GetBranch (#13981) (#13986)
  • Ensure template renderer is available before storage handler (#13164) (#13982)
  • Whenever the password is updated ensure that the hash algorithm is too (#13966) (#13967)
  • Enforce setting HEAD in wiki to master (#13950) (#13961)
  • Fix feishu webhook caused by API changed (#13938)
  • Fix Quote Reply button on review diff (#13830) (#13898)
  • Fix Pull Merge when tag with same name as base branch exist (#13882) (#13896)
  • Fix mermaid chart size (#13865)
  • Fix branch/tag notifications in mirror sync (#13855) (#13862)
  • Fix crash in short link processor (#13839) (#13841)
  • Update font stack to bootstrap's latest (#13834) (#13837)
  • Make sure email recipients can see issue (#13820) (#13827)
  • Reply button is not removed when deleting a code review comment (#13824)
  • When reinitialising DBConfig reset the database use flags (#13796) (#13811)
• ENHANCEMENTS
  • Add emoji in label to project boards (#13978) (#14021)
  • Send webhook when tag is removed via Web UI (#14015) (#14019)
  • Use Process Manager to create own Context (#13792) (#13793)
• API
  • GetCombinedCommitStatusByRef always return json & swagger doc fixes (#14047)
  • Return original URL of Repositories (#13885) (#13886)

v1.13.0

Support Gitea development, we now have a shop for Swag

• SECURITY
  • Add Allow-/Block-List for Migrate & Mirrors (#13610) (#13776)
  • Prevent git operations for inactive users (#13527) (#13536)
  • Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13524)
  • Mitigate Security vulnerability in the git hook feature (#13058)
  • Disable DSA ssh keys by default (#13056)
  • Set TLS minimum version to 1.2 (#12689)
  • Use argon as default password hash algorithm (#12688)
• BREAKING
  • Set RUN_MODE prod by default (#13765) (#13767)
  • Don't replace underscores in auto-generated IDs in goldmark (#12805)
  • Add Primary Key to Topic and RepoTopic tables (#12639)
  • Disable password complexity check default (#12557)
  • Change PIDFile default from /var/run/gitea.pid to /run/gitea.pid (#12500)
  • Add extension Support to Attachments (allow all types for releases) (#12465)
  • Remove IE11 Support (#11470)
• FEATURES
  • Adopt repositories (#12920)
  • Check passwords against HaveIBeenPwned (#12716)
  • Gitea 2 Gitea migration (#12657)
  • Support storing Avatars in minio (#12516)
  • Allow addition of gpg keyring with multiple keys (#12487)
  • Add email notify for new release (#12463)
  • Add Access-Control-Expose-Headers (#12446)
  • UserProfile Page: Render Description (#12415)
  • Add command to recreate tables (#12407)
  • Add mermaid JS renderer (#12334)
  • Add ssh certificate support (#12281)
  • Add spent time to referenced issue in commit message (#12220)
  • Initial support for push options (#12169)
  • Provide option to unlink a fork (#11858)
  • Show exact tag for commit on diff view (#11846)
  • Pause, Resume, Release&Reopen, Add and Remove Logging from command line (#11777)
  • Issue templates directory (#11450)
  • Add a storage layer for attachments (#11387)
  • Add hide activity option (#11353)
  • Add push commits history comment on PR time-line (#11167)
  • Support elastic search for code search (#10273)
  • Kanban board (#8346)
• API
  • If User is Admin, show 500 error message on PROD mode too (#13115)
  • Add Timestamp to Tag list API (#13026)
  • Return sample message for login error in api context (#12994)
  • Add IsTemplate option in create repo ui and api (#12942)
  • GetReleaseByID return 404 if not found (#12933)
  • Get release by tags endpoint (#12932)
  • NotificationSubject show Issue/Pull State (#12901)
  • Expose its limitation settings (#12714)
  • Add Created & Updated to Milestone (#12662)
  • Milestone endpoints accept names too (#12649)
  • Expose Attachment Settings in the API (#12514)
  • Add Issue and Repo info to StopWatch (#12458)
  • Add cron running API (#12421)
  • Add Update Pull HeadBranch Function (#12419)
  • Add TOTP header to Swagger Documentation (#12402)
  • Delete Token accept names too (#12366)
  • Add name filter for GetMilestoneList (#12336)
  • Fixed count of filtered issues when api request. (#12275)
  • Do not override API issue pagination with UI settings (#12068)
  • Expose useful General Repo settings settings (#11758)
  • Return error when trying to create Mirrors but Mirrors are globally disabled (#11757)
  • Provide diff and patch API endpoints (#11751)
  • Allow to create closed milestones (#11745)
  • Add language Statistics endpoint (#11737)
  • Add Endpoint to get GetGeneralUI Settings (#11735) & (#11854)
  • Issue/Pull expose IsLocked Property on API (#11708)
  • Add endpoint for Branch Creation (#11607)
  • Add pagination headers on endpoints that support total count from database (#11145)
• BUGFIXES
  • Fix bogus http requests on diffs (#13760) (#13761)
  • Show 'owner' tag for real owner (#13689) (#13743)
  • Validate email before inserting/updating (#13475) (#13666)
  • Fix issue/pull request list assignee filter (#13647) (#13651)
  • Gitlab migration support for subdirectories (#13563) (#13591)
  • Fix logic for preferred license setting (#13550) (#13557)
  • Add missed sync branch/tag webhook (#13538) (#13556)
  • Migration won't fail on non-migrated reactions (#13507)
  • Fix Italian language file parsing error (#13156)
  • Show outdated comments in pull request (#13148) (#13162)
  • Fix parsing of pre-release git version (#13169) (#13172)
  • Fix diff skipping lines (#13154) (#13155)
  • When handling errors in storageHandler check underlying error (#13178) (#13193)
  • Fix size and clickable area on file table back link (#13205) (#13207)
  • Add better error checking for inline html diff code (#13251)
  • Fix initial commit page & binary munching problem (#13249) (#13258)
  • Fix migrations from remote Gitea instances when configuration not set (#13229) (#13273)
  • Store task errors following migrations and display them (#13246) (#13287)
  • Fix bug isEnd detection on getIssues/getPullRequests (#13299) (#13301)
  • When the git ref is unable to be found return broken pr (#13218) (#13303)
  • Ensure topics added using the API are added to the repository (#13285) (#13302)
  • Fix avatar autogeneration (#13233) (#13282)
  • Add migrated pulls to pull request task queue (#13331) (#13334)
  • Issue comment reactions should also check pull type on API (#13349) (#13350)
  • Fix links to repositories in /user/setting/repos (#13360) (#13362)
  • Remove obsolete change of email on profile page (#13341) (#13347)
  • Fix scrolling to resolved comment anchors (#13343) (#13371)
  • Storage configuration support [storage] (#13314) (#13379)
  • When creating line diffs do not split within an html entity (#13357) (#13375) (#13425) (#13427)
  • Fix reactions on code comments (#13390) (#13401)
  • Add missing full names when DEFAULT_SHOW_FULL_NAME is enabled (#13424)
  • Replies to outdated code comments should also be outdated (#13217) (#13433)
  • Fix panic bug in handling multiple references in commit (#13486) (#13487)
  • Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13491)
  • Show original author's reviews on pull summary box (#13127)
  • Update golangci-lint to version 1.31.0 (#13102)
  • Fix line break for MS teams webhook (#13081)
  • Fix Issue & Pull Request comment headers on mobile (#13039)
  • Avoid setting the CONN_STR in queues unless it is meant to be set (#13025)
  • Remove code-view class from diff view (#13011)
  • Fix the color of PR comment hyperlinks. (#13009)
  • (Re)Load issue labels when changing them (#13007)
  • Fix Media links in org files not liked to media files (#12997)
  • Always return a list from GetCommitsFromIDs (#12981)
  • Only set the user password if the password field would have been shown (#12980)
  • Fix admin/config page (#12979)
  • Changed width of commit signature avatar (#12961)
  • Completely quote AppPath and CustomConf paths (#12955)
  • Fix handling of migration errors (#12928)
  • Fix anonymous GL migration (#12862)
  • Fix git open close bug (#12834)
  • Fix markdown meta parsing (#12817)
  • Add default storage configurations (#12813)
  • Show PR settings on empty repos (#12808)
  • Disable watch and star if not signed in (#12807)
  • Whilst changing the character set to utf8mb4 we should set ROW_FORMAT=dynamic too (#12804)
  • Set opengraph attributes on org pages (#12803)
  • Return error when creating gitlabdownloader failed (#12790)
  • Add migration for password algorithm change (#12784)
  • Compare SSH_DOMAIN when parsing submodule URLs (#12753)
  • Fix editor.commit_empty_file_text locale string (#12744)
  • Fix wrong poster message for code comment on Pull view (#11721)
  • Escape failed highlighted files (#12685)
  • Ensure that all migration requests are cancellable (#12669)
  • Ensure RepoPath is lowercased in gitea serv (#12668)
  • Do not disable commit changes button on repost (#12644)
  • Dark theme for line numbers in blame view (#12632)
  • Fix message when deleting last owner from an organization (#12628)
  • Use shellquote to unpack arguments to gitea serv (#12624)
  • Fix signing.wont_sign.%!s() if Require Signing commits but not signed in. (#12581)
  • Set utf8mb4 as the default charset on MySQL if CHARSET is unset (#12563)
  • Set context for running CreateArchive to that of the request (#12555)
  • Prevent redirect back to /user/events (#12462)
  • Re-attempt to delete temporary upload if the file is locked by another process (#12447)
  • Mirror System Notice reports are too frequent (#12438)
  • Do not show arrows on comment diffs on pull comment pages (#12434)
  • Fix milestone links (#12405)
  • Increase size of the language column in language_stat (#12396)
  • Use transaction in V102 migration (#12395)
  • Only use --exclude on name-rev with git >= 2.13 (#12347)
  • Add action feed for new release (#12324)
  • Set NoAutoTime when updating is_archived (#12266)
  • Support Force-update in Mirror and improve Tracing in mirror (#12242)
  • Avoid sending "0 new commits" webhooks (#12212)
  • Fix U2F button icon (#12167)
  • models/repo_sign.go: break out of loops (#12159)
  • Ensure that git commit tree continues properly over the page (#12142)
  • Rewrite GitGraph.js (#12137)
  • Fix repo API listing stability (#12057)
  • Add team support for review request (#12039)
  • Fix 500 error on repos with no tags (#11870)
  • Fix nil pointer in default issue mail template (#11862)
  • Fix commit search in all branches (#11849)
  • Don't consider tag refs as valid for branch name (#11847)
  • Don't add same line code comment box twice (#11837)
  • Fix visibility of forked public repos from private orgs (#11717)
  • Fix chardet test and add ordering option (#11621)
  • Fix number of files, total additions, and deletions on Diff pages (#11614)
  • Properly handle and return empty string for dangling commits in GetBranchName (#11587)
  • Include query in sign in redirect (#11579)
  • Fix Enter not working in SimpleMDE...

v1.12.6

• SECURITY
  • Prevent git operations for inactive users (#13527) (#13537)
  • Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13525)
• BUGFIXES
  • API should only return Json (#13511) (#13564)
  • Fix before and since query arguments at API (#13559) (#13560)
  • Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13492)
  • Fix link detection in repository description with tailing '_' (#13407) (#13408)
  • Remove obsolete change of email on profile page (#13341) (#13348)
  • Fix permission check on get Reactions API endpoints (#13344) (#13346)
  • Add migrated pulls to pull request task queue (#13331) (#13335)
  • API deny wrong pull creation options (#13308) (#13327)
  • Fix initial commit page & binary munching problem (#13249) (#13259)
  • Fix diff parsing (#13157) (#13136) (#13139)
  • Return error 404 not 500 from API if team does not exist (#13118) (#13119)
  • Prohibit automatic downgrades (#13108) (#13111)
  • Fix GitLab Migration Option AuthToken (#13101)
  • GitLab Label Color Normalizer (#12793) (#13100)
  • Log the underlying panic in runMigrateTask (#13096) (#13098)
  • Fix attachments list in edit comment (#13036) (#13097)
  • Fix deadlock when deleting team user (#13093)
  • Fix error create comment on outdated file (#13041) (#13042)
  • Fix repository create/delete event webhooks (#13008) (#13027)
  • Fix internal server error on README in submodule (#13006) (#13016)

v1.13.0-rc2

• ENHANCEMENTS
  • Return the full rejection message and errors in flash errors (#13221) (#13237)
  • Remove PAM from auth dropdown when unavailable (#13276) (#13281)
• BUGFIXES
  • Fix Italian language file parsing error (#13156)
  • Show outdated comments in pull request (#13148) (#13162)
  • Fix parsing of pre-release git version (#13169) (#13172)
  • Fix diff skipping lines (#13154) (#13155)
  • When handling errors in storageHandler check underlying error (#13178) (#13193)
  • Fix size and clickable area on file table back link (#13205) (#13207)
  • Add better error checking for inline html diff code (#13251)
  • Fix initial commit page & binary munching problem (#13249) (#13258)
  • Fix migrations from remote Gitea instances when configuration not set (#13229) (#13273)
  • Store task errors following migrations and display them (#13246) (#13287)
  • Fix bug isEnd detection on getIssues/getPullRequests (#13299) (#13301)
  • When the git ref is unable to be found return broken pr (#13218) (#13303)
  • Ensure topics added using the API are added to the repository (#13285) (#13302)
  • Fix avatar autogeneration (#13233) (#13282)
  • Add migrated pulls to pull request task queue (#13331) (#13334)
  • Issue comment reactions should also check pull type on API (#13349) (#13350)
  • Fix links to repositories in /user/setting/repos (#13360) (#13362)
  • Remove obsolete change of email on profile page (#13341) (#13347)
  • Fix scrolling to resolved comment anchors (#13343) (#13371)
  • Storage configuration support [storage] (#13314) (#13379)
  • When creating line diffs do not split within an html entity (#13357) (#13375) (#13425) (#13427)
  • Fix reactions on code comments (#13390) (#13401)
  • Add missing full names when DEFAULT_SHOW_FULL_NAME is enabled (#13424)
  • Replies to outdated code comments should also be outdated (#13217) (#13433)
  • Fix panic bug in handling multiple references in commit (#13486) (#13487)
  • Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13491)

v1.13.0-rc1

• SECURITY
  • Mitigate Security vulnerability in the git hook feature (#13058)
  • Disable DSA ssh keys by default (#13056)
  • Set TLS minimum version to 1.2 (#12689)
  • Use argon as default password hash algorithm (#12688)
• BREAKING
  • Don't replace underscores in auto-generated IDs in goldmark (#12805)
  • Add Primary Key to Topic and RepoTopic tables (#12639)
  • Disable password complexity check default (#12557)
  • Change PIDFile default from /var/run/gitea.pid to /run/gitea.pid (#12500)
  • Add extension Support to Attachments (allow all types for releases) (#12465)
  • Remove IE11 Support (#11470)
• FEATURES
  • Adopt repositories (#12920)
  • Check passwords against HaveIBeenPwned (#12716)
  • Gitea 2 Gitea migration (#12657)
  • Support storing Avatars in minio (#12516)
  • Allow addition of gpg keyring with multiple keys (#12487)
  • Add email notify for new release (#12463)
  • Add Access-Control-Expose-Headers (#12446)
  • UserProfile Page: Render Description (#12415)
  • Add command to recreate tables (#12407)
  • Add mermaid JS renderer (#12334)
  • Add ssh certificate support (#12281)
  • Add spent time to referenced issue in commit message (#12220)
  • Initial support for push options (#12169)
  • Provide option to unlink a fork (#11858)
  • Show exact tag for commit on diff view (#11846)
  • Pause, Resume, Release&Reopen, Add and Remove Logging from command line (#11777)
  • Issue templates directory (#11450)
  • Add a storage layer for attachments (#11387)
  • Add hide activity option (#11353)
  • Add push commits history comment on PR time-line (#11167)
  • Support elastic search for code search (#10273)
  • Kanban board (#8346)
• API
  • If User is Admin, show 500 error message on PROD mode too (#13115)
  • Add Timestamp to Tag list API (#13026)
  • Return sample message for login error in api context (#12994)
  • Add IsTemplate option in create repo ui and api (#12942)
  • GetReleaseByID return 404 if not found (#12933)
  • Get release by tags endpoint (#12932)
  • NotificationSubject show Issue/Pull State (#12901)
  • Expose its limitation settings (#12714)
  • Add Created & Updated to Milestone (#12662)
  • Milestone endpoints accept names too (#12649)
  • Expose Attachment Settings in the API (#12514)
  • Add Issue and Repo info to StopWatch (#12458)
  • Add cron running API (#12421)
  • Add Update Pull HeadBranch Function (#12419)
  • Add TOTP header to Swagger Documentation (#12402)
  • Delete Token accept names too (#12366)
  • Add name filter for GetMilestoneList (#12336)
  • Fixed count of filtered issues when api request. (#12275)
  • Do not override API issue pagination with UI settings (#12068)
  • Expose useful General Repo settings settings (#11758)
  • Return error when trying to create Mirrors but Mirrors are globally disabled (#11757)
  • Provide diff and patch API endpoints (#11751)
  • Allow to create closed milestones (#11745)
  • Add language Statistics endpoint (#11737)
  • Add Endpoint to get GetGeneralUI Settings (#11735) & (#11854)
  • Issue/Pull expose IsLocked Property on API (#11708)
  • Add endpoint for Branch Creation (#11607)
  • Add pagination headers on endpoints that support total count from database (#11145)
• BUGFIXES
  • Show original author's reviews on pull summary box (#13127)
  • Update golangci-lint to version 1.31.0 (#13102)
  • Fix line break for MS teams webhook (#13081)
  • Fix Issue & Pull Request comment headers on mobile (#13039)
  • Avoid setting the CONN_STR in queues unless it is meant to be set (#13025)
  • Remove code-view class from diff view (#13011)
  • Fix the color of PR comment hyperlinks. (#13009)
  • (Re)Load issue labels when changing them (#13007)
  • Fix Media links in org files not liked to media files (#12997)
  • Always return a list from GetCommitsFromIDs (#12981)
  • Only set the user password if the password field would have been shown (#12980)
  • Fix admin/config page (#12979)
  • Changed width of commit signature avatar (#12961)
  • Completely quote AppPath and CustomConf paths (#12955)
  • Fix handling of migration errors (#12928)
  • Fix anonymous GL migration (#12862)
  • Fix git open close bug (#12834)
  • Fix markdown meta parsing (#12817)
  • Add default storage configurations (#12813)
  • Show PR settings on empty repos (#12808)
  • Disable watch and star if not signed in (#12807)
  • Whilst changing the character set to utf8mb4 we should set ROW_FORMAT=dynamic too (#12804)
  • Set opengraph attributes on org pages (#12803)
  • Return error when creating gitlabdownloader failed (#12790)
  • Add migration for password algorithm change (#12784)
  • Compare SSH_DOMAIN when parsing submodule URLs (#12753)
  • Fix editor.commit_empty_file_text locale string (#12744)
  • Fix wrong poster message for code comment on Pull view (#11721)
  • Escape failed highlighted files (#12685)
  • Ensure that all migration requests are cancellable (#12669)
  • Ensure RepoPath is lowercased in gitea serv (#12668)
  • Do not disable commit changes button on repost (#12644)
  • Dark theme for line numbers in blame view (#12632)
  • Fix message when deleting last owner from an organization (#12628)
  • Use shellquote to unpack arguments to gitea serv (#12624)
  • Fix signing.wont_sign.%!s() if Require Signing commits but not signed in. (#12581)
  • Set utf8mb4 as the default charset on MySQL if CHARSET is unset (#12563)
  • Set context for running CreateArchive to that of the request (#12555)
  • Prevent redirect back to /user/events (#12462)
  • Re-attempt to delete temporary upload if the file is locked by another process (#12447)
  • Mirror System Notice reports are too frequent (#12438)
  • Do not show arrows on comment diffs on pull comment pages (#12434)
  • Fix milestone links (#12405)
  • Increase size of the language column in language_stat (#12396)
  • Use transaction in V102 migration (#12395)
  • Only use --exclude on name-rev with git >= 2.13 (#12347)
  • Add action feed for new release (#12324)
  • Set NoAutoTime when updating is_archived (#12266)
  • Support Force-update in Mirror and improve Tracing in mirror (#12242)
  • Avoid sending "0 new commits" webhooks (#12212)
  • Fix U2F button icon (#12167)
  • models/repo_sign.go: break out of loops (#12159)
  • Ensure that git commit tree continues properly over the page (#12142)
  • Rewrite GitGraph.js (#12137)
  • Fix repo API listing stability (#12057)
  • Add team support for review request (#12039)
  • Fix 500 error on repos with no tags (#11870)
  • Fix nil pointer in default issue mail template (#11862)
  • Fix commit search in all branches (#11849)
  • Don't consider tag refs as valid for branch name (#11847)
  • Don't add same line code comment box twice (#11837)
  • Fix visibility of forked public repos from private orgs (#11717)
  • Fix chardet test and add ordering option (#11621)
  • Fix number of files, total additions, and deletions on Diff pages (#11614)
  • Properly handle and return empty string for dangling commits in GetBranchName (#11587)
  • Include query in sign in redirect (#11579)
  • Fix Enter not working in SimpleMDE (#11564)
  • Fix bug about can't skip commits base on base branch (#11555)
• ENHANCEMENTS
  • Add HostCertificate to sshd_config in Docker image (#13143)
  • Save TimeStamps for Star, Label, Follow, Watch and Collaboration to Database (#13124)
  • Improve error feedback for duplicate deploy keys (#13112)
  • Set appropriate autocomplete attributes on password fields (#13078)
  • Adding visual cue for "Limited" & "Private" organizations. (#13040)
  • Fix Pull Request merge buttons on mobile (#13035)
  • Gitea serv, hooks, manager and the like should always display Fatals (#13032)
  • CSS tweaks to warning/error segments and misc fixes (#13024)
  • Fix formatting of branches ahead-behind on narrow windows (#12989)
  • Add config option to make create-on-push repositories public by default (#12936)
  • Disable migration items when mirror is selected (#12918)
  • Add the checkbox quick button to the comment tool bar also (#12885)
  • Support GH enterprise (#12863)
  • Simplify CheckUnitUser logic (#12854)
  • Fix background of signed-commits on arc-green of timeline commits (#12837)
  • Move git update-server-info to hooks (#12826)
  • Add ui style for "Open a blank issue" button (#12824)
  • Use a simple format for the big number on ui (#12822)
  • Make SVG size argument optional (#12814)
  • Add placeholder text for bio profile text form (#12792)
  • Set language via AJAX (#12785)
  • Show git-pull-request icon for closed pull request (#12742)
  • Migrate version parsing library to hashicorp/go-version (#12719)
  • Only use async pre-empt hack if go < 1.15 (#12718)
  • Inform user about meaning of an hourglass on reviews (#12713)
  • Add a migrate service type switch page (#12697)
  • Migrations: Gitlab Add Reactions Support for Issues & MergeRequests (#12695)
  • Remove duplicate logic in initListSubmits (#12660)
  • Set avatar image dimensions (#12654)
  • Rename models.ProtectedBranchRepoID/PRID to models.EnvRepoID/PRID and ensure EnvPusherEmail is set (#12646)
  • Set setting.AppURL as GITEA_ROOT_URL environment variable during pushes (#12752)
  • Add postgres schema to the search_path on database connection (#12634)
  • Git migration UX improvements (#12619)
  • Add link to home page on swagger ui (#12601)
  • hCaptcha Support (#12594)
  • OpenGraph: use repo avatar if exist (#12586)
  • Reaction picker display improvements (#12576)
  • Fix emoji replacements, make emoji images consistent (#12567)
  • Increase clickable area on files table links (#12553)
  • Set z-index for sticky diff box lower (#12537)
  • Report error if API merge is not allowed (#12528)
  • LFS support to be stored on minio (#12518)
  • Show 2FA info on Admin Pannel: Users...

v1.12.5

• BUGFIXES
  • Allow U2F with default settings for gitea in subpath (#12990) (#13001)
  • Prevent empty div when editing comment (#12404) (#12991)
  • On mirror update also update address in DB (#12964) (#12967)
  • Allow extended config on cron settings (#12939) (#12943)
  • Open transaction when adding Avatar email-hash pairs to the DB (#12577) (#12940)
  • Fix internal server error from ListUserOrgs API (#12910) (#12915)
  • Update only the repository columns that need updating (#12900) (#12912)
  • Fix panic when adding long comment (#12892) (#12894)
  • Add size limit for content of comment on action ui (#12881) (#12890)
  • Convert User expose ID each time (#12855) (#12883)
  • Support slashes in release tags (#12864) (#12882)
  • Add missing information to CreateRepo API endpoint (#12848) (#12867)
  • On Migration respect old DefaultBranch (#12843) (#12858)
  • Fix notifications page links (#12838) (#12853)
  • Stop cloning unnecessarily on PR update (#12839) (#12852)
  • Escape more things that are passed through str2html (#12622) (#12850)
  • Remove double escape on labels addition in comments (#12809) (#12810)
  • Fix "only mail on mention" bug (#12775) (#12789)
  • Fix yet another bug with diff file names (#12771) (#12776)
  • RepoInit Respect AlternateDefaultBranch (#12746) (#12751)
  • Fix Avatar Resize (resize algo NearestNeighbor -> Bilinear) (#12745) (#12750)
• ENHANCEMENTS
  • gitea dump: include version & Check InstallLock (#12760) (#12762)

v1.12.4

• SECURITY
  • Escape provider name in oauth2 provider redirect (#12648) (#12650)
  • Escape Email on password reset page (#12610) (#12612)
  • When reading expired sessions - expire them (#12686) (#12690)
• ENHANCEMENTS
  • StaticRootPath configurable at compile time (#12371) (#12652)
• BUGFIXES
  • Fix to show an issue that is related to a deleted issue (#12651) (#12692)
  • Expire time acknowledged for cache (#12605) (#12611)
  • Fix diff path unquoting (#12554) (#12575)
  • Improve HTML escaping helper (#12562)
  • models: break out of loop (#12386) (#12561)
  • Default empty merger list to those with write permissions (#12535) (#12560)
  • Skip SSPI authentication attempts for /api/internal (#12556) (#12559)
  • Prevent NPE on commenting on lines with invalidated comments (#12549) (#12550)
  • Remove hardcoded ES indexername (#12521) (#12526)
  • Fix bug preventing transfer to private organization (#12497) (#12501)
  • Keys should not verify revoked email addresses (#12486) (#12495)
  • Do not add prefix on http/https submodule links (#12477) (#12479)
  • Fix ignored login on compare (#12476) (#12478)
  • Fix incorrect error logging in Stats indexer and OAuth2 (#12387) (#12422)
  • Upgrade google/go-github to v32.1.0 (#12361) (#12390)
  • Render emoji's of Commit message on feed-page (#12373)
  • Fix handling of diff on unrelated branches when Git 2.28 used (#12370)