v1.9.2

• BUGFIXES
  • Fix wrong sender when send slack webhook (#7918) (#7924)
  • Upload support text/plain; charset=utf8 (#7899)
  • Lfs/lock: round locked_at timestamp to second (#7872) (#7875)
  • Fix non existent milestone with 500 error (#7867) (#7873)
• SECURITY
  • Fix No PGP signature on 1.9.1 tag (#7874)
  • Release built with go 1.12.9 to fix security fixes in golang std lib, ref: https://groups.google.com/forum/#!msg/golang-announce/oeMaeUnkvVE/a49yvTLqAAAJ
• ENHANCEMENT
  • Fix pull creation with empty changes (#7920) (#7926)
• BUILD
  • Drone/docker: prepare multi-arch release + provide arm64 image (#7571) (#7884)

v1.9.1

• BREAKING
  • Add pagination for admin api get orgs and fix only list public orgs bug (#7742) (#7752)
• SECURITY
  • Be more strict with git arguments (#7715) (#7762)
  • Release built with go 1.12.8 to fix security fixes in golang std lib, ref: https://groups.google.com/forum/#!topic/golang-nuts/fCQWxqxP8aA
• BUGFIXES
  • Fix local runs of ssh-requiring integration tests (#7855) (#7857)
  • Fix hook problem (#7856) (#7754)
  • Use .ExpiredUnix.IsZero to display green color of forever valid gpg key (#7850) (#7846)
  • Do not fetch all refs (#7797) (#7837)
  • Fix duplicate call of webhook (#7824) (#7821)
  • Enable switching to a different source branch when PR already exists (#7823)
  • Rewrite existing repo units if setting is not included in api body (#7811)
  • Prevent Commit Status and Message From Overflowing On Branch Page (#7800) (#7808)
  • API: fix multiple bugs with statuses endpoints (Backport #7785) (#7807)
  • Fix Slack webhook fork message (1.9 release backport) (#7783)
  • Fix approvals counting (#7757) (#7777)
  • Fix rename failed when rewrite public keys (#7761) (#7769)
  • Fix dropTableColumns sqlite implementation (#7710) (#7765)
  • Fix repo_index_status lingering when deleting a repository (#7738)
  • Fix milestone completness calculation when migrating (#7725) (#7732)
  • Fixes indexed repos keeping outdated indexes when files grow too large (#7731)
  • Skip non-regular files (e.g. submodules) on repo indexing (#7717)
  • Improve branches list performance and fix protected branch icon when no-login (#7695) (#7704)
  • Correct wrong datetime format for git (#7689) (#7690)

v1.9.0

• BREAKING
  • Better logging (#6038) (#6095)
• SECURITY
  • Shadow the password on cache and session config on admin panel (#7300)
  • Fix markdown invoke sequence (#7513) (#7560)
  • Reserve .well-known username (#7638)
  • Do not leak secrets via timing side channel (#7364)
  • Ensure that decryption of cookie actually suceeds (#7363)
• FEATURE
  • Content API for Creating, Updating, Deleting Files (#6314)
  • Enable tls-alpn-01: Use certmanager provided TLSConfig for LetsEncrypt (#7229)
  • Add command to convert mysql database from utf8 to utf8mb4 (#7144)
  • Fixes #2738 - Adds the /git/tags API endpoint (#7138)
  • Compare branches, commits and tags with each other (#6991)
  • Show Pull Request button or status of latest PR in branch list (#6990)
  • Repository avatars (#6986)
  • Show git-notes (#6984)
  • Add commit statuses reports on pull request view (#6845)
  • Number of commits ahead/behind in branch overview (#6695)
  • Add CLI commands to manage LDAP authentication source (#6681)
  • Add support for MS Teams webhooks (#6632)
  • OAuth2 Grant UI (#6625)
  • Add SUBJECT_PREFIX mailer config option (#6605)
  • Include custom configuration file in dump (#6516)
  • Add API for manipulating Git hooks (#6436)
  • Improve migrations to support migrating milestones/labels/issues/comments/pullrequests (#6290)
  • Add option to blame files (#5721)
  • Implement Default Webhooks (#4299)
  • Telegram webhook (#4227)
• BUGFIXES
  • Send webhook after commit when creating issue with assignees (#7681) (#7684)
  • Upgrade macaron/captcha to fix random error problem (#7407) (#7683)
  • Move add to hook queue for created repo to outside xorm session. (#7682) (#7675)
  • Show protection symbol if needed on default branch (#7660) (#7668)
  • Hide delete/restore button on archived repos (#7660)
  • Fix bug on migrating milestone from github (#7665) (#7666)
  • Use flex to fix floating paginate (#7656) (#7662)
  • Change length of some repository's columns (#7652) (#7655)
  • Fix wrong email when use gitea as OAuth2 provider (#7640) (#7647)
  • Fix syntax highlight initialization (#7617) (#7626)
  • Fix bug create/edit wiki pages when code master branch protected (#7580) (#7623)
  • Fix panic on push at #7611 (#7615) (#7618)
  • Handle ErrUserProhibitLogin in http git (#7586, #7591) (#7590)
  • Fix color of split-diff view in dark theme (#7587) (#7589)
  • Fix file header overflow in file and blame views (#7562) (#7579)
  • Malformed URLs in API git/commits response (#7565) (#7567)
  • Fix empty commits now showing in repo overview (#7521) (#7563)
  • Fix repository's pull request count error (#7518) (#7524)
  • Remove duplicated webhook trigger (#7511) (#7516)
  • Handles all redirects for Web UI File CRUD (#7478) (#7507)
  • Fix regex for issues in commit messages (#7444) (#7466)
  • cmd/serv: actually exit after fatal errors (#7458) (#7460)
  • Fix an issue with some pages throwing 'not defined' js exceptions #7450 (#7453)
  • Fix Dropzone.js integration (#7445) (#7448)
  • Create class for inline positioned lists (#7439) (#7393)
  • Diff: Fix indentation on unhighlighted code (#7435) (#7443)
  • jQuery 3 (#7442) (#7425)
  • Only show "New Pull Request" button if repo allows pulls (#7426) (#7432)
  • Fix vendor references (#7394) (#7396)
  • Only return head: null if source branch was deleted (#6705) (#7376)
  • Add missing template variable on organisation settings (#7386) (#7385)
  • Fix post parameter on issue list which had unset assignee (#7380) (#7383)
  • Fix migration tests due to issue 7 being resolved (#7375) (#7381)
  • Correctly adjust mirror url (#6593)
  • Handle early git version's lack of get-url (#7065)
  • Fix icon position in issue view (#7354)
  • Cut timeline length with last element on issue view (#7355)
  • Fix mirror repository webhooks (#7366)
  • Fix api route for hooks (#7346)
  • Fix bug conflict between SyncReleasesWithTags and InsertReleases (#7337)
  • Fix pull view ui merge section (#7335)
  • Fix 7303 - remove unnessesary buttons on archived repos (#7326)
  • Fix topic bar to allow prefixes (#7325)
  • Fixes #7152 - Allow create/update/delete message to be empty, use default message (#7324)
  • Fixes #7238 - Annotated tag commit ID incorrect (#7321)
  • Dark theme fixes (#7319)
  • Gitea own dark codemirror theme (#7317)
  • Fixes #7292 - API File Contents bug (#7301)
  • Fix API link header (#7298)
  • Fix extra newlines when copying from diff in Firefox (#7288)
  • Make diff line-marker non-selectable (#7279)
  • Fix Submodule dection in subdir (#7275)
  • Fix error log when loading issues caused by a xorm bug (#7271)
  • Add .fa icon margin like .octicon (#7258)
  • Fix hljs unintenionally highlighting commit links (#7244)
  • Only check and config git on web subcommand but not others (#7236)
  • Fix migration panic when Head.User is not exist (#7226)
  • Only warn on errors in deleting LFS orphaned files during repo deletion (#7213)
  • Fix duplicated file on pull request conflicted files (#7211)
  • Allow colon between fixing word and issue (#7207)
  • Fix overflow issues in repo (#7190)
  • API error cleanup (#7186)
  • Add error for fork already existing (#7185)
  • Fixes diff on merged pull requests (#7171)
  • If milestone id is zero don't get it from database (#7169)
  • Fix pusher name via ssh push (#7167)
  • Fix database lock when use random repository fallback image (#7166)
  • Various fixes for issue mail notifications (#7165)
  • Allow archived repos to be (un)starred and (un)watched (#7163)
  • Fix GCArgs load from ini (#7156)
  • Detect noreply email address as user (#7133)
  • Avoid arbitrary format strings upon calling fail() function (#7112)
  • Validate External Tracker URL Format (#7089)
  • Repository avatar fallback configuration (#7087)
  • Fix #732: Add LFS objects to base repository on merging (#7082)
  • Install page - Handle invalid administrator username better (#7060)
  • Workaround for posting single comments in split diff view (#7052)
  • Fix possbile mysql invalid connnection error (#7051)
  • Fix charset was not saved after installation finished (#7048)
  • Handle insecure and ports in go get (#7041)
  • Avoid bad database state after failed migration (#7040)
  • Fix wrong init dependency on markup extensions (#7038)
  • Fix default for allowing new organization creation for new users (#7017)
  • Fix content download and /verify LFS handler expecting wrong content-type (#7015)
  • Fix missing repo description when migrating (#7000)
  • Fix LFS Locks over SSH (#6999)
  • Do not attempt to return blob on submodule (#6996)
  • Fix U2F for Chrome >= 74 (#6980)
  • Fix index produces problem when issues/pulls deleted (#6973)
  • Allow collaborators to view repo owned by private org (#6965)
  • Stop running hooks on pr merge (#6963)
  • Run hooks on merge/edit and cope with protected branches (#6961)
  • Webhook Logs show proper HTTP Method, and allow change HTTP method in form (#6953)
  • Stop colorizing log files by default (#6949)
  • Rotate serv.log, http.log and hook logs and stop stacktracing in these (#6935)
  • Fix plain text overflow line wrap (#6915)
  • Fix input size for dependency select (#6913)
  • Change drone token name to let users know to use oauth2 (#6912)
  • Fix syntax highlight in blame view #6895 (#6909)
  • Use AppURL for Oauth user link (#6894)
  • Fixes #6881 - API users search fix (#6882)
  • Fix 404 when send pull request some situation (#6871)
  • Enforce osusergo build tag for releases (#6862)
  • Fix 500 when reviewer is deleted with integration tests (#6856)
  • Fix v85.go (#6851)
  • Make dropTableColumns drop columns on sqlite and constraints on all (#6849)
  • Fix double-generation of scratch token (#6832) (#6833)
  • When mirroring we should set the remote to mirror (#6824)
  • Fix the v78 migration "Drop is_bare" on MSSQL #6707 (#6823)
  • Change verbose flag in dump command to avoid colliding with global version flag (#6822)
  • Fix #6813: Allow git.GetTree to take both commit and tree names (#6816)
  • Remove seen map from getLastCommitForPaths (#6807)
  • Show scrollbar only when needed (#6802)
  • Restore IsWindows variable assignment (#6722) (#6790)
  • Service worker js is a missing comma (#6788)
  • Fix team edit API panic (#6780)
  • Set user search base field optional in LDAP (simple auth) edit page (#6779)
  • Ignore already existing public keys after ldap sync (#6766)
  • Fix pulls broken when fork repository deleted (#6754)
  • Fix missing return (#6751)
  • Fix new team 500 (#6749)
  • OAuth2 token can be used in basic auth (#6747)
  • Fix org visibility bug when git cloning (#6743)
  • Fix bug when sort repos on org home page login with non-admin (#6741)
  • Stricter domain name pattern in email regex (#6739)
  • Fix admin template error (#6737)
  • Drop is_bare IDX only when it exists for MySQL and MariaDB (#6736)
  • UI: Detect and restore encoding and BOM in content (#6727)
  • Load issue attributes when editing an issue with API (#6723)
  • Fix team members API (#6714)
  • Unfortunately MemProvider Init does not actually Init properly (#6692)
  • Fix partial reversion of #6657 caused by #6314 (#6685)
  • Prevent creating empty sessions (#6677)
  • Fixes #6659 - Swagger schemes selection default to page's protocol (#6660)
  • Update highlight.js to 9.15.6 (#6658)
  • Properly escape on the redirect from the web editor (#6657)
  • Fix #6655 - Don't EscapePound .Link as it is already escaped (#6656)
  • Use ctx.metas for SHA hash links (#6645)
  • Fix wrong GPG expire date (#6643)
  • upgrade version of lib/pq to v1.1.0 (#6640)
  • Fix forking an empty repository (#6637)
  • Fix issuer of OTP URI should be URI-encoded. (#6634)
  • Return a UserList from /api/v1/admin/users (#6629)
  • Add json tags for oauth2 form (#6627)...

v1.9.0-rc2

• BUGFIXES
  • Fix regex for issues in commit messages (#7444) (#7466)
  • cmd/serv: actually exit after fatal errors (#7458) (#7460)
  • Fix an issue with some pages throwing 'not defined' js exceptions #7450 (#7453)
  • Fix Dropzone.js integration (#7445) (#7448)
  • Create class for inline positioned lists (#7439) (#7393)
  • Diff: Fix indentation on unhighlighted code (#7435) (#7443)
  • jQuery 3 (#7442) (#7425)
  • Only show "New Pull Request" button if repo allows pulls (#7426) (#7432)
  • Fix vendor references (#7394) (#7396)
  • Only return head: null if source branch was deleted (#6705) (#7376)
  • Add missing template variable on organisation settings (#7386) (#7385)
  • Fix post parameter on issue list which had unset assignee (#7380) (#7383)
  • Fix migration tests due to issue 7 being resolved (#7375) (#7381)

v1.8.3

• BUGFIXES
  • Always set userID on LFS authentication (#7224) (Part of #6993)
  • Fix LFS Locks over SSH (#6999) (#7223)
  • Fix duplicated file on pull request conflicted files (#7211) (#7214)
  • Detect noreply email address as user (#7133) (#7195)
  • Don't get milestone from DB if ID is zero (#7169) (#7174)
  • Allow archived repos to be (un)starred and (un)watched (#7163) (#7168)
  • Fix GCArgs load from ini (#7156) (#7157)

v1.8.2

• BUGFIXES
  • Fix possbile mysql invalid connnection error (#7051) (#7071)
  • Handle invalid administrator username on install page (#7060) (#7063)
  • Disable arm7 builds (#7037) (#7042)
  • Fix default for allowing new organization creation for new users (#7017) (#7034)
  • SearchRepositoryByName improvements and unification (#6897) (#7002)
  • Fix u2f registrationlist ToRegistrations() method (#6980) (#6982)
  • Allow collaborators to view repo owned by private org (#6965) (#6968)
  • Use AppURL for Oauth user link (#6894) (#6925)
  • Escape the commit message on issues update (#6901) (#6902)
  • Fix regression for API users search (#6882) (#6885)
  • Handle early git version's lack of get-url (#7065) (#7076)
  • Fix wrong init dependency on markup extensions (#7038) (#7074)

v1.8.1

• BUGFIXES
  • Fix 404 when sending pull requests in some situations (#6871) (#6873)
  • Enforce osusergo build tag for releases (#6862) (#6869)
  • Don't post process commit summary in templates (#6842) (#6868)
  • Fix 500 when reviewer is deleted (#6856) (#6860)
  • Fix v78 migration for MSSQL (#6823) (#6854)
  • Added tags pull step to drone config to show correct version hashes (#6836) (#6839)
  • Fix double-generation of scratch token (#6833) (#6835)
  • When mirroring we should set the remote to mirror (#6824) (#6834)
  • Show scrollbar only when needed (#6802) (#6803)
  • Service worker js is missing a comma (#6788) (#6795)
  • Set user search base field optional in LDAP (simple auth) edit page (#6779) (#6789)
  • Fix team edit API panic (#6780) (#6785)
  • Minor CSS cleanup for the navbar (#6553) (#6781)
  • Stricter domain name pattern in email regex (#6739) (#6768)
  • Detect and restore encoding and BOM in content (#6727) (#6765)
  • Fix org visibility bug when git cloning (#6743) (#6762)
  • OAuth2 token can be used in basic auth (#6747) (#6761)
  • Fix missing return (#6751) (#6756)
  • Fix sorting repos on org home page with non-admin login (#6741) (#6746)
  • Drop is_bare IDX only when it exists for MySQL and MariaDB (#6736) (#6744)
  • Fix team members API (#6714) (#6729)
  • Load issue attributes when editing an issue with API (#6723) (#6725)
  • Fix config ui error about cache ttl (#6861) (#6865)

v1.8.0

• SECURITY
  • Prevent remote code execution vulnerability with mirror repo URL settings (#6593) (#6594)
  • Resolve 2FA bypass on API (#6676) (#6674)
  • Prevent the creation of empty sessions for non-logged in users (#6690) (#6677)
• BREAKING
  • Add "ghost" and "notifications" to list of reserved user names. (#6208)
  • Change sqlite DB path default to data directory (#6198)
  • Adds MustChangePassword to user create/edit API (#6193)
  • Disable redirect for i18n (#5910)
  • Releases API paging (#5831)
  • Allow Macaron to be set to log through to gitea.log (#5667)
  • Don't close issues via commits on non-default branch (#5622)
• FEATURE
  • Add regenerate secret feature for oauth2 (#6291)
  • Expose issue stopwatch toggling via API (#5970)
  • Add other session providers (#5963)
  • Pull request conflict files detection (#5951)
  • Integrate OAuth2 Provider (#5378)
  • Implement "conversation lock" for issue comments (#5073)
  • Feature: Archive repos (#5009)
  • Discord Oauth2 support (#4476)
  • Allow to set organization visibility (public, internal, private) (#1763)
  • Added URL mapping for Release attachments like on github.com (#1707)
• ENHANCEMENT
  • Add support for client basic auth for exchanging access tokens (#6293)
  • Add ability to sort issues by due date (#6206) (#6244)
  • Style tweaks to issue selection (#6196)
  • Increase Username and Orgname MaxSize 35 -> 40 (#6178)
  • Coverage profile with multiple packages (#6167)
  • Split setting.go to multiple files (#6154)
  • Allow labels to contain emoji (#6063)
  • Disable git fsck for mirrored repos by default (#6018)
  • Add default time out for git operations (#6015)
  • Split setting.go as multiple files (#6014)
  • Make dashboard navbar and footer full-width (#6013)
  • Add lang specific font stacks for CJK (#6007)
  • Fix header menu misalignment (#6002)
  • Enhance closed PR and Issue status in the list (#6000)
  • Make navbar full width (#5998)
  • Add option to close issues via commit on a non master branch (#5992)
  • Support n as a line highlight prefix (#5987)
  • Search for org repos (#3031) (#5986)
  • Minor UI tweaks (#5980)
  • Use native golang SSH library but ssh-keygen when enable built-in SSH server to remove dependent on that command lines (#5976)
  • Dashboard tweaks (#5974)
  • Fixes for repo topic editor (#5971)
  • Display the branch name in the commit view (#5950)
  • handle milestone events for issues and PR (#5947)
  • Add label names as filter in issue search api (#5946)
  • Repo header tweaks (#5945)
  • Better support for long repo names (#5932)
  • Fix wrapping long code lines (#5927)
  • Change GPG Validation colors and remove inline CSS (#5404) (#5896)
  • Fix "pulls.blocked_by_approvals" text (#5879)
  • Rename reject to 'request changes' (#5858)
  • Move input fields to add members to a team and repos to a team (#5853)
  • Config option to disable automatic repo watching (#5852)
  • New Issue ?body= query (#5851)
  • Add API to list tags (#5850)
  • Pagination for git tree API (#5838)
  • Add InternalTokenURI to load InternalToken from an external file (#5812)
  • Allow markdown files to read from the LFS (#5787)
  • Add the ability to use multiple labels as filters (#5786)
  • Adjust log settings when a user is not found. (#5771)
  • Log IP of failed ssh connection (#5766)
  • Moved defaults in defaults.go to setting.go (#5764)
  • Make DB connect more robust (#5738)
  • Add Default Pull Request Title (#5735)
  • Refactor repo.isBare to repo.isEmpty #5629 (#5714)
  • Add flag to skip repository dumping (#5695)
  • Prioritize "readme.md" (#5691)
  • Improve "Fork button" for guests by showing a pop up asking them to log in before forking (#5690)
  • Allow for user specific themes (#5668)
  • Display branch name in delete branch confirmation modal. (#5654)
  • New API routes added (#5594)
  • Refactor notification for indexer (#5111)
  • Refactor mail notification (#5110)
  • Show email if the authenticated user owns the profile page being requested for (#4981)
  • Optimize pulls merging (#4921)
  • Sort Repositories widget by most recently updated (#3963) (#4599)
  • Allow markdown table to scroll (#4401)
  • Automatically clear stopwatch on merging a PR (#4327)
  • Add the Owner Name to differentiate when merging (#3807)
  • Add title attributes to all items in the repo list viewer (#6258) (#6650)
• BUGFIXES
  • Fix dropdown icon padding (#6651) (#6654)
  • Fix wrong GPG expire date (#6643) (#6644)
  • Fix forking an empty repository (#6637) (#6653)
  • Remove call to EscapePound .Link as it is already escaped (#6656) (#6666)
  • Properly escape on the redirect from the web editor (#6657) (#6667)
  • Allow resend of confirmation email when logged in (#6482) (#6486)
  • Fix mail notification when close/reopen issue (#6581) (#6588)
  • Change API commit summary to full message (#6591) (#6592)
  • Add option to disable refresh token invalidation (#6584) (#6587)
  • Fix bug user search API pagesize didn't obey ExplorePagingNum (#6579) (#6586)
  • Fix new repo alignment (#6583) (#6585)
  • Prevent server 500 on compare branches with no common history (#6555) (#6558)
  • Properly escape release attachment URL (#6512) (#6523)
  • Hacky fix for alignment of the create-organization dialog (#6455) (#6462)
  • Disable benchmarking during tag events on DroneIO (#6365) (#6366)
  • Make sure units of a team are returned (#6379) (#6381)
  • Don't Unescape redirect_to cookie value (#6399) (#6401)
  • Fix dump table name error and add some test for dump database (#6394) (#6402)
  • Fix migration v82 to ignore unsynced tags between database and git data; Add missing is_archived column on repository table (#6387) (#6403)
  • Display correct error for invalid mirror interval (#6414) (#6429)
  • Clean up ref name rules (#6437) (#6439)
  • Fix Hook & HookList in Swagger (#6432) (#6440)
  • Change order that PostProcess Processors are run (#6445) (#6447)
  • Clean up various use of escape/unescape functions for URL generation (#6334)
  • Return 409 when creating repo if it already exists. (#6330)
  • Add same changes from issues page to milestone->issues page (#6328)
  • Fix ParsePatch function to work with quoted diff --git strings (#6323)
  • Fix reported issue in repo description (#6306)
  • Use url.PathEscape to escape the branchname (#6304)
  • Add robots.txt as reserved username (#6272)
  • Replace linkRegex with xurls library (#6261)
  • Remove visitLinksForShortLinks features (#6257)
  • Add unit types to repo action URL to correctly show 404 when archived (#6247)
  • Check organization visibility before everything else (#6234) (#6235)
  • Prevent double-close of issues (#6233)
  • Override xorm type mapping for U2F counter (#6232)
  • Add isAdmin to user API response (#6231)
  • Update git vendor to fix wrong release commit id and add migrations (#6224)
  • Fix fork button (#6223)
  • Fix renames over redirects (#6216)
  • Fix display dashboard even if require to change password (#6214)
  • Create a repo redirect when transferring ownership (#6210) (#6211)
  • Fix issue update race condition (#6194)
  • Fix bug when migrate repository 500 when repo is existed (#6188)
  • Fix scrollbar always present on page body (#6177)
  • Fix bug when set indexer as db and add tests (#6173)
  • Modify linkRegex to require http|https (#6171)
  • Fix bug user could change private repository to public when force private enabled. (#6156)
  • Fix admin list user/org API (#6143)
  • Make repo creation for API similar to UI (#6142)
  • Make document body a flexbox (#6139)
  • Refactor issue indexer, add some testing and fix a bug (#6131)
  • Load Issue attributes for API call (#6122)
  • Fix bug when update owner team then visit team's repo return 404 (#6119)
  • Fix heatmap and repository menu display in Internet Explorer 9+ (#6117)
  • Show private organization for admin, fix #6111 (#6112)
  • Fix prohibit login check on authorization (#6106)
  • Move to ldap.v3 to fix #5928 (#6105)
  • Remove use MakeAssigneeList in webhooks to fix deadlock (#6102)
  • Allow display of LFS stored Readme.md on directory page (#6073) (#6099)
  • Make sure labels are actually returned (#6053)
  • Fix panic: template: repo/issue/list:210: unexpected "=" in operand (#6041)
  • After deleting a repo on admin panel, UI should remember the last sort type (#6033)
  • Default create repository on organisation on its dashboard (#6026)
  • Swagger: Remove spaces in MergePullRequestOption enum (#6016)
  • Fix metrics auth token detection (#6006)
  • Fix repo header issues (#5995)
  • Fix bug when deleting a linked account will removed all (#5989)
  • Make organization dropdown scrollable when using mouse wheel (#5988)
  • Fix empty ssh key importing in ldap (#5984)
  • Admin config page mailertype setting option update (#5973)
  • Fix redirect loop during forced password change (#5965)
  • Show user who created the repository instead of the organisation in action feed (#5948)
  • Remove all CommitStatus when a repo is deleted (#5940)
  • Fix ssh deploy and user key constraints (#1357) (#5939)
  • Fix log output (#5938)
  • Set PusherName and PusherID to owner on deploy key to fix pushing with deploy keys (#5935)
  • Fix compare button (#5929)
  • Fix bug when read public repo lfs file (#5912)
  • Only allow local login if password is non-empty (#5906)
  • Recover panic in orgmode.Render if bad orgfile (#4982) (#5903)
  • Provide better panic handling (#5902)
  • Respect value of REQUIRE_SIGNIN_VIEW (#5901)
  • Show a 404 not a 500 if a repo does not exist (#5900)
  • Ensure repo is loaded in mailer (Completely fix #5891) (#5895)
  • Ensure issue.Poster is loaded in mailIssueCommentToParticipants (#5891)
  • Correct footer height if screen-width is to small (fixes #5878) (#5889)
  • In gitea ser...

v1.8.0-rc3

• SECURITY
  • Prevent remote code execution vulnerability with mirror repo URL settings (#6593) (#6594)
• BUGFIXES
  • Allow resend of confirmation email when logged in (#6482) (#6486)
  • Fix mail notification when close/reopen issue (#6581) (#6588)
  • Change API commit summary to full message (#6591) (#6592)
  • Add option to disable refresh token invalidation (#6584) (#6587)
  • Fix bug user search API pagesize didn't obey ExplorePagingNum (#6579) (#6586)
  • Fix new repo alignment (#6583) (#6585)
  • Prevent server 500 on compare branches with no common history (#6555) (#6558)
  • Properly escape release attachment URL (#6512) (#6523)
  • Hacky fix for alignment of the create-organization dialog (#6455) (#6462)

v1.7.6

• SECURITY
  • Prevent remote code execution vulnerability with mirror repo URL settings (#6593) (#6595)
• BUGFIXES
  • Allow resend of confirmation email when logged in (#6482) (#6487)