v1.19.1

• BREAKING
  • Rename actions unit to repo.actions and add docs for it (#23733) (#23881)
• ENHANCEMENTS
  • Add card type to org/user level project on creation, edit and view (#24043) (#24066)
  • Refactor commit status for Actions jobs (#23786) (#24060)
  • Show errors for KaTeX and mermaid on the preview tab (#24009) (#24019)
  • Show protected branch rule names again (#23907) (#24018)
  • Adjust sticky PR header to cover background (#23956) (#23999)
  • Discolor pull request tab labels (#23950) (#23987)
  • Treat PRs with agit flow as fork PRs when triggering actions. (#23884) (#23967)
  • Left-align review comments (#23937)
  • Fix image border-radius (#23886) (#23930)
  • Scroll collapsed file into view (#23702) (#23929)
  • Fix code view (diff) broken layout (#23096) (#23918)
  • Org pages style fixes (#23901) (#23914)
  • Fix user profile description rendering (#23882) (#23902)
  • Fix review box viewport overflow issue (#23800) (#23898)
  • Prefill input values in OAuth settings as intended (#23829) (#23871)
  • CSS color tweaks (#23828) (#23842)
  • Fix incorrect visibility dropdown list in add/edit user page (#23804) (#23833)
  • Add CSS rules for basic colored labels (#23774) (#23777)
  • Add creation time in tag list page (#23693) (#23773)
  • Fix br display for packages curls (#23737) (#23764)
  • Fix issue due date edit toggle bug (#23723) (#23758)
  • Improve commit graph page UI alignment (#23751) (#23754)
  • Use GitHub Actions compatible globbing for branches, tag, path filter (#22804) (#23740)
  • Redirect to project again after editing it (#23326) (#23739)
  • Remove row clicking from notification table (#22695) (#23706)
  • Remove conflicting CSS rules on notifications, improve notifications table (#23565) (#23621)
  • Fix diff tree height and adjust target file style (#23616)
• BUGFIXES
  • Improve error logging for LFS (#24072) (#24082)
  • Fix custom mailer template on Windows platform (#24081)
  • Update the value of diffEnd when clicking the Show More button in the DiffFileTree (#24069) (#24078)
  • Make label templates have consistent behavior and priority (#23749)
  • Fix accidental overwriting of LDAP team memberships (#24050) (#24065)
  • Fix branch protection priority (#24045) (#24061)
  • Use actions job link as commit status URL instead of run link (#24023) (#24032)
  • Add actions support to package auth verification (#23729) (#24028)
  • Fix protected branch for API (#24013) (#24027)
  • Do not escape space between PyPI repository URL and package name… (#23981) (#24008)
  • Fix redirect bug when creating issue from a project (#23971) (#23997)
  • Set ref to fully-formed of the tag when trigger event is release (#23944) (#23989)
  • Use Get/Set instead of Rename when regenerating session ID (#23975) (#23983)
  • Ensure RSS icon is present on all repo tabs (#23904) (#23973)
  • Remove Repository.getFilesChanged to fix Actions paths and paths-ignore filter (#23920) (#23969)
  • Delete deleted release attachments immediately from storage (#23913) (#23958)
  • Use ghost user if package creator does not exist (#23822) (#23915)
  • User/Org Feed render description as per web (#23887) (#23906)
  • Fix cases.Title crash for concurrency (#23885) (#23903)
  • Convert .Source.SkipVerify to $cfg.SkipVerify (#23839) (#23899)
  • Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874) (#23878)
  • Fix JS error when changing PR's target branch (#23862) (#23864)
  • Fix 500 error if there is a name conflict when editing authentication source (#23832) (#23852)
  • Fix closed PR also triggers Webhooks and actions (#23782) (#23834)
  • Fix checks for needs in Actions (#23789) (#23831)
  • Fix "Updating branch by merge" bug in "update_branch_by_merge.tmpl" (#23790) (#23825)
  • Fix cancel button in the page of project edit not work (#23655) (#23813)
  • Don't apply the group filter when listing LDAP group membership if it is empty (#23745) (#23788)
  • Fix profile page email display, respect settings (#23747) (#23756)
  • Fix project card preview select and template select (#23684) (#23731)
  • Check LFS/Packages settings in dump and doctor command (#23631) (#23730)
  • Add git dashes separator to some "log" and "diff" commands (#23606) (#23720)
  • Create commit status when event is pull_request_sync (#23683) (#23691)
  • Fix incorrect HookEventType of pull request review comments (#23650) (#23678)
  • Fix incorrect show-modal and show-panel class (#23660) (#23663)
  • Improve workflow event triggers (#23613) (#23648)
  • Introduce path Clean/Join helper functions, partially backport&refactor (#23495) (#23607)
  • Fix pagination on /notifications/watching (#23564) (#23603)
  • Fix submodule is nil panic (#23588) (#23601)
  • Polyfill the window.customElements (#23592) (#23595)
  • Avoid too long names for actions (#23162) (#23190)
• TRANSLATION
  • Backport locales (with manual fixes) (#23808, #23634, #24083)
• BUILD
  • Hardcode the path to docker images (#23955) (#23968)
• DOCS
  • Update documentation to explain which projects allow Gitea to host static pages (#23993) (#24058)
  • Merge push to create, open PR from push, and push options docs articles into one (#23744) (#23959)
  • Fix code blocks in the cheat sheet (#23664) (#23669)
• MISC
  • Do not crash when parsing an invalid workflow file (#23972) (#23976)
  • Remove assertion debug code for show/hide refactoring (#23576) (#23868)
  • Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) (#23791)
  • Make minio package support legacy MD5 checksum (#23768) (#23770)
  • Improve template error reporting (#23396) (#23600)

v1.19.0

• BREAKING
  • Add loading yaml label template files (#22976) (#23232)
  • Make issue and code search support camel case for Bleve (#22829)
  • Repositories: by default disable all units except code and pulls on forks (#22541)
  • Support template for merge message description (#22248)
  • Remove ONLY_SHOW_RELEVANT_REPOS setting (#21962)
  • Implement actions (#21937)
  • Remove deprecated DSA host key from Docker Container (#21522)
  • Improve valid user name check (#20136)
• SECURITY
  • Return 404 instead of 403 if user can not access the repo (#23155) (#23158)
  • Support scoped access tokens (#20908)
• FEATURES
  • Add support for commit cross references (#22645)
  • Scoped labels (#22585)
  • Add Chef package registry (#22554)
  • Support asciicast files as new markup (#22448)
  • cgo cross-compile for freebsd (#22397)
  • Add cron method to gc LFS MetaObjects (#22385)
  • Add new captcha: cloudflare turnstile (#22369)
  • Enable @<user>- completion popup on the release description textarea (#22359)
  • make /{username}.png redirect to user/org avatar (#22356)
  • Add Conda package registry (#22262)
  • Support org/user level projects (#22235)
  • Add Mermaid copy button (#22225)
  • Add user secrets (#22191)
  • Secrets storage with SecretKey encrypted (#22142)
  • Preview images for Issue cards in Project Board view (#22112)
  • Add support for incoming emails (#22056)
  • Add Cargo package registry (#21888)
  • Add option to prohibit fork if user reached maximum limit of repositories (#21848)
  • Add attention blocks within quote blocks for Note and Warning (#21711)
  • Add Feed for Releases and Tags (#21696)
  • Add package registry cleanup rules (#21658)
  • Add "Copy" button to file view of raw text (#21629)
  • Allow disable sitemap (#21617)
  • Add package registry quota limits (#21584)
  • Map OIDC groups to Orgs/Teams (#21441)
  • Keep languages defined in .gitattributes (#21403)
  • Add Webhook authorization header (#20926)
  • Supports wildcard protected branch (#20825)
  • Copy citation file content, in APA and BibTex format, on repo home page (#19999)
• API
  • Match api migration behavior to web behavior (#23552) (#23573)
  • Purge API comment (#23451) (#23452)
  • User creation API: allow custom "created" timestamps (#22549)
  • Add updated_at field to PullReview API object (#21812)
  • Add API management for issue/pull and comment attachments (#21783)
  • Add API endpoint to get latest release (#21267)
  • Support system hook API (#14537)
• ENHANCEMENTS
  • Add .patch to attachment.ALLOWED_TYPES (#23580) (#23582)
  • Fix sticky header in diff view (#23554) (#23568)
  • Refactor merge/update git command calls (#23366) (#23544)
  • Fix review comment context menu clipped bug (#23523) (#23543)
  • Imrove scroll behavior to hash issuecomment(scroll position, auto expand if file is folded, and on refreshing) (#23513) (#23540)
  • Increase horizontal page padding (#23507) (#23537)
  • Use octicon-verified for gpg signatures (#23529) (#23536)
  • Make time tooltips interactive (#23526) (#23527)
  • Replace Less with CSS (#23508)
  • Fix 'View File' button in code search (#23478) (#23483)
  • Convert GitHub event on actions and fix some pull_request events. (#23037) (#23471)
  • Support reflogs (#22451) (#23438)
  • Fix actions frontend bugs (pagination, long name alignment) and small simplify (#23370) (#23436)
  • Scoped label display and documentation tweaks (#23430) (#23433)
  • Add missing tabs to org projects page (#22705) (#23412)
  • Fix and move "Use this template" button (#23398) (#23408)
  • Handle OpenID discovery URL errors a little nicer when creating/editing sources (#23397) (#23403)
  • Rename canWriteUnit to canWriteProjects (#23386) (#23399)
  • Refactor and tidy-up the merge/update branch code (#22568) (#23365)
  • Refactor setting.Database.UseXXX to methods (#23354) (#23356)
  • Fix incorrect project links and use symlink icon for org-wide projects (#23325) (#23336)
  • Fix PR view misalignment caused by long name file (#23321) (#23335)
  • Scoped labels: don't require holding alt key to remove (#23303) (#23331)
  • Add context when rendering labels or emojis (#23281) (#23319)
  • Change interactiveBorder to fix popup preview (#23169) (#23314)
  • Scoped labels: set aria-disabled on muted Exclusive option for a11y (#23306) (#23311)
  • update to mermaid v10 (#23178) (#23299)
  • Fix code wrap for unbroken lines (#23268) (#23293)
  • Use async await to fix empty quote reply at first time (#23168) (#23256)
  • Fix switched citation format (#23250) (#23253)
  • Allow <video> in MarkDown (#22892) (#23236)
  • Order pull request conflict checking by recently updated, for each push (#23220) (#23225)
  • Fix Fomantic UI's touchstart fastclick, always use click for click events (#23065) (#23195)
  • Add word-break to sidebar-item-link (#23146) (#23180)
  • Add InsecureSkipVerify to Minio Client for Storage (#23166) (#23177)
  • Fix height for sticky head on large screen on PR page (#23111) (#23123)
  • Change style to improve whitespaces trimming inside inline markdown code (#23093) (#23120)
  • Avoid warning for system setting when start up (#23054) (#23116)
  • Add accessibility to the menu on the navbar (#23059) (#23095)
  • Improve accessibility for issue comments (#22612) (#23083)
  • Remove delete button for review comment (#23036)
  • Remove dashes between organization member avatars on hover (#23034)
  • Use gt-relative class instead of the ambiguous gt-pr class (#23008)
  • handle deprecated settings (#22992)
  • Add scopes to API to create token and display them (#22989)
  • Improve PR Review Box UI (#22986)
  • Improve issues.LoadProject (#22982)
  • Add all units to the units permission list in org team members sidebar (#22971)
  • Rename GetUnits to LoadUnits (#22970)
  • Rename repo.GetOwner to repo.LoadOwner (#22967)
  • Rename "People" to "Members" in organization page and use a better icon (#22960)
  • Fix avatar misalignment (#22955)
  • Sort issues and pulls by recently updated in user and organization home (#22925)
  • Add title to PR file tree items (#22918)
  • First step to refactor the .hide to .gt-hidden (#22916)
  • Add tooltip to issue reference (#22913)
  • Always show the command line instructions button even if there are conflicts (#22909)
  • Fix dark-colored description text in arc-green theme (#22908)
  • Remove Fomantic-UI's .hidden CSS class for menu elements (#22895)
  • Move helpers to be prefixed with gt- (#22879)
  • Move IsReadmeFile* from modules/markup/ to modules/util (#22877)
  • Highlight focused diff file (#22870)
  • Add some headings to repo views (#22869)
  • Fix milestone title font problem (#22863)
  • Pull Requests: setting to allow edits by maintainers by default, tweak UI (#22862)
  • Introduce customized HTML elements, fix incorrect AppUrl usages in templates (#22861)
  • Add /$count endpoints for NuGet v2 (#22855)
  • Remove Fomantic-UI's .hidden CSS class for checkbox elements (#22851)
  • Fix notification and stopwatch empty states (#22845)
  • Always go full width in PR view (#22844)
  • Improve AppUrl/ROOT_URL checking (#22836)
  • Fix style of actions rerun button (#22835)
  • Fix more HTMLURL in templates (#22831)
  • Fix inconsistent Filter Project name in issue list (#22827)
  • include build info in Prometheus metrics (#22819)
  • Make clone URL use current page's host (#22808)
  • Refactor legacy strange git operations (#22756)
  • Improve error report when user passes a private key (#22726)
  • set user dashboard org visibility to basic (#22706)
  • Fix diff UI for unexpandable items (#22700)
  • Remove 'primary' class from tab counter labels (#22687)
  • Add more events details supports for actions (#22680)
  • Refactor git command package to improve security and maintainability (#22678)
  • Use relative url in actions view (#22675)
  • set user visibility class to basic (#22674)
  • Add repository setting to enable/disable releases unit (#22671)
  • Remove label color from global issue filters (#22660)
  • Fix poor alignment of organization description on organization home page (#22656)
  • Small refactor for loading PRs (#22652)
  • Allow setting access token scope by CLI (#22648)
  • Improve accessibility of navigation bar and footer (#22635)
  • Fixes accessibility behavior of Watching, Staring and Fork buttons (#22634)
  • Fixes accessibility of empty repository commit status (#22632)
  • Pull request yaml template support for including commit body in a field (#22629)
  • Show migration validation error (#22619)
  • set org visibility class to basic in header (#22605)
  • Fix cache-control header clearing comment text when editing issue (#22604)
  • Add ARIA support for Fomantic UI checkboxes (#22599)
  • Add templates to customize text when creating and migrating repositories (#22597)
  • Allow setting redirect_to cookie on OAuth login (#22594)
  • Improve checkbox accessibility a bit by adding the title attribute (#22593)
  • Allow issue templates to not render title (#22589)
  • Webhooks: for issue close/reopen action, add commit ID that caused it (#22583)
  • Fix missing title and filter in issue sidebar project menu (#22557)
  • Issues: support setting issue template field values with query (#22545)
  • Issues: add Project filter to issues list and search (#22544)
  • Pull Requests: add color to approved/reject icon in pull requests list (#22543)
  • Mute all links in issue timeline (#22533)
  • Dropzone: Add "Copy link" button for new uploads (#22517)
  • Support importing comment types (#22510)
  • Load asciicast css async (#22502)
  • Move delete user to service (#22478)
  • Change use of Walk to WalkDir to improve disk performance (#22462)
  • Add reply hint to mail text (#22459...

v1.19.0-rc1

Second release candidate for 1.19.0

v1.19.0-rc0

• BREAKING
  • Make issue and code search support camel case (#22829)
  • Repositories: by default disable all units except code and pulls on forks (#22541)
  • Support template for merge message description (#22248)
  • Fix wrong default value for update checker on app.example.ini (#22084)
  • Remove ONLY_SHOW_RELEVANT_REPOS setting (#21962)
  • Implement actions (#21937)
  • Remove deprecated DSA host key from Docker Container (#21522)
  • Add Webhook authorization header (#20926)
  • Improve valid user name check (#20136)
• SECURITY
  • Support scoped access tokens (#20908)
• FEATURES
  • Add support for commit cross references (#22645)
  • Scoped labels (#22585)
  • Add Chef package registry (#22554)
  • Support asciicast files as new markup (#22448)
  • cgo cross-compile for freebsd (#22397)
  • Add cron method to gc LFS MetaObjects (#22385)
  • Add new captcha: cloudflare turnstile (#22369)
  • Enable @<user>- completion popup on the release description textarea (#22359)
  • make /{username}.png redirect to user/org avatar (#22356)
  • Add Conda package registry (#22262)
  • Support org/user level projects (#22235)
  • Add Mermaid copy button, avoid unnecessary tooltip hide (#22225)
  • Add user secrets (#22191)
  • Secrets storage with SecretKey encrypted (#22142)
  • Preview images for Issue cards in Project Board view (#22112)
  • Add support for incoming emails (#22056)
  • Add Cargo package registry (#21888)
  • Add option to prohibit fork if user reached maximum limit of repositories (#21848)
  • Add attention blocks within quote blocks for Note and Warning (#21711)
  • Add Feed for Releases and Tags (#21696)
  • Add package registry cleanup rules (#21658)
  • Add "Copy" button to file view of raw text (#21629)
  • Allow disable sitemap (#21617)
  • Add package registry quota limits (#21584)
  • Map OIDC groups to Orgs/Teams (#21441)
  • Keep languages defined in .gitattributes (#21403)
  • Supports wildcard protected branch (#20825)
  • Copy citation file content, in APA and BibTex format, on repo home page (#19999)
• API
  • User creation API: allow custom "created" timestamps (#22549)
  • Add updated_at field to PullReview API object (#21812)
  • Add API management for issue/pull and comment attachments (#21783)
  • Add API endpoint to get latest release (#21267)
  • Support system hook API (#14537)
• ENHANCEMENTS
  • Remove delete button for review comment (#23036)
  • Remove dashes between organization member avatars on hover (#23034)
  • Use gt-relative class instead of the ambiguous gt-pr class (#23008)
  • handle deprecated settings (#22992)
  • Add scopes to API to create token and display them (#22989)
  • Improve PR Review Box UI (#22986)
  • Improve issues.LoadProject (#22982)
  • Add all units to the units permission list in org team members sidebar (#22971)
  • Rename GetUnits to LoadUnits (#22970)
  • Rename repo.GetOwner to repo.LoadOwner (#22967)
  • Rename "People" to "Members" in organization page and use a better icon (#22960)
  • Fix avatar misalignment (#22955)
  • Sort issues and pulls by recently updated in user and organization home (#22925)
  • Add title to PR file tree items (#22918)
  • First step to refactor the .hide to .gt-hidden (#22916)
  • Add tooltip to issue reference (#22913)
  • Always show the command line instructions button even if there are conflicts (#22909)
  • Fix dark-colored description text in arc-green theme (#22908)
  • Remove Fomantic-UI's .hidden CSS class for menu elements (#22895)
  • Move helpers to be prefixed with gt- (#22879)
  • Move IsReadmeFile* from modules/markup/ to modules/util (#22877)
  • Highlight focused diff file (#22870)
  • Add some headings to repo views (#22869)
  • Fix milestone title font problem (#22863)
  • Pull Requests: setting to allow edits by maintainers by default, tweak UI (#22862)
  • Introduce customized HTML elements, fix incorrect AppUrl usages in templates (#22861)
  • Add /$count endpoints for NuGet v2 (#22855)
  • Remove Fomantic-UI's .hidden CSS class for checkbox elements (#22851)
  • Fix notification and stopwatch empty states (#22845)
  • Always go full width in PR view (#22844)
  • Improve AppUrl/ROOT_URL checking (#22836)
  • Fix style of actions rerun button (#22835)
  • Fix more HTMLURL in templates (#22831)
  • Fix inconsistent Filter Project name in issue list (#22827)
  • include build info in Prometheus metrics (#22819)
  • Make clone URL use current page's host (#22808)
  • Add CLI option tenant ID for oauth2 source (#22769)
  • Refactor legacy strange git operations (#22756)
  • Improve error report when user passes a private key (#22726)
  • set user dashboard org visibility to basic (#22706)
  • Fix diff UI for unexpandable items (#22700)
  • Remove 'primary' class from tab counter labels (#22687)
  • Add more events details supports for actions (#22680)
  • Refactor git command package to improve security and maintainability (#22678)
  • Use relative url in actions view (#22675)
  • set user visibility class to basic (#22674)
  • Add repository setting to enable/disable releases unit (#22671)
  • Remove label color from global issue filters (#22660)
  • Fix poor alignment of organization description on organization home page (#22656)
  • Small refactor for loading PRs (#22652)
  • Allow setting access token scope by CLI (#22648)
  • Improve accessibility of navigation bar and footer (#22635)
  • Fixes accessibility behavior of Watching, Staring and Fork buttons (#22634)
  • Fixes accessibility of empty repository commit status (#22632)
  • Pull request yaml template support for including commit body in a field (#22629)
  • Show migration validation error (#22619)
  • set org visibility class to basic in header (#22605)
  • Fix cache-control header clearing comment text when editing issue (#22604)
  • Add ARIA support for Fomantic UI checkboxes (#22599)
  • Add templates to customize text when creating and migrating repositories (#22597)
  • Allow setting redirect_to cookie on OAuth login (#22594)
  • Improve checkbox accessibility a bit by adding the title attribute (#22593)
  • Allow issue templates to not render title (#22589)
  • Webhooks: for issue close/reopen action, add commit ID that caused it (#22583)
  • Fix missing title and filter in issue sidebar project menu (#22557)
  • Issues: support setting issue template field values with query (#22545)
  • Issues: add Project filter to issues list and search (#22544)
  • Pull Requests: add color to approved/reject icon in pull requests list (#22543)
  • Mute all links in issue timeline (#22533)
  • Dropzone: Add "Copy link" button for new uploads (#22517)
  • Support importing comment types (#22510)
  • Load asciicast css async (#22502)
  • Move delete user to service (#22478)
  • Change use of Walk to WalkDir to improve disk performance (#22462)
  • Add reply hint to mail text (#22459)
  • fix wrong theme class when logged out if default theme is changed (#22408)
  • Refactor the setting to make unit test easier (#22405)
  • Improve utils of slices (#22379)
  • Use context parameter in models/git (#22367)
  • Always reuse transaction (#22362)
  • Fix unstable emoji sort (#22346)
  • Add context cache as a request level cache (#22294)
  • Reminder for no more logs to console (#22282)
  • Support estimated count with multiple schemas (#22276)
  • Move convert package to services (#22264)
  • Use dynamic package type list (#22263)
  • Hide file borders on sticky diff box (#22217)
  • Improve notification and stopwatch styles (#22169)
  • Fixed Project view .board-column height for tall screens. (#22108)
  • Use multi reader instead to concat strings (#22099)
  • Use git command instead of exec.Cmd in blame (#22098)
  • Fix autofilled text visibility in dark mode (#22088)
  • Rename almost all Ctx functions (#22071)
  • Rename actions to operations on UI (#22067)
  • refactor bind functions based on generics (#22055)
  • Support disabling database auto migration (#22053)
  • remove duplicated read file code (#22042)
  • Use link in UI which returned a relative url but not html_url which contains an absolute url (#21986)
  • Skip initing disabled storages (#21985)
  • Add doctor command for full GC of LFS (#21978)
  • Util type to parse ref name (#21969)
  • Replace fmt.Sprintf with hex.EncodeToString (#21960)
  • Use random bytes to generate access token (#21959)
  • Add index for access_token (#21908)
  • Move all remaining colors into CSS variables (#21903)
  • Webhook list enhancements (#21893)
  • Embed Matrix icon as SVG (#21890)
  • Remove useless "Cancel" buttons (#21872)
  • fix(web): keep the pages of the navigation in the center (#21867)
  • fix(web): reduce page jitter on browsers that support overlay scrollbar (#21850)
  • Improvements for Content Copy (#21842)
  • Tweak katex options (#21828)
  • Show syntax lexer name in file view/blame (#21814)
  • Remove href="javascript:;" in "save topics (Done)" button (#21813)
  • Render number of commits in repo page in a user friendly way (#21786)
  • Adjust gitea doctor --run storages to check all storage types (#21785)
  • Adjust clone timeout error to suggest increasing timeout (#21769)
  • Update message of reach_limit_of_creation (#21757)
  • Allow detect whether it's in a database transaction for a context.Context (#21756)
  • Add configuration for CORS allowed headers (#21747)
  • Move svg html render to modules/svg (#21716)
  • Release and Tag List tweaks (#21712)
  • Remove template previewer (#21701)
  • Clean up formatting on install page (#21668)
  • Configure update checker on installation page (#21655)
  • Merge db.Iterate and IterateObjects (#21641)
  • Add option to enable CAPTCHA validation for login (#21638)
  • Allow disable RSS/Atom feed (#2162...

v1.18.5

• ENHANCEMENTS
  • Hide 2FA status from other members in organization members list (#22999) (#23023)
• BUGFIXES
  • Add force_merge to merge request and fix checking mergable (#23010) (#23032)
  • Use --message=%s for git commit message (#23028) (#23029)
  • Render access log template as text instead of HTML (#23013) (#23025)
  • Fix the Manually Merged form (#23015) (#23017)
  • Use beforeCommit instead of baseCommit (#22949) (#22996)
  • Display attachments of review comment when comment content is blank (#23035) (#23046)
  • Return empty url for submodule tree entries (#23043) (#23048)

v1.18.4

Due to an Admin Merge / Auto Merge regression bug found in 1.18.4, we are going to release 1.18.5 soon. If you are affected by that bug, you could downgrade to 1.18.3 safely and wait for 1.18.5.

---

• SECURITY
  • Provide the ability to set password hash algorithm parameters (#22942) (#22943)
  • Add command to bulk set must-change-password (#22823) (#22928)
• ENHANCEMENTS
  • Use import of OCI structs (#22765) (#22805)
  • Fix color of tertiary button on dark theme (#22739) (#22744)
  • Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642)
• BUGFIXES
  • Notify on container image create (#22806) (#22965)
  • Fix blame view missing lines (#22826) (#22929)
  • Fix incorrect role labels for migrated issues and comments (#22914) (#22923)
  • Fix PR file tree folders no longer collapsing (#22864) (#22872)
  • Escape filename when assemble URL (#22850) (#22871)
  • Fix isAllowed of escapeStreamer (#22814) (#22837)
  • Load issue before accessing index in merge message (#22822) (#22830)
  • Improve trace logging for pulls and processes (#22633) (#22812)
  • Fix restore repo bug, clarify the problem of ForeignIndex (#22776) (#22794)
  • Add default user visibility to cli command "admin user create" (#22750) (#22760)
  • Escape path for the file list (#22741) (#22757)
  • Fix bugs with WebAuthn preventing sign in and registration. (#22651) (#22721)
  • Add missing close bracket in imagediff (#22710) (#22712)
  • Move code comments to a standalone file and fix the bug when adding a reply to an outdated review appears to not post(#20821) (#22707)
  • Fix line spacing for plaintext previews (#22699) (#22701)
  • Fix wrong hint when deleting a branch successfully from pull request UI (#22673) (#22698)
  • Fix README TOC links (#22577) (#22677)
  • Fix missing message in git hook when pull requests disabled on fork (#22625) (#22658)
  • Improve checkIfPRContentChanged (#22611) (#22644)
  • Prevent duplicate labels when importing more than 99 (#22591) (#22598)
  • Don't return duplicated users who can create org repo (#22560) (#22562)
• BUILD
  • Upgrade golangcilint to v1.51.0 (#22764)
• MISC
  • Use proxy for pull mirror (#22771) (#22772)
  • Use --index-url in PyPi description (#22620) (#22636)

v1.18.3

• SECURITY
  • Prevent multiple To recipients (#22566) (#22569)
• BUGFIXES
  • Truncate commit summary on repo files table. (#22551) (#22552)
  • Mute all links in issue timeline (#22534)

v1.18.2

This version also includes docker images with a patched git binary for the CVE reported.

❗ ❗ ❗ For anyone who doesn't use docker, you will need to update your version of git to a version with the security patch applied.

The patched versions are the following:
>= v2.30.7, v2.31.6, v2.32.5, v2.33.6, v2.34.6, v2.35.6, v2.36.4, v2.37.5, v2.38.3, v2.39.1

More information can be found at GHSA-c738-c5qq-xg89

• BUGFIXES
  • When updating by rebase we need to set the environment for head repo (#22535) (#22536)
  • Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521)
  • Fix invalid issue branch reference if not specified in template (#22513) (#22520)
  • Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515)
  • Reliable selection of admin user (#22509) (#22511)
  • Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496)
• BUILD
  • cgo cross-compile for freebsd (#22397) (#22519)

v1.18.1

• API
  • Add sync_on_commit option for push mirrors api (#22271) (#22292)
• BUGFIXES
  • Update github.com/zeripath/zapx/v15 (#22485)
  • Fix pull request API field closed_at always being null (#22482) (#22483)
  • Fix container blob mount (#22226) (#22476)
  • Fix error when calculating repository size (#22392) (#22474)
  • Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454) (#22472)
  • Fix environments for KaTeX and error reporting (#22453) (#22473)
  • Remove the netgo tag for Windows build (#22467) (#22468)
  • Fix migration from GitBucket (#22477) (#22465)
  • Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458)
  • Fix PR status layout on mobile (#21547) (#22441)
  • Fix wechatwork webhook sends empty content in PR review (#21762) (#22440)
  • Remove duplicate "Actions" label in mobile view (#21974) (#22439)
  • Fix leaving organization bug on user settings -> orgs (#21983) (#22438)
  • Fixed colour transparency regex matching in project board sorting (#22092) (#22437)
  • Correctly handle select on multiple channels in Queues (#22146) (#22428)
  • Prepend refs/heads/ to issue template refs (#20461) (#22427)
  • Restore function to "Show more" buttons (#22399) (#22426)
  • Continue GCing other repos on error in one repo (#22422) (#22425)
  • Allow HOST has no port (#22280) (#22409)
  • Fix omit avatar_url in discord payload when empty (#22393) (#22394)
  • Don't display stop watch top bar icon when disabled and hidden when click other place (#22374) (#22387)
  • Don't lookup mail server when using sendmail (#22300) (#22383)
  • Fix gravatar disable bug (#22337)
  • Fix update settings table on install (#22326) (#22327)
  • Fix sitemap (#22272) (#22320)
  • Fix code search title translation (#22285) (#22316)
  • Fix due date rendering the wrong date in issue (#22302) (#22306)
  • Fix get system setting bug when enabled redis cache (#22298)
  • Fix bug of DisableGravatar default value (#22297)
  • Fix key signature error page (#22229) (#22230)
• TESTING
  • Remove test session cache to reduce possible concurrent problem (#22199) (#22429)
• MISC
  • Restore previous official review when an official review is deleted (#22449) (#22460)
  • Log STDERR of external renderer when it fails (#22442) (#22444)

v1.18.0

Changelog

• SECURITY
  • Remove ReverseProxy authentication from the API (#22219) (#22251)
  • Support Go Vulnerability Management (#21139)
  • Forbid HTML string tooltips (#20935)
• BREAKING
  • Rework mailer settings (#18982)
  • Remove U2F support (#20141)
  • Refactor i18n to locale (#20153)
  • Enable contenthash in filename for dynamic assets (#20813)
• FEATURES
  • Add color previews in markdown (#21474)
  • Allow package version sorting (#21453)
  • Add support for Chocolatey/NuGet v2 API (#21393)
  • Add API endpoint to get changed files of a PR (#21177)
  • Add filetree on left of diff view (#21012)
  • Support Issue forms and PR forms (#20987)
  • Add support for Vagrant packages (#20930)
  • Add support for npm unpublish (#20688)
  • Add badge capabilities to users (#20607)
  • Add issue filter for Author (#20578)
  • Add KaTeX rendering to Markdown. (#20571)
  • Add support for Pub packages (#20560)
  • Support localized README (#20508)
  • Add support mCaptcha as captcha provider (#20458)
  • Add team member invite by email (#20307)
  • Added email notification option to receive all own messages (#20179)
  • Switch Unicode Escaping to a VSCode-like system (#19990)
  • Add user/organization code search (#19977)
  • Only show relevant repositories on explore page (#19361)
  • User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
  • Add sitemap support (#18407)
  • Allow creation of OAuth2 applications for orgs (#18084)
  • Add system setting table with cache and also add cache supports for user setting (#18058)
  • Add pages to view watched repos and subscribed issues/PRs (#17156)
  • Support Proxy protocol (#12527)
  • Implement sync push mirror on commit (#19411)
• API
  • Allow empty assignees on pull request edit (#22150) (#22214)
  • Make external issue tracker regexp configurable via API (#21338)
  • Add name field for org api (#21270)
  • Show teams with no members if user is admin (#21204)
  • Add latest commit's SHA to content response (#20398)
  • Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
  • Add new endpoints for push mirrors management (#19841)
• ENHANCEMENTS
  • Add setting to disable the git apply step in test patch (#22130) (#22170)
  • Multiple improvements for comment edit diff (#21990) (#22007)
  • Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21928)
  • Fix flex layout for repo list icons (#21896) (#21920)
  • Fix vertical align of committer avatar rendered by email address (#21884) (#21918)
  • Fix setting HTTP headers after write (#21833) (#21877)
  • Color and Style enhancements (#21784, #21799) (#21868)
  • Ignore line anchor links with leading zeroes (#21728) (#21776)
  • Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  • Use CSS color-scheme instead of invert (#21616) (#21623)
  • Respect user's locale when rendering the date range in the repo activity page (#21410)
  • Change commits-table column width (#21564)
  • Refactor git command arguments and make all arguments to be safe to be used (#21535)
  • CSS color enhancements (#21534)
  • Add link to user profile in markdown mention only if user exists (#21533, #21554)
  • Add option to skip index dirs (#21501)
  • Diff file tree tweaks (#21446)
  • Localize all timestamps (#21440)
  • Add code highlighting in issue titles (#21432)
  • Use Name instead of DisplayName in LFS Lock (#21415)
  • Consolidate more CSS colors into variables (#21402)
  • Redirect to new repository owner (#21398)
  • Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
  • Use weighted algorithm for string matching when finding files in repo (#21370)
  • Show private data in feeds (#21369)
  • Refactor parseTreeEntries, speed up tree list (#21368)
  • Add GET and DELETE endpoints for Docker blob uploads (#21367)
  • Add nicer error handling on template compile errors (#21350)
  • Add stat to ToCommit function for speed (#21337)
  • Support instance-wide OAuth2 applications (#21335)
  • Record OAuth client type at registration (#21316)
  • Add new CSS variables --color-accent and --color-small-accent (#21305)
  • Improve error descriptions for unauthorized_client (#21292)
  • Case-insensitive "find files in repo" (#21269)
  • Consolidate more CSS rules, fix inline code on arc-green (#21260)
  • Log real ip of requests from ssh (#21216)
  • Save files in local storage as group readable (#21198)
  • Enable fluid page layout on medium size viewports (#21178)
  • File header tweaks (#21175)
  • Added missing headers on user packages page (#21172)
  • Display image digest for container packages (#21170)
  • Skip dirty check for team forms (#21154)
  • Keep path when creating a new branch (#21153)
  • Remove fomantic image module (#21145)
  • Make labels clickable in the comments section. (#21137)
  • Sort branches and tags by date descending (#21136)
  • Better repo API unit checks (#21130)
  • Improve commit status icons (#21124)
  • Limit length of repo description and repo url input fields (#21119)
  • Show .editorconfig errors in frontend (#21088)
  • Allow poster to choose reviewers (#21084)
  • Remove black labels and CSS cleanup (#21003)
  • Make e-mail sanity check more precise (#20991)
  • Use native inputs in whitespace dropdown (#20980)
  • Enhance package date display (#20928)
  • Display total blob size of a package version (#20927)
  • Show language name on hover (#20923)
  • Show instructions for all generic package files (#20917)
  • Refactor AssertExistsAndLoadBean to use generics (#20797)
  • Move the official website link at the footer of gitea (#20777)
  • Add support for full name in reverse proxy auth (#20776)
  • Remove useless JS operation for relative time tooltips (#20756)
  • Replace some icons with SVG (#20741)
  • Change commit status icons to SVG (#20736)
  • Improve single repo action for issue and pull requests (#20730)
  • Allow multiple files in generic packages (#20661)
  • Add option to create new issue from /issues page (#20650)
  • Background color of private list-items updated (#20630)
  • Added search input field to issue filter (#20623)
  • Increase default item listing size ISSUE_PAGING_NUM to 20 (#20547)
  • Modify milestone search keywords to be case insensitive again (#20513)
  • Show hint to link package to repo when viewing empty repo package list (#20504)
  • Add Tar ZSTD support (#20493)
  • Make code review checkboxes clickable (#20481)
  • Add "X-Gitea-Object-Type" header for GET /raw/ & /media/ API (#20438)
  • Display project in issue list (#20434)
  • Prepend commit message to template content when opening a new PR (#20429)
  • Replace fomantic popup module with tippy.js (#20428)
  • Allow to specify colors for text in markup (#20363)
  • Allow access to the Public Organization Member lists with minimal permissions (#20330)
  • Use default values when provided values are empty (#20318)
  • Vertical align navbar avatar at middle (#20302)
  • Delete cancel button in repo creation page (#21381)
  • Include login_name in adminCreateUser response (#20283)
  • fix: icon margin in user/settings/repos (#20281)
  • Remove blue text on migrate page (#20273)
  • Modify milestone search keywords to be case insensitive (#20266)
  • Move some files into models' sub packages (#20262)
  • Add tooltip to repo icons in explore page (#20241)
  • Remove deprecated licenses (#20222)
  • Webhook for Wiki changes (#20219)
  • Share HTML template renderers and create a watcher framework (#20218)
  • Allow enable LDAP source and disable user sync via CLI (#20206)
  • Adds a checkbox to select all issues/PRs (#20177)
  • Refactor i18n to locale (#20153)
  • Disable status checks in template if none found (#20088)
  • Allow manager logging to set SQL (#20064)
  • Add order by for assignee no sort issue (#20053)
  • Take a stab at porting existing components to Vue3 (#20044)
  • Add doctor command to write commit-graphs (#20007)
  • Add support for authentication based on reverse proxy email (#19949)
  • Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
  • Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
  • Rework mailer settings (#18982)
  • Add option to purge users (#18064)
  • Add author search input (#21246)
  • Make rss/atom identifier globally unique (#21550)
• BUGFIXES
  • Auth interface return error when verify failure (#22119) (#22259)
  • Use complete SHA to create and query commit status (#22244) (#22257)
  • Update bleve and zapx to fix unaligned atomic (#22031) (#22218)
  • Prevent panic in doctor command when running default checks (#21791) (#21807)
  • Load GitRepo in API before deleting issue (#21720) (#21796)
  • Ignore line anchor links with leading zeroes (#21728) (#21776)
  • Set last login when activating account (#21731) (#21755)
  • Fix UI language switching bug (#21597) (#21749)
  • Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  • Allow local package identifiers for PyPI packages (#21690) (#21727)
  • Deal with markdown template without metadata (#21639) (#21654)
  • Fix opaque background on mermaid diagrams (#21642) (#21652)
  • Fix repository adoption on Windows (#21646) (#21650)
  • Sync git hooks when config file path changed (#21619) (#21626)
  • Fix 500 on PR files API (#21602) (#21607)
  • Fix Timestamp.IsZero (#21593) (#21603)
  • Fix viewing user subscriptions (#21482)
  • Fix mermaid-related bugs (#21431)
  • Fix branch dropdown shifting on page load (#21428)
  • Fix default theme-auto selector when nologin (#21346)
  • Fix and improve incorrect error messages (#21342)
  • Fix formatted link for PR revie...