v1.21.1

• SECURITY
  • Fix comment permissions (#28213) (#28216)
• BUGFIXES
  • Fix delete-orphaned-repos (#28200) (#28202)
  • Make CORS work for oauth2 handlers (#28184) (#28185)
  • Fix missing buttons (#28179) (#28181)
  • Fix no ActionTaskOutput table waring (#28149) (#28152)
  • Fix empty action run title (#28113) (#28148)
  • Use "is-loading" to avoid duplicate form submit for code comment (#28143) (#28147)
  • Fix Matrix and MSTeams nil dereference (#28089) (#28105)
  • Fix incorrect pgsql conn builder behavior (#28085) (#28098)
  • Fix system config cache expiration timing (#28072) (#28090)
  • Restricted users only see repos in orgs which their team was assigned to (#28025) (#28051)
• API
  • Fix permissions for Token DELETE endpoint to match GET and POST (#27610) (#28099)
• ENHANCEMENTS
  • Do not display search box when there's no packages yet (#28146) (#28159)
  • Add missing packages.cleanup.success (#28129) (#28132)
• DOCS
  • Docs: Replace deprecated IS_TLS_ENABLED mailer setting in email setup (#28205) (#28208)
  • Fix the description about the default setting for action in quick start document (#28160) (#28168)
  • Add guide page to actions when there's no workflows (#28145) (#28153)
• MISC
  • Use full width for PR comparison (#28182) (#28186)

v1.21.0

Changelog

• BREAKING
  • Restrict certificate type for builtin SSH server (#26789)
  • Refactor to use urfave/cli/v2 (#25959)
  • Move public asset files to the proper directory (#25907)
  • Remove commit status running and warning to align GitHub (#25839) (partially reverted: Restore warning commit status (#27504) (#27529))
  • Remove "CHARSET" config option for MySQL, always use "utf8mb4" (#25413)
  • Set SSH_AUTHORIZED_KEYS_BACKUP to false (#25412)
• FEATURES
  • User details page (#26713)
  • Chore(actions): support cron schedule task (#26655)
  • Support rebuilding issue indexer manually (#26546)
  • Allow to archive labels (#26478)
  • Add disable workflow feature (#26413)
  • Support .git-blame-ignore-revs file (#26395)
  • Pre-register OAuth2 applications for git credential helpers (#26291)
  • Add Retry button when creating a mirror-repo fails (#26228)
  • Artifacts retention and auto clean up (#26131)
  • Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
  • Implement auto-cancellation of concurrent jobs if the event is push (#25716)
  • Newly pushed branches hints on repository home page (#25715)
  • Display branch commit status (#25608)
  • Add direct serving of package content (#25543)
  • Add commits dropdown in PR files view and allow commit by commit review (#25528)
  • Allow package cleanup from admin page (#25307)
  • Batch delete issue and improve tippy opts (#25253)
  • Show branches and tags that contain a commit (#25180)
  • Add actor and status dropdowns to run list (#25118)
  • Allow Organisations to have a E-Mail (#25082)
  • Add codeowners feature (#24910)
  • Actions Artifacts support uploading multiple files and directories (#24874)
  • Support configuration variables on Gitea Actions (#24724)
  • Support downloading raw task logs (#24451)
• API
  • Unify two factor check (#27915) (#27929)
  • Fix package webhook (#27839) (#27855)
  • Fix/upload artifact error windows (#27802) (#27840)
  • Fix bad method call when deleting user secrets via API (#27829) (#27831)
  • Do not force creation of _cargo-index repo on publish (#27266) (#27765)
  • Delete repos of org when purge delete user (#27273) (#27728)
  • Fix org team endpoint (#27721) (#27727)
  • Api: GetPullRequestCommits: return file list (#27483) (#27539)
  • Don't let API add 2 exclusive labels from same scope (#27433) (#27460)
  • Redefine the meaning of column is_active to make Actions Registration Token generation easier (#27143) (#27304)
  • Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27251)
  • Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27163)
  • Allow empty Conan files (#27092)
  • Fix token endpoints ignore specified account (#27080)
  • Reduce usage of db.DefaultContext (#27073) (#27083) (#27089) (#27103) (#27262) (#27265) (#27347) (#26076)
  • Make SSPI auth mockable (#27036)
  • Extract auth middleware from service (#27028)
  • Add RemoteAddress to mirrors (#26952)
  • Feat(API): add routes and functions for managing user's secrets (#26909)
  • Feat(API): add secret deletion functionality for repository (#26808)
  • Feat(API): add route and implementation for creating/updating repository secret (#26766)
  • Add Upload URL to release API (#26663)
  • Feat(API): update and delete secret for managing organization secrets (#26660)
  • Feat: implement organization secret creation API (#26566)
  • Add API route to list org secrets (#26485)
  • Set commit id when ref used explicitly (#26447)
  • PATCH branch-protection updates check list even when checks are disabled (#26351)
  • Add file status for API "Get a single commit from a repository" (#16205) (#25831)
  • Add API for changing Avatars (#25369)
• BUGFIXES
  • Fix viewing wiki commit on empty repo (#28040) (#28044)
  • Enable system users for comment.LoadPoster (#28014) (#28032)
  • Fixed duplicate attachments on dump on windows (#28019) (#28031)
  • Fix wrong xorm Delete usage(backport for 1.21) (#28002)
  • Add word-break to repo description in home page (#27924) (#27957)
  • Fix rendering assignee changed comments without assignee (#27927) (#27952)
  • Add word break to release title (#27942) (#27947)
  • Fix JS NPE when viewing specific range of PR commits (#27912) (#27923)
  • Show correct commit sha when viewing single commit diff (#27916) (#27921)
  • Fix 500 when deleting a dismissed review (#27903) (#27910)
  • Fix DownloadFunc when migrating releases (#27887) (#27890)
  • Fix http protocol auth (#27875) (#27876)
  • Refactor postgres connection string building (#27723) (#27869)
  • Close all hashed buffers (#27787) (#27790)
  • Fix label render containing invalid HTML (#27752) (#27762)
  • Fix duplicate project board when hitting enter key (#27746) (#27751)
  • Fix link-action redirect network error (#27734) (#27749)
  • Fix sticky diff header background (#27697) (#27712)
  • Always delete existing scheduled action tasks (#27662) (#27688)
  • Support allowed hosts for webhook to work with proxy (#27655) (#27675)
  • Fix poster is not loaded in get default merge message (#27657) (#27666)
  • Improve dropdown button alignment and fix hover bug (#27632) (#27637)
  • Improve retrying index issues (#27554) (#27634)
  • Fix 404 when deleting Docker package with an internal version (#27615) (#27630)
  • Backport manually for a tmpl issue in v1.21 (#27612)
  • Don't show Link to TOTP if not set up (#27585) (#27588)
  • Fix data-race bug when accessing task.LastRun (#27584) (#27586)
  • Fix attachment download bug (#27486) (#27571)
  • Respect SSH.KeygenPath option when calculating ssh key fingerprints (#27536) (#27551)
  • Improve dropdown's behavior when there is a search input in menu (#27526) (#27534)
  • Fix panic in storageHandler (#27446) (#27479)
  • When comparing with an non-exist repository, return 404 but 500 (#27437) (#27442)
  • Fix pr template (#27436) (#27440)
  • Fix git 2.11 error when checking IsEmpty (#27393) (#27397)
  • Allow get release download files and lfs files with oauth2 token format (#26430) (#27379)
  • Fix missing ctx for GetRepoLink in dashboard (#27372) (#27375)
  • Absolute positioned checkboxes overlay floated elements (#26870) (#27366)
  • Introduce fixes and more rigorous tests for 'Show on a map' feature (#26803) (#27365)
  • Fix repo count in org action settings (#27245) (#27353)
  • Add logs for data broken of comment review (#27326) (#27345)
  • Fix the approval count of PR when there is no protection branch rule (#27272) (#27343)
  • Fix Bug in Issue Config when only contact links are set (#26521) (#27334)
  • Improve issue history dialog and make poster can delete their own history (#27323) (#27327)
  • Fix orphan check for deleted branch (#27310) (#27321)
  • Fix protected branch icon location (#26576) (#27317)
  • Fix yaml test (#27297) (#27303)
  • Fix some animation bugs (#27287) (#27294)
  • Fix incorrect change from #27231 (#27275) (#27282)
  • Add missing public user visibility in user details page (#27246) (#27250)
  • Fix EOL handling in web editor (#27141) (#27234)
  • Fix issues on action runners page (#27226) (#27233)
  • Quote table release in sql queries (#27205) (#27218)
  • Fix release URL in webhooks (#27182) (#27185)
  • Fix review request number and add more tests (#27104) (#27168)
  • Fix the variable regexp pattern on web page (#27161) (#27164)
  • Fix: treat tab "overview" as "repositories" in user profiles without readme (#27124)
  • Fix NPE when editing OAuth2 applications (#27078)
  • Fix the incorrect route path in the user edit page. (#27007)
  • Fix the secret regexp pattern on web page (#26910)
  • Allow users with write permissions for issues to add attachments with API (#26837)
  • Make "link-action" backend code respond correct JSON content (#26680)
  • Use line-height: normal by default (#26635)
  • Fix NPM packages name validation (#26595)
  • Rewrite the DiffFileTreeItem and fix misalignment (#26565)
  • Return empty when searching issues with no repos (#26545)
  • Explain SearchOptions and fix ToSearchOptions (#26542)
  • Add missing triggers to update issue indexer (#26539)
  • Handle base64 decoding correctly to avoid panic (#26483)
  • Avoiding accessing undefined mentionValues (#26461)
  • Fix incorrect redirection in new issue using references (#26440)
  • Fix the bug when getting files changed for pull_request_target event (#26320)
  • Remove IsWarning in tmpl (#26120)
  • Fix loading LFS_JWT_SECRET from wrong section (#26109)
  • Fixing redirection issue for logged-in users (#26105)
  • Improve "gitea doctor" sub-command and fix "help" commands (#26072)
  • Fix the truncate and alignment problem for some admin tables (#26042)
  • Update minimum password length requirements (#25946)
  • Do not "guess" the file encoding/BOM when using API to upload files (#25828)
  • Restructure issue list template, styles (#25750)
  • Fix ref for workflows triggered by pull_request_target (#25743)
  • Fix issues indexer document mapping (#25619)
  • Use JSON response for "user/logout" (#25522)
  • Fix migrate page layout on mobile (#25507)
  • Link to existing PR when trying to open a new PR on the same branches (#25494)
  • Do not publish docker release images on -dev tags (#25471)
  • Support pull_request_target event (#25229)
  • Modify the content format of the Feishu webhook (#25106)
• ENHANCEMENTS
  • Render email addresses as such if followed by punctuation (#27987) (#27992)
  • Show error toast when file size exceeds the limits (#27985) (#27986)
  • Fix citation error when the file size is larger than 1024 bytes (#27958) (#27965)
  • Remove action runners on user deletion (#27902) (#27908)
  • Remove set tabindex on view issue (#27892) (#27896)
  • Reduce margin/padding on flex-list items and divid...

v1.21.0-rc1

v1.21.0-rc1

v1.20.5

• ENHANCEMENTS
  • Fix z-index on markdown completion (#27237) (#27242 & #27238)
  • Use secure cookie for HTTPS sites (#26999) (#27013)
• BUGFIXES
  • Fix git 2.11 error when checking IsEmpty (#27393) (#27396)
  • Allow get release download files and lfs files with oauth2 token format (#26430) (#27378)
  • Fix orphan check for deleted branch (#27310) (#27320)
  • Quote table release in sql queries (#27205) (#27219)
  • Fix release URL in webhooks (#27182) (#27184)
  • Fix successful return value for SyncAndGetUserSpecificDiff (#27152) (#27156)
  • fix pagination for followers and following (#27127) (#27138)
  • Fix issue templates when blank isses are disabled (#27061) (#27082)
  • Fix context cache bug & enable context cache for dashabord commits' authors(#26991) (#27017)
  • Fix INI parsing for value with trailing slash (#26995) (#27001)
  • Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27249)
  • Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27167 & #27162)
  • Fix bug of review request number (#27406) (#27104)
• TESTING
  • services/wiki: Close() after error handling (#27129) (#27137)
• DOCS
  • Improve actions docs related to pull_request event (#27126) (#27145)
• MISC
  • Add logs for data broken of comment review (#27326) (#27344)
  • Load reviewer before sending notification (#27063) (#27064)

v1.21.0-rc0

• BREAKING
  • Restrict certificate type for builtin SSH server (#26789)
  • Refactor to use urfave/cli/v2 (#25959)
  • Move public asset files to the proper directory (#25907)
  • Remove commit status running and warning to align GitHub (#25839)
  • Remove "CHARSET" config option for MySQL, always use "utf8mb4" (#25413)
  • Set SSH_AUTHORIZED_KEYS_BACKUP to false (#25412)
• SECURITY
  • Expanded minimum RSA Keylength to 3072 (#26604)
• FEATURES
  • User details page (#26713)
  • Chore(actions): support cron schedule task (#26655)
  • Support rebuilding issue indexer manually (#26546)
  • Allow to archive labels (#26478)
  • Add disable workflow feature (#26413)
  • Support .git-blame-ignore-revs file (#26395)
  • Pre-register OAuth2 applications for git credential helpers (#26291)
  • Add Retry button when creating a mirror-repo fails (#26228)
  • Artifacts retention and auto clean up (#26131)
  • Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
  • Implement auto-cancellation of concurrent jobs if the event is push (#25716)
  • Newly pushed branches hints on repository home page (#25715)
  • Display branch commit status (#25608)
  • Add direct serving of package content (#25543)
  • Add commits dropdown in PR files view and allow commit by commit review (#25528)
  • Allow package cleanup from admin page (#25307)
  • Batch delete issue and improve tippy opts (#25253)
  • Show branches and tags that contain a commit (#25180)
  • Add actor and status dropdowns to run list (#25118)
  • Allow Organisations to have a E-Mail (#25082)
  • Add codeowners feature (#24910)
  • Support configuration variables on Gitea Actions (#24724)
  • Support downloading raw task logs (#24451)
• API
  • Allow empty Conan files (#27092)
  • Next round of db.DefaultContext refactor (#27089)
  • Fix token endpoints ignore specified account (#27080)
  • Reduce usage of db.DefaultContext (#27073)
  • Make SSPI auth mockable (#27036)
  • Extract auth middleware from service (#27028)
  • Add RemoteAddress to mirrors (#26952)
  • Feat(API): add routes and functions for managing user's secrets (#26909)
  • Feat(API): add secret deletion functionality for repository (#26808)
  • Feat(API): add route and implementation for creating/updating repository secret (#26766)
  • Add Upload URL to release API (#26663)
  • Feat(API): update and delete secret for managing organization secrets (#26660)
  • Feat: implement organization secret creation API (#26566)
  • Add API route to list org secrets (#26485)
  • Set commit id when ref used explicitly (#26447)
  • PATCH branch-protection updates check list even when checks are disabled (#26351)
  • Add file status for API "Get a single commit from a repository" (#16205) (#25831)
  • Add API for changing Avatars (#25369)
• ENHANCEMENTS
  • Increase auth provider icon size on login page (#27122)
  • Remove a gt-float-right and some unnecessary helpers (#27110)
  • Change green buttons to primary color (#27099)
  • Use db.WithTx for AddTeamMember to avoid ctx abuse (#27095)
  • Use print instead of printf (#27093)
  • More refactoring of db.DefaultContext (#27083)
  • Remove the useless function GetUserIssueStats and move relevant tests to indexer_test.go (#27067)
  • Search branches (#27055)
  • Display all user types and org types on admin management UI (#27050)
  • Ui correction in mobile view nav bar left aligned items. (#27046)
  • Chroma color tweaks (#26978)
  • Move some functions to service layer (#26969)
  • Improve "language stats" UI (#26968)
  • Replace util.SliceXxx with slices.Xxx (#26958)
  • Refactor dashboard/feed.tmpl (#26956)
  • Move repository deletion to service layer (#26948)
  • Fix the missing repo count (#26942)
  • Extract common code to new template (#26933)
  • Move createrepository from module to service layer (#26927)
  • Move notification interface to services layer (#26915)
  • Fix the secret regexp pattern on web page (#26910)
  • Move feed notification service layer (#26908)
  • Move ui notification to service layer (#26907)
  • Move indexer notification to service layer (#26906)
  • Move mail notification logic to service layer (#26905)
  • Extract common code to new template (#26903)
  • Show queue's active worker number (#26896)
  • Fix media description render for orgmode (#26895)
  • Remove CSS has selector and improve various styles (#26891)
  • Refactor "shortsha" (#26877)
  • Refactor og:description to limit the max length (#26876)
  • Move web/api context related testing function into a separate package (#26859)
  • S3: log human readable error on connection failure (#26856)
  • Improve opengraph previews (#26851)
  • Add more descriptive error on forgot password page (#26848)
  • Show always repo count in header (#26842)
  • Remove "TODO" tasks from CSS file (#26835)
  • Render code blocks in repo description (#26830)
  • Minor dashboard tweaks, fix flex-list margins (#26829)
  • Remove polluted .ui.right (#26825)
  • Display archived labels specially when listing labels (#26820)
  • Remove polluted ".ui.left" style (#26809)
  • Make it posible to customize nav text color via css var (#26807)
  • Refactor lfs requests (#26783)
  • Improve flex list item padding (#26779)
  • Remove fomantic text module (#26777)
  • Remove fomantic item module (#26775)
  • Remove redundant nil check in WalkGitLog (#26773)
  • Reduce some allocations in type conversion (#26772)
  • Refactor some CSS styles and simplify code (#26771)
  • Unify border-radius behavior (#26770)
  • Improve modal dialog UI (#26764)
  • Allow "latest" to be used in release vTag when downloading file (#26748)
  • Adding hint Archived to archive label. (#26741)
  • Move modules/mirror to services (#26737)
  • Add "dir=auto" for input/textarea elements by default (#26735)
  • Simplify helper CSS classes and avoid abuse (#26728)
  • Make web context initialize correctly for different cases (#26726)
  • Focus editor on "Write" tab click (#26714)
  • Remove incorrect CSS helper classes (#26712)
  • Fix review bar misalignment (#26711)
  • Add reverseproxy auth for API back with default disabled (#26703)
  • Add default label in branch select list (#26697)
  • Improve Image Diff UI (#26696)
  • Fixed text overflow in dropdown menu (#26694)
  • [Refactor] getIssueStatsChunk to move inner function into own one (#26671)
  • Remove fomantic loader module (#26670)
  • Add member, collaborator, contributor, and first-time contributor roles and tooltips (#26658)
  • Improve some flex layouts (#26649)
  • Use line-height: normal by default (#26635)
  • Improve the branch selector tab UI (#26631)
  • Improve show role (#26621)
  • Remove avatarHTML from template helpers (#26598)
  • Allow text selection in actions step header (#26588)
  • Improve translation of milestone filters (#26569)
  • Rewrite the DiffFileTreeItem and fix misalignment (#26565)
  • Add optimistic lock to ActionRun table (#26563)
  • Update team invitation email link (#26550)
  • Differentiate better between user settings and admin settings (#26538)
  • Check disabled workflow when rerun jobs (#26535)
  • Improve deadline icon location in milestone list page (#26532)
  • Improve repo sub menu (#26531)
  • Fix the display of org level badges (#26504)
  • Rename Sync2 -> Sync (#26479)
  • Fix stderr usages (#26477)
  • Remove fomantic transition module (#26469)
  • Refactor tests (#26464)
  • Refactor project templates (#26448)
  • Fall back to esbuild for css minify (#26445)
  • Use correct pull request commit link instead of a generic commit link (#26434)
  • Refactor "editorconfig" (#26391)
  • Remove unnecessary template helper repoAvatar (#26387)
  • Remove unnecessary template helper DisableGravatar (#26386)
  • Use template context function for avatar rendering (#26385)
  • Rename code_langauge.go to code_language.go (#26377)
  • Use more IssueList instead of []*Issue (#26369)
  • Improve CLI and messages (#26341)
  • Refactor backend SVG package and add tests (#26335)
  • Add link to job details and tooltip to commit status in repo list in dashboard (#26326)
  • Remove commit load branches and tags in wiki repo (#26304)
  • Add highlight to selected repos in milestone dashboard (#26300)
  • Delete issue_service.CreateComment (#26298)
  • Do not show Profile README when repository is private (#26295)
  • Tweak actions menu (#26278)
  • Start using template context function (#26254)
  • Use calendar icon for Joined on... in profiles (#26215)
  • Add 'Show on a map' button to Location in profile, fix layout (#26214)
  • Render plaintext task list items for markdown files (#26186)
  • Add tooltip to describe LFS table column and color delete LFS file button red (#26181)
  • Release attachments duplicated check (#26176)
  • De-emphasize issue sidebar buttons (#26171)
  • Fixing the align of commit stats in commit_page template. (#26161)
  • Allow editing push mirrors after creation (#26151)
  • Move web JSON functions to web context and simplify code (#26132)
  • Refactor improve NoBetterThan (#26126)
  • Remove db.DefaultContext in routers/ and cmd/ (#26076)
  • Improve "gitea doctor" sub-command and fix "help" commands (#26072)
  • Add context parameter to some database functions (#26055)
  • Docusaurus-ify (#26051)
  • Improve text for empty issue/pr description (#26047)
  • Fix the truncate and alignment problem for some admin tables (#26042)
  • Categorize admin settings sidebar panel (#26030)
  • Remove redundant "RouteMethods" method (#26024)
  • Refactor and enhance issue indexer to support both searching, filtering and paging (#26012)
  • Add a link to OpenID Issuer URL in WebFinger response (#26000)
  • Replace gogs/cron with go-co-op/go...

v1.20.4

• SECURITY
  • Check blocklist for emails when adding them to account (#26812) (#26831)
• ENHANCEMENTS
  • Add branch_filter to hooks API endpoints (#26599) (#26632)
  • Fix incorrect "tabindex" attributes (#26733) (#26734)
  • Use line-height: normal by default (#26635) (#26708)
  • Fix unable to display individual-level project (#26198) (#26636)
• BUGFIXES
  • Fix wrong review requested number (#26784) (#26880)
  • Avoid double-unescaping of form value (#26853) (#26863)
  • Redirect from {repo}/issues/new to {repo}/issues/new/choose when blank issues are disabled (#26813) (#26847)
  • Sync tags when adopting repos (#26816) (#26834)
  • Fix verifyCommits error when push a new branch (#26664) (#26810)
  • Include the GITHUB_TOKEN/GITEA_TOKEN secret for fork pull requests (#26759) (#26806)
  • Fix some slice append usages (#26778) (#26798)
  • Add fix incorrect can_create_org_repo for org owner team (#26683) (#26791)
  • Fix bug for ctx usage (#26763)
  • Make issue template field template access correct template data (#26698) (#26709)
  • Use correct minio error (#26634) (#26639)
  • Ignore the trailing slashes when comparing oauth2 redirect_uri (#26597) (#26618)
  • Set errwriter for urfave/cli v1 (#26616)
  • Fix reopen logic for agit flow pull request (#26399) (#26613)
  • Fix context filter has no effect in dashboard (#26695) (#26811)
  • Fix being unable to use a repo that prohibits accepting PRs as a PR source. (#26785) (#26790)
  • Fix Page Not Found error (#26768)

v1.20.3

• BREAKING
  • Fix the wrong derive path (#26271) (#26318)
• SECURITY
  • Fix API leaking Usermail if not logged in (#25097) (#26350)
• FEATURES
  • Add ThreadID parameter for Telegram webhooks (#25996) (#26480)
• ENHANCEMENTS
  • Add minimum polyfill to support "relative-time-element" in PaleMoon (#26575) (#26578)
  • Fix dark theme highlight for "NameNamespace" (#26519) (#26527)
  • Detect ogg mime-type as audio or video (#26494) (#26505)
  • Use object-fit: contain for oauth2 custom icons (#26493) (#26498)
  • Move dropzone progress bar to bottom to show filename when uploading (#26492) (#26497)
  • Remove last newline from config file (#26468) (#26471)
  • Minio: add missing region on client initialization (#26412) (#26438)
  • Add pull request review request webhook event (#26401) (#26407)
  • Fix text truncate (#26354) (#26384)
  • Fix incorrect color of selected assignees when create issue (#26324) (#26372)
  • Display human-readable text instead of cryptic filemodes (#26352) (#26358)
  • Hide last indexed SHA when a repo could not be indexed yet (#26340) (#26345)
  • Fix the topic validation rule and suport dots (#26286) (#26303)
  • Fix due date rendering the wrong date in issue (#26268) (#26274)
  • Don't autosize textarea in diff view (#26233) (#26244)
  • Fix commit compare style (#26209) (#26226)
  • Warn instead of reporting an error when a webhook cannot be found (#26039) (#26211)
• BUGFIXES
  • Use "input" event instead of "keyup" event for migration form (#26602) (#26605)
  • Do not use deprecated log config options by default (#26592) (#26600)
  • Fix "issueReposQueryPattern does not match query" (#26556) (#26564)
  • Sync repo's IsEmpty status correctly (#26517) (#26560)
  • Fix project filter bugs (#26490) (#26558)
  • Use hidden over clip for text truncation (#26520) (#26522)
  • Set "type=button" for editor's toolbar buttons (#26510) (#26518)
  • Fix NuGet search endpoints (#25613) (#26499)
  • Fix storage path logic especially for relative paths (#26441) (#26481)
  • Close stdout correctly for "git blame" (#26470) (#26473)
  • Check first if minio bucket exists before trying to create it (#26420) (#26465)
  • Avoiding accessing undefined tributeValues #26461 (#26462)
  • Call git.InitSimple for runRepoSyncReleases (#26396) (#26450)
  • Add transaction when creating pull request created dirty data (#26259) (#26437)
  • Fix wrong middleware sequence (#26428) (#26436)
  • Fix admin queue page title and fix CI failures (#26409) (#26421)
  • Introduce ctx.PathParamRaw to avoid incorrect unescaping (#26392) (#26405)
  • Bypass MariaDB performance bug of the "IN" sub-query, fix incorrect IssueIndex (#26279) (#26368)
  • Fix incorrect CLI exit code and duplicate error message (#26346) (#26347)
  • Prevent newline errors with Debian packages (#26332) (#26342)
  • Fix bug with sqlite load read (#26305) (#26339)
  • Make git batch operations use parent context timeout instead of default timeout (#26325) (#26330)
  • Support getting changed files when commit ID is EmptySHA (#26290) (#26316)
  • Clarify the logger's MODE config option (#26267) (#26281)
  • Use shared template for webhook icons (#26242) (#26246)
  • Fix pull request check list is limited (#26179) (#26245)
  • Fix attachment clipboard copy on insecure origin (#26224) (#26231)
  • Fix access check for org-level project (#26182) (#26223)
• MISC
  • Improve profile readme rendering (#25988) (#26453)
  • [docs] Add missing backtick in quickstart.zh-cn.md (#26349) (#26357)
  • Upgrade x/net to 0.13.0 (#26301)

v1.20.2

• ENHANCEMENTS
  • Calculate MAX_WORKERS default value by CPU number (#26177) (#26183)
  • Display deprecated warning in admin panel pages as well as in the log file (#26094) (#26154)
• BUGFIXES
  • Fix allowed user types setting problem (#26200) (#26206)
  • Fix handling of plenty Nuget package versions (#26075) (#26173)
  • Fix UI regression of asciinema player (#26159) (#26162)
  • Fix LFS object list style (#26133) (#26147)
  • Fix allowed user types setting problem (#26200) (#26206)
  • Prevent primary key update on migration (#26192) (#26199)
  • Fix bug when pushing to a pull request which enabled dismiss approval automatically (#25882) (#26158)
  • Fix bugs in LFS meta garbage collection (#26122) (#26157)
  • Update xorm version (#26128) (#26150)
  • Remove "misc" scope check from public API endpoints (#26134) (#26149)
  • Fix CLI allowing creation of access tokens with existing name (#26071) (#26144)
  • Fix incorrect router logger (#26137) (#26143)
  • Improve commit graph alignment and truncating (#26112) (#26127)
  • Avoid writing config file if not installed (#26107) (#26113)
  • Fix escape problems in the branch selector (#25875) (#26103)
  • Fix handling of Debian files with trailing slash (#26087) (#26098)
  • Fix Missing 404 swagger response docs for /admin/users/{username} (#26086) (#26089)
  • Use stderr as fallback if the log file can't be opened (#26074) (#26083)
  • Increase table cell horizontal padding (#26140) (#26142)
  • Fix wrong workflow status when rerun a job in an already finished workflow (#26119) (#26124)
  • Fix duplicated url prefix on issue context menu (#26066) (#26067)

v1.20.1

• SECURITY
  • Disallow dangerous URL schemes (#25960) (#25964)
• ENHANCEMENTS
  • Show the mismatched ROOT_URL warning on the sign-in page if OAuth2 is enabled (#25947) (#25972)
  • Make pending commit status yellow again (#25935) (#25968)
• BUGFIXES
  • Fix version in rpm repodata/primary.xml.gz (#26009) (#26048)
  • Fix env config parsing for "GITEA____APP_NAME" (#26001) (#26013)
  • ParseScope with owner/repo always sets owner to zero (#25987) (#25989)
  • Fix SSPI auth panic (#25955) (#25969)
  • Avoid creating directories when loading config (#25944) (#25957)
  • Make environment-to-ini work with INSTALL_LOCK=true (#25926) (#25937)
  • Ignore runs-on with expressions when warning no matched runners (#25917) (#25933)
  • Avoid opening/closing PRs which are already merged (#25883) (#25903)
• DOCS
  • RPM Registry: Show zypper commands for SUSE based distros as well (#25981) (#26020)
  • Correctly refer to dev tags as nightly in the docker docs (#26004) (#26019)
  • Update path related documents (#25417) (#25982)
• MISC
  • Adding remaining enum for migration repo model type. (#26021) (#26034)
  • Fix the route for pull-request's authors (#26016) (#26018)
  • Fix commit status color on dashboard repolist (#25993) (#25998)
  • Avoid hard-coding height in language dropdown menu (#25986) (#25997)
  • Add shutting down notice (#25920) (#25922)
  • Fix incorrect milestone count when provide a keyword (#25880) (#25904)

v1.20.0

For more in-depth information, check out the blog post!

• BREAKING
  • Fix WORK_DIR for docker (root) image (#25738) (#25811)
  • Restrict [actions].DEFAULT_ACTIONS_URL to only github or self (#25581) (#25604)
  • Refactor path & config system (#25330) (#25416)
  • Fix all possible setting error related storages and added some tests (#23911) (#25244)
  • Use a separate admin page to show global stats, remove actions stat (#25062)
  • Remove the service worker (#25010)
  • Remove meta tags theme-color and default-theme (#24960)
  • Use [git.config] for reflog cleaning up (#24958)
  • Allow all URL schemes in Markdown links by default (#24805)
  • Redesign Scoped Access Tokens (#24767)
  • Fix team members API endpoint pagination (#24754)
  • Rewrite logger system (#24726)
  • Increase default LFS auth timeout from 20m to 24h (#24628)
  • Rewrite queue (#24505)
  • Remove unused setting time.FORMAT (#24430)
  • Refactor setting.Other and remove unused SHOW_FOOTER_BRANDING (#24270)
  • Correct the access log format (#24085)
  • Reserve ".png" suffix for user/org names (#23992)
  • Prefer native parser for SSH public key parsing (#23798)
  • Editor preview support for external renderers (#23333)
  • Add Gitea Profile Readmes (#23260)
  • Refactor ctx in templates (#23105)
• SECURITY
  • Test if container blob is accessible before mounting (#22759) (#25784)
  • Set type="password" on all auth_token fields (#22175)
• FEATURES
  • Add button on diff header to copy file name, misc diff header tweaks (#24986)
  • API endpoint for changing/creating/deleting multiple files (#24887)
  • Support changing git config through app.ini, use diff.algorithm=histogram by default (#24860)
  • Add up and down arrows to selected lookup repositories (#24727)
  • Add Go package registry (#24687)
  • Add status indicator on main home screen for each repo (#24638)
  • Support for status check pattern (#24633)
  • Implement Cargo HTTP index (#24452)
  • Add Debian package registry (#24426)
  • Add the ability to pin Issues (#24406)
  • Add follow organization and fix the logic of following page (#24345)
  • Allow webp images as avatars (#24248)
  • Support upload outputs and use needs context on Actions (#24230)
  • Allow adding new files to an empty repo (#24164)
  • Make wiki title supports dashes and improve wiki name related features (#24143)
  • Add monospace toggle button to textarea (#24034)
  • Use auto-updating, natively hoverable, localized time elements (#23988)
  • Add ntlm authentication support for mail (#23811)
  • Add CLI command to register runner tokens (#23762)
  • Add Alpine package registry (#23714)
  • Expand/Collapse all changed files (#23639)
  • Add unset default project column (#23531)
  • Add activity feeds API (#23494)
  • Add RPM registry (#23380)
  • Add meilisearch support (#23136)
  • Add API for License templates (#23009)
  • Add admin API email endpoints (#22792)
  • Add user rename endpoint to admin api (#22789)
  • Add API for gitignore templates (#22783)
  • Implement actions artifacts (#22738)
  • Add RSS Feeds for branches and files (#22719)
  • Display when a repo was archived (#22664)
  • Add Swift package registry (#22404)
  • Add CRAN package registry (#22331)
  • Add user webhooks (#21563)
  • Implement systemd-notify protocol (#21151)
  • Implement Issue Config (#20956)
  • Add API to manage issue dependencies (#17935)
• API
  • Use correct response code in push mirror creation response in v1_json.tmpl (#25476) (#25571)
  • Fix Permission in API returned repository struct (#25388) (#25441)
  • Add API for Label templates (#24602)
  • Filters for GetAllCommits (#24568)
  • Add ability to specify '--not' from GetAllCommits (#24409)
  • Support uploading file to empty repo by API (#24357)
  • Add absent repounits to create/edit repo API (#23500)
  • Add login name and source id for admin user searching API (#23376)
  • Create a branch directly from commit on the create branch API (#22956)
• ENHANCEMENTS
  • Make add line comment buttons focusable (#25894) (#25896)
  • Always pass 6-digit hex color to monaco (#25780) (#25782)
  • Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764)
  • Hide add file button for pull mirrors (#25748) (#25751)
  • Allow/fix review (approve/reject) of empty PRs (#25690) (#25732)
  • Fix tags header and pretty format numbers (#25624) (#25694)
  • Actions list enhancements (#25601) (#25678)
  • Fix show more for image on diff page (#25672) (#25673)
  • Prevent SVG shrinking (#25652) (#25669)
  • Fix UI misalignment on user setting page (#25629) (#25656)
  • Use css on labels (#25626) (#25636)
  • Read-only checkboxes don't appear and don't entirely act the way one might expect (#25573) (#25602)
  • Redirect to package after version deletion (#25594) (#25599)
  • Reduce table padding globally (#25568) (#25577)
  • Change Regenerate Secret button display (#25534) (#25541)
  • Fix rerun icon on action view component (#25531) (#25536)
  • Move some regexp out of functions (#25430) (#25445)
  • Diff page enhancements (#25398) (#25437)
  • Various UI fixes (#25264) (#25431)
  • Fix label list divider (#25312) (#25372)
  • Fix UI on mobile view (#25315) (#25340)
  • When viewing a file, hide the add button (#25320) (#25339)
  • Show if File is Executable (#25287) (#25300)
  • Fix edit OAuth application width (#25262) (#25263)
  • Use flex to align SVG and text (#25163) (#25260)
  • Revert overflow: overlay (revert #21850) (#25231) (#25239)
  • Use inline SVG for built-in OAuth providers (#25171) (#25234)
  • Change access token UI to select dropdowns (#25109) (#25230)
  • Remove hacky patch for "safari emoji glitch fix" (#25208) (#25211)
  • Minor arc-green color tweaks (#25175) (#25205)
  • Button and color enhancements (#24989) (#25176)
  • Fix mobile navbar and misc cleanups (#25134) (#25169)
  • Modify OAuth login ui and fix display name, iconurl related logic (#25030) (#25161)
  • Improve notification icon and navbar (#25111) (#25124)
  • Add details summary for vertical menus in settings to allow toggling (#25098)
  • Don't display select all issues checkbox when no issues are available (#25086)
  • Use RepositoryList instead of []*Repository (#25074)
  • Add ability to set multiple redirect URIs in OAuth application UI (#25072)
  • Use git command instead of the ini package to remove the origin remote (#25066)
  • Remove cancel button from branch protection form (#25063)
  • Show file tree by default (#25052)
  • Add Progressbar to Milestone Page (#25050)
  • Minor UI improvements: logo alignment, auth map editor, auth name display (#25043)
  • Allow for PKCE flow without client secret + add docs (#25033)
  • Refactor INI package (first step) (#25024)
  • Various style fixes (#25008)
  • Fix delete user account modal (#25004)
  • Refactor diffFileInfo / DiffTreeStore (#24998)
  • Add user level action runners (#24995)
  • Rename NotifyPullReviewRequest to NotifyPullRequestReviewRequest (#24988)
  • Add step start time to ViewStepLog (#24980)
  • Add dark mode to API Docs (#24971)
  • Display file mode for new file and file mode changes (#24966)
  • Make the 500 page load themes (#24953)
  • Show bot label next to username when rendering autor link if the user is a bot (#24943)
  • Repo list improvements, fix bold helper classes (#24935)
  • Improve queue and logger context (#24924)
  • Improve RunMode / dev mode (#24886)
  • Improve some Forms (#24878)
  • Add show timestamp/seconds and fullscreen options to action page (#24876)
  • Fix double border and adjust width for user profile page (#24870)
  • Improve Actions CSS (#24864)
  • Fix @font-face overrides (#24855)
  • Remove In your repositories link in milestones dashboard (#24853)
  • Fix missing yes/no in delete time log modal (#24851)
  • Show new pull request button also on subdirectories and files (#24842)
  • Make environment-to-ini support loading key value from file (#24832)
  • Support wildcard in email domain allow/block list (#24831)
  • Use CommentList instead of []*Comment (#24828)
  • Add RTL rendering support to Markdown (#24816)
  • Rework notifications list (#24812)
  • Mute repo names in dashboard repo list (#24811)
  • Fix max width and margin of comment box on conversation page (#24809)
  • Some refactors for issues stats (#24793)
  • Rework label colors (#24790)
  • Fix OAuth login loading state (#24788)
  • Remove duplicated issues options and some more refactors (#24787)
  • Decouple the different contexts from each other (#24786)
  • Remove background on user dashboard filter bar (#24779)
  • Improve and fix bugs surrounding reactions (#24760)
  • Make the color of zero-contribution-squares in the activity heatmap more subtle (#24758)
  • Fix WEBP image copying (#24743)
  • Rework OAuth login buttons, swap github logo to monocolor (#24740)
  • Consolidate the two review boxes into one (#24738)
  • Unification of registration fields order (#24737)
  • Refactor Pull Mirror and fix out-of-sync bugs (#24732)
  • Improvements for action detail page (#24718)
  • Fix flash of unstyled content in action view page (#24712)
  • Don't filter action runs based on state (#24711)
  • Optimize actions list by removing an unnecessary git call (#24710)
  • Support no label/assignee filter and batch clearing labels/assignees (#24707)
  • Add icon support for safari (#24697)
  • Use standard HTTP library to serve files (#24693)
  • Improve button-ghost, remove tertiary button (#24692)
  • Only hide tooltip tippy instances (#24688)
  • Support migrating storage for actions log via command line (#24679)
  • Remove highlight in repo list (#24675)
  • Add markdown preview to Submit Review Textarea (#24672)
  • ...