v1.21.5

• SECURITY
  • Prevent anonymous container access if RequireSignInView is enabled (#28877) (#28882)
  • Update go dependencies and fix go-git (#28893) (#28934)
• BUGFIXES
  • Revert "Speed up loading the dashboard on mysql/mariadb (#28546)" (#29006) (#29007)
  • Fix an actions schedule bug (#28942) (#28999)
  • Fix update enable_prune even if mirror_interval is not provided (#28905) (#28929)
  • Fix uploaded artifacts should be overwritten (#28726) backport v1.21 (#28832)
  • Preserve BOM in web editor (#28935) (#28959)
  • Strip / from relative links (#28932) (#28952)
  • Don't remove all mirror repository's releases when mirroring (#28817) (#28939)
  • Implement MigrateRepository for the actions notifier (#28920) (#28923)
  • Respect branch info for relative links (#28909) (#28922)
  • Don't reload timeline page when (un)resolving or replying conversation (#28654) (#28917)
  • Only migrate the first 255 chars of a Github issue title (#28902) (#28912)
  • Fix sort bug on repository issues list (#28897) (#28901)
  • Fix DeleteCollaboration transaction behaviour (#28886) (#28889)
  • Fix schedule not trigger bug because matching full ref name with short ref name (#28874) (#28888)
  • Fix migrate storage bug (#28830) (#28867)
  • Fix archive creating LFS hooks and breaking pull requests (#28848) (#28851)
  • Fix reverting a merge commit failing (#28794) (#28825)
  • Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate (#28891) (#28895)
  • Fix incorrect PostgreSQL connection string for Unix sockets (#28865) (#28870)
• ENHANCEMENTS
  • Make loading animation less aggressive (#28955) (#28956)
  • Avoid duplicate JS error messages on UI (#28873) (#28881)
  • Bump @github/relative-time-element to 4.3.1 (#28819) (#28826)
• MISC
  • Warn that DISABLE_QUERY_AUTH_TOKEN is false only if it's explicitly defined (#28783) (#28868)
  • Remove duplicated checkinit on git module (#28824) (#28831)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.21.4

• SECURITY
  • Update github.com/cloudflare/circl (#28789) (#28790)
  • Require token for GET subscription endpoint (#28765) (#28768)
• BUGFIXES
  • Use refname:strip-2 instead of refname:short when syncing tags (#28797) (#28811)
  • Fix links in issue card (#28806) (#28807)
  • Fix nil pointer panic when exec some gitea cli command (#28791) (#28795)
  • Require token for GET subscription endpoint (#28765) (#28778)
  • Fix button size in "attached header right" (#28770) (#28774)
  • Fix convert.ToTeams on empty input (#28426) (#28767)
  • Hide code related setting options in repository when code unit is disabled (#28631) (#28749)
  • Fix incorrect URL for "Reference in New Issue" (#28716) (#28723)
  • Fix panic when parsing empty pgsql host (#28708) (#28709)
  • Upgrade xorm to new version which supported update join for all supported databases (#28590) (#28668)
  • Fix alpine package files are not rebuilt (#28638) (#28665)
  • Avoid cycle-redirecting user/login page (#28636) (#28658)
  • Fix empty ref for cron workflow runs (#28640) (#28647)
  • Remove unnecessary syncbranchToDB with tests (#28624) (#28629)
  • Use known issue IID to generate new PR index number when migrating from GitLab (#28616) (#28618)
  • Fix flex container width (#28603) (#28605)
  • Fix the scroll behavior for emoji/mention list (#28597) (#28601)
  • Fix wrong due date rendering in issue list page (#28588) (#28591)
  • Fix status_check_contexts matching bug (#28582) (#28589)
  • Fix 500 error of searching commits (#28576) (#28579)
  • Use information from previous blame parts (#28572) (#28577)
  • Update mermaid for 1.21 (#28571)
  • Fix 405 method not allowed CORS / OIDC (#28583) (#28586) (#28587) (#28611)
  • Fix GetCommitStatuses (#28787) (#28804)
  • Forbid removing the last admin user (#28337) (#28793)
  • Fix schedule tasks bugs (#28691) (#28780)
  • Fix issue dependencies (#27736) (#28776)
  • Fix system webhooks API bug (#28531) (#28666)
  • Fix when private user following user, private user will not be counted in his own view (#28037) (#28792)
  • Render code block in activity tab (#28816) (#28818)
• ENHANCEMENTS
  • Rework markup link rendering (#26745) (#28803)
  • Modernize merge button (#28140) (#28786)
  • Speed up loading the dashboard on mysql/mariadb (#28546) (#28784)
  • Assign pull request to project during creation (#28227) (#28775)
  • Show description as tooltip instead of title for labels (#28754) (#28766)
  • Make template DateTime show proper tooltip (#28677) (#28683)
  • Switch destination directory for apt signing keys (#28639) (#28642)
  • Include heap pprof in diagnosis report to help debugging memory leaks (#28596) (#28599)
• DOCS
  • Suggest to use Type=simple for systemd service (#28717) (#28722)
  • Extend description for ARTIFACT_RETENTION_DAYS (#28626) (#28630)
• MISC
  • Add -F to commit search to treat keywords as strings (#28744) (#28748)
  • Add download attribute to release attachments (#28739) (#28740)
  • Concatenate error in checkIfPRContentChanged (#28731) (#28737)
  • Improve 1.21 document for Database Preparation (#28643) (#28644)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.21.3

• SECURITY
  • Update golang.org/x/crypto (#28519)
• API
  • chore(api): support ignore password if login source type is LDAP for creating user API (#28491) (#28525)
  • Add endpoint for not implemented Docker auth (#28457) (#28462)
• ENHANCEMENTS
  • Add option to disable ambiguous unicode characters detection (#28454) (#28499)
  • Refactor SSH clone URL generation code (#28421) (#28480)
  • Polyfill SubmitEvent for PaleMoon (#28441) (#28478)
• BUGFIXES
  • Fix the issue ref rendering for wiki (#28556) (#28559)
  • Fix duplicate ID when deleting repo (#28520) (#28528)
  • Only check online runner when detecting matching runners in workflows (#28286) (#28512)
  • Initalize stroage for orphaned repository doctor (#28487) (#28490)
  • Fix possible nil pointer access (#28428) (#28440)
  • Don't show unnecessary citation JS error on UI (#28433) (#28437)
• DOCS
  • Update actions document about comparsion as Github Actions (#28560) (#28564)
  • Fix documents for "custom/public/assets/" (#28465) (#28467)
• MISC
  • Fix inperformant query on retrifing review from database. (#28552) (#28562)
  • Improve the prompt for "ssh-keygen sign" (#28509) (#28510)
  • Update docs for DISABLE_QUERY_AUTH_TOKEN (#28485) (#28488)
  • Fix Chinese translation of config cheat sheet[API] (#28472) (#28473)
  • Retry SSH key verification with additional CRLF if it failed (#28392) (#28464)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.21.2

• SECURITY
  • Rebuild with recently released golang version
  • Fix missing check (#28406) (#28411)
  • Do some missing checks (#28423) (#28432)
• BUGFIXES
  • Fix margin in server signed signature verification view (#28379) (#28381)
  • Fix object does not exist error when checking citation file (#28314) (#28369)
  • Use filepath instead of path to create SQLite3 database file (#28374) (#28378)
  • Fix the runs will not be displayed bug when the main branch have no workflows but other branches have (#28359) (#28365)
  • Handle repository.size column being NULL in migration v263 (#28336) (#28363)
  • Convert git commit summary to valid UTF8. (#28356) (#28358)
  • Fix migration panic due to an empty review comment diff (#28334) (#28362)
  • Add HEAD support for rpm repo files (#28309) (#28360)
  • Fix RPM/Debian signature key creation (#28352) (#28353)
  • Keep profile tab when clicking on Language (#28320) (#28331)
  • Fix missing issue search index update when changing status (#28325) (#28330)
  • Fix wrong link in protect_branch_name_pattern_desc (#28313) (#28315)
  • Read previous info from git blame (#28306) (#28310)
  • Ignore "non-existing" errors when getDirectorySize calculates the size (#28276) (#28285)
  • Use appSubUrl for OAuth2 callback URL tip (#28266) (#28275)
  • Meilisearch: require all query terms to be matched (#28293) (#28296)
  • Fix required error for token name (#28267) (#28284)
  • Fix issue will be detected as pull request when checking First-time contributor (#28237) (#28271)
  • Use full width for project boards (#28225) (#28245)
  • Increase "version" when update the setting value to a same value as before (#28243) (#28244)
  • Also sync DB branches on push if necessary (#28361) (#28403)
  • Make gogit Repository.GetBranchNames consistent (#28348) (#28386)
  • Recover from panic in cron task (#28409) (#28425)
  • Deprecate query string auth tokens (#28390) (#28430)
• ENHANCEMENTS
  • Improve doctor cli behavior (#28422) (#28424)
  • Fix margin in server signed signature verification view (#28379) (#28381)
  • Refactor template empty checks (#28351) (#28354)
  • Read previous info from git blame (#28306) (#28310)
  • Use full width for project boards (#28225) (#28245)
  • Enable system users search via the API (#28013) (#28018)

v1.20.6

• SECURITY
  • Fix comment permissions (#28213) (#28217)
  • Dont leak private users via extensions (#28023) (#28028)
  • Unify two factor check (#27915) (#27939)
  • Support allowed hosts for webhook to work with proxy (#27655) (#27674)
• BUGFIXES
  • Fix no ActionTaskOutput table waring (#28149) (#28151)
  • Restricted users only see repos in orgs which their team was assigned to (#28025) (#28050)
  • Fix DownloadFunc when migrating releases (#27887) (#27889)
  • Fix http protocol auth (#27875) (#27878)
  • Revert "fix orphan check for deleted branch (#27310) (#27320)" (#27763)
  • Fix label render containing invalid HTML (#27752) (#27761)
  • Fix poster is not loaded in get default merge message (#27657) (#27665)
  • Fix 404 when deleting Docker package with an internal version (#27615) (#27629)
  • Fix attachment download bug (#27486) (#27570)
  • When comparing with an non-exist repository, return 404 but 500 (#27437) (#27441)
• API
  • Fix package webhook (#27839) (#27854)
  • Fix org team endpoint (#27721) (#27729)
• ENHANCEMENTS
  • Render email addresses as such if followed by punctuation (#27987) (#27991)
  • Fix mermaid flowchart margin issue (#27503) (#27517)
  • Fix panic in storageHandler (#27446) (#27478)
• DOCS
  • Update agit-support.en-us.md (#27652)
• MISC
  • Fix wrong xorm Delete usage(backport for 1.20) (#28003)
  • Remove duplicated button in Install web page (#27941)
  • Avoid run change title process when the title is same (#27467) (#27557)

v1.21.1

• SECURITY
  • Fix comment permissions (#28213) (#28216)
• BUGFIXES
  • Fix delete-orphaned-repos (#28200) (#28202)
  • Make CORS work for oauth2 handlers (#28184) (#28185)
  • Fix missing buttons (#28179) (#28181)
  • Fix no ActionTaskOutput table waring (#28149) (#28152)
  • Fix empty action run title (#28113) (#28148)
  • Use "is-loading" to avoid duplicate form submit for code comment (#28143) (#28147)
  • Fix Matrix and MSTeams nil dereference (#28089) (#28105)
  • Fix incorrect pgsql conn builder behavior (#28085) (#28098)
  • Fix system config cache expiration timing (#28072) (#28090)
  • Restricted users only see repos in orgs which their team was assigned to (#28025) (#28051)
• API
  • Fix permissions for Token DELETE endpoint to match GET and POST (#27610) (#28099)
• ENHANCEMENTS
  • Do not display search box when there's no packages yet (#28146) (#28159)
  • Add missing packages.cleanup.success (#28129) (#28132)
• DOCS
  • Docs: Replace deprecated IS_TLS_ENABLED mailer setting in email setup (#28205) (#28208)
  • Fix the description about the default setting for action in quick start document (#28160) (#28168)
  • Add guide page to actions when there's no workflows (#28145) (#28153)
• MISC
  • Use full width for PR comparison (#28182) (#28186)

v1.21.0

Changelog

• BREAKING
  • Restrict certificate type for builtin SSH server (#26789)
  • Refactor to use urfave/cli/v2 (#25959)
  • Move public asset files to the proper directory (#25907)
  • Remove commit status running and warning to align GitHub (#25839) (partially reverted: Restore warning commit status (#27504) (#27529))
  • Remove "CHARSET" config option for MySQL, always use "utf8mb4" (#25413)
  • Set SSH_AUTHORIZED_KEYS_BACKUP to false (#25412)
• FEATURES
  • User details page (#26713)
  • Chore(actions): support cron schedule task (#26655)
  • Support rebuilding issue indexer manually (#26546)
  • Allow to archive labels (#26478)
  • Add disable workflow feature (#26413)
  • Support .git-blame-ignore-revs file (#26395)
  • Pre-register OAuth2 applications for git credential helpers (#26291)
  • Add Retry button when creating a mirror-repo fails (#26228)
  • Artifacts retention and auto clean up (#26131)
  • Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
  • Implement auto-cancellation of concurrent jobs if the event is push (#25716)
  • Newly pushed branches hints on repository home page (#25715)
  • Display branch commit status (#25608)
  • Add direct serving of package content (#25543)
  • Add commits dropdown in PR files view and allow commit by commit review (#25528)
  • Allow package cleanup from admin page (#25307)
  • Batch delete issue and improve tippy opts (#25253)
  • Show branches and tags that contain a commit (#25180)
  • Add actor and status dropdowns to run list (#25118)
  • Allow Organisations to have a E-Mail (#25082)
  • Add codeowners feature (#24910)
  • Actions Artifacts support uploading multiple files and directories (#24874)
  • Support configuration variables on Gitea Actions (#24724)
  • Support downloading raw task logs (#24451)
• API
  • Unify two factor check (#27915) (#27929)
  • Fix package webhook (#27839) (#27855)
  • Fix/upload artifact error windows (#27802) (#27840)
  • Fix bad method call when deleting user secrets via API (#27829) (#27831)
  • Do not force creation of _cargo-index repo on publish (#27266) (#27765)
  • Delete repos of org when purge delete user (#27273) (#27728)
  • Fix org team endpoint (#27721) (#27727)
  • Api: GetPullRequestCommits: return file list (#27483) (#27539)
  • Don't let API add 2 exclusive labels from same scope (#27433) (#27460)
  • Redefine the meaning of column is_active to make Actions Registration Token generation easier (#27143) (#27304)
  • Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27251)
  • Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27163)
  • Allow empty Conan files (#27092)
  • Fix token endpoints ignore specified account (#27080)
  • Reduce usage of db.DefaultContext (#27073) (#27083) (#27089) (#27103) (#27262) (#27265) (#27347) (#26076)
  • Make SSPI auth mockable (#27036)
  • Extract auth middleware from service (#27028)
  • Add RemoteAddress to mirrors (#26952)
  • Feat(API): add routes and functions for managing user's secrets (#26909)
  • Feat(API): add secret deletion functionality for repository (#26808)
  • Feat(API): add route and implementation for creating/updating repository secret (#26766)
  • Add Upload URL to release API (#26663)
  • Feat(API): update and delete secret for managing organization secrets (#26660)
  • Feat: implement organization secret creation API (#26566)
  • Add API route to list org secrets (#26485)
  • Set commit id when ref used explicitly (#26447)
  • PATCH branch-protection updates check list even when checks are disabled (#26351)
  • Add file status for API "Get a single commit from a repository" (#16205) (#25831)
  • Add API for changing Avatars (#25369)
• BUGFIXES
  • Fix viewing wiki commit on empty repo (#28040) (#28044)
  • Enable system users for comment.LoadPoster (#28014) (#28032)
  • Fixed duplicate attachments on dump on windows (#28019) (#28031)
  • Fix wrong xorm Delete usage(backport for 1.21) (#28002)
  • Add word-break to repo description in home page (#27924) (#27957)
  • Fix rendering assignee changed comments without assignee (#27927) (#27952)
  • Add word break to release title (#27942) (#27947)
  • Fix JS NPE when viewing specific range of PR commits (#27912) (#27923)
  • Show correct commit sha when viewing single commit diff (#27916) (#27921)
  • Fix 500 when deleting a dismissed review (#27903) (#27910)
  • Fix DownloadFunc when migrating releases (#27887) (#27890)
  • Fix http protocol auth (#27875) (#27876)
  • Refactor postgres connection string building (#27723) (#27869)
  • Close all hashed buffers (#27787) (#27790)
  • Fix label render containing invalid HTML (#27752) (#27762)
  • Fix duplicate project board when hitting enter key (#27746) (#27751)
  • Fix link-action redirect network error (#27734) (#27749)
  • Fix sticky diff header background (#27697) (#27712)
  • Always delete existing scheduled action tasks (#27662) (#27688)
  • Support allowed hosts for webhook to work with proxy (#27655) (#27675)
  • Fix poster is not loaded in get default merge message (#27657) (#27666)
  • Improve dropdown button alignment and fix hover bug (#27632) (#27637)
  • Improve retrying index issues (#27554) (#27634)
  • Fix 404 when deleting Docker package with an internal version (#27615) (#27630)
  • Backport manually for a tmpl issue in v1.21 (#27612)
  • Don't show Link to TOTP if not set up (#27585) (#27588)
  • Fix data-race bug when accessing task.LastRun (#27584) (#27586)
  • Fix attachment download bug (#27486) (#27571)
  • Respect SSH.KeygenPath option when calculating ssh key fingerprints (#27536) (#27551)
  • Improve dropdown's behavior when there is a search input in menu (#27526) (#27534)
  • Fix panic in storageHandler (#27446) (#27479)
  • When comparing with an non-exist repository, return 404 but 500 (#27437) (#27442)
  • Fix pr template (#27436) (#27440)
  • Fix git 2.11 error when checking IsEmpty (#27393) (#27397)
  • Allow get release download files and lfs files with oauth2 token format (#26430) (#27379)
  • Fix missing ctx for GetRepoLink in dashboard (#27372) (#27375)
  • Absolute positioned checkboxes overlay floated elements (#26870) (#27366)
  • Introduce fixes and more rigorous tests for 'Show on a map' feature (#26803) (#27365)
  • Fix repo count in org action settings (#27245) (#27353)
  • Add logs for data broken of comment review (#27326) (#27345)
  • Fix the approval count of PR when there is no protection branch rule (#27272) (#27343)
  • Fix Bug in Issue Config when only contact links are set (#26521) (#27334)
  • Improve issue history dialog and make poster can delete their own history (#27323) (#27327)
  • Fix orphan check for deleted branch (#27310) (#27321)
  • Fix protected branch icon location (#26576) (#27317)
  • Fix yaml test (#27297) (#27303)
  • Fix some animation bugs (#27287) (#27294)
  • Fix incorrect change from #27231 (#27275) (#27282)
  • Add missing public user visibility in user details page (#27246) (#27250)
  • Fix EOL handling in web editor (#27141) (#27234)
  • Fix issues on action runners page (#27226) (#27233)
  • Quote table release in sql queries (#27205) (#27218)
  • Fix release URL in webhooks (#27182) (#27185)
  • Fix review request number and add more tests (#27104) (#27168)
  • Fix the variable regexp pattern on web page (#27161) (#27164)
  • Fix: treat tab "overview" as "repositories" in user profiles without readme (#27124)
  • Fix NPE when editing OAuth2 applications (#27078)
  • Fix the incorrect route path in the user edit page. (#27007)
  • Fix the secret regexp pattern on web page (#26910)
  • Allow users with write permissions for issues to add attachments with API (#26837)
  • Make "link-action" backend code respond correct JSON content (#26680)
  • Use line-height: normal by default (#26635)
  • Fix NPM packages name validation (#26595)
  • Rewrite the DiffFileTreeItem and fix misalignment (#26565)
  • Return empty when searching issues with no repos (#26545)
  • Explain SearchOptions and fix ToSearchOptions (#26542)
  • Add missing triggers to update issue indexer (#26539)
  • Handle base64 decoding correctly to avoid panic (#26483)
  • Avoiding accessing undefined mentionValues (#26461)
  • Fix incorrect redirection in new issue using references (#26440)
  • Fix the bug when getting files changed for pull_request_target event (#26320)
  • Remove IsWarning in tmpl (#26120)
  • Fix loading LFS_JWT_SECRET from wrong section (#26109)
  • Fixing redirection issue for logged-in users (#26105)
  • Improve "gitea doctor" sub-command and fix "help" commands (#26072)
  • Fix the truncate and alignment problem for some admin tables (#26042)
  • Update minimum password length requirements (#25946)
  • Do not "guess" the file encoding/BOM when using API to upload files (#25828)
  • Restructure issue list template, styles (#25750)
  • Fix ref for workflows triggered by pull_request_target (#25743)
  • Fix issues indexer document mapping (#25619)
  • Use JSON response for "user/logout" (#25522)
  • Fix migrate page layout on mobile (#25507)
  • Link to existing PR when trying to open a new PR on the same branches (#25494)
  • Do not publish docker release images on -dev tags (#25471)
  • Support pull_request_target event (#25229)
  • Modify the content format of the Feishu webhook (#25106)
• ENHANCEMENTS
  • Render email addresses as such if followed by punctuation (#27987) (#27992)
  • Show error toast when file size exceeds the limits (#27985) (#27986)
  • Fix citation error when the file size is larger than 1024 bytes (#27958) (#27965)
  • Remove action runners on user deletion (#27902) (#27908)
  • Remove set tabindex on view issue (#27892) (#27896)
  • Reduce margin/padding on flex-list items and divid...

v1.21.0-rc1

v1.21.0-rc1

v1.20.5

• ENHANCEMENTS
  • Fix z-index on markdown completion (#27237) (#27242 & #27238)
  • Use secure cookie for HTTPS sites (#26999) (#27013)
• BUGFIXES
  • Fix git 2.11 error when checking IsEmpty (#27393) (#27396)
  • Allow get release download files and lfs files with oauth2 token format (#26430) (#27378)
  • Fix orphan check for deleted branch (#27310) (#27320)
  • Quote table release in sql queries (#27205) (#27219)
  • Fix release URL in webhooks (#27182) (#27184)
  • Fix successful return value for SyncAndGetUserSpecificDiff (#27152) (#27156)
  • fix pagination for followers and following (#27127) (#27138)
  • Fix issue templates when blank isses are disabled (#27061) (#27082)
  • Fix context cache bug & enable context cache for dashabord commits' authors(#26991) (#27017)
  • Fix INI parsing for value with trailing slash (#26995) (#27001)
  • Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27249)
  • Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27167 & #27162)
  • Fix bug of review request number (#27406) (#27104)
• TESTING
  • services/wiki: Close() after error handling (#27129) (#27137)
• DOCS
  • Improve actions docs related to pull_request event (#27126) (#27145)
• MISC
  • Add logs for data broken of comment review (#27326) (#27344)
  • Load reviewer before sending notification (#27063) (#27064)

v1.21.0-rc0

• BREAKING
  • Restrict certificate type for builtin SSH server (#26789)
  • Refactor to use urfave/cli/v2 (#25959)
  • Move public asset files to the proper directory (#25907)
  • Remove commit status running and warning to align GitHub (#25839)
  • Remove "CHARSET" config option for MySQL, always use "utf8mb4" (#25413)
  • Set SSH_AUTHORIZED_KEYS_BACKUP to false (#25412)
• SECURITY
  • Expanded minimum RSA Keylength to 3072 (#26604)
• FEATURES
  • User details page (#26713)
  • Chore(actions): support cron schedule task (#26655)
  • Support rebuilding issue indexer manually (#26546)
  • Allow to archive labels (#26478)
  • Add disable workflow feature (#26413)
  • Support .git-blame-ignore-revs file (#26395)
  • Pre-register OAuth2 applications for git credential helpers (#26291)
  • Add Retry button when creating a mirror-repo fails (#26228)
  • Artifacts retention and auto clean up (#26131)
  • Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
  • Implement auto-cancellation of concurrent jobs if the event is push (#25716)
  • Newly pushed branches hints on repository home page (#25715)
  • Display branch commit status (#25608)
  • Add direct serving of package content (#25543)
  • Add commits dropdown in PR files view and allow commit by commit review (#25528)
  • Allow package cleanup from admin page (#25307)
  • Batch delete issue and improve tippy opts (#25253)
  • Show branches and tags that contain a commit (#25180)
  • Add actor and status dropdowns to run list (#25118)
  • Allow Organisations to have a E-Mail (#25082)
  • Add codeowners feature (#24910)
  • Support configuration variables on Gitea Actions (#24724)
  • Support downloading raw task logs (#24451)
• API
  • Allow empty Conan files (#27092)
  • Next round of db.DefaultContext refactor (#27089)
  • Fix token endpoints ignore specified account (#27080)
  • Reduce usage of db.DefaultContext (#27073)
  • Make SSPI auth mockable (#27036)
  • Extract auth middleware from service (#27028)
  • Add RemoteAddress to mirrors (#26952)
  • Feat(API): add routes and functions for managing user's secrets (#26909)
  • Feat(API): add secret deletion functionality for repository (#26808)
  • Feat(API): add route and implementation for creating/updating repository secret (#26766)
  • Add Upload URL to release API (#26663)
  • Feat(API): update and delete secret for managing organization secrets (#26660)
  • Feat: implement organization secret creation API (#26566)
  • Add API route to list org secrets (#26485)
  • Set commit id when ref used explicitly (#26447)
  • PATCH branch-protection updates check list even when checks are disabled (#26351)
  • Add file status for API "Get a single commit from a repository" (#16205) (#25831)
  • Add API for changing Avatars (#25369)
• ENHANCEMENTS
  • Increase auth provider icon size on login page (#27122)
  • Remove a gt-float-right and some unnecessary helpers (#27110)
  • Change green buttons to primary color (#27099)
  • Use db.WithTx for AddTeamMember to avoid ctx abuse (#27095)
  • Use print instead of printf (#27093)
  • More refactoring of db.DefaultContext (#27083)
  • Remove the useless function GetUserIssueStats and move relevant tests to indexer_test.go (#27067)
  • Search branches (#27055)
  • Display all user types and org types on admin management UI (#27050)
  • Ui correction in mobile view nav bar left aligned items. (#27046)
  • Chroma color tweaks (#26978)
  • Move some functions to service layer (#26969)
  • Improve "language stats" UI (#26968)
  • Replace util.SliceXxx with slices.Xxx (#26958)
  • Refactor dashboard/feed.tmpl (#26956)
  • Move repository deletion to service layer (#26948)
  • Fix the missing repo count (#26942)
  • Extract common code to new template (#26933)
  • Move createrepository from module to service layer (#26927)
  • Move notification interface to services layer (#26915)
  • Fix the secret regexp pattern on web page (#26910)
  • Move feed notification service layer (#26908)
  • Move ui notification to service layer (#26907)
  • Move indexer notification to service layer (#26906)
  • Move mail notification logic to service layer (#26905)
  • Extract common code to new template (#26903)
  • Show queue's active worker number (#26896)
  • Fix media description render for orgmode (#26895)
  • Remove CSS has selector and improve various styles (#26891)
  • Refactor "shortsha" (#26877)
  • Refactor og:description to limit the max length (#26876)
  • Move web/api context related testing function into a separate package (#26859)
  • S3: log human readable error on connection failure (#26856)
  • Improve opengraph previews (#26851)
  • Add more descriptive error on forgot password page (#26848)
  • Show always repo count in header (#26842)
  • Remove "TODO" tasks from CSS file (#26835)
  • Render code blocks in repo description (#26830)
  • Minor dashboard tweaks, fix flex-list margins (#26829)
  • Remove polluted .ui.right (#26825)
  • Display archived labels specially when listing labels (#26820)
  • Remove polluted ".ui.left" style (#26809)
  • Make it posible to customize nav text color via css var (#26807)
  • Refactor lfs requests (#26783)
  • Improve flex list item padding (#26779)
  • Remove fomantic text module (#26777)
  • Remove fomantic item module (#26775)
  • Remove redundant nil check in WalkGitLog (#26773)
  • Reduce some allocations in type conversion (#26772)
  • Refactor some CSS styles and simplify code (#26771)
  • Unify border-radius behavior (#26770)
  • Improve modal dialog UI (#26764)
  • Allow "latest" to be used in release vTag when downloading file (#26748)
  • Adding hint Archived to archive label. (#26741)
  • Move modules/mirror to services (#26737)
  • Add "dir=auto" for input/textarea elements by default (#26735)
  • Simplify helper CSS classes and avoid abuse (#26728)
  • Make web context initialize correctly for different cases (#26726)
  • Focus editor on "Write" tab click (#26714)
  • Remove incorrect CSS helper classes (#26712)
  • Fix review bar misalignment (#26711)
  • Add reverseproxy auth for API back with default disabled (#26703)
  • Add default label in branch select list (#26697)
  • Improve Image Diff UI (#26696)
  • Fixed text overflow in dropdown menu (#26694)
  • [Refactor] getIssueStatsChunk to move inner function into own one (#26671)
  • Remove fomantic loader module (#26670)
  • Add member, collaborator, contributor, and first-time contributor roles and tooltips (#26658)
  • Improve some flex layouts (#26649)
  • Use line-height: normal by default (#26635)
  • Improve the branch selector tab UI (#26631)
  • Improve show role (#26621)
  • Remove avatarHTML from template helpers (#26598)
  • Allow text selection in actions step header (#26588)
  • Improve translation of milestone filters (#26569)
  • Rewrite the DiffFileTreeItem and fix misalignment (#26565)
  • Add optimistic lock to ActionRun table (#26563)
  • Update team invitation email link (#26550)
  • Differentiate better between user settings and admin settings (#26538)
  • Check disabled workflow when rerun jobs (#26535)
  • Improve deadline icon location in milestone list page (#26532)
  • Improve repo sub menu (#26531)
  • Fix the display of org level badges (#26504)
  • Rename Sync2 -> Sync (#26479)
  • Fix stderr usages (#26477)
  • Remove fomantic transition module (#26469)
  • Refactor tests (#26464)
  • Refactor project templates (#26448)
  • Fall back to esbuild for css minify (#26445)
  • Use correct pull request commit link instead of a generic commit link (#26434)
  • Refactor "editorconfig" (#26391)
  • Remove unnecessary template helper repoAvatar (#26387)
  • Remove unnecessary template helper DisableGravatar (#26386)
  • Use template context function for avatar rendering (#26385)
  • Rename code_langauge.go to code_language.go (#26377)
  • Use more IssueList instead of []*Issue (#26369)
  • Improve CLI and messages (#26341)
  • Refactor backend SVG package and add tests (#26335)
  • Add link to job details and tooltip to commit status in repo list in dashboard (#26326)
  • Remove commit load branches and tags in wiki repo (#26304)
  • Add highlight to selected repos in milestone dashboard (#26300)
  • Delete issue_service.CreateComment (#26298)
  • Do not show Profile README when repository is private (#26295)
  • Tweak actions menu (#26278)
  • Start using template context function (#26254)
  • Use calendar icon for Joined on... in profiles (#26215)
  • Add 'Show on a map' button to Location in profile, fix layout (#26214)
  • Render plaintext task list items for markdown files (#26186)
  • Add tooltip to describe LFS table column and color delete LFS file button red (#26181)
  • Release attachments duplicated check (#26176)
  • De-emphasize issue sidebar buttons (#26171)
  • Fixing the align of commit stats in commit_page template. (#26161)
  • Allow editing push mirrors after creation (#26151)
  • Move web JSON functions to web context and simplify code (#26132)
  • Refactor improve NoBetterThan (#26126)
  • Remove db.DefaultContext in routers/ and cmd/ (#26076)
  • Improve "gitea doctor" sub-command and fix "help" commands (#26072)
  • Add context parameter to some database functions (#26055)
  • Docusaurus-ify (#26051)
  • Improve text for empty issue/pr description (#26047)
  • Fix the truncate and alignment problem for some admin tables (#26042)
  • Categorize admin settings sidebar panel (#26030)
  • Remove redundant "RouteMethods" method (#26024)
  • Refactor and enhance issue indexer to support both searching, filtering and paging (#26012)
  • Add a link to OpenID Issuer URL in WebFinger response (#26000)
  • Replace gogs/cron with go-co-op/go...