Gitea - v1.21.0-rc0

Security
  • BREAKING
  • Restrict certificate type for builtin SSH server (#26789)
  • Refactor to use urfave/cli/v2 (#25959)
  • Move public asset files to the proper directory (#25907)
  • Remove commit status running and warning to align GitHub (#25839)
  • Remove "CHARSET" config option for MySQL, always use "utf8mb4" (#25413)
  • Set SSH_AUTHORIZED_KEYS_BACKUP to false (#25412)
  • SECURITY
  • Expanded minimum RSA Keylength to 3072 (#26604)
  • FEATURES
  • User details page (#26713)
  • Chore(actions): support cron schedule task (#26655)
  • Support rebuilding issue indexer manually (#26546)
  • Allow to archive labels (#26478)
  • Add disable workflow feature (#26413)
  • Support .git-blame-ignore-revs file (#26395)
  • Pre-register OAuth2 applications for git credential helpers (#26291)
  • Add Retry button when creating a mirror-repo fails (#26228)
  • Artifacts retention and auto clean up (#26131)
  • Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
  • Implement auto-cancellation of concurrent jobs if the event is push (#25716)
  • Newly pushed branches hints on repository home page (#25715)
  • Display branch commit status (#25608)
  • Add direct serving of package content (#25543)
  • Add commits dropdown in PR files view and allow commit by commit review (#25528)
  • Allow package cleanup from admin page (#25307)
  • Batch delete issue and improve tippy opts (#25253)
  • Show branches and tags that contain a commit (#25180)
  • Add actor and status dropdowns to run list (#25118)
  • Allow Organisations to have a E-Mail (#25082)
  • Add codeowners feature (#24910)
  • Support configuration variables on Gitea Actions (#24724)
  • Support downloading raw task logs (#24451)
  • API
  • Allow empty Conan files (#27092)
  • Next round of db.DefaultContext refactor (#27089)
  • Fix token endpoints ignore specified account (#27080)
  • Reduce usage of db.DefaultContext (#27073)
  • Make SSPI auth mockable (#27036)
  • Extract auth middleware from service (#27028)
  • Add RemoteAddress to mirrors (#26952)
  • Feat(API): add routes and functions for managing user's secrets (#26909)
  • Feat(API): add secret deletion functionality for repository (#26808)
  • Feat(API): add route and implementation for creating/updating repository secret (#26766)
  • Add Upload URL to release API (#26663)
  • Feat(API): update and delete secret for managing organization secrets (#26660)
  • Feat: implement organization secret creation API (#26566)
  • Add API route to list org secrets (#26485)
  • Set commit id when ref used explicitly (#26447)
  • PATCH branch-protection updates check list even when checks are disabled (#26351)
  • Add file status for API "Get a single commit from a repository" (#16205) (#25831)
  • Add API for changing Avatars (#25369)
  • ENHANCEMENTS
  • Increase auth provider icon size on login page (#27122)
  • Remove a gt-float-right and some unnecessary helpers (#27110)
  • Change green buttons to primary color (#27099)
  • Use db.WithTx for AddTeamMember to avoid ctx abuse (#27095)
  • Use print instead of printf (#27093)
  • More refactoring of db.DefaultContext (#27083)
  • Remove the useless function GetUserIssueStats and move relevant tests to indexer_test.go (#27067)
  • Search branches (#27055)
  • Display all user types and org types on admin management UI (#27050)
  • Ui correction in mobile view nav bar left aligned items. (#27046)
  • Chroma color tweaks (#26978)
  • Move some functions to service layer (#26969)
  • Improve "language stats" UI (#26968)
  • Replace util.SliceXxx with slices.Xxx (#26958)
  • Refactor dashboard/feed.tmpl (#26956)
  • Move repository deletion to service layer (#26948)
  • Fix the missing repo count (#26942)
  • Extract common code to new template (#26933)
  • Move createrepository from module to service layer (#26927)
  • Move notification interface to services layer (#26915)
  • Fix the secret regexp pattern on web page (#26910)
  • Move feed notification service layer (#26908)
  • Move ui notification to service layer (#26907)
  • Move indexer notification to service layer (#26906)
  • Move mail notification logic to service layer (#26905)
  • Extract common code to new template (#26903)
  • Show queue's active worker number (#26896)
  • Fix media description render for orgmode (#26895)
  • Remove CSS has selector and improve various styles (#26891)
  • Refactor "shortsha" (#26877)
  • Refactor og:description to limit the max length (#26876)
  • Move web/api context related testing function into a separate package (#26859)
  • S3: log human readable error on connection failure (#26856)
  • Improve opengraph previews (#26851)
  • Add more descriptive error on forgot password page (#26848)
  • Show always repo count in header (#26842)
  • Remove "TODO" tasks from CSS file (#26835)
  • Render code blocks in repo description (#26830)
  • Minor dashboard tweaks, fix flex-list margins (#26829)
  • Remove polluted .ui.right (#26825)
  • Display archived labels specially when listing labels (#26820)
  • Remove polluted ".ui.left" style (#26809)
  • Make it posible to customize nav text color via css var (#26807)
  • Refactor lfs requests (#26783)
  • Improve flex list item padding (#26779)
  • Remove fomantic text module (#26777)
  • Remove fomantic item module (#26775)
  • Remove redundant nil check in WalkGitLog (#26773)
  • Reduce some allocations in type conversion (#26772)
  • Refactor some CSS styles and simplify code (#26771)
  • Unify border-radius behavior (#26770)
  • Improve modal dialog UI (#26764)
  • Allow "latest" to be used in release vTag when downloading file (#26748)
  • Adding hint Archived to archive label. (#26741)
  • Move modules/mirror to services (#26737)
  • Add "dir=auto" for input/textarea elements by default (#26735)
  • Simplify helper CSS classes and avoid abuse (#26728)
  • Make web context initialize correctly for different cases (#26726)
  • Focus editor on "Write" tab click (#26714)
  • Remove incorrect CSS helper classes (#26712)
  • Fix review bar misalignment (#26711)
  • Add reverseproxy auth for API back with default disabled (#26703)
  • Add default label in branch select list (#26697)
  • Improve Image Diff UI (#26696)
  • Fixed text overflow in dropdown menu (#26694)
  • [Refactor] getIssueStatsChunk to move inner function into own one (#26671)
  • Remove fomantic loader module (#26670)
  • Add member, collaborator, contributor, and first-time contributor roles and tooltips (#26658)
  • Improve some flex layouts (#26649)
  • Use line-height: normal by default (#26635)
  • Improve the branch selector tab UI (#26631)
  • Improve show role (#26621)
  • Remove avatarHTML from template helpers (#26598)
  • Allow text selection in actions step header (#26588)
  • Improve translation of milestone filters (#26569)
  • Rewrite the DiffFileTreeItem and fix misalignment (#26565)
  • Add optimistic lock to ActionRun table (#26563)
  • Update team invitation email link (#26550)
  • Differentiate better between user settings and admin settings (#26538)
  • Check disabled workflow when rerun jobs (#26535)
  • Improve deadline icon location in milestone list page (#26532)
  • Improve repo sub menu (#26531)
  • Fix the display of org level badges (#26504)
  • Rename Sync2 -> Sync (#26479)
  • Fix stderr usages (#26477)
  • Remove fomantic transition module (#26469)
  • Refactor tests (#26464)
  • Refactor project templates (#26448)
  • Fall back to esbuild for css minify (#26445)
  • Use correct pull request commit link instead of a generic commit link (#26434)
  • Refactor "editorconfig" (#26391)
  • Remove unnecessary template helper repoAvatar (#26387)
  • Remove unnecessary template helper DisableGravatar (#26386)
  • Use template context function for avatar rendering (#26385)
  • Rename code_langauge.go to code_language.go (#26377)
  • Use more IssueList instead of []*Issue (#26369)
  • Improve CLI and messages (#26341)
  • Refactor backend SVG package and add tests (#26335)
  • Add link to job details and tooltip to commit status in repo list in dashboard (#26326)
  • Remove commit load branches and tags in wiki repo (#26304)
  • Add highlight to selected repos in milestone dashboard (#26300)
  • Delete issue_service.CreateComment (#26298)
  • Do not show Profile README when repository is private (#26295)
  • Tweak actions menu (#26278)
  • Start using template context function (#26254)
  • Use calendar icon for Joined on... in profiles (#26215)
  • Add 'Show on a map' button to Location in profile, fix layout (#26214)
  • Render plaintext task list items for markdown files (#26186)
  • Add tooltip to describe LFS table column and color delete LFS file button red (#26181)
  • Release attachments duplicated check (#26176)
  • De-emphasize issue sidebar buttons (#26171)
  • Fixing the align of commit stats in commit_page template. (#26161)
  • Allow editing push mirrors after creation (#26151)
  • Move web JSON functions to web context and simplify code (#26132)
  • Refactor improve NoBetterThan (#26126)
  • Remove db.DefaultContext in routers/ and cmd/ (#26076)
  • Improve "gitea doctor" sub-command and fix "help" commands (#26072)
  • Add context parameter to some database functions (#26055)
  • Docusaurus-ify (#26051)
  • Improve text for empty issue/pr description (#26047)
  • Fix the truncate and alignment problem for some admin tables (#26042)
  • Categorize admin settings sidebar panel (#26030)
  • Remove redundant "RouteMethods" method (#26024)
  • Refactor and enhance issue indexer to support both searching, filtering and paging (#26012)
  • Add a link to OpenID Issuer URL in WebFinger response (#26000)
  • Replace gogs/cron with go-co-op/gocron (#25977)
  • Fix UI for release tag page / wiki page / subscription page (#25948)
  • Support copy protected branch from template repository (#25889)
  • Fix margin on the new/edit project page. (#25885)
  • Show image size on view page (#25884)
  • Allow the use of alternative net.Listener implementations by downstreams (#25855)
  • Refactor "Content" for file uploading (#25851)
  • Show edit title button on commits tab of PR, too (#25791)
  • Introduce flex-list & flex-item elements for Gitea UI (#25790)
  • Don't stack PR tab menu on small screens (#25789)
  • Repository Archived text title center align (#25767)
  • Make route middleware/handler mockable (#25766)
  • Restructure issue list template, styles (#25750)
  • Move issue filters to shared template (#25729)
  • Add open/closed field support for issue index (#25708)
  • Some less naked returns (#25682)
  • Fix inconsistent user profile layout across tabs (#25625)
  • Update emoji set to Unicode 15 (#25595)
  • Move some files under repo/setting (#25585)
  • Add custom ansi colors and CSS variables for them (#25546)
  • Add log line anchor for action logs (#25532)
  • Use flex instead of float for sort button and search input (#25519)
  • Fix migrate page layout on mobile (#25507)
  • Update octicons and use octicon-file-directory-symlink (#25453)
  • Add toasts to UI (#25449)
  • Fine tune project board label colors and modal content background (#25419)
  • Import additional secrets via file uri (#25408)
  • Switch to ansi_up for ansi rendering in actions (#25401)
  • Store and use seconds for timeline time comments (#25392)
  • Support displaying diff stats in PR tab bar (#25387)
  • Use fetch form action for lock/unlock/pin/unpin on sidebar (#25380)
  • Refactor: TotalTimest return seconds (#25370)
  • Navbar styling rework (#25343)
  • Introduce shared template for search inputs (#25338)
  • Fix tags line no margin see #25255 (#25280)
  • Change form actions to fetch for submit review box (#25219)
  • Improve AJAX link and modal confirm dialog (#25210)
  • Disable Create column button while the column name is empty (#25192)
  • Refactor indexer (#25174)
  • Adjust style for action run list (align icons, adjust padding) (#25170)
  • Remove duplicated functions when deleting a branch (#25128)
  • Make confusable character warning less jarring (#25069)
  • Highlight viewed files differently in the PR filetree (#24956)
  • Fix duplicate Reviewed-by trailers (#24796)
  • Resolve issue with sort icons on admin/users and admin/runners (#24360)
  • Split lfs size from repository size (#22900)
  • Sync branches into databases (#22743)
  • Disable run user change in installation page (#22499)
  • Add merge files files to GetCommitFileStatus (#20515)
  • Show OpenID Connect and OAuth on signup page (#20242)
  • BUGFIXES
  • Fix: treat tab "overview" as "repositories" in user profiles without readme (#27124)
  • Fix NPE when editing OAuth2 applications (#27078)
  • Fix the incorrect route path in the user edit page. (#27007)
  • Allow users with write permissions for issues to add attachments with API (#26837)
  • Make "link-action" backend code respond correct JSON content (#26680)
  • Fix NPM packages name validation (#26595)
  • Return empty when searching issues with no repos (#26545)
  • Explain SearchOptions and fix ToSearchOptions (#26542)
  • Add missing triggers to update issue indexer (#26539)
  • Handle base64 decoding correctly to avoid panic (#26483)
  • Avoiding accessing undefined mentionValues (#26461)
  • Fix incorrect redirection in new issue using references (#26440)
  • Fix the bug when getting files changed for pull_request_target event (#26320)
  • Remove IsWarning in tmpl (#26120)
  • Fix loading LFS_JWT_SECRET from wrong section (#26109)
  • Fixing redirection issue for logged-in users (#26105)
  • Update minimum password length requirements (#25946)
  • Do not "guess" the file encoding/BOM when using API to upload files (#25828)
  • Fix issues indexer document mapping (#25619)
  • Use JSON response for "user/logout" (#25522)
  • Link to existing PR when trying to open a new PR on the same branches (#25494)
  • Do not publish docker release images on -dev tags (#25471)
  • Support pull_request_target event (#25229)
  • TESTING
  • Add tests for db indexer in indexer_test.go (#27087)
  • Speed up TestEventSourceManagerRun (#26262)
  • Add unit test for user renaming (#26261)
  • Improve unit test for caching (#26185)
  • TRANSLATION
  • Add locale for deleted head branch (#26296)
  • Improve multiple strings in en-US locale (#26213)
  • Fix broken translations for package documantion (#25742)
  • Correct translation wrong format (#25643)
  • BUILD
  • Use Go 1.21 and update dependencies (#26878)
  • Bump go to 1.21 (#26608)
  • Bump xgo to go-1.21.x and node to 20 in release-version (#26589)
  • Add template linting via djlint (#25212)
  • DOCS
  • Remove outdated paragraphs when comparing Gitea Actions to GitHub Actions (#27119)
  • Update brew installation documentation since gitea moved to brew core package (#27070)
  • Actions are no longer experimental, so enable them by default (#27054)
  • Add v1.20.4 changelog (#26974)
  • Add a documentation note for Windows Service (#26938)
  • Add sparse url in cargo package guide (#26937)
  • Update nginx recommendations (#26924)
  • Update backup instructions to align with archive structure (#26902)
  • Update info regarding internet connection for build (#26776)
  • Docs: template variables (#26547)
  • Update index doc (#26455)
  • Update zh-cn documentation (#26406)
  • Fix typos and grammer problems for actions documentation (#26328)
  • Update documentation for 1.21 actions (#26317)
  • Doc update swagger doc for POST /orgs/{org}/teams (#26155)
  • Doc sync authentication.md to zh-cn (#26117)
  • Doc guide the user to create the appropriate level runner (#26091)
  • Make organization redirect warning more clear (#26077)
  • Update blog links (#25843)
  • Fix default value for LocalURL (#25426)
  • Update from-source.zh-cn.md & from-source.en-us.md - Cross Compile Using Zig (#25194)
  • MISC
  • Upgrading the actions/checkout@4 (#27096)
  • Drop Node.js 16 and update js dependencies (#27094)
  • Apply lng2020 to maintainers (#27068)
  • Update snap package (#27021)
  • Fix: typo (#27009)
  • Improve hint when uploading a too large avatar (#26935)
  • Add @chenrui333 as maintainer (#26917)
  • Improve DeleteByID (#26904)
  • Expanding documentation in queue.go (#26889)
  • Relocate the RSS user feed button (#26882)
  • Replace deprecated elliptic.Marshal (#26800)
  • Updating the js libraries to latest version. (#26795)
  • Use Go 1.21 for golangci-lint (#26786)
  • Add auth-required to config.json for Cargo http registry (#26729)
  • Update JS dependencies (#26586)
  • Always show usernames in reaction tooltips (#26444)
  • Make user-content-* consistent with github (#26388)
  • Do not highlight #number in documents (#26365)
  • Fix display problems of members and teams unit (#26363)
  • Fix 404 error when remove self from an organization (#26362)
  • Use yellow if an approved review is stale (#26312)
  • Remove nonsense <a> for commit status check icon (#26287)
  • Add some Wiki unit tests (#26260)
  • Fix typo in metadata (#26207)
  • Improve clickable area in repo action view page (#26115)
  • Fix minor capitalization error in string (#26100)
  • Remove nfnt/resize and oliamb/cutter (#25999)
  • Bump github.com/golang-jwt/jwt to v5 (#25975)
  • Fix "Flash" message usage (#25895)
  • Improve display of Labels/Projects/Assignees sort options (#25886)
  • Remove ref name in PR commits page (#25876)
  • Add error info if no user can fork the repo (#25820)
  • Upgrade go dependencies (#25819)
  • Fix ref for workflows triggered by pull_request_target (#25743)
  • Use frontend fetch for branch dropdown component (#25719)
  • Add unit test for HashAvatar (#25662)
  • Add elapsed time on debug for slow git commands (#25642)
  • Get latest commit statuses from database instead of git data on dashboard for repositories (#25605)
  • Adding branch-name copy to clipboard branches screen. (#25596)
  • Only show 'Manage Account Links' when necessary (#25311)
  • Improve 'Privacy' section in profile settings (#25309)
  • Substitute variables in path names of template repos too (#25294)
  • Use fetch to send requests to create issues/comments (#25258)
  • Reduce unnecessary DB queries for Actions tasks (#25199)
  • Modify the content format of the Feishu webhook (#25106)
  • Actions Artifacts support uploading multiple files and directories (#24874)
  • Support changing labels of Actions runner without re-registration (#24806)

Security

Security wording was detected, but no CVEs were found.

Details

date
Sept. 20, 2023, 9:17 p.m.
name
v1.21.0-rc0
type
Pre-release
official page
https://github.com/go-gitea/gitea/releases/tag/v1.21.0-rc0
👇
Register or login to:
  • 🔍View and search all Gitea releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or