Skip to content
261 changes: 261 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,267 @@ This changelog goes through all the changes that have been made in each release
without substantial changes to our git log; to see the highlights of what has
been added to each release, please refer to the [blog](https://blog.gitea.io).

## [1.5.0-RC1](https://github.com/go-gitea/gitea/releases/tag/v1.5.0-rc1) - 2018-06-27
* FEATURE
* Add cli commands to regen hooks & keys (#3979)
* Add support for FIDO U2F (#3971)
* Added user language setting (#3875)
* Add topic support (#3711)
* Multiple assignees (#3705)
* Add protected branch whitelists for merging (#3689)
* Global code search support (#3664)
* Add label descriptions (#3662)
* Added issue search via api (#3612)
* Add repository setting to enable/disable health checks (#3607)
* Add Attachment API (#3478)
* Emoji Autocomplete (#3433)
* LDAP Public SSH Keys synchronization (#1844)
* BUGFIXES
* Fix webhook type conflation. (#4285)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already part of 1.4.3

* Change parsing of postgresql settings (#4275)
* Fix milestone appliance and permission checks (#4271)
* Fix topics addition (Another solution) (#4031) (#4258)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can be removed (was introduced by new feature)

* Fix #4060 by showing second line of commit (#4251)
* Fix swagger security part (#4236)
* Delete reactions added to issues and comments when deleting repository (#4232)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already part of 1.4.3

* Fix delete comment bug (#4216)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Part of 1.4.3

* Fix not respecting landing page setting (#4209)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also a regression from another PR.

* Fix bug when deleting a release (#4207)
* Undo part of #3142 because processes don't use the util.Timestamp (#4203)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already part of 1.4.3 (fix monitoring page)

* Fix not removed watches on unallowed repositories (#4201)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Kinda security?

* Improve wiki content width. (#4195)
* HTML-escape plain-text READMEs in previews (#4192)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already part of 1.4.3
And kind of security

* Fix typo in OAUTH page (#4151)
* Only show "You cannot fork a repository you own" when needed. (#4130)
* Removed unnecessary line referencing LFS struct (#4113)
* Remove dupelicate link (#4100)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Little typo

* Update gitgraph.js to fix "Cannot read property color of undefined" (#4095)
* Fix #4090 by escaping filename page/img link (without path) for short link (#4091)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already part of 1.4.3 (wiki url encoding)
Also security?

* Fix #4081 Check for leading / in base before removing it (#4082)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Fix attachment ENABLED (#4064)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Update git vendor (#4059)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

already part of 1.4.2 (Respository's home page not updated after first push)

* Fix relative markdown links with anchors (#4058)
* Added deletion of an empty line at the end of the file (#4050) (#4054)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Hide issues from org private repos w/o team assignment (#4034)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also kinda security?

* Fix writer cannot read bare repo guide (#4033)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Fix Webhook and hook_task not cleaned up when delete repository (#4004)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Fix webhook bug of response info is not displayed in UI (#4000)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Fix org hooks template error bugs caused by #3929 (#3999)
* remove collaborative repositories from search on user profiles (#3996)
* Re-enable random avatar feature (#3988)
* fix links to prevent 404 after e.g. submitting a faulty form (#3982)
* Fix some webhooks bugs (#3981)
* Fix redirects on user settings introduced by menu refactoring (#3975)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Regression from another PR. Can be removed.

* Fix error preventing profile settings update without selecting a language first (#3967)
* Fix blank topic on explore repo list (#3956)
* Fix blank topic (#3948)
* Adjust z-index for floating labels (#3939)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this was already part of 1.4.2?

* Fix multiple asssingee table migration (#3931)
* Fixed issue deadline not showing on issue page (#3930)
* Fix wiki redirects (#3919)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* consistent IsOverdue field name capitalization (#3909)
* Fix code tab link when viewing tags (#3908)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.3

* Do not allow inactive users to access repositories using private keys (#3887)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.1 and is Security

* Add "error" as reserved username (#3882)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.1

* Fix path cleanup in multiple places (#3871)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.1

* Fix to use only needed columns from tables to get repository git paths (#3870)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part 1.4.1

* Fix only updated_unix when adding a comment (#3855)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1.4.1

* don't reset team/repo count when updating team via API (#3831)
* Don't force due date to current time (#3830)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Fixed 0 closed issues not show 50% closed on activty page (#3802)
* Fix typo in deleteUser (#3781)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1.4.1

* Remove unnecessary Safe tags (#3778)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.1

* Show Clipboard button if disable HTTP of git protocol (#3773)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1.4.1

* Enhance healthcheck for database connectivity (#3754)
* Add tag check to release draft creation (#3729)
* Use the active branch for the code tab (#3720)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1.4.1

* Set default branchname on first push (#3715)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1.4.1

* Add your_repositories to types (#3699)
* Escape branch name in dropdown menu (#3691)
* Update markbates/goth libary to fix OAuth2 support (#3661)
* Fix MySQL and PostgreSQL column drop SQL (#3649)
* Fix column removal in MSSQL (#3638)
* Fix incorrect 'Erase Wiki Data' string identifier. (#3613)
* Fix add feed for organization (#3594)
* Fix gpg expired bug when time is zero (#3584)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1.4.1

* Fix the protected branch panic issue (#3567)
* Fix remove team member issue (#3566)
* Fix query protected branch bug (#3563)
* Fix issue with broken inter-wiki links #3506 (#3560)
* Fix if Mirrors repo no content is fetched, updated time should not be updated (#3551)
* Added checks for protected branches in pull requests (#3544)
* Add issue closed time column to fix activity closed issues list (#3537)
* Update markbates/goth library (#3533)
* Bug fix for repo releases sorted (#3522)
* Fixes missing avatars in offline mode (#3471)
* Fix synchronization bug in repo indexer (#3455)
* Fix rendering of wiki page list if wiki repo contains other files (#3454)
* Fix checklist padding (#3460)
* ENHANCEMENT
* Add config path as an optionial flag when changing pass via CLI (#4184)
* Show only needed values in database configuration section depending on type (#4164)
* Mac OS X -> macOS (#4056)
* Make home.tmpl visible with Signin-View enabled (#4040)
* LFS: make HTTP auth period configurable (#4035)
* Add Environment Variables to Docker template (#4012)
* Fix typo in U2F description (#4007)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Refression from U2F Feature. Don't need to be listed

* Add missing token validation and missing alert in UI (#3976)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.2

* Added repository search ordered by stars or forks. Forks column in admin repo list. (#3969)
* Splitted the user settings code into several files to be more maintainable (#3968)
* Update xormstore dependency to fix OAuth2 support for MySQL (#3955)
* Change site title description in installation page (#3935)
* Add more webhooks support and refactor webhook templates directory (#3929)
* Add new option to allow only OAuth2/OpenID user registration (#3910)
* Fix placeholder of due date form (#3906)
* Refactor User Settings (#3900)
* Add option to use paged LDAP search when synchronizing users (#3895)
* Do not allow to reuse TOTP passcode (#3878)
* Make Generate New Token panel shown by default (#3832)
* Symlink icons (#1416) (#3826)
* Some small template fixes (#3820)
* Fix for UI broke when a repo is starred & watched (#3630) (#3810)
* Removes extra space from the body and footer to prevent scrolling on a page that fits into the viewport (#3792)
* Modify pagination in page of commits (#3766)
* Re-order import order (#3736)
* Add Size column to attachment (#3734)
* Add config option to enable or disable log executed SQL (#3726)
* Add EnableTimetracking option to app settings (#3719)
* Don't warn users about *every* dirty form (#3707)
* Improve release page UI (#3693)
* Codesearch message fix (#3684)
* Refactor and simplify redirect to url (#3674)
* Store OAuth2 session data in database (#3660)
* Add string to confirm wiki data erasure (#3629)
* Make columns in split view of the same width (#3619)
* Use Segoe UI for Latin characters before falling back to YaHei (#3616)
* Add admin dashboard option to run health checks (#3606)
* Add branch link in branch list. (#3576)
* Fix missing translations when updating username. (#3564)
* Reduce sql query times in retrieveFeeds (#3547)
* Populate URL field of API commits (#3546)
* Implements generator cli for secrets (#3531)
* Option to enable or disable swagger endpoints (#3502)
* Add missing licenses (#3497)
* Using maintained spdx license list (#3484)
* Reduce repo indexer disk usage (#3452)
* Allow square brackets in external issue patterns (#3408)
* Enable caching on assets and avatars (#3376)
* Rework special link parsing in the post-processing of markup (#3354)
* Shows total tracked time in issue and milestone list (#3341)
* SECURITY
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IMO Security should be above the huge list of Bugfixes

* Fix open redirect vulnerability on login screen (#4312)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Already part of 1.4.3

* Support secure cookie for csrf-token (#3839)
* Correctly check http git access rights for reverse proxy authorized users (#3721)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

part of 1.4.1

* Fix escaping changed title in comments (#3530)
* Escape repo search query (#3486)
* TESTING
* Add LDAP integration tests (#3897)
* Reduce testing time. (#3885)
* Fix go vet error (#3740)
* Force remove test repo root path in case previous test is still locking it (#3528)
* Use unique temp dirs in unit tests (#3494)
* Improve wiki test (#3493)
* Improvements to git integration test (#3466)
* TRANSLATION
* Fixed spelling + clarity (#4213)
* Fix add a Ukrainian language #4036 (#4042)
* Add a Ukrainian language (#4036)
* Change title to existing locale entry for protected branch settings (#3694)
* Improve English grammar and consistency (#3614)
* Fix low-hanging fruit in English (source) translation (#3518)
* BUILD
* Updated drone config to use the "next" git plugin (#4281)
* Fix swagger errors (#4220)
* Add gpg-sign step to drone (#4188)
* Fetch missing vendor file in github.com/davecgh/go-spew/spew (#3995)
* Update to last common x/text (#3994)
* Provide compressed releases (#3991)
* Update to last common bleve (#3986)
* Migrate to dep (#3972)
* Update less.js to latest version (#3932)
* lock npm packages (#3912)
* Testing using go 1.10 version. (#3899)
* Pass secrets to drone build step for docker (#3879)
* Add swagger check (#3811)
* Docker multi-stage (#2927)
* Simplify docker build process. (#2827)
* Snap-packaging for gitea (#2568)
* DOCS
* Add details about USER_UID and USER_GID environment variables (#4301)
* Reorganized feature comparison (#4264)
* Fix #4255 - missing close tags in U2F (#4256)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

regression from new feature

* fix CreateIssueCommentOption reference (#4239)
* Add a basic SMF manifest for SunOS platforms (#4238)
* Fixed drone command in readme (#4222)
* Add security advice to contrib guide (#4187)
* Improve logging for e-mail and OpenID already in use errors (#4174)
* Update backup and restore doc usage (#4165)
* Improve backup document and add zh-cn backup document (#4145)
* Fix link in HTTPS doc (#4135)
* Update debian package information (#4132)
* Add pronunciation to README.md (#4123)
* Minor 'Installation with Docker' docs page fix (#4122)
* More detailed documentation on how to set up from binary (#4121)
* Update comparison.en-us.md with RhodeCode Community edition (#4112)
* Add how-to for enabling HTTPS (#4101)
* Add simple descriptions for file API responses (#4089)
* Add simple descriptions for swagger validate (#4087)
* Update Contribution docs with non-404 link (#4077)
* Remove autolink.js references (#4072)
* Fix drone CLI install link (#4071)
* Update drone test intsructions in CONTRIBUTING.md (#4055)
* Add i18n section in config cheat sheet, reordered app.ini.sample (#4038)
* Add api section to config cheat sheet (#4037)
* Add documentation for reverse proxies (#4022)
* Fix support channel documentation (#4014)
* Update vendor tool section to dep (#4008)
* Added doc for 'IMPORT_LOCAL_PATHS' (#3997)
* Added docs for configuring fail2ban (#3949)
* Remove another mention of matrix in README (#3947)
* Fix comments in config1 (#3946)
* Fix release tag on README (#3945)
* Discord is the official channel - update README (#3943)
* Add documentation in regards to issues/pull request templates (#3942)
* Remove build tag information for redis and memcache from docs (#3940)
* Update multiple assignes feature in comparison (#3938)
* Note about adding permisions to binary (#3936)
* Fix wrong issue endpoints in swagger doc (#3914)
* Compare git services in docs page (#3911)
* Fix docs 404 from Hugo changes(#3868)
* Fix building of docs with latest hugo version (#3856)
* Explanation for missing releases (#3823)
* Activating Open Collective (#3821)
* Mention the possibility of resetting the password for new accounts (#3812)
* Added explanation for docker environment variables to docs (#3804)
* Sample config: update LOCAL_ROOT_URL description for PROTOCOL = 'unix' case (#3760)
* Update gogs to gitea migration manual (#3559)
* Document generate commands (#3532)
* Fix app.ini sample file link in docs (#3529)
* Add EUPL v1.2 as license (#3475)
* Fix broken markdown with unescaped character (#3470)
* Clarify indexer MAX_FILE_SIZE setting (#3469)
* Minor fixes to YAML indentation (#3338)
* MISC
* Allow Gitea to run as different USER in Docker (#3961)
* Switch back to upstream goth repository and update govendor to latest goth version (#3863)
* Update blackfriday dependency per #2994 (#3857)
* Don't write to log NoCommitterAccount (#3621)
* Log attachment blocked events (#3615)
* API endpoint for testing webhook (#3550)
* Update code.gitea.io/git (#3482)

## [1.4.3](https://github.com/go-gitea/gitea/releases/tag/v1.4.3) - 2018-06-26
* SECURITY
* HTML-escape plain-text READMEs (#4192) (#4214)
* Fix open redirect vulnerability on login screen (#4312) (#4312)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two times the same PR? 🤔

* BUGFIXES
* Fix broken monitoring page when running processes are shown (#4203) (#4208)
* Fix delete comment bug (#4216) (#4228)
* Delete reactions added to issues and comments when deleting repository (#4232) (#4237)
* Fix wiki URL encoding bug (#4091) (#4254)
* Fix code tab link when viewing tags (#3908) (#4263)
* Fix webhook type conflation (#4285) (#4285)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here again. Same PR twice.


## [1.4.2](https://github.com/go-gitea/gitea/releases/tag/v1.4.2) - 2018-06-04
* BUGFIXES
* Adjust z-index for floating labels (#3939) (#3950)
Expand Down