Revisions of gitea

Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1059931 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 117)
- Update to version 1.18.2:
  * When updating by rebase we need to set the environment for head repo (#22535) (#22536)
  * chore: changelog 1.18.2 (#22530)
  * Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521)
  * Fix invalid issue branch reference if not specified in template (#22513) (#22520)
  * cgo cross-compile for freebsd (#22397) (#22519)
  *  Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515)
  * Reliable selection of admin user (#22509) (#22511)
  * Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496)
- Fix security issue: GHSA-c738-c5qq-xg89 - CVE-2022-23521 - CWE-122
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1059168 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 116)
- Update to version 1.18.1:
  * chore: changelog 1.18.1 (#22471)
  * Update `github.com/zeripath/zapx/v15` (#22485)
  * Fix pull request API field `closed_at` always being `null` (#22482) (#22483)
  * Fix migration from GitBucket (#22465)
  * Fix container blob mount (#22226) (#22476)
  * Fix error when calculate the repository size (#22392) (#22474)
  * Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454) (#22472)
  * Fix environments for KaTeX and error reporting (#22453) (#22473)
  *  Remove the netgo tag for Windows build (#22467) (#22468)
  * Fix leaving organization bug on user settings -> orgs (#21983) (#22438)
  * Restore previous official review when an official review is deleted (#22449) (#22460)
  * Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458)
  * Fixed colour transparency regex matching in project board sorting (#22092) (#22437)
  * Log STDERR of external renderer when it fails (#22442) (#22444)
  * fix: PR status layout on mobile (#21547) (#22441)
  * Fix wechatwork webhook sends empty content in PR review (#21762) (#22440)
  * Remove duplicate "Actions" label in mobile view (#21974) (#22439)
  * Prepend refs/heads/ to issue template refs (#20461) (#22427)
  * Continue GCing other repos on error in one repo (#22422) (#22425)
  * Correctly handle select on multiple channels in Queues (#22146) (#22428)
  * Remove test session cache to reduce possible concurrent problem (#22199) (#22429)
  * Restore function to "Show more" buttons (#22399) (#22426)
  * Allow HOST has no port (#22280) (#22409)
  * fix: omit avatar_url in discord payload when empty (#22393) (#22394)
  * Don't display stop watch top bar icon when disabled and hidden when click other place (#22374) (#22387)
  * Don't lookup mail server when using sendmail (#22300) (#22383)
  * Fix set system setting failure once it cached (#22334)
  * Update Emoji dataset to Unicode 14 (#22342) (#22343)
  * fix gravatar disable bug (#22337)
  * fix: update settings table on install (#22326) (#22327)
  * Add deprecated warning for DISABLE_GRAVATAR and ENABLE_FEDERATED_AVATAR (#22324)
  * Fix sitemap (#22272) (#22320)
  * Display error log when a modified template has an error so that it could recovery when the error fixed (#22261) (#22321)
  * fix: code search title translation (#22285) (#22316)
  * Fix due date rendering the wrong date in issue (#22302) (#22306)
  * Fix get system setting bug when enabled redis cache (#22298)
  * Fix bug of DisableGravatar default value (#22297)
  * Add `sync_on_commit` option for push mirrors api (#22271) (#22292)
  * Fix key signature error page (#22229) (#22230)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1045804 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 115)
- Update to version 1.18.0:
  * Frontport 1.17.4 changelog and Add 1.18.0 changelog (#22215)
  * Add more test directory to exclude dir of air, remove watching templates from air include dir because gitea has internal mechanism (#22246) (#22247)
  * refactor auth interface to return error when verify failure (#22119) (#22259)
  * Use complete SHA to create and query commit status (#22244) (#22257)
  * Remove ReverseProxy authentication from the API (#22219) (#22251)
  * Update bleve and zapx to fix unaligned atomic (#22031) (#22218)
  * Fix container layer display overflow (#22208) (#22211)
  * Allow empty assignees on pull request edit (#22150) (#22214)
  * Add setting to disable the git apply step in test patch (#22130) (#22170)
  * Normalize NuGet package version on upload (#22186) (#22200)
  * fix: update libcurl in docs pipeline (#22204)
  * Check for zero time instant in TimeStamp.IsZero() (#22171) (#22172)
  * Ensure that plain files are rendered correctly even when containing ambiguous characters (#22017) (#22160)
  * Do not list active repositories as unadopted (#22034) (#22166)
  * Local storage should not store files as executable (#22162) (#22163)
  * Fix heatmap first color being unused (#22158)
  * Fix margin and alignment in dashboard repolist (#22120) (#22122)
  * Correctly handle moved files in apply patch (#22118) (#22135)
  * Fix condition for is_internal (#22095) (#22132)
  * Make gitea work using cmd.exe again (#22073) (#22133)
  * Fix sorting admin user list by last login (#22081) (#22107)
  * Fix parallel creating commit status bug with tests (#21911) (#21989)
  * Fix permission check on issue/pull lock (#22113)
  * Workaround for container registry push/pull errors (#21862) (#22068)
  * Fix issue/PR numbers (#22037) (#22044)
  * Handle empty author names (#21902) (#22027)
  * Add dumb-init to rootless docker (#22046)
  * Use GhostUser if needed for TrackedTimes (#22021) (#22029)
  * Ensure that Chinese punctuation is not ambiguous when locale is Chinese (#22019) (#22030)
  * Fix ListBranches to handle empty case (#21921) (#22024)
  * Do not emit ambiguous character warning on rendered pages (#22016) (#22018)
  * On tag/branch-exist check, dont panic if repo is nil (#21787) (#21788)
  * Use path not filepath in template filenames (#21993) (#22022)
  * Multiple improvements for comment edit diff (#21990) (#22007)
  * Correct the fallbacks for mailer configuration (#21945) (#21953)
  * Fix markdown anchor re-clicking (#21931) (#21946)
  * Prevent NPE if trying to restore an already restored deleted branch (#21940) (#21944)
  * Add support for HEAD requests in Maven registry (#21834) (#21929)
  * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21928)
  * add changelog for 1.18.0-rc1 (#21829)
  * Fix flex layout for repo list icons (#21896) (#21920)
  * Fix vertical align of committer avatar rendered by email address (#21884) (#21918)
  * Fix setting HTTP headers after write (#21833) (#21877)
  * Do not allow Ghost access to limited visible user/org (#21849) (#21876)
  * Color and Style enhancements (#21784, #21799) (#21868)
  * Support comma-delimited string as labels in issue template (#21831) (#21873)
  * Prevent dangling user redirects (#21856) (#21858)
  * Ignore issue template with a special name (#21830) (#21835)
  * Prevent panic in doctor command when running default checks (#21791) (#21807)
  * Load GitRepo in API before deleting issue (#21720) (#21796)
  *  Upgrade golang.org/x/crypto (#21792) (#21793)
  * Ignore line anchor links with leading zeroes (#21728) (#21776)
  * Set last login when activating account (#21731) (#21755)
  *  Revert unrelated changes for SMTP auth (#21767) (#21768)
  *  Init git module before database migration (#21764) (#21765)
  * Fix dashboard ignored system setting cache (#21621) (#21759)
  * Fix UI language switching bug (#21597) (#21749)
  * Remove semver compatible flag and change pypi to an array of test cases (#21708) (#21730)
  * Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  * Allow local package identifiers for PyPI packages (#21690) (#21727)
  * Fix token generation when using INTERNAL_TOKEN_URI (#21669) (#21670)
  * Fix repository adoption on Windows (#21646) (#21650)
  * Fix opaque background on mermaid diagrams (#21642) (#21652)
  * Deal with markdown template without metadata (#21639) (#21654)
  * Sync git hooks when config file path changed (#21619) (#21626)
  * Use CSS color-scheme instead of invert (#21616) (#21623)
  * Fix `Timestamp.IsZero` (#21593) (#21603)
  *  Revert: auto generate INTERNAL_TOKEN (#21608) (#21609)
  * Fix 500 on PR files API (#21602) (#21607)
  * Revert "Do not send notifications for draft releases (#21451)" (#21594)
  * Change `commits-table` column width (#21564)
  * Fix issues count bug (#21557)
  * Improve code comment review on mobile (#21461)
  * Consolidate remaining colors into variables (#21582)
  * [skip ci] Updated translations via Crowdin
  * Add sqlite vscode extension to Gitpod configuration (#21552)
  * Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551)
  * Fix package access for admins and inactive users (#21580)
  * Allow for resolution of NPM registry paths that match upstream (#21568)
  * Added missing headers on user packages page (#21172)
  * Record OAuth client type at registration (#21316)
  * adapt README_{Country}.md stype name in localizedExtensions (#21486)
  * dump: Add option to skip index dirs (#21501)
  * Use recommended vscode configuration in gitpod environments (#21537)
  * Expand "Go to File" button again, fix 'Add File' margin (#21543)
  * Add yardenshoham to maintainers (#21566)
  * Refactor git command arguments and make all arguments to be safe to be used (#21535)
  * Update binding to fix bugs (#21556)
  * Link mentioned user in markdown only if they are visible to viewer (#21554)
  * Require authentication for OAuth token refresh (#21421)
  * CSS color enhancements (#21534)
  * Allow package version sorting (#21453)
  * Add link to user profile in markdown mention only if user exists (#21533)
  * Update milestone counters when issue is deleted (#21459)
  * Prevent Authorization header for presigned LFS urls (#21531)
  * Remove deleted repos from searchresult (#21512)
  * Remove unnecessary debug log (#21536)
  * Added check for disabled Packages (#21540)
  * Decouple HookTask from Repository (#17940)
  * Add color previews in markdown (#21474)
  * Fix generating compare link (#21519)
  * [skip ci] Updated translations via Crowdin
  * Check for valid user token in integration tests (#21520)
  * Ignore error when retrieving changed PR review files (#21487)
  * move invite by mail to services package (#21513)
  * Enable Monaco automaticLayout (#21515)
  * Update macOS install command (#21507)
  * [skip ci] Updated translations via Crowdin
  * Suppress `ExternalLoginUserNotExist` error (#21504)
  * Revert increased width on pull pages (#21470)
  * Add team member invite by email (#20307)
  * Disable the 'Add File' button when not able to edit repo (#21503)
  * Remove vitest globals (#21505)
  * Fix branch dropdown shifting on page load (#21428)
  * [skip ci] Updated translations via Crowdin
  * Remove unnecessary misspell ignore pattern (#21475)
  * Fix read system configuration bug when installing (#21489)
  * Fix viewing user subscriptions (#21482)
  * Make every not exist error unwrappable to a fs.ErrNotExist (#20891)
  * inline gitpod image (#21494)
  * [skip ci] Updated translations via Crowdin
  * Do not send notifications for draft releases (#21451)
  * Update reverse-proxies.zh-cn.md (#21484)
  * Docs: Update the feature comparison to other Git Hosting Services (#20933)
  * Add some api integration tests (#18872)
  * probe if sha before exec git (#21467)
  * Fix incorrect notification commit url (#21479)
  * Localize all timestamps (#21440)
  * [skip ci] Updated translations via Crowdin
  * Add system setting table with cache and also add cache supports for user setting (#18058)
  * Return 404 when user is not found on avatar (#21476)
  * Enforce grouped NuGet search results (#21442)
  * Display total commit count in hook message (#21400)
  * Refactor GetNextResourceIndex to make it work properly with transaction (#21469)
  * Simplify fmt-check (#21458)
  * update current stable version
  * 1.17.3 changelog
  * [skip ci] Updated translations via Crowdin
  * Fix mermaid-related bugs (#21431)
  * Update OpenRC startup script (#21436)
  * Use own Go version instead of hardcoded 1.17 for `make fmt` (#21457)
  * Add `code` highlighting in issue titles (#21432)
  * Add wording about keeping PRs up-to-date in CONTRIBUTING.md (#21468)
  * [refactor] Use const for wiki DefaultBranch (#21466)
  * Follow improve code quality (#21465)
  * alternative to PR "improve code quality" (#21464)
  * [skip ci] Updated translations via Crowdin
  * Fix Drone pushing commits with wrong author info (#21450)
  * Add vitest tests to Gitpod (#21449)
  * Switch from jest to vitest (#21444)
  * Diff file tree tweaks (#21446)
  * Add cynkra bronze sponsor (#21325)
  * Run `make fmt` (#21437)
  * Remove useless `appVer` from JS `window.config` (#21445)
  * Add support for Chocolatey/NuGet v2 API (#21393)
  * Fix #21406: Hide repo information from file view/blame mode (#21420)
  * [skip ci] Updated translations via Crowdin
  * Respect user's locale when rendering the date range in the repo activity page (#21410)
  * Consolidate more CSS colors into variables (#21402)
  * Add HEAD fix to gitea doctor (#21352)
  * Contribution guidelines (#21425)
  * Refactor Gitpod configuration to improve quick spin up of automated dev environments (#21411)
  * Support instance-wide OAuth2 applications (#21335)
  * Case-insensitive NuGet symbol file GUID (#21409)
  * Add generic set type (#21408)
  * Improve OAuth integration tests (#21390)
  * Make e-mail sanity check more precise (#20991)
  * Fix broken link to frontend guidelines in hacking guidelines (#21382)
  * Use Name instead of DisplayName in LFS Lock (#21415)
  * [skip ci] Updated translations via Crowdin
  * feat(pr review): add more space on mobile (#21326)
  * Bump `golang.org/x/text` (#21412)
  * Update gitea.service (#21399)
  * Do DB update after merge in hammer context (#21401)
  * add gitpod config (#20995)
  * Remove cancel button in repo creation page (#21381)
  * Improve clarity for camo proxy parameters (#21386)
  * Redirect to new repository owner (#21398)
  * Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
  * log real ip of requests from ssh (#21216)
  * Add Num{Issues,Pulls} stats checks (#21404)
  * Add user/organization code search (#19977)
  * Stop logging CheckPath returns error: context canceled (#21064)
  * Hook go-licenses into tidy again (#21353)
  * Fix missing left and right carets in TRANSLATORS (#21397)
  * Fix calls to i18n in templates (#21394)
  * Update JS dependencies and eslint config (#21388)
  * Allow creation of OAuth2 applications for orgs (#18084)
  * Fix typos in PullRequestMergeForm.vue header comment (#21378)
  * Use weighted algorithm for string matching when finding files in repo (#21370)
  * Bump playwright to 1.26.1 (#21357)
  * npm package registry support for `bin` (#21372)
  * Removed one extra whitespace in footer after "Template" (#21364)
  * Fix formatted link for PR review notifications to matrix (#21319)
  * Show private data in feeds (#21369)
  * Add nicer error handling on template compile errors (#21350)
  * Fix some typos and update db transaction demo in backend guideline (#21322)
  * Refactor parseTreeEntries, speed up tree list (#21368)
  * Add GET and DELETE endpoints for Docker blob uploads (#21367)
  * Make external issue tracker regexp configurable via API (#21338)
  * Add new CSS variables --color-accent and --color-small-accent (#21305)
  * Set SemverCompatible to false for Conan packages (#21275)
  * Parse OAuth Authorization header when request omits client secret (#21351)
  * Disable Firefox E2E tests (#21363)
  * Add redirect of /upgrade/ to /upgrade-from-gitea/ on docs site (#21330)
  * Update to go-enry v2.8.3 (#21360)
  * Update go to 1.19 (#21361)
  * SessionUser protection against nil pointer dereference (#21358)
  * Fix and improve incorrect error messages (#21342)
  * Fix default theme-auto selector when nologin (#21346)
  * Add `stat` to `ToCommit` function for speed (#21337)
  * Fix typo in API comment document (#21347)
  * Update comment about repository.DISABLED_REPO_UNITS in app.example.ini (#21343)
  * Remove extra space from title element (#21345)
  * Fix slight bug in katex (#21171)
  * Fix linked account translation (#21331)
  * [skip ci] Updated translations via Crowdin
  * Tag list should include draft releases with existing tags (#21263)
  * [skip ci] Updated translations via Crowdin
  * Foreign ID conflicts if ID is 0 for each item (#21271)
  * Make app.ini read-only message more prominent (#21315)
  * Fix doc and heatmap for the Vue3 refactoring (#21312)
  * Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
  * Refactor from Vue2 to Vue3 (#20044)
  * Update Golang deps (#21304)
  * Fix issue that `sync_on_commit` is not set (#21309)
  * [skip ci] Updated translations via Crowdin
  * Add pages to view watched repos and subscribed issues/PRs (#17156)
  * Fix the hook related FAQ contents (#21297)
  * Check if email is used when updating user (#21289)
  * Add name field for org api (#21270)
  * Add API endpoint to get changed files of a PR (#21177)
  * [skip ci] Updated translations via Crowdin
  * Ignore port for loopback redirect URIs (#21293)
  * Improve error descriptions for unauthorized_client (#21292)
  * Consolidate more CSS rules, fix inline code on arc-green (#21260)
  * Update bluemonday (#21281)
  * Add support for authentication based on reverse proxy email (#19949)
  * Do not allow organisation owners add themselves as collaborator (#20043)
  * Feature: Case-insensitive "find files in repo" (#21269)
  * Better repo API unit checks (#21130)
  * Fix empty container layer history and UI (#21251)
  * Add filetree on left of diff view (#21012)
  * [skip ci] Updated translations via Crowdin
  * Add author search input (#21246)
  * Upgrade chroma to v2.3.0 (#21259)
  * [skip ci] Updated translations via Crowdin
  * Typo in config-cheat-sheet (#21261)
  * Use native inputs in whitespace dropdown (#20980)
  * [skip ci] Updated licenses and gitignores
  * Use en-US as fallback when using other default language (#21200)
  * Make NuGet service index publicly accessible (#21242)
  * Save files in local storage as umask (#21198)
  * NPM Package Registry search API endpoint (#20280)
  * [skip ci] Updated translations via Crowdin
  * Added search input field to issue filter (#20623)
  * Various CSS tweaks (#21244)
  * [skip ci] Updated translations via Crowdin
  * Use absolute links in feeds (#21229)
  * Prevent invalid behavior for file reviewing when loading more files (#21230)
  * Respect `REQUIRE_SIGNIN_VIEW` for packages (#20873)
  * Make Clone in VSCode link get updated correctly (#21225)
  * Configure golangci-lint to show all issues (#21106)
  * Fix user visible check (#21210)
  * Fix template bug of admin monitor (#21208)
  * Clarify that `ENABLE_SWAGGER` only influences the API docs, not the routes (#21215)
  * Enable fluid page layout on medium size viewports (#21178)
  * [API] teamSearch show teams with no members if user is admin (#21204)
  * Fix typo (#21201)
  * Remove unnecessary length check for repo's Description & Website (#21194)
  * Treat git object mode 40755 as directory (#21195)
  * Fix reaction of issues (#21185)
  * Fix CSV diff for added/deleted files (#21189)
  * Show label description in comments section (#21156)
  * Limit length of repo description and repo url input fields (#21119)
  * [skip ci] Updated translations via Crowdin
  * File header tweaks (#21175)
  * Keep path when creating a new branch (#21153)
  * Display image digest for container packages (#21170)
  * Use correct branch for .editorconfig error (#21152)
  * Passing command line arguments correctly by string slice (#21168)
  * Sort branches and tags by date descending (#21136)
  * Skip dirty check for team forms (#21154)
  * Add KaTeX rendering to Markdown. (#20571)
  * Update docs comparison.zh-cn.md (#21035)
  * Use form for admin purge user (#21070)
  * Make labels clickable in the comments section. (#21137)
  * Remove fomantic image module (#21145)
  * [skip ci] Updated translations via Crowdin
  * Show .editorconfig errors in frontend (#21088)
  * Update JS dependencies and lint (#21144)
  * Fix PlantUML example in document (#21142)
  * chore(security): Support Go Vulnerability Management (#21139)
  * [skip ci] Updated licenses and gitignores
  * [skip ci] Updated translations via Crowdin
  * Improve commit status icons (#21124)
  * Center-aligning content of WebAuthN page (#21127)
  * Allow poster to choose reviewers (#21084)
  * Generate go-licenses during tidy again (#21108)
  * Make the vscode clone link respect transport protocol (#20557)
  * Fix typo of issue template name (#21117)
  * [skip ci] Updated translations via Crowdin
  * Fix pagination limit parameter problem (#21109)
  * Rewrite go license generator in go (#21078)
  * Allow uppercase ASCII alphabet in PyPI package names (#21095)
  * Fix various typos (#21103)
  * Update docs issue-pull-request-templates.zh-cn.md (#21030)
  * Upgrade the document about how to collect logs for systemd and docker (#21101)
  * [skip ci] Updated translations via Crowdin
  * Bump playwright test image to match version in package.json (#21097)
  * Fix sub folder in repository missing add file dropdown (#21069)
  * [skip ci] Updated translations via Crowdin
  * Add missing volume to test-e2e (#21079)
  * Fix delete user missed some comments (#21067)
  * Remove insecure flag from curl (#21074)
  * Update curl usage in API docs (#21071)
  * Move go-licenses to generate and separate generate into a frontend and backend component (#21061)
  * [skip ci] Updated translations via Crowdin
  * Webhook for Wiki changes (#20219)
  * test: use `T.TempDir` to create temporary test directory (#21043)
  * Set uploadpack.allowFilter etc on gitea serv to enable partial clones with ssh (#20902)
  * Fix 500 on time tracking in timeline API (#21052)
  * Add more checks in migration code (#21011)
  * Fill the specified ref in webhook test payload (#20961)
  * [skip ci] Updated licenses and gitignores
  * Add go licenses to licenses.txt (#21034)
  * Added docs for agit-setup (#21027)
  * Add another index for Action table on postgres (#21033)
  * Delete unreferenced packages when deleting a package version (#20977)
  * Improve arc-green code theme (#21039)
  * Add down key check has tribute container (#21016)
  * Do not add links to Posters or Assignees with ID < 0 (#20577)
  * [skip ci] Updated translations via Crowdin
  * Show language name on hover (#20923)
  * fix: PackageMetadataVersion deps (#21017)
  * Fix the quick-submit for pending review comment (#20992)
  * Kd/ci playwright go test (#20123)
  * chore: add myself to maintainers (#21028)
  * Support Issue forms and PR forms (#20987)
  * Include go.mod in gomod-check and rename to tidy-check (#21025)
  * [skip ci] Updated translations via Crowdin
  * Update a few go dependencies (#21022)
  * [skip ci] Updated translations via Crowdin
  * Fix missed sort bug (#20996)
  * Fix typo (#21004)
  * Make sure fmt catches all templates (#20979)
  * Remove black labels and CSS cleanup (#21003)
  * Go 1.19 format (#20758)
  * [skip ci] Updated translations via Crowdin
  * Fix typo (#20993)
  * fix broken insecureskipverify handling in rediss connection uris (#20967)
  * Redirect if user does not exist (#20981)
  * fix hard-coded timeout and error panic in API archive download endpoint (#20925)
  * Add support for Vagrant packages (#20930)
  * [skip ci] Updated translations via Crowdin
  * Add instructions how to add service dependencies (#20968)
  * Share HTML template renderers and create a watcher framework (#20218)
  * [skip ci] Updated licenses and gitignores
  * [skip ci] Updated translations via Crowdin
  * Change review buttons to icons to make space for text (#20934)
  * Fix download archiver of a commit (#20962)
  * Add whitespace removal inside template curly brackes (#20853)
  * Only show relevant repositories on explore page (#19361)
  * Replace `ServeStream` with `ServeContent` (#20903)
  * Update JS dependencies (#20950)
  * chore: remove broken gitea-format-imports (#20952)
  * Fix input.value attr for RequiredClaimName/Value (#20946)
  * Move some files into models' sub packages (#20262)
  * [skip ci] Updated translations via Crowdin
  * docs[zh-cn]: Install on Kubernetes (#20874)
  * Return 404 NotFound if requested attachment does not exist (#20886)
  * Avoid frequent string2bytes conversions (#20940)
  * Display total blob size of a package version. (#20927)
  * Display all files. (#20917)
  * Enhance package date display (#20928)
  * [skip ci] Updated translations via Crowdin
  * Forbid HTML string tooltips (#20935)
  * Set no-tags in git fetch on compare (#20893)
  * Update comparison.en-us.md: link subgroups issue (#20905)
  * Enable contenthash in filename for dynamic assets (#20813)
  * refactor webhook *EditPost (#20780)
  * Changelog 1.17.1 (#20833) (#20919)
  * Fix typo in backup documentation (pgdump->pg_dump) (#20913)
  * Increase Content field size of gpg_key and public_key to MEDIUMTEXT (#20896)
  * Improve single repo action for issue and pull requests (#20730)
  * Remove deprecated licenses (#20222)
  * update current stable version
  * [skip ci] Updated translations via Crowdin
  * Fix mirror address setting not working (#20850)
  * Support Proxy protocol (#12527)
  * Fix SQL Query for `SearchTeam` (#20844)
  * Double check CloneURL is acceptable (#20869)
  * Fix graceful doc (#20883)
  * Pad GPG Key ID with preceding zeroes (#20878)
  * [skip ci] Updated translations via Crowdin
  * call builtinUnused() if internal SSH is disabled (#20877)
  * Don't open new page for ext wiki on same repository (#20725)
  * [skip ci] Updated translations via Crowdin
  * Fix the mode of custom dir to 0700 in docker-rootless (#20861)
  * Fix UI mis-align for PR commit history (#20845)
  * Fix create repository page's help text (#20810)
  * In PushMirrorsIterate and MirrorsIterate if limit is negative do not set it (#20837)
  * Disable doctor logging on panic (#20847)
  * Remove calls to load Mirrors in user.Dashboard (#20855)
  * switch to node18 for snapcraft
  * Prevent 500 is head repo does not have PullRequest unit in IsUserAllowedToUpdate (#20839)
  * Fix owners cannot create organization repos bug (#20841)
  * Fix migration file name (#20843)
  * Check Mirror exists before linking its Repo (#20840)
  * [skip ci] Updated translations via Crowdin
  * Add badge capabilities to users (#20607)
  * docs[zh-cn]: Managing Deployments With Environment Variables (#20817)
  * Correctly escape within tribute.js (#20831)
  * Fix panic when an invalid oauth2 name is passed (#20820)
  * Use the total issue count for UI (#20785)
  * Add proxy host into allow list (#20798)
  * Fix tooltip init after review (#20814)
  * auth/reverseproxy: Add support for full name (#20776)
  * Add migrate repo archiver and packages storage support on command line (#20757)
  * Refactor AssertExistsAndLoadBean to use generics (#20797)
  * [skip ci] Updated translations via Crowdin
  * Fix the commit diff route (#20796)
  * Fix push mirror address backend get error Address cause setting page display error (#20593)
  * Remove follow from commits by file (#20765)
  * [skip ci] Updated translations via Crowdin
  * Fix `make watch` for generated files (#20794)
  * Add missing translation for queue flush workers (#20791)
  * Update zh-cn translation for Installation from source (#20772)
  * Improve comment header for Mobile (#20781)
  * Add myself to MAINTAINERS (#20786)
  * [skip ci] Updated licenses and gitignores
  * Preserve unix socket file (#20499)
  * Switch Unicode Escaping to a VSCode-like system (#19990)
  * Fix git.Init for doctor sub-command (#20782)
  * Remove the translation key website by PR #20777 (#20779)
  * Move the official website link at the footer of gitea (#20777)
  * Remove useless JS operation for relative time tooltips (#20756)
  * Remove debug output when coverage fails (#20733)
  * Slightly reduce exclamation icon size (#20753)
  * Fix disabled open in vscode menu when disabling download source from UI (#20713)
  * refactor webhook *NewPost (#20729)
  * Add SAML SP status to Feature Comparison docs (#20743)
  * Fix loading button with invalid form (#20754)
  * [skip ci] Updated translations via Crowdin
  * Make branch icon stand out more (#20726)
  * Update docs for versions (#20750)
  * Replace some icons with SVG (#20741)
  * Use separate class for tippy targets (#20742)
  * Add support mCaptcha as captcha provider (#20458)
  * Fix CI status popup (#20737)
  * Add documentation about pagination of the API (#20740)
  * [skip ci] Updated translations via Crowdin
  * Change commit status icons to SVG (#20736)
  * Add support for NuGet API keys (#20721)
  * Keep download count on Container tag overwrite (#20728)
  * Replace fomantic popup module with tippy.js (#20428)
  * Add an option to create new issues from "/issues" page (#20650)
  * Restore history button and hide add button when unable to add (#20718)
  * Remove manual rollback for failed generated repositories (#20639)
  * Add support for `npm unpublish` (#20688)
  * Allow multiple files in generic packages (#20661)
  * Refactor legacy git init (#20376)
  * Fix typo in source (#20723)
  * [skip ci] Updated translations via Crowdin
  * Add issue filter for Author (#20578)
  * Fix init mail render logic (#20704)
  * Frontport changelog v1.17.0 (#20712)
  * Fix disable download button (#20701)
  * docs: move search input to navbar (#20551)
  * Fix SecToTime edge-cases (#20610)
  * [skip ci] Updated translations via Crowdin
  * Fix v220 migration to be compatible for MSSQL 2008 r2 (#20702)
  * Rework repo buttons (#20602)
  * Switch to building with go1.19 (#20695)
  * Update maven deploy docs (#20691)
  * Add support for Pub packages (#20560)
  * Fix typo overrided -> overridden (#20687)
  * [skip ci] Updated licenses and gitignores
  * Update JS dependencies, adjust eslint (#20659)
  * Background color of private list-items updated (#20630)
  * Use request timeout for git service rpc (#20689)
  * Increase default item listing size `ISSUE_PAGING_NUM` to 20 (#20547)
  * [skip ci] Updated translations via Crowdin
  * Allow multiple metadata files for Maven packages (#20674)
  * docs: update comparison.zh-cn.md (#20656)
  * Add a notice for breaking check in upgrade document (#20682)
  * move handleGlobalEnterQuickSubmit into a separate file to avoid cycle-import (#20679)
  * Use correct field name. (#20675)
  * [skip ci] Updated translations via Crowdin
  * Use correct context to get package content (#20673)
  * Executable check always returns true for windows (#20637)
  * Check webhooks slice length before calling xorm (#20642)
  * Check issue labels slice length before calling xorm Insert; fixes #20654 (#20655)
  * [skip ci] Updated translations via Crowdin
  * Fix the JS error "EventSource is not defined" caused by some non-standard browsers (#20584)
  * Send correct NuGet status codes (#20647)
  * Add default commit messages to PR for squash merge (#20618)
  * [skip ci] Updated translations via Crowdin
  * Use `strings.Cut` for GIT_PROTOCOL value (#20638)
  * Fix the admin mailer config display (#20633)
  * Use correct page size for link header pagination (#20546)
  * Fix package upload for files >32mb (#20622)
  * Add info about Wire 2 when Git over SSH (#20619)
  * Enable Wire 2 for Internal SSH Server (#20616)
  * Rework mailer settings (#18982)
  * Add default value for clone URLs (#20600)
  * [skip ci] Updated translations via Crowdin
  * docs: zh-cn translations for fail2ban setup (#20588)
  * Should also support upper-case README files (#20581)
  * Fix typos in backup documentation (#20567)
  * [skip ci] Updated translations via Crowdin
  * Support localized README (#20508)
  * Clean up and fix clone button script (#20415)
  * Add disable download source configuration (#20548)
  * Fix default merge style (#20564)
  * Update login methods in package docs (#20561)
  * Add missing Tabs on organisation/package view (Frontport #20539) (#20540)
  * [skip ci] Updated licenses and gitignores
  * Add setting `SQLITE_JOURNAL_MODE` to enable WAL (#20535)
  * Rework file highlight rendering and fix yaml copy-paste (#19967)
  * Add new API endpoints for push mirrors management (#19841)
  * WebAuthn CredentialID field needs to be increased in size (#20530)
  * Add latest commit's SHA to content response (#20398)
  * Improve token and secret key generation docs (#20387)
  * [skip ci] Updated translations via Crowdin
  * Rework raw file http header logic (#20484)
  * Update lunny/levelqueue to prevent NPE when reads are performed after close (#20534)
  * Added guidance on file to choose to download (#20474)
  * [skip ci] Updated translations via Crowdin
  * Ensure that all unmerged files are merged when conflict checking (#20528)
  * packages/generic: Do not restrict package versions to SemVer (#20414)
  * Stop logging EOFs and exit(1)s in ssh handler (#20476)
  * Fix dashboard switching on Mobile (#20238)
  * Modify milestone search keywords to be case insensitive again (#20513)
  * Fix i18n for email notifications (#20518)
  * Extended permission checks. (#20517)
  * Add a checkbox to select all issues/PRs (#20177)
  * Added email notification option to receive all own messages (#20179)
  * Add Docker /v2/_catalog endpoint (#20469)
  * Removed some vestigial code related to Range bounds checks (#20312)
  * Add markdownlint (#20512)
  * Fix possible panic when repository is empty (#20509)
  * patch (doc): add heading to ssh flow explanation (#20506)
  * Show hint to link package to repo when viewing empty repo package list (#20504)
  * Fix ROOT_URL detection for URLs without trailing slash (#20502)
  * Add Tar ZSTD support (#20493)
  * Hide internal package versions (#20492)
  * Fix org members bug (#20489)
  * Add labels to two buttons that were missing them (#20419)
  * fix enabling repo packages when projects are off (#20486)
  * Display project in issue list (#20434)
  * Make code review ceckboxes clickable (#20481)
  * Slightly simplify LastCommitCache (#20444)
  * Fix Ruby package parsing by removed unused email field (#20470)
  * [skip ci] Updated translations via Crowdin
  * Add repository condition for issue count (#20454)
  * Prepend commit message to template content (#20429)
  * Improve pprof doc (#20463)
  * Improve code diff highlight, fix incorrect rendered diff result (#19958)
  * Add Cache-Control header to html and api responses, add no-transform (#20432)
  * [skip ci] Updated translations via Crowdin
  * Allow non-semver packages in the Conan package registry (#20412)
  * Use body text color in repository files table links (#20386)
  * Correct code block in installation docs for Snap (#20440)
  * Downgrade golangci-lint to 1.47.0 (#20445)
  * Add eslint-plugin-sonarjs (#20431)
  * Fix: Actor is required to get user repositories (#20443)
  * Add "X-Gitea-Object-Type" header for GET `/raw/` & `/media/` API (#20438)
  * Simplify visibility checks (#20406)
  * Add Cloudflare auto-minify to FAQ (#20430)
  * [skip ci] Updated translations via Crowdin
  * Update JS dependencies (#20423)
  * Update all tool dependencies to their latest versions (#20409)
  * [skip ci] Updated translations via Crowdin
  * Dismiss prior pull reviews if done via web in review dismiss (#20197)
  * Fix modified due date message (#20388)
  * Fix public org members displayed too many informations (#20403)
  * Add two factor status to admin cmd display (#20401)
  * Use tippy.js for context popup (#20393)
  * [skip ci] Updated licenses and gitignores
  * Comment on PrivateUsers option for gitea.service (#20383)
  * [skip ci] Updated translations via Crowdin
  * Remove confusing TrimPrefix(... git.BranchPrefix) (#20369)
  * Set target on create release with existing tag (#20381)
  * Initialize cron last (#20373)
  * Allow access to the Public Organization Member lists with minimal permissions (#20330)
  * Fix commit status icon when in subdirectory (#20285)
  * Fix eslint parsing errors, remove eslint-plugin-html (#20323)
  * Include login_name in adminCreateUser response (#20283)
  * Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
  * Allow to specify colors for text in markup (#20363)
  * [skip ci] Updated translations via Crowdin
  * update xorm.io/xorm v1.3.2-0.20220714055524-c3bce556200f (#20371)
  * Add order by for assignee no sort issue (#20053)
  * Make sure `repo_dir` is an empty directory or doesn't exist before 'dump-repo' (#20205)
  * Fix English mistakes in some Markdown documents (#20274)
  * Fix versions check for busybox `sh` (#20358)
  * Unbreak release pipeline (#20356)
  * Add option to purge users (#18064)
  * Fix icon margin in user/settings/repos (#20281)
  * Fix org label open count, including close count issue (#20353)
  * [skip ci] Updated translations via Crowdin
  * Prevent context deadline error propagation in GetCommitsInfo (#20346)
  * Add missing return for when topic isn't found (#20351)
  * Upgrade to Node 18 on CI (#20340)
  * Fix checks in PR for empty commits #19603 (#20290)
  * Use default values when provided values are empty (#20318)
  * Add tests for the host checking logic, clarify the behaviors (#20328)
  * Changelog for 1.16.9 (update) (#20341) (#20343)
  * Fix various typos (#20338)
  * Correctly handle draft releases without a tag (#20314)
  * Add write check for creating Commit status (#20332)
  * Remove blue text on migrate page (#20273)
  * Updated dead link to Madeleine.js source (#20322)
  * [skip ci] Updated translations via Crowdin
  * Add spectral linter for Swagger (#20321)
  * Store read access in access for team repo's (#20275)
  * [skip ci] Updated translations via Crowdin
  * Vertical align avatar at middle (#20302)
  * Changed scroll to auto for some UI elements. (#20294)
  * Add hint to GNUPGHOME environment variable (#20134)
  * Refactor SSH init code, fix directory creation for TrustedUserCAKeys file (#20299)
  * [skip ci] Updated translations via Crowdin
  * Use dedicated draft PR icon when possible (#20303)
  * Update goldmark (#20300)
  * Do not create empty ".ssh" directory when loading config (#20289)
  * Implement sync push mirror on commit (#19411)
  * Use git.HOME_PATH for Git HOME directory (#20114)
  * Add tooltip to repo icons in explore page (#20241)
  * Fix NPE when using non-numeric (#20277)
  * Modify milestone search keywords to be case insensitive (#20266)
  * Fix toolip on mobile notification bell (#20270)
  * Allow RSA 2047 bit keys (#20272)
  * Refix notification bell placement (#20251)
  * Bump mermaid from 9.1.1 to 9.1.2 (#20256)
  * EscapeFilter the group dn membership (#20200)
  * Only show Followers that current user can access (#20220)
  * Init popup for new code comment (#20234)
  * Bypass Firefox (iOS) bug (#20244)
  * Adjust max-widths for the repository file table (#20243)
  * Display full name (#20171)
  * Adjust class for mobile has the problem of double small bells (#20236)
  * Adjust template for #20069 smallbell (#20108)
  * Add integration tests for the Gitea migration form (#20121)
  * Allow dev i18n to be more concurrent (#20159)
  * Allow enable LDAP source and disable user sync via CLI (#20206)
  * Remove `GO111MODULE` (#20221)
  * Update Bluemonday to v1.0.19 (#20199)
  * Refix indices on actions table (#20158)
  * Update default allowed attachment types (#20192)
  * Fix cli command restore-repo: "units" should be splitted to string slice, to match the old behavior and match the dump-repo's behavior (#20183)
  * [skip ci] Updated translations via Crowdin
  * Fix `dump-repo` git init, fix wrong error type for NullDownloader (#20182)
  * Check if project has the same repository id with issue when assign project to issue (#20133)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
  * [skip ci] Updated translations via Crowdin
  * Add username check to doctor (#20140)
  * Refactor `i18n` to `locale` (#20153)
  * Remove support for sr-SP (#20155)
  * Hide notify mail setting ui if not enabled (#20138)
  * Fix custom folder name in customization docs (#20148)
  * Add missing parameter for error in log message (#20144)
  * Show scrollbar when necessary (#20142)
  * Add spacing between the properties of the key (#20145)
  * Remove U2F support (#20141)
  * Make better use of i18n  (#20096)
  * Use neutral language in comments and docs (#20135)
  * Fix remove file on initial comment (#20127)
  * Add doctor command to write commit-graphs (#20007)
  * Add sitemap support (#18407)
  * Use new config options (#20125)
  * Remove depricated queue indexer usage (#20124)
  * Disable status checks in template if none found (#20088)
  * Fix typos related to ErrTaskDoesNotExist error (#20118)
  * Move eslintrc/stylelintrc to non-deprecated extensions (#20110)
  * Allow manager logging to set SQL (#20064)
  * Replace pubkey with privkey in keys_ssh.tmpl (#20112)
  * Update security information to add a public gpg key to make sending encrypted message possible (#20117)
  * Improve log document (#20097)
  * Fix wrong login requirement routers (#20101)
  * Respect setting.UI.FeedPagingNum (#20094)
  * [skip ci] Updated translations via Crowdin
  * Use correct variable for issue count (#20085)
  * Fix alias traversal (#20076)
  * Update permissions.en-us.md (#20075)
  * Changelog for 1.16.9 (#20059) (#20063)
  * Release page show all tags in compare dropdown (#20070)
  * docs: Mention file extension for issue_template directory (#20057)
  * [skip ci] Updated translations via Crowdin
  * Catch the error before the response is processed by goth. (#20000)
  * Adjust transaction handling via db.Context (#20031)
  * Add more linters to improve code readability (#19989)
  * [skip ci] Updated translations via Crowdin
  * Disable federation by default (#20045)
  * Respond with a 401 on git push when password isn't changed yet (#20026)
  * Alter hook_task TEXT fields to LONGTEXT (#20038)
  * Simplify and fix migration 216 (#20035)
  * use quoted regexp instead of git fixed-value (#20029)
  * fix delete pull head ref for DeleteIssue (#20032)
  * User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
  * Backtick table name in generic orphan check (#20019)
  * Update document to clarify that ALLOWED_DOMAINS/BLOCKED_DOMAINS support wildcard (#20016)
  * Return 404 when tag is broken (#20017)
  * Dump should only copy regular files and symlink regular files (#20015)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1044273 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 114)
- Update to version 1.17.4:
  * Update changelog for 1.17.4 (#22198)
  * fix: update libcurl in docs pipeline (#22205)
  * Normalize NuGet package version on upload (#22186) (#22201)
  * Disable auto tag to prepare next 1.17 release (#22180)
  * Check for zero time instant in TimeStamp.IsZero() (#22171) (#22173)
  * Do not list active repositories as unadopted (#22034) (#22167)
  * Correctly handle moved files in apply patch (#22118) (#22136)
  * Fix condition for is_internal (#22095) (#22131)
  * Fix warn in database structs sync (#22111)
  * Fix sorting admin user list by last login (#22081) (#22106)
  * Fix permission check on issue/pull lock (#22114)
  * Workaround for container registry push/pull errors (#21862) (#22069)
  * Fix issue/PR numbers (#22037) (#22045)
  * Handle empty author names (#21902) (#22028)
  * On Tag/Branch Exist Check, dont panic if repo is nil (#21787) (#21789)
  * Fix ListBranches to handle empty case (#21921) (#22025)
  * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21927)
  * Fix vertical align of committer avatar rendered by email address (#21884) (#21919)
  * Fix setting HTTP headers after write (#21833) (#21874)
  * Do not allow Ghost access to limited visible user/org (#21849) (#21875)
  * Prevent dangling user redirects (#21856) (#21859)
  * Fix enabling partial clones on 1.17 (#21809)
  * Prevent panic in doctor command when running default checks (#21791) (#21808)
  * Upgrade golang.org/x/crypto (#21792) (#21794)
  * Load GitRepo in API before deleting issue (#21720) (#21795)
  * Ignore line anchor links with leading zeroes (#21728) (#21777)
  * Add HEAD fix to gitea doctor (#21352) (#21751)
  *  Init git module before database migration (#21764) (#21766)
  * Set last login when activating account (#21731) (#21754)
  * Fix UI language switching bug (#21597) (#21748)
  * Remove semver compatible flag and change pypi to an array of test cases (#21708) (#21729)
  * Allow for resolution of NPM registry paths that match upstream (#21568) (#21723)
  * Allow local package identifiers for PyPI packages (#21690) (#21726)
  * Fix repository adoption on Windows (#21646) (#21651)
  * Sync git hooks when config file path changed (#21619) (#21625)
  * Fix package access for admins and inactive users (#21580) (#21592)
  * Fix `Timestamp.IsZero` (#21593) (#21604)
  * Added check for disabled Packages (#21540) (#21614)
  * Fix issues count bug (#21600)
  * Update milestone counters when issue is deleted (#21459) (#21586)
  * Suppress `ExternalLoginUserNotExist` error (#21504) (#21572)
  * support binary deploy in npm packages (#21589)
  * SessionUser protection against nil pointer dereference (#21581)
  * Case-insensitive NuGet symbol file GUID (#21409) (#21575)
  * Prevent Authorization header for presigned LFS urls (#21531) (#21569)
  * Update binding to fix bugs (#21560)
  * Check for valid user token in integration tests (#21520) (#21529)
  * Fix generating compare link (#21519) (#21530)
  * Ignore error when retrieving changed PR review files (#21487) (#21524)
  * Enable Monaco automaticLayout (#21516)
  * Fix incorrect notification commit url (#21479) (#21483)
  * Display total commit count in hook message (#21400) (#21481)
  * Enforce grouped NuGet search results (#21442) (#21480)
  * Return 404 when user is not found on avatar (#21476) (#21477)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1031188 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 113)
- Remove @resources which will crash gitea and double @obsolete
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1031128 from Dirk Mueller's avatar Dirk Mueller (dirkmueller) (revision 112)
- Update to version 1.17.3:
  see https://blog.gitea.io/2022/10/gitea-1.17.3-is-released/
  * Bump golang.org/x/text (#21412) (#21413)
  * Update bluemonday (#21281) (#21287)
  * Sanitize and Escape refs in git backend (#21464) (#21463)
  * ENHANCEMENTS
  * Fix empty container layer history and UI (#21251) (#21278)
  * Use en-US as fallback when using other default language (#21200) (#21256)
  * Make the vscode clone link respect transport protocol (#20557) (#21128)
  * BUGFIXES
  * Do DB update after merge in hammer context (#21401) (#21416)
  * Add Num{Issues,Pulls} stats checks (#21404) (#21414)
  * Stop logging CheckPath returns error: context canceled (#21064) (#21405)
  * Parse OAuth Authorization header when request omits client secret (#21351) (#21374)
  * Ignore port for loopback redirect URIs (#21293) (#21373)
  * Set SemverCompatible to false for Conan packages (#21275) (#21366)
  * Tag list should include draft releases with existing tags (#21263) (#21365)
  * Fix linked account translation (#21331) (#21334)
  * Make NuGet service index publicly accessible (#21242) (#21277)
  * Foreign ID conflicts if ID is 0 for each item (#21271) (#21272)
  * Use absolute links in feeds (#21229) (#21265)
  * Prevent invalid behavior for file reviewing when loading more files (#21230) (#21234)
  * Respect REQUIRE_SIGNIN_VIEW for packages (#20873) (#21232)
  * Treat git object mode 40755 as directory (#21195) (#21218)
  * Allow uppercase ASCII alphabet in PyPI package names (#21095) (#21217)
  * Fix limited user cannot view himself’s profile (#21212)
  * Fix template bug of admin monitor (#21209)
  * Fix reaction of issues (#21185) (#21196)
  * Fix CSV diff for added/deleted files (#21189) (#21193)
  * Fix pagination limit parameter problem (#21111)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1007464 from Michael Ströder's avatar Michael Ströder (stroeder) (revision 111)
- Changes in AppArmor profile:
  * grant write access to app.ini only in case the file is owned by gitea
  * include openssl abstraction

(Not sure why build for Leap is "Unresolvable" in my home project.)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1004847 from Michael Ströder's avatar Michael Ströder (stroeder) (revision 110)
- AppArmor to grant executing gzip
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1003925 from Matthias Fehring's avatar Matthias Fehring (buschmann23) (revision 109)
- include local AppArmor config into profile if available
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1002912 from Michael Ströder's avatar Michael Ströder (stroeder) (revision 108)
small AppArmor fixes
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1001381 from Michael Ströder's avatar Michael Ströder (stroeder) (revision 106)
- removed AppArmorProfile= from gitea.service because it does not
  work in case apparmor.service is not running and thus the AppArmor
  profile wasn't loaded
- make /etc/gitea/conf writeable (for initial setup)
- let AppArmor grant write access to /usr/share/gitea/.ssh/
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1001254 from Michael Ströder's avatar Michael Ströder (stroeder) (revision 105)
Note: Compared to SR#1001030 I also added SystemCallFilter=

Please suggest really exoctic use-cases to test all this.

- changes to systemd service unit:
  * hardened with sand-boxing options
  * added SystemCallFilter=
  * split env vars into multiple Environment= lines
  * uncommented After= lines of optionally used other services
- added AppArmor profile
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 1000882 from Stephan Kulow's avatar Stephan Kulow (coolo) (revision 104)
- Simplify the fomantic off line build

- Update to version 1.17.1:
  * update changelog
  * Prevent 500 is head repo does not have PullRequest unit in IsUserAllowedToUpdate (#20839) (#20848)
  * Fix owners cannot create organization repos bug (#20841) (#20854)
  * Changelog 1.17.1 (#20833)
  * Check Mirror exists before linking its Repo (#20840) (#20842)
  * Add migrate repo archiver and packages storage support on command line (#20757) (#20806)
  * Check issue labels slice length before calling xorm Insert(#20655) (#20836)
  * Executable check always returns true for windows (#20637) (#20835)
  * Correctly escape within tribute.js (#20831) (#20832)
  * Use the total issue count for UI (#20785) (#20827)
  * fix merge (#20819)
  * Improve comment header for mobile (#20781) (#20789)
  * Add missing translation for queue flush workers (#20791) (#20792)
  * Fix git.Init for doctor sub-command (#20782) (#20783)
  * Make branch icon stand out more (#20726) (#20774)
  * Add disable download source configuration (#20548) (#20579)
  * Check webhooks slice length before calling xorm (#20642) (#20768)
  * Remove manual rollback for failed generated repositories (#20639) (#20762)
  * Fix loading button with invalid form (#20754) (#20759)
  * Use correct field name. (#20675) (#20760)
  * Add support for NuGet API keys (#20721) (#20734)
  * Keep download count on Container tag overwrite (#20728) (#20735)
  * Fix v220 migration to be compatible for MSSQL 2008 r2 (#20702) (#20707)
  *  Fix SecToTime edge-cases (#20610) (#20611)
  * Update issues.ref_closing_from in locale_ru-RU.ini (#20699)
  * Use request timeout for git service rpc (#20689) (#20693)
  * Use correct context to get package content (#20673) (#20676)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 990139 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 103)
- Switch to systemd-sysusers to generate user and group.
- Set ExclusiveArch to 64bit only.
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 988931 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 102)
- Update to version 1.16.9:
  * Changelog for 1.16.9 (update) (#20341)
  * Hide notify mail setting ui if not enabled (#20138) (#20337)
  * Add write check for creating Commit status (#20332) (#20334)
  * Ensure that drone tags 1.16.x and 1.16 on push to v1.16.x tag (#20304)
  * Only show Followers that current user can access (#20220) (#20253)
  * Check for permission when fetching user controlled issues (#20133) (#20196)
  * CI: disable auto_tag (#20062)
  * Release page show all tags in compare dropdown (#20070) (#20071)
  * Changelog for 1.16.9 (#20059)
  * CI: disable push to latest docker tag (#20025)
  * fix permission check for delete tag (#19985) (#20001)
  * Only log non ErrNotExist errors in git.GetNote  (#19884) (#19905)
  * use exact search instead of fuzzy search for branch filter dropdown (#19893)
  * Set Setpgid on child git processes (#19865) (#19881)
  * Ensure responses are context.ResponseWriters (#19843) (#19859)
  * git 2.36 is needed for safe.directory = '*' to work (#19876)
  * Fix count bug (#19850)
  * Fix raw endpoint PDF file headers (#19825) (#19826)
  * Make WIP prefixes case insensitive, e.g. allow `Draft` as a WIP prefix (#19780) (#19811)
  * Prevent NPE when cache service is disabled (#19703) (#19783)
  * Fix NotificationUnreadCount (#19802)
  * Detect truncated utf-8 characters at the end of content as still representing utf-8 (#19773) (#19774)
  * [doctor] pq: syntax error at or near "." quote user table name (#19765) (#19770)
  * Fix bug (#19757)
- Rebase get-gitea-source.sh
  - The node module inquirer which is needed to compile will install in version >= 9
    But this version is to new for gitea. So it musst install older Version 8.2.4.
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 977622 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 101)
- Update to version 1.16.8:
  * Add changelog for v1.16.8 (#19724)
  * Fix issue overview for teams (#19652) (#19653)
  * Delete user related oauth stuff on user deletion too (#19677) (#19680)
  * Fix oauth setting list bug (#19681)
  * Fix new release from tags list UI (#19670) (#19673)
  * [doctor] Add check/fix for bogus action rows (#19656) (#19669)
  * Revert "Add finalizers to ensure that repos are closed and blobreaders are closed (#19495) (#19496)" (#19659)
  * GetFeeds must always discard actions with dangling repo_id (#19598) (#19629)
  * Only show accessible teams in dashboard dropdown list (#19642) (#19645)
  * Set safe dir for git operations in .drone.yml CI (#19641) (#19643)
  * Prevent NPE when checking repo units if the user is nil (#19625) (#19630)
  * Call MultipartForm.RemoveAll when request finishes (#19606) (#19607)
  * Make .cs highlighting legible on dark themes (#19604) (#19605)
  * Avoid MoreThanOne Error (#19557) (#19591)
  * Fix sending empty notifications (#19589) (#19590)
  * Add finalizers to ensure that repos are closed and blobreaders are closed (#19495) (#19496)
  * ignore DNS error when doing migration allow/block check (#19567)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 974358 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 100)
- Update to version 1.16.7:
  * Add Changelog v1.16.7 (#19575)
  * Dont overwrite err with nil (part #19572) (#19574)
  * Migration: only write commit-graph if wiki clone was successfull (#19563) (#19568)
  * Respect DefaultUserIsRestricted system default when creating new user (#19310 ) (#19560)
  * Don't error when branch's commit doesn't exist (#19547) (#19548)
  * Support `hostname:port` to pass host matcher's check (#19543) (#19544)
  * Prevent intermittent race in attribute reader close (#19537) (#19539)
  * Fix 64-bit atomic operations on 32-bit machines (#19531) (#19532)
  * Fix migrate release from github (#19510) (#19523)
  * When view _Siderbar or _Footer, just display once (#19501) (#19522)
  * Prevent dangling archiver goroutine (#19516) (#19526)
  * Unset git author/committer variables when running integration tests (#19512) (#19519)
  * Fix blame page select range error and some typos (#19503)
  * Add notags to fetch (#19487) (#19490)
  * User specific repoID or xorm builder conditions for issue search (#19475) (#19476)
  * [doctor] authorized-keys: fix displayed check name (backport #19464) (#19484)
  * Mark TemplateLoading error as "UnprocessableEntity" (#19445) (#19446)
  * Prevent dangling cat-file calls (goroutine alternative) (#19454) (#19466)
  * Set correct PR status on 3way on conflict checking (#19457) (#19458)
  * RepoAssignment ensure to close before overwrite (#19449) (#19460)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 971328 from Michael Ströder's avatar Michael Ströder (stroeder) (revision 99)
Update to version 1.16.6

FWIW: It seems to work on Tumbleweed x86_64.
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 967873 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 98)
- Set correct go version >= 1.17.
Displaying revisions 41 - 60 of 157
openSUSE Build Service is sponsored by