Update to version 1.16.5 with security fxes.

FWIW: It works in my installation on Tumbleweed x86_64 (which I use for my business).

• Files Changed
• Browse Source

Update to version 1.16.4 with security fixes

• Files Changed
• Browse Source

- Update to version 1.16.3:
  * Changelog for v1.16.3 (#18966)
  * git backend ignore replace objects (#18979) (#18980)
  * Set max text height to prevent overflow (#18862) (#18977)
  * Fix problem when self-assign notification (#18797) (#18976)
  * backport fix of #18973 (#18974)
  * Refactor admin user filter query parameters (#18965) (#18975)
  * Accounts with WebAuthn only (no TOTP) now exist ... fix code to handle that case (#18897) (#18964)
  * Send 404 on `/{org}.gpg` (#18959) (#18962)
  * Fix admin user list pagination (#18957) (#18960)
  * Fix lfs management setting (#18947)
  * Backport locales from master (#18944)
  * Fix login with email panic when email is not exist (#18942)
  * Adjust error for already locked db and prevent level db lock on malformed connstr (#18923) (#18938)
  * Update go-org to v1.6.1 (#18932) (#18933)
  * Fix `<strong>` html in translation (#18929) (#18931)
  *  Fix page and missing return on unadopted repos API (#18848) (#18927)
  * Don't treat BOM escape sequence as hidden character. (#18909) (#18910)
  *  Allow adminstrator teams members to see other teams (#18918) (#18919)
  * Correctly link URLs to users/repos with dashes, dots or underscores (#18890) (#18908)
  * Don't update email for organisation (#18905) (#18906)
  * Fix redirect when using lowercase reponame (#18775) (#18902)
  * Fix team management UI (#18887)
  * Fix migration v210 (#18893)
  * BeforeSourcePath should point to base commit (#18880)

• Files Changed
• Browse Source

- Update to version 1.16.2:
  * Add changelog for v1.16.2 (#18840)
  * Fix ldap user sync missed email in email_address table (#18786) (#18876)
  * Don't report signal: killed errors in serviceRPC (#18850) (#18865)
  * Update assignees check to include any writing team and change org sidebar (#18680) (#18873)
  * Fix login with email for ldap users (#18800) (#18836)
  * Fix ldap edit bug (#18859)
  * Fix ldap loginname (#18789) (#18804)
  * In disk_channel queues synchronously push to disk on shutdown (#18415) (#18788)
  * Fix bug for get user by email (#18834)
  * Update go-org to 1.6.0 (#18824) (#18839)
  * Show fullname on issue edits and gpg/ssh signing info (#18828)
  * Put buttons back in org dashboard (#18817) (#18825)
  * Immediately Hammer if second kill is sent (#18823) (#18826)
  * Fix panic in EscapeReader (#18820) (#18821)
  * remove redundant call to UpdateRepoStats during migration (#18591) (#18794)
  * Allow mermaid render error to wrap (#18791)
  * Attempt to fix the webauthn migration again - part 3 (#18770) (#18771)
  * Fix template bug of LFS lock (#18784) (#18787)
  * Various Mermaid improvements (#18776) (#18780)
  * Ensure git tag tests and others create test repos in tmpdir (#18447) (#18767)
  * Increase the size of the webauthn_credential credential_id field (#18739) (#18756)
  * Prevent dangling GetAttribute calls (#18754) (#18755)
  * Send mail to issue/pr assignee/reviewer also when OnMention is set (#18707) (#18765)
  * Fix a broken link in `commits_list_small.tmpl` (#18764)
  * Fix isempty detection of git repository (#18746) (#18750)
  * Prevent double encoding of branch names in delete branch (#18714) (#18738)
  * Fix forked repositories missed tags (#18719) (#18735)
  * Always set PullRequestWorkInProgressPrefixes in PrepareViewPullInfo (#18713) (#18737)
  * Fix source code line highlighting (#18729) (#18740)
  * Reduce CI go module downloads, add make targets (#18708, #18475, #18443) (#18741)
  * Separate the details links of commit-statuses in headers (#18661) (#18730)
  * Fix release typo (#18728) (#18731)
  * Update object repo with the migrated repository (#18684) (#18726)
  * Fix bug for version update hint (#18701) (#18705)
  * Prevent security failure due to bad APP_ID (#18678) (#18682)
  * Fix issue with docker-rootless shimming script (#18690) (#18699)
  * C preprocessor colors improvement (#18671) (#18696)
  * Let  return correct perm (#18675) (#18689)
  * Restart zero worker if there is still work to do (#18658) (#18672)
  * Backport: fix the missing i18n key for update checker (#18646) (#18665)
  * No longer show the db-downgrade SQL in production (#18654)
  * If rendering has failed due to a net.OpError stop rendering (#18642) (#18645)

• Files Changed
• Browse Source

Hope it builds other archs. :-)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update to version 1.16.1:
  * Add changelog for v1.16.1 (#18614)
  * comments on migrated issues/prs must link to the comment ID (#18637)
  * Stop logging an error when notes are not found (#18626) (#18635)
  * Only attempt to flush queue if the underlying worker pool is not finished (#18593) (#18620)
  * Ensure that blob-excerpt links work for wiki (#18587) (#18624)
  * Attempt to prevent intermittent failure TestGit/xxx/BranchProtectMerge/MergePR (#18451) (#18619)
  * Ensure commit-statuses box is sized correctly in headers (#18538) (#18606)
  * Prevent merge messages from being sorted to the top of email chains (#18566) (#18588)
  * Fix pushing to 1-x-dev docker tag (#18578) (#18579)
  * Collaborator trust model should trust collaborators (#18539) (#18557)
  * Prevent panic on prohibited user login with oauth2 (#18562) (#18563)
  * Make docker gitea/gitea:v1.16-dev etc refer to the latest build on that branch (#18551) (#18569)
  * Add dropdown icon to template loading dropdown (#18571)
  * Detect conflicts with 3way merge (#18536) (#18537)
  * Update JS dependencies, fix lint (#18389) (#18540)
  * Add `GetUserTeams` (#18499) (#18531)
  * Fix review excerpt (#18502) (#18530)
  * Fix for AvatarURL database type (#18487) (#18529)
  * In docker rootless use $GITEA_APP_INI if provided (#18524) (#18535)
  * Update 1.16.0 changelog to set #17846 as breaking (#18533) (#18534)
  * Use "read" value for General Access (#18496) (#18500)
  * Use `ImagedProvider` for gplus oauth2 provider (#18504) (#18505)
  * point to s3 endpoint directly (#18497) (#18510)
  * Fix OAuth Source Edit Page (#18495) (#18503)
  * Prevent NPE on partial match of compare URL and allow short SHA1 compare URLs (#18472) (#18473)
- Update to version 1.16.0:
  * Changelog 1.16.0 (#18468)
  * GitLab reviews may not have the updated_at field set (#18450) (#18461)
  * Fix broken when no commits and default branch is not master (#18423)
  * Fix broken oauth2 authentication source edit page (#18412) (#18419)
  * Only view milestones from current repo (#18414) (#18417)
  * Place inline diff comment dialogs on split diff in 4th and 8th columns (#18403)  (#18404)
  * Fix restore without topic failure (#18387) (#18400)
  * Fix commit's time (#18375) (#18392)
  * Prevent showing webauthn error for every time visiting `/user/settings/security` (#18385) (#18386)
  * Fix partial cloning a repo (#18373) (#18377)
  * Fix mime-type detection for HTTP server (#18371)
  * Backport: Disable content sniffing on `PlainTextBytes` (#18365)
  * Update github.com/duo-labs/webauthn (#18357) (#18364)
  * [skip ci] Updated translations via Crowdin
  * Stop trimming preceding and suffixing spaces from editor filenames (#18334)
  * [skip ci] Updated translations via Crowdin
  * Left-Align text in Unicode warning boxes (#18331)
  * Only warn on bidi but still escape non-bidi (#18333)
  * Fix incorrect OAuth message (#18332)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.16.0-rc1 (#18309)
  * Restore propagation of ErrDependenciesLeft (#18325)
  * Fix PR comments UI (#18323)
  * Make the height of the editor in Review Box smaller (4 lines as GitHub) (#18319)
  * Fix commit links on compare page (#18310)
  * Update JS dependencies, remove eslint-plugin-github (#18317)
  * Add MirrorUpdated field to Repository API type (#18267)
  * replace satori/go.uuid with gofrs/uuid (#18311)
  * Place inline diff comment dialogs in the 4th column. (#18321)
  * Use indirect comparison when showing pull requests (#18313)
  * Prevent ambiguous column error in organizations page (#18314)
  * Correctly upload LFS files (#18316)
  * [skip ci] Updated translations via Crowdin
  * update description about vendoring in CONTRIBUTING.md (#18280)
  * Fix CheckRepoStats and reuse it during migration (#18264)
  * Minor tweak to tag list (#18295)
  * show pull link for agit pull request also (#18235)
  * [skip ci] Updated translations via Crowdin
  * Add some .ignore entries (#18296)
  * Remove unneeded debug messages to stdout. (#18298)
  * Handle missing default branch better in owner/repo/branches page (#18290)
  * Revert "Prevent possible XSS when using jQuery (#18289)" (#18293)
  * not show double error response in git hook (#18292)
  * Remove accidental debugging in blob_excerpt.tmpl (#18287)
  * Prevent possible XSS when using jQuery (#18289)
  * Return nicer error if trying to pull from non-existent user (#18288)
  * [skip ci] Updated translations via Crowdin
  * docs: mention client_max_body_size affects LFS (#18291)
  * Add lockfile-check (#18285)
  * Webauthn nits (#18284)
  * Update `package-lock.json` (#18283)
  * Upgrade EasyMDE to 2.16.1 (#18278)
  * Remove golang vendored directory (#18277)
  * Changelog for 1.15.10 (#18274) (#18276)
  * Support webauthn (#17957)
  * [skip ci] Updated translations via Crowdin
  * Improve the comment for 2FA filter in admin panel (#18017)
  * fix regression from #16075 (#18260)
  * Prevent underline hover on cards (#18259)
  * Fix release link broken (#18252)
  * migrations: a deadline at January 1st, 1970 is valid (#18237)
  * Fix documents for development and bug report (#18249)
  * Add/update SMTP auth providers via cli (#18197)
  * Fix NPE on try to get tag reference via API (#18245)
  * Fix update user bug (#18250)
  * [doc] https-setup: explain relative paths for {CERT,KEY}_FILE fields. (#18244)
  * chore: remove unnecessary section (#18209)
  * Fix purple color in suggested label colors (#18241)
  * Prevent NPE when viewing non-rendered files (#18234)
  * Fix collobration template (#18232)
  * Fix identation typo in doc installation with Docker (#18233)
  * [skip ci] Updated translations via Crowdin
  * Fix source typos (#18227)
  * Fix various typos (#18219)
  * Remove `ioutil` (#18222)
  * [skip ci] Updated translations via Crowdin
  * Fix typos in docs/content (#18215)
  * [skip ci] Updated licenses and gitignores
  * In the Organization member page, 2fa column is too narrow for Simplified Chinese and Chinese Traditional. (#18213)
  * Fix new team (#18212)
  * Fix EasyMDE image paste bug during refactoring (#18207)
  * Sort locales according to their names (#18211)
  * Restore setting of ctx.Repo.Mirror (#18205)
  * [skip ci] Updated translations via Crowdin
  * Show OAuth callback error message (#18185)
  * Fix CSS specificity issue with easymde's css (#18201)
  * Fix mermaid rendering in milestone dashboard (#18202)
  * Don't store assets modified time into generated files (#18193)
  * Add warning for BIDI characters in page renders and in diffs (#17562)
  * [skip ci] Updated translations via Crowdin
  * Bump mermaid from 8.13.4 to 8.13.8 (#18198)
  * fix location for custom/options/license (#18194)
  * Enable partial clone by default (#18195)
  * Add option to convert CRLF to LF line endings for sendmail (#18075)
  * Add replay of webhooks. (#18191)
  * Load EasyMDE/CodeMirror dynamically, remove RequireEasyMDE (#18069)
  * refactoring nits (#18188)
  * slight optimization for default avatar (#18187)
  * code.gitea.io/sdk/gitea v0.14.0 -> v0.15.1 (#18186)
  * Team permission allow different unit has different permission (#17811)
  * Integration test for migration (#18124)
  * Update `TODOs` badge to reflect new default branch (#18182)
  * Increase Salt randomness  (#18179)
  * Add MP4 as default allowed attachment type (#18170)
  * [skip ci] Updated translations via Crowdin
  * Include folders into size cost (#18158)
  * Don't delete branch if other PRs with this branch are open (#18164)
  * Remove unused route "/tasks/trigger" (#18160)
  * Fix EasyMDE validation (#18161)
  * Fix bug (#18168)
  * tests: add coverage for models migration helpers  (#18162)
  * [skip ci] Updated translations via Crowdin
  * Require codereview to have content (#18156)
  * chore(lint): use golangci-lint to call revive and misspell checker. (#18145)
  * Update owners for 2022 (#18155)
  * Refactor auth package (#17962)
  * Unify and simplify TrN for i18n (#18141)
  * Use correct user when determining max repo limits for error messages (#18153)
  * Add singuliere to MAINTAINERS (#18148)
  * [skip ci] Updated licenses and gitignores
  * Add API to get issue/pull comments and events (timeline) (#17403)
  * Upgrade certmagic from v0.14.1 to v0.15.2 (#18138)
  * Allow admin to associate missing LFS objects for repositories (#18143)
  * Upgrade bleve from v2.0.6 to v2.3.0 (#18132)
  * tests: s/GITEA_UNIT_TESTS_VERBOSE/GITEA_UNIT_TESTS_LOG_SQL/ (#18142)
  * services/repository: fix ListUnadoptedRepositories incorrect total count (#17865)
  * Improve document for developers: Windows CGO, unit test option (#18140)
  * Reset the conflicted files list in testpatch (#18139)
  * Use correct translation key (#18135)
  * [skip ci] Updated translations via Crowdin
  * [Frontport] Changelog v1.15.9 (#18136)
  * Fix wrong redirect on org labels (#18128)
  * Fix performance regression when user has many organization (#18125)
  * docs: add various ways to install from package (#18120)
  * Removed unused method. (#18129)
  * [skip ci] Updated translations via Crowdin
  * Removed unused endpoint. (#18127)
  * Use conditions but not repo ids as query condition (#16839)
  * Set HeadCommit when creating tags. (#18116)
  * Fix: unstable sort skips/duplicates issues across pages (#18094)
  * Handle invalid issues (#18111)
  * [skip ci] Updated translations via Crowdin
  * Fix documents for Windows development (#18109)
  * Enable linter [rule.modifies-value-receiver] and refactor RoleDescriptor (#18093)
  * doc: clarify INSTALL_LOCK behavior (#17945)
  * [skip ci] Updated translations via Crowdin
  * Add issue hyperlinks in the webhook of wechatwork (#18102)
  * Fix a navbar UI bug in Safari (#18092)
  * Instead of using routerCtx just escape the url before routing (#18086)
  * When the git repository on storage is changed, the repository modal should also be updated (#18088)
  * - name: new parameter in CreateForkOption to give the forked repository (#18066)
  * When attempting to subscribe other user to issue report why access denied (#18091)
  * Improve interface when comparing a branch which has created a pull request (#17911)
  * Add API to manage repo tranfers (#17963)
  * Fix various typos of software names (#18083)
  * Prevent NPE if gitea uploader fails to open url (#18080)
  * Do not read or write git reference files directly (#18079)
  * Migrated Repository will show modifications when possible (#17191)
  * Quote references to the user table in consistency checks (#18072)
  * Only create pprof files for gitea serv if explicitly asked for (#18068)
  * Add NotFound handler (#18062)
  * Add API to get file commit history (#17652)
  * [skip ci] Updated translations via Crowdin
  * Add List-Unsubscribe header (#17804)
  * Avoid running go vet twice (#18059)
  * [Frontport] Changelog v1.15.8 (#18052)
  * Fix continuance tests (#18027)
  * update docker image to latest go version (#18048)
  * TestRepository_GetTag intermittently panics due to an NPE (#18043)
  * Ensure that git repository is closed before transfer (#18049)
  * [skip ci] Updated translations via Crowdin
  * Make test work with different default branch config (#18038)
  * Extract CodeMirror styles (#17960)
  * Migration 204 use Sync2 (#18044)
  * Move POST /{username}/action/{action} to simply POST /{username} (#18045)
  * Fix delete u2f keys modal (#18040)
  * Reset Session ID on login (#18018)
  * Add grafana gitea-mixin (#17758)
  * Simplify parameter types (#18006)
  * Update chroma (#18033)
  * Prevent off-by-one error on comments on newly appended lines (#18029)
  * Abort merge if head has been updated before pressing merge (#18032)
  * no need for docker image mirror (#18031)
  * Stop printing 03d after escaped characters in logs (#18030)
  * Reset locale on login (#18023)
  * Add support for ssh commit signing (#17743)
  * Improve TestPatch to use git read-tree -m and implement git-merge-one-file functionality (#18004)
  * [skip ci] Updated licenses and gitignores
  * Change <a> elements to underline on hover (#17898)
  * [skip ci] Updated translations via Crowdin
  * Support open compare page directly (#17975)
  * Add option to define refs in issue templates (#17842)
  * Fix outType on gitea dump (#18000)
  * Fix rename notification bug (#18008)
  * Ensure complexity, minlength and ispwned are checked on password setting (#18005)
  * Use JSON module instead of stdlib json (#18003)
  * Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991)
  * Prevent double decoding of % in url params  (#17997)
  * Add Reindex buttons to repository settings page (#17494)
  * Set correct language for Dockerfile variants (#17999)
  * Fix TemplateRepo no longer in models.repo (#17993)
  * Make AvatarRenderedSizeFactor configurable and set it to 3 (#17951)
  * [skip ci] Updated translations via Crowdin
  * Fixed emoji alias not parsed in links (#16221)
  * Shorten page title in file view (#17987)
  * Refactor HTTP request context (#17979)
  * Add missing `X-Total-Count` and fix some related bugs (#17968)
  * [skip ci] Updated translations via Crowdin
  * Use non-expiring key. (#17984)
  * Add Option to synchronize Admin & Restricted states from OIDC/OAuth2 along with Setting Scopes (#16766)
  * Return nicer error for ForcePrivate (#17971)
  * Fixed wording. (#17973)
  * [skip ci] Updated translations via Crowdin
  * Prevent deadlock in create issue (#17970)
  * Bump swagger-ui-dist from 4.1.2 to 4.1.3 (#17965)
  * Improve behavior of "Fork" button (#17288)
  * Prefer "Hiragino Kaku Gothic ProN" in system-ui-ja (#17954)
  * Some repository refactors (#17950)
  * [skip ci] Updated licenses and gitignores
  * Fix markdown URL parsing (#17924)
  * Fix overflow in commit graph (#17947)
  * Prevent services/mailer/mailer_test.go tests from deleteing data directory (#17941)
  * Move keys to models/asymkey (#17917)
  * Clean legacy SimpleMDE code (#17926)
  * Move repository model into models/repo (#17933)
  * [skip ci] Updated translations via Crowdin
  * Fix a panic in NotifyCreateIssueComment (caused by string truncation) (#17928)
  * [skip ci] Updated translations via Crowdin
  * Use disable_form_autofill on Codebase and Gitbucket (#17936)
  * Improve checkBranchName (#17901)
  * allways set a message-id on mails (#17900)
  * Support sorting for project board issuses (#17152)
  * Remove unnecessary `X-Remote` HTTP header in AJAX request (#17932)
  * Refactor install page (db type) (#17919)
  * [skip ci] Updated translations via Crowdin
  * Allow default branch to be inferred on compare page (#17908)
  * Apply CSS Variables to all message elements (#17920)
  * Move repo archiver to models/repo (#17913)
  * Replace "unix" by "http+unix" for PROTOCOL (#17771)
  * Fix loading content history on show more (#17819)
  * update xgo to use 1.17 (#17915)
  * [skip ci] Updated translations via Crowdin
  * Test cache during init (#17852)
  * Display issue/comment role even if repo archived (#17907)
  * [skip ci] Updated licenses and gitignores
  * fix i18n (#17906)
  * Fix svg colors in file list table (#17903)
  * Update JS dependencies, adjust eslint config (#17904)
  * [skip ci] Updated translations via Crowdin
  * Fix the bug: no wiki page can be created if the repo didn't have any page yet. (#17894)
  * tests: more integration tests for notifications (#17845)
  * Render issue references in file table (#17897)
  * Improve seek-help documents (#17895)
  * Add hints for special Wiki pages (#17283)
  * Removed SizeFmt. (#17890)
  * Changelog for v1.15.7 (#17871) (#17889)
  * [skip ci] Updated translations via Crowdin
  * Add migrate from Codebase (#16768)
  * Update chi/middleware to chi/v5/middleware (#17888)
  * Use fmt.Sprintf correctly (#17886)
  * Added missing `data-` prefix. (#17884)
  * Check if column exist before rename if exist, just return with no error (#17870)
  * Refactor various strings (#17784)
  * fix 500 error while use a reserved name in org rename (#17878)
  * [skip ci] Updated translations via Crowdin
  * Use shadowing script for docker (#17846)
  * Improve install code to avoid low-level mistakes. (#17779)
  * [skip ci] Updated translations via Crowdin
  * Rework commit page header (#17849)
  * Make Requests Processes and create process hierarchy. Associate OpenRepository with context. (#17125)
  * Fix position of label color picker colors (#17866)
  * docs: modules do not rely on models, services do (#17861)
  * Refactor commit graph styling to use css variables (#17860)
  * [skip ci] Updated translations via Crowdin
  * Remove whitespace inside rendered code `<td>` (#17859)
  * Switch archive URL code back to href attributes (#17796)
  * Make Co-committed-by and co-authored-by trailers optional (#17848)
  * Fix various typos in docs (#17844)
  * Move more model into models/user (#17826)
  * Docs: replace `gitea` with `Gitea` (#17838)
  * Move accessmode into models/perm (#17828)
  * Disable ref selection dropdown if you don't have permissions to use it (#17837)
  * Fix value of User.IsRestricted to default setting when oauth2 user auto registration; (#17839)
  * Handle relative unix socket paths (#17836)
  * Fix code formating (#17830)
  * Replace regex usage for MIME parsing (#17831)
  * [skip ci] Updated translations via Crowdin
  * Implement Well-Known URL for password change (#17777)
  * Add archived label for code search results in archived repo's (#17817)
  * Fix database inconsistent when admin change user email (#17549)
  * [skip ci] Updated translations via Crowdin
  * org settings -> webhook/labels/deletion should also active the menu (#17809)
  * Fixed org styles. (#17807)
  * Fix org webchatwork webhook (#17810)
  * Detect dark theme via css variable (#17800)
  * Allow forks to org if you can create repos (#17783)
  * Use correct user on releases (#17806)
  * [skip ci] Updated translations via Crowdin
  * Create menus for organization pages (#17802)
  * Preserve color when inverting emojis (#17797)
  * Move user related model into models/user (#17781)
  * Use `*PushUpdateOptions` as receiver (#17724)
  * Move repofiles from modules/repofiles to services/repository/files (#17774)
  * Fix visibility of org avatars (#17789)
  * Use correct Sender on webhook change title (#17791)
  * [skip ci] Updated translations via Crowdin
  * Use new OneDev /milestones endpoint (#17782)
  * Fix keys test (#17776)
  * Add `PULL_LIMIT` and `PUSH_LIMIT` to cron.update_mirror task (#17568)
  * Improve ellipsis buttons (#17773)
  * Harden authorized keys a bit more (#17772)
  * Add copy Commit ID button in commits list (#17759)
  * Add documentation for backend development (#17512)
  * [skip ci] Updated translations via Crowdin
  * More pleasantly handle broken or missing git repositories (#17747)
  * Remove unnecessary attributes of User struct (#17745)
  * Support pagination of organizations on user settings pages (#16083)
  * Make `bind` error more readable (#17750)
  * Improvements to content history (#17746)
  * Fix project board bug and improve documents (#17753)
  * Fix navbar on project view (#17749)
  * Exclude from watching tests (#17744)
  * Add user settings key/value DB table (#16834)
  * Add new JS linter rules (#17699)
  * Use `f` variant to parse formatting (#17751)
  * [skip ci] Updated translations via Crowdin
  * Allow Loading of Diffs that are too large (#17739)
  * Remove NewSession method from db.Engine interface (#17577)
  * Fix close issue but time watcher still running (#17643)
  * [skip ci] Updated licenses and gitignores
  * Reset locale on login (#17734)
  * Extract constant names out for the ReverseProxy and Basic authentication methods (#17735)
  * Enable show more files in diff for git <2.31 (#17733)
  * Make a.add-code-comment click handler an event handler (#17737)
  * Use `hostmatcher` to replace `matchlist`, improve security (#17605)
  * Make SSL cipher suite configurable (#17440)
  * Fix correct usage of teams (#17732)
  * [skip ci] Updated translations via Crowdin
  * Better builtin avatar generator (#17707)
  * Add settings to allow different SMTP envelope from address (#17479)
  * Allow Token API calls be authorized using the reverse-proxy header (#15119)
  * Move attachment into models/repo/ (#17650)
  * Use a standalone struct name for Organization (#17632)
  * Prevent double sanitize (#16386)
  * Added comment for changing issue ref (#17672)
  * Remove unused `user` paramater (#17723)
  * Prepare and check test env during CI (#17725)
  * Fix bug when project board get open issue number (#17703)
  * perf: sent `data-path` once for each file (#17657)
  * Prevent deadlock in TestPersistableChannelQueue (#17717)
  * [skip ci] Updated translations via Crowdin
  * Move user/org deletion to services (#17673)
  * Refactor repo-legacy.js, remove messy global variables. Fix errors. (#17646)
  * Fix Migrate Description (#17692)
  * Add pagination to fork list (#17639)
  * Fix possible panic (#17694)
  * Simplify code for wrting SHA to name-rev (#17696)
  * Prevent NPE due to missing repo in regression in #17551 (#17697)
  * Move task from modules to services (#17680)
  * Move user functions into user.go (#17659)
  * Cleanup and use global style on popups (#17674)
  * Remove unnecessary variable assignments (#17695)
  * [skip ci] Updated translations via Crowdin
  * Fixed commit count. (#17698)
  * Add .gitattribute assisted language detection to blame, diff and render (#17590)
  * Return 400 but not 500 when request archive with wrong format (#17691)
  * Sanitize user-input on file name (#17666)
  * Move some functions into services/repository (#17677)
  * A better go code formatter, and now `make fmt` can run in Windows (#17684)
  * Fix bug when read mysql database max lifetime (#17682)
  * Move user follow and openid into models/user/ (#17613)
  * Enable bidichk (#17610)
  * fix migrations documents (#17679)
  * Update golangci-lint in Makefile (#17647)
  * Set unit test timeout to 20 minutes (#17664)
  * Update for reverse proxying static resources (#17670)
  * [skip ci] Updated translations via Crowdin
  * Allow admins to change user avatars (#17661)
  * Multiple Escaping Improvements (#17551)
  * Move migrations into services and base into modules/migration (#17663)
  * Move some functions into services/repository (#17660)
  * Remove superfluous argument (#17667)
  * Decouple unit test, remove intermediate `unittestbridge` package (#17662)
  * Add copy button to markdown code blocks (#17638)
  * Migrating wiki don't require token, so we should move it out of the require form (#17645)
  * Fix GitBucket icon (#17644)
  * Fix database deadlock when update issue labels (#17649)
  * [skip ci] Updated translations via Crowdin
  * Changed migration text. (#17654)
  * Fix nil checking on typed interface (#17598)
  * Remove unnecassary calls to `filepath.Join` (#17608)
  * Add download button for file viewer (#17640)
  * [skip ci] Updated translations via Crowdin
  * fix typo (#17614)
  * Add icon to vscode clone link (#17641)
  * Add migration from GitBucket (#16767)
  * Fix offBy1 errors (#17606)
  * perf: only generate data-comment-url once (#17618)
  * [skip ci] Updated licenses and gitignores
  * Correctly handle failed migrations (#17575)
  * Minor readability patch. (#17627)
  * Decouple unit test code from business code (#17623)
  * Fix some incorrect async functions, improve frontend document. (#17597)
  * unbind the CheckConsistency for some structs so that they can be moved to sub packages easier (#17612)
  * Move EmailAddress & UserRedirect into models/user/ (#17607)
  * Refactor commentTags functionality (#17558)
  * Remove `golint` as linter (#17609)
  * Update JS dependencies (#17611)
  * Move oauth2 error to oauth2 service package (#17603)
  * Fix 500 when a comment was deleted which has a notification (#17550)
  * Move webhook into models/webhook/ (#17579)
  * Added GetUserByIDCtx. (#17602)
  * [skip ci] Updated translations via Crowdin
  * Move unit into models/unit/ (#17576)
  * tune sqlite3 message (#17601)
  * Remove me from the maintainers (#17599)
  * Fix 500 when review pull request with anonymous (#17594)
  * Move merge-section to `> .content` (#17582)
  * Update `User` model comments about permissions (#17583)
  * Improve async/await usage, and sort init calls in `index.js` (#17386)
  * Use provided database Engine (#17595)
  * Fix bug on detect issue/comment writer (#17591)
  * Allow U2F 2FA without TOTP (#11573)
  * Fix stats upon searching issues (#17566)
  * Only allow returned deleted branche to be on repo (#17570)
  * Avoid double imports (#17569)
  * Remove appSubUrl from pasted images (#17572)
  * Fix documents for ALLOWED_HOST_LIST, its default value differs between 1.15 and 1.16 (#17530)
  * Add @Gusted to maintainers filer (#17581)
  * Make ParsePatch more robust (#17573)
  * Fix bug on admin subcommand (#17533)
  * [skip ci] Updated translations via Crowdin
  * Fix ipv6 parsing for builtin ssh server (#17561)
  * Update locale_en-US.ini (#17553)
  * Escape issue titles in comments list (#17555)
  * Use correct defaultValue for stracktrace (#17552)
  * Fix zero created time bug on commit api (#17546)
  * [skip ci] Updated translations via Crowdin
  * Fix database keyword quote problem on migration v161 (#17522)
  * Hide label comments if labels were added and removed immediately (#17455)
  * Show correct "No" icon (#17537)
  * Use exec -a in the FHS compliant script (#17513)
  * Fix list for options under cli->user->admin->create (#17382)
  * hide note message for pull request template (#17529)
  * Simplify Gothic to use our session store instead of creating a different store (#17507)
  * Add QueryEscape to general funcmap (#17526)
  * fix email with + when active (#17518)
  * Make Repo Code Indexer an Unique Queue (#17515)
  * docs: add SSH passthrough instructions to with-docker-rootless (#17505) (#17508)
  * Only allow webhook to send requests to allowed hosts (#17482)
  * Stop double encoding blame commit messages (#17498)
  * [skip ci] Updated licenses and gitignores
  * Properly determine CSV delimiter (#17459)
  * Rename db Engines related functions (#17481)
  * Quote the table name in CountOrphanedObjects (#17487)
  * [skip ci] Updated translations via Crowdin
  * Run Migrate in Install rather than just SyncTables (#17475)
  * [skip ci] Updated translations via Crowdin
  * Update docs/config.yaml to 1.15.6 (#17472)
  * Move key forms before list and add cancel button (#17432)
  * Fix login redirection links (#17451)
  * Changelog 1.15.6 (#17457) (#17468)
  * Fix mispelling of starred as stared (#17465)
  * Ensure that restricted users can access repos for which they are members (#17460)
  * make commit-statuses popup can be shown correctly. (#17447)
  * Add integration tests for private.NoServCommand and private.ServCommand (#17456)
  * Add appearance section in settings (#17433)
  * Fix a UI error when folding a file content in a commit view (#17446)
  * Show client-side error if wiki page is empty (#17415)
  * Fixes #16559 - Do not trim leading spaces for tab delimited (#17442)
  * Fix docker rootless build (#17441)
  * Tune UI alignment for nav bar notification icon, avatar image, issue label (#17438)
  * Upgrade go-github to v39 (#17437)
  * Prevent panic in serv.go with Deploy Keys (#17434)
  * chmod executables when copying to the docker (#17423)
  * Upgrade webpack to 5.59.1 to resolve the `waitFor` bug with `watch-frontend` (#17428)
  * fix markdown checkbox rendering (#17425)
  * In many cases user avatar link should be an absolute URL with http host (#17420)
  * Add API to get/edit wiki (#17278)
  * [skip ci] Updated translations via Crowdin
  * Fix CSV render error (#17406)
  * Read expected buffer size (#17409)
  * Add HAProxy Config to reverse-proxies.en-us.md (#17407)
  * [skip ci] Updated translations via Crowdin
  * Fix issue content history problems, improve UI (#17404)
  * Fix issue markdown bugs (#17411)
  * [skip ci] Updated translations via Crowdin
  * Remove deprecated `extendDefaultPlugins` method of svgo (#17399)
  * Frontport Changelog 1.15.5 (#17392) (#17401)
  * Fix context popup error (#17398)
  * Add groups scope/claim to OIDC/OAuth2 Provider (#17367)
  * Stop sanitizing full name in API (#17396)
  * [skip ci] Updated translations via Crowdin
  * Re-separate the color translation strings (#17390)
  * Fix the click behavior for <tr> and <td> with [data-href] (#17388)
  * Refactor update checker to use AppState (#17387)
  * Fix SVG side by side comparison link (#17375)
  * Fix history count failure (#17351)
  * Sync gitea app path for git hooks and authorized keys when starting (#17335)
  * Handle broken references in mirror sync (#17013)
  * Frontend refactor, PascalCase to camelCase, remove unused code (#17365)
  * Fix heatmap test (#17381)
  * [skip ci] Updated translations via Crowdin
  * Ensure correct SSH permissions check for private and restricted users (#17370)
  * Upgrade Bluemonday to v1.0.16 (#17372)
  * Offer rsa-sha2-512 and rsa-sha2-256 algorithms in internal SSH (#17281)
  * Prevent NPE in CSV diff rendering when column removed (#17018)
  * Use a variable but a function for IsProd because of a slight performance increment (#17368)
  *  "Copy branch name" button in pull request (#17323)
  * Rename .air.conf to .air.toml (#17360)
  * Re-allow clipboard copy on non-https sites (#17118)
  * Update JS dependencies (#17357)
  * Fix dashboard repolist alignment and repolisting (#17355)
  * [skip ci] Updated translations via Crowdin
  * Disable form autofill (#17291)
  * Allow mocking timeutil (#17354)
  * docs: add permission notes to `SSH Container Passthrough` (#17347)
  * api: integration test for nodeinfo (#17346)
  * [skip ci] Updated translations via Crowdin
  * Use go1.16+ way of installing binaries (#17342)
  * Fix some lints (#17337)
  * Move session to models/login (#17338)
  * Hide command line merge instructions when user can't push (#17339)
  * fix: repository summary on mobile (#17322)
  * Make the Mirror Queue a queue (#17326)
  * Ensure popup text is aligned left (#17327)
  * [skip ci] Updated translations via Crowdin
  * Fix the PR review form bug during frontend refactor (#17332)
  * Split `index.js` to separate files (#17315)
  * Add RSS/Atom feed support for user actions (#16002)
  * Add simple update checker to Gitea (#17212)
  * Update documents for Gitea behind reverse proxy. Fix some small bugs (some URLs are generated without sub-path) (#17320)
  * fix: issue close/comment buttons on mobile (#17317)
  * fix: code review comments on mobile (#17321)
  * [skip ci] Updated translations via Crowdin
  * Check for context exceeded in WalkGitLog (#17319)
  * Add buttons to allow loading of incomplete diffs (#16829)
  * Multiple tokens support for migrating from github (#17134)
  * Frontend refactor: move Vue related code from `index.js` to `components` dir, and remove unused codes. (#17301)
  * [skip ci] Updated translations via Crowdin
  * Show direct match on top for user search (#17303)
  * Don't panic if we fail to parse U2FRegistration data (#17304)
  * Upgrade chi to v5 (#17298)
  * [skip ci] Updated translations via Crowdin
  * Ensure that git daemon export ok is created for mirrors (#17243)
  * Disable core.protectNTFS (#17300)
  * Use pointer for wrappedConn methods (#17295)
  * Add user status filter to admin user management page (#16770)
  * [API] Add endpount to get user org permissions (#17232)
  * [skip ci] Updated translations via Crowdin
  * AutoRegistration is supposed to be working with disabled registration (#17219)
  * Open markdown image links in new window (#17287)
  * [skip ci] Updated translations via Crowdin
  * Save and view issue/comment content history (#16909)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * changelog for 1.15.4 (frontport) (#17273)
  * Add a simple way to rename branch like gh (#15870)
  * Move add deploy key form before the list and add a cancel button (#17228)
  * Defer Last Commit Info (#16467)
  * Remove heads pointing to missing old refs (#17076)
  * Fix incorrect repository count on organization tab of dashboard (#17256)
  * Allow adding multiple issues to a project  (#17226)
  * Fix unwanted team review request deletion (#17257)
  * Handle duplicate keys on GPG key ring (#17242)
  * Fix broken Activities link in team dashboard (#17255)
  * Add protection to disable Gitea when run as root (#17168)
  * API pull's head/base have correct permission (#17214)
  * Fix problem when database ID is not incremented as expected (#17229)
  * fix navbar ui (#17235)
  * CI: migrate from 'plugins/s3:1' to 'woodpeckerci/plugin-s3:latest' (#17234)
  * Avatar refactor, move avatar code from `models` to `models.avatars`, remove duplicated code (#17123)
  * Remove Dashboard/Home button from the navbar (#16844)
  * Redirect on project after issue created (#17211)
  * Add metrics to get issues by repository (#17225)
  * Add specific event type to header (#17222)
  * Fix stange behavior of DownloadPullDiffOrPatch in incorect index (#17223)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Add metrics to get issues by label (#17201)
  * Fix typo in app.example.ini (#17213)
  * API: don't allow merged PRs to be reopened (#17192)
  * Reference in new issue modal: dont pre-populate issue title (#17208)
  * Add option to copy line permalink (#17145)
  * Add projects and project boards in exposed metrics (#17202)
  * [skip ci] Updated translations via Crowdin
  * Always set a unique Message-ID header. (#17206)
  * [skip ci] Updated translations via Crowdin
  * Prevent NPE on invalid diff (#17197)
  * API: add html urls to notification subjects (#17178)
  * [skip ci] Updated translations via Crowdin
  * Fix missing repo link in issue/pull assigned emails (#17183)
  * Kanban colored boards (#16647)
  * upgrade xorm to v1.2.5 (#17177)
  * Fix wording in issue template (#17176)
  * [skip ci] Updated translations via Crowdin
  * Create pub/priv keypair for federation (#17071)
  * Fix bug of get context user (#17169)
  * Add delvh to MAINTAINERS (#17170)
  * [skip ci] Updated translations via Crowdin
  * Add nodeinfo endpoint for federation purposes (#16953)
  * Don't return binary file changes in raw PR diffs by default (#17158)
  * Nicely handle missing user in collaborations (#17049)
  * Create doctor command to fix repo_units broken by dumps from 1.14.3-1.14.6 (#17136)
  * Use light/dark theme based on system preference (#17051)
  * docs: explain where are settings for release files (#17161)
  * Support direct comparison (git diff a..b) as well merge comparison (a...b) (#16635)
  * Allow LDAP Sources to provide Avatars (#16851)
  * Add SkipLocal2FA option to pam and smtp sources (#17078)
  * [skip ci] Updated translations via Crowdin
  * Fix bundle creation (#17079)
  * Fix wrong i18n keys (#17150)
  * Move twofactor to models/login (#17143)
  * Force color-adjust for markdown checkboxes (#17146)
  * [skip ci] Updated translations via Crowdin
  * Prevent panic in Org mode HighlightCodeBlock (#17140)
  * Move login related structs and functions to models/login (#17093)
  * Unify issue and pr subtitles (#17133)
  * DBContext is just a Context (#17100)
  * Fix typo skipping a migration (#17130)
  * Fix commit status index problem (#17061)
  * Fix problem when database id is not increment as expected (#17124)
  * refactor: move from io/ioutil to io and os package (#17109)
  * update docs to 1.15.3
  * Changelog 1.15.3 (#17091) (#17113)
  * Merge endpoints for pull diff/patch (#17104)
  * Add Horizontal scrollbar to inner menu on Chrome (#17086)
  * Ignore Sync errors on pipes when doing `CheckAttributeReader.CheckPath`, fix the hang of `git cat-file` (#17096)
  * Add API to get commit diff/patch (#17095)
  * [skip ci] Updated translations via Crowdin
  * Move db related basic functions to models/db (#17075)
  * [skip ci] Updated licenses and gitignores
  * Open the DingTalk link in browser (#17084)
  * Add left padding for chunk header of split diff view (#13397)
  * Switch migration icon to svg (#15954)
  * Fixed issue where creating a reference of an issue would create a tag with the full name instead of the username if this is the default in the .ini file (#17074)
  * Render full plain readme. (#17083)
  * OpenAPI: correct documentation of issue listing parameters (#17060)
  * Add caller to cat-file batch calls (#17082)
  * [skip ci] Updated translations via Crowdin
  * Notifications API: respond with updated notifications (#17064)
  * Add minimum versions of databases to the docs (#17080)
  * Make LDAP be able to skip local 2FA (#16954)
  * [skip ci] Updated translations via Crowdin
  * Upgrade xorm to v1.2.4 (#17059) (#17068)
  * Clean-up HookPreReceive and restore functionality for pushing non-standard refs (#16705)
  * Issue template form (#16349)
  * Fix bug of migrate comments which only fetch one page (#17055)
  * Improve LDAP synchronization efficiency (#16994)
  * Do not show issue context popup on external issues (#17050)
  * Update template (#17043)
  * [skip ci] Updated translations via Crowdin
  * Add doctor dbconsistency check for release and attachment (#16978)
  * Add `AbsoluteListOptions` (#17028)
  * Decrement Fork Num when converting from Fork (#17035)
  * Correctly rollback in ForkRepository (#17034)
  * Always emit the configuration path (#17036)
  * Update go-chi/session (fixes "race" in tests) (#17031)
  * [skip ci] Updated translations via Crowdin
  * fixed create repo page layout (#17012)
  * Use common sessioner for API and Web (#17027)
  * Fix reset password email template (#17025)
  * Fix overflow label in mobile view (#17020)
  * [skip ci] Updated translations via Crowdin
  * Support unprotected file patterns (#16395)
  * [skip ci] Updated translations via Crowdin
  * Report the associated filter if there is an error in LDAP (#17014)
  * Add skip and limit to git.GetTags (#16897)
  * Add setting to OAuth handlers to skip local 2FA authentication (#16594)
  * Calculate label URL on API  (#16186)
  * Add "new issue" button on project (#17001)
  * Fix missing close in WalkGitLog (#17008)
  * Use git attributes to determine generated and vendored status for language stats and diffs (#16773)
  * doc: Upgrade from an old Gitea (#16918)
  * Use filename as id/class prefix. (#16997)
  * Enable Malayalam, Greek, Persian, Hungarian & Indonesian by default (#16998)
  * [skip ci] Updated translations via Crowdin
  * Return correct error response for agit force-push (#16989)
  * Fix bug of migrated repository not index (#16991)
  * Changes for German language (#16985)
  * Skip AllowedUserVisibilityModes validation on update user if it is an organisation (#16988)
  * Add repo_id for attachment (#16958)
  * Make TestOneDevDownloadRepo work again & more resistant (#16987)
  * Disable Fomantic's CSS tooltips (#16974)
  * Make mirror feature more configurable (#16957)
  * [skip ci] Updated translations via Crowdin
  * Add Cache-Control to avatar redirects (#16973)
  * Resolve TODO: Enable pagination on GiteaDownloader.GetComments() & update another TODO (#16963)
  * Fix storage Iterate bug and Add storage doctor to delete garbage attachments (#16971)
  * Add missing icon set for `ActionRenameRepo` (#16972)
  * Prevent panic on diff generation (#16950)
  * Ensure that rebase conflicts are handled in updates (#16952)
  * Fix issue with issue default mail template (#16956)
  * [skip ci] Updated translations via Crowdin
  * update docs to 1.15.2
  * Changelog 1.15.2 (#16940) (#16944)
  * Doc: Mail-Tempales: Fix AppUrl function name (#16939)
  * Close storage objects before cleaning (#16934)
  * Use immediate queues in integration tests and ensure that immediate (#16927)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.14.7 (#16924) (#16928)
  * Changelog 1.15.1 (#16925) (#16929)
  * Allow BASIC authentication access to /:owner/:repo/releases/download/* (#16916)
  * Prevent leave changes dialogs due to autofill fields (#16912)
  * [skip ci] Updated translations via Crowdin
  * Fix wrong attachment removal (#16915)
  * Ensure that the testlogger has its final test removal safely (#16907)
  * Ignore review comment when ref commit is missed (#16905)
  * Gitlab Migrator: dont ignore reactions of last request (#16903)
  * Correctly return the number of Repositories for Organizations (#16807)
  * Workaround coverage bug part 2 (#16906)
  * Add option to update pull request by `rebase` (#16125)
  * Test if LFS object is accessible (#16865)
  * Fix git.Blob.DataAsync(): close pipe since we return a NopCloser (#16899)
  * Repare and Improve GetDiffRangeWithWhitespaceBehavior (#16894)
  * Remove ParseQueueConnStr as it is unused (#16878)
  * Fix wiki raw commit diff/patch view (#16891)
  * Fix dump and restore respository (#16698)
  * Prevent coverage break (#16887)
  * Fix report card link (#16885)
  * Ensure wiki repos are all closed (#16886)
  * [API] List limited and private orgs if authentificated (#16866)
  * Timeout on flush in testing (#16864)
  * [skip ci] Updated translations via Crowdin
  * Remove unused Fomantic sidebar module (#16853)
  * update theme doc (#16860)
  * Paginate releases page & set default page size to 10 (#16857)
  * Simplify split diff view generation and remove JS dependency (#16775)
  * Add GoLand configuration in hacking on gitea (#16843)
  * CI: rm unit-test-race step since its now coverd by unit-test too (#16856)
  * [skip ci] Updated translations via Crowdin
  * In Render tolerate not being passed a context (#16842)
  * Ensure that the default visibility is set on the user create page (#16845)
  * Refactor the fork service slightly to take ForkRepoOptions (#16744)
  * Add test to ensure that dumping of login sources remains correct (#16847)
  * Decoupled code from DefaultSigningKey (#16743)
  * Prevent "Race" detected in TestAdmin*User (#16830)
  * Add modals to Organization and Team remove/leave (#16471)
  * [skip ci] Updated translations via Crowdin
  * Enable race detector for CI (#1441)
  * [skip ci] Updated translations via Crowdin
  * Report the correct number of pushes on the feeds (#16811)
  * Add EdDSA JWT signing algorithm (#16786)
  * Actually compute proper foreground color for labels (#16729)
  * Unify migration descriptions (#16781)
  * Use a common quote to instead of check database type (#16817)
  * Add primary_key to issue_index (#16813)
  * Prevent NPE on empty commit (#16812)
  * Fix branch pagination error (#16805)
  * Add information for migrate failure (#16803)
  * Add bundle download for repository (#14538)
  * [skip ci] Updated translations via Crowdin
  * Add missing return to handleSettingRemoteAddrError (#16794)
  * Update caddyserver/certmagic (#16789)
  * Just use a slice when rendering file (#16774)
  * Ensure that template compilation panics are sent to the logs (#16788)
  * [skip ci] Updated translations via Crowdin
  * frontport: 1.15.0 changelog (#16772)
  * Alter issue/comment table TEXT fields to LONGTEXT (#16765)
  * Fix openidConnect source regression from #16544 (#16759)
  * [skip ci] Updated licenses and gitignores
  * Add migrate from OneDev (#16356)
  * Upgrade go.mod go version to 1.16 (#16764)
  * Download lfs in git and web workflow from minio/s3 directly (#16731)
  * when the update request doesn't intend to update attachments (eg: change checkbox state), ignore attachment updates (#16762)
  * Added introspection endpoint. (#16752)
  * Fix dependency link rendering in PR sidebar (#16754)
  * Fix dependency translations (#16753)
  * Keep attachments on tasklist update (#16750)
  * Do not use thin scrollbars on Firefox (#16738)
  * Return nil proxy function if proxy not enabled (#16742)
  * Fix wrong user in OpenID response (#16736)
  * Recreate Tables should Recreate indexes on MySQL (#16718)
  * Add edit button to wiki sidebar and footer (#16719)
  * Fix migration svg color (#16715)
  * Add proxy settings and support for migration and webhook (#16704)
  * Refactored and fixed migration tests. (#16714)
  * [skip ci] Updated translations via Crowdin
  * Add API Token Cache (#16547)
  * build with go1.17 (#16707)
  * Use github token URL when fetching oauth token (#16709)
  * Update JS dependencies (#16708)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Upgrade levelqueue 0.4.1 (#16696)
  * [skip ci] Updated translations via Crowdin
  * Improve resource string (#16691)
  *  Fix spelling of HookProcReceiveResult (#16690)
  * [skip ci] Updated translations via Crowdin
  * Ensure empty lines are copiable and final new line too (#16678)
  * Add filter by owner and team to issue/pulls search endpoint (#16662)
  * Update issue_index to finish migration (#16685)
  * [skip ci] Updated translations via Crowdin
  * Upgrade xorm to v1.2.2 (#16663)
  * Fix NPE in fuzzer (#16680)
  * [API] generalize list header (#16551)
  * Add link to vscode to repo header (#16664)
  * Send registration email on user autoregistration (#16523)
  * Improve SMTP authentication and Fix user creation bugs  (#16612)
  * Related refactors to ctx.FormX functions (#16567)
  * Add an api endpoint to fetch git notes (#15373) (#16649)
  * Rename ctx.Form() to ctx.FormString() and move code into own file (#16571)
  * [skip ci] Updated translations via Crowdin
  * Upgrade github.com/google/go-github v32.1.0 -> v37.0.0 (#16661)
  * Replace `list.List` with slices (#16311)
  * Change the implementation of the go-git version of GetNote to mirror the non go-git version when passed a non-existent commit (#16658)
  * [skip ci] Updated translations via Crowdin
  * Add Version info to migrations.go (#16653)
  * Restore compatibility with SQLServer 2008 R2 in migrations (#16627)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.15.0-rc3 (#16621) (#16645)
  * Separate open and closed issue in metrics (#16637)
  * Add note about build-time flags for PAM support (#16641)
  * [skip ci] Updated translations via Crowdin
  * Allow setting X-FRAME-OPTIONS (#16643)
  * Prevent 500 on draft releases without tag (#16634)
  * Add microsoft oauth2 providers (#16544)
  * [skip ci] Updated translations via Crowdin
  * Frontport changelog for v1.14.6 (#16632)
  * Restore Accessibility for Dropdown (#16576)
  * Fixes #16557 - duplicate csv import (#16631)
  * Update node tar dependency to 6.1.6 (#16622)
  * Switch back to node 16 (#16624)
  * Set AllowedHeaders on API CORS handler (#16524)
  * Pass down SignedUserName down to AccessLogger context (#16605)
  * [skip ci] Updated translations via Crowdin
  * Upgrade to golang-jwt 3.2.2 (#16590)
  * Clarify where server.LFS_CONTENT_PATH was moved to (#16601)
  * Make PR merge options more intuitive (#5863) (#16582)
  * Fix table alignment in markdown (#16596)
  * [CI] Use node v14 instead of node v16 untill it will pass again (#16595)
  * [skip ci] Updated translations via Crowdin
  * Swagger AccessToken fixes (#16574)
  * Fix 500 on first wiki page (#16586)
  * Fix swagger doc by rename repoAddTopíc to repoAddTopic (#16580)
  * Use node:16.5 for frontend  instead of node:16 (#16591)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Lock goth/gothic and Re-attempt OAuth2 registration on login if registration failed at startup (#16564)
  * Pre-fill suggested New File 'name' and 'content' with Query Params (#16556)
  * Show correct text when comparing commits on empty pull request (#16569)
  * Rename context.Query to context.Form (#16562)
  * Add agit flow support in gitea (#14295)
  * Upgrade levelqueue to v0.4.0 (#16560)
  * [skip ci] Updated translations via Crowdin
  * not show private user's repo in explore view (#16550)
  * Fix session bugs (#16552)
  * [skip ci] Updated translations via Crowdin
  * Fix add authentication page (#16543)
  * Handle too long PR titles correctly (#16517)
  * [skip ci] Updated licenses and gitignores
  * bump github.com/markbates/goth from v1.67.1 to v1.68.0 (#16538)
  * Add an abstract json layout to make it's easier to change json library (#16528)
  * Add Linode as an installation option in docs (#16529)
  * Add snap to docs (#16530)
  * switch to maintained lib (#16532)
  * Refactor: Move login out of models (#16199)
  * Make Mermaid.js limit configurable (#16519)
  * [skip ci] Updated translations via Crowdin
  * Fix issue pasted image missing if no release permission (#16520)
  * Fix typo (#16522)
  * Add support for corporate WeChat webhooks (#15910)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.15.0-rc2 (#16511) (#16515)
  * Restore creation of git-daemon-export-ok files (#16508)
  * [skip ci] Updated translations via Crowdin
  * update `user/repos` api description (#16503)
  * Restore CORS on git smart http protocol (#16496)
  * Fix race in log (#16490)
  * Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479)
  * Add TestPrepareWikiFileName (#16487)
  * Add basic edit ldap auth test & actually fix #16252 (#16465)
  * Add fluid to ui container class to remove margin (#16396)
  * fix: support delete non-urlencoded wiki page (#16482)
  * [skip ci] Updated translations via Crowdin
  * Fix data race in bleve indexer (#16474)
  * docs: fix various typos and translate to french (#16477)
  * modules/markup/markdown: fix dropped test error (#16438)
  * [skip ci] Updated translations via Crowdin
  * Improve 2FA autofill (#16473)
  * show tag name on dashboard items list (#16466)
  * CI: Add unit-test-race (#16470)
  * Prevent race in TestPersistableChannelQueue (#16468)
  * Update notification table with only latest data (#16445)
  * Retry rename on lock induced failures (re-fix) (#16461)
  * Frontport v1.14.5 (#16454)
  * Extend the fail2ban instructions with a hint on how to make X-Real-IP… (#16446)
  * revert to use alpine 3.13 (#16451)
  * Fix crash following ldap authentication update (#16447)
  * [skip ci] Updated translations via Crowdin
  * cleanup code `issueFullPattern` in modules/markup (#16419)
  * Update documentation to reflect #15219 (#16442)
  * add configuration option to restrict users by default (#16256)
  * Check user instead of organization when creating a repo from a template via API (#16346)
  * microbadger is no more, rm from readme (#16440)
  * Change @every 24h default schedules to @midnight (#16431)

• Files Changed
• Browse Source

- Update to 1.15.11
  * SECURITY
    - Only view milestones from current repo (#18414) (#18418)
  * BUGFIXES
    - Fix broken when no commits and default branch is not master (#18422) (#18424)
    - Fix commit's time (#18375) (#18409)
    - Fix restore without topic failure (#18387) (#18401)
    - Fix mermaid import in 1.15 (it uses ESModule now) (#18382)
    - Update to go/text 0.3.7 (#18336)
  * MISC
    - Upgrade EasyMDE to 2.16.1 (#18278) (#18279)

• Files Changed
• Browse Source

Update to 1.15.10

It seems to work on Tumbleweed x86_64. Not sure how to fix the other hardware platforms.

• Files Changed
• Browse Source

Update to 1.15.9

Seems to run just fine on Tumbleweed x86_64.

• Files Changed
• Browse Source

- Update to 1.15.8
  * BUGFIXES
    - Move POST /{username}/action/{action} to simply POST /{username} (#18045) (#18046)
    - Fix delete u2f keys bug (#18040) (#18042)
    - Reset Session ID on login (#18018) (#18041)
    - Prevent off-by-one error on comments on newly appended lines (#18029) (#18035)
    - Stop printing 03d after escaped characters in logs (#18030) (#18034)
    - Reset locale on login (#18023) (#18025)
    - Fix reset password email template (#17025) (#18022)
    - Fix outType on gitea dump (#18000) (#18016)
    - Ensure complexity, minlength and isPwned are checked on password setting (#18005) (#18015)
    - Fix rename notification bug (#18011)
    - Prevent double decoding of % in url params (#17997) (#18001)
    - Prevent hang in git cat-file if the repository is not a valid repository (Partial #17991) (#17992)
    - Prevent deadlock in create issue (#17970) (#17982)
  * TESTING
    - Use non-expiring key. (#17984) (#17985)

• Files Changed
• Browse Source

- Update to 1.15.7
  * ENHANCEMENTS
    - Only allow webhook to send requests to allowed hosts (#17482) (#17510)
    - Fix login redirection links (#17451) (#17473)
  * BUGFIXES
    - Fix database inconsistent when admin change user email (#17549) (#17840)
    - Use correct user on releases (#17806) (#17818)
    - Fix commit count in tag view (#17698) (#17790)
    - Fix close issue but time watcher still running (#17643) (#17761)
    - Fix Migrate Description (#17692) (#17727)
    - Fix bug when project board get open issue number (#17703) (#17726)
    - Return 400 but not 500 when request archive with wrong format (#17691) (#17700)
    - Fix bug when read mysql database max lifetime (#17682) (#17690)
    - Fix database deadlock when update issue labels (#17649) (#17665)
    - Fix bug on detect issue/comment writer (#17592)
    - Remove appSubUrl from pasted images (#17572) (#17588)
    - Make ParsePatch more robust (#17573) (#17580)
    - Fix stats upon searching issues (#17566) (#17578)
    - Escape issue titles in comments list (#17555) (#17556)
    - Fix zero created time bug on commit api (#17546) (#17547)
    - Fix database keyword quote problem on migration v161 (#17522) (#17523)
    - Fix email with + when active (#17518) (#17520)
    - Stop double encoding blame commit messages (#17498) (#17500)
    - Quote the table name in CountOrphanedObjects (#17487) (#17488)
    - Run Migrate in Install rather than just SyncTables (#17475) (#17486)
  * BUILD
    - Fix golangci-lint warnings (#17598 et al) (#17668)
  * MISC
    - Preserve color when inverting emojis (#17797) (#17799)

• Files Changed
• Browse Source

- Update to 1.15.6 
  * BUGFIXES
    - Prevent panic in serv.go with Deploy Keys (#17434) (#17435)
    - Fix CSV render error (#17406) (#17431)
    - Read expected buffer size (#17409) (#17430)
    - Ensure that restricted users can access repos for which they are members (#17460) (#17464)
    - Make commit-statuses popup show correctly (#17447) (#17466)
  * TESTING
    - Add integration tests for private.NoServCommand and private.ServCommand (#17456) (#17463)

• Files Changed
• Browse Source

- Fix wrong nodejs dependencies for Tumbleweed.

• Files Changed
• Browse Source

- Update to 1.15.5
  * SECURITY
    - Upgrade Bluemonday to v1.0.16 (#17372) (#17374)
    - Ensure correct SSH permissions check for private and restricted users (#17370) (#17373)
  * BUGFIXES
    - Prevent NPE in CSV diff rendering when column removed (#17018) (#17377)
    - Offer rsa-sha2-512 and rsa-sha2-256 algorithms in internal SSH (#17281) (#17376)
    - Don't panic if we fail to parse U2FRegistration data (#17304) (#17371)
    - Ensure popup text is aligned left (backport for 1.15) (#17343)
    - Ensure that git daemon export ok is created for mirrors (#17243) (#17306)
    - Disable core.protectNTFS (#17300) (#17302)
    - Use pointer for wrappedConn methods (#17295) (#17296)
    - AutoRegistration is supposed to be working with disabled registration (backport) (#17292)
    - Handle duplicate keys on GPG key ring (#17242) (#17284)
    - Fix SVG side by side comparison link (#17375) (#17391)
- Add gitea-nodejs_package.json.patch to install eslint-module-utils version < 2.7.0.
  With newest version gitea will not build.

• Files Changed
• Browse Source

- Update to 1.15.4
  * BUGFIXES
    - Raw file API: don't try to interpret 40char filenames as commit SHA (#17185) (#17272)
    - Don't allow merged PRs to be reopened (#17192) (#17271)
    - Fix incorrect repository count on organization tab of dashboard (#17256) (#17266)
    - Fix unwanted team review request deletion (#17257) (#17264)
    - Fix broken Activities link in team dashboard (#17255) (#17258)
    - API pull's head/base have correct permission(#17214) (#17245)
    - Fix stange behavior of DownloadPullDiffOrPatch in incorect index (#17223) (#17227)
    - Upgrade xorm to v1.2.5 (#17177) (#17188)
    - Fix missing repo link in issue/pull assigned emails (#17183) (#17184)
    - Fix bug of get context user (#17169) (#17172)
    - Nicely handle missing user in collaborations (#17049) (#17166)
    - Add Horizontal scrollbar to inner menu on Chrome (#17086) (#17164)
    - Fix wrong i18n keys (#17150) (#17153)
    - Fix Archive Creation: correct transaction ending (#17151)
    - Prevent panic in Org mode HighlightCodeBlock (#17140) (#17141)
    - Create doctor command to fix repo_units broken by dumps from 1.14.3-1.14.6 (#17136) (#17137)
  * ENHANCEMENT
    - Check user instead of organization when creating a repo from a template via API (#16346) (#17195)
  * TRANSLATION
    - v1.15 fix Sprintf format 'verbs' in locale files (#17187)

• Files Changed
• Browse Source

- Update to 1.15.3
  * ENHANCEMENTS
    - Add fluid to ui container class to remove margin (#16396) (#16976)
    - Add caller to cat-file batch calls (#17082) (#17089)
  * BUGFIXES
    - Render full plain readme. (#17083) (#17090)
    - Upgrade xorm to v1.2.4 (#17059)
    - Fix bug of migrate comments which only fetch one page (#17055) (#17058)
    - Do not show issue context popup on external issues (#17050) (#17054)
    - Decrement Fork Num when converting from Fork (#17035) (#17046)
    - Correctly rollback in ForkRepository (#17034) (#17045)
    - Fix missing close in WalkGitLog (#17008) (#17009)
    - Add prefix to SVG id/class attributes (#16997) (#17000)
    - Fix bug of migrated repository not index (#16991) (#16996)
    - Skip AllowedUserVisibilityModes validation on update user if it is an organisation (#16988) (#16990)
    - Fix storage Iterate bug and Add storage doctor to delete garbage attachments (#16971) (#16977)
    - Fix issue with issue default mail template (#16956) (#16975)
    - Ensure that rebase conflicts are handled in updates (#16952) (#16960)
    - Prevent panic on diff generation (#16950) (#16951)

• Files Changed
• Browse Source

- Update to 1.15.2
  * BUGFIXES
    - Add unique constraint back into issue_index (#16938)
    - Close storage objects before cleaning (#16934) (#16942)

• Files Changed
• Browse Source

- Update to 1.15.1
  * BUGFIXES
    - Allow BASIC authentication access to /:owner/:repo/releases/download/* (#16916) (#16923)
    - Prevent leave changes dialogs due to autofill fields (#16912) (#16920)
    - Ignore review comment when ref commit is missed (#16905) (#16919)
    - Fix wrong attachment removal (#16915) (#16917)
    - Gitlab Migrator: dont ignore reactions of last request (#16903) (#16913)
    - Correctly return the number of Repositories for Organizations (#16807) (#16911)
    - Test if LFS object is accessible (#16865) (#16904)
    - Fix git.Blob.DataAsync(): close pipe since we return a NopCloser (#16899) (#16900)
    - Fix dump and restore respository (#16698) (#16898)
    - Repair and Improve GetDiffRangeWithWhitespaceBehavior (#16894) (#16895)
    - Fix wiki raw commit diff/patch view (#16891) (#16892)
    - Ensure wiki repos are all closed (#16886) (#16888)
    - List limited and private orgs if authenticated on API (#16866) (#16879)
    - Simplify split diff view generation and remove JS dependency (#16775) (#16863)
    - Ensure that the default visibility is set on the user create page (#16845) (#16862)
    - In Render tolerate not being passed a context (#16842) (#16858)
    - Upgrade xorm to v1.2.2 (#16663) & Add test to ensure that dumping of login sources remains correct (#16847) (#16848)
    - Report the correct number of pushes on the feeds (#16811) (#16822)
    - Add primary_key to issue_index (#16813) (#16820)
    - Prevent NPE on empty commit (#16812) (#16819)
    - Fix branch pagination error (#16805) (#16816)
    - Add missing return to handleSettingRemoteAddrError (#16794) (#16795)
    - Remove spurious / from issues.opened_by (#16793)
    - Ensure that template compilation panics are sent to the logs (#16788) (#16792)
    - Update caddyserver/certmagic (#16789) (#16790)
- Add missing docs.

• Files Changed
• Browse Source