v1.23.0-rc0

• BREAKING

  • Rename config option [camo].Allways to [camo].Always (#32097)
  • Remove SHA1 for support for ssh rsa signing (#31857)
  • Use UTC as default timezone when schedule Actions cron tasks (#31742)
  • Delete Actions logs older than 1 year by default (#31735)
  • Make OIDC introspection authentication strictly require Client ID and secret (#31632)

• SECURITY

  • Include file extension checks in attachment API (#32151)
  • Include all security fixes which have been backported to v1.22

• FEATURES

  • Allow to fork repository into the same owner (#32819)
  • Support "merge upstream branch" (Sync fork) (#32741)
  • Add Arch package registry (#32692)
  • Allow to disable the password-based login (sign-in) form (#32687)
  • Allow cropping an avatar before setting it (#32565)
  • Support quote selected comments to reply (#32431)
  • Add reviewers selection to new pull request (#32403)
  • Suggestions for issues (#32327)
  • Add priority to protected branch (#32286)
  • Included tag search capabilities (#32045)
  • Add option to filter board cards by labels and assignees (#31999)
  • Add automatic light/dark option for the colorblind theme (#31997)
  • Support migration from AWS CodeCommit (#31981)
  • Introduce globallock as distributed locks (#31908 & #31813)
  • Support compression for Actions logs & enable by default (#31761 & #32013)
  • Add pure SSH LFS support (#31516)
  • Add Passkey login support (#31504)
  • Actions support workflow dispatch event (#28163)
  • Support repo license (#24872)
  • Issue time estimate, meaningful time tracking (#23113)
  • GitHub like repo home page (#32213 & #32847)
  • Rearrange Clone Panel (#31142)
  • Enhancing Gitea OAuth2 Provider with Granular Scopes for Resource Access (#32573)

• PERFORMANCE

  • Perf: add extra index to notification table (#32395)
  • Introduce OrgList and add LoadTeams, optimaze Load teams for orgs (#32543)
  • Improve performance of diffs (#32393)
  • Make LFS http_client parallel within a batch. (#32369)
  • Add new index for action to resolve the performance problem (#32333)
  • Improve get feed with pagination (#31821)
  • Performance improvements for pull request list API (#30490)
  • Use batch database operations instead of one by one to optimze api pulls (#32680)

• ENHANCEMENTS

  • Code

    • Remove unnecessary border in repo home page sidebar (#32767)
    • Add 'Copy path' button to file view (#32584)
    • Improve diff file tree (#32658)
    • Add new [lfs_client].BATCH_SIZE and [server].LFS_MAX_BATCH_SIZE config settings. (#32307)
    • Updated tokenizer to better matching when search for code snippets (#32261)
    • Change the code search to sort results by relevance (#32134)
    • Support migrating GitHub/GitLab PR draft status (#32242)
    • Move lock icon position and add additional tooltips to branch list page (#31839)
    • Add tag name in the commits list (#31082)
    • Add MAX_ROWS option for CSV rendering (#30268)
    • Allow code search by filename (#32210)
    • Make git push options accept short name (#32245)
    • Repo file list enhancements (#32835)

  • Markdown & Editor

    • Refactor markdown math render, add dollor-backquote syntax support (#32831)
    • Make Monaco theme follow browser, fully type codeeditor.ts (#32756)
    • Refactor markdown editor and use it for milestone description editor (#32688)
    • Add some handy markdown editor features (#32400)
    • Improve markdown textarea for indentation and lists (#31406)

  • Issue

    • Add label/author/assignee filters to the user/org home issue list (#32779)
    • Refactor issue filter (labels, poster, assignee) (#32771)
    • Style unification for the issue_management area (#32605)
    • Add "View all branches/tags" entry to Branch Selector (#32653)
    • Improve textarea paste (#31948)
    • Add avif image file support (#32508)
    • Prevent from submitting issue/comment on uploading (#32263)
    • Issue Templates: add option to have dropdown printed list (#31577)
    • Allow searching issues by ID (#31479)
    • Add is_archived option for issue indexer (#32735)
    • Improve attachment upload methods (#30513)
    • Support issue template assignees (#31083)
    • Prevent simultaneous editing of comments and issues (#31053)
    • Add issue comment when moving issues from one column to another of the project (#29311)

  • Pull Request

    • Display head branch more comfortable on pull request view (#32000)
    • Simplify review UI (#31062)
    • Allow force push to protected branches (#28086)
    • Add line-through for deleted branch on pull request view page (#32500)
    • Support requested_reviewers data in comment webhook events (#26178)
    • Allow maintainers to view and edit files of private repos when "Allow maintainers to edit" is enabled (#32215)
    • Allow including Reviewed-on/Reviewed-by lines for custom merge messages (#31211)

  • Actions

    • Render job title as commit message (#32748)
    • Refactor RepoActionView.vue, add ::group:: support (#32713)
    • Make RepoActionView.vue support ##[group] (#32770)
    • Support pull_request_target event for commit status (#31703)
    • Detect whether action view branch was deleted (#32764)
    • Allow users with write permission to run actions (#32644)
    • Show latest run when visit /run/latest (#31808)

  • Packages

    • Improve rubygems package registry (#31357)
    • Add support for npm bundleDependencies (#30751)
    • Add signature support for the RPM module (#27069)
    • Extract and display readme and comments for Composer packages (#30927)

  • Project

    • Add title to project view page (#32747)
    • Set the columns height to hug all its contents (#31726)
    • Rename project board -> column to make the UI less confusing (#30170)

  • User & Organazition

    • Use better name for userinfo structure (#32544)
    • Use user.FullName in Oauth2 id_token response (#32542)
    • Limit org member view of restricted users (#32211)
    • Allow disabling authentication related user features (#31535)
    • Add option to change mail from user display name (#31528)
    • Use FullName in Emails to address the recipient if possible (#31527)

  • Administration

    • Add support for a credentials chain for minio access (#31051)
    • Move admin routers from /admin to /-/admin (#32189)
    • Add cache test for admins (#31265)
    • Add option for mailer to override mail headers (#27860)
    • Azure blob storage support (#30995)
    • Supports forced use of S3 virtual-hosted style (#30969)
    • Move repository visibility to danger zone in the settings area (#31126)

  • Others

    • Remove urls from translations (#31950)
    • Simplify 404/500 page (#31409)
    • Optimize installation-page experience (#32558)
    • Refactor login page (#31530)
    • Add new event commit status creation and webhook implementation (#27151)
    • Repo Activity: count new issues that were closed (#31776)
    • Set manual tabindexes on login page (#31689)
    • Add YEAR, MONTH, MONTH_ENGLISH, DAY variables for template repos (#31584)
    • Add typescript guideline and typescript-specific eslint plugins and fix issues (#31521)
    • Make toast support preventDuplicates (#31501)
    • Fix tautological conditions (#30735)

• API

  • Implement update branch API (#32433)
  • Fix missing outputs for jobs with matrix (#32823)
  • Make API "compare" accept commit IDs (#32801)
  • Add github compatible tarball download API endpoints (#32572)
  • Harden runner updateTask and updateLog api (#32462)
  • Add DISABLE_ORGANIZATIONS_PAGE and DISABLE_CODE_PAGE settings for explore pages and fix an issue related to user search (#32288)
  • Make admins adhere to branch protection rules (#32248)
  • Calculate PublicOnly for org membership only once (#32234)
  • Allow filtering PRs by poster in the ListPullRequests API (#32209)
  • Return 404 instead of error when commit not exist (#31977)
  • Save initial signup information for users to aid in spam prevention (#31852)
  • Fix upload maven pacakge parallelly (#31851)
  • Fix null requested_reviewer from API (#31773)
  • Add permission description for API to add repo collaborator (#31744)
  • Add return type to GetRawFileOrLFS and GetRawFile (#31680)
  • Add skip secondary authorization option for public oauth2 clients (#31454)
  • Add tag protection via rest api #17862 (#31295)
  • Document possible action types for the user activity feed API (#31196)
  • Add topics for repository API (#31127)
  • Add support for searching users by email (#30908)
  • Add API endpoints for getting action jobs status (#26673)

• REFACTOR

  • Update JS and PY dependencies (#31940)
  • Enable no-jquery/no-parse-html-literal and fix violation (#31684)
  • Refactor image diff (#31444)
  • Refactor CSRF token (#32216)
  • Fix some typescript issues (#32586)
  • Refactor names (#31405)
  • Use per package global lock for container uploads instead of memory lock (#31860)
  • Move team related functions to service layer (#32537)
  • Move GetFeeds to service layer (#32526)
  • Resolve lint for unused parameter and unnecessary type arguments (#30750)
  • Reimplement GetUserOrgsList to make it simple and clear (#32486)
  • Move some functions from issue.go to standalone files (#32468)
  • Refactor sidebar assignee&milestone&project selectors (#32465)
  • Refactor sidebar label selector (#32460)
  • Fix a number of typescript issues (#32459)
  • Refactor language menu and dom utils (#32450)
  • Refactor issue page info (#32445)
  • Split issue sidebar into small templates (#32444)
  • Refactor template ctx and render utils (#32422)
  • Refactor repo legacy (#32404)
  • Refactor markup package (#32399)
  • Refactor markup render system (#32533 & #32589 & #32612)
  • Refactor the DB mi...

v1.22.6

SECURITY

• Fix misuse of PublicKeyCallback(#32810)

BUGFIXES

• Fix lfs migration (#32812) (#32818)
• Add missing two sync feed for refs/pull (#32815)

TESTING

• Avoid MacOS keychain dialog in integration tests (#32813) (#32816)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.22.5

SECURITY

• Upgrade crypto library (#32791)
• Fix delete branch perm checking (#32654) (#32707)

BUGFIXES

• Add standard-compliant route to serve outdated R packages (#32783) (#32789)
• Fix internal server error when updating labels without write permission (#32776) (#32785)
• Add Swift login endpoint (#32693) (#32701)
• Fix fork page branch selection (#32711) (#32725)
• Fix word overflow in file search page (#32695) (#32699)
• Fix gogit GetRefCommitID (#32705) (#32712)
• Fix race condition in mermaid observer (#32599) (#32673)
• Fixe a keystring misuse and refactor duplicates keystrings (#32668) (#32792)
• Bump relative-time-element to v4.4.4 (#32739)

PERFORMANCE

• Make wiki pages visit fast (#32732) (#32745)

MISC

• Don't create action when syncing mirror pull refs (#32659) (#32664)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.22.4

• SECURITY
  • Fix basic auth with webauthn (#32531) (#32536)
  • Refactor internal routers (partial backport, auth token const time comparing) (#32473) (#32479)
• PERFORMANCE
  • Remove transaction for archive download (#32186) (#32520)
• BUGFIXES
  • Fix missing signature key error when pulling Docker images with SERVE_DIRECT enabled (#32365) (#32397)
  • Fix get reviewers fails when selecting user without pull request permissions unit (#32415) (#32616)
  • Fix adding index files to tmp directory (#32360) (#32593)
  • Fix PR creation on forked repositories via API (#31863) (#32591)
  • Fix missing menu tabs in organization project view page (#32313) (#32592)
  • Support HTTP POST requests to /userinfo, aligning to OpenID Core specification (#32578) (#32594)
  • Fix debian package clean up cron job (#32351) (#32590)
  • Fix GetInactiveUsers (#32540) (#32588)
  • Allow the actions user to login via the jwt token (#32527) (#32580)
  • Fix submodule parsing (#32571) (#32577)
  • Refactor find forks and fix possible bugs that weaken permissions check (#32528) (#32547)
  • Fix some places that don't respect org full name setting (#32243) (#32550)
  • Refactor push mirror find and add check for updating push mirror (#32539) (#32549)
  • Fix basic auth with webauthn (#32531) (#32536)
  • Fix artifact v4 upload above 8MB (#31664) (#32523)
  • Fix oauth2 error handle not return immediately (#32514) (#32516)
  • Fix action not triggered when commit message is too long (#32498) (#32507)
  • Fix GetRepoLink nil pointer dereference on dashboard feed page when repo is deleted with actions enabled (#32501) (#32502)
  • Fix missing signature key error when pulling Docker images with SERVE_DIRECT enabled (#32397) (#32397)
  • Fix the permission check for user search API and limit the number of returned users for /user/search (#32310)
  • Fix SearchIssues swagger docs (#32208) (#32298)
  • Fix dropdown content overflow (#31610) (#32250)
  • Disable Oauth check if oauth disabled (#32368) (#32480)
  • Respect renamed dependencies of Cargo registry (#32430) (#32478)
  • Fix mermaid diagram height when initially hidden (#32457) (#32464)
  • Fix broken releases when re-pushing tags (#32435) (#32449)
  • Only provide the commit summary for Discord webhook push events (#32432) (#32447)
  • Only query team tables if repository is under org when getting assignees (#32414) (#32426)
  • Fix created_unix for mirroring (#32342) (#32406)
  • Respect UI.ExploreDefaultSort setting again (#32357) (#32385)
  • Fix broken image when editing comment with non-image attachments (#32319) (#32345)
  • Fix disable 2fa bug (#32320) (#32330)
  • Always update expiration time when creating an artifact (#32281) (#32285)
  • Fix null errors on conversation holder (#32258) (#32266) (#32282)
  • Only rename a user when they should receive a different name (#32247) (#32249)
  • Fix checkbox bug on private/archive filter (#32236) (#32240)
  • Add a doctor check to disable the "Actions" unit for mirrors (#32424) (#32497)
  • Quick fix milestone deadline 9999 (#32423)
  • Make show stats work when only one file changed (#32244) (#32268)
  • Make owner/repo/pulls handlers use "PR reader" permission (#32254) (#32265)
  • Update scheduled tasks even if changes are pushed by "ActionsUser" (#32246) (#32252)
• MISC
  • Remove unnecessary code: GetPushMirrorsByRepoID called on all repo pages (#32560) (#32567)
  • Improve some sanitizer rules (#32534)
  • Update nix development environment vor v1.22.x (#32495)
  • Add warn log when deleting inactive users (#32318) (#32321)
  • Update github.com/go-enry/go-enry to v2.9.1 (#32295) (#32296)
  • Warn users when they try to use a non-root-url to sign in/up (#32272) (#32273)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.22.3

• SECURITY
  • Fix bug when a token is given public only (#32204) (#32218)
• PERFORMANCE
  • Increase cacheContextLifetime to reduce false reports (#32011) (#32023)
  • Don't join repository when loading action table data (#32127) (#32143)
• BUGFIXES
  • Fix javascript error when an anonymous user visits migration page (#32144) (#32179)
  • Don't init signing keys if oauth2 provider is disabled (#32177)
  • Fix wrong status of Set up Job when first step is skipped (#32120) (#32125)
  • Fix bug when deleting a migrated branch (#32075) (#32123)
  • Truncate commit message during Discord webhook push events (#31970) (#32121)
  • Allow to set branch protection in an empty repository (#32095) (#32119)
  • Fix panic when cloning with wrong ssh format. (#32076) (#32118)
  • Fix rename branch permission bug (#32066) (#32108)
  • Fix: database not update release when using git push --tags --force (#32040) (#32074)
  • Add missing comment reply handling (#32050) (#32065)
  • Do not escape relative path in RPM primary index (#32038) (#32054)
  • Fix /repos/{owner}/{repo}/pulls/{index}/files endpoint not populating previous_filename (#32017) (#32028)
  • Support allowed hosts for migrations to work with proxy (#32025) (#32026)
  • Fix the logic of finding the latest pull review commit ID (#32139) (#32165)
  • Fix bug in getting merged pull request by commit (#32079) (#32117)
  • Fix wrong last modify time (#32102) (#32104)
  • Fix incorrect /tokens api (#32085) (#32092)
  • Handle invalid target when creating releases using API (#31841) (#32043)
  • Check if the due_date is nil when editing issues (#32035) (#32042)
  • Fix container parallel upload bugs (#32022)
  • Fixed race condition when deleting documents by repoId in ElasticSearch (#32185) (#32188)
  • Refactor CSRF protector (#32057) (#32069)
  • Fix Bug in Issue/pulls list (#32081) (#32115)
  • Include collaboration repositories on dashboard source/forks/mirrors list (#31946) (#32122)
  • Add null check for responseData.invalidTopics (#32212) (#32217)
• TESTING
  • Fix mssql ci with a new mssql version on ci (#32094)
• MISC
  • Upgrade some dependencies include minio-go (#32166)
  • Add bin to Composer Metadata (#32099) (#32106)
  • Lazy load avatar images (#32051) (#32063)
  • Upgrade cache to v0.2.1 (#32003) (#32009)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.22.2

• Security
  • Replace v-html with v-text in search inputbox (#31966) (#31973)
  • Fix nuget/conan/container packages upload bugs (#31967) (#31982)
• PERFORMANCE
  • Refactor the usage of batch catfile (#31754) (#31889)
• BUGFIXES
  • Fix overflowing content in action run log (#31842) (#31853)
  • Scroll images in project issues separately from the remaining issue (#31683) (#31823)
  • Add :focus-visible style to buttons (#31799) (#31819)
  • Fix the display of project type for deleted projects (#31732) (#31734)
  • Fix API owner ID should be zero when created repo secret (#31715) (#31811)
  • Set owner id to zero when GetRegistrationToken for repo (#31725) (#31729)
  • Fix API endpoint for registration-token (#31722) (#31728)
  • Add permission check when creating PR (#31033) (#31720)
  • Don't return 500 if mirror url contains special chars (#31859) (#31895)
  • Fix agit automerge (#31207) (#31881)
  • Add CfTurnstileSitekey context data to all captcha templates (#31874) (#31876)
  • Avoid returning without written ctx when posting PR (#31843) (#31848)
  • Fix raw wiki links (#31825) (#31845)
  • Fix panic of ssh public key page after deletion of auth source (#31829) (#31836)
  • Fixes for unreachable project issues when transfer repository from organization (#31770) (#31828)
  • Show lock owner instead of repo owner on LFS setting page (#31788) (#31817)
  • Fix IsObjectExist with gogit (#31790) (#31806)
  • Fix protected branch files detection on pre_receive hook (#31778) (#31796)
  • Add TAGS to TEST_TAGS and fix bugs found with gogit (#31791) (#31795)
  • Rename head branch of pull requests when renaming a branch (#31759) (#31774)
  • Fix wiki revision pagination (#31760) (#31772)
  • Bump vue-bar-graph (#31705) (#31753)
  • Distinguish LFS object errors to ignore missing objects during migration (#31702) (#31745)
  • Make GetRepositoryByName more safer (#31712) (#31718)
  • Fix a branch divergence cache bug (#31659) (#31661)
  • Allow org team names of length 255 in create team form (#31564) (#31603)
  • Use old behavior for telegram webhook (#31588)
  • Bug fix for translation in ru (#31892)
  • Fix actions notify bug (#31866) (#31875)
  • Fix the component of access token list not mounted (#31824) (#31868)
  • Add missing repository type filter parameters to pager (#31832) (#31837)
  • Fix dates displaying in a wrong manner when we're close to the end of… (#31750)
  • Fix "Filter by commit" Dropdown (#31695) (#31696)
  • Properly filter issue list given no assignees filter (#31522) (#31685)
  • Prevent update pull refs manually and will not affect other refs update (#31931)(#31955)
  • Fix sort order for organization home and user profile page (#31921) (#31922)
  • Fix search team (#31923) (#31942)
  • Fix 500 error when state params is set when editing issue/PR by API (#31880) (#31952)
  • Fix index too many file names bug (#31903) (#31953)
  • Add lock for parallel maven upload (#31851) (#31954)
• MISC
  • Remove "dsa-1024" testcases from Test_SSHParsePublicKey and Test_calcFingerprint (#31905) (#31914)
  • Upgrade bleve to 2.4.2 (#31894)
  • Remove unneccessary uses of word-break: break-all (#31637) (#31652)
  • Return an empty string when a repo has no avatar in the repo API (#31187) (#31567)
  • Upgrade micromatch to 4.0.8 (#31944)
  • Update webpack to 5.94.0 (#31941)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.22.1

• SECURITY
  • Add replacement module for mholt/archiver (#31267) (#31270)
• API
  • Fix missing images in editor preview due to wrong links (#31299) (#31393)
  • Fix duplicate sub-path for avatars (#31365) (#31368)
  • Reduce memory usage for chunked artifact uploads to MinIO (#31325) (#31338)
  • Remove sub-path from container registry realm (#31293) (#31300)
  • Fix NuGet Package API for $filter with Id equality (#31188) (#31242)
  • Add an immutable tarball link to archive download headers for Nix (#31139) (#31145)
  • Add missed return after ctx.ServerError (#31130) (#31133)
• BUGFIXES
  • Fix avatar radius problem on the new issue page (#31506) (#31508)
  • Fix overflow menu flickering on mobile (#31484) (#31488)
  • Fix poor table column width due to breaking words (#31473) (#31477)
  • Support relative paths to videos from Wiki pages (#31061) (#31453)
  • Fix new issue/pr avatar (#31419) (#31424)
  • Increase max length of org team names from 30 to 255 characters (#31410) (#31421)
  • Fix line number width in code preview (#31307) (#31316)
  • Optimize runner-tags layout to enhance visual experience (#31258) (#31263)
  • Fix overflow on push notification (#31179) (#31238)
  • Fix overflow on notifications (#31178) (#31237)
  • Fix overflow in issue card (#31203) (#31225)
  • Split sanitizer functions and fine-tune some tests (#31192) (#31200)
  • use correct l10n string (#31487) (#31490)
  • Fix dropzone JS error when attachment is disabled (#31486)
  • Fix web notification icon not updated once you read all notifications (#31447) (#31466)
  • Switch to "Write" tab when edit comment again (#31445) (#31461)
  • Fix the link for .git-blame-ignore-revs bypass (#31432) (#31442)
  • Fix the wrong line number in the diff view page when expanded twice. (#31431) (#31440)
  • Fix labels and projects menu overflow on issue page (#31435) (#31439)
  • Fix Account Linking UpdateMigrationsByType (#31428) (#31434)
  • Fix markdown math brackets render problem (#31420) (#31430)
  • Fix rendered wiki page link (#31398) (#31407)
  • Fix natural sort (#31384) (#31394)
  • Allow downloading attachments of draft releases (#31369) (#31380)
  • Fix repo graph JS (#31377)
  • Fix incorrect localization explorer.go (#31348) (#31350)
  • Fix hash render end with colon (#31319) (#31346)
  • Fix line number widths (#31341) (#31343)
  • Fix navbar + menu flashing on page load (#31281) (#31342)
  • Fix adopt repository has empty object name in database (#31333) (#31335)
  • Delete legacy cookie before setting new cookie (#31306) (#31317)
  • Fix some URLs whose sub-path is missing (#31289) (#31292)
  • Fix admin oauth2 custom URL settings (#31246) (#31247)
  • Make pasted "img" tag has the same behavior as markdown image (#31235) (#31243)
  • Fix agit checkout command line hint & fix ShowMergeInstructions checking (#31219) (#31222)
  • Fix the possible migration failure on 286 with postgres 16 (#31209) (#31218)
  • Fix branch order (#31174) (#31193)
  • Fix markup preview (#31158) (#31166)
  • Fix push multiple branches error with tests (#31151) (#31153)
  • Fix API repository object format missed (#31118) (#31132)
  • Fix missing memcache import (#31105) (#31109)
  • Upgrade github.com/hashicorp/go-retryablehttp (#31499)
  • Fix double border in system status table (#31363) (#31401)
  • Fix bug filtering issues which have no project (#31337) (#31367)
  • Fix #31185 try fix lfs download from bitbucket failed (#31201) (#31329)
  • Add nix flake for dev shell (#30967) (#31310)
  • Fix and clean up ConfirmModal (#31283) (#31291)
  • Optimize repo-list layout to enhance visual experience (#31272) (#31276)
  • fixed the dropdown menu for the top New button to expand to the left (#31273) (#31275)
  • Fix Activity Page Contributors dropdown (#31264) (#31269)
  • fix: allow actions artifacts storage migration to complete succesfully (#31251) (#31257)
  • Make blockquote attention recognize more syntaxes (#31240) (#31250)
  • Remove .segment from .project-column (#31204) (#31239)
  • Ignore FindRecentlyPushedNewBranches err (#31164) (#31171)
  • Use vertical layout for multiple code expander buttons (#31122) (#31152)
  • Remove duplicate ProxyPreserveHost in Apache httpd doc (#31143) (#31147)
  • Improve mobile review ui (#31091) (#31136)
  • Fix DashboardRepoList margin (#31121) (#31128)
  • Update pip related commands for docker (#31106) (#31111)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.22.0

This release stands as a monumental milestone in our development journey with a record-breaking incorporation of 1481 pull requests. It marks the most extensive update in Gitea's history, showcasing a plethora of new features and infrastructure improvements.

Noteworthy advancements in this release include the introduction of HTMX and Tailwind, signaling a strategic shift as we gradually phase out jquery and Fomantic UI. These changes reflect our commitment to embracing modern technologies and enhancing the user experience.

Key highlights of this release encompass significant changes categorized under BREAKING, FEATURES, ENHANCEMENTS, and PERFORMANCE, each contributing to a more robust and efficient Gitea platform.

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

Known Issues

• Gitea 1.22.0 fails to start when cache ADAPTER=memcache ("Init failed: cache: unknown adapter 'memcache'(forgot to import?)"), it has been fixed in 1.22-nightly.
• When visiting some repositories, a 500 error occurs (admin could see error FindRecentlyPushedNewBranches), it has been fixed in 1.22-nightly.

BREAKING

• Improve reverse proxy documents and clarify the AppURL guessing behavior (#31003) (#31020)
• Remember log in for a month by default (#30150)
• Breaking summary for template refactoring (#29395)
  • All custom templates need to follow these changes
• Recommend/convert to use case-sensitive collation for MySQL/MSSQL (#28662)
• Make offline mode as default to not connect external avatar service by default (#28548)
• Include public repos in the doer's dashboard for issue search (#28304)
• Use restricted sanitizer for repository description (#28141)
• Support storage base path as prefix (#27827)
• Enhanced auth token / remember me (#27606)
• Rename the default themes to gitea-light, gitea-dark, gitea-auto (#27419)
  • If you didn't see the new themes, please remove the [ui].THEMES config option from app.ini
• Require MySQL 8.0, PostgreSQL 12, MSSQL 2012 (#27337)

FEATURES

• Allow everyone to read or write a wiki by a repo unit setting (#30495)
• Use raw Wiki links for non-renderable Wiki files (#30273)
• Render embedded code preview by permalink in markdown (#30234) (#30249)
• Support repo code search without setting up an indexer (#29998)
• Support pasting URLs over markdown text (#29566)
• Allow to change primary email before account activation (#29412)
• Customizable "Open with" applications for repository clone (#29320)
• Allow options to disable user deletion from the interface on app.ini (#29275)
• Extend issue template YAML engine (#29274)
• Add support for linguist-detectable and linguist-documentation (#29267)
• Implement code frequency graph (#29191)
• Show commit status for releases (#29149)
• Add user blocking (#29028)
• Actions Artifacts v4 backend (#28965)
• Add merge style fast-forward-only (#28954)
• Retarget depending pulls when the parent branch is deleted (#28686)
• Add global setting on how timestamps should be rendered (#28657)
• Implement actions badge SVGs (#28102)
• Add skip ci functionality (#28075)
• Show latest commit for file (#28067)
• Allow to sync tags from the admin dashboard (#28045)
• Add Profile Readme for Organisations (#27955)
• Implement contributors graph (#27882)
• Artifact deletion in actions ui (#27172)
• Add API routes to get runner registration token (#27144)
• Add support for forking single branch (#25821)
• Add support for sha256 repositories (#23894)
• Add admin API route for managing user's badges (#23106)

ENHANCEMENTS

• Make gitea webhooks openproject compatible (#28435) (#31081)
• Support using label names when changing issue labels (#30943) (#30958)
• Fix various problems around project board view (#30696) (#30902)
• Improve context popup rendering (#30824) (#30829)
• Allow to save empty comment (#30706)
• Prevent allow/reject reviews on merged/closed PRs (#30686)
• Initial support for colorblindness-friendly themes (#30625)
• Some NuGet package enhancements (#30280) (#30324)
• Markup color and font size fixes (#30282) (#30310)
• Show 12 lines in markup code preview (#30255) (#30257)
• Add [other].SHOW_FOOTER_POWERED_BY setting to hide Powered by (#30253)
• Pulse page improvements (#30149)
• Render code tags in commit messages (#30146)
• Prevent re-review and dismiss review actions on closed and merged PRs (#30065)
• Cancel previous runs of the same PR automatically (#29961)
• Drag-and-drop improvements for projects and issue pins (#29875)
• Add default board to new projects, remove uncategorized pseudo-board (#29874)
• Prevent layout shift in <overflow-menu> items (#29831)
• Add skip ci support for pull request title (#29774)
• Add more stats tables (#29730)
• Update API to return 'source_id' for users (#29718)
• Determine fuzziness of bleve indexer by keyword length (#29706)
• Expose fuzzy search for issues/pulls (#29701)
• Put an edit file button on pull request files to allow a quick operation (#29697)
• Fix action runner offline label padding (#29691)
• Update allowed attachment types (#29688)
• Completely style the webkit autofill (#29683)
• Highlight archived labels (#29680)
• Add a warning for disallowed email domains (#29658)
• Set user's 24h preference from their current OS locale (#29651)
• Add setting to disable user features when user login type is not plain (#29615)
• Improve natural sort (#29611)
• Make wiki default branch name changeable (#29603)
• Unify search boxes (#29530)
• Add support for API blob upload of release attachments (#29507)
• Detect broken git hooks (#29494)
• Sync branches to DB immediately when handling git hook calling (#29493)
• Allow options to disable user GPG key configuration from the interface on app.ini (#29486)
• Allow options to disable user SSH key configuration from the interface on app.ini (#29447)
• Use relative links for commits, mentions, and issues in markdown (#29427)
• Add <overflow-menu>, rename webcomponents (#29400)
• Include resource state events in Gitlab downloads (#29382)
• Properly migrate target branch change GitLab comment (#29340)
• Recolor dark theme to blue shade (#29283)
• Partially enable MSSQL case-sensitive collation support (#29238)
• Auto-update the system status in the admin dashboard (#29163)
• Integrate alpine noarch packages into other architectures index (#29137)
• Document how the TOC election process works (#29135)
• Tweak repo header (#29134)
• Make blockquote border size less aggressive (#29124)
• Downscale pasted PNG images based on metadata (#29123)
• Show View at this point in history for every commit (#29122)
• Add support for action artifact serve direct (#29120)
• Change webhook-type in create-view (#29114)
• Drop "@" from the email sender to avoid spam filters (#29109)
• Allow non-admin users to delete review requests (#29057)
• Improve user search display name (#29002)
• Include username in email headers (#28981)
• Show whether a PR is WIP inside popups (#28975)
• Also match weakly validated ETags (#28957)
• Support nuspec manifest download for Nuget packages (#28921)
• Fix hardcoded GitHub icon used as migrated release avatar (#28910)
• Propagate install_if and provider_priority to APKINDEX (#28899)
• Add artifacts v4 JWT to job message and accept it (#28885)
• Enable/disable owner and repo projects independently (#28805)
• Add non-JS fallback for reaction tooltips (#28785)
• Add the ability to see open and closed issues at the same time (#28757)
• Move sign-in labels to be above inputs (#28753)
• Display the latest sync time for pull mirrors on the repo page (#28712)
• Show in Web UI if the file is vendored and generated (#28620)
• Add orphaned topic consistency check (#28507)
• Add branch protection setting for ignoring stale approvals (#28498)
• Add option to set language in admin user view (#28449)
• Fix incorrect run order of action jobs (#28367)
• Add missing exclusive in advanced label options (#28322)
• Added instance-level variables (#28115)
• Add edit option for README.md (#28071)
• Fix link to Code tab on wiki commits (#28041)
• Allow to set explore page default sort (#27951)
• Improve PR diff view on mobile (#27883)
• Properly migrate automatic merge GitLab comments (#27873)
• Display issue task list on project cards (#27865)
• Add Index to pull_auto_merge.doer_id (#27811)
• Fix display member unit in the menu bar if there are no hidden members in public org (#27795)
• List all Debian package versions in Packages (#27786)
• Allow pull requests Manually Merged option to be used by non-admins (#27780)
• Only show diff file tree when more than one file changed (#27775)
• Show placeholder email in privacy popup (#27770)
• Revamp repo header (#27760)
• Add must-change-password command line parameter (#27626)
• Unify password changing and invalidate auth tokens (#27625)
• Add border to file tree 'sub-items' and add padding to 'item-file' (#27593)
• Add slow SQL query warning (#27545)
• Pre-register OAuth application for tea (#27509)
• Differentiate between push and pull mirror sync in progress (#27390)
• Link to file from its history (#27354)
• Add a shortcut to user's profile page to admin user details (#27299)
• Doctor: delete action entries without existing user (#27292)
• Show total TrackedTime on issue/pull/milestone lists (#26672)
• Don't show the new pull request button when the page is not comp...

v1.22.0-rc1

Breaking Changes

• Remember login for a month by default (#30150)
• Breaking summary for template refactoring (#29395)
  • All custom templates need to follow these changes
• Recommend/convert to use case-sensitive collation for MySQL/MSSQL (#28662)
• Make offline mode as default to no connect external avatar service by default (#28548)
• Include public repos in doer's dashboard for issue search (#28304)
• Support storage base path as prefix (#27827)
• Enhanced auth token / remember me (#27606)
• Rename the default themes to gitea-light, gitea-dark, gitea-auto (#27419)
  • If you didn't see the new themes, please remove the [ui].THEMES config option from app.ini
• Require MySQL 8.0 (MariaDB 10), PostgreSQL 12, MSSQL 2012 (#27337)

Features & Enhancements

• Render embedded code preview by permlink in markdown (#30234)
• Support repo code search without setting up an indexer (#29998)
• Support pasting URLs over markdown text (#29566)
• Allow to change primary email before account activation (#29412)
• Customizable "Open with" applications for repository clone (#29320)
• Allow options to disable user deletion from the interface on app.ini (#29275)
• Extend issue template yaml engine (#29274)
• Add support for linguist-detectable and linguist-documentation (#29267)
• Filter Repositories by type (#29231)
• Implement code frequency graph (#29191)
• Advertise WebAuthn support (#29176)
• Show commit status for releases (#29149)
• Add alert blocks in markdown (#29121)
• Add user blocking (#29028)
• Actions Artifacts v4 backend (#28965)
• Add merge style fast-forward-only (#28954)
• Retarget depending pulls when the parent branch is deleted (#28686)
• Add global setting how timestamps should be rendered (#28657)
• Implement actions badge svgs (#28102)
• add skip ci functionality (#28075)
• Show latest commit for file (#28067)
• Allow to sync tags from admin dashboard (#28045)
• Add Profile Readme for Organisations (#27955)
• Implement contributors graph (#27882)
• Enhanced auth token / remember me (#27606)
• Artifact deletion in actions ui (#27172)
• Add API routes to get runner registration token (#27144)
• Add support for forking single branch (#25821)
• Add support for sha256 repositories (#23894)
• Add admin API route for managing user's badges (#23106)
• Use raw Wiki links for non-renderable Wiki files (#30273)
• Allow to save empty comment (#30706)
• Prevent allow/reject reviews on merged/closed PRs (#30686)
• Initial support for colorblindness-friendly themes (#30625)
• Suppress browserslist warning in webpack target (#30571)
• Allow everyone to read or write a wiki by a repo unit setting (#30495)
• Some NuGet package enhancements (#30280)
• Markup color and font size fixes (#30282)
• Show 12 lines in markup code preview (#30255)
• Add [other].SHOW_FOOTER_POWERED_BY setting to hide Powered by (#30253)
• Pulse page improvements (#30149)
• Render code tags in commit messages (#30146)
• Prevent re-review and dismiss review actions on closed and merged PRs (#30065)
• Cancel previous runs of the same PR automatically (#29961)
• Drag-and-drop improvements for projects and issue pins (#29875)
• Add default board to new projects, remove uncategorized pseudo-board (#29874)
• Prevent layout shift in items (#29831)
• add skip ci support for pull request title (#29774)
• Add more stats tables (#29730)
• Update API to return 'source_id' for users (#29718)
• Expose fuzzy search for issues/pulls (#29701)
• Put an edit file button on pull request files to allow a quick operation (#29697)
• Fix action runner offline label padding (#29691)
• Update allowed attachment types (#29688)
• Completely style the webkit autofill (#29683)
• Highlight archived labels (#29680)
• Add a warning for disallowed email domains (#29658)
• Set user's 24h preference from their current OS locale (#29651)
• Improve CSV rendering (#29638)
• Add setting to disable user features when user login type is not plain (#29615)
• Improve natural sort (#29611)
• Make wiki default branch name changable (#29603)
• Unify search boxes (#29530)
• Add support for API blob upload of release attachments (#29507)
• Detect broken git hooks (#29494)
• Sync branches to DB immediately when handle git hook calling (#29493)
• Allow options to disable user gpg keys configuration from the interface on app.ini (#29486)
• Allow options to disable user ssh keys configuration from the interface on app.ini (#29447)
• Use relative links for commits, mentions, and issues in markdown (#29427)
• Add , rename webcomponents (#29400)
• Include resource state events in Gitlab downloads (#29382)
• Properly migrate target branch change GitLab comment (#29340)
• Don't show third-party JS errors in production builds (#29303)
• Recolor dark theme to blue shade (#29283)
• Partially enable MSSQL case-sensitive collation support (#29238)
• Auto-update the system status in admin dashboard (#29163)
• Refactor git version functions and check compatibility (#29155)
• [REFACTOR] store webhook event in database (#29145)
• Integrate alpine noarch packages into other architectures index (#29137)
• Document how the TOC election process works (#29135)
• Tweak repo header (#29134)
• Show more settings for empty repositories (#29130)
• Make blockquote border size less aggressive (#29124)
• Downscale pasted PNG images based on metadata (#29123)
• Show View at this point in history for every commit (#29122)
• Add support for action artifact serve direct (#29120)
• Change webhook-type in create-view (#29114)
• Drop "@" from email sender to avoid spam filters (#29109)
• Allow non-admin users to delete review requests (#29057)
• Improve user experience for outdated comments (#29050)
• Strip trailing newline in markdown code copy (#29019)
• Fix incorrect button CSS usages (#29015)
• Improve user search display name (#29002)
• Include username in email headers (#28981)
• Show whether a PR is WIP inside popups (#28975)
• Also match weakly validated ETags (#28957)
• Make loading animation less aggressive (#28955)
• Support nuspec manifest download for nuget packages (#28921)
• Fix hardcoded GitHub icon used as migrated release avatar (#28910)
• fix: update enable_prune even if mirror_interval is not provided (#28905)
• Propagate install_if and provider_priority to APKINDEX (#28899)
• Add artifacts v4 jwt to job message and accept it (#28885)
• Avoid duplicate JS error messages on UI (#28873)
• Enable/disable owner and repo projects independently (#28805)
• Add non-JS fallback for reaction tooltips (#28785)
• Add ability to see open and closed issues at the same time (#28757)
• Show description as tooltip instead of title for labels (#28754)
• move sign in labels to be above inputs (#28753)
• Display latest sync time for pull mirrors on the repo page (#28712)
• switch destination directory for apt signing keys (#28639)
• Show in Web UI if file is vendored and generated (#28620)
• Include heap pprof in diagnosis report to help debugging memory leaks (#28596)
• Speed up loading the dashboard on mysql/mariadb (#28546)
• Add orphaned topic consistency check (#28507)
• Add branch protection setting for ignoring stale approvals (#28498)
• Add endpoint for not implemented Docker auth (#28457)
• Add option to disable ambiguous unicode characters detection (#28454)
• Add option to set language in admin user view (#28449)
• Polyfill SubmitEvent for PaleMoon (#28441)
• Improve doctor cli behavior (#28422)
• Fix incorrect run order of action jobs (#28367)
• Add missing exclusive in advanced label options (#28322)
• Add HEAD support for rpm repo files (#28309)
• Assign pull request to project during creation (#28227)
• Use full width for project boards (#28225)
• Modernize merge button (#28140)
• Added instance-level variables (#28115)
• Add edit option for README.md (#28071)
• Fix project counter in organization/individual profile (#28068)
• Fix link to Code tab on wiki commits (#28041)
• Render email addresses as such if followed by punctuation (#27987)
• Fix citation error when the file size is larger than 1024 bytes (#27958)
• Allow to set explore page default sort (#27951)
• Remove action runners on user deletion (#27902)
• Improve PR diff view on mobile (#27883)
• Properly migrate automatic merge GitLab comments (#27873)
• Display issue task list on project cards (#27865)
• Support storage base path as prefix (#27827)
• Change katex limits (#27823)
• Add Index to pull_auto_merge.doer_id (#27811)
• Fix display member unit in the menu bar if there are no hidden members in public org (#27795)
• Add dedicated class for empty placeholders (#27788)
• List all Debian package versions in Packages (#27786)
• Allow pull requests Manually Merged option to be used by non-admins (#27780)
• Add gap between diff boxes (#27776)
• Only show diff file tree when more than one file changed (#27775)
• Show placeholder email in privacy popup (#27770)
• Revamp repo header (#27760)
• Improve diff tree spacing (#27714)
• Add must-change-password cli parameter (#27626)
• Unify password changing and invalidate auth tokens (#27625)
• Add border to file tree 'sub-items' and add padding to 'item-file' (#27593)
• Fix required checkboxes in issue forms (#27592)
• Increase queue length (#27555)
• Add slow SQL query warning (#27545)
• Pre-register OAuth application for tea (#27509)
• Improve feed icons and feed merge text color (#27498)
• Avoid run change title process when the title is same (#27467)
• Make Actions tasks/jobs timeouts configurable by the user (#27400)
• Differentiate between push and pull mirror sync in progress (#27390)
• Add support for HEAD ref in /src/branch and /src/commit routes (#27384)
• Feed UI Improvements (#27356)
• link to file from its history (#27354)
• add a shortcut to user's profile page to admin user detai...

v1.21.11

• SECURITY
  • Use go1.21.9 to include Golang security fix
  • Fix possible renderer security problem (#30136) (#30315)
  • Performance optimization for git push and check permissions for push options (#30104) (#30354)
• BUGFIXES
  • Fix close file in the Upload func (#30262) (#30269)
  • Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250)
  • Fix missing 0 prefix of GPG key id (#30245) (#30247)
  • Include encoding in signature payload (#30174) (#30181)
  • Move from max( id ) to max( index ) for latest commit statuses (#30076) (#30155)
  • Load attachments for code comments (#30124) (#30126)
  • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#30094) (#30120)
  • Fix possible data race on tests (#30093) (#30108)
  • Fix duplicate migrated milestones (#30102) (#30105)
  • Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100)
  • Fix incorrect SVGs (#30087) (#30086)
  • Fix create commit status (#30225) (#30340)
  • Fix misuse of unsupported global variables (#30402)
  • Fix to delete the cookie when AppSubURL is non-empty (#30375) (#30468)
  • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30408)
  • Change the default maxPerPage for gitbucket (#30392) (#30471)
  • Check the token's owner and repository when registering a runner (#30406) (#30412)
  • Avoid losing token when updating mirror settings (#30429) (#30466)
  • Fix commit status cache which missed target_url (#30426) (#30445)
  • Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437)
  • Fix mirror error when mirror repo is empty (#30432) (#30467)
  • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#29990) (#30447)
  • Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497)
• DOCS
  • Update actions variables documents (#30394) (#30405)
• MISC
  • Update katex to 0.16.10 (#30089)
  • Upgrade go-sqlite to v1.14.22 (#30462)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.