File gitea.changes of Package gitea

-------------------------------------------------------------------
Tue Apr 16 19:15:28 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.11:
  * Fix cache bug (#30510)
  * Update 1.21.11 changelog (#30403)
  * Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497)
  * Fix commit status cache which missed target_url (#30426) (#30445)
  * Avoid losing token when updating mirror settings (#30429) (#30466)
  * Change the default maxPerPage for gitbucket (#30392) (#30471)
  * Fix mirror error when mirror repo is empty (#30432) (#30467)
  * fix: Fix to delete cookie when AppSubURL is non-empty (#30375) (#30468)
  * Use db.ListOptions directly instead of Paginator interface to make iteasier to use and fix performance of /pulls and /issues (#29990) (#30447)
  * Upgrade go-sqlite to v1.14.22 (#30462)
  * Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437)
  * Check the token's owner and repository when registering a runner (#30406) (#30412)
  * Avoid user does not exist error when detecting schedule actions when the commit author is an external user  (#30357) (#30408)
  * Update actions variables documents (#30394) (#30404)
  * No global variables (#30402)
  * Add changelog for 1.21.11 (#30314)
  * Performance optimization for git push (#30104) (#30354)
  * Fix create commit status (#30225) (#30340)
  * Fix possible renderer security problem(#30136) (#30315)
  * Close file in the Upload func (#30262) (#30269)
  * Add -u git to docs when using docker exec with root installation (#29314) (#30264)
  * Fixes #27605: inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250)
  * Add -u git to docs when using docker exec with root installation (#29314) (#30258)
  * Fix missing 0 prefix of GPG key id (#30245) (#30247)
  * Include encoding in signature payload (#30174) (#30181)
  * Move from `max( id )` to `max( index )` for latest commit statuses (#30076) (#30155)
  * Load attachments for code comments (#30124) (#30126)
  * Fix gitea doctor will remove repo-avatar files when execute command storage-archives (#30094) (#30120)
  * Fix possible data race on tests (#30093) (#30108)
  * Fix duplicate migrated milestones (#30102) (#30105)
  * Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100)
  * Update katex to 0.16.10 (#30089)
  * Fix incorrect SVGs (#30087)

-------------------------------------------------------------------
Tue Mar 26 08:49:12 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.10:
  * Release of 1.21.10 (#30073)
  * Fix Add/Remove WIP on pull request title failure (#29999) (#30066)
  * Fix misuse of `TxContext` (#30061) (#30062)
  * Respect DEFAULT_ORG_MEMBER_VISIBLE setting when adding creator to org (#30013) (#30035)
  * Escape paths for find file correctly (#30026) (#30031)
  * Remove duplicate option in admin screen and now-unused translation keys (#28492) (#30024)
  * Small refactors in anchors.js (#29947) (#30003)
  * Fix manual merge form and 404 page templates (#30000)

-------------------------------------------------------------------
Fri Mar 22 11:27:16 UTC 2024 - ecsos@schirra.net

- Update to version 1.21.9:
  * Add changelog for 1.21.9 (#29971)
  * Fix bugs in rerunning jobs (#29955) (#29983)
  * Performance improvements for pull request list page (#29900) (#29972)
  * Fix the bug that user may logout if GetUserByID return unknow error (#29964)
  * Solving the issue of UI disruption when the review is deleted without refreshing (#29951) (#29968)
  * Fix and rewrite markup anchor processing (#29931) (#29946)
  * Fix loadOneBranch panic (#29938) (#29939)
  * Add cache for dashbaord commit status (#29932)
  * Show Actions post step when it's running (#29926) (#29928)
  * Notify reviewers added via CODEOWNERS (#29842) (#29902)
  * Fix the wrong default value of ENABLE_OPENID_SIGNIN on docs (#29925) (#29927)
  * Fix invalid link of the commit status when ref is tag (#29752) (#29908)
  * Only do counting when count_only=true for repo dashboard (#29884) (#29905)
  * Fix PR creation via api between branches of same repo with head field namespaced (#26986) (#29857)
  * Fix template error when comment review doesn't exist (#29888) (#29889)
  * Fix bug on template (#29887)
  * Editor error message misleading due to re-used key. (#29859) (#29876)
  * Fix user id column case (#29863) (#29867)
  * Fix codeowner detected diff base branch to mergebase (#29783) (#29807)
  * fix double border and border-radius on empty action steps (#29845) (#29850)
  * Make meilisearch do exact search for issues (#29740 & #29671) (#29846)
  * Fix `for` attribute not pointing to the ID of the color picker (#29813) (#29815)
  * Use `Temporal.PlainDate` for absolute dates (#29804) (#29808)
  * Update Chroma to v2.13.0 (#29732) (#29805)
  * Fix Safari spinner rendering (#29801) (#29802)
  * Support GITEA_I_AM_BEING_UNSAFE_RUNNING_AS_ROOT env (#29788) (#29791)
  * Fix missing translation on milestons (#29785) (#29789)
  * Fix user router possbile panic (#29751) (#29786)
  * Make runs-on support variable expression (#29468) (#29782)
  * Fix possible NPE in ToPullReviewList (#29759) (#29775)
  * Update to labeler v5 (#29721) (#29765)
  * Fix incorrect package link method calls in templates (#29580) (#29764)
  * Suppress error from monaco-editor (#29684) (#29758)

-------------------------------------------------------------------
Wed Mar 13 07:07:32 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.8:
  * Add changelog for 1.21.8 (#29735)
  * Fix date rendering by adding `<gitea-absolute-date>` (#29725) (#29747)
  * Improve CSV rendering (#29638) (#29744)
  * Use Get but not Post to get actions artifacts (#29734) (#29737)
  * Fix inconsistent rendering of block mathematical expressions (#29677) (#29711)
  * fix: rendering internal file links in org (#29669) (#29705)
  * Fix bug hidden on CI and make ci failed if tests failure (#29254) (#29662)
  * Don't show AbortErrors on logout (#29639) (#29667)
  * Use more specific selector for `name` links (#29679) (#29681)
  * Fix user-defined markup links targets (#29305) (#29666)
  * Fix commit_status problem when testing (#29672) (#29675)
  * Fix 500 when deleting account with incorrect password or unsupported login type (#29579) (#29656)
  * Add empty repo check in DetectAndHandleSchedules (#29606) (#29659)
  * Fix incorrect rendering csv file when file size is larger than UI.CSV.MaxFileSize (#29653) (#29663)
  * Fixing the issue when status check per rule matches multiple actions (#29631) (#29655)
  * Use strict protocol check when redirect (#29642) (#29644)
  * Update Twitter Logo (#29621) (#29633)
  * Avoid issue info panic (#29625) (#29632)
  * Avoid unexpected panic in graceful manager (#29629) (#29630)
  * Fix wrong line number in code search result (#29260) (#29623)
  * bump protobuf module (#29617) (#29619)
  * Add missing database transaction for new issue (#29490) (#29607)
  * Make "/user/login" page redirect if the current user has signed in (#29583) (#29599)
  * Add a trailing slash to dashboard links (#29555) (#29573)
  * Fix workflow trigger event IssueChangeXXX bug (#29559) (#29565)
  * Fix 500 when pushing release to an empty repo (#29554) (#29564)
  * Only use supported sort order for "explore/users" page (#29430) (#29443)
  * Fix incorrect cookie path for AppSubURL (#29534) (#29552)
  * gitea.service: Remove syslog.target (#29550) (#29551)
  * Fix incorrect redirection when creating a PR fails (#29537) (#29543)
  * Fix queue worker incorrectly stopped when there are still more items in the queue (#29532) (#29546)
  * Fix incorrect relative/absolute URL usages (#29531) (#29547)
  * Fix incorrect subpath in links (#29535) (#29541)
  * Fix issue link does not support quotes (#29484) (#29487) (#29536)
  * Fix issue & comment history bugs (#29525) (#29527)
  * Set pre-step status to `skipped` if job is skipped (#29489) (#29523)
  * Update FAQ about git hook problems (#29495) (#29496)
  * Improve contrast on blame timestamp, fix double border (#29482) (#29485)
  * Fix wrong test usage of `AppSubURL` (#29459) (#29488)
  * Fix/Improve `processWindowErrorEvent` (#29407) (#29480)
  * Fix counter display number incorrectly displayed on the page (#29448) (#29478)
  * Fix workflow trigger event bugs (#29467) (#29475)
  * Fix URL calculation in clone input box (#29470) (#29473)
  * The job should always run when `if` is `always()` (#29464) (#29469)
  * Fix missed return (#29450) (#29453)
  * Fix template bug (#27581) (#29446)
  * Update docs about `DEFAULT_ACTIONS_URL` (#29442) (#29445)
  * Not trigger all jobs any more, when re-running the first job (#29439) (#29441)
  * Ignore empty repo for CreateRepository in action notifier (#29416) (#29424)
  * Fix incorrect tree path value for patch editor (#29377) (#29421)

-------------------------------------------------------------------
Mon Feb 26 10:15:03 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.7:
  * Change log for 1.21.7 (#29411)
  * Add missing space (#29393) (#29399)
  * enforce maxlength in frontend (#29389) (#29396)
  * Users with `read` permission of pull requests can be assigned too (#27263) (#29372)
  * Do not double close reader (#29354) (#29370)
  * Display friendly error message (#29105) (#29363)
  * Docker Tag Information in Docs (#29047) (#29362)
  * Fix validity of the FROM email address not being checked (#29347) (#29360)
  * Fix project counter in organization/individual profile (#28068) (#29361)
  * Fix incorrect tests in 1.21 (#29366)
  * Fix tarball/zipball download bug (#29342) (#29352)
  * Adjust changelog for v1.21.6 to move prs to correct labels (#29339)

-------------------------------------------------------------------
Fri Feb 23 06:55:12 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.6:
  * Add Changelog v1.21.6 (#29335)
  * Fix XSS vulnerabilities (#29336)
  * Don't show third-party JS errors in production builds (#29303) (#29333)
  * Remove SSH workaround (#27893) (#29332)
  * Only log error when tag sync fails (#29295) (#29327)
  * Use general token signing secret (#29205) (#29325)
  * Fix SSPI user creation (#28948) (#29323)
  * Improve the `issue_comment` workflow trigger event (#29277) (#29322)
  * Discard unread data of `git cat-file` (#29297) (#29310)
  * Implement some action notifier functions (#29173) (#29308)
  * Prevent double use of `git cat-file` session. (#29298) (#29301)
  * Fix gitea-action user avatar broken on edited menu (#29190) (#29307)
  * Fix error display when merging PRs (#29288) (#29309)
  * Fix missing link on outgoing new release notifications (#29079) (#29300)
  * Fix debian InRelease Acquire-By-Hash newline (#29204) (#29299)
  * Always write proc-receive hook for all git versions (#29287) (#29291)
  * Do not show delete button when time tracker is disabled (#29257) (#29279)
  * Fix missed edit issues event for actions (#29237) (#29251)
  * Disallow merge when required checked are missing (#29143) (#29268)
  * Workaround to clean up old reviews on creating a new one (#28554) (#29264)
  * Fix bug when the linked account was disactived and list the linked accounts (#29263)
  * Explained where create issue/PR template (#29035)
  * Do not use lower tag names to find releases/tags (#29261) (#29262)
  * Convert visibility to number (#29226) (#29244)
  * Load outdated comments when (un)resolving conversation on PR timeline (#29203) (#29221)
  * Make submit event code work with both jQuery event and native event (#29223) (#29234)
  * Only delete scheduled workflows when needed (#29091) (#29235)
  * Fix push to create with capitalize repo name (#29090) (#29206)
  * rm outdated docs from some languages (#27530) (#29208)
  * Refactor git version functions and check compatibility (#29155) (#29157)
  * Rework spellchecking, add lint-spell (#29112)
  * Use ghost user if user was not found (#29161) (#29169)
  * Refactor issue template parsing and fix API endpoint (#29069) (#29140)
  * Dont load Review if Comment is CommentTypeReviewRequest (#28551) (#29160)
  * Refactor parseSignatureFromCommitLine (#29054) (#29108)
  * Fix swift packages not resolving (#29095) (#29102)
  * Fix incorrect link to swift doc and swift package-registry login command (#29096) (#29103)
  * Avoid showing unnecessary JS errors when there are elements with different origin on the page (#29081) (#29089)
  * Fix gitea-origin-url with default ports (#29085) (#29088)
  * Improve user experience for outdated comments (#29050) (#29086)
  * Fix orgmode link resolving (#29024) (#29076)
  * fix: Elasticsearch: Request Entity Too Large #28117 (#29062) (#29075)
  * Hide code links on release page if user cannot read code (#29064) (#29066)
  * Fix typos in the documentation (#29048) (#29056)
  * Do not render empty comments (#29039) (#29049)
  * labels and licenses are directories (#29037)
  * Avoid sending update/delete release notice when it is draft (#29008) (#29025)
  * Wrap contained tags and branches again (#29021) (#29026)
  * Fix incorrect button CSS usages (#29015) (#29023)
  * Strip trailing newline in markdown code copy (#29019) (#29022)

-------------------------------------------------------------------
Wed Feb 21 13:45:47 UTC 2024 - ecsos <ecsos@opensuse.org>

- Adjustments patch macro for rpm 4.20.

-------------------------------------------------------------------
Thu Feb 01 15:36:47 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.5:
  * Add changelog for 1.21.5 (#28992)
  * Revert "Speed up loading the dashboard on mysql/mariadb (#28546)" (#29006) (#29007)
  * Fix an actions schedule bug (#28942) (#28999)
  * Don't remove all mirror repository's releases when mirroring (#28817) (#28939)
  * Preserve BOM in web editor (#28935) (#28959)
  * Strip `/` from relative links (#28932) (#28952)
  * Make loading animation less aggressive (#28955) (#28956)
  * Update go dependencies and fix go-git (#28893) (#28934)
  * fix: update enable_prune even if mirror_interval is not provided (#28905) (#28929)
  * Implement `MigrateRepository` for the actions notifier (#28920) (#28923)
  * Respect branch info for relative links (#28909) (#28922)
  * Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate (#28891) (#28895)
  * Don't reload timeline page when (un)resolving or replying conversation (#28654) (#28917)
  * Only migrate the first 255 chars of a Github issue title (#28902) (#28912)
  * Fix sort bug on repository issues list (#28897) (#28901)
  * Fix `DeleteCollaboration` transaction behaviour (#28886) (#28889)
  * Fix schedule not trigger bug because matching full ref name with short ref name (#28874) (#28888)
  * Fix uploaded artifacts should be overwritten (#28726) backport v1.21 (#28832)
  * Prevent anonymous container access if `RequireSignInView` is enabled (#28877) (#28882)
  * Fix migrate storage bug (#28830) (#28867)
  * Fix incorrect PostgreSQL connection string for Unix sockets (#28865) (#28870)
  * Avoid duplicate JS error messages on UI (#28873) (#28881)
  * Warn that `DISABLE_QUERY_AUTH_TOKEN` is false only if it's explicitly defined (#28783) (#28868)
  * Fix archive creating LFS hooks and breaking pull requests (#28848) (#28851)
  * Fix reverting a merge commit failing (#28794) (#28825)
  * tests: missing refs/ in bare repositories (#28844) (#28852)
  * Remove duplicated checkinit on git module (#28824) (#28831)
  * Bump `@github/relative-time-element` to 4.3.1 (#28819) (#28826)

-------------------------------------------------------------------
Wed Jan 17 10:03:14 UTC 2024 - ecsos@opensuse.org

- Update to version 1.21.4:
  * Add changelog for 1.21.4 (#28812)
  * Render code block in activity tab (#28816) (#28818)
  * Use refname:strip-2 instead of refname:short when syncing tags (#28797) (#28811)
  * Rework markup link rendering (#26745) (#28803)
  * Forbid removing the last admin user (#28337) (#28793)
  * Fix links in issue card (#28806) (#28807)
  * Fix `GetCommitStatuses` (#28787) (#28804)
  * Use correct `has error` check for internal responses (#28796) (#28798)
  * Fix nil pointer panic when exec some gitea cli command (#28791) (#28795)
  * Fix when private user following user, private user will not be counted in his own view (#28037) (#28792)
  * Update github.com/cloudflare/circl (#28789) (#28790)
  * Speed up loading the dashboard on mysql/mariadb (#28546) (#28784)
  * Modernize merge button (#28140) (#28786)
  * Fix schedule tasks bugs (#28691) (#28780)
  * Require token for GET subscription endpoint (#28765) (#28778)
  * Assign pull request to project during creation (#28227) (#28775)
  * Fix issue dependencies (#27736) (#28776)
  * Fix button size in "attached header right" (#28770) (#28774)
  * Fix `convert.ToTeams` on empty input (#28426) (#28767)
  * Require token for GET subscription endpoint (#28765) (#28768)
  * Show description as tooltip instead of title for labels (#28754) (#28766)
  * Hide code related setting options in repository when code unit is disabled (#28631) (#28749)
  * Add -F to commit search to treat keywords as strings (#28744) (#28748)
  * Concatenate error in `checkIfPRContentChanged` (#28731) (#28737)
  * Add download attribute to release attachments (#28739) (#28740)
  * Suggest to use Type=simple for systemd service (#28717) (#28722)
  * Fix incorrect URL for "Reference in New Issue" (#28716) (#28723)
  * Avoid unnecessary 500 panic when a commit doesn't exist (#28719) (#28721)
  * Improve frontend guideline (#28711) (#28713)
  * Fix panic when parsing empty pgsql host (#28708) (#28709)
  * Fix wrapping of label list (#28684) (#28688)
  * Make template `DateTime` show proper tooltip (#28677) (#28683)
  * Fix: system webhooks API bug (#28531) (#28666)
  * Fix alpine package files are not rebuilt (#28638) (#28665)
  * Upgrade xorm to new version which supported update join for all supported databases (#28590) (#28668)
  * Avoid cycle-redirecting user/login page (#28636) (#28658)
  * fix empty ref for cron workflow runs (#28640) (#28647)
  * Remove unnecessary syncbranchToDB with tests (#28624) (#28629)
  * Improve document for ARTIFACT_RETENTION_DAYS (#28646) (#28648)
  * switch destination directory for apt signing keys (#28639) (#28642)
  * Improve 1.21 document for Database Preparation (#28643) (#28644)
  * Extend description for ARTIFACT_RETENTION_DAYS (#28626) (#28630)
  * Use known issue IID to generate new PR index number when migrating from GitLab (#28616) (#28618)
  * Refactor CORS handler (#28587) (#28611)
  * Revert "improve possible performance bottleneck (#28547)" (#28593) (#28608)
  * Fix the scroll behavior for emoji/mention list (#28597) (#28601)
  * Fix flex container width (#28603) (#28605)
  * Include heap pprof in diagnosis report to help debugging memory leaks (#28596) (#28599)
  * Fix wrong due date rendering in issue list page (#28588) (#28591)
  * Fix `status_check_contexts` matching bug (#28582) (#28589)
  * Fix 405 method not allowed CORS / OIDC (#28583) (#28586)
  * Fix 500 error of searching commits (#28576) (#28579)
  * improve possible performance bottleneck (#28547) (#28578)
  * Use information from previous blame parts (#28572) (#28577)
  * Update mermaid for 1.21 (#28571)

-------------------------------------------------------------------
Thu Dec 21 09:40:06 UTC 2023 - ecsos@opensuse.org

- Update to version 1.21.3 (bsc#1218150, CVE-2023-48795):
  * Add changelog for 1.21.3 (#28569)
  * Fix merging artifact chunks error when minio storage basepath is set (#28555) (#28568)
  * Update actions document about comparsion as Github Actions (#28560) (#28564)
  * Fix inperformant query on retrifing review from database. (#28552) (#28562)
  * Fix the issue ref rendering for wiki (#28556) (#28559)
  * Fix duplicate ID when deleting repo (#28520) (#28528)
  * Only check online runner when detecting matching runners in workflows (#28286) (#28512)
  * chore(api): support ignore password if login source type is LDAP for creating user API (#28491) (#28525)
  * Update golang.org/x/crypto (#28519)
  * Improve the prompt for "ssh-keygen sign" (#28509) (#28510)
  * Add option to disable ambiguous unicode characters detection (#28454) (#28499)
  * Initalize stroage for orphaned repository doctor (#28487) (#28490)
  * Update docs for DISABLE_QUERY_AUTH_TOKEN (#28485) (#28488)
  * Refactor SSH clone URL generation code (#28421) (#28480)
  * Polyfill SubmitEvent for PaleMoon (#28441) (#28478)
  * Fix Chinese translation of config cheat sheet[API] (#28472) (#28473)
  * Fix documents for "custom/public/assets/" (#28465) (#28467)
  * Retry SSH key verification with additional CRLF if it failed (#28392) (#28464)
  * Add endpoint for not implemented Docker auth (#28457) (#28462)
  * Fix possible nil pointer access (#28428) (#28440)
  * Don't show unnecessary citation JS error on UI (#28433) (#28437)
- Rebase gitea.app.ini.patch.

-------------------------------------------------------------------
Tue Dec 12 16:50:16 UTC 2023 - ecsos@opensuse.org

- Update to version 1.21.2:
  * 1.21.2 changelog (#28387)
  * Do some missing checks (#28423) (#28432)
  * Deprecate query string auth tokens (#28390) (#28430)
  * Recover from panic in cron task (#28409) (#28425)
  * Improve doctor cli behavior (#28422) (#28424)
  * Fix links in docs (#28302) (#28418)
  * Also sync DB branches on push if necessary (#28361) (#28403)
  * Fix missing check (#28406) (#28411)
  * enable system users search via the API (#28013) (#28018)
  * Fix Docker meta action for releases (#28232) (#28395)
  * Make gogit Repository.GetBranchNames consistent (#28348) (#28386)
  * Fix margin in server signed signature verification view (#28379) (#28381)
  * Fix object does not exist error when checking citation file (#28314) (#28369)
  * Fix incorrect default value of `[attachment].MAX_SIZE` (#28373) (#28376)
  * Use `filepath` instead of `path` to create SQLite3 database file (#28374) (#28378)
  * Fix the runs will not be displayed bug when the main branch have no workflows but other branches have (#28359) (#28365)
  * handle repository.size column being NULL in migration v263 (#28336) (#28363)
  * Convert git commit summary to valid UTF8. (#28356) (#28358)
  * Fix migration panic due to an empty review comment diff (#28334) (#28362)
  * Add `HEAD` support for rpm repo files (#28309) (#28360)
  * Refactor template empty checks (#28351) (#28354)
  * Fix RPM/Debian signature key creation (#28352) (#28353)
  * Keep profile tab when clicking on Language (#28320) (#28331)
  * Fix missing issue search index update when changing status (#28325) (#28330)
  * Fix wrong link in `protect_branch_name_pattern_desc` (#28313) (#28315)
  * Read `previous` info from git blame (#28306) (#28310)
  * Ignore "non-existing" errors when getDirectorySize calculates the size (#28276) (#28285)
  * Use appSubUrl for OAuth2 callback URL tip (#28266) (#28275)
  * Meilisearch: require all query terms to be matched (#28293) (#28296)
  * Fix required error for token name (#28267) (#28284)
  * Fix issue will be detected as pull request when checking `First-time contributor` (#28237) (#28271)
  * Check for v prefix on tags for release clean name (#28257) (#28270)
  * Use full width for project boards (#28225) (#28245)
  * Increase "version" when update the setting value to a same value as before (#28243) (#28244)
  * Revert move installation/upgrade-from-gogs.md in 1.21 (#28235)
  * Fix links in docs (#28234) (#28238)

-------------------------------------------------------------------
Mon Nov 27 06:36:43 UTC 2023 - ecsos@opensuse.org

- Update to version 1.21.1:
  * Change log for 1.21.1 (#28222)
  * Fix comment permissions (#28213) (#28216)
  * Fix actions when tagging (#28061) (#28218)
  * Docs: Replace deprecated IS_TLS_ENABLED mailer setting in email setup (#28205) (#28208)
  * Fix some incorrect links in docs (#28191) (#28201)
  * Fix delete-orphaned-repos (#28200) (#28202)
  * Use full width for PR comparison (#28182) (#28186)
  * Make CORS work for oauth2 handlers (#28184) (#28185)
  * Fix missing buttons (#28179) (#28181)
  * Revert "Fix EOL handling in web editor" (#28101) (#28172)
  * Fix swagger title (#28164) (#28167)
  * Fix the description about the default setting for action in quick start document (#28160) (#28168)
  * Add guide page to actions when there's no workflows (#28145) (#28153)
  * Do not display search box when there's no packages yet (#28146) (#28159)
  * Fix no ActionTaskOutput table waring (#28149) (#28152)
  * Fix empty action run title (#28113) (#28148)
  * Use "is-loading" to avoid duplicate form submit for code comment (#28143) (#28147)
  * Fix typo in `packages.cleanup.success` (#28133) (#28136)
  * Add missing `packages.cleanup.success` (#28129) (#28132)
  * Update docs for docusaurus v3 (#28126)
  * Fix Matrix and MSTeams nil dereference (#28089) (#28105)
  * Change default size of attachments and repo files (#28100) (#28106)
  * Fix incorrect pgsql conn builder behavior (#28085) (#28098)
  * Fix permissions for Token DELETE endpoint to match GET and POST (#27610) (#28099)
  * Fix system config cache expiration timing (#28072) (#28090)
  * Restricted users only see repos in orgs which their team was assigned to (#28025) (#28051)

-------------------------------------------------------------------
Thu Nov 16 12:31:29 UTC 2023 - Dirk Müller <dmueller@suse.com>

- switch to service manualrun as disabled is deprecated

-------------------------------------------------------------------
Tue Nov 14 17:04:29 UTC 2023 - ecsos@opensuse.org

- Update to version 1.21.0:
  * Add v1.21.0 changelog (#28005) (#28048)
  * enable system users for comment.LoadPoster (#28014) (#28032)
  * Fix viewing wiki commit on empty repo (#28040) (#28044)
  * Add word break to the repo list in admin settings page (#28034) (#28035)
  * fixed duplicate attachments on dump on windows (#28019) (#28031)
  * Dont leak private users via extensions (#28023) (#28029)
  * Change default size of issue/pr attachments and repo file (#27946) (#28017)
  * Fix wrong xorm Delete usage(backport for 1.21) (#28002)
  * Move some JS code from `fomantic.js` to standalone files (#27994) (#28001)
  * Render email addresses as such if followed by punctuation (#27987) (#27992)
  * Show error toast when file size exceeds the limits (#27985) (#27986)
  * Fix citation error when the file size is larger than 1024 bytes (#27958) (#27965)
  * Add word-break to repo description in home page (#27924) (#27957)
  * Document REACTION_MAX_USER_NUM setting option (#27954) (#27959)
  * Fix rendering assignee changed comments without assignee (#27927) (#27952)
  * Add word break to release title (#27942) (#27947)
  * Update environment-to-ini flag parsing (#27914) (#27940)
  * Unify two factor check (#27915) (#27929)
  * Remove `known issue` section in Gitea Actions Doc (#27930) (#27938)
  * Fix JS NPE when viewing specific range of PR commits (#27912) (#27923)
  * Install poetry dependencies with --no-root (#27919) (#27920)
  * Show correct commit sha when viewing single commit diff (#27916) (#27921)
  * Fix 500 when deleting a dismissed review (#27903) (#27910)
  * Remove action runners on user deletion (#27902) (#27908)
  * Backport translations to v1.21 (#27899)
  * Remove set tabindex on view issue (#27892) (#27896)
  * Fix DownloadFunc when migrating releases (#27887) (#27890)
  * Fix http protocol auth (#27875) (#27876)
  * Reduce margin/padding on flex-list items and divider (#27872) (#27874)
  * refactor postgres connection string building (#27723) (#27869)
  * Change katex limits (#27823) (#27868)
  * doc: actions/act-runner: document running as a systemd service (#27844) (#27866)
  * Delete repos of org when purge delete user (#27273) (#27728)
  * Clean up template locale usage (#27856) (#27857)
  * Fix package webhook (#27839) (#27855)
  * Add user secrets API integration tests (#27832) (#27852)
  * Fix wrong relative path on obtain token from command line (#27850) (#27851)
  * doc: actions/act-runner: document obtaining a runner registration token from gitea CLI (#27845) (#27848)
  * Fix/upload artifact error windows (#27802) (#27840)
  * Always use whole user name as link (#27815) (#27838)
  * Fix bad method call when deleting user secrets via API (#27829) (#27831)
  * Dockerfile small refactor (#27757) (#27826)
  * Upgrade xorm to 1.3.4 (#27807) (#27813)
  * Chroma v2.10.0 (#27803) (#27805)
  * Add dedicated class for empty placeholders (#27788) (#27792)
  * Close all hashed buffers (#27787) (#27790)
  * Add gap between diff boxes (#27776) (#27781)
  * Do not force creation of _cargo-index repo on publish (#27266) (#27765)
  * Fix incorrect "tab" parameter for repo search sub-template (#27755) (#27764)
  * fix issues in translation file (#27699) (#27737)
  * Fix label render containing invalid HTML (#27752) (#27762)
  * Fix `link-action` redirect network error (#27734) (#27749)
  * Fix duplicate project board when hitting `enter` key (#27746) (#27751)
  * Fix incorrect ctx usage in defer function (#27740) (#27741)
  * fix labeler config on release/v1.21 (#27738)
  * Enable followCursor for language stats bar (#27713) (#27739)
  * Add doctor dbconsistency fix to delete repos with no owner (#27290) (#27693)
  * Fix org team endpoint (#27721) (#27727)
  * Feed UI Improvements (#27356) (#27717)
  * Improve diff tree spacing (#27714) (#27719)
  * Improve feed icons and feed merge text color (#27498) (#27716)
  * [FIX] resolve confusing colors in languages stats by insert a gap (#27704) (#27715)
  * Fix sticky diff header background (#27697) (#27712)
  * Adapt `.changelog.yml` to new labeling system (#27701) (#27702)
  * cleanup repo details icons/labels (#27644) (#27654)
  * Fix required checkboxes in issue forms (#27592) (#27692)
  * Upgrade xorm (#27673) (#27691)
  * Always delete existing scheduled action tasks (#27662) (#27688)
  * Clipboard copy enhancements (#27669) (#27681)
  * Support allowed hosts for webhook to work with proxy (#27655) (#27675)
  * Fix poster is not loaded in get default merge message (#27657) (#27666)
  * Hide archived labels by default from the suggestions when assigning labels for an issue (#27451) (#27661)
  * Improve dropdown button alignment and fix hover bug (#27632) (#27637)
  * Improve retrying index issues (#27554) (#27634)
  * Fix 404 when deleting Docker package with an internal version (#27615) (#27630)
  * Change the default branch in the agit docs (#27621) (#27623)
  * Backport manually for a tmpl issue in v1.21 (#27612)
  * Fix build errors on BSD (in BSDMakefile) (#27594) (#27608)
  * Upgrade go dependencies (#27599) (#27609)
  * Keep filter when showing unfiltered results on explore page (#27192) (#27589)
  * Don't show Link to TOTP if not set up (#27585) (#27588)
  * Fix data-race bug when accessing task.LastRun (#27584) (#27586)
  * Replace ajax with fetch, improve image diff (#27267) (#27583)
  * fully replace drone with actions (#27556) (#27575)
  * show manual cron run's last time (#27544) (#27577)
  * Revert "Fix pr template (#27436)" (#27567)
  * Fix attachment download bug (#27486) (#27571)
  * Increase queue length (#27555) (#27562)
  * Respect SSH.KeygenPath option when calculating ssh key fingerprints (#27536) (#27551)
  * Avoid run change title process when the title is same (#27467) (#27558)
  * Remove max-width and add hide text overflow (#27359) (#27550)
  * use hosted runners for nightly actions (#27485) (#27488)
  * switch to using official AWS step in release nightly (#27532) (#27547)
  * Fix `environment-to-ini` inherited key bug (#27543) (#27546)
  * api: GetPullRequestCommits: return file list (#27483) (#27539)
  * Improve dropdown's behavior when there is a search input in menu (#27526) (#27534)
  * Restore warning commit status (#27504) (#27529)
  * Update JS and PY dependencies (#27501) (#27518)
  * Add hover background to wiki list page (#27507) (#27521)
  * Fix mermaid flowchart margin issue (#27503) (#27516)
  * bump go-deps (#27489) (#27493)
  * Enable markdownlint `no-duplicate-header` (#27500) (#27506)
  * Fix panic in storageHandler (#27446) (#27479)
  * Revert #27426 (#27474)
  * Don't let API add 2 exclusive labels from same scope (#27433) (#27460)
  * Refactor system setting (#27000) (#27452)
  * When comparing with an non-exist repository, return 404 but 500 (#27437) (#27442)
  * Fix pr template (#27436) (#27440)
  * Fix  missing `ctx`  in new_form.tmpl  (#27434) (#27438)
  * Fix yet another `ctx` template bug (#27417) (#27426)
  * Use flex-container for repo and org settings (#27418) (#27430)
  * Add Index to `action.user_id` (#27403) (#27425)
  * Add 1.20.5 changelog (#27404) (#27412)
  * Don't use subselect in `DeleteIssuesByRepoID` (#27332) (#27408)
  * Add support for HEAD ref in /src/branch and /src/commit routes (#27384) (#27407)
  * Make Actions tasks/jobs timeouts configurable by the user (#27400) (#27402)
  * Fix git 2.11 error when checking IsEmpty (#27393) (#27397)
  * Hide archived labels when filtering by labels on the issue list (#27115) (#27381)
  * Allow get release download files and lfs files with oauth2 token format (#26430) (#27379)
  * highlight user details link (#26998) (#27376)
  * Fix missing ctx for GetRepoLink in dashboard (#27372) (#27375)
  * Introduce fixes and more rigorous tests for 'Show on a map' feature (#26803) (#27365)
  * Absolute positioned checkboxes  overlay floated elements (#26870) (#27366)
  * Fix template bug (#27362) (#27364)
  * Fix repo count in org action settings (#27245) (#27353)
  * Add protected branch name description (#27257) (#27351)
  * More `db.DefaultContext` refactor (#27265) (#27347)
  * Improve tree not found page (#26570) (#27346)
  * Add logs for data broken of comment review (#27326) (#27345)
  * Add Index to `comment.dependent_issue_id` (#27325) (#27340)
  * Fix the approval count of PR when there is no protection branch rule (#27272) (#27343)
  * Fix review UI (#27322) (#27331)
  * Fix Bug in Issue Config when only contact links are set (#26521) (#27334)
  * Fix divider in subscription page (#27298) (#27301)
  * Improve issue history dialog and make poster can delete their own history (#27323) (#27327)
  * Improve branch list UI (#27319) (#27324)
  * Redefine the meaning of column is_active to make Actions Registration Token generation easier (#27143) (#27304)
  * fix orphan check for deleted branch (#27310) (#27321)
  * Fix protected branch icon location (#26576) (#27317)
  * Use vitest globals (#27102) (#27311)
  * bump bleve (#27300) (#27305)
  * Fix yaml test (#27297) (#27303)
  * Enable production source maps for index.js, fix CSS sourcemaps (#27291) (#27295)
  * Fix some animation bugs (#27287) (#27294)
  * Add missed return to actions view fetch (#27289) (#27293)
  * Fix more yaml lint errors (#27284) (#27288)
  * Add missing IconHTML size (#27269) (#27283)
  * Fix incorrect change from #27231 (#27275) (#27282)
  * Another round of `db.DefaultContext` refactor (#27103) (#27262)
  * Backport ctx locale refactoring manually (#27231) (#27259) (#27260)
  * Disable `Test Delivery` and `Replay` webhook buttons when webhook is inactive (#27211) (#27253)
  * Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27251)
  * Use mask-based fade-out effect for `.new-menu` (#27181) (#27243)
  * Add missing public user visibility in user details page (#27246) (#27250)
  * cleanup locale function usage (#27227) (#27240)
  * Fix z-index on markdown completion (#27237) (#27239)
  * Fix EOL handling in web editor (#27141) (#27234)
  * Update database-preparation and add note re: MariaDB (#27232) (#27236)
  * Allow copying issue comment link on archived repos and when not logged in (#27193) (#27210)
  * fix issues on action runners page (#27226) (#27233)
  * Fix Fomantic UI dropdown icon bug when there is a search input in menu (#27225) (#27228)
  * Quote table `release` in sql queries (#27205) (#27218)
  * Update go-enry to 2.8.5 (#27215) (#27217)
  * Update nodejs installation method in release container (#27207) (#27212)
  * fix: text decorator on issue sidebar menu label (#27206) (#27209)
  * Update JS and Poetry dependencies and eslint (#27200) (#27201)
  * Fix release URL in webhooks (#27182) (#27185)
  * Fix review request number and add more tests (#27104) (#27168)
  * Fix dropdown icon position (#27175) (#27177)
  * Fix repo sub menu (#27169) (#27170)
  * Fix the variable regexp pattern on web page (#27161) (#27164)
  * Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27163)
  * Add index to `issue_user.issue_id` (#27154) (#27158)
  * Fix successful return value for `SyncAndGetUserSpecificDiff` (#27152)
  * Improve actions docs related to `pull_request` event (#27126)
  * Remove outdated paragraphs when comparing Gitea Actions to GitHub Actions (#27119)
  * Fix: treat tab "overview" as "repositories" in user profiles without readme (#27124)
  * Fix incorrect test code for error handling (#27139)
  * Increase auth provider icon size on login page (#27122)
  * fix pagination for followers and following (#27127)
  * services/wiki: Close() after error handling (#27129)
  * Use fetch helpers instead of fetch (#27026)
  * Change green buttons to primary color (#27099)
  * Fix wrong xorm get usage on migration (#27111)
  * Fix the incorrect route path in the user edit page. (#27007)
  * Refactor lfs requests (#26783)
  * Display archived labels specially when listing labels (#26820)
  * Remove a `gt-float-right` and some unnecessary helpers (#27110)
  * [skip ci] Updated licenses and gitignores
  * Fix token endpoints ignore specified account (#27080)
  * Make SSPI auth mockable (#27036)
  * Search branches (#27055)
  * Fix wrong migration for email address (#27106)
  * [skip ci] Updated translations via Crowdin
  * Support `.git-blame-ignore-revs` file (#26395)
  * Add `RemoteAddress` to mirrors (#26952)
  * Upgrading the actions/checkout@4 (#27096)
  * Next round of `db.DefaultContext` refactor (#27089)
  * Ui correction in mobile view nav bar left aligned items. (#27046)
  * Add missing deps to files-changed (#27100)
  * Use db.WithTx for AddTeamMember to avoid ctx abuse (#27095)
  * Drop Node.js 16 and update js dependencies (#27094)
  * Fix NPE when editing OAuth2 applications (#27078)
  * Use `print` instead of `printf` (#27093)
  * Add tests for db indexer in indexer_test.go (#27087)
  * [skip ci] Updated translations via Crowdin
  * Allow empty Conan files (#27092)
  * Actions are no longer experimental, so enable them by default (#27054)
  * Update brew installation documentation since gitea moved to brew core package (#27070)
  * More refactoring of `db.DefaultContext` (#27083)
  * [skip ci] Updated translations via Crowdin
  * Reduce usage of `db.DefaultContext` (#27073)
  * Remove the useless function `GetUserIssueStats` and move relevant tests to `indexer_test.go` (#27067)
  * Fix issue templates when blank isses are disabled (#27061)
  * Display all user types and org types on admin management UI (#27050)
  * Apply lng2020 to maintainers (#27068)
  * Fix incorrect default branch label while switching between branches (#27053)
  * set version in snapcraft yaml
  * Replace 'userxx' with 'orgxx' in all test files when the user type is org  (#27052)
  * [skip ci] Updated translations via Crowdin
  * Load reviewer before sending notification (#27063)
  * bump all nightly builds to 16gb
  * Show the repo count in code tab on both user profile and org page. (#27048)
  * Fix Fomantic's line-height causing vertical scrollbars to appear (#26961)
  * Dashboard context dropdown position fix on landing page in mobile view. (#27047)
  * fix media description render for orgmode (#26895)
  * Show OpenID Connect and OAuth on signup page (#20242)
  * Update status and code index after changing the default branch (#27018)
  * add sparse url in cargo package guide (#26937)
  * Add missing 404 response to Swagger (#27038)
  * Fix object storage path handling (#27024)
  * [skip ci] Updated translations via Crowdin
  * bump rootful to 16gb
  * setup go in the nightly release pipeline
  * Speed up nightly builds (#27045)
  * Improve repo/user/org search  (#27030)
  * Use Actuated.dev runner for nightly builds
  * update snap package (#27021)
  * resolve issue with sort icons on admin/users and admin/runners (#24360)
  * Add more package registry paths to the labeler (#27032)
  * Extract auth middleware from service (#27028)
  * S3: log human readable error on connection failure (#26856)
  * [skip ci] Updated translations via Crowdin
  * Fix "delete" modal dialog for issue/PR (#27015)
  * Fix context cache bug & enable context cache for dashabord commits' authors (#26991)
  * fix: typo (#27009)
  * Use secure cookie for HTTPS sites (#26999)
  * Add fetch wrappers, ignore network errors in actions view (#26985)
  * [skip ci] Updated translations via Crowdin
  * Add some more labels to labeler (#26987)
  * Fix INI parsing for value with trailing slash (#26995)
  * Correct the database.LOG_SQL default value in config cheat sheet (#26997)
  * Improve "language stats" UI (#26968)
  * [skip ci] Updated translations via Crowdin
  * Update chroma to v2.9.1 (#26990)
  * Improve issue list layout (#26983)
  * [skip ci] Updated translations via Crowdin
  * Move some functions to service layer (#26969)
  * Lock yamllint and update indirect python deps (#26979)
  * Chroma color tweaks (#26978)
  * Add a new column schedule_id for action_run to track (#26975)
  * Improve flex list UI (#26970)
  * Clarify the git command Stdin hanging problem (#26967)
  * Add v1.20.4 changelog (#26974)
  * Check newly added node type before "attachDirAuto" (#26972)
  * Expanding documentation in queue.go (#26889)
  * move repository deletion to service layer (#26948)
  * Add `yamllint` (#26965)
  * Fix yaml quoting (#26964)
  * [skip ci] Updated translations via Crowdin
  * Add `actions/labeler` (#26962)
  * Team invite url fix when registration disabled (#26950)
  * Refactor dashboard/feed.tmpl (#26956)
  * Improve hint when uploading a too large avatar (#26935)
  * Replace `util.SliceXxx`  with `slices.Xxx`  (#26958)
  * Add reverseproxy auth for API back with default disabled (#26703)
  * Add "dir=auto" for input/textarea elements by default (#26735)
  * Fix schedule actions still running even if workflow disalbed (#26939)
  * Fix the missing repo count (#26942)
  * Improve SSH Key / GPG Key / Deploy Key UI (#26949)
  * [skip ci] Updated translations via Crowdin
  * Update nginx recommendations (#26924)
  * docs: Update Profile README information (#26947)
  * Fix scoped label layout (#26932)
  * Move createrepository from module to service layer (#26927)
  * Add a documentation note for Windows Service (#26938)
  * allow "latest" to be used in release vTag when downloading file (#26748)
  * Extract common code to new template (#26933)
  * Show always repo count in header (#26842)
  * Show always repo count in header (#26842)
  * Artifacts retention and auto clean up (#26131)
  * Fix UI anomalies (#26929)
  * Fix the display of org level badges  (#26504)
  * Add missing translation (#26926)
  * Vendor `jquery.are-you-sure` with strict mode fixes (#26901)
  * Fix the secret regexp pattern on web page (#26910)
  * Add @chenrui333 as maintainer (#26917)
  * Move notification interface to services layer (#26915)
  * fetch emails of currently displayed user on admin page (#26918)
  * Improve LDAP group config documentation, fixes #21159 (#21227)
  * update footer link to new landing page (#26916)
  * Remove `Named` interface (#26913)
  * Refactor secrets modification logic (#26873)
  * Add missing `reqToken()` to notifications endpoints (#26914)
  * feat(API): add routes and functions for managing user's secrets (#26909)
  * Move feed notification service layer (#26908)
  * Extract common code to new template (#26903)
  * Move ui notification to service layer (#26907)
  * Remove duplicated notify mail configuration on tests (#26912)
  * Move indexer notification to service layer (#26906)
  * Move mail notification logic to service layer (#26905)
  * Improve DeleteByID (#26904)
  * Update backup instructions to align with archive structure (#26902)
  * More fixes for the "commit-body" (#26898)
  * Show queue's active worker number (#26896)
  * Remove CSS `has` selector and improve various styles (#26891)
  * [skip ci] Updated licenses and gitignores
  * Update documents to fix some links (#26885)
  * clarify aspects of the dump command (#26887)
  * Relocate the `RSS user feed` button (#26882)
  * Use Go 1.21 and update dependencies (#26878)
  * Update docs about attachment path (#26883)
  * Refactor "shortsha" (#26877)
  * Fix wrong review requested number (#26784)
  * Refactor `og:description` to limit the max length (#26876)
  * Reorder blocks in vue SFCs (#26874)
  * Make it posible to customize nav text color via css var (#26807)
  * Enable djlint H008 and fix issues (#26869)
  * Improve opengraph previews (#26851)
  * Add more descriptive error on forgot password page (#26848)
  * Allow users with write permissions for issues to add attachments with API (#26837)
  * Move licenses.txt to /assets directory (#26866)
  * Use case-insensitive regex for all webpack assets (#26867)
  * restrict certificate type for builtin SSH server (#26789)
  * feat(API): add secret deletion functionality for repository (#26808)
  * Avoid double-unescaping of form value (#26853)
  * Move web/api context related testing function into a separate package (#26859)
  * Remove some unused CSS styles (#26852)
  * [skip ci] Updated translations via Crowdin
  * Minor dashboard tweaks, fix flex-list margins (#26829)
  * Update team invitation email link (#26550)
  * Redirect from `{repo}/issues/new` to `{repo}/issues/new/choose` when blank issues are disabled (#26813)
  * Remove "TODO" tasks from CSS file (#26835)
  * User details page (#26713)
  * Render code blocks in repo description (#26830)
  * Remove joinPaths function (#26833)
  * Remove polluted `.ui.right` (#26825)
  * Sync tags when adopting repos (#26816)
  * rm comment about hugo (#26832)
  * Fix filename for .spectral.yaml (#26828)
  * [skip ci] Updated translations via Crowdin
  * Check blocklist for emails when adding them to account (#26812)
  * Remove polluted ".ui.left" style (#26809)
  * Remove fomantic `text` module (#26777)
  * Use `Set[Type]` instead of `map[Type]bool/struct{}`. (#26804)
  * Fix verifyCommits error when push a new branch (#26664)
  * Fix Uint8Array comparisons and update vitest (#26805)
  * Add various missing files-changed dependencies (#26799)
  * Improve flex list item padding (#26779)
  * Include the GITHUB_TOKEN/GITEA_TOKEN secret for fork pull requests (#26759)
  * feat(API): add route and implementation for creating/updating repository secret (#26766)
  * Replace deprecated `elliptic.Marshal` (#26800)
  * Updating the js libraries to latest version. (#26795)
  * Fix some slice append usages (#26778)
  * Use Go 1.21 for golangci-lint (#26786)
  * Fix notification circle (border-radius) (#26794)
  * Fix context filter has no effect in dashboard (#26695)
  * Add default label in branch select list (#26697)
  * Remove redundant nil check in `WalkGitLog` (#26773)
  * Remove fomantic `item` module (#26775)
  * Update info regarding internet connection for build (#26776)
  * Fix being unable to use a repo that prohibits accepting PRs as a PR source. (#26785)
  * Add fix incorrect can_create_org_repo for org owner team (#26683)
  * [skip ci] Updated translations via Crowdin
  * Improve modal dialog UI (#26764)
  * Improve the "bug report" template and "support options" document (#26753)
  * Unify `border-radius` behavior (#26770)
  * Reduce some allocations in type conversion (#26772)
  * Refactor some CSS styles and simplify code (#26771)
  * Add auth-required to config.json for Cargo http registry (#26729)
  * refactor(API): refactor secret creation and update functionality (#26751)
  * Fix bug for ctx usage (#26762)
  * Remove some transition related code (#26755)
  * Expanded minimum RSA Keylength to 3072 (#26604)
  * [skip ci] Updated licenses and gitignores
  * Use docs.gitea.com instead of docs.gitea.io (#26739)
  * Adding hint `Archived` to archive label. (#26741)
  * Move `modules/mirror` to `services` (#26737)
  * [skip ci] Updated translations via Crowdin
  * Fix template bugs in recently_pushed_new_branches.tmpl (#26744)
  * Fix incorrect "tabindex" attributes (#26733)
  * Simplify helper CSS classes and avoid abuse (#26728)
  * Remove fomantic loader module (#26670)
  * Fix link in mirror docs (#26719)
  * Add `eslint-plugin-vue-scoped-css` (#26720)
  * Fixed text overflow in dropdown menu (#26694)
  * Make web context initialize correctly for different cases (#26726)
  * Remove incorrect CSS helper classes (#26712)
  * Focus editor on "Write" tab click (#26714)
  * Fix review bar misalignment (#26711)
  * Use "small-loading-icon" insead of "btn-octicon is-loading" (#26710)
  * Improve Image Diff UI (#26696)
  * Make issue template field template access correct template data (#26698)
  * add Upload URL to release API (#26663)
  * Add merge files files to GetCommitFileStatus (#20515)
  * PATCH branch-protection updates check list even when checks are disabled (#26351)
  * Add `member`, `collaborator`, `contributor`, and `first-time contributor` roles and tooltips (#26658)
  * chore(actions): support cron schedule task (#26655)
  * feat(API): update and delete secret for managing organization secrets (#26660)
  * Remove ref name in PR commits page (#25876)
  * Modify the content format of the Feishu webhook (#25106)
  * Handle "comment form combo editor init" more gracefully (#26688)
  * Prefer variables over subprocesses (#26690)
  * Fix archived unix time when archiving the label (#26681)
  * Make "link-action" backend code respond correct JSON content (#26680)
  * Fix doubled box-shadow in branch dropdown menu (#26678)
  * Refactor toast module (#26677)
  * More improvements for the "flex list" and the dashboard list (#26675)
  * Fix counting and filtering on the dashboard page for issues (#26657)
  * add mfa doc (#26654)
  * [Refactor] getIssueStatsChunk to move inner function into own one (#26671)
  * Use line-height: normal by default (#26635)
  * Improve repo sub menu (#26531)
  * Fix organization list in dashboard (#26650)
  * Improve show role (#26621)
  * Improve some flex layouts (#26649)
  * feat: implement organization secret creation API (#26566)
  * Check disabled workflow when rerun jobs (#26535)
  * Update minimum password length requirements (#25946)
  * cynkra is covered via oc links now (#26641)
  * update config docs url (#26640)
  * devpod use go1.21 (#26637)
  * Use correct minio error (#26634)
  * Remove avatarHTML from template helpers (#26598)
  * Add optimistic lock to ActionRun table (#26563)
  * Improve the branch selector tab UI (#26631)
  * Improve translation of milestone filters (#26569)
  * Add `branch_filter` to hooks API endpoints (#26599)
  * Replace box-shadow for `floating` dropdown as well (#26581)
  * Add link to job details and tooltip to commit status in repo list in dashboard (#26326)
  * Ignore the trailing slashes when comparing oauth2 redirect_uri (#26597)
  * Update tool dependencies (#26607)
  * bump go to 1.21 (#26608)
  * Update 1.20.3 changelog (#26609)
  * Fix NPM packages name validation (#26595)
  * Use "input" event instead of "keyup" event for migration form (#26602)
  * Do not use deprecated log config options by default (#26592)
  * fix reopen logic for agit flow pull request (#26399)
  * Update JS dependencies (#26586)
  * docs: template variables (#26547)
  * [skip ci] Updated translations via Crowdin
  * Rewrite the DiffFileTreeItem and fix misalignment (#26565)
  * Allow text selection in actions step header (#26588)
  * Bump xgo to go-1.21.x and node to 20 in release-version (#26589)
  * Add minimum polyfill to support "relative-time-element" in PaleMoon (#26575)
  * [skip ci] Updated translations via Crowdin
  * Fix various line-height styles (#26553)
  * Return empty when searching issues with no repos (#26545)
  * Support rebuilding issue indexer manually (#26546)
  * Fix label filter between `all` and `no` (#26557)
  * Fix "issueReposQueryPattern does not match query" (#26556)
  * Sync repo's IsEmpty status correctly (#26517)
  * [skip ci] Updated translations via Crowdin
  * Remove fomantic transition module (#26469)
  * Explain SearchOptions and fix ToSearchOptions (#26542)
  * Update go dependencies (#26534)
  * Differentiate better between user settings and admin settings (#26538)
  * Add missing triggers to update issue indexer (#26539)
  * Improve deadline icon location in milestone list page (#26532)
  * Use unique class for breadcrumb divider (#26524)
  * Fix typo of RunerOwnerID (#26508)
  * Improve clickable area in repo action view page (#26115)
  * Fix dark theme highlight for "NameNamespace" (#26519)
  * Remove duplicate CSS import for chroma/base.css (#26523)
  * Fix project filter bugs (#26490)
  * Fix display problems of members and teams unit (#26363)
  * Use `hidden` over `clip` for text truncation (#26520)
  * Add API route to list org secrets (#26485)
  * Set "type=button" for editor's toolbar buttons (#26510)
  * Apply to become a maintainer (#26514)
  * Detect ogg mime-type as audio or video (#26494)
  * Use `object-fit: contain` for oauth2 custom icons (#26493)
  * add disable workflow feature (#26413)
  * Move dropzone progress bar to bottom to show filename when uploading (#26492)
  * Handle base64 decoding correctly to avoid panic (#26483)
  * Allow to archive labels (#26478)
  * Update zh-cn documentation (#26406)
  * Fix NuGet search endpoints (#25613)
  * Fix tooltip of commit select button (#26472)
  * fix grab cursor on default column (#26476)
  * Fix storage path logic especially for relative paths (#26441)
  * Rename `Sync2` -> `Sync` (#26479)
  * Add ThreadID parameter for Telegram webhooks (#25996)
  * Fix stderr usages (#26477)
  * Use correct pull request commit link instead of a generic commit link (#26434)
  * Close stdout correctly for "git blame" (#26470)
  * Refactor tests (#26464)
  * Remove last newline from config file (#26468)
  * Add matrix to support (#26382)
  * Refactor project templates (#26448)
  * Avoiding accessing undefined mentionValues (#26461)
  * Tweak actions menu (#26278)
  * Adjust minio new sequence, now it will check whether bucket exist first and then create one if it doesn't exist (#26420)
  * Set commit id when ref used explicitly (#26447)
  * Fix 404 error when remove self from an organization (#26362)
  * Update index doc (#26455)
  * [skip ci] Updated translations via Crowdin
  * remove unnecessary explore org template (#26459)
  * Fix URL of padlock icon in profile (#26446)
  * Count only visible repos on profile (#25928)
  * Update upgrade documentation to add a check for deprecated configurations (#26451)
  * Fall back to esbuild for css minify (#26445)
  * Update JS dependencies (#26449)
  * Call git.InitSimple for runRepoSyncReleases (#26396)
  * Target specific OS for devcontainer base image (#26422)
  * Lock go to 1.21 on CI (#26433)
  * Always show usernames in reaction tooltips (#26444)
  * Fix incorrect redirection in new issue using references (#26440)
  * Fix the display of orgs listed in user profile (#26424)
  * minio: add missing region on client initialization (#26412)
  * Fix wrong middleware sequence (#26428)
  * Use template context function for avatar rendering (#26385)
  * Add transaction when creating pull request created dirty data (#26259)
  * Fix admin queue page title (#26409)
  * Pre-register OAuth2 applications for git credential helpers (#26291)
  * Make `user-content-* ` consistent with github (#26388)
  * Add pull request review request webhook event (#26401)
  * Introduce ctx.PathParamRaw to avoid incorrect unescaping (#26392)
  * [skip ci] Updated translations via Crowdin
  * fix artifact merging chunks path with correct slash on Windows (#26400)
  * Use flex classes in package settings (#26314)
  * Improve multiple strings in en-US locale (#26213)
  * Refactor "editorconfig" (#26391)
  * fix generated source URL on rendered files (#26364)
  * Remove unnecessary template helper DisableGravatar (#26386)
  * Remove unnecessary template helper repoAvatar (#26387)
  * Start using template context function (#26254)
  * Allow package cleanup from admin page (#25307)
  * Fix text truncate (#26354)
  * Fix incorrect sort link with  `.profile`  repository (#26374)
  * Use more `IssueList` instead of `[]*Issue` (#26369)
  * Rename code_langauge.go to code_language.go (#26377)
  * Add changelog for 1.20.3 (#26373)
  * Do not highlight `#number` in documents (#26365)
  * Bypass MariaDB performance bug of the "IN" sub-query, fix incorrect IssueIndex (#26279)
  * Fix nil pointer dereference  error when open link with invalid pull index (#26353)
  * [skip ci] Updated licenses and gitignores
  * Display human-readable text instead of cryptic filemodes (#26352)
  * [docs] Add missing backtick in quickstart.zh-cn.md (#26349)
  * Fix incorrect CLI exit code and duplicate error message (#26346)
  * Improve CLI and messages (#26341)
  * Remove backslashed newlines on markdown (#26344)
  * Hide `last indexed SHA` when a repo could not be indexed yet (#26340)
  * Fix log typo in task.go (#26337)
  * Prevent newline errors with Debian packages (#26332)
  * Fix the bug when getting files changed for `pull_request_target` event (#26320)
  * Refactor backend SVG package and add tests (#26335)
  * Fix bug with sqlite load read (#26305)
  * Remove commit load branches and tags in wiki repo (#26304)
  * Add highlight to selected repos in milestone dashboard (#26300)
  * Do not show Profile README when repository is private (#26295)
  * Fix incorrect color of selected assignees when create issue (#26324)
  * Delete `issue_service.CreateComment` (#26298)
  * Make git batch operations use parent context timeout instead of default timeout (#26325)
  * Fix typos and grammer problems for actions documentation (#26328)
  * Update documentation for 1.21 actions (#26317)
  * Fix the wrong derive path (#26271)
  * Support getting changed files when commit ID is `EmptySHA` (#26290)
  * Add `Retry` button when creating a mirror-repo fails (#26228)
  * [skip ci] Updated translations via Crowdin
  * Add locale for deleted head branch (#26296)
  * Use yellow if an approved review is stale (#26312)
  * Remove nonsense `<a>` for commit status check icon (#26287)
  * Make confusable character warning less jarring (#25069)
  * Update Gmail example (#26302)
  * Fix the topic validation rule and suport dots (#26286)
  * Upgrade x/net to 0.13.0 (#26297)
  * add unit test for user renaming (#26261)
  * add some Wiki unit tests (#26260)
  * Clarify the logger's MODE config option (#26267)
  * speed up TestEventSourceManagerRun (#26262)
  * Merge `templates/projects/list.tmpl` and `templates/repo/projects/list.tmpl` together (#26265)
  * Allow editing push mirrors after creation (#26151)
  * Update Arch linux URL from community to extra (#26273)
  * Fix due date rendering the wrong date in issue (#26268)
  * Some fixes of the prompt of new branches (#26257)
  * Introduce `flex-list` & `flex-item` elements for Gitea UI (#25790)
  * Mention `devtest` in frontend contributing guidelines (#26249)
  * Add 'Show on a map' button to Location in profile, fix layout (#26214)
  * Use shared template for webhook icons (#26242)
  * Reduce margins on user settings page, introduce `flex-container` (#26046)
  * Refactor and enhance issue indexer to support both searching, filtering and paging (#26012)
  * Show image size on view page (#25884)
  * Fix pull request check list is limited (#26179)
  * Fix API leaking Usermail if not logged in (#25097)
  * [skip ci] Updated licenses and gitignores
  * Fix typo in metadata (#26207)
  * Update js and py dependencies (#26243)
  * De-emphasize issue sidebar buttons (#26171)
  * Don't autosize textarea in diff view (#26233)
  * Add `/public/assets` to `.ignore` (#26232)
  * Fix attachment clipboard copy on insecure origin (#26224)
  * Fix commit compare style (#26209)
  * Fix unable to display individual-level project (#26198)
  * Fix access check for org-level project (#26182)
  * Fixed incorrect locale references (#26218)
  * Use calendar icon for `Joined on...` in profiles (#26215)
  * Add changelog for 1.20.2 (#26208)
  * Add commits dropdown in PR files view and allow commit by commit review (#25528)
  * Warn instead of reporting an error when a webhook cannot be found (#26039)
  * Fixing the align of commit stats in commit_page template. (#26161)
  * Fix allowed user types setting problem (#26200)
  * Hide branch/tag icon if branches/tags are empty (#26204)
  * Prevent primary key update on migration (#26192)
  * improve unit test for caching (#26185)
  * Render plaintext task list items for markdown files (#26186)
  * Add tooltip to describe LFS table column and color `delete LFS file` button red (#26181)
  * Show branches and tags that contain a commit (#25180)
  * Release attachments duplicated check (#26176)
  * Calculate MAX_WORKERS default value by CPU number (#26177)
  * Fixing redirection issue for logged-in users (#26105)
  * Update govulncheck, fix typo (#26168)
  * Fix handling of plenty Nuget package versions (#26075)
  * Fix typos in Contributing.md (#26170)
  * Disable download action logs button when there's no logs (#26114)
  * Re-add static images to docs (#26167)
  * Update email-setup.en-us.md (#26068)
  * Improve display of Labels/Projects/Assignees sort options (#25886)
  * Fix wrong branch name in rename branch modal (#26146)
  * Doc update swagger doc for POST /orgs/{org}/teams  (#26155)
  * Fix UI regression of asciinema player (#26159)
  * refactor improve NoBetterThan (#26126)
  * Update Chinese documents (#26139)
  * Fix bugs in LFS meta garbage collection (#26122)
  * Move web JSON functions to web context and simplify code (#26132)
  * Only show newly pushed branches message in the same repository (#26148)
  * Docusaurus-ify (#26051)
  * Display deprecated warning in admin panel pages as well as in the log file (#26094)
  * Remove "misc" scope check from public API endpoints (#26134)
  * Fix LFS object list style (#26133)
  * Drop the correct deleted branch table (#26028)
  * Fix CLI allowing creation of access tokens with existing name (#26071)
  * Fix incorrect router logger (#26137)
  * Increase table cell horizontal padding (#26140)
  * Update xorm version (#26128)
  * Fix UI for release tag page / wiki page / subscription page (#25948)
  * added ssh mirror workaround description (#26096)
  * Improve "gitea doctor" sub-command and fix "help" commands (#26072)
  * Fix wrong commit status in web ui (#26121)
  * remove IsWarning in  tmpl (#26120)
  * Fix minor capitalization error in string (#26100)
  * Improve commit graph alignment and truncating (#26112)
  * Fix wrong workflow status when rerun a job in an already finished workflow (#26119)
  * Allow Organisations to have a E-Mail (#25082)
  * doc sync authentication.md to zh-cn (#26117)
  * Fix loading `LFS_JWT_SECRET` from wrong section (#26109)
  * Avoid writing config file if not installed (#26107)
  * Implement auto-cancellation of concurrent jobs if the event is push (#25716)
  * [skip ci] Updated translations via Crowdin
  * doc guide the user to create the appropriate level runner (#26091)
  * Fix handling of Debian files with trailing slash (#26087)
  * fix Missing 404 swagger response docs for /admin/users/{username} (#26086)
  * Allow the use of alternative net.Listener implementations by downstreams (#25855)
  * Add missing default value for some Bool cli flags (#26082)
  * Reduce unnecessary DB queries for Actions tasks (#25199)
  * Use stderr as fallback if the log file can't be opened (#26074)
  * Make organization redirect warning more clear (#26077)
  * Replace gogs/cron with go-co-op/gocron (#25977)
  * Remove `db.DefaultContext` in `routers/` and `cmd/` (#26076)
  * Categorize admin settings sidebar panel (#26030)
  * [skip ci] Updated translations via Crowdin
  * Fix duplicated url prefix on issue context menu (#26066)
  * Add context parameter to some database functions (#26055)
  * Fix branch list auth (#26041)
  * Fix the truncate and alignment problem for some admin tables (#26042)
  * Update secrets.en-us.md (#26057)
  * Improve text for empty issue/pr description (#26047)
  * Add changelog for 1.20.1 (#26015)
  * Fix version in rpm repodata/primary.xml.gz (#26009)
  * Serve pre-defined files in "public", add "security.txt", add CORS header for ".well-known" (#25974)
  * Use frontend fetch for branch dropdown component  (#25719)
  * Remove commit status running and warning from the dashboard repo list (#26036)
  * Refactor to use urfave/cli/v2 (#25959)
  * Remove commit status running and warning to align GitHub (#25839)
  * Fix escape problems in the branch selector (#25875)
  * Update README.md to fix the broken link of Hugo (#26008)
  * Support copy protected branch from template repository (#25889)
  * Update JS dependencies (#26025)
  * Reduce margins on admin pages (#26026)
  * Actions Artifacts support uploading multiple files and directories (#24874)
  * [skip ci] Updated translations via Crowdin
  * Remove redundant "RouteMethods" method (#26024)
  * Adding remaining enum for migration repo model type. (#26021)
  * RPM Registry: Show zypper commands for SUSE based distros as well (#25981)
  * Fix the route for pull-request's authors (#26016)
  * Remove nfnt/resize and oliamb/cutter (#25999)
  * Correctly refer to dev tags as nightly in the docker docs (#26004)
  * Fix env config parsing for "GITEA____APP_NAME" (#26001)
  * Add file status for API "Get a single commit from a repository" (#16205) (#25831)
  * Add a link to OpenID Issuer URL in WebFinger response (#26000)
  * Fix bug when pushing to a pull request which enabled dismiss approval automatically (#25882)
  * [skip ci] Updated translations via Crowdin
  * Fix commit status color on dashboard repolist (#25993)
  * Improve profile readme rendering (#25988)
  * avoid hard-coding height in language dropdown menu (#25986)
  * parseScope with owner/repo always sets owner to zero (#25987)
  * Bump github.com/golang-jwt/jwt to v5 (#25975)
  * Update path related documents (#25417)
  * Update djlint, enable H026 and T027 (#25980)
  * [skip ci] Updated translations via Crowdin
  * Show the mismatched ROOT_URL warning on the sign-in page if OAuth2 is enabled (#25947)
  * Refactor "Content" for file uploading (#25851)
  * Fix SSPI auth panic (#25955)
  * Make pending commit status yellow again (#25935)
  * Move public asset files to the proper directory (#25907)
  * Disallow dangerous url schemes (#25960)
  * Avoid creating directories when loading config (#25944)
  * [skip ci] Updated translations via Crowdin
  * Import `sortablejs` only once (#25936)
  * Make environment-to-ini work with INSTALL_LOCK=true (#25926)
  * Ignore `runs-on` with expressions when warning no matched runners (#25917)
  * Skip unuseful error message in dev mode when watching local filesystem (#25919)
  * Add shutting down notice (#25920)
  * Downgrading Snap to build with node/18 instead of node/20
  * Fix margin on the new/edit project page. (#25885)
  * Add 1.20.0 changelog (#25901)
  * Fix incorrect milestone count when provide a keyword (#25880)
  * Avoid opening/closing PRs which are already merged (#25883)
  * Make `add line comment` buttons focusable (#25894)
  * Fix "Flash" message usage (#25895)
  * [skip ci] Updated translations via Crowdin
  * Add support for different Maven POM encoding (#25873)
  * Fix incorrect release count (#25879)
  * Add Github related extensions in devcontainer (#25800)
  * Add error info if no user can fork the repo (#25820)
  * Fix wrong usage of PathEscapeSegments in branch list page (#25864)
  * fix incorrect repo url when changed the case of ownername (#25733)
  * Upgrade go dependencies (#25819)
  * Don't stack PR tab menu on small screens (#25789)
  * Link to list of vulnerabilities (#25872)
  * [skip ci] Updated translations via Crowdin
  * move issue filters to shared template (#25729)
  * [skip ci] Updated translations via Crowdin
  * Remove `git.FileBlame` (#25841)
  * Fix empty project displayed in issue sidebar (#25802)
  * Update blog links (#25843)
  * Fix margin on the `new/edit milestone` page (#25801)
  * Do not "guess" the file encoding/BOM when using API to upload files (#25828)
  * [skip ci] Updated translations via Crowdin
  * Show correct SSL Mode on "install page" (#25818)
  * Fix incorrect oldest sort in project list (#25806)
  * Fix the error message when the token is incorrect (#25701)
  * Exclude default branch from pushed branch hint (#25795)
  * For API attachments, use API URL (#25639)
  * Fix WORK_DIR for docker (root) image (#25738)
  * Avoid amending the Rebase and Fast-forward merge if there is no message template (#25779)
  * Show edit title button on commits tab of PR, too (#25791)
  * Make "install page" respect environment config (#25648)
  * Enable H014 and H023 djlint rules (#25786)
  * Restructure issue list template, styles (#25750)
  * Fix notification list bugs (#25781)
  * Revert package access change from #23879 (#25707)
  * Make route middleware/handler mockable (#25766)
  * Update tool dependencies, lock govulncheck and actionlint (#25655)
  * Test if container blob is accessible before mounting (#22759)
  * Always pass 6-digit hex color to monaco (#25780)
  * Fix the wrong default branch name displayed by checkout (#25777)
  * Tweak repo topics bar (#25769)
  * docs: rootless docker ssh's default port is 2222 (#25771)
  * Repository Archived text title center align (#25767)
  * Update JS dependencies, misc tweaks (#25768)
  * Clarify "text-align" CSS helpers, fix clone button padding (#25763)
  * Switch to `vite-string-plugin` (#25762)
  * Newly pushed branches hints on repository home page (#25715)
  * Translate untranslated string in issues list (#25759)
  * Fix `ref` for workflows triggered by `pull_request_target` (#25743)
  * Minify CSS with Lightning CSS (#25754)
  * Reformat some templates (#25756)
  * Add open/closed field support for issue index (#25708)
  * Fix activity type match in `matchPullRequestEvent` (#25746)
  * Following up fixes for "Fix inconsistent user profile layout across tabs" (#25739)
  * Hide `add file` button for pull mirrors (#25748)
  * Apply to became a maintainer. (#25745)
  * Fix broken translations for package documantion (#25742)
  * Less naked returns (#25713)
  * [skip ci] Updated translations via Crowdin
  * Remove unused code (#25734)
  * Fix commits table regression (#25710)
  * Fix inconsistent user profile layout across tabs (#25625)
  * Simplify the LFS GC logger usage (#25717)
  * Allow/fix review (approve/reject) of empty PRs (#25690)
  * Correct permissions for `.ssh` and `authorized_keys` (#25721)
  * Sync branches when mirroring (#25722)
  * Disable run user change in installation page (#22499)
  * [skip ci] Updated translations via Crowdin
  * Show correct naming for 1 comment (#25704)
  * Check `ctx.Written()` for `GetActionIssue` (#25698)
  * Changelog for v1.19.4 (#25667) (#25709)
  * Remove `feature` label from `feature request` issue template (#25696)
  * Fix tags header and pretty format numbers (#25624)
  * Fix position of org follow button (#25688)
  * [skip ci] Updated translations via Crowdin
  * Replace `interface{}` with `any` (#25686)
  * Several fixes for mobile UI (#25634)
  * Add elapsed time on debug for slow git commands (#25642)
  * some less naked returns (#25682)
  * Prevent duplicate image loading (#25675)
  * Add unit test for `HashAvatar` (#25662)
  * Fix the nil pointer when assigning issues to projects (#25665)
  * Actions list enhancements (#25601)
  * Fix issues indexer document mapping (#25619)
  * Fix show more for image on diff page (#25672)
  * Prevent SVG shrinking (#25652)
  * Log the real reason when authentication fails (but don't show the user) (#25414)
  * Add unit test for repository collaboration (#25640)
  * Fix UI misalignment on user setting page (#25629)
  * [skip ci] Updated translations via Crowdin
  * Correct translation wrong format (#25643)
  * Add direct serving of package content (#25543)
  * Fix bug when change user name (#25637)
  * Make "cancel" buttons have proper type in modal forms (#25618)
  * Make FindBranches have stable result (#25631)
  * Display branch commit status (#25608)
  * use css on labels (#25626)
  * Get latest commit statuses from database instead of git data on dashboard for repositories (#25605)
  * Add log line anchor for action logs (#25532)
  * Support displaying diff stats in PR tab bar (#25387)
  * [skip ci] Updated licenses and gitignores
  * Move some files under repo/setting (#25585)
  * Following-up improvments for various PRs (#25620)
  * Set SSH_AUTHORIZED_KEYS_BACKUP to false (#25412)
  * Fix bug of branches API with tests (#25578)
  * [skip ci] Updated translations via Crowdin
  * Application as a maintainer (#25614)
  * Adding  branch-name copy  to clipboard branches screen. (#25596)
  * Use AfterCommitId to get commit for Viewed functionality (#25529)
  * Fix branch commit message too long problem (#25588)
  * Restrict `[actions].DEFAULT_ACTIONS_URL` to only `github` or `self` (#25581)
  * Add API for changing Avatars (#25369)
  * read-only checkboxes don't appear and don't entirely act the way one might expect (#25573)
  * Redirect to package after version deletion (#25594)
  * Update emoji set to Unicode 15 (#25595)
  * Fix `lint-swagger` action (#25593)
  * Replace fomantic divider module with our own (#25539)
  * Add documentation about supported workflow trigger events (#25582)
  * Sync branches into databases (#22743)
  * Fix milestones deletion (#25583)
  * Reduce table padding globally (#25568)
  * Use fetch form action for lock/unlock/pin/unpin on sidebar (#25380)
  * Support downloading raw task logs (#24451)
  * [skip ci] Updated translations via Crowdin
  * Split lfs size from repository size (#22900)
  * Use correct response code in push mirror creation response in v1_json.tmpl (#25476)
  * Do not prepare oauth2 config if it is not enabled, do not write config in some sub-commands (#25567)
  * Fix content holes in Actions task logs file (#25560)
  * Align language menu icon and fit the footer area (#25556)
  * Fix bugs related to notification endpoints (#25548)
  * Add custom ansi colors and CSS variables for them (#25546)
  * Use flex instead of float for sort button and search input (#25519)
  * Fix sub-command log level (#25537)
  * Update JS dependencies and misc tweaks (#25540)
  * Change `Regenerate Secret` button display (#25534)
  * Fix rerun icon on action view component (#25531)
  * Fix admin-dl-horizontal (#25512)
  * Fix input `line-height` cutting off `g` (#25334)
  * Add toasts to UI (#25449)
  * [skip ci] Updated translations via Crowdin
  * Add `make poetry-update`, upgrade `djlint` (#25399)
  * Use JSON response for "user/logout" (#25522)
  * Fix migrate page layout on mobile (#25507)
  * Add Adopt repository event and handler (#25497)
  * Support `pull_request_target` event (#25229)
  * Fix CLI sub-command handling (#25501)
  * Document creating an API key from the CLI (#25504) (#25510)
  * Clarify the reason why the user can't add a new email if there is a pending activation (#25509)
  * Allow change line of admin-dl-horizontal dt (#25508)
  * [skip ci] Updated translations via Crowdin
  * Link to existing PR when trying to open a new PR on the same branches (#25494)
  * Fine tune "dropdown button" icon (#25442)
  * Revert "Make buttons in a modal form have proper type. (#25446)" (#25485)
  * Highlight viewed files differently in the PR filetree (#24956)
  * Improve loadprojects for issue list (#25468)
  * Only show 'Manage Account Links' when necessary (#25311)
  * fix tags line no margin see #25255 (#25280)
  * Use InitWorkPathAndCfgProvider for environment-to-ini to avoid unnecessary checks (#25480)
  * Fix wrong warn messages in migration steps (#25475)
  * Navbar fixes (#25402)
  * Fix default value for LocalURL (#25426)
  * [skip ci] Updated translations via Crowdin
  * Do not publish docker release images on `-dev` tags (#25471)
  * Improve wiki sidebar and TOC (#25460)
  * Fix `Init` of db indexer (#25470)
  * Add `Makefile` to `files-changed` (#25463)
  * Fix repo search broken because of profile page added (#25455)
  * Refactor indexer (#25174)
  * Store and use seconds for timeline time comments (#25392)
  * Make buttons in a modal form have proper type. (#25446)
  * Make "dismiss" content shown correctly (#25461)
  * Gitea version in Makefile (#25456)
  * Import additional secrets via file uri (#25408)
  * Remove `deps-tools` from `backend` job (#25454)
  * Update octicons and use `octicon-file-directory-symlink` (#25453)
  * add `test-frontend` back to actions (#25452)
  * Remove test string (#25447)
  * Fix `Permission` in API returned repository struct (#25388)
  * Diff page enhancements (#25398)
  * Introduce shared template for search inputs (#25338)
  * Improve 'Privacy' section in profile settings (#25309)
  * Change default email domain for LDAP users (#25425)
  * Switch to ansi_up for ansi rendering in actions (#25401)
  * Various UI fixes (#25264)
  * Move some regexp out of functions (#25430)
  * Show outdated comments in files changed tab (#24936)
  * Remove "CHARSET" config option for MySQL, always use "utf8mb4" (#25413)
  * Fine tune project board label colors and modal content background (#25419)
  * Fix missing commit message body when the message has leading newlines (#25418)
  * add python/poetry to devcontainer (#25407)
  * Refactor path & config system (#25330)
  * Add actor and status dropdowns to run list (#25118)
  * Use the new download domain replace the old (#25405)
  * Avoid polluting config file when "save" (#25395)
  * Fix dropdown icon layout on diff page (#25397)
  * Support configuration variables on Gitea Actions (#24724)
  * Substitute variables in path names of template repos too (#25294)
  * Navbar styling rework (#25343)
  * Fix blank dir message when uploading files from web editor (#25391)
  * Add git-lfs support to devcontainer (#25385)
  * Use qwtel.sqlite-viewer instead of alexcvzz.vscode-sqlite (#25386)
  * Use Actions git context instead of dynamically created buildkit one (#25381)
  * rename tributeValues to mentionValues (#25375)
  * Fix LDAP sync when Username Attribute is empty (#25278)
  * Fetch all git data for embedding correct version in docker image (#25361)
  * Fix sidebar label dropdown divider (#25359)
  * Fix issue filters on mobile view (#25368)
  * Refactor: TotalTimest return seconds (#25370)
  * Fix incorrect actions ref_name (#25358)
  * Make backend code respond correct JSON when creating PR (#25353)
  * Fix loading state regression in markup content (#25349)
  * Batch delete issue and improve tippy opts (#25253)
  * Only run `docker-dryrun` when necessary (#25329)
  * fix a nit error output in Makefile (#25360)
  * [skip ci] Updated translations via Crowdin
  * Clean up pyproject.toml and package.json, fix poetry options (#25327)
  * Fix label list divider (#25312)
  * Avoid polluting the config (#25345)
  * Fix incorrect link-action event target (#25306)
  * Write absolute AppDataPath to app.ini when installing (#25331)
  * Add Exoscale to installation on cloud provider docs (#25342)
  * Fix UI on mobile view (#25315)
  * When viewing a file, hide the add button (#25320)
  * Update JS dependencies, remove space after emoji completion (#25266)
  * Refactor web package and context package (#25298)
  * build nightly docker images (#25317)
  * Add `stylelint-declaration-block-no-ignored-properties` (#25284)
  * Remove EasyMDE focus outline on text (#25328)
  * use Actions environment variables in Makefile (#25319)
  * add `stylelint-stylistic` (#25285)
  * Remove more unused Fomantic variants (#25292)
  * Build nightly binaries with Actions (#25308)
  * Fix displayed RPM repo url (#25310)
  * Use fetch to send requests to create issues/comments (#25258)
  * Show if File is Executable (#25287)
  * Add devcontainer config for developing Gitea (#24781)
  * Add link to support page for commercial support (#25293)
  * Docs about how to generate config for act runner with docker and setup it with docker-compose (#25256)
  * Fix some UI alignments (#25277)
  * Remove fomantic inverted variations (#25286)
  * Fix issue and commit status popup padding (#25254)
  * Show OAuth2 errors to end users (#25261)
  * [skip ci] Updated translations via Crowdin
  * Fix index generation parallelly failure (#25235)
  * Fix variable in template (#25267)
  * Add template linting via djlint (#25212)
  * Fix edit OAuth application width (#25262)
  * Use flex to align SVG and text (#25163)
  * GitHub Actions enhancements for frontend (#25150)
  * Add missing `v` in migrations.go (#25252)
  * Change form actions to fetch for submit review box (#25219)
  * Fix panic when migrating a repo from GitHub with issues (#25246)
  * Fix description of drop custom_labels migration (#25243)
  * Fix all possible setting error related storages and added some tests (#23911)
  * [skip ci] Updated translations via Crowdin
  * Revert overflow: overlay (revert #21850) (#25231)
  * Support changing labels of Actions runner without re-registration (#24806)
  * Improve AJAX link and modal confirm dialog (#25210)
  * Use inline SVG for built-in OAuth providers (#25171)
  * Disable `Create column` button while the column name is empty  (#25192)
  * Fix profile render when the README.md size is larger than 1024 bytes (#25131)
  * Change access token UI to select dropdowns (#25109)
  * Fix task list checkbox toggle to work with YAML front matter (#25184)
  * Fix compatible for webhook ref type (#25195)
  * Hide limited users if viewed by anonymous ghost (#25214)
  * Update `from-source.zh-cn.md` & `from-source.en-us.md` - Cross Compile Using Zig (#25194)
  * [skip ci] Updated translations via Crowdin
  * Remove hacky patch for "safari emoji glitch fix"  (#25208)
  * Do not overwrite the log mode when installing (#25203)
  * Fix fullscreen for action  (#25200)
  * Adjust style for action run list (align icons, adjust padding) (#25170)
  * Improve some documents: release version, logging, NFS lock (#25202)
  * [skip ci] Updated licenses and gitignores
  * Add `WithPullRequest` for `actionsNotifier` (#25144)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Update github.com/google/go-github to v53 (#25157)
  * Fix bug for code search if code is disabled (#25173)
  * Minor arc-green color tweaks (#25175)
  * Fix duplicate Reviewed-by trailers (#24796)
  * Fix #25133 (#25162)
  * Fix mobile navbar and misc cleanups (#25134)
  * Button and color enhancements (#24989)
  * Fix setup-go actions (#25167)
  * [skip ci] Updated translations via Crowdin
  * Modify OAuth login ui and fix display name, iconurl related logic (#25030)
  * Fix open redirect check for more cases (#25143)
  * Update js dependencies (#25137)
  * Remove duplicated functions when deleting a branch (#25128)
  * Add codeowners feature (#24910)
  * Fix strange UI behavior of cancelling dismiss review modal (#25133)
  * Fix `MilestoneIDs` when querying issues (#25125)
  * Fix incorrect git ignore rule and add missing license files (#25135)
  * Change branch name from master to main in some documents' links (#25126)
  * Remove incorrect element ID on "post-install" page (#25104)
  * [skip ci] Updated translations via Crowdin
  * Improve notification icon and navbar  (#25111)

-------------------------------------------------------------------
Tue Oct 03 13:31:21 UTC 2023 - ecsos@opensuse.org

- Update to version 1.20.5:
  * Add 1.20.5 changelog (#27404)
  * Fix bug of review request number (#27406)
  * Fix git 2.11 error when checking IsEmpty (#27393) (#27396)
  * Allow get release download files and lfs files with oauth2 token format (#26430) (#27378)
  * Add logs for data broken of comment review (#27326) (#27344)
  * fix orphan check for deleted branch (#27310) (#27320)
  * Fix PushEvent NullPointerException jenkinsci/github-plugin (#27203) (#27249)
  * Fix z-index on markdown completion (#27237) (#27242)
  * Fix z-index on markdown completion (#27237) (#27238)
  * Update database-preparation and add note re: MariaDB (#27232) (#27235)
  * Quote table `release` in sql queries (#27205) (#27219)
  * Fix release URL in webhooks (#27182) (#27184)
  * Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27167)
  * Fix organization field being null in POST /orgs/{orgid}/teams (#27150) (#27162)
  * Fix successful return value for `SyncAndGetUserSpecificDiff` (#27152) (#27156)
  * Improve actions docs related to `pull_request` event (#27126) (#27145)
  * fix pagination for followers and following (#27127) (#27138)
  * services/wiki: Close() after error handling (#27129) (#27137)
  * Fix issue templates when blank isses are disabled (#27061) (#27082)
  * Load reviewer before sending notification (#27063) (#27064)
  * Fix context cache bug & enable context cache for dashabord commits' authors(#26991) (#27017)
  * Use secure cookie for HTTPS sites (#26999) (#27013)
  * Correct the database.LOG_SQL default value in config cheat sheet (#26997) (#27002)
  * Fix INI parsing for value with trailing slash (#26995) (#27001)

-------------------------------------------------------------------
Fri Sep 08 09:18:20 UTC 2023 - ecsos@opensuse.org

- Update to version 1.20.4:
  * Fix changelog typo (#26973)
  * 1.20.4 changelog (#26966)
  * Improve LDAP group config documentation (#21227) (#26921)
  * update footer link to new landing page (#26916) (#26919)
  * Update documents to fix some links (#26885) (#26888)
  * Update docs about attachment path (#26883) (#26884)
  * Fix wrong review requested number (#26784) (#26880)
  * Redirect from `{repo}/issues/new` to `{repo}/issues/new/choose` when blank issues are disabled (#26813) (#26847)
  * Avoid double-unescaping of form value (#26853) (#26863)
  * Fix verifyCommits error when push a new branch (#26664) (#26810)
  * Sync tags when adopting repos (#26816) (#26834)
  * check blocklist for emails when adding them to account (#26812) (#26831)
  * Fix context filter has no effect in dashboard (#26695) (#26811)
  * Include the GITHUB_TOKEN/GITEA_TOKEN secret for fork pull requests (#26759) (#26806)
  * Add fix incorrect can_create_org_repo for org owner team (#26683) (#26791)
  * Fix some slice append usages (#26778) (#26798)
  * Fix being unable to use a repo that prohibits accepting PRs as a PR source. (#26785) (#26790)
  * Improve the "bug report" template and "support options" document (#26753) (#26780)
  *  Use docs.gitea.com instead of docs.gitea.io (#26769)
  * Fix Page Not Found error (#26768)
  * Fix bug for ctx usage (#26763)
  * Fix incorrect "tabindex" attributes (#26733) (#26734)
  * Fix link in mirror docs (#26719) (#26732)
  * Add matrix to support (#26382) (#26722)
  * Make issue template field template access correct template data (#26698) (#26709)
  * Backport line height fix (#26708)
  * Prefer variables over subprocesses (#26690) (#26693)
  * add mfa doc (#26654) (#26674)
  * update config docs url (#26640) (#26642)
  * Fix unable to display individual-level project (#26198) (#26636)
  * Use correct minio error (#26634) (#26639)
  * fix reopen logic for agit flow pull request (#26399) (#26613)
  * Add `branch_filter` to hooks API endpoints (#26599) (#26632)
  * Ignore the trailing slashes when comparing oauth2 redirect_uri (#26597) (#26618)
  * Set errwriter for urfave/cli v1 (#26616)

-------------------------------------------------------------------
Sun Aug 20 20:15:04 UTC 2023 - ecsos@opensuse.org

- Update to version 1.20.3:
  * Update 1.20.3 changelog (#26609) (#26610)
  * Use "input" event instead of "keyup" event for migration form (#26602) (#26605)
  * Do not use deprecated log config options by default (#26592) (#26600)
  * Fix project filter bugs (#26490) (#26558)
  * Add minimum polyfill to support "relative-time-element" in PaleMoon (#26575) (#26578)
  * Fix "issueReposQueryPattern does not match query" (#26556) (#26564)
  * Sync repo's IsEmpty status correctly (#26517) (#26560)
  * Fix typo of RunerOwnerID (#26508) (#26528)
  * Fix NuGet search endpoints (#25613) (#26499)
  * Fix dark theme highlight for "NameNamespace" (#26519) (#26527)
  * Use `hidden` over `clip` for text truncation (#26520) (#26522)
  * Set "type=button" for editor's toolbar buttons (#26510) (#26518)
  * Detect ogg mime-type as audio or video (#26494) (#26505)
  * Use `object-fit: contain` for oauth2 custom icons (#26493) (#26498)
  * Move dropzone progress bar to bottom to show filename when uploading (#26492) (#26497)
  * Fix storage path logic especially for relative paths (#26441) (#26481)
  * Add ThreadID parameter for Telegram webhooks (#25996) (#26480)
  * Close stdout correctly for "git blame" (#26470) (#26473)
  * Remove last newline from config file (#26468) (#26471)
  * Check first if minio bucket exists before trying to create it (#26420) (#26465)
  * Avoiding accessing undefined tributeValues #26461  (#26462)
  * Fix incorrect color of selected assignees when create issue (#26324) (#26372)
  * Improve profile readme rendering (#25988) (#26453)
  * Update upgrade documentation to add a check for deprecated configurations (#26451) (#26452)
  * Add transaction when creating pull request created dirty data (#26259) (#26437)
  * Call git.InitSimple for runRepoSyncReleases (#26396) (#26450)
  * Add changelog for 1.20.3 (#26373) (#26375)
  * minio: add missing region on client initialization (#26412) (#26438)
  * Fix wrong middleware sequence (#26428) (#26436)
  * Fix admin queue page title and fix CI failures (#26409) (#26421)
  * Add pull request review request webhook event (#26401) (#26407)
  * Introduce ctx.PathParamRaw to avoid incorrect unescaping (#26392) (#26405)
  * Fix incorrect sort link with  `.profile`  repository (#26374) (#26379)
  * Fix text truncate (#26354) (#26384)
  * Bypass MariaDB performance bug of the "IN" sub-query, fix incorrect IssueIndex (#26279) (#26368)
  * Display human-readable text instead of cryptic filemodes (#26352) (#26358)
  * [docs] Add missing backtick in quickstart.zh-cn.md (#26349) (#26357)
  * [docs] Fix Gmail configuration (#26356)
  * Fix API leaking Usermail if not logged in (#25097) (#26350)
  * Hide `last indexed SHA` when a repo could not be indexed yet (#26340) (#26345)
  * Remove backslashed newlines on markdown (#26344) (#26348)
  * Fix incorrect CLI exit code and duplicate error message (#26346) (#26347)
  * Fix log typo in task.go (#26337) (#26343)
  * Prevent newline errors with Debian packages (#26332) (#26342)
  * Fix bug with sqlite load read (#26305) (#26339)
  * Make git batch operations use parent context timeout instead of default timeout (#26325) (#26330)
  * Fix the wrong derive path (#26271) (#26318)
  * Fix the topic validation rule and suport dots (#26286) (#26303)
  * Support getting changed files when commit ID is `EmptySHA` (#26290) (#26316)
  * Upgrade x/net to 0.13.0 (#26301)
  * Clarify the logger's MODE config option (#26267) (#26281)
  * Fix due date rendering the wrong date in issue (#26268) (#26274)
  * Update Arch linux URL from community to extra (#26273) (#26276)
  * Use shared template for webhook icons (#26242) (#26246)
  * Fix pull request check list is limited (#26179) (#26245)
  * Don't autosize textarea in diff view (#26233) (#26244)
  * Fix attachment clipboard copy on insecure origin (#26224) (#26231)
  * Fixed incorrect locale references (#26218) (#26222)
  * Fix access check for org-level project (#26182) (#26223)
  * Fix commit compare style (#26209) (#26226)
  * Warn instead of reporting an error when a webhook cannot be found (#26039) (#26211)

-------------------------------------------------------------------
Sat Jul 29 13:34:50 UTC 2023 - ecsos@opensuse.org

- Update to version 1.20.2:
  * Add changelog for 1.20.2 (#26208) (#26217)
  * Fix allowed user types setting problem (#26200) (#26206)
  * Prevent primary key update on migration (#26192) (#26199)
  * Calculate MAX_WORKERS default value by CPU number (#26177) (#26183)
  * Fix bug when pushing to a pull request which enabled dismiss approval automatically (#25882) (#26158)
  * Fix handling of plenty Nuget package versions (#26075) (#26173)
  * Fix typos in Contributing.md (#26170) (#26172)
  * Update email-setup.en-us.md (#26068) (#26166)
  * Fix bugs in LFS meta garbage collection (#26122) (#26157)
  * Fix UI regression of asciinema player (#26159) (#26162)
  * Display deprecated warning in admin panel pages as well as in the log file (#26094) (#26154)
  * Update xorm version (#26128) (#26150)
  * Remove "misc" scope check from public API endpoints (#26134) (#26149)
  * Fix LFS object list style (#26133) (#26147)
  * Docusaurus-ify 1.20 (#26052)
  * Fix CLI allowing creation of access tokens with existing name (#26071) (#26144)
  * Increase table cell horizontal padding (#26140) (#26142)
  * Fix incorrect router logger (#26137) (#26143)
  * added ssh mirror workaround description (#26096) (#26136)
  * Improve commit graph alignment and truncating (#26112) (#26127)
  * Fix wrong workflow status when rerun a job in an already finished workflow (#26119) (#26124)
  * Fix escape problems in the branch selector (#25875) (#26103)
  * Avoid writing config file if not installed (#26107) (#26113)
  * Fix handling of Debian files with trailing slash (#26087) (#26098)
  * fix Missing 404 swagger response docs for /admin/users/{username} (#26086) (#26089)
  * Use stderr as fallback if the log file can't be opened (#26074) (#26083)
  * Fix duplicated url prefix on issue context menu (#26066) (#26067)

-------------------------------------------------------------------
Wed Jul 26 07:28:43 UTC 2023 - Dirk Müller <dmueller@suse.com>

- allow write access to .local directory, needed for OCSP stapling

-------------------------------------------------------------------
Sat Jul 22 12:47:10 UTC 2023 - ecsos@opensuse.org

- Update to version 1.20.1:
  * Add changelog for 1.20.1 (#26015) (#26056)
  * Fix version in rpm repodata/primary.xml.gz (#26009) (#26048)
  * Adding remaining enum for migration repo model type. (#26021) (#26034)
  * RPM Registry: Show zypper commands for SUSE based distros as well (#25981) (#26020)
  * Fix the route for pull-request's authors (#26016) (#26018)
  * Correctly refer to dev tags as nightly in the docker docs (#26004) (#26019)
  * Fix env config parsing for "GITEA____APP_NAME" (#26001) (#26013)
  * Fix commit status color on dashboard repolist (#25993) (#25998)
  * avoid hard-coding height in language dropdown menu (#25986) (#25997)
  * parseScope with owner/repo always sets owner to zero (#25987) (#25989)
  * Update path related documents (#25417) (#25982)
  * Make pending commit status yellow again (#25935) (#25968)
  * Show the mismatched ROOT_URL warning on the sign-in page if OAuth2 is enabled (#25947) (#25972)
  * Fix SSPI auth panic (#25955) (#25969)
  * Avoid creating directories when loading config (#25944) (#25957)
  * Disallow dangerous URL schemes (#25960) (#25964)
  * Ignore `runs-on` with expressions when warning no matched runners (#25917) (#25933)
  * Make environment-to-ini work with INSTALL_LOCK=true (#25926) (#25937)
  * Avoid opening/closing PRs which are already merged (#25883) (#25903)
  * Skip unuseful error message in dev mode when watching local filesystem (#25919) (#25927)
  * Add shutting down notice (#25920) (#25922)
  * Fix incorrect milestone count when provide a keyword (#25880) (#25904)

-------------------------------------------------------------------
Tue Jul 18 19:47:22 UTC 2023 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>

- Repair esbuild version query in get-gitea-source.sh

-------------------------------------------------------------------
Mon Jul 17 05:10:49 UTC 2023 - ecsos@opensuse.org

- Update to version 1.20.0:
  * Add 1.20.0 changelog (#25901) (#25910)
  * fix incorrect repo url when changed the case of ownername (#25733) (#25881)
  * Backport locales to v1.20 (#25899)
  * Make `add line comment` buttons focusable (#25894) (#25896)
  * Add support for different Maven POM encoding (#25873) (#25890)
  * Fix incorrect release count (#25879) (#25887)
  * Fix empty project displayed in issue sidebar (#25802) (#25854)
  * Fix the error message when the token is incorrect (#25701) (#25836)
  * Backport locale to 1.20 (#25840)
  * Show correct SSL Mode on "install page" (#25818) (#25838)
  * Fix incorrect oldest sort in project list (#25806) (#25835)
  * Fix activity type match in `matchPullRequestEvent` (#25746) (#25796)
  * For API attachments, use API URL (#25639) (#25814)
  * Make "install page" respect environment config (#25648) (#25799)
  * Avoid amending the Rebase and Fast-forward merge if there is no message template (#25779) (#25809)
  * Fix WORK_DIR for docker (root) image (#25738) (#25811)
  * Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764)
  * Revert package access change from #23879 (#25707) (#25785)
  * Remove unused code (#25734) (#25788)
  * Fix notification list bugs (#25781) (#25787)
  * Test if container blob is accessible before mounting (#22759) (#25784)
  * Always pass 6-digit hex color to monaco (#25780) (#25782)
  * docs: rootless docker ssh's default port is 2222 (#25771) (#25772)
  * Translate untranslated string in issues list (#25759) (#25761)
  * Hide `add file` button for pull mirrors (#25748) (#25751)
  * Remove broken translations (#25737)
  * Several fixes for mobile UI (#25634) (#25689)
  * Allow/fix review (approve/reject) of empty PRs (#25690) (#25732)
  * Check `ctx.Written()` for `GetActionIssue` (#25698) (#25711)
  * Show correct naming for 1 comment (#25704) (#25712)
  * Correct permissions for `.ssh` and `authorized_keys` (#25721) (#25730)
  * Fix tags header and pretty format numbers (#25624) (#25694)
  * Fix position of org follow button (#25688) (#25692)
  * Replace `interface{}` with `any` (#25686) (#25687)
  * Prevent duplicate image loading (#25675) (#25684)
  * Actions list enhancements (#25601) (#25678)
  * Manual backport of locale for 1.20 (2nd) (#25668)
  * Fix the nil pointer when assigning issues to projects (#25665) (#25677)
  * Prevent SVG shrinking (#25652) (#25669)
  * Fix show more for image on diff page (#25672) (#25673)
  * Add unit test for repository collaboration (#25640) (#25658)
  * Log the real reason when authentication fails (but don't show the user) (#25414) (#25660)
  * Fix UI misalignment on user setting page (#25629) (#25656)
  *  Fix bug of branches API with tests(#25578) (#25579)
  * Manuall backport of locale for 1.20 (#25635)
  * Fix bug when change user name (#25637) (#25646)
  * Make "cancel" buttons have proper type in modal forms (#25618) (#25641)
  * use css on labels (#25626) (#25636)
  * Use AfterCommitId to get commit for Viewed functionality (#25529) (#25612)
  * Restrict `[actions].DEFAULT_ACTIONS_URL` to only `github` or `self` (#25581) (#25604)
  * read-only checkboxes don't appear and don't entirely act the way one might expect (#25573) (#25602)
  * Redirect to package after version deletion (#25594) (#25599)
  * Add documentation about supported workflow trigger events (#25582) (#25589)
  * Reduce table padding globally (#25568) (#25577)
  * Fix milestones deletion (#25583) (#25584)
  * Do not prepare oauth2 config if it is not enabled, do not write config in some sub-commands (#25567) (#25576)
  * Fix content holes in Actions task logs file (#25560) (#25566)
  * Use correct response code in push mirror creation response in v1_json.tmpl (#25476) (#25571)
  * Fix bugs related to notification endpoints (#25548) (#25562)
  * Align language menu icon and fit the footer area (#25556) (#25563)
  * Fix sub-command log level (#25537) (#25553)
  * Change `Regenerate Secret` button display (#25534) (#25541)
  * Fix admin-dl-horizontal (#25512) (#25535)
  * Fix rerun icon on action view component (#25531) (#25536)
  * Fix input `line-height` cutting off `g` (#25334) (#25533)
  * Changelog for v1.20.0-rc2 (#25474)
  * Allow change line of admin-dl-horizontal dt (#25508) (#25516)
  * Add Adopt repository event and handler (#25497) (#25518)
  * Clarify the reason why the user can't add a new email if there is a pending activation (#25509) (#25514)
  * Fix CLI sub-command handling (#25501) (#25517)
  * Improve loadprojects for issue list (#25468) (#25493)
  * Document creating an API key from the CLI (#25504)
  * Fine tune "dropdown button" icon (#25442) (#25499)
  * Use InitWorkPathAndCfgProvider for environment-to-ini to avoid unnecessary checks (#25480) (#25488)
  * Revert "Make buttons in a modal form have proper type. (#25446) (#25478)" (#25484)
  * Fix wrong warn messages in migration steps (#25475) (#25487)
  * Make buttons in a modal form have proper type. (#25446) (#25478)
  * Improve wiki sidebar and TOC (#25460) (#25477)
  * Fix repo search broken because of profile page added (#25455) (#25467)
  * Make "dismiss" content shown correctly (#25461) (#25465)
  * Gitea version in Makefile (#25456) (#25457)
  * Support Drone building binaries too
  * Remove test string (#25447) (#25448)
  * Refactor path & config system (#25330) (#25416)
  * Move some regexp out of functions (#25430)  (#25445)
  * Fix `Permission` in API returned repository struct (#25388) (#25441)
  * Diff page enhancements (#25398) (#25437)
  * Change default email domain for LDAP users (#25425) (#25434)
  * Various UI fixes (#25264) (#25431)
  * Show outdated comments in files changed tab (#24936) (#25428)
  * Use "utf8mb4" for MySQL by default (#25432)
  * Fix missing commit message body when the message has leading newlines (#25418) (#25422)
  * Avoid polluting config file when "save" (#25395) (#25406)
  * Use the new download domain replace the old (#25405) (#25409)
  * Fix dropdown icon layout on diff page (#25397) (#25403)
  * Fix blank dir message when uploading files from web editor (#25391) (#25400)
  * Use Actions git context instead of dynamically created buildkit one (#25381) (#25383)
  * Update JS dependencies, remove space after emoji completion (#25266) (#25352)
  * Fix LDAP sync when Username Attribute is empty (#25278) (#25379)
  * Fetch all git data for embedding correct version in docker image (#25361) (#25373)
  * Fix label list divider (#25312) (#25372)
  * fix issue filters on mobile view (#25368) (#25371)
  * Fix incorrect actions ref_name (#25358) (#25367)
  * Avoid polluting the config (#25345) (#25354)
  * Fix incorrect config argument position for builtin SSH server (#25341)
  * Add Exoscale to installation on cloud provider docs (#25342) (#25346)
  * Write absolute AppDataPath to app.ini when installing (#25331) (#25347)
  * Fix UI on mobile view (#25315) (#25340)
  * Fix action runner last online state on edit page (#25337)
  * build nightly docker images (#25317) (#25333)
  * When viewing a file, hide the add button (#25320) (#25339)
  * Remove EasyMDE focus outline on text (#25328) (#25332)
  * use Actions environment variables in Makefile (#25319) (#25318)
  * Remove more unused Fomantic variants (#25292) (#25323)
  * Build nightly binaries with Actions (#25308) (#25314)
  * Fix displayed RPM repo url (#25310) (#25313)
  * Show if File is Executable (#25287) (#25300)
  * Add link to support page for commercial support (#25293) (#25297)
  * Docs about how to generate config for act runner with docker and setup it with docker-compose (#25256) (#25296)
  * Fix some UI alignments (#25277) (#25290)
  * Remove fomantic inverted variations (#25286) (#25289)
  * Fix issue and commit status popup padding (#25254) (#25288)
  * Show OAuth2 errors to end users (#25261) (#25271)
  * Fix index generation parallelly failure (#25235) (#25269)
  * Fix profile render when the README.md size is larger than 1024 bytes (#25270)
  * Fix edit OAuth application width (#25262) (#25263)
  * Use flex to align SVG and text (#25163) (#25260)
  * GitHub Actions enhancements for frontend (#25150) (#25259)
  * Fix panic when migrating a repo from GitHub with issues (#25246) (#25247)
  * Fix all possible setting error related storages and added some tests (#23911) (#25244)
  * Revert overflow: overlay (revert #21850) (#25231) (#25239)
  * Do not overwrite the log mode when installing (#25203) (#25209)
  * Change access token UI to select dropdowns (#25109) (#25230)
  * Use inline SVG for built-in OAuth providers (#25171) (#25234)
  * Fix task list checkbox toggle to work with YAML front matter (#25184) (#25227)
  * Fix compatible for webhook ref type (#25195) (#25223)
  * Hide limited users if viewed by anonymous ghost (#25214) (#25220)
  * Remove hacky patch for "safari emoji glitch fix"  (#25208) (#25211)
  * Fix fullscreen for action  (#25200) (#25207)
  * Improve some documents: release version, logging, NFS lock (#25202) (#25204)
  * Minor arc-green color tweaks (#25175) (#25205)
  * Add `WithPullRequest` for `actionsNotifier` (#25144) (#25197)
  * Fix strange UI behavior of cancelling dismiss review modal (#25172)
  * Button and color enhancements (#24989) (#25176)
  * Fix mobile navbar and misc cleanups (#25134) (#25169)
  * Fix bug for code search if code is disabled (#25173) (#25181)
  * Modify OAuth login ui and fix display name, iconurl related logic (#25030) (#25161)
  * Fix open redirect check for more cases (#25143) (#25154)
  * Update js dependencies (#25137) (#25151)
  * Remove incorrect element ID on "post-install" page (#25104) (#25129)
  * Improve notification icon and navbar  (#25111) (#25124)
  * Fix incorrect git ignore rule and add missing license files (#25135) (#25138)
  * Change branch name from master to main in some documents' links (#25126) (#25140)
  * Fix `MilestoneIDs` when querying issues (#25125) (#25141)
  * fix swagger documentation for multiple files API endpoint (#25110)
  * Fix webauthn regression and improve code (#25113)
  * Add details summary for vertical menus in settings to allow toggling (#25098)
  * Fix 500 error caused by notifications without an issue such as repo transfers (#25101)
  * Clean up WebAuthn javascript code and remove JQuery code (#22697)
  * Enable all webpack sourcemaps in dev build, disable all in prod build (#25089)
  * Don't display `select all issues` checkbox when no issues are available (#25086)
  * change placeholders in actions docs
  * change placeholders in actions docs
  * fix "Remove stars when repo goes private #19904" (#25084)
  * Introduce how to configure cache when starting a Runner with Docker (#25077)
  * Remove stars when repo goes private (#19904)
  * Use correct selector for hiding RSS icon link in the branch selector dropdown (#25080)
  * Fix parallelly generating index failure with Mysql (#24567)
  * Use git command instead of the ini package to remove the `origin` remote (#25066)
  * improve permission documentation (#23942)
  * Use RepositoryList instead of []*Repository (#25074)
  * Add ability to set multiple redirect URIs in OAuth application UI (#25072)
  * Add Progressbar to Milestone Page (#25050)
  * [skip ci] Updated licenses and gitignores
  * Redesign Scoped Access Tokens (#24767)
  * Use a separate admin page to show global stats, remove `actions` stat (#25062)
  * Remove cancel button from branch protection form (#25063)
  * Allow for PKCE flow without client secret + add docs (#25033)
  * Fix link to customizing-gitea (#25056)
  * GitLab migration: Sanitize response for reaction list (#25054)
  * Add up and down arrows to selected lookup repositories (#24727)
  * Show file tree by default (#25052)
  * Minor UI improvements: logo alignment, auth map editor, auth name display (#25043)
  * Refactor INI package (first step) (#25024)
  * [skip ci] Updated translations via Crowdin
  * Add button on diff header to copy file name, misc diff header tweaks (#24986)
  * Fix users cannot visit issue attachment bug (#25019)
  * Fix incorrect issuel filter menu style (#25018)
  * Update repo's default branch when adding new files in an empty one (#25017)
  * Rename NotifyPullReviewRequest to NotifyPullRequestReviewRequest (#24988)
  * Merge `new project` templates into one (#24985)
  * Add chinese documentations for `cran package registry` (#25012)
  * Remove the service worker (#25010)
  * Add user level action runners (#24995)
  * Update github.com/google/go-github to v52 (#24004)
  * various style fixes (#25008)
  * Add show timestamp/seconds and fullscreen options to action page (#24876)
  * Fix markdown link to awesome gitea (#25009)
  * Followup to pinned Issues (#24945)
  * revert the removed method to fix tmpl break on graph page (#25005)
  * Refactor diffFileInfo / DiffTreeStore  (#24998)
  * Fix delete user account modal (#25004)
  * Clean up github actions (#24984)
  * Remove unnecessary content on docs (#24976)
  * Upgrade snap to node 20 (#24990)
  * Display file mode for new file and file mode changes (#24966)
  * Enable `vue/html-closing-bracket-spacing` eslint rule (#24987)
  * Fix repo level project - edit column  (#24982)
  * Add v3.18 to TestPackageAlpine (#24972)
  * Fix admin config page error, use tests to cover the admin config and 500 error page (#24965)
  * Improve dropdown menus, remove inline styles (#24954)
  * Unify doc links to use paths relative to doc folder (#24979)
  * Rework button coloring, add focus and active colors (#24507)
  * Add PDF rendering via PDFObject (#24086)
  * Hide 'Mirror Settings' when unneeded, improve hints (#24433)
  * Consolidate the two review boxes into one (#24738)
  * API endpoint for changing/creating/deleting multiple files (#24887)
  * Repo list improvements, fix bold helper classes (#24935)
  * Add step start time to `ViewStepLog` (#24980)
  * Update from-binary.en-us.md (#24975)
  * Test query must have "order by" explicitly to avoid unstable results (#24963)
  * Help to recover from corrupted levelqueue (#24912)
  * [skip ci] Updated translations via Crowdin
  * Remove meta tags `theme-color` and `default-theme` (#24960)
  * Add dark mode to API Docs (#24971)
  * Update JS dependencies (#24969)
  * Replace Fomantic reset module with our own (#24948)
  * simple docs fixes: 'pull request' page (en-us & zh-tw) link path to 'issue-pull-request-templates' (#24961)
  * Remove reference to caddy v1 in docs (#24962)
  * Improve and fix bugs surrounding reactions (#24760)
  * Use `[git.config]` for reflog cleaning up (#24958)
  * Improve logger Pause handling (#24946)
  * Do not output "Trace" level logs from process manager by default (#24952)
  * Make the 500 page load themes (#24953)
  * [skip ci] Updated translations via Crowdin
  * docs: remove an extraneous whitespace (#24949)
  * Show `bot` label next to username when rendering autor link if the user is a bot (#24943)
  * Improve some Forms (#24878)
  * Improve queue and logger context (#24924)
  * Fix ref type error (#24941)
  * Use the type RefName for all the needed places and fix pull mirror sync bugs (#24634)
  * [skip ci] Updated translations via Crowdin
  * Add Link to Stars and Forks Page to Repo List (#24931)
  * Fix documentation ref (#24934)
  * Add Chinese docs for help, contribution and development (#24925)
  * Merge two translation contributing documents (#23939)
  * Add the ability to pin Issues (#24406)
  * Use `shared/issueicon` template in projects (#24922)
  * Allow skipping forks and mirrors from being indexed (#23187)
  * Add Chinese documentations for Actions (#24902)
  * `zh-cn` translation for usage docs (#24897)
  * Add chinese documentations for installation (#24904)
  * Improve RunMode / dev mode (#24886)
  * Add chinese documentations for `Packages` (#24914)
  * Rework notifications list (#24812)
  * New webhook trigger for receiving Pull Request review requests (#24481)
  * Use file filters action instead of Github's files filter (#24877)
  * Update Asciidoc markup example with safe defaults (#24920)
  * Add self to maintainers (#23644)
  * Create pull request for base after editing file, if not enabled on fork (#24841)
  * Reduce verbosity of dev commands (#24917)
  * Merge different languages for language stats (#24900)
  * Add missing test case and fix typo in tests (#24915)
  * Improve confusable character string (#24911)
  * Improve Actions CSS (#24864)
  * Fix <empty> in administration/config-cheat-sheet.en-us.md (#24905)
  * Only validate changed columns when update user (#24867)
  * Rename docs packages title from xxx Packages Repository -> xxx Package Registry (#24895)
  * Fix can’t move anymore items in repo project boards (#24892)
  * Make environment-to-ini  support loading key value from file (#24832)
  * `zh-cn` translation for administration docs (#24881)
  * Fix `@font-face` overrides (#24855)
  * Fix logger refactoring regression: manager logging add (#24847)
  * Remove publish docs CI workflow (#24889)
  * Fix double border and adjust width for user profile page (#24870)
  * Support changing git config through `app.ini`, use `diff.algorithm=histogram` by default (#24860)
  * Fix flakey test in logger test (#24883)
  * Run stylelint on .vue files (#24865)
  * Update `CONTRIBUTING.md` (#24492)
  * Do not call nil handler for a dummy queue (#24880)
  * Remove unnecessary usage prefix from doc titles (#24869)
  * Add API for Label templates (#24602)
  * Fix install page context, make the install page tests really test (#24858)
  * Add validations.required check to dropdown field (#24849)
  * Use Go 1.20 for next release (#24859)
  * Add gitea manager reload-templates command (#24843)
  * Remove `In your repositories` link in milestones dashboard (#24853)
  * Fix 500 error when select `No assignee` filter in issue list page (#24854)
  * Add IsErrRepoFilesAlreadyExist check when fork repo (#24678)
  * Fix missing yes/no in delete time log modal (#24851)
  * Fix document and improve comment (#24844)
  * Show new pull request button also on subdirectories and files (#24842)
  * Improvements for action detail page (#24718)
  * Add CRAN package registry (#22331)
  * Fix regression: access log template, gitea manager cli command (#24838)
  * Merge message template support for rebase without merge commit (#22669)
  * [skip ci] Updated licenses and gitignores
  * Support wildcard in email domain allow/block list (#24831)
  * Change `--font-weight-bold` to `--font-weight-semibold` and 600 value, introduce new font weight variables (#24827)
  * Rewrite logger system (#24726)
  * Support Copy Link for video attachments (#24833)
  * Fix video width overflow in markdown, and other changes to match img (#24834)
  * Improve accessibility when (re-)viewing files (#24817)
  * Refactor rename user and rename organization (#24052)
  * Use `CommentList` instead of `[]*Comment` (#24828)
  * Fix topics deleted via API not being deleted in org page (#24825)
  * Return `404` in the API if the requested webhooks were not found (#24823)
  * Decouple the different contexts from each other (#24786)
  * [skip ci] Updated translations via Crowdin
  * Add RTL rendering support to Markdown (#24816)
  * [skip ci] Updated translations via Crowdin
  * Update JS dependencies (#24815)
  * Fix duplicate tooltip hiding (#24814)
  * Mute repo names in dashboard repo list (#24811)
  * Rework label colors (#24790)
  * Fix max width and margin of comment box on conversation page (#24809)
  * Allow all URL schemes in Markdown links by default (#24805)
  * Some refactors for issues stats (#24793)
  * Implement actions artifacts (#22738)
  * Fix Actions being enabled accidentally (#24802)
  * Change `add_on` in `keys_ssh.tmpl` (#24803)
  * replace `drone exec` to `act_runner exec` in test README.md (#24791)
  * Fix OAuth loading state (#24788)
  * Remove duplicated issues options and some more refactors (#24787)
  * Revert "Mark `models/fixtures` as generated (#24775)" (#24782)
  * Remove background on user dashboard filter bar (#24779)
  * Enable two vue eslint rules (#24780)
  * Add two eslint plugins (#24776)
  * Mark `models/fixtures` as generated (#24775)
  * Fix TestMinioStorageIterator skip message (#24765)
  * Fix missed table name on iterate lfs meta objects (#24768)
  * Revert "Fix missed table name on iterate lfs meta objects" (#24764)
  * Make the color of zero-contribution-squares in the activity heatmap more subtle (#24758)
  * Fix missed table name on iterate lfs meta objects
  * Skip TestMinioStorageIterator on CI (#24762)
  * Support no label/assignee filter and batch clearing labels/assignees (#24707)
  * Support for status check pattern (#24633)
  * Updates to doc (#24757)
  * Ignore build for docs only (#24761)
  * Fix team members API endpoint pagination (#24754)
  * Make mailer SMTP check have timed context (#24751)
  * Add @garymoon to MAINTAINERS (#24752)
  * Skip TestRepoCommitsStatusParallel on CI (#24741)
  * Respect original content when creating secrets (#24745)
  * Remove meta charset from HTML5 documents (#24744)
  * Fix WEBP image copying (#24743)
  * Reorganize CSS files (#24739)
  * Don't run build and test if only docs changed (#24530)
  * [skip ci] Updated translations via Crowdin
  * Rework Oauth login buttons, swap github logo to monocolor (#24740)
  * Implement systemd-notify protocol (#21151)
  * Bump vm2 from 3.9.17 to 3.9.18 (#24742)
  * Refactor Pull Mirror and fix out-of-sync bugs (#24732)
  * Unification of registration fields order (#24737)
  * Switch to `@eslint-community/eslint-comments` (#24736)
  * Docs for creating a user to run Gitea on Fedora/RHEL/CentOS (#24725)
  * Update packages overview page (#24730)
  * Move actions as usage's subdirectory and update comparsion zh-cn version (#24719)
  * Document `redis-cluster` explicitly in config (#24717)
  * Don't filter action runs based on state (#24711)
  * Add Go package registry (#24687)
  * Fix flash of unstyled content in action view page (#24712)
  * Clean up various avatar dimensions (#24701)
  * Remove the parallelizing when loading repo for dashboard (#24705)
  * Optimize actions list by removing an unnecessary `git` call (#24710)
  * Update cron-translations.yml (#24708)
  * Fix run list broken when trigger user deleted (#24706)
  * Remove Fomantic comment module (#24703)
  * Update to Alpine 3.18 (#24700)
  * fix minio storage iterator path (#24691)
  * Add status indicator on main home screen for each repo (#24638)
  * Add test for api team orgnization (#24699)
  * Improve button-ghost, remove tertiary button (#24692)
  * Add icon support for safari (#24697)
  * Improve avatar uploading / resizing / compressing, remove Fomantic card module (#24653)
  * Fix docs documenting invalid `@every` for `OLDER_THAN` cron settings (#24695)
  * Fix `organization` field being `null` in `GET /api/v1/teams/{id}` (#24694)
  * Use standard HTTP library to serve files (#24693)
  * Add `eslint-plugin-eslint-comments` (#24690)
  * Add `eslint-plugin-wc` (#24689)
  * Add Alpine package registry (#23714)
  * Only hide tooltip tippy instances (#24688)
  * Update JS dependencies (#24685)
  * Rename ".button-link" to ".button-ghost" (#24670)
  * Make testlogger output "TestLogger" prefix (#24683)
  * Support migrating storage for actions log via command line (#24679)
  * Add markdown preview to Submit Review Textarea (#24672)
  * Remove svg.svg class, restore .rss-icon (#24667)
  * Support SSH for go get (#24664)
  * Display owner of a runner as a tooltip instead of static text (#24377)
  * Remove highlight in repo list (#24675)
  * Update pin and add pin-slash (#24669)
  * Improve empty notifications display (#24668)
  * GitHub Actions cleanups (#24620)
  * Fix issues list page multiple selection update milestones (#24660)
  * Make repo migration cancelable and fix various bugs (#24605)
  * Improve queue & process & stacktrace (#24636)
  * Fix missing badges in org settings page (#24654)
  * Only show one tippy at a time (#24648)
  * Reenable creating default webhooks. (#24626)
  * Kd/fix redis unit test (#24650)
  * Fix typo in act-runner file (#24652)
  * RSS icon fixes (#24476)
  * Notification list enhancements, fix striped tables on dark theme (#24639)
  * Improve "goto issue by number" button (#24577)
  * Increase default LFS auth timeout from 20m to 24h (#24628)
  * Fix typo in the swift package documentation (#24637)
  * Fix broken links in documents (#24630)
  * Improve updating Actions tasks (#24600)
  * Modify luminance calculation and extract related functions into single files (#24586)
  * Do not send "registration success email" for external auth sources (#24632)
  * Fix typo in Actions demo file (#24631)
  * Review fixes and enhancements (#24526)
  * Remove fluid on compare diff page (#24627)
  * Make the actions control button look like an actual button (#24611)
  * Add a tooltip to the job rerun button (#24617)
  * Improve reverse-proxy document and fix nginx config bug (#24616)
  * Remove unnecessary code (#24610)
  * Fix commits pushed with deploy keys not shown in dashboard (#24521)
  * fix: release page for empty or non-existing target (#24470)
  * Filter get single commit (#24613)
  * Attach a tooltip to the action status icon (#24614)
  * Use official Vue extension in Gitpod (#24609)
  * Create a branch directly from commit on the create branch API (#22956)
  * Make repository response support HTTP range request (#24592)
  * Add Gitea Profile Readmes (#23260)
  * Make diff view full width again (#24598)
  * Add permission check for moving issue action in project view page (#24589)
  * Update JS dependencies, add new eslint rules (#24597)
  * Filters for GetAllCommits (#24568)
  * [skip ci] Updated translations via Crowdin
  * Attach a tooltip to the action control button (#24595)
  * Improve Gitea's web context, decouple "issue template" code into service package (#24590)
  * Support markdown editor for issue template (#24400)
  * Do not select line numbers when selecting text from the action run logs (#24594)
  * In TestViewRepo2, convert computed timezones to local time (#24579)
  * Fix close org projects (#24588)
  * Rewrite queue (#24505)
  * Split "modules/context.go" to separate files (#24569)
  * Pass 'not' to commit count (#24473)
  * Refresh the refernce of the closed PR when reopening (#24231)
  * Fix broken link in tests/e2e/README (#24576)
  * [skip ci] Updated licenses and gitignores
  * Add goto issue id function (#24479)
  * Improve decryption failure message (#24573)
  * Simplify template helper functions (#24570)
  * Makefile: Use portable !, not GNUish -not, with find(1). (#24565)
  * Add org visibility label to non-organization's dashboard (#24558)
  * Sort users and orgs on explore by recency by default (#24279)
  * Change `add_on` translation to `added_on` and include placeholder for the date (#24562)
  * Change `valid_until` translation to `valid_until_date` and include placeholder for the date (#24563)
  * Fix docs failing the build on `main` (#24561)
  * Improve wiki user title test (#24559)
  * Fix incorrect user visibility (#24557)
  * Change `join_on` translation to `joined_on` and include placeholder for the date (#24550)
  * Require at least one unit to be enabled (#24189)
  * Fix broken `README` link (#24546)
  * Check latest version on CI (#24556)
  * Add RPM registry (#23380)
  * Docs for Gitea Actions (#24405)
  * Update LDAP filters to include both username and email address (#24547)
  * Temporarily disable PATs until next release (#24527)
  * Replace placeholders in licenses (#24354)
  * Fix the permission of team's `Actions` unit issue (#24536)
  * Bump golang deps (#24533)
  * Fix mirrors repository disapeared on user dashboard (#24520)
  * Revert "Prevent a user with a different email from accepting the team invite" (#24531)
  * Fix form method/class (#24535)
  * Fix typo in rename branch dialog (#24537)
  * Check length of `LogIndexes` in case it is outdated (#24516)
  * Harmonize title formatting in `docs/content/doc/development/api-usage.en-us.md` (#24529)
  * automate locking closed threads (#24525)
  * [skip ci] Updated translations via Crowdin
  * Display warning when user try to rename default branch (#24512)
  * Upgrade to Node 20 on CI, enable actions cancellation (#24524)
  * Fix incorrectly quoted translation (#24514)
  * Fix color for transfer related buttons when having no permission to act (#24510)
  * Fix some mistakes when using `ignSignIn` (#24415)
  * Remove unused zapx replace statement on go.mod (#24515)
  * Don't display creating page button in a mirror wiki repository (#24395)
  * Improve template system and panic recovery (#24461)
  * Faster git.GetDivergingCommits (#24482)
  * Merge setting.InitXXX into one function with options (#24389)
  * Changelog for 1.19.3 (#24495) (#24506)
  * Use Actions for DB & E2E tests (#24494)
  * Fix intermittent CI failure in EmptyQueue (#23753)
  * Prevent a user with a different email from accepting the team invite (#24491)
  * Fix incorrect webhook time and use relative-time to display it (#24477)
  * Make Issue/PR/projects more compact, misc CSS tweaks (#24459)
  * Implement Cargo HTTP index (#24452)
  * Clean up polluted styles and remove dead CSS code (#24497)
  * Improve pull request merge box when pull request merged and branch deleted. (#24397)
  * Fix EasyMDE toolbar (#24489)
  * Enhance stylelint rule config, remove dead CSS (#24472)
  * Fix api error message if fork exists (#24487)
  * Add ntlm authentication support for mail (#23811)
  * Fix test delivery button in repo webhook settings page (#24478)
  * Add Debian package registry (#24426)
  * Enable whitespace rendering on selection in Monaco (#24444)
  * Replace `N/A` with `-` everywhere (#24474)
  * Fix invite display (#24447)
  * [skip ci] Updated translations via Crowdin
  * replace PR docker dry run in drone with Actions (#24475)
  * correct env vars
  * nightly image tag for releases
  * Remove `font-awesome` and fomantic `icon` module (#24471)
  * Improve "new-menu" (#24465)
  * Remove fomantic breadcrumb module (#24463)
  * Add rerun workflow button and refactor to use SVG octicons (#24350)
  * Remove .lgtm and reference to old bot (#24464)
  * Remove unnecessary g-menu-stackable-scrollable (#24462)
  * Replace remaining fontawesome dropdown icons with SVG (#24455)
  * Move links out of translation (#24446)
  * target correct conditional
  * [skip ci] Updated licenses and gitignores
  * Set stop_on_error (#24453)
  * Remove all direct references to font-awesome (#24448)
  * Add `ui-monospace` and `SF Mono` to `--fonts-monospace` (#24442)
  * Fix incorrect CurrentUser check for docker rootless (#24441)
  * Fix config list overflow and layout (#24312)
  * Move docs pipelines to use Actions (#24434)
  * Improve issue list filter (#24425)
  * Move `Rename branch` from repo settings page to the page of branches list (#24380)
  * Improve milestone filter on issues page (#22423)
  * Use globally shared HTMLRender (#24436)
  * Rework header bar on issue, pull requests and milestone (#24420)
  * [skip ci] Updated translations via Crowdin
  * Remove unused setting `time.FORMAT` (#24430)
  * Fix user-cards format (#24428)
  * Add follow organization and fix the logic of following page (#24345)
  * Add "Updated" column for admin repositories list (#24429)
  * Add ability to specify '--not' from GetAllCommits (#24409)
  * Improve template helper (#24417)
  * Start cleaning the messy ".ui.left / .ui.right", improve label list page, fix stackable menu (#24393)
  * Improve protected branch setting page (#24379)
  * Skip known flaky `queue` tests on CI environment (#24419)
  * getting the tag list does not require being signed in (#24413)
  * Add integration test for API raw content reference formats (#24388)
  * [skip ci] Updated translations via Crowdin
  * Revert "Add Debian package registry" (#24412)
  * Add Debian package registry (#22854)
  * Make repo size style matches others (commits/branches/tags) (#24408)
  * Override alias template to preserve anchor fragment (#24394)
  * Changelog 1.19.2 (#24365) (#24403)
  * Improve commit date in commit graph (#24399)
  * Fix unclear `IsRepositoryExist` logic (#24374)
  * Ensure final newline in `assets/go-licenses.json` (#24407)
  * More detailed branch delete message (#22696)
  * Refactor docs (#23752)
  * Fix layouts of admin table / adapt repo / email test  (#24370)
  * Move secrets and runners settings to actions settings (#24200)
  * Gitea Actions add `base_ref`, `head_ref`, `api_url`, `ref_type` fields (#24356)
  * Fix auth check bug (#24382)
  * Display 'Unknown' when runner.version is empty (#24378)
  * Fix incorrect last online time in runner_edit.tmpl (#24376)
  * Refactor "route" related code, fix Safari cookie bug (#24330)
  * Add custom helm repo name generated from url (#24363)
  * Add API for gitignore templates (#22783)
  * Add eslint-plugin-regexp (#24361)
  * Support uploading file to empty repo by API (#24357)
  * [skip ci] Updated translations via Crowdin
  * Require repo scope for PATs for private repos and basic authentication (#24362)
  * Alert error message if open dependencies are included in the issues that try to batch close (#24329)
  * Fix 404 error when leaving the last private org team (#24322)
  * Modify width of ui container, fine tune css for settings pages and org header (#24315)
  * Add .livemd as a markdown extension (#22730)
  * Display when a repo was archived (#22664)
  * Fix wrong error info in RepoRefForAPI (#24344)
  * Add missed column title in runner management page (#24328)
  * Remove unnecessary helper function `DateFmtLong` (#24343)
  * Add API for License templates (#23009)
  * Fix Monaco IOS keyboard button (#24341)
  * Don't set meta `theme-color` by default (#24340)
  * Fix runner button height (#24338)
  * Fix broken clone script on an empty archived repo (#24339)
  * Improve RSS (#24335)
  * Automatically select the org when click create repo from org dashboard (#24325)
  * on schedule
  * on schedule
  * switch to use Actions from drone for cron (#24314)
  * [skip ci] Updated translations via Crowdin
  * Restore bold on repolist (#24337)
  * Fix template function DateTime (#24317)
  * Fix incorrect CORS response in Http Git handler (#24303)
  * Updated upgrade script that is informing user that Gitea service has to be running in order to upgrade it (#24260)
  * Add tags list for repos whose release setting is disabled (#23465)
  * Refactor config provider (#24245)
  * Add RSS Feeds for branches and files (#22719)
  * Make SVG in dropdown menu have the same margin-right as IMG (#24316)
  * Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035)
  * default show closed actions list if all actions was closed (#24234)
  * [skip ci] Updated translations via Crowdin
  * update nightly drone docker tag (#24311)
  * Remove org users who belong to no teams (#24247)
  * Fix typo in API route (#24310)
  * Add --font-weight-bold and set previous bold to 601 (#24307)
  * Mark `/templates/swagger/v1_json.tmpl` as generated file (#24306)
  * Improve External Wiki in Repo Header (#24304)
  * Unify nightly naming across binaries and docker images (#24116)
  * Wrap too long push mirror addresses (#21120)
  * Improve some modal action buttons (#24289)
  * Enable forbidigo linter (#24278)
  * Fix no edit/close/delete button in org repo project view page  (#24301)
  * Replace whitespace inside template parens during make fmt (#24293)
  * Upgrade act  (#24298)
  * [skip ci] Updated translations via Crowdin
  * Add all `no-query` rules to eslint config (#24294)
  * Fix bug when deleting wiki with no code write permission (#24274)
  * Move code from module to service (#24287)
  * Add comments for Manually Merged feature (#24291)
  * Allow using localized absolute date times within phrases with place holders and localize issue due date events (#24275)
  * Handle canceled workflow as a warning instead of a fail (#24282)
  * Tweak pull request branch delete ui (#23951)
  * Restore air delay of 1000ms (#24290)
  * Load reviewer for comments when dismissing a review (#24281)
  * Set type="password" on all auth_token fields (#22175)
  * Only delete secrets belonging to its owner (#24284)
  * Fix inconsistent wiki path converting. (#24277)
  * Change to vertical navbar layout for secondary navbar for repo/user/admin settings  (#24246)
  * Refactor delete_modal_actions template and use it for project column related actions (#24097)
  * update upgrade script to use new CDN (#24280)
  * show workflow config error on file view also (#24267)
  * Add missing badges in user profile for /projects and /packages (#24232)
  * [skip ci] Updated translations via Crowdin
  * Refactor `setting.Other` and remove unused `SHOW_FOOTER_BRANDING` (#24270)
  * Use more specific test methods (#24265)
  * Support upload `outputs` and use `needs` context on Actions (#24230)
  * Update go tool dependencies, restructure lint targets (#24239)
  * Improve template helper functions: string/slice (#24266)
  * Add `DumpVar` helper function to help debugging templates (#24262)
  * Improve emoji and mention matching (#24255)
  * Remove git sample files and ignore them (#24271)
  * Fix footer display (#24251)
  * [skip ci] Updated translations via Crowdin
  * Limit avatar upload to valid image files (#24258)
  * Add project type descriptions in issue badge and improve project icons (#23437)
  * Improve test logger (#24235)
  * Allow `webp` images as avatars (#24248)
  * Show commit history for closed/merged PRs (#24238)
  * Fix access token issue on some public endpoints (#24194)
  * Fix comment for EmailNotificationsAndYourOwn constant (#24236)
  * Apply to become maintainer (#24254)
  * Fix label color, fix divider in dropdown (#24215)
  * [skip ci] Updated translations via Crowdin
  * Refactor web route (#24080)
  * Fix unclear "Owner" concept (#24233)
  * Introduce eslint-plugin-no-jquery/no-event-shorthand (#24198)
  * Use secondary pointing menu for tabs on user/organization home page (#24162)
  * Make HTML template functions support context (#24056)
  * Fix issue attachment handling (#24202)
  * Update JS dependencies (#24218)
  * Remove most path-based golangci exclusions (#24214)
  * [skip ci] Updated translations via Crowdin
  * Fix internal sever error when visiting a PR that bound to the deleted team (#24127)
  * Add owner team permission check test (#24096)
  * Fix incorrect CORS default values (#24206)
  * Add repository counter badge to repository tab (#24205)
  * Fix template error in pull request with deleted head repo (#24192)
  * Make wiki title supports dashes and improve wiki name related features (#24143)
  * Fix Resolve Conversation not working in Conversation view (#24191)
  * Vertical widths of containers removed (#24184)
  * Don't list root repository on compare page if pulls not allowed (#24183)
  * Add unset default project column (#23531)
  * Allow adding new files to an empty repo (#24164)
  * Add runner check in repo action page (#24124)
  * Use same action status svg icons on actions list as on action page (#24178)
  * [skip ci] Updated translations via Crowdin
  * fix calReleaseNumCommitsBehind (#24148)
  * Mark `public/img/svg/*.svg` as generated files (#24193)
  * Make mention autocomplete case insensitive in new markdown editor (#24190)
  * Fix duplicate modals when clicking on "remove all" repository button (#24129)
  * Bump GitHub's `relative-time-element` to `v4.3.0` (#24187)
  * Fix wrong scopes of locale.PrettyNumber (#24181)
  * Fix incorrect internal response type (#24173)
  * zh-cn support on doc pages (#24166)
  * [skip ci] Updated translations via Crowdin
  * Use double quotes consistently in en-US (#24141)
  * Use correct locale key for forks page (#24172)
  * Improve Wiki TOC (#24137)
  * Localize activity heatmap (except tooltip) (#24131)
  * Support triggering workflows by wiki related events (#24119)
  * add CLI command to register runner tokens (#23762)
  * Add new user types `reserved`, `bot`, and `remote` (#24026)
  * Fix Org edit page bugs: renaming detection, maxlength (#24161)
  * Make HAS_GO a simply expanded variable (#24169)
  * Support converting varchar to nvarchar for mssql database (#24105)
  * Fix math and mermaid rendering bugs (#24049)
  * Refactor locale number (#24134)
  * [skip ci] Updated translations via Crowdin
  * Use 1.18's aria role for dropdown menus (#24144)
  * Set EasyMDE heading font-size to the same size as the resulting markdown (#24151)
  * Fix 2-dot direct compare to use the right base commit (#24133)
  * Add migration to fix external unit access mode of owner/admin team (#24117)
  * Remove untranslatable `on_date` key (#24106)
  * [skip ci] Updated translations via Crowdin
  * Sort repo topic labels by name (#24123)
  * Add option to search for users is active join a team (#24093)
  * Make more functions use ctx instead of db.DefaultContext (#24068)
  * Fix meilisearch not working when searching across multiple repositories (#24109)
  * Show friendly 500 error page to users and developers (#24110)
  * Fix incorrect server error content in RunnersList (#24118)
  * [skip ci] Updated translations via Crowdin
  * Improve git log for debugging (#24095)
  * Update redis library to support redis v7 (#24114)
  * Refactor cookie (#24107)
  * Fix admin team access mode value in team_unit table (#24012)
  * Add monospace toggle button to textarea (#24034)
  * Correct the access log format (#24085)
  * Changelog v1.19.1 (#24079) (#24092)
  * [skip ci] Updated translations via Crowdin
  * Bump vm2 from 3.9.15 to 3.9.16 (#24089)
  * Fix difficult translation for other languages (#24070)
  * Fix mismatch between hook events and github event types (#24048)
  * Improve LFS error logs (#24072)
  * Update the value of the `diffEnd` when click `Show More` btn in the DiffFileTree (#24069)
  * Add tooltips to `Hide comment type` settings where necessary (#21306)
  * Use a general approach to access custom/static/builtin assets (#24022)
  * Make Release Download URLs predictable (#23891)
  * Expand selected file when clicking file tree (#24041)
  * Localize milestone related time strings (#24051)
  * update BSDmakefile to latest version from upstream (#24063)
  * Add popup to hashed comments/pull requests/issues in file editing/adding preview tab (#24040)
  * Use reactive store to share data between components (#23996)
  * [skip ci] Updated translations via Crowdin
  * Fix accidental overwriting of LDAP team memberships (#24050)
  * Add cardtype to org/user level project on creation, edit and view (#24043)
  * Fix branch protection priority (#24045)
  * Update documentation to explain which projects allow Gitea to host static pages (#23993)
  * Fix date  display bug (#24047)
  * Fine tune markdown editor toolbar (#24046)
  * Add tooltips for MD editor buttons and add `muted` class for buttons (#23896)
  * Prefer native parser for SSH public key parsing (#23798)
  * Avoid recursing into sub-sub-sub-docs folders when looking for READMEs. (#23695)
  * [skip ci] Updated translations via Crowdin
  * Use auto-updating, natively hoverable, localized time elements (#23988)
  * Reserve ".png" suffix for user/org names (#23992)
  * Allow adding SSH keys even if SSH server is disabled (#24025)
  * Add placeholder and aria attributes to release and wiki edit page (#24031)
  * Add --quiet option to gitea dump (#22969)
  * Remove "inverted" class on creating new label and cancel buttons (#24030)
  * Use actions job link as commit status URL instead of run link (#24023)
  * Make label templates have consistent behavior and priority (#23749)
  * Add actions support to package auth verification (#23729)
  * Fix protected branch for API (#24013)
  * [skip ci] Updated translations via Crowdin
  * Fix markdownlint (#24024)
  * Introduce lint-md and compliance-docs pipeline (#24021)
  * Fix https setup doc zh-cn (#24015)
  * Replace tribute with text-expander-element for textarea (#23985)
  * Improve GetBoards and getDefaultBoard (#22981)
  * Expand/Collapse all changed files (#23639)
  * Show errors for KaTeX and mermaid on the preview tab (#24009)
  * Show protected branch rule names again (#23907)
  * Reference the `zh-CN` version of `reverse-proxies` in `https-support` (#24016)
  * Fix lint problem in `https-support.zh-cn.md` (#24014)
  * docs: HTTPS configuration for zh-cn (#23039)
  * Re-add initial wiki page text when editing the page (#23984)
  * [skip ci] Updated translations via Crowdin
  * fix: do not escape space between PyPI repository url and package name… (#23981)
  * Make bindata static build parse builtin templates correctly (#24003)
  * Group template helper functions, remove `Printf`, improve template error messages (#23982)
  * Adjust sticky pr header to cover background (#23956)
  * Update github.com/google/go-github to v51 (#23946)
  * Show visibility status of email in own profile (#23900)
  * Add eslint-plugin-custom-elements (#23991)
  * Fix redirect bug when creating issue from a project (#23971)
  * Drop "unrolled/render" package (#23965)
  * Bump vm2 from 3.9.14 to 3.9.15 (#23990)
  * Add job.duration in web ui (#23963)
  * Fix markup background, improve wiki rendering (#23750)
  * Set `ref` to fully-formed of the tag when trigger event is `release` (#23944)
  * Remove docs from automatically building in Gitpod (#23978)
  * Discolor pull request tab labels (#23950)
  * Highlight selected file in the PR file tree (#23947)
  * Improve markdown editor: width, height, preferred (#23895)
  * Use Get/Set instead of Rename when Regenerate session id (#23975)
  * Allow repo admins too to delete the repo (#23940)
  * Merge template functions "dict/Dict/mergeinto" (#23932)
  * Use a general Eval function for expressions in templates. (#23927)
  * Do not crash when parsing an invalid workflow file  (#23972)
  * Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874)
  * Ensure RSS icon is present on all repo tabs (#23904)
  * Clean template/helper.go (#23922)
  * Remove `Repository.getFilesChanged` to fix Actions `paths` and `paths-ignore` filter (#23920)
  * Hardcode path to docker images (#23955)
  * Title can be empty when creating tag only (#23917)
  * Actions: Use default branch as ref when a branch/tag delete occurs (#23910)
  * Refactor authors dropdown (send get request from frontend to avoid long wait time) (#23890)
  * [skip ci] Updated translations via Crowdin
  * Merge `push to create`, `open PR from push`, and `push options` docs articles into one (#23744)
  * Delete deleted release attachments immediately from storage (#23913)
  * More specific and unique feed name for NuGet install command template. (#23889)
  * Treat PRs with agit flow as fork PRs when triggering actions. (#23884)
  * Use graceful editorconfig loader to reduce errors when loading malformed editorconfigs (#21257)
  * Remove -v from vulncheck (#23953)
  * Improve permission check of packages (#23879)
  * Adjust some documentations titles (#23941)
  * [skip ci] Updated translations via Crowdin
  * Update eslints for Vue 3 (#23935)
  * Fix image border-radius (#23886)
  * [skip ci] Updated translations via Crowdin
  * Scroll collapsed file into view (#23702)
  * docs: make the required backticks in email password more explicit (#23923)
  * docs: fix typo (#23924)
  * Update docs markdown file weight to make it clear (#23909)
  * Add activity feeds API (#23494)
  * Fix code view (diff) broken layout (#23096)
  * Use ghost user if package creator does not exist (#23822)
  * Org pages style fixes (#23901)
  * User/Org Feed render description as per web (#23887)
  * Use User.ID instead of User.Name in ActivityPub API for Person IRI (#23823)
  * Remove fomantic ".link" selector and styles (#23888)
  * [skip ci] Updated translations via Crowdin
  * Fix `cases.Title` crash for concurrency (#23885)
  * Disable editing tags (#23883)
  * Fix user profile description rendering (#23882)
  * Introduce GiteaLocaleNumber custom element to handle number localization on pages. (#23861)
  * Convert .Source.SkipVerify to $cfg.SkipVerify (#23839)
  * Fix review box viewport overflow issue (#23800)
  * Fix owner team access mode value in team_unit table (#23675)
  * Fix submit button won't refresh in New Repository Fork page (#22994)
  * Introduce GitHub markdown editor, keep EasyMDE as fallback (#23876)
  * Improve LoadUnitConfig to handle invalid or duplicate units (#23736)
  * Append `(comment)` when a link points at a comment rather than the whole issue (#23734)
  * Rename actions unit to `repo.actions` and add docs for it (#23733)
  * Try to catch more broken translations (#23867)
  * [skip ci] Updated translations via Crowdin
  * Update JS deps (#23853)
  * Added close/open button to details page of milestone (#23877)
  * Check `IsActionsToken` for LFS authentication (#23841)
  * Prefill input values in oauth settings as intended (#23829)
  * Display image size for multiarch container images (#23821)
  * Use clippie module to copy to clipboard (#23801)
  * Remove assertion debug code for show/hide refactoring (#23576)
  * [skip ci] Updated translations via Crowdin
  * Remove jQuery ready usage (#23858)
  * Fix JS error when changing PR's target branch (#23862)
  * Improve action log display with control chars (#23820)
  * Fix review conversation reply (#23846)
  * Improve home page template, fix Sort dropdown menu flash (#23856)
  * Make first section on home page full width (#23854)
  * [skip ci] Updated translations via Crowdin
  * Fix incorrect CORS failure detection logic (#23844)
  * Fix 500 error if there is a name conflict when edit authentication source (#23832)
  * Use different SVG for pending and running actions (#23836)
  * CSS color tweaks (#23828)
  * Clarify Gitea/Crowdin locale behaviors, add tests for LocaleStore, fix some strings with semicolons (#23819)
  * [skip ci] Updated translations via Crowdin
  * Fix dropdown direction behavior (#23806)
  * Fix incorrect/Improve error handle in edit user page (#23805)
  * Fix "Updating branch by merge" bug in "update_branch_by_merge.tmpl" (#23790)
  * Fix incorrect visibility dropdown list in add/edit user page (#23804)
  * Convert issue list checkboxes to native (#23596)
  * Fix checks for `needs` in Actions (#23789)
  * Diff improvements (#23553)
  * [Patch] Fix closed PR also triggers Webhooks and actions (#23782)
  * Improve backport-locales.go (#23807)
  * [skip ci] Updated translations via Crowdin
  * Refactor commit status for Actions jobs (#23786)
  * Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766)
  * Don't apply the group filter when listing LDAP group membership if it is empty (#23745)
  * Refactor internal API for git commands, use meaningful messages instead of "Internal Server Error" (#23687)
  * Add CSS rules for basic colored labels (#23774)
  * Add meilisearch support (#23136)
  * Add missing translation for `actions.runners.reset_registration_token_success` (#23732)
  * [skip ci] Updated translations via Crowdin
  * Implement Issue Config (#20956)
  * Set repository link based on the url in package.json for npm packages (#20379)
  * Add API to manage issue dependencies (#17935)
  * Add creation time in tag list page (#23693)
  * Make minio package support legacy MD5 checksum (#23768)
  * Yarden Shoham has a new email address (#23767)
  * fix br display for packages curls (#23737)
  * Fix issue due date edit toggle bug (#23723)
  * Fix profile page email display, respect settings (#23747)
  * Update Gitea version in docs (#23755)
  * Fix SVG close tag, improve commit graph page UI alignment (#23751)
  * Remove incorrect HTML self close tag (#23748)
  * Refactor repo commit list (#23690)
  * Fix tags view (#23243)
  * Add commit info in action page (#23210)
  * Use GitHub Actions compatible globbing for `branches`, `tag`, `path` filter (#22804)
  * Fix project card preview select and template select (#23684)
  * [skip ci] Updated translations via Crowdin
  * Add git dashes separator to some "log" and "diff" commands (#23606)
  * Add Simplified Chinese translate for oauth2-provider (#23713)
  * Fix incorrect `toggle` buttons (#23676)
  * Fine tune more downdrop settings, use SVG for labels, improve Repo Topic Edit form (#23626)
  * Allow new file and edit file preview if it has editable extension (#23624)
  * [skip ci] Updated translations via Crowdin
  * Clean some legacy files and move some build files (#23699)
  * Remove row clicking from notification table (#22695)
  * Describe Gitea's purpose more accurately (#23698)
  * [skip ci] Updated translations via Crowdin
  * ensure go/bin path exists when copying hugo bin into it (#23692)
  * Create commit status when event is `pull_request_sync` (#23683)
  * Add `deps-docs` command to makefile (#23686)
  * Fix incorrect package doc link (#23679)
  * Improve indices for `action` table (#23532)
  * Clarify that Gitea requires JavaScript (#23677)
  * Use data-tooltip-content for tippy tooltip (#23649)
  * Add aria attributes to interactive time tooltips. (#23661)
  * Fix cancel button in the page of project edit not work (#23655)
  * Fix long project name display in issue list and in related dropdown  (#23653)
  * Editor preview support for external renderers (#23333)
  * Fix incorrect `HookEventType` of pull request review comments (#23650)
  * [skip ci] Updated translations via Crowdin
  * Fix codeblocks in the cheat sheet (#23664)
  * Drop migration for ForeignReference (#23605)
  * Fix new issue/pull request btn margin when it is next to sort (#23647)
  * A tool to help to backport locales, changes source strings to fix other broken translations (#23633)
  * Fix incorrect `show-modal` and `show-panel` class (#23660)
  * Restructure documentation. Now the documentation has installation, administration, usage, development, contributing the 5 main parts (#23629)
  * Check LFS/Packages settings in dump and doctor command (#23631)
  * Use a general approach to show tooltip, fix temporary tooltip bug (#23574)
  * Improve workflow event triggers (#23613)
  * Improve `<SvgIcon>` to make it output `svg` node and optimize performance (#23570)
  * [skip ci] Updated translations via Crowdin
  * Add extra features to product comparison (#23638)
  * Use a general approch to improve a11y for all checkboxes and dropdowns. (#23542)
  * [skip ci] Updated translations via Crowdin
  * Update PR documentation (#23620)
  * Set opaque background on markup and images (#23578)
  * Decouple the issue-template code from comment_tab.tmpl  (#23556)
  * Remove `id="comment-form"` dead code, fix tag (#23555)
  * Introduce path Clean/Join helper functions (#23495)
  * Remove conflicting CSS rules on notifications, improve notifications table (#23565)
  * Remove @metalmatze as maintainer (#23612)
  * Keep (add if not existing) xmlns attribute for generated SVG images (#23410)
  * Replace a few fontawesome icons with svg (#23602)
  * Fix pagination on `/notifications/watching` (#23564)
  * Fix `.locale.Tr` function not found in delete modal (#23468)
  * fix submodule is nil panic (#23588)
  * `Publish Review` buttons should indicate why they are disabled (#23598)
  * Improve template error reporting (#23396)
  * Polyfill the window.customElements (#23592)
  * Add CHANGELOG for 1.19.0 (#23583)
  * Display the version of runner in the runner list (#23490)
  * Add `.patch` to `attachment.ALLOWED_TYPES` (#23580)
  * Sort Python package descriptors by version to mimic PyPI format (#23550)
  * Use `project.IconName` instead of repeated unreadable `if-else` chains (#23538)
  * Match api migration behavior to web behavior (#23552)
  * Fix dropdown icon misalignment when using fomantic icon (#23558)
  * Enable color for consistency checks diffs (#23563)
  * [skip ci] Updated translations via Crowdin
  * Fix sticky header in diff view (#23554)
  * Fix some broken css (#23560)
  * Fix JS error on compare page (#23551)
  * Upgrade to npm lockfile v3 and explicitely set it (#23561)
  * Fix long name ui issues and label ui issue  (#23541)
  * Remove worker-loader (#23548)
  * [skip ci] Updated translations via Crowdin
  * Return `repository` in npm package metadata endpoint (#23539)
  * Fix diff detail buttons wrapping, use tippy for review box (#23271)
  * Do not store user projects as organization projects (#23353)
  * Imrove scroll behavior to hash issuecomment(scroll position, auto expand if file is folded, and on refreshing) (#23513)
  * Increase horizontal page padding (#23507)
  * Update JS dependencies, Require Node.js 16 (#23528)
  * Use octicon-verified for gpg signatures (#23529)
  * Remove stars in dashboard repo list (#23530)
  * Use `<nav>` instead of `<div>` in the global navbar (#23125)
  * Fix aria.js bugs: incorrect role element problem, mobile focus problem, tippy problem (#23450)
  * [skip ci] Updated translations via Crowdin
  * Make time tooltips interactive (#23526)
  * Update mini-css-extract-plugin, remove postcss (#23520)
  * Fix review comment context menu clipped bug (#23523)
  * Add absent repounits to create/edit repo API (#23500)
  * Fix tags sort by creation time (descending) on branch/tag dropdowns  (#23491)
  * Allow both fullname and username search when `DEFAULT_SHOW_FULL_NAME` is true (#23463)
  * Handle files starting with colons in WalkGitLog (#22935)
  * Change `Close` to either `Close issue` or `Close pull request` (#23506)
  * Update act (#23512)
  * Move pidfile creation from setting to web cmd package (#23285)
  * [skip ci] Updated translations via Crowdin
  * Replace `repo.namedBlob` by `git.TreeEntry`. (#22898)
  * Fix theme-auto loading (#23504)
  * Update path to docs theme file (#23502)
  * Use arm image for arm runner (#23503)
  * Add login name and source id for admin user searching API (#23376)
  * Fix missed migration in #22235 (#23482)
  * Disable sending email after push a commit to a closed PR (#23462)
  * Bump webpack from 5.75.0 to 5.76.0 (#23484)
  * Replace Less with CSS (#23481)
  * Fix 'View File' button in code search (#23478)
  * Use `gitea/test_env` image instead of `golang` (#23455)
  * Skip DB tests duplicate runs on push to branches (#23476)
  * Update app.example.ini (#23480)
  * [skip ci] Updated translations via Crowdin
  * Fix due date being wrong on issue list (#23475)
  * test_env: hardcode major go version in use (#23464)
  * Push option bonus for PTC docs (#23473)
  * Lint Markdown pass
  * Push to create docs (#23458)
  * Convert GitHub event on actions and fix some pull_request events. (#23037)
  * Remove wrongly added column on migration test fixtures (#23456)
  * Refactor branch/tag selector to Vue SFC (#23421)
  * add admin API email endpoints (#22792)
  * add user rename endpoint to admin api (#22789)
  * Add workflow error notification in ui (#23404)
  * Make branches list page operations remember current page (#23420)
  * fix markdown lint issue (#23457)
  * Refactor dashboard repo list to Vue SFC (#23405)
  * Update localization.zh-cn.md (#23448)
  * Convert `<div class="button">` to `<button class="button">` (#23337)
  * [skip ci] Updated translations via Crowdin
  * Add package registry architecture overview (#23445)
  * Handle missing `README` in create repos API (#23387)
  * Fix missing commit status in PR which from forked repo (#23351)
  * Add Swift package registry (#22404)
  * Purge API comment (#23451)
  * Use context for `RepositoryList.LoadAttributes` (#23435)
  * add path prefix to ObjectStorage.Iterator (#23332)
  * Support reflogs (#22451)
  * Fix actions frontend bugs (pagination, long name alignment) and small simplify (#23370)
  * Scoped label display and documentation tweaks (#23430)
  * Deduplicate template code for label selection menu (#23431)
  * Show edit/close/delete button on organization wide repositories (#23388)
  * Sync the class change of Edit Column Button to JS code (#23400)
  * Preserve file size when creating attachments (#23406)
  * [skip ci] Updated translations via Crowdin
  * Use buildkit for docker builds (#23415)
  * Refactor branch/tag selector dropdown (first step) (#23394)
  * [skip ci] Updated translations via Crowdin
  * Hide target selector if tag exists when creating new release (#23171)
  * Parse external request id from request headers, and print it in access log (#22906)
  * Add missing tabs to org projects page (#22705)
  * Add user webhooks (#21563)
  * Handle OpenID discovery URL errors a little nicer when creating/editing sources (#23397)
  * Split CI pipelines (#23385)
  * Improve squash merge commit author and co-author with private emails (#22977)
  * Fix broken Chroma CSS styles (#23174)
  * Add gradle samples in maven doc of packages (#23374)
  * Fix and move "Use this template" button (#23398)
  * [skip ci] Updated translations via Crowdin
  * Add init file for Ubuntu (#23362)
  * Rename `canWriteUnit` to `canWriteProjects` (#23386)
  * Fix pull request update showing too many commits with multiple branches (#22856)
  * Fix incorrect NotFound conditions in org/projects.go (#23384)
  * Refactor merge/update git command calls (#23366)
  * Redirect to project again after editing it (#23326)
  * Add Gitea Community Code of Conduct (#23188)
  * Test renderReadmeFile (#23185)
  * [skip ci] Updated translations via Crowdin
  * Set `X-Gitea-Debug` header once (#23361)
  * Improve cache context (#23330)
  * add user visibility in dashboard navbar (#22747)
  * Fix panic when getting notes by ref (#23372)
  * Use CleanPath instead of path.Clean (#23371)
  * Reduce duplicate and useless code in options (#23369)
  * Clean Path in Options (#23006)
  * Do not recognize text files as audio (#23355)
  * Fix incorrect display for comment context menu  (#23343)
  * [skip ci] Updated translations via Crowdin
  * Pass context to avatar for projects view (#23359)
  * Refactor and tidy-up the merge/update branch code (#22568)
  * Fix adding of empty class name (#23352)
  * Fix various ImageDiff/SVG bugs (#23312)
  * Refactor `setting.Database.UseXXX` to methods (#23354)
  * Update documentation for the new YAML label file format  (#23020)
  * Remove unnecessary space on link (#23334)
  * Fix incorrect redirect link of delete org project (#23327)
  * Fix incorrect project links and use symlink icon for org-wide projects (#23325)
  * Fix PR view misalignment caused by long name file (#23321)
  * Add ActionRunStatus component (#23259)
  * Scoped labels: don't require holding alt key to remove (#23303)
  * Update hacking-on-gitea-zh_cn documentation (#23315)
  * Fix broken code editor diff preview (#23307)
  * [skip ci] Updated translations via Crowdin
  * Add context when rendering labels or emojis (#23281)
  * Change interactiveBorder to fix popup preview  (#23169)
  * Improve the frontend guideline (#23298)
  * Scoped labels: set aria-disabled on muted Exclusive option for a11y (#23306)
  * Add basic documentation for labels, including scoped labels (#23304)
  * [skip ci] Updated translations via Crowdin
  * Re-add accidentally removed `hacking-on-gitea.zh-cn.md` (#23297)
  * Add default owner team to privated_org and limited_org in unit test (#23109)
  * Improve sed detection in update-locales.sh (#23254)
  * Support sanitising the URL by removing extra slashes in the URL (#21333)
  * Make Ctrl+Enter submit a pending comment (starting review) instead of submitting a single comment (#23245)
  * Avoid panic caused by broken payload when creating commit status (#23216)
  * Add run status in action view page (#23212)
  * update to mermaid v10 (#23178)
  * Fix code wrap for unbroken lines (#23268)
  * Fix stray backticks appearing in pull request timeline (#23282)
  * Fill head commit to in payload when notifying push commits for mirroring (#23215)
  * Fix various bugs for "install" page (#23194)
  * Fix GetFilesChangedBetween if the file name may be escaped (#23272)
  * Support paste treepath when creating a new file or updating the file name (#23209)
  * Fix grammar in error message (#23273)
  * Revert relative links to absolute links in mail templates (#23267)
  * Fix cannot reopen after pushing commits to a closed PR (#23189)
  * Use correct README link to render the README (#23152)
  * Add document for `webcomponents` (#23261)
  * Use async await to fix empty quote reply at first time (#23168)
  * Fix switched citation format (#23250)
  * Improve update-locales script and fix locale processing bug (#23240)
  * Refactor `ctx` in templates (#23105)
  * Improve frontend guideline (#23252)
  * Close the temp file when dumping database to make the temp file can be deleted on Windows (#23249)
  * Fix commit retrieval by tag (#21804)
  * Fix missed `.hide` class (#23208)
  * [skip ci] Updated translations via Crowdin
  * Add loading yaml label template files (#22976)
  * Allow `<video>` in MarkDown (#22892)
  * Pull Requests: add button to compare force pushed commits (#22857)
  * Do not create commit graph for temporary repos (#23219)
  * Use the correct selector to hide the checkmark of selected labels on clear (#23224)
  * Order pull request conflict checking by recently updated, for each push (#23220)
  * Fix incorrect checkbox behaviors in the dashboard repolist's filter (#23147)
  * [skip ci] Updated translations via Crowdin
  * Properly flush unique queues on startup (#23154)
  * Use context parameter in services/repository (#23186)
  * Pass `--global` when calling `git config --get`, for consistency with `git config --set` (#23157)
  * Make `gitea serv` respect git binary home (#23138)
  * Write Gitpod `app.ini` only once (#23192)
  * Avoid too long names for actions (#23162)
  * [skip ci] Updated translations via Crowdin
  * Change button text for commenting and closing an issue at the same time (#23135)
  * Don't run unnecessary steps when only docs changed (#23103)
  * Add word-break to sidebar-item-link (#23146)
  * Speed up HasUserStopwatch & GetActiveStopwatch (#23051)
  * Add InsecureSkipVerify to Minio Client for Storage (#23166)
  * Fix Fomantic UI's `touchstart` fastclick, always use `click` for click events (#23065)
  * Remove useless comment in #23114 (#23173)
  * Remove xin-u from maintainers (#23170)
  * Revert "[skip ci] Updated translations via Crowdin" (#23167)
  * [skip ci] Updated translations via Crowdin
  * Return 404 instead of 403 if user can not access the repo (#23155)
  * [skip ci] Updated licenses and gitignores
  * Fix secrets overview page missing from docs sidebar (#23143)
  * Add "Reviewed by you" filter for pull requests (#22927)
  * Projects: rename Board to Column in interface and improve consistency (#22767)
  * Fix DBConsistency checks on MSSQL (#23132)
  * Add pagination for dashboard and user activity feeds (#22937)
  * Update go.mod dependencies (#23126)
  * Show empty repos in Admin Repository Management page (#23114)
  * Redirect to the commit page after applying patch (#23056)
  * Bump go.etcd.io/bbolt and blevesearch deps (#23062)
  * Fix height for sticky head on large screen on PR page (#23111)
  * Fix db.Find bug (#23115)
  * Avoid warning for system setting when start up (#23054)
  * Require approval to run actions for fork pull request (#22803)
  * Fix nil context in RenderMarkdownToHtml (#23092)
  * Add HesterG to maintainers (#23104)
  * improve FindProjects (#23085)
  * Make issue meta dropdown support Enter, confirm before reloading (#23014)
  * Fix SyncOnCommit always return false in API of push_mirrors (#23088)
  * Fix commit name in Apply Patch page (#23086)
  * Add wrapper to author to avoid long name ui problem (#23030)
  * Avoid Hugo from adding quote to actions url (#23097)
  * Remove all package data after tests (#22984)
  * Change style to improve whitespaces trimming inside inline markdown code  (#23093)
  * Nest metadata in refactoring docs (#23087)
  * Improve reverse proxies documentation (#23068)
  * Improve accessibility for issue comments (#22612)
  * Wrap unless-check in docker manifests (#23079)
  * Add accessibility to the menu on the navbar (#23059)
  * Use minio/sha256-simd for accelerated SHA256 (#23052)
  * Fix some more hidden problems (#23074)

-------------------------------------------------------------------
Tue Jul 04 19:16:12 UTC 2023 - ecsos@opensuse.org

- Update to version 1.19.4:
  * Changelog for v1.19.4 (#25667)
  * Remove testing-e2e (#25681)
  * Dont publish latest for v1.19.x anymore (#25666)
  * Fix bug when change user name (#25637) (#25645)
  * Remove -v from vulncheck (#23953) (#25654)
  * Add link to support page for commercial support (#25293) (#25299)
  * Fix task list checkbox toggle to work with YAML front matter (#25184) (#25236)
  * Hide limited users if viewed by anonymous ghost (#25214) (#25224)
  * Add `WithPullRequest` for `actionsNotifier` (#25144) (#25196)
  * Fix open redirect check for more cases (#25143) (#25155)
  * Fix broken links in documents v1.19 (#25142)
  * Change branch name from master to main in some documents' links (#25126) (#25139)
  * add zh-cn for `Upgrade from old Gitea` in v1.19 (#25022)
  * update labels link to correct location in 1.19 docs (#25105)
  * Fix parallelly generating index failure with Mysql (#24567) (#25081)
  * improve permission documentation (#23942) (#25078)
  * GitLab migration: Sanitize response for reaction list (#25054) (#25059)
  * Add oauth Chinese document for v1.19 (#25020)
  * Port Chinese document for localization to v1.19 (#25021)
  * Fix users cannot visit issue attachment bug (#25019) (#25027)
  * Run markdownlint on drone, fix lint issue (#25040)
  * Add chinese documentations for Packages (#24914) (#25016)
  * Add chinese documentations for installation (#24904) (#25015)
  * Add Chinese docs for help, contribution and development (#24925) (#25011)
  * Unify doc links to use paths relative to doc folder (#24979) (#25000)
  * Remove unnecessary content on docs (#24976) (#25001)
  * Update from-binary.en-us.md (#24975) (#24999)
  * Fix missing reference prefix of commits when sync mirror repository (#24994)
  * Match unqualified references when syncing pulls as well (#23070)
  * `zh-cn` translation for usage docs (#24897) (#24977)
  * simple docs fixes: 'pull request' page (en-us & zh-tw) link path to 'issue-pull-request-templates' (#24961) (#24970)
  * Remove reference to caddy v1 in docs (#24962) (#24964)
  * Fix doc for 1.19 backend guideline (#24942)
  * Merge two translation contributing documents (#23939) (#24933)
  * Merge different languages for language stats (#24900) (#24921)
  * Hiding Secrets options when Actions feature is disabled (#24792)
  * Only validate changed columns when update user (#24867) (#24903)
  * Make DeleteIssue use correct context (#24885)
  * Remove unnecessary prefix usage (#24888)
  * Set `--font-weight-bold` to 600 (#24840)
  * Return `404` in the API if the requested webhooks were not found (#24823) (#24830)
  * Fix topics deleted via API not being deleted in org page (#24825) (#24829)
  * Fix Actions being enabled accidentally (#24802) (#24810)
  * Fix safari cookie session bug (#24772)
  * Fix missed table name on iterate lfs meta objects (#24768) (#24774)
  * Make mailer SMTP check have timed context (#24751) (#24759)
  * Respect original content when creating secrets (#24745) (#24746)
  * Fix Pull Mirror out-of-sync bugs (#24732) (#24733)
  * Fix run list broken when trigger user deleted (#24706) (#24709)
  * Add test for api team organization (#24699) (#24702)
  * Fix `organization` field being `null` in `GET /api/v1/teams/{id}` (#24694) (#24696)
  * Fix docs documenting invalid `@every` for `OLDER_THAN` cron settings (#24695) (#24698)
  * Fix issues list page multiple selection update milestones (#24660) (#24663)
  * fix: release page for empty or non-existing target (#24659)
  * Do not select line numbers when selecting text from the action run logs (#24594) (#24596)
  * Fix close org projects (#24588) (#24591)
  * Refresh the refernce of the closed PR when reopening (#24231) (#24587)
  * Improve decryption failure message (#24573) (#24575)
  * Makefile: Use portable !, not GNUish -not, with find(1). (#24565) (#24572)
  * Fix the permission of team's `Actions` unit issue (#24536) (#24545)
  * Fix new wiki page mirror (#24518)
  * Bump go.etcd.io/bbolt and blevesearch deps (#23062) (#24519)

-------------------------------------------------------------------
Wed May 10 12:47:30 UTC 2023 - Dirk Müller <dmueller@suse.com>

- allow calling git-lfs for handling git repositories with LFS

-------------------------------------------------------------------
Wed May 03 21:10:22 UTC 2023 - ecsos@opensuse.org

- Update to version 1.19.3:
  * Changelog for 1.19.3 (#24495)
  * Fix api error message if fork exists (#24487) (#24493)
  * Enable whitespace rendering on selection in Monaco (#24444) (#24485)
  * nightly tag
  * Remove less/_repository.less  (#24467)
  * Skip known flaky `queue` tests on CI environment (#24443)
  * nightly tag for docker images
  * Improve milestone filter on issues page (#22423) (#24440)
  * Fix incorrect CurrentUser check for docker rootless (#24435)
  * Fix user-cards format (#24428) (#24431)
  * getting the tag list does not require being signed in (#24413) (#24416)

-------------------------------------------------------------------
Fri Apr 28 05:05:38 UTC 2023 - ecsos@opensuse.org

- Update to version 1.19.2:
  * Changelog 1.19.2 (#24365)
  * Fix auth check bug (#24382) (#24387)
  * Add tags list for repos whose release setting is disabled (#23465)  (#24369)
  * Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
  * Fix no edit/close/delete button in org repo project view page (#24349)
  * Fix Monaco IOS keyboard button (#24341) (#24347)
  * Fix wrong error info in RepoRefForAPI (#24344) (#24351)
  * Fix broken clone script on an empty archived repo (#24339) (#24348)
  * Don't set meta `theme-color` by default (#24340) (#24346)
  * Add --font-weight-bold and set previous bold to 601 (#24307) (#24331)
  * Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) (#24333)
  * Wrap too long push mirror addresses (#21120) (#24334)
  * Fix typo in API route (#24310) (#24332)
  * Remove org users who belong to no teams (#24247) (#24313)
  * Unify nightly naming across binaries and docker images (#24116) (#24308)
  * Upgrade act  (#24298) (#24300)
  * Fix bug when deleting wiki with no code write permission (#24274) (#24295)
  * Handle canceled workflow as a warning instead of a fail (#24282) (#24292)
  * Load reviewer for comments when dismissing a review (#24281) (#24288)
  * Only delete secrets belonging to its owner (#24284) (#24286)
  * fix calReleaseNumCommitsBehind (#24148) (#24197)
  * Fix footer display (#24251) (#24269)
  * Fix owner team access mode value in team_unit table (#24224)
  * Fix access token issue on some public endpoints (#24194) (#24259)
  * Show commit history for closed/merged PRs (#24238) (#24261)
  * Fix label color, fix divider in dropdown (#24215) (#24244)
  * Fix issue attachment handling (#24202) (#24221)
  * Add run status in action view page (#24223)
  * Vertical widths of containers removed (#24184) (#24211)
  * Don't list root repository on compare page if pulls not allowed (#24183) (#24210)
  * Fix template error in pull request with deleted head repo (#24192) (#24216)
  * Fix incorrect CORS default values (#24206) (#24217)
  * Use correct locale key for forks page (#24172) (#24175)
  * Fix Org edit page bugs: renaming detection, maxlength (#24161) (#24171)
  * Support converting varchar to nvarchar for mssql database (#24105) (#24168)
  * Use 1.18's aria role for dropdown menus (#24144) (#24155)
  * Update redis library to support redis v7 (#24114) (#24156)
  * Sort repo topic labels by name (#24123) (#24153)
  * Set EasyMDE heading font-size to the same size as the resulting markdown (#24151) (#24152)
  * Fix 2-dot direct compare to use the right base commit (#24133) (#24150)
  * Highlight selected file in the PR file tree (#23947) (#24126)
  * Fix incorrect server error content in RunnersList (#24118) (#24121)
  * Fix mismatch between hook events and github event types (#24048) (#24091)

-------------------------------------------------------------------
Sat Apr 15 15:43:51 UTC 2023 - Dirk Müller <dmueller@suse.com>

- disable MemoryDenyWriteExecute as it is incompatible with
  libpcre2 in openSUSE and SLE

-------------------------------------------------------------------
Thu Apr 13 19:25:52 UTC 2023 - Dirk Müller <dmueller@suse.com>

- restore access to git in apparmor profile. this is a git
  service after all

-------------------------------------------------------------------
Thu Apr 13 16:10:27 UTC 2023 - ecsos@opensuse.org

- Update to version 1.19.1:
  * Changelog v1.19.1 (#24079)
  * Backport locales to 1.19 (#24083)
  * Improve LFS error logs (#24072) (#24082)
  * Update the value of the `diffEnd` when click `Show More` btn in the DiffFileTree (#24069) (#24078)
  * Fix custom mailer template on Windows (#24081)
  * Make label templates have consistent behavior and priority (#23749) (#24071)
  * Add cardtype to org/user level project on creation, edit and view (#24043) (#24066)
  * Fix accidental overwriting of LDAP team memberships (#24050) (#24065)
  *  Refactor commit status for Actions jobs (#23786)  (#24060)
  * Fix branch protection priority (#24045) (#24061)
  * Update documentation to explain which projects allow Gitea to host static pages (#23993) (#24058)
  * Use actions job link as commit status URL instead of run link (#24023) (#24032)
  * Add actions support to package auth verification (#23729) (#24028)
  * Fix protected branch for API (#24013) (#24027)
  * Show errors for KaTeX and mermaid on the preview tab (#24009) (#24019)
  * Show protected branch rule names again (#23907) (#24018)
  * fix: do not escape space between PyPI repository url and package name… (#23981) (#24008)
  * Adjust sticky pr header to cover background (#23956) (#23999)
  * Set `ref` to fully-formed of the tag when trigger event is `release` (#23944) (#23989)
  * Fix redirect bug when creating issue from a project (#23971) (#23997)
  * Remove `Repository.getFilesChanged` to fix Actions `paths` and `paths-ignore` filter (#23920) (#23969)
  * Discolor pull request tab labels (#23950) (#23987)
  * Treat PRs with agit flow as fork PRs when triggering actions. (#23884) (#23967)
  * Use Get/Set instead of Rename when Regenerate session id (#23975) (#23983)
  * Do not crash when parsing an invalid workflow file  (#23972) (#23976)
  * Ensure RSS icon is present on all repo tabs (#23904) (#23973)
  * Hardcode path to docker images (#23955) (#23968)
  * Title can be empty when creating tag only (#23917) (#23961)
  * Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874) (#23878)
  * Merge `push to create`, `open PR from push`, and `push options` docs articles into one (#23744) (#23959)
  * Backport locales to 1.19 (#23960)
  * Delete deleted release attachments immediately from storage (#23913) (#23958)
  * Left-align review comments (#23937)
  * Fix image border-radius (#23886) (#23930)
  * Scroll collapsed file into view (#23702) (#23929)
  * docs: make the required backticks in email password more explicit (#23923) (#23926)
  * docs: fix typo (#23924) (#23925)
  * Update docs markdown file weight to make it clear (#23909) (#23921)
  * Fix code view (diff) broken layout (#23096) (#23918)
  * Use ghost user if package creator does not exist (#23822) (#23915)
  * Org pages style fixes (#23901) (#23914)
  * User/Org Feed render description as per web (#23887) (#23906)
  * Use User.ID instead of User.Name in ActivityPub API for Person IRI (#23823) (#23905)
  * Add git dashes separator to some "log" and "diff" commands (#23606) (#23720)
  * Fix `cases.Title` crash for concurrency (#23885) (#23903)
  * Fix user profile description rendering (#23882) (#23902)
  * Convert .Source.SkipVerify to $cfg.SkipVerify (#23839) (#23899)
  * Fix review box viewport overflow issue (#23800) (#23898)
  * Rename actions unit to `repo.actions` and add docs for it (#23733) (#23881)
  * Backport some locales to 1.19 (#23880)
  * Fix checks for `needs` in Actions (#23789) (#23831)
  * Prefill input values in oauth settings as intended (#23829) (#23871)
  * Check `IsActionsToken` for LFS authentication (#23841) (#23875)
  * Remove assertion debug code for show/hide refactoring (#23576) (#23868)
  * Fix JS error when changing PR's target branch (#23862) (#23864)
  * Fix 500 error if there is a name conflict when edit authentication source (#23832) (#23852)
  * CSS color tweaks (#23828) (#23842)
  * Fix incorrect visibility dropdown list in add/edit user page (#23804) (#23833)
  * [Patch] Fix closed PR also triggers Webhooks and actions (#23782) (#23834)
  * Fix "Updating branch by merge" bug in "update_branch_by_merge.tmpl" (#23790) (#23825)
  * Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) (#23791)
  * Fix cancel button in the page of project edit not work (#23655) (#23813)
  * Backport locales (with manual fix) (#23808)
  * Add missing translation for `actions.runners.reset_registration_token_success` (#23732) (#23781)
  * Don't apply the group filter when listing LDAP group membership if it is empty (#23745) (#23788)
  * Add CSS rules for basic colored labels (#23774) (#23777)
  * Fix project card preview select and template select (#23684) (#23731)
  * Add creation time in tag list page (#23693) (#23773)
  * Make minio package support legacy MD5 checksum (#23768) (#23770)
  * fix br display for packages curls (#23737) (#23764)
  * Fix issue due date edit toggle bug (#23723) (#23758)
  * Fix profile page email display, respect settings (#23747) (#23756)
  * Improve commit graph page UI alignment (#23751) (#23754)
  * Use GitHub Actions compatible globbing for `branches`, `tag`, `path` filter (#22804) (#23740)
  * Redirect to project again after editing it (#23326) (#23739)
  * Check LFS/Packages settings in dump and doctor command (#23631) (#23730)
  * Describe Gitea's purpose more accurately (#23698) (#23710)
  * Remove row clicking from notification table (#22695) (#23706)
  * Fix incorrect `HookEventType` of pull request review comments (#23650) (#23678)
  * Create commit status when event is `pull_request_sync` (#23683) (#23691)
  * Drop migration for ForeignReference (#23605) (#23666)
  * Fix incorrect `show-modal` and `show-panel` class (#23660) (#23663)
  * Fix incorrect package doc link (#23679) (#23689)
  * Backport locales to 1.19 (#23634)
  * Fix codeblocks in the cheat sheet (#23664) (#23669)
  * Rename develop -> development, contribute -> contributing, administer -> administration (#23662)
  * Improve workflow event triggers (#23613) (#23648)
  * Fix diff tree height and adjust target file style (#23616)
  * Introduce path Clean/Join helper functions, partially backport&refactor (#23495) (#23607)
  * Remove conflicting CSS rules on notifications, improve notifications table (#23565) (#23621)
  * Fix pagination on `/notifications/watching` (#23564) (#23603)
  * fix submodule is nil panic (#23588) (#23601)
  * Improve template error reporting (#23396) (#23600)
  * Polyfill the window.customElements (#23592) (#23595)

-------------------------------------------------------------------
Thu Apr  6 08:29:57 UTC 2023 - Matthias Fehring <buschmann23@opensuse.org>

- create /var/lib/gitea/https because systemd otherwise refuses to
  start the service as the directory is listed in ReadWritePaths
  but is not available

-------------------------------------------------------------------
Wed Mar 29 16:37:53 UTC 2023 - Dirk Müller <dmueller@suse.com>

- update get-gitea-source.sh to fetch the right esbuild
  optional dependencies rather than old versions. Determine
  the version to fetch from the package-lock.json. Remove unnecessary
  bashisms and mark the script as requiring bash by updating the
  shebang.
- refresh gitea-node_modules-1.19.0.tar.gz

-------------------------------------------------------------------
Mon Mar 20 09:39:26 UTC 2023 - ecsos@opensuse.org

- Update to version 1.19.0:
  * Add CHANGELOG for 1.19.0 (#23583) (#23586)
  * Fix backport #23336 (#23584)
  * Fix dropdown icon misalignment when using fomantic icon (#23558) (#23577)
  * Add `.patch` to `attachment.ALLOWED_TYPES` (#23580) (#23582)
  * Match api migration behavior to web behavior (#23552) (#23573)
  * Fix some broken css (#23560) (#23567)
  * Fix sticky header in diff view (#23554) (#23568)
  * Fix JS error on compare page (#23551) (#23566)
  *  Fix `aria.js` bugs: incorrect role element problem, mobile focus problem, tippy problem (#23450) (#23486)
  * Imrove scroll behavior to hash issuecomment(scroll position, auto expand if file is folded, and on refreshing) (#23513) (#23540)
  * Fix diff detail buttons wrapping, use tippy for review box (#23271) (#23546)
  * Fix review comment context menu clipped bug (#23523) (#23543)
  * Refactor merge/update git command calls (#23366) (#23544)
  * Use octicon-verified for gpg signatures (#23529) (#23536)
  * Increase horizontal page padding (#23507) (#23537)
  * Use `<nav>` instead of `<div>` in the global navbar (#23125) (#23533)
  * Handle missing `README` in create repos API (#23387) (#23510)
  * Replace Less with CSS (#23508)
  * Make time tooltips interactive (#23526) (#23527)
  * Update act (#23512) (#23518)
  * Update path to docs theme file (#23502) (#23505)
  * Disable sending email after push a commit to a closed PR (#23462) (#23492)
  * Fix 'View File' button in code search (#23478) (#23483)
  * Bump webpack from 5.75.0 to 5.76.0 (#23484) (#23487)
  * Convert GitHub event on actions and fix some pull_request events. (#23037) (#23471)
  * Fix due date being wrong on issue list (#23475) (#23477)
  * Scoped label display and documentation tweaks (#23430) (#23433)
  * Remove wrongly added column on migration test fixtures (#23456) (#23470)
  * Make branches list page operations remember current page (#23420) (#23460)
  * test_env: hardcode major go version in use (#23464)
  * Fix missing commit status in PR which from forked repo (#23351) (#23453)
  * Purge API comment (#23451) (#23452)
  * Support reflogs (#22451) (#23438)
  * Fix actions frontend bugs (pagination, long name alignment) and small simplify (#23370) (#23436)
  * Show edit/close/delete button on organization wide repositories (#23388) (#23429)
  * Preserve file size when creating attachments (#23406) (#23426)
  * Use buildkit for docker builds (#23415) (#23424)
  * Fix and move "Use this template" button (#23398) (#23408)
  * Add missing tabs to org projects page (#22705) (#23412)
  * Handle OpenID discovery URL errors a little nicer when creating/editing sources (#23397) (#23403)
  * Fix broken Chroma CSS styles (#23174) (#23402)
  * Refactor and tidy-up the merge/update branch code (#22568) (#23365)
  * Rename `canWriteUnit` to `canWriteProjects` (#23386) (#23399)
  * Fix incorrect NotFound conditions in org/projects.go (#23384) (#23395)
  * Set `X-Gitea-Debug` header once (#23361) (#23381)
  * Fix panic when getting notes by ref (#23372) (#23377)
  * Pass context to avatar for projects view (#23359) (#23378)
  *  Fix incorrect display for comment context menu (#23343) (#23344)
  * Do not recognize text files as audio (#23355) (#23368)
  * Fix adding of empty class name (#23352) (#23360)
  * Fix various ImageDiff/SVG bugs (#23312) (#23358)
  * Refactor `setting.Database.UseXXX` to methods (#23354) (#23356)
  * Fix cannot reopen after pushing commits to a closed PR (#23189) (#23324)
  * Fix PR view misalignment caused by long name file (#23321) (#23335)
  * Update documentation for the new YAML label file format  (#23020) (#23341)
  * Remove unnecessary space on link (#23334) (#23340)
  * Fix incorrect redirect link of delete org project (#23327) (#23339)
  * Fix incorrect project links and use symlink icon for org-wide projects (#23325) (#23336)
  * Scoped labels: don't require holding alt key to remove (#23303) (#23331)
  * Fix broken code editor diff preview (#23307) (#23320)
  * Add context when rendering labels or emojis (#23281) (#23319)
  * Properly flush unique queues on startup (#23154) (#23201)
  * Update hacking-on-gitea-zh_cn documentation (#23315) (#23323)
  * Change interactiveBorder to fix popup preview  (#23169) (#23314)
  * Scoped labels: set aria-disabled on muted Exclusive option for a11y (#23306) (#23311)
  * Add basic documentation for labels, including scoped labels (#23304) (#23309)
  * Fix various bugs for "install" page (#23194) (#23286)
  * Support sanitising the URL by removing extra slashes in the URL (#21333) (#23300)
  * update to mermaid v10 (#23178) (#23299)
  * Re-add accidentally removed `hacking-on-gitea.zh-cn.md` (#23297) (#23305)
  * Fix code wrap for unbroken lines (#23268) (#23293)
  * Fill head commit to in payload when notifying push commits for mirroring (#23215) (#23292)
  * Avoid panic caused by broken payload when creating commit status (#23216) (#23294)
  * Fix GetFilesChangedBetween if the file name may be escaped (#23272) (#23279)
  * Use correct README link to render the README (#23152) (#23264)
  * Fix commit retrieval by tag (#21804) (#23266)
  * Revert relative links to absolute links in mail templates (#23267) (#23269)
  * Use async await to fix empty quote reply at first time (#23168) (#23256)
  * Fix switched citation format (#23250) (#23253)
  * Fix missed `.hide` class (#23208) (#23237)
  * Allow `<video>` in MarkDown (#22892) (#23236)
  * Close the temp file when dumping database to make the temp file can be deleted on Windows (#23249) (#23251)
  * Fix incorrect checkbox behaviors in the dashboard repolist's filter (#23147) (#23205)
  * Order pull request conflict checking by recently updated, for each push (#23220) (#23225)
  * Add loading yaml label template files (#22976) (#23232)
  * Do not create commit graph for temporary repos (#23219) (#23229)
  * Use the correct selector to hide the checkmark of selected labels on clear (#23224) (#23228)
  * Change button text for commenting and closing an issue at the same time (#23135) (#23182)
  * Fix Fomantic UI's `touchstart` fastclick, always use `click` for click events (#23065) (#23195)
  * Pass `--global` when calling `git config --get`, for consistency with `git config --set` (#23157) (#23199)
  * Make `gitea serv` respect git binary home (#23138) (#23197)
  * Avoid too long names for actions (#23162) (#23190)
  * Add InsecureSkipVerify to Minio Client for Storage (#23166) (#23177)
  * Add word-break to sidebar-item-link (#23146) (#23180)
  * Remove useless comment in #23114 (#23173) (#23175)
  * Return 404 instead of 403 if user can not access the repo (#23155) (#23158)
  * Fix DBConsistency checks on MSSQL (#23132) (#23134)
  * Fix secrets overview page missing from docs sidebar (#23143) (#23145)
  * Redirect to the commit page after applying patch (#23056) (#23127)
  * Avoid warning for system setting when start up (#23054) (#23116)
  * Show empty repos in Admin Repository Management page (#23114) (#23130)
  * Change style to improve whitespaces trimming inside inline markdown code (#23093) (#23120)
  * Fix height for sticky head on large screen on PR page (#23111) (#23123)
  * Fix db.Find bug (#23115) (#23119)
  * Fix nil context in RenderMarkdownToHtml (#23092) (#23108)
  * Make issue meta dropdown support Enter, confirm before reloading (#23014) (#23102)
  * Fix SyncOnCommit always return false in API of push_mirrors (#23088) (#23100)
  * Add wrapper to author to avoid long name ui problem (#23030) (#23098)
  * Fix commit name in Apply Patch page (#23086) (#23099)
  * Add accessibility to the menu on the navbar (#23059) (#23095)
  * Nest metadata in refactoring docs (#23087) (#23091)
  * Improve accessibility for issue comments (#22612) (#23083)
  * Wrap unless-check in docker manifests (#23079) (#23081)
  *  Fix some more hidden problems (#23074) (#23075)
  * Add sillyguodong to maintainers (#23067)
  * Improving CONTRIBUTING.md for backport details (#23057)
  * Changelog 1.18.5 (#23045) (#23049)
  * Add Bash and Zsh completion scripts (#22646)
  * Return empty url for submodule tree entries (#23043)
  * Fix the show/hide methods for string selector (#23042)
  * display attachments of review comment when comment content is blank (#23035)
  * Upgrade to stylelint 15 (#22944)
  * Add force_merge to merge request and fix checking mergable (#23010)
  * Improve PR Review Box UI (#22986)
  * Remove dashes between organization member avatars on hover (#23034)
  * Fix the Manually Merged form (#23015)
  * Remove delete button for review comment (#23036)
  * Improve frontend guidelines (#23007)
  * Use `--message=%s` for git commit message (#23028)
  * add margin top to the top of branches (#23002)
  * Add me to maintainers (#23026)
  * Render access log template as text instead of HTML (#23013)
  * Use `gt-relative` class instead of the ambiguous `gt-pr` class  (#23008)
  * Fix intermittent panic in notify issue change content (#23019)
  * Improve pull_request_template.md (#22888)
  * Hide 2FA status from other members in organization members list (#22999)
  * handle deprecated settings (#22992)
  * Add scopes to API to create token and display them (#22989)
  * Remove unnecessary and incorrect `find('.menu').toggle()` (#22987)
  * Improve issues.LoadProject (#22982)
  * Add 1.18.4 changelog (#22991) (#22995)
  * Fix pull request branch selector visible without clicking Edit (#23012)
  * Bump golang.org/x/net from 0.4.0 to 0.7.0 (#22980)
  * Fix panic when call api (/repos/{owner}/{repo}/pulls/{index}/files) (#22921)
  * only trigger docs build and publish when docs changed (#22968)
  * Get rules by id when editing branch protection rule (#22932)
  * Fix hidden commit status on multiple checks (#22889)
  * Add me to maintainers (#22998)
  * Add all units to the units permission list in org team members sidebar (#22971)
  * Make CI use a dummy password hasher for all tests (#22983)
  * Use beforeCommit instead of baseCommit (#22949)
  * Add comment marking the end of database migrations in `1.19.0` (#22975)
  * Fix broken pull request files (#22962)
  * Fix avatar misalignment (#22955)
  * Refactor the setting to make unit test easier (#22405)
  * Migration v244.go should be v243.go (#22988)
  * Adjust manifest to prevent tagging latest on rcs (#22811)
  * Add some guidelines for refactoring (#22880)
  * Rename `GetUnits` to `LoadUnits` (#22970)
  * Provide the ability to set password hash algorithm parameters (#22942)
  * Fix no user listed in org teams page (#22979)
  * Refactor hiding-methods, remove jQuery show/hide, remove `.hide` class, remove inline style=display:none (#22950)
  * Scoped labels (#22585)
  * Rename "People" to "Members" in organization page and use a better icon (#22960)
  * Rename `repo.GetOwner` to `repo.LoadOwner` (#22967)
  * Notify on container image create (#22806)
  * webview: Fix overflowing diff body (#22959)
  * Introduce customized HTML elements, fix incorrect AppUrl usages in templates (#22861)
  * Sort issues and pulls by recently updated in user and organization home (#22925)
  * Fix 404 error viewing the LFS file (#22945)
  * Always go full width in PR view (#22844)
  * Increase Content field size of gpg_key_import to MEDIUMTEXT (#22897)
  * Fix context bug (#22940)
  * Allow custom "created" timestamps in user creation API (#22549)
  * Use "Title Case" for text "Reference in new issue" (#22936)
  * First step to refactor the `.hide` to `.gt-hidden` (#22916)
  * Add continue option to backport.go (#22930)
  * Add `title` to PR file tree items (#22918)
  * Fix shabox regression (#22924)
  * fix incorrect role labels for migrated issues and comments (#22914)
  * Always show the `command line instructions` button even if there are conflicts (#22909)
  * Remove thehowl from maintainers (#22917)
  * Add context cache as a request level cache (#22294)
  * Add tooltip to issue reference (#22913)
  * Add command to bulk set must-change-password (#22823)
  * Remember to attach the parent tree when converting TreeEntry() -> Tree() (#22902)
  * Fix dark-colored description text in arc-green theme (#22908)
  * Fix the full-height problem for all pages (#22905)
  * Remove Fomantic-UI's `.hidden` CSS class for menu elements (#22895)
  * Move `IsReadmeFile*` from `modules/markup/` to `modules/util` (#22877)
  * Move helpers to be prefixed with `gt-` (#22879)
  * Remove _actions.less (#22885)
  * Highlight focused diff file (#22870)
  * Pull Requests: setting to allow edits by maintainers by default, tweak UI (#22862)
  * docs: Update translation from-binary.zh-cn.md (#22820)
  * Move delete user to service (#22478)
  * Remove Fomantic-UI's `.hidden` CSS class for checkbox elements (#22851)
  * Add some headings to repo views (#22869)
  * Fix style of actions rerun button (#22835)
  * Make issue and code search support camel case (#22829)
  * Revert "Fix notification and stopwatch empty states" (#22876)
  * Deduplicate findReadmeFile() (#22177)
  * Fix milestone title font problem (#22863)
  * Fix PR file tree folders no longer collapsing (#22864)
  * escape filename when assemble URL (#22850)
  * Fix notification and stopwatch empty states (#22845)
  * Fix .golangci.yml (#22868)
  * Fix migration issue. (#22867)
  * Add `/$count` endpoints for NuGet v2 (#22855)
  * Preview images for Issue cards in Project Board view (#22112)
  * Fix improper HTMLURL usages in Go code (#22839)
  * Use proxy for pull mirror (#22771)
  * Make issue title edit buttons focusable and fix incorrect ajax requests (#22807)
  * Fix update by rebase being wrongly disabled by protected base branch (#22825)
  * Fix inconsistent Filter Project name in issue list (#22827)
  * Fix more HTMLURL in templates (#22831)
  * Fix unmatched div in project filter (#22832)
  * Improve AppUrl/ROOT_URL checking (#22836)
  * Fix isAllowed of escapeStreamer (#22814)
  * Make clone URL use current page's host (#22808)
  * change org_type.go to visible_type.go and fix the notes (#22752)
  * Improve notification and stopwatch styles (#22169)
  * Fix blame view missing lines (#22826)
  * Load issue before accessing index in merge message (#22822)
  * include build info in Prometheus metrics (#22819)
  * Fix rerun button of Actions (#22798)
  * Map OIDC groups to Orgs/Teams (#21441)
  * Fix links for the menus in the view file page (#22795)
  * Fix restore repo bug, clarify the problem of ForeignIndex (#22776)
  * Grammar fix (#22790)
  * Use link in UI which returned a relative url but not html_url which contains an absolute url (#21986)
  * Add repo adoption to FAQ (#22778)
  * Use import of OCI structs (#22765)
  * Update gogs upgrade information (#22777)
  * Add CLI option tenant ID for oauth2 source (#22769)
  * Refactor legacy strange git operations (#22756)
  * Add Chef package registry (#22554)
  * use drone secrets for s3 config (#22770)
  * remove update language in ProfilePost (#22748)
  * Set PR for issue when load attributes for PRs (#22766)
  * Fix time to NotifyPullRequestSynchronized (#22650)
  * Add Cargo package registry (#21888)
  * Add new captcha: cloudflare turnstile (#22369)
  * add default user visibility to cli command "admin user create" (#22750)
  * Show all projects, not just repo projects and open/closed projects  (#22640)
  * Remove ONLY_SHOW_RELEVANT_REPOS setting (#21962)
  * Escape path for the file list (#22741)
  * Repositories: by default disable all units except code and pulls on forks (#22541)
  * Fix color of tertiary button on dark theme (#22739)
  * Refactor git command package to improve security and maintainability (#22678)
  * Improve trace logging for pulls and processes (#22633)
  * Remove 'primary' class from tab counter labels (#22687)
  * Use native error checking with `exec.ErrDot` (#22735)
  * update to build with go1.20 (#22732)
  * Add missed reverse proxy authentication documentation (#22250)
  * Update button is shown when a Pull Request is marked WIP - Issue #21740 (#22683)
  * Do not overwrite empty DefaultBranch (#22708)
  * Improve error report when user passes a private key (#22726)
  * Add some comments for recent code (#22725)
  * Fix actions workflow branches match bug (#22724)
  * Fix group filter for ldap source sync (#22506)
  * set user dashboard org visibility to basic (#22706)
  * Fix diff UI for unexpandable items (#22700)
  * Fix line spacing for plaintext previews (#22699)
  * Small refactor for loading PRs (#22652)
  * Allow setting access token scope by CLI (#22648)
  * Add main landmark to templates and adjust titles (#22670)
  * Fix cache-control header clearing comment text when editing issue (#22604)
  * Enable `@<user>`- completion popup on the release description textarea (#22359)
  * Add Conda package registry (#22262)
  * Add user secrets (#22191)
  * Add missing close bracket in imagediff (#22710)
  * Explain that the no-access team unit does not affect public repositories (#22661)
  * Fix bugs with WebAuthn preventing sign in and registration. (#22651)
  * Add more events details supports for actions (#22680)
  * Improve checkbox accessibility a bit by adding the title attribute (#22593)
  * Add repository setting to enable/disable releases unit (#22671)
  * Use relative url in actions view (#22675)
  * Fix ref to trigger Actions (#22679)
  * Rootless Docker - Mistake with the repo-avatars parent folder name (#22637)
  * Fix missing title and filter in issue sidebar project menu (#22557)
  * Fix wrong hint when deleting a branch successfully from pull request UI (#22673)
  * Add Contributed backport command (#22643)
  * Fix typo in command-line.en-us.md (#22681)
  * Fix typo in linked-references.en-us.md (#22682)
  * Fix typo in guidelines-backend.en-us.md (#22690)
  * Fix typo in storage.en-us.md (#22694)
  * Hide collapse icon in diff with no lines (#21094)
  * Fixes accessibility behavior of Watching, Staring and Fork buttons (#22634)
  * Disable test for incoming email (#22686)
  * Remove label color from global issue filters (#22660)
  * Use correct captured group range when parsing cross-reference (#22672)
  * set user visibility class to basic (#22674)
  * Fix README TOC links (#22577)
  * Implement actions (#21937)
  * Pull request yaml template support for including commit body in a field (#22629)
  * Don't return duplicated users who can create org repo (#22560)
  * Fix poor alignment of organization description on organization home page (#22656)
  * Issues: support setting issue template field values with query (#22545)
  * Add support for commit cross references (#22645)
  * Fix missing message in git hook when pull requests disabled on fork (#22625)
  * Check quota limits for container uploads (#22450)
  * Consume hcaptcha and pwn deps (#22610)
  * Issues: add Project filter to issues list and search (#22544)
  * Improve accessibility of navigation bar and footer (#22635)
  * Support system hook API (#14537)
  * Improve checkIfPRContentChanged (#22611)
  * Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627)
  * fix permission check for creating comment while mail (#22524)
  * Fix error on account activation with wrong passwd (#22609)
  * Fixes accessibility of empty repository commit status (#22632)
  * Use `--index-url` in PyPi description (#22620)
  * Show migration validation error (#22619)
  * Allow issue templates to not render title (#22589)
  * Fix `delete_repo` in template (#22606)
  * set org visibility class to basic in header (#22605)
  * Add API endpoint to get latest release (#21267)
  * Add ARIA support for Fomantic UI checkboxes (#22599)
  * Webhooks: for issue close/reopen action, add commit ID that caused it (#22583)
  * Add templates to customize text when creating and migrating repositories
  * Prevent duplicate labels when importing more than 99 (#22591)
  * Remove address from DCO (#22595)
  * Allow setting `redirect_to` cookie on OAuth login (#22594)
  * Project links should use parent link methods (#22587)
  * link update in README files (#22582)
  * Frontport 1.18.2 and 1.18.3 Changelogs (#22580)
  * Fix incorrect Redis URL snippets in the example app.ini (#22573)
  * Prevent multiple `To` recipients (#22566)
  * gitlab supports ssh key signing (#22564)
  * Address feedback from #22517 (#22563)
  * Fix bug on user setting (#22539)
  * Update JS dependencies (#22538)
  * Split default gitpod view to include all tasks (#22555)
  * fix: read:org scope (#22556)
  * Pull Requests: add color to approved/reject icon in pull requests list
  * Truncate commit summary on repo files table. (#22551)
  * Support org/user level projects (#22235)
  * Fix template bug of access scope (#22540)
  * Mute all links in issue timeline (#22533)
  * When updating by rebase we need to set the environment for head repo (#22535)
  * Fix assignment to `cm.AssigneeID` when importing comments (#22528)
  * Dropzone: Add "Copy link" button for new uploads (#22517)
  * Support importing comment types (#22510)
  * Fix issue not auto-closing when it includes a reference to a branch (#22514)
  * Fix invalid issue branch reference if not specified in template (#22513)
  * Fix 500 error viewing pull request when fork has pull requests disabled (#22512)
  * Load asciicast css async (#22502)
  * Reliable selection of admin user (#22509)
  * Display unreferenced packages total size in package admin panel (#22498)
  * Simplify the error message when `index.js` couldn't be loaded (#22354)
  * Support asciicast files as new markup (#22448)
  * Support scoped access tokens (#20908)
  * some refactor about code comments (#20821)
  * docs: add swagger.json file location to FAQ (#22489)
  * docs: bump Gitea version (#22490)
  * chore: changelog 1.18.1 (#22471) (#22487)
  * Fixed lint warnings in Grafana raised by Mixtool (#22486)
  * Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479)
  * Fix pull request API field `closed_at` always being `null` (#22482)
  * Fix migration from gitbucket (repost) (#22477)
  * Fix container blob mount (#22226)
  * Update overview.en-us.md (#22463)
  * Add reply hint to mail text (#22459)
  * Add cron method to gc LFS MetaObjects (#22385)
  * Change use of Walk to WalkDir to improve disk performance (#22462)
  * Remove the netgo tag for Windows build (#22467)
  * Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454)
  * Fix environments for KaTeX and error reporting (#22453)
  * Supports wildcard protected branch (#20825)
  * Prevent panic on looking at api "git" endpoints for empty repos (#22457)
  * Restore previous official review when an official review is deleted (#22449)
  * Add support for incoming emails (#22056)
  * Fix stylesheet HTML snippet for external renderers documentation (#22435)
  * Log STDERR of external renderer when it fails (#22442)
  * Fix error when calculate the repository size (#22392)
  * clarify "open issues" text for labels (#22431)
  * Restore function to "Show more" buttons (#22399)
  * Continue GCing other repos on error in one repo (#22422)
  * improve explore relevancy note (#22421)
  * fix: don't replace err variable in nested check (#22416)
  * Add more packages to denylist (#22412)
  * fix wrong theme class when logged out if default theme is changed (#22408)
  * Update golang deps (#22410)
  * Replace deprecated Webauthn library (#22400)
  * Allow HOST has no port (#22280)
  * Improve utils of slices (#22379)
  * cgo cross-compile for freebsd (#22397)
  * Fix typo (#22396)
  * fix: omit avatar_url in discord payload when empty (#22393)
  * Fix "remember this device" case (#22388)
  * Don't display stop watch top bar icon when disabled and hidden when click other place (#22374)
  * Fix halfCommitter and WithTx (#22366)
  * Don't lookup mail server when using sendmail (#22300)
  * Update index.de-de.md (#22363)
  * Move fuzz tests into tests/fuzz (#22376)
  * Remove satori/go.uuid (#22375)
  * Use context parameter in models/git (#22367)
  * Replace `can not` with `cannot` (#22372)
  * Fix set system setting failure once it cached (#22333)
  * Bump json5 from 1.0.1 to 1.0.2 (#22365)
  * Always reuse transaction (#22362)
  * make /{username}.png redirect to user/org avatar (#22356)
  * Remove old HookEventType (#22358)
  * Fix unstable emoji sort (#22346)
  * Rewrite fuzzers to native Go harnesses (#22313)
  * Update Emoji dataset to Unicode 14 (#22342)
  * fix gravatar disable bug (#22336)
  * fix: update settings table on install (#22326)
  * Use git command instead of exec.Cmd in blame (#22098)
  * Display error log when a modified template has an error so that it could recovery when the error fixed (#22261)
  * Add deprecated warning for DISABLE_GRAVATAR and ENABLE_FEDERATED_AVATAR (#22318)
  * Unify hashing for avatar (#22289)
  * fix: code search title translation (#22285)
  * Update Gmail mailer configuration (#22291)
  * Fix due date rendering the wrong date in issue (#22302)
  * Fix get system setting bug when enabled redis cache (#22295)
  * Restructure `webhook` module (#22256)
  * Reminder for no more logs to console (#22282)
  * Fix bug of DisableGravatar default value (#22296)
  * Upgrade go-chi to v5.0.8 (#22304)
  * [skip ci] Updated licenses and gitignores
  * Use ErrInvalidArgument in packages (#22268)
  * Changelog v1.18.0 (#22215) (#22269)
  * Support estimated count with multiple schemas (#22276)
  * Add Gentoo to the from package providers (#22284)
  * Fix sitemap (#22272)
  * Add `sync_on_commit` option for push mirrors api (#22271)
  * Fix key signature error page (#22229)
  * Correctly handle select on multiple channels in Queues (#22146)
  * Support template for merge message description (#22248)
  * Move `convert` package to services (#22264)
  * Use dynamic package type list (#22263)
  * refactor auth interface to return error when verify failure (#22119)
  * Add option to prohibit fork if user reached maximum limit of repositories (#21848)
  * Update standard copyright header to use a placeholder year (#22254)
  * Add the 'ui.user' section to the cheat sheet (#22249)
  * Use complete SHA to create and query commit status (#22244)
  * Add more test directory to exclude dir of air, remove watching templates from air include dir because gitea has internal mechanism (#22246)
  * Remove deadcode (#22245)
  * Remove ReverseProxy authentication from the API (#22219)
  * Fix typo of Asia/Shanghai (#22242)
  * Add Mermaid copy button, avoid unnecessary tooltip hide (#22225)
  * [skip ci] Updated licenses and gitignores
  * Improve testing for pgsql empty repository (#22223)
  * JS refactors (#22227)
  * Check primary keys for all tables and drop ForeignReference (#21721)
  * Hide file borders on sticky diff box (#22217)
  * Test views of LFS files (#22196)
  * update docs latest to 1.17.4
  * Frontport 1.17.4 changelog (#22216)
  * Remove test session cache to reduce possible concurrent problem (#22199)
  * Upgrade hugo to 0.82 (#22209)
  * Fix container layer display overflow (#22208)
  * Run hugo via `go run` and lock its version (#22206)
  * Update bleve and zapx to fix unaligned atomic (#22031)
  * Allow empty assignees on pull request edit (#22150)
  * Add Feed for Releases and Tags (#21696)
  * fix: update libcurl in docs pipeline (#22203)
  * Fixed colour transparency regex matching in project board sorting (#22091) (#22092)
  * Mobile fix for Project view: Add delay to Sortable.js on mobile, to ensure scrolling is possible. (#22152)
  * Normalize NuGet package version on upload (#22186)
  * Attempt to fix TestExportUserGPGKeys (#22159)
  * Specify ID in `TestAPITeam` (#22192)
  * Repair LFS web rendering. (#22195)
  * Fix misc whitespace issues in install docs (#22189)
  * Update JS dependencies and eslint (#22190)
  * Fix delete secret modal (#22187)
  * Secrets storage with SecretKey encrypted (#22142)
  * Check for zero time instant in `TimeStamp.IsZero()` (#22171)
  * Fix heatmap first color being unused (#22157)
  * Add setting to disable the git apply step in test patch (#22130)
  * Local storage should not store files as executable (#22162)
  * [skip ci] Updated licenses and gitignores
  * Ensure that plain files are rendered correctly even when containing ambiguous characters (#22017)
  * verify nodeinfo response by schema  (#22137)
  * Fix margin and alignment in dashboard repolist (#22120)
  * Update username (#22147)
  * Do not list active repositories as unadopted (#22034)
  * Add doctor command for full GC of LFS (#21978)
  * remove silentcode from MAINTAINERS (#22143)
  * Fixed Project view .board-column height for tall screens. (#22108)
  * Correctly handle moved files in apply patch (#22118)
  * remove duplicated read file code (#22042)
  * Fix condition for is_internal (#22095)
  * Make gitea work using cmd.exe again (#22073)
  * Fix markdown typo of an extra backtick in docs (#22123)
  * Fix autofilled text visibility in dark mode (#22088)
  * Fix permission check on issue/pull lock (#22110)
  * Add a simple test for external renderer (#20033)
  * refactor bind functions based on generics (#22055)
  * Allow disable code tab (#20805)
  * Use multi reader instead to concat strings (#22099)
  * Fix sorting admin user list by last login (#22081)
  * Fix wrong default value for update checker on app.example.ini (#22084)
  * fix(config): remove context on config template (#22096)
  * [skip ci] Updated licenses and gitignores
  * Update xorm (#22094)
  * Remove unnecessary whitespace in snapcraft.yaml (#22090)
  * Rename almost all Ctx functions (#22071)
  * Change ID pattern of raw content container for issue (#21966)
  * Optimize html templates (#22080)
  * Add API management for issue/pull and comment attachments (#21783)
  * Rename actions to operations on UI (#22067)
  * Update go dev dependencies (#22064)
  * Round language stats percentage using largest remainder (#22026)
  * Support disabling database auto migration (#22053)
  * Release and Tag List tweaks (#21712)
  * Fix issue/PR numbers (#22037)
  * Remove useless "Cancel" buttons (#21872)
  * Ensure that Chinese punctuation is not ambiguous when locale is Chinese (#22019)
  * Use GhostUser if needed for TrackedTimes (#22021)
  * Add dumb-init to rootless docker (#21775)
  * On tag/branch-exist check, dont panic if repo is nil (#21787)
  * Fix ListBranches to handle empty case (#21921)
  * fix(web): reduce page jitter on browsers that support overlay scrollbar (#21850)
  * [skip ci] Updated licenses and gitignores
  * Do not emit ambiguous character warning on rendered pages (#22016)
  * docs: add `Edit this page` (#21981)
  * refactor some functions to support ctx as first parameter (#21878)
  * Remove deprecated packages & staticcheck fixes (#22012)
  * Add pnpm to packages/overview (#22008)
  * Update to Alpine 3.17 (#21904)
  * Update gitea-vet to check FSFE REUSE (#22004)
  * Multiple improvements for comment edit diff (#21990)
  * Remove session in api tests (#21984)
  * Remove duplicate "Actions" label in mobile view (#21974)
  * Fix generate index failure possibility on postgres (#21998)
  * Use path not filepath in template filenames (#21993)
  * Update chroma to v2.4.0 (#22000)
  * Util type to parse ref name (#21969)
  * Skip initing LFS storage if disabled (#21996)
  * Fix parallel creating commit status bug with tests (#21911)
  * Skip initing disabled storages (#21985)
  * Fix leaving organization bug on user settings -> orgs (#21983)
  * Fix typos (#21979)
  * Normalize `AppURL` according to RFC 3986 (#21950)
  * Use random bytes to generate access token (#21959)
  * Replace fmt.Sprintf with hex.EncodeToString (#21960)
  * Implement FSFE REUSE for golang files (#21840)
  * Correct the fallbacks for mailer configuration (#21945)
  * [skip ci] Updated licenses and gitignores
  * Fix typos (#21947)
  * Fix markdown anchor re-clicking (#21931)
  * Prevent NPE if trying to restore an already restored deleted branch (#21940)
  * add rel="me" to org.website link (#21941)
  * Fix typo in sidebar (#21934)
  * fix(web): keep the pages of the navigation in the center (#21867)
  * Workaround for container registry push/pull errors (#21862)
  * Fix scroll over mermaid frame (#21925)
  * Add support for HEAD requests in Maven registry (#21834)
  * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562)
  * Fix typo in sidebar (#21922)
  * Fix table misalignments and tweak webhook and githook lists (#21917)
  * Fix flex layout for repo list icons (#21896)
  * Add index for access_token (#21908)
  * Fix vertical align of committer avatar rendered by email address (#21884)
  * Improve docker rootless documentation (#21913)
  * Ensure that Webhook tasks are not double delivered (#21558)
  * Move migration test fixtures to the correct directories (#21901)
  * feat: add button to quickly clear merge message (#21548)
  * Handle empty author names (#21902)
  * Move all remaining colors into CSS variables (#21903)
  * Add option to enable CAPTCHA validation for login (#21638)
  * Prepend refs/heads/ to issue template refs (#20461)
  * Fixes #21895: standardize UTC tz for util tests (#21897)
  * Clarify logging documentation (#21665)
  * Update JS dependencies (#21881)
  * Webhook list enhancements (#21893)
  * Embed Matrix icon as SVG (#21890)
  * fix(web): add `alt` for logo in home page (#21887)
  * Improvements for Content Copy (#21842)
  * Replace yaml.v2 with yaml.v3 (#21832)
  * Allow disable RSS/Atom feed (#21622)
  * Consolidate security-check into checks-backend (#21882)
  * Improve documentation for PAM and static deployment (#21866)
  * Add package registry cleanup rules (#21658)
  * Support comma-delimited string as labels in issue template (#21831)
  * Fix wechatwork webhook sends empty content in PR review (#21762)
  * Show syntax lexer name in file view/blame (#21814)
  * Add `context.Context` to more methods (#21546)
  * Timeline and color tweaks (#21799)
  * Fix webpack license warning (#21815)
  * chore: add webpack export type check (#21857)
  * Prevent dangling user redirects (#21856)
  * Fix "build from source" document to clarify the `bindata` tag is required. (#21853)
  * Bump loader-utils from 2.0.3 to 2.0.4 (#21852)
  * Do not allow Ghost access to limited visible user/org (#21849)
  * Fix setting HTTP headers after write (#21833)
  * Tweak katex options (#21828)
  * Ignore issue template with a special name (#21830)
  * Added space between avatar and username (#21825)
  * Skip GitHub migration tests if the API token is undefined (#21824)
  * Add `updated_at` field to PullReview API object (#21812)
  * Adjust gitea doctor --run storages to check all storage types (#21785)
  * Remove `href="javascript:;"` in "save topics (Done)" button (#21813)
  * Improve pull/ push mirror documentation (especially for GitHub) (#21801)
  * Prevent panic in doctor command when running default checks (#21791)
  * fix webpackChunkName for citation-js-csl (#21806)
  * Add plural definitions for German translations (#21802)
  * Fix webhook attachment text is not set in review comment (#21763)
  * Render number of commits in repo page in a user friendly way (#21786)
  * Upgrade golang.org/x/crypto (#21792)
  * Allow detect whether it's in a database transaction for a context.Context (#21756)
  * Add some documentation to packages (#21648)
  * Adjust clone timeout error to suggest increasing timeout (#21769)
  * Simplify text color selectors and tweak arc-green colors (#21784)
  * Load GitRepo in API before deleting issue (#21720)
  * Copy citation file content, in APA and BibTex format, on repo home page (#19999)
  * Ignore line anchor links with leading zeroes (#21728)
  * Update message of reach_limit_of_creation (#21757)
  * Add configuration for CORS allowed headers (#21747)
  * Revert unrelated changes for SMTP auth (#21767)
  * Init git module before database migration (#21764)
  * Extract updateSession function to reduce repetition (#21735)
  * Fix dashboard ignored system setting cache (#21621)
  * Add .dockerignore (#21753)
  * Attempt clarify AppWorkPath etc. (#21656)
  * Set last login when activating account (#21731)
  * Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734)
  * Fix UI language switching bug (#21597)
  * Add package registry quota limits (#21584)
  * Add attention blocks within quote blocks for `Note` and `Warning` (#21711)
  * Move svg html render to modules/svg (#21716)
  * Fix tests on migrations (#21705)
  * Remove semver compatible flag and change pypi to an array of test cases (#21708)
  * Allow local package identifiers for PyPI packages (#21690)
  * Fix typo (#21695)
  * Remove template previewer (#21701)
  * Revert "[skip ci] Updated translations via Crowdin" (#21689)
  * [skip ci] Updated translations via Crowdin
  * Fix docs relref (#21685)
  * Add "Copy" button to file view of raw text (#21629)
  * Improve valid user name check (#20136)
  * Remove Gusted as Gitea maintainer  (#21676)
  * Fix token generation when using INTERNAL_TOKEN_URI (#21669)
  * Clean up formatting on install page (#21668)
  * Add Webhook authorization header (#20926)
  * feat: notify doers of a merge when automerging (#21553)
  * Remove deprecated DSA host key from Docker Container (#21522)
  * Alter package_version.metadata_json to LONGTEXT (#21667)
  * Handle branch name with prefix in GitHub migration (#20357)
  * [skip ci] Updated translations via Crowdin
  * Split migrations folder (#21549)
  * [skip ci] Updated translations via Crowdin
  * Configure update checker on installation page (#21655)
  * Fix repository adoption on Windows (#21646)
  * Refactor docs (#21627)
  * Update "email usage" page to current ver. (1.18) (#21649)
  * Fix opaque background on mermaid diagrams (#21642)
  * Merge db.Iterate and IterateObjects (#21641)
  * Deal with markdown template without metadata (#21639)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated licenses and gitignores
  * Keep languages defined in .gitattributes (#21403)
  * [skip ci] Updated translations via Crowdin
  * Sync git hooks when config file path changed (#21619)
  * Allow disable sitemap (#21617)
  * fix: PR status layout on mobile (#21547)
  * Make rss/atom identifier globally unique (#21550)
  * Fix UI column width, button overflow Fomantic's grid (#21559)
  * Localize time units on activity heatmap (#21570)
  * Use right syntax for symbolic-ref command (#21577)
  * Update JS dependencies and misc tweaks (#21583)
  * Add index for hook_task table (#21545)
  * Revert: auto generate INTERNAL_TOKEN (#21608)
  * Use CSS color-scheme instead of invert (#21616)
  * [skip ci] Updated translations via Crowdin
  * Improve documentation (#21612)
  * [skip ci] Updated translations via Crowdin
  * Fix 500 on PR files API (#21602)
  * Fix `Timestamp.IsZero` (#21593)
  * [skip ci] Updated translations via Crowdin
- Rebase gitea.app.ini.patch
- Insert information in README what to do if gitea will not start.

-------------------------------------------------------------------
Mon Mar  6 11:52:48 UTC 2023 - Dirk Müller <dmueller@suse.com>

- add ReadWritePaths=/var/lib/gitea/https to systemd to allow
  ACME certificate renewal

-------------------------------------------------------------------
Tue Feb 21 21:50:04 UTC 2023 - ecsos@opensuse.org

- Update to version 1.18.5:
  * Changelog 1.18.5 (#23045)
  * Return empty url for submodule tree entries (#23043) (#23048)
  * Display attachments of review comment when comment content is blank (#23035) (#23046)
  * Use beforeCommit instead of baseCommit (#22949) (#22996)
  * Add force_merge to merge request and fix checking mergable (#23010) (#23032)
  * Render access log template as text instead of HTML (#23013) (#23025)
  * Fix the Manually Merged form (#23015) (#23017)
  *  Use `--message=%s` for git commit message (#23028) (#23029)
  * Hide 2FA status from other members in organization members list (#22999) (#23023)

-------------------------------------------------------------------
Mon Feb 20 06:37:45 UTC 2023 - ecsos@opensuse.org

- Update to version 1.18.4:
  * Add 1.18.4 changelog (#22991)
  * Provide the ability to set password hash algorithm parameters (#22942) (#22943)
  * Notify on container image create (#22806) (#22965)
  * Fix 404 error viewing the LFS file (#22945) (#22948)
  * Fix blame view missing lines (#22826) (#22929)
  * some refactor about code comments(#20821) (#22707)
  * Add command to bulk set must-change-password (#22823) (#22928)
  * fix incorrect role labels for migrated issues and comments (#22914) (#22923)
  * Improve trace logging for pulls and processes (#22633) (#22812)
  * Fix PR file tree folders no longer collapsing (#22864) (#22872)
  * escape filename when assemble URL (#22850) (#22871)
  * Use proxy for pull mirror (#22771) (#22772)
  * Fix isAllowed of escapeStreamer (#22814) (#22837)
  * Load issue before accessing index in merge message (#22822) (#22830)
  * add default user visibility to cli command "admin user create" (#22750) (#22760)
  * Fix color of tertiary button on dark theme (#22739) (#22744)
  * Fix restore repo bug, clarify the problem of ForeignIndex (#22776) (#22794)
  * Use import of OCI structs (#22765) (#22805)
  * upgrade golangcilint to v1.51.0 (#22764)
  * Escape path for the file list (#22741) (#22757)
  * use drone secrets for s3 config (#22770) (#22773)
  * Fix bugs with WebAuthn preventing sign in and registration. (#22651) (#22721)
  * Fix line spacing for plaintext previews (#22699) (#22701)
  * Add missing close bracket in imagediff (#22710) (#22712)
  * Fix wrong hint when deleting a branch successfully from pull request UI (#22673) (#22698)
  * Fix README TOC links (#22577) (#22677)
  * Don't return duplicated users who can create org repo (#22560) (#22562)
  * Fix missing message in git hook when pull requests disabled on fork (#22625) (#22658)
  * Improve checkIfPRContentChanged (#22611) (#22644)
  * Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642)
  * Use `--index-url` in PyPi description (#22620) (#22636)
  * Prevent duplicate labels when importing more than 99 (#22591) (#22598)

-------------------------------------------------------------------
Mon Jan 23 20:08:11 UTC 2023 - ecsos@opensuse.org

- Update to version 1.18.3:
  * Changelog 1.18.3 (#22575)
  * Prevent multiple `To` recipients (#22566) (#22569)
  * Truncate commit summary on repo files table. (#22551) (#22552)
  * Mute all links in issue timeline (#22534)

-------------------------------------------------------------------
Fri Jan 20 17:25:02 UTC 2023 - Dirk Müller <dmueller@suse.com>

- update apparmor-usr.bin.gitea to allow automatic ACME refreshing

-------------------------------------------------------------------
Fri Jan 20 08:44:45 UTC 2023 - ecsos@opensuse.org

- Update to version 1.18.2:
  * When updating by rebase we need to set the environment for head repo (#22535) (#22536)
  * chore: changelog 1.18.2 (#22530)
  * Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521)
  * Fix invalid issue branch reference if not specified in template (#22513) (#22520)
  * cgo cross-compile for freebsd (#22397) (#22519)
  *  Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515)
  * Reliable selection of admin user (#22509) (#22511)
  * Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496)
- Fix security issue: GHSA-c738-c5qq-xg89 - CVE-2022-23521 - CWE-122

-------------------------------------------------------------------
Tue Jan 17 21:15:03 UTC 2023 - ecsos@opensuse.org

- Update to version 1.18.1:
  * chore: changelog 1.18.1 (#22471)
  * Update `github.com/zeripath/zapx/v15` (#22485)
  * Fix pull request API field `closed_at` always being `null` (#22482) (#22483)
  * Fix migration from GitBucket (#22465)
  * Fix container blob mount (#22226) (#22476)
  * Fix error when calculate the repository size (#22392) (#22474)
  * Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454) (#22472)
  * Fix environments for KaTeX and error reporting (#22453) (#22473)
  *  Remove the netgo tag for Windows build (#22467) (#22468)
  * Fix leaving organization bug on user settings -> orgs (#21983) (#22438)
  * Restore previous official review when an official review is deleted (#22449) (#22460)
  * Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458)
  * Fixed colour transparency regex matching in project board sorting (#22092) (#22437)
  * Log STDERR of external renderer when it fails (#22442) (#22444)
  * fix: PR status layout on mobile (#21547) (#22441)
  * Fix wechatwork webhook sends empty content in PR review (#21762) (#22440)
  * Remove duplicate "Actions" label in mobile view (#21974) (#22439)
  * Prepend refs/heads/ to issue template refs (#20461) (#22427)
  * Continue GCing other repos on error in one repo (#22422) (#22425)
  * Correctly handle select on multiple channels in Queues (#22146) (#22428)
  * Remove test session cache to reduce possible concurrent problem (#22199) (#22429)
  * Restore function to "Show more" buttons (#22399) (#22426)
  * Allow HOST has no port (#22280) (#22409)
  * fix: omit avatar_url in discord payload when empty (#22393) (#22394)
  * Don't display stop watch top bar icon when disabled and hidden when click other place (#22374) (#22387)
  * Don't lookup mail server when using sendmail (#22300) (#22383)
  * Fix set system setting failure once it cached (#22334)
  * Update Emoji dataset to Unicode 14 (#22342) (#22343)
  * fix gravatar disable bug (#22337)
  * fix: update settings table on install (#22326) (#22327)
  * Add deprecated warning for DISABLE_GRAVATAR and ENABLE_FEDERATED_AVATAR (#22324)
  * Fix sitemap (#22272) (#22320)
  * Display error log when a modified template has an error so that it could recovery when the error fixed (#22261) (#22321)
  * fix: code search title translation (#22285) (#22316)
  * Fix due date rendering the wrong date in issue (#22302) (#22306)
  * Fix get system setting bug when enabled redis cache (#22298)
  * Fix bug of DisableGravatar default value (#22297)
  * Add `sync_on_commit` option for push mirrors api (#22271) (#22292)
  * Fix key signature error page (#22229) (#22230)

-------------------------------------------------------------------
Fri Dec 30 08:18:44 UTC 2022 - ecsos@opensuse.org

- Update to version 1.18.0:
  * Frontport 1.17.4 changelog and Add 1.18.0 changelog (#22215)
  * Add more test directory to exclude dir of air, remove watching templates from air include dir because gitea has internal mechanism (#22246) (#22247)
  * refactor auth interface to return error when verify failure (#22119) (#22259)
  * Use complete SHA to create and query commit status (#22244) (#22257)
  * Remove ReverseProxy authentication from the API (#22219) (#22251)
  * Update bleve and zapx to fix unaligned atomic (#22031) (#22218)
  * Fix container layer display overflow (#22208) (#22211)
  * Allow empty assignees on pull request edit (#22150) (#22214)
  * Add setting to disable the git apply step in test patch (#22130) (#22170)
  * Normalize NuGet package version on upload (#22186) (#22200)
  * fix: update libcurl in docs pipeline (#22204)
  * Check for zero time instant in TimeStamp.IsZero() (#22171) (#22172)
  * Ensure that plain files are rendered correctly even when containing ambiguous characters (#22017) (#22160)
  * Do not list active repositories as unadopted (#22034) (#22166)
  * Local storage should not store files as executable (#22162) (#22163)
  * Fix heatmap first color being unused (#22158)
  * Fix margin and alignment in dashboard repolist (#22120) (#22122)
  * Correctly handle moved files in apply patch (#22118) (#22135)
  * Fix condition for is_internal (#22095) (#22132)
  * Make gitea work using cmd.exe again (#22073) (#22133)
  * Fix sorting admin user list by last login (#22081) (#22107)
  * Fix parallel creating commit status bug with tests (#21911) (#21989)
  * Fix permission check on issue/pull lock (#22113)
  * Workaround for container registry push/pull errors (#21862) (#22068)
  * Fix issue/PR numbers (#22037) (#22044)
  * Handle empty author names (#21902) (#22027)
  * Add dumb-init to rootless docker (#22046)
  * Use GhostUser if needed for TrackedTimes (#22021) (#22029)
  * Ensure that Chinese punctuation is not ambiguous when locale is Chinese (#22019) (#22030)
  * Fix ListBranches to handle empty case (#21921) (#22024)
  * Do not emit ambiguous character warning on rendered pages (#22016) (#22018)
  * On tag/branch-exist check, dont panic if repo is nil (#21787) (#21788)
  * Use path not filepath in template filenames (#21993) (#22022)
  * Multiple improvements for comment edit diff (#21990) (#22007)
  * Correct the fallbacks for mailer configuration (#21945) (#21953)
  * Fix markdown anchor re-clicking (#21931) (#21946)
  * Prevent NPE if trying to restore an already restored deleted branch (#21940) (#21944)
  * Add support for HEAD requests in Maven registry (#21834) (#21929)
  * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21928)
  * add changelog for 1.18.0-rc1 (#21829)
  * Fix flex layout for repo list icons (#21896) (#21920)
  * Fix vertical align of committer avatar rendered by email address (#21884) (#21918)
  * Fix setting HTTP headers after write (#21833) (#21877)
  * Do not allow Ghost access to limited visible user/org (#21849) (#21876)
  * Color and Style enhancements (#21784, #21799) (#21868)
  * Support comma-delimited string as labels in issue template (#21831) (#21873)
  * Prevent dangling user redirects (#21856) (#21858)
  * Ignore issue template with a special name (#21830) (#21835)
  * Prevent panic in doctor command when running default checks (#21791) (#21807)
  * Load GitRepo in API before deleting issue (#21720) (#21796)
  *  Upgrade golang.org/x/crypto (#21792) (#21793)
  * Ignore line anchor links with leading zeroes (#21728) (#21776)
  * Set last login when activating account (#21731) (#21755)
  *  Revert unrelated changes for SMTP auth (#21767) (#21768)
  *  Init git module before database migration (#21764) (#21765)
  * Fix dashboard ignored system setting cache (#21621) (#21759)
  * Fix UI language switching bug (#21597) (#21749)
  * Remove semver compatible flag and change pypi to an array of test cases (#21708) (#21730)
  * Quick fixes monaco-editor error: "vs.editor.nullLanguage" (#21734) (#21738)
  * Allow local package identifiers for PyPI packages (#21690) (#21727)
  * Fix token generation when using INTERNAL_TOKEN_URI (#21669) (#21670)
  * Fix repository adoption on Windows (#21646) (#21650)
  * Fix opaque background on mermaid diagrams (#21642) (#21652)
  * Deal with markdown template without metadata (#21639) (#21654)
  * Sync git hooks when config file path changed (#21619) (#21626)
  * Use CSS color-scheme instead of invert (#21616) (#21623)
  * Fix `Timestamp.IsZero` (#21593) (#21603)
  *  Revert: auto generate INTERNAL_TOKEN (#21608) (#21609)
  * Fix 500 on PR files API (#21602) (#21607)
  * Revert "Do not send notifications for draft releases (#21451)" (#21594)
  * Change `commits-table` column width (#21564)
  * Fix issues count bug (#21557)
  * Improve code comment review on mobile (#21461)
  * Consolidate remaining colors into variables (#21582)
  * [skip ci] Updated translations via Crowdin
  * Add sqlite vscode extension to Gitpod configuration (#21552)
  * Replace all instances of fmt.Errorf(%v) with fmt.Errorf(%w) (#21551)
  * Fix package access for admins and inactive users (#21580)
  * Allow for resolution of NPM registry paths that match upstream (#21568)
  * Added missing headers on user packages page (#21172)
  * Record OAuth client type at registration (#21316)
  * adapt README_{Country}.md stype name in localizedExtensions (#21486)
  * dump: Add option to skip index dirs (#21501)
  * Use recommended vscode configuration in gitpod environments (#21537)
  * Expand "Go to File" button again, fix 'Add File' margin (#21543)
  * Add yardenshoham to maintainers (#21566)
  * Refactor git command arguments and make all arguments to be safe to be used (#21535)
  * Update binding to fix bugs (#21556)
  * Link mentioned user in markdown only if they are visible to viewer (#21554)
  * Require authentication for OAuth token refresh (#21421)
  * CSS color enhancements (#21534)
  * Allow package version sorting (#21453)
  * Add link to user profile in markdown mention only if user exists (#21533)
  * Update milestone counters when issue is deleted (#21459)
  * Prevent Authorization header for presigned LFS urls (#21531)
  * Remove deleted repos from searchresult (#21512)
  * Remove unnecessary debug log (#21536)
  * Added check for disabled Packages (#21540)
  * Decouple HookTask from Repository (#17940)
  * Add color previews in markdown (#21474)
  * Fix generating compare link (#21519)
  * [skip ci] Updated translations via Crowdin
  * Check for valid user token in integration tests (#21520)
  * Ignore error when retrieving changed PR review files (#21487)
  * move invite by mail to services package (#21513)
  * Enable Monaco automaticLayout (#21515)
  * Update macOS install command (#21507)
  * [skip ci] Updated translations via Crowdin
  * Suppress `ExternalLoginUserNotExist` error (#21504)
  * Revert increased width on pull pages (#21470)
  * Add team member invite by email (#20307)
  * Disable the 'Add File' button when not able to edit repo (#21503)
  * Remove vitest globals (#21505)
  * Fix branch dropdown shifting on page load (#21428)
  * [skip ci] Updated translations via Crowdin
  * Remove unnecessary misspell ignore pattern (#21475)
  * Fix read system configuration bug when installing (#21489)
  * Fix viewing user subscriptions (#21482)
  * Make every not exist error unwrappable to a fs.ErrNotExist (#20891)
  * inline gitpod image (#21494)
  * [skip ci] Updated translations via Crowdin
  * Do not send notifications for draft releases (#21451)
  * Update reverse-proxies.zh-cn.md (#21484)
  * Docs: Update the feature comparison to other Git Hosting Services (#20933)
  * Add some api integration tests (#18872)
  * probe if sha before exec git (#21467)
  * Fix incorrect notification commit url (#21479)
  * Localize all timestamps (#21440)
  * [skip ci] Updated translations via Crowdin
  * Add system setting table with cache and also add cache supports for user setting (#18058)
  * Return 404 when user is not found on avatar (#21476)
  * Enforce grouped NuGet search results (#21442)
  * Display total commit count in hook message (#21400)
  * Refactor GetNextResourceIndex to make it work properly with transaction (#21469)
  * Simplify fmt-check (#21458)
  * update current stable version
  * 1.17.3 changelog
  * [skip ci] Updated translations via Crowdin
  * Fix mermaid-related bugs (#21431)
  * Update OpenRC startup script (#21436)
  * Use own Go version instead of hardcoded 1.17 for `make fmt` (#21457)
  * Add `code` highlighting in issue titles (#21432)
  * Add wording about keeping PRs up-to-date in CONTRIBUTING.md (#21468)
  * [refactor] Use const for wiki DefaultBranch (#21466)
  * Follow improve code quality (#21465)
  * alternative to PR "improve code quality" (#21464)
  * [skip ci] Updated translations via Crowdin
  * Fix Drone pushing commits with wrong author info (#21450)
  * Add vitest tests to Gitpod (#21449)
  * Switch from jest to vitest (#21444)
  * Diff file tree tweaks (#21446)
  * Add cynkra bronze sponsor (#21325)
  * Run `make fmt` (#21437)
  * Remove useless `appVer` from JS `window.config` (#21445)
  * Add support for Chocolatey/NuGet v2 API (#21393)
  * Fix #21406: Hide repo information from file view/blame mode (#21420)
  * [skip ci] Updated translations via Crowdin
  * Respect user's locale when rendering the date range in the repo activity page (#21410)
  * Consolidate more CSS colors into variables (#21402)
  * Add HEAD fix to gitea doctor (#21352)
  * Contribution guidelines (#21425)
  * Refactor Gitpod configuration to improve quick spin up of automated dev environments (#21411)
  * Support instance-wide OAuth2 applications (#21335)
  * Case-insensitive NuGet symbol file GUID (#21409)
  * Add generic set type (#21408)
  * Improve OAuth integration tests (#21390)
  * Make e-mail sanity check more precise (#20991)
  * Fix broken link to frontend guidelines in hacking guidelines (#21382)
  * Use Name instead of DisplayName in LFS Lock (#21415)
  * [skip ci] Updated translations via Crowdin
  * feat(pr review): add more space on mobile (#21326)
  * Bump `golang.org/x/text` (#21412)
  * Update gitea.service (#21399)
  * Do DB update after merge in hammer context (#21401)
  * add gitpod config (#20995)
  * Remove cancel button in repo creation page (#21381)
  * Improve clarity for camo proxy parameters (#21386)
  * Redirect to new repository owner (#21398)
  * Use ISO date format instead of hard-coded English date format for date range in repo activity page (#21396)
  * log real ip of requests from ssh (#21216)
  * Add Num{Issues,Pulls} stats checks (#21404)
  * Add user/organization code search (#19977)
  * Stop logging CheckPath returns error: context canceled (#21064)
  * Hook go-licenses into tidy again (#21353)
  * Fix missing left and right carets in TRANSLATORS (#21397)
  * Fix calls to i18n in templates (#21394)
  * Update JS dependencies and eslint config (#21388)
  * Allow creation of OAuth2 applications for orgs (#18084)
  * Fix typos in PullRequestMergeForm.vue header comment (#21378)
  * Use weighted algorithm for string matching when finding files in repo (#21370)
  * Bump playwright to 1.26.1 (#21357)
  * npm package registry support for `bin` (#21372)
  * Removed one extra whitespace in footer after "Template" (#21364)
  * Fix formatted link for PR review notifications to matrix (#21319)
  * Show private data in feeds (#21369)
  * Add nicer error handling on template compile errors (#21350)
  * Fix some typos and update db transaction demo in backend guideline (#21322)
  * Refactor parseTreeEntries, speed up tree list (#21368)
  * Add GET and DELETE endpoints for Docker blob uploads (#21367)
  * Make external issue tracker regexp configurable via API (#21338)
  * Add new CSS variables --color-accent and --color-small-accent (#21305)
  * Set SemverCompatible to false for Conan packages (#21275)
  * Parse OAuth Authorization header when request omits client secret (#21351)
  * Disable Firefox E2E tests (#21363)
  * Add redirect of /upgrade/ to /upgrade-from-gitea/ on docs site (#21330)
  * Update to go-enry v2.8.3 (#21360)
  * Update go to 1.19 (#21361)
  * SessionUser protection against nil pointer dereference (#21358)
  * Fix and improve incorrect error messages (#21342)
  * Fix default theme-auto selector when nologin (#21346)
  * Add `stat` to `ToCommit` function for speed (#21337)
  * Fix typo in API comment document (#21347)
  * Update comment about repository.DISABLED_REPO_UNITS in app.example.ini (#21343)
  * Remove extra space from title element (#21345)
  * Fix slight bug in katex (#21171)
  * Fix linked account translation (#21331)
  * [skip ci] Updated translations via Crowdin
  * Tag list should include draft releases with existing tags (#21263)
  * [skip ci] Updated translations via Crowdin
  * Foreign ID conflicts if ID is 0 for each item (#21271)
  * Make app.ini read-only message more prominent (#21315)
  * Fix doc and heatmap for the Vue3 refactoring (#21312)
  * Allow specifying SECRET_KEY_URI, similar to INTERNAL_TOKEN_URI (#19663)
  * Refactor from Vue2 to Vue3 (#20044)
  * Update Golang deps (#21304)
  * Fix issue that `sync_on_commit` is not set (#21309)
  * [skip ci] Updated translations via Crowdin
  * Add pages to view watched repos and subscribed issues/PRs (#17156)
  * Fix the hook related FAQ contents (#21297)
  * Check if email is used when updating user (#21289)
  * Add name field for org api (#21270)
  * Add API endpoint to get changed files of a PR (#21177)
  * [skip ci] Updated translations via Crowdin
  * Ignore port for loopback redirect URIs (#21293)
  * Improve error descriptions for unauthorized_client (#21292)
  * Consolidate more CSS rules, fix inline code on arc-green (#21260)
  * Update bluemonday (#21281)
  * Add support for authentication based on reverse proxy email (#19949)
  * Do not allow organisation owners add themselves as collaborator (#20043)
  * Feature: Case-insensitive "find files in repo" (#21269)
  * Better repo API unit checks (#21130)
  * Fix empty container layer history and UI (#21251)
  * Add filetree on left of diff view (#21012)
  * [skip ci] Updated translations via Crowdin
  * Add author search input (#21246)
  * Upgrade chroma to v2.3.0 (#21259)
  * [skip ci] Updated translations via Crowdin
  * Typo in config-cheat-sheet (#21261)
  * Use native inputs in whitespace dropdown (#20980)
  * [skip ci] Updated licenses and gitignores
  * Use en-US as fallback when using other default language (#21200)
  * Make NuGet service index publicly accessible (#21242)
  * Save files in local storage as umask (#21198)
  * NPM Package Registry search API endpoint (#20280)
  * [skip ci] Updated translations via Crowdin
  * Added search input field to issue filter (#20623)
  * Various CSS tweaks (#21244)
  * [skip ci] Updated translations via Crowdin
  * Use absolute links in feeds (#21229)
  * Prevent invalid behavior for file reviewing when loading more files (#21230)
  * Respect `REQUIRE_SIGNIN_VIEW` for packages (#20873)
  * Make Clone in VSCode link get updated correctly (#21225)
  * Configure golangci-lint to show all issues (#21106)
  * Fix user visible check (#21210)
  * Fix template bug of admin monitor (#21208)
  * Clarify that `ENABLE_SWAGGER` only influences the API docs, not the routes (#21215)
  * Enable fluid page layout on medium size viewports (#21178)
  * [API] teamSearch show teams with no members if user is admin (#21204)
  * Fix typo (#21201)
  * Remove unnecessary length check for repo's Description & Website (#21194)
  * Treat git object mode 40755 as directory (#21195)
  * Fix reaction of issues (#21185)
  * Fix CSV diff for added/deleted files (#21189)
  * Show label description in comments section (#21156)
  * Limit length of repo description and repo url input fields (#21119)
  * [skip ci] Updated translations via Crowdin
  * File header tweaks (#21175)
  * Keep path when creating a new branch (#21153)
  * Display image digest for container packages (#21170)
  * Use correct branch for .editorconfig error (#21152)
  * Passing command line arguments correctly by string slice (#21168)
  * Sort branches and tags by date descending (#21136)
  * Skip dirty check for team forms (#21154)
  * Add KaTeX rendering to Markdown. (#20571)
  * Update docs comparison.zh-cn.md (#21035)
  * Use form for admin purge user (#21070)
  * Make labels clickable in the comments section. (#21137)
  * Remove fomantic image module (#21145)
  * [skip ci] Updated translations via Crowdin
  * Show .editorconfig errors in frontend (#21088)
  * Update JS dependencies and lint (#21144)
  * Fix PlantUML example in document (#21142)
  * chore(security): Support Go Vulnerability Management (#21139)
  * [skip ci] Updated licenses and gitignores
  * [skip ci] Updated translations via Crowdin
  * Improve commit status icons (#21124)
  * Center-aligning content of WebAuthN page (#21127)
  * Allow poster to choose reviewers (#21084)
  * Generate go-licenses during tidy again (#21108)
  * Make the vscode clone link respect transport protocol (#20557)
  * Fix typo of issue template name (#21117)
  * [skip ci] Updated translations via Crowdin
  * Fix pagination limit parameter problem (#21109)
  * Rewrite go license generator in go (#21078)
  * Allow uppercase ASCII alphabet in PyPI package names (#21095)
  * Fix various typos (#21103)
  * Update docs issue-pull-request-templates.zh-cn.md (#21030)
  * Upgrade the document about how to collect logs for systemd and docker (#21101)
  * [skip ci] Updated translations via Crowdin
  * Bump playwright test image to match version in package.json (#21097)
  * Fix sub folder in repository missing add file dropdown (#21069)
  * [skip ci] Updated translations via Crowdin
  * Add missing volume to test-e2e (#21079)
  * Fix delete user missed some comments (#21067)
  * Remove insecure flag from curl (#21074)
  * Update curl usage in API docs (#21071)
  * Move go-licenses to generate and separate generate into a frontend and backend component (#21061)
  * [skip ci] Updated translations via Crowdin
  * Webhook for Wiki changes (#20219)
  * test: use `T.TempDir` to create temporary test directory (#21043)
  * Set uploadpack.allowFilter etc on gitea serv to enable partial clones with ssh (#20902)
  * Fix 500 on time tracking in timeline API (#21052)
  * Add more checks in migration code (#21011)
  * Fill the specified ref in webhook test payload (#20961)
  * [skip ci] Updated licenses and gitignores
  * Add go licenses to licenses.txt (#21034)
  * Added docs for agit-setup (#21027)
  * Add another index for Action table on postgres (#21033)
  * Delete unreferenced packages when deleting a package version (#20977)
  * Improve arc-green code theme (#21039)
  * Add down key check has tribute container (#21016)
  * Do not add links to Posters or Assignees with ID < 0 (#20577)
  * [skip ci] Updated translations via Crowdin
  * Show language name on hover (#20923)
  * fix: PackageMetadataVersion deps (#21017)
  * Fix the quick-submit for pending review comment (#20992)
  * Kd/ci playwright go test (#20123)
  * chore: add myself to maintainers (#21028)
  * Support Issue forms and PR forms (#20987)
  * Include go.mod in gomod-check and rename to tidy-check (#21025)
  * [skip ci] Updated translations via Crowdin
  * Update a few go dependencies (#21022)
  * [skip ci] Updated translations via Crowdin
  * Fix missed sort bug (#20996)
  * Fix typo (#21004)
  * Make sure fmt catches all templates (#20979)
  * Remove black labels and CSS cleanup (#21003)
  * Go 1.19 format (#20758)
  * [skip ci] Updated translations via Crowdin
  * Fix typo (#20993)
  * fix broken insecureskipverify handling in rediss connection uris (#20967)
  * Redirect if user does not exist (#20981)
  * fix hard-coded timeout and error panic in API archive download endpoint (#20925)
  * Add support for Vagrant packages (#20930)
  * [skip ci] Updated translations via Crowdin
  * Add instructions how to add service dependencies (#20968)
  * Share HTML template renderers and create a watcher framework (#20218)
  * [skip ci] Updated licenses and gitignores
  * [skip ci] Updated translations via Crowdin
  * Change review buttons to icons to make space for text (#20934)
  * Fix download archiver of a commit (#20962)
  * Add whitespace removal inside template curly brackes (#20853)
  * Only show relevant repositories on explore page (#19361)
  * Replace `ServeStream` with `ServeContent` (#20903)
  * Update JS dependencies (#20950)
  * chore: remove broken gitea-format-imports (#20952)
  * Fix input.value attr for RequiredClaimName/Value (#20946)
  * Move some files into models' sub packages (#20262)
  * [skip ci] Updated translations via Crowdin
  * docs[zh-cn]: Install on Kubernetes (#20874)
  * Return 404 NotFound if requested attachment does not exist (#20886)
  * Avoid frequent string2bytes conversions (#20940)
  * Display total blob size of a package version. (#20927)
  * Display all files. (#20917)
  * Enhance package date display (#20928)
  * [skip ci] Updated translations via Crowdin
  * Forbid HTML string tooltips (#20935)
  * Set no-tags in git fetch on compare (#20893)
  * Update comparison.en-us.md: link subgroups issue (#20905)
  * Enable contenthash in filename for dynamic assets (#20813)
  * refactor webhook *EditPost (#20780)
  * Changelog 1.17.1 (#20833) (#20919)
  * Fix typo in backup documentation (pgdump->pg_dump) (#20913)
  * Increase Content field size of gpg_key and public_key to MEDIUMTEXT (#20896)
  * Improve single repo action for issue and pull requests (#20730)
  * Remove deprecated licenses (#20222)
  * update current stable version
  * [skip ci] Updated translations via Crowdin
  * Fix mirror address setting not working (#20850)
  * Support Proxy protocol (#12527)
  * Fix SQL Query for `SearchTeam` (#20844)
  * Double check CloneURL is acceptable (#20869)
  * Fix graceful doc (#20883)
  * Pad GPG Key ID with preceding zeroes (#20878)
  * [skip ci] Updated translations via Crowdin
  * call builtinUnused() if internal SSH is disabled (#20877)
  * Don't open new page for ext wiki on same repository (#20725)
  * [skip ci] Updated translations via Crowdin
  * Fix the mode of custom dir to 0700 in docker-rootless (#20861)
  * Fix UI mis-align for PR commit history (#20845)
  * Fix create repository page's help text (#20810)
  * In PushMirrorsIterate and MirrorsIterate if limit is negative do not set it (#20837)
  * Disable doctor logging on panic (#20847)
  * Remove calls to load Mirrors in user.Dashboard (#20855)
  * switch to node18 for snapcraft
  * Prevent 500 is head repo does not have PullRequest unit in IsUserAllowedToUpdate (#20839)
  * Fix owners cannot create organization repos bug (#20841)
  * Fix migration file name (#20843)
  * Check Mirror exists before linking its Repo (#20840)
  * [skip ci] Updated translations via Crowdin
  * Add badge capabilities to users (#20607)
  * docs[zh-cn]: Managing Deployments With Environment Variables (#20817)
  * Correctly escape within tribute.js (#20831)
  * Fix panic when an invalid oauth2 name is passed (#20820)
  * Use the total issue count for UI (#20785)
  * Add proxy host into allow list (#20798)
  * Fix tooltip init after review (#20814)
  * auth/reverseproxy: Add support for full name (#20776)
  * Add migrate repo archiver and packages storage support on command line (#20757)
  * Refactor AssertExistsAndLoadBean to use generics (#20797)
  * [skip ci] Updated translations via Crowdin
  * Fix the commit diff route (#20796)
  * Fix push mirror address backend get error Address cause setting page display error (#20593)
  * Remove follow from commits by file (#20765)
  * [skip ci] Updated translations via Crowdin
  * Fix `make watch` for generated files (#20794)
  * Add missing translation for queue flush workers (#20791)
  * Update zh-cn translation for Installation from source (#20772)
  * Improve comment header for Mobile (#20781)
  * Add myself to MAINTAINERS (#20786)
  * [skip ci] Updated licenses and gitignores
  * Preserve unix socket file (#20499)
  * Switch Unicode Escaping to a VSCode-like system (#19990)
  * Fix git.Init for doctor sub-command (#20782)
  * Remove the translation key website by PR #20777 (#20779)
  * Move the official website link at the footer of gitea (#20777)
  * Remove useless JS operation for relative time tooltips (#20756)
  * Remove debug output when coverage fails (#20733)
  * Slightly reduce exclamation icon size (#20753)
  * Fix disabled open in vscode menu when disabling download source from UI (#20713)
  * refactor webhook *NewPost (#20729)
  * Add SAML SP status to Feature Comparison docs (#20743)
  * Fix loading button with invalid form (#20754)
  * [skip ci] Updated translations via Crowdin
  * Make branch icon stand out more (#20726)
  * Update docs for versions (#20750)
  * Replace some icons with SVG (#20741)
  * Use separate class for tippy targets (#20742)
  * Add support mCaptcha as captcha provider (#20458)
  * Fix CI status popup (#20737)
  * Add documentation about pagination of the API (#20740)
  * [skip ci] Updated translations via Crowdin
  * Change commit status icons to SVG (#20736)
  * Add support for NuGet API keys (#20721)
  * Keep download count on Container tag overwrite (#20728)
  * Replace fomantic popup module with tippy.js (#20428)
  * Add an option to create new issues from "/issues" page (#20650)
  * Restore history button and hide add button when unable to add (#20718)
  * Remove manual rollback for failed generated repositories (#20639)
  * Add support for `npm unpublish` (#20688)
  * Allow multiple files in generic packages (#20661)
  * Refactor legacy git init (#20376)
  * Fix typo in source (#20723)
  * [skip ci] Updated translations via Crowdin
  * Add issue filter for Author (#20578)
  * Fix init mail render logic (#20704)
  * Frontport changelog v1.17.0 (#20712)
  * Fix disable download button (#20701)
  * docs: move search input to navbar (#20551)
  * Fix SecToTime edge-cases (#20610)
  * [skip ci] Updated translations via Crowdin
  * Fix v220 migration to be compatible for MSSQL 2008 r2 (#20702)
  * Rework repo buttons (#20602)
  * Switch to building with go1.19 (#20695)
  * Update maven deploy docs (#20691)
  * Add support for Pub packages (#20560)
  * Fix typo overrided -> overridden (#20687)
  * [skip ci] Updated licenses and gitignores
  * Update JS dependencies, adjust eslint (#20659)
  * Background color of private list-items updated (#20630)
  * Use request timeout for git service rpc (#20689)
  * Increase default item listing size `ISSUE_PAGING_NUM` to 20 (#20547)
  * [skip ci] Updated translations via Crowdin
  * Allow multiple metadata files for Maven packages (#20674)
  * docs: update comparison.zh-cn.md (#20656)
  * Add a notice for breaking check in upgrade document (#20682)
  * move handleGlobalEnterQuickSubmit into a separate file to avoid cycle-import (#20679)
  * Use correct field name. (#20675)
  * [skip ci] Updated translations via Crowdin
  * Use correct context to get package content (#20673)
  * Executable check always returns true for windows (#20637)
  * Check webhooks slice length before calling xorm (#20642)
  * Check issue labels slice length before calling xorm Insert; fixes #20654 (#20655)
  * [skip ci] Updated translations via Crowdin
  * Fix the JS error "EventSource is not defined" caused by some non-standard browsers (#20584)
  * Send correct NuGet status codes (#20647)
  * Add default commit messages to PR for squash merge (#20618)
  * [skip ci] Updated translations via Crowdin
  * Use `strings.Cut` for GIT_PROTOCOL value (#20638)
  * Fix the admin mailer config display (#20633)
  * Use correct page size for link header pagination (#20546)
  * Fix package upload for files >32mb (#20622)
  * Add info about Wire 2 when Git over SSH (#20619)
  * Enable Wire 2 for Internal SSH Server (#20616)
  * Rework mailer settings (#18982)
  * Add default value for clone URLs (#20600)
  * [skip ci] Updated translations via Crowdin
  * docs: zh-cn translations for fail2ban setup (#20588)
  * Should also support upper-case README files (#20581)
  * Fix typos in backup documentation (#20567)
  * [skip ci] Updated translations via Crowdin
  * Support localized README (#20508)
  * Clean up and fix clone button script (#20415)
  * Add disable download source configuration (#20548)
  * Fix default merge style (#20564)
  * Update login methods in package docs (#20561)
  * Add missing Tabs on organisation/package view (Frontport #20539) (#20540)
  * [skip ci] Updated licenses and gitignores
  * Add setting `SQLITE_JOURNAL_MODE` to enable WAL (#20535)
  * Rework file highlight rendering and fix yaml copy-paste (#19967)
  * Add new API endpoints for push mirrors management (#19841)
  * WebAuthn CredentialID field needs to be increased in size (#20530)
  * Add latest commit's SHA to content response (#20398)
  * Improve token and secret key generation docs (#20387)
  * [skip ci] Updated translations via Crowdin
  * Rework raw file http header logic (#20484)
  * Update lunny/levelqueue to prevent NPE when reads are performed after close (#20534)
  * Added guidance on file to choose to download (#20474)
  * [skip ci] Updated translations via Crowdin
  * Ensure that all unmerged files are merged when conflict checking (#20528)
  * packages/generic: Do not restrict package versions to SemVer (#20414)
  * Stop logging EOFs and exit(1)s in ssh handler (#20476)
  * Fix dashboard switching on Mobile (#20238)
  * Modify milestone search keywords to be case insensitive again (#20513)
  * Fix i18n for email notifications (#20518)
  * Extended permission checks. (#20517)
  * Add a checkbox to select all issues/PRs (#20177)
  * Added email notification option to receive all own messages (#20179)
  * Add Docker /v2/_catalog endpoint (#20469)
  * Removed some vestigial code related to Range bounds checks (#20312)
  * Add markdownlint (#20512)
  * Fix possible panic when repository is empty (#20509)
  * patch (doc): add heading to ssh flow explanation (#20506)
  * Show hint to link package to repo when viewing empty repo package list (#20504)
  * Fix ROOT_URL detection for URLs without trailing slash (#20502)
  * Add Tar ZSTD support (#20493)
  * Hide internal package versions (#20492)
  * Fix org members bug (#20489)
  * Add labels to two buttons that were missing them (#20419)
  * fix enabling repo packages when projects are off (#20486)
  * Display project in issue list (#20434)
  * Make code review ceckboxes clickable (#20481)
  * Slightly simplify LastCommitCache (#20444)
  * Fix Ruby package parsing by removed unused email field (#20470)
  * [skip ci] Updated translations via Crowdin
  * Add repository condition for issue count (#20454)
  * Prepend commit message to template content (#20429)
  * Improve pprof doc (#20463)
  * Improve code diff highlight, fix incorrect rendered diff result (#19958)
  * Add Cache-Control header to html and api responses, add no-transform (#20432)
  * [skip ci] Updated translations via Crowdin
  * Allow non-semver packages in the Conan package registry (#20412)
  * Use body text color in repository files table links (#20386)
  * Correct code block in installation docs for Snap (#20440)
  * Downgrade golangci-lint to 1.47.0 (#20445)
  * Add eslint-plugin-sonarjs (#20431)
  * Fix: Actor is required to get user repositories (#20443)
  * Add "X-Gitea-Object-Type" header for GET `/raw/` & `/media/` API (#20438)
  * Simplify visibility checks (#20406)
  * Add Cloudflare auto-minify to FAQ (#20430)
  * [skip ci] Updated translations via Crowdin
  * Update JS dependencies (#20423)
  * Update all tool dependencies to their latest versions (#20409)
  * [skip ci] Updated translations via Crowdin
  * Dismiss prior pull reviews if done via web in review dismiss (#20197)
  * Fix modified due date message (#20388)
  * Fix public org members displayed too many informations (#20403)
  * Add two factor status to admin cmd display (#20401)
  * Use tippy.js for context popup (#20393)
  * [skip ci] Updated licenses and gitignores
  * Comment on PrivateUsers option for gitea.service (#20383)
  * [skip ci] Updated translations via Crowdin
  * Remove confusing TrimPrefix(... git.BranchPrefix) (#20369)
  * Set target on create release with existing tag (#20381)
  * Initialize cron last (#20373)
  * Allow access to the Public Organization Member lists with minimal permissions (#20330)
  * Fix commit status icon when in subdirectory (#20285)
  * Fix eslint parsing errors, remove eslint-plugin-html (#20323)
  * Include login_name in adminCreateUser response (#20283)
  * Add allow_rebase_update, default_delete_branch_after_merge to repository api response (#20079)
  * Allow to specify colors for text in markup (#20363)
  * [skip ci] Updated translations via Crowdin
  * update xorm.io/xorm v1.3.2-0.20220714055524-c3bce556200f (#20371)
  * Add order by for assignee no sort issue (#20053)
  * Make sure `repo_dir` is an empty directory or doesn't exist before 'dump-repo' (#20205)
  * Fix English mistakes in some Markdown documents (#20274)
  * Fix versions check for busybox `sh` (#20358)
  * Unbreak release pipeline (#20356)
  * Add option to purge users (#18064)
  * Fix icon margin in user/settings/repos (#20281)
  * Fix org label open count, including close count issue (#20353)
  * [skip ci] Updated translations via Crowdin
  * Prevent context deadline error propagation in GetCommitsInfo (#20346)
  * Add missing return for when topic isn't found (#20351)
  * Upgrade to Node 18 on CI (#20340)
  * Fix checks in PR for empty commits #19603 (#20290)
  * Use default values when provided values are empty (#20318)
  * Add tests for the host checking logic, clarify the behaviors (#20328)
  * Changelog for 1.16.9 (update) (#20341) (#20343)
  * Fix various typos (#20338)
  * Correctly handle draft releases without a tag (#20314)
  * Add write check for creating Commit status (#20332)
  * Remove blue text on migrate page (#20273)
  * Updated dead link to Madeleine.js source (#20322)
  * [skip ci] Updated translations via Crowdin
  * Add spectral linter for Swagger (#20321)
  * Store read access in access for team repo's (#20275)
  * [skip ci] Updated translations via Crowdin
  * Vertical align avatar at middle (#20302)
  * Changed scroll to auto for some UI elements. (#20294)
  * Add hint to GNUPGHOME environment variable (#20134)
  * Refactor SSH init code, fix directory creation for TrustedUserCAKeys file (#20299)
  * [skip ci] Updated translations via Crowdin
  * Use dedicated draft PR icon when possible (#20303)
  * Update goldmark (#20300)
  * Do not create empty ".ssh" directory when loading config (#20289)
  * Implement sync push mirror on commit (#19411)
  * Use git.HOME_PATH for Git HOME directory (#20114)
  * Add tooltip to repo icons in explore page (#20241)
  * Fix NPE when using non-numeric (#20277)
  * Modify milestone search keywords to be case insensitive (#20266)
  * Fix toolip on mobile notification bell (#20270)
  * Allow RSA 2047 bit keys (#20272)
  * Refix notification bell placement (#20251)
  * Bump mermaid from 9.1.1 to 9.1.2 (#20256)
  * EscapeFilter the group dn membership (#20200)
  * Only show Followers that current user can access (#20220)
  * Init popup for new code comment (#20234)
  * Bypass Firefox (iOS) bug (#20244)
  * Adjust max-widths for the repository file table (#20243)
  * Display full name (#20171)
  * Adjust class for mobile has the problem of double small bells (#20236)
  * Adjust template for #20069 smallbell (#20108)
  * Add integration tests for the Gitea migration form (#20121)
  * Allow dev i18n to be more concurrent (#20159)
  * Allow enable LDAP source and disable user sync via CLI (#20206)
  * Remove `GO111MODULE` (#20221)
  * Update Bluemonday to v1.0.19 (#20199)
  * Refix indices on actions table (#20158)
  * Update default allowed attachment types (#20192)
  * Fix cli command restore-repo: "units" should be splitted to string slice, to match the old behavior and match the dump-repo's behavior (#20183)
  * [skip ci] Updated translations via Crowdin
  * Fix `dump-repo` git init, fix wrong error type for NullDownloader (#20182)
  * Check if project has the same repository id with issue when assign project to issue (#20133)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Enable spellcheck for EasyMDE, use contenteditable mode (#19776)
  * [skip ci] Updated translations via Crowdin
  * Add username check to doctor (#20140)
  * Refactor `i18n` to `locale` (#20153)
  * Remove support for sr-SP (#20155)
  * Hide notify mail setting ui if not enabled (#20138)
  * Fix custom folder name in customization docs (#20148)
  * Add missing parameter for error in log message (#20144)
  * Show scrollbar when necessary (#20142)
  * Add spacing between the properties of the key (#20145)
  * Remove U2F support (#20141)
  * Make better use of i18n  (#20096)
  * Use neutral language in comments and docs (#20135)
  * Fix remove file on initial comment (#20127)
  * Add doctor command to write commit-graphs (#20007)
  * Add sitemap support (#18407)
  * Use new config options (#20125)
  * Remove depricated queue indexer usage (#20124)
  * Disable status checks in template if none found (#20088)
  * Fix typos related to ErrTaskDoesNotExist error (#20118)
  * Move eslintrc/stylelintrc to non-deprecated extensions (#20110)
  * Allow manager logging to set SQL (#20064)
  * Replace pubkey with privkey in keys_ssh.tmpl (#20112)
  * Update security information to add a public gpg key to make sending encrypted message possible (#20117)
  * Improve log document (#20097)
  * Fix wrong login requirement routers (#20101)
  * Respect setting.UI.FeedPagingNum (#20094)
  * [skip ci] Updated translations via Crowdin
  * Use correct variable for issue count (#20085)
  * Fix alias traversal (#20076)
  * Update permissions.en-us.md (#20075)
  * Changelog for 1.16.9 (#20059) (#20063)
  * Release page show all tags in compare dropdown (#20070)
  * docs: Mention file extension for issue_template directory (#20057)
  * [skip ci] Updated translations via Crowdin
  * Catch the error before the response is processed by goth. (#20000)
  * Adjust transaction handling via db.Context (#20031)
  * Add more linters to improve code readability (#19989)
  * [skip ci] Updated translations via Crowdin
  * Disable federation by default (#20045)
  * Respond with a 401 on git push when password isn't changed yet (#20026)
  * Alter hook_task TEXT fields to LONGTEXT (#20038)
  * Simplify and fix migration 216 (#20035)
  * use quoted regexp instead of git fixed-value (#20029)
  * fix delete pull head ref for DeleteIssue (#20032)
  * User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133)
  * Backtick table name in generic orphan check (#20019)
  * Update document to clarify that ALLOWED_DOMAINS/BLOCKED_DOMAINS support wildcard (#20016)
  * Return 404 when tag is broken (#20017)
  * Dump should only copy regular files and symlink regular files (#20015)

-------------------------------------------------------------------
Thu Dec 22 10:36:54 UTC 2022 - ecsos@opensuse.org

- Update to version 1.17.4:
  * Update changelog for 1.17.4 (#22198)
  * fix: update libcurl in docs pipeline (#22205)
  * Normalize NuGet package version on upload (#22186) (#22201)
  * Disable auto tag to prepare next 1.17 release (#22180)
  * Check for zero time instant in TimeStamp.IsZero() (#22171) (#22173)
  * Do not list active repositories as unadopted (#22034) (#22167)
  * Correctly handle moved files in apply patch (#22118) (#22136)
  * Fix condition for is_internal (#22095) (#22131)
  * Fix warn in database structs sync (#22111)
  * Fix sorting admin user list by last login (#22081) (#22106)
  * Fix permission check on issue/pull lock (#22114)
  * Workaround for container registry push/pull errors (#21862) (#22069)
  * Fix issue/PR numbers (#22037) (#22045)
  * Handle empty author names (#21902) (#22028)
  * On Tag/Branch Exist Check, dont panic if repo is nil (#21787) (#21789)
  * Fix ListBranches to handle empty case (#21921) (#22025)
  * Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21927)
  * Fix vertical align of committer avatar rendered by email address (#21884) (#21919)
  * Fix setting HTTP headers after write (#21833) (#21874)
  * Do not allow Ghost access to limited visible user/org (#21849) (#21875)
  * Prevent dangling user redirects (#21856) (#21859)
  * Fix enabling partial clones on 1.17 (#21809)
  * Prevent panic in doctor command when running default checks (#21791) (#21808)
  * Upgrade golang.org/x/crypto (#21792) (#21794)
  * Load GitRepo in API before deleting issue (#21720) (#21795)
  * Ignore line anchor links with leading zeroes (#21728) (#21777)
  * Add HEAD fix to gitea doctor (#21352) (#21751)
  *  Init git module before database migration (#21764) (#21766)
  * Set last login when activating account (#21731) (#21754)
  * Fix UI language switching bug (#21597) (#21748)
  * Remove semver compatible flag and change pypi to an array of test cases (#21708) (#21729)
  * Allow for resolution of NPM registry paths that match upstream (#21568) (#21723)
  * Allow local package identifiers for PyPI packages (#21690) (#21726)
  * Fix repository adoption on Windows (#21646) (#21651)
  * Sync git hooks when config file path changed (#21619) (#21625)
  * Fix package access for admins and inactive users (#21580) (#21592)
  * Fix `Timestamp.IsZero` (#21593) (#21604)
  * Added check for disabled Packages (#21540) (#21614)
  * Fix issues count bug (#21600)
  * Update milestone counters when issue is deleted (#21459) (#21586)
  * Suppress `ExternalLoginUserNotExist` error (#21504) (#21572)
  * support binary deploy in npm packages (#21589)
  * SessionUser protection against nil pointer dereference (#21581)
  * Case-insensitive NuGet symbol file GUID (#21409) (#21575)
  * Prevent Authorization header for presigned LFS urls (#21531) (#21569)
  * Update binding to fix bugs (#21560)
  * Check for valid user token in integration tests (#21520) (#21529)
  * Fix generating compare link (#21519) (#21530)
  * Ignore error when retrieving changed PR review files (#21487) (#21524)
  * Enable Monaco automaticLayout (#21516)
  * Fix incorrect notification commit url (#21479) (#21483)
  * Display total commit count in hook message (#21400) (#21481)
  * Enforce grouped NuGet search results (#21442) (#21480)
  * Return 404 when user is not found on avatar (#21476) (#21477)

-------------------------------------------------------------------
Tue Oct 25 18:47:18 UTC 2022 - ecsos <ecsos@opensuse.org>

- Remove @resources which will crash gitea and double @obsolete

-------------------------------------------------------------------
Tue Oct 25 11:57:16 UTC 2022 - Dirk Müller <dmueller@suse.com>

- Update to version 1.17.3:
  see https://blog.gitea.io/2022/10/gitea-1.17.3-is-released/
  * Bump golang.org/x/text (#21412) (#21413)
  * Update bluemonday (#21281) (#21287)
  * Sanitize and Escape refs in git backend (#21464) (#21463)
  * ENHANCEMENTS
  * Fix empty container layer history and UI (#21251) (#21278)
  * Use en-US as fallback when using other default language (#21200) (#21256)
  * Make the vscode clone link respect transport protocol (#20557) (#21128)
  * BUGFIXES
  * Do DB update after merge in hammer context (#21401) (#21416)
  * Add Num{Issues,Pulls} stats checks (#21404) (#21414)
  * Stop logging CheckPath returns error: context canceled (#21064) (#21405)
  * Parse OAuth Authorization header when request omits client secret (#21351) (#21374)
  * Ignore port for loopback redirect URIs (#21293) (#21373)
  * Set SemverCompatible to false for Conan packages (#21275) (#21366)
  * Tag list should include draft releases with existing tags (#21263) (#21365)
  * Fix linked account translation (#21331) (#21334)
  * Make NuGet service index publicly accessible (#21242) (#21277)
  * Foreign ID conflicts if ID is 0 for each item (#21271) (#21272)
  * Use absolute links in feeds (#21229) (#21265)
  * Prevent invalid behavior for file reviewing when loading more files (#21230) (#21234)
  * Respect REQUIRE_SIGNIN_VIEW for packages (#20873) (#21232)
  * Treat git object mode 40755 as directory (#21195) (#21218)
  * Allow uppercase ASCII alphabet in PyPI package names (#21095) (#21217)
  * Fix limited user cannot view himself’s profile (#21212)
  * Fix template bug of admin monitor (#21209)
  * Fix reaction of issues (#21185) (#21196)
  * Fix CSV diff for added/deleted files (#21189) (#21193)
  * Fix pagination limit parameter problem (#21111)
  * Use Go 1.19 fmt for Gitea 1.17, sync emoji data (#21239)
- switch to Node 18 as Node 16 got dropped from Tumbleweed

-------------------------------------------------------------------
Sat Oct  1 10:41:49 UTC 2022 - Michael Ströder <michael@stroeder.com>

- Changes in AppArmor profile:
  * grant write access to app.ini only in case the file is owned by gitea
  * include openssl abstraction

-------------------------------------------------------------------
Mon Sep 19 18:16:45 UTC 2022 - Michael Ströder <michael@stroeder.com>

- AppArmor to grant executing gzip

-------------------------------------------------------------------
Thu Sep 15 15:57:50 UTC 2022 - Matthias Fehring <buschmann23@opensuse.org>

- include local AppArmor config into profile if available

-------------------------------------------------------------------
Mon Sep 12 11:58:44 UTC 2022 - Michael Ströder <michael@stroeder.com>

- small AppArmor fixes

-------------------------------------------------------------------
Wed Sep  7 11:58:54 UTC 2022 - Stephan Kulow <coolo@suse.com>

- Remove gitea-nodejs_package.json.patch
- Install gulp using nodejs

-------------------------------------------------------------------
Tue Sep 06 22:25:22 UTC 2022 - michael@stroeder.com

- Update to version 1.17.2
  * SECURITY
    - Double check CloneURL is acceptable (#20869) (#20892)
    - Add more checks in migration code (#21011) (#21050)
  * ENHANCEMENTS
    - Fix hard-coded timeout and error panic in API archive download endpoint (#20925) (#21051)
    - Improve arc-green code theme (#21039) (#21042)
    - Enable contenthash in filename for dynamic assets (#20813) (#20932)
    - Don't open new page for ext wiki on same repository (#20725) (#20910)
    - Disable doctor logging on panic (#20847) (#20898)
    - Remove calls to load Mirrors in user.Dashboard (#20855) (#20897)
    - Update codemirror to 5.65.8 (#20875)
    - Rework repo buttons (#20602, #20718) (#20719)
  * BUGFIXES
    - Ensure delete user deletes all comments (#21067) (#21068)
    - Delete unreferenced packages when deleting a package version (#20977) (#21060)
    - Redirect if user does not exist on admin pages (#20981) (#21059)
    - Set uploadpack.allowFilter etc on gitea serv to enable partial clones with ssh (#20902) (#21058)
    - Fix 500 on time in timeline API (#21052) (#21057)
    - Fill the specified ref in webhook test payload (#20961) (#21055)
    - Add another index for Action table on postgres (#21033) (#21054)
    - Fix broken insecureskipverify handling in redis connection uris (#20967) (#21053)
    - Add Dev, Peer and Optional dependencies to npm PackageMetadataVersion (#21017) (#21044)
    - Do not add links to Posters or Assignees with ID < 0 (#20577) (#21037)
    - Fix modified due date message (#20388) (#21032)
    - Fix missed sort bug (#21006)
    - Fix input.value attr for RequiredClaimName/Value (#20946) (#21001)
    - Change review buttons to icons to make space for text (#20934) (#20978)
    - Fix download archiver of a commit (#20962) (#20971)
    - Return 404 NotFound if requested attachment does not exist (#20886) (#20941)
    - Set no-tags in git fetch on compare (#20893) (#20936)
    - Allow multiple metadata files for Maven packages (#20674) (#20916)
    - Increase Content field size of gpg_key and public_key to MEDIUMTEXT (#20896) (#20911)
    - Fix mirror address setting not working (#20850) (#20904)
    - Fix push mirror address backend get error Address cause setting page display error (#20593) (#20901)
    - Fix panic when an invalid oauth2 name is passed (#20820) (#20900)
    - In PushMirrorsIterate and MirrorsIterate if limit is negative do not set it (#20837) (#20899)
    - Ensure that graceful start-up is informed of unused SSH listener (#20877) (#20888)
    - Pad GPG Key ID with preceding zeroes (#20878) (#20885)
    - Fix SQL Query for `SearchTeam` (#20844) (#20872)
    - Fix the mode of custom dir to 0700 in docker-rootless (#20861) (#20867)
    - Fix UI mis-align for PR commit history (#20845) (#20859)

-------------------------------------------------------------------
Tue Sep  6 08:23:22 UTC 2022 - Michael Ströder <michael@stroeder.com>

- removed AppArmorProfile= from gitea.service because it does not
  work in case apparmor.service is not running and thus the AppArmor
  profile wasn't loaded
- make /etc/gitea/conf writeable (for initial setup)
- let AppArmor grant write access to /usr/share/gitea/.ssh/

-------------------------------------------------------------------
Sat Sep  3 12:19:35 UTC 2022 - Michael Ströder <michael@stroeder.com>

- changes to systemd service unit:
  * hardened with sand-boxing options
  * added SystemCallFilter=
  * split env vars into multiple Environment= lines
  * uncommented After= lines of optionally used other services
- added AppArmor profile

-------------------------------------------------------------------
Fri Sep  2 12:22:01 UTC 2022 - Stephan Kulow <coolo@suse.com>

- Simplify the fomantic off line build

-------------------------------------------------------------------
Fri Sep 02 11:19:56 UTC 2022 - coolo@suse.com

- Update to version 1.17.1:
  * update changelog
  * Prevent 500 is head repo does not have PullRequest unit in IsUserAllowedToUpdate (#20839) (#20848)
  * Fix owners cannot create organization repos bug (#20841) (#20854)
  * Changelog 1.17.1 (#20833)
  * Check Mirror exists before linking its Repo (#20840) (#20842)
  * Add migrate repo archiver and packages storage support on command line (#20757) (#20806)
  * Check issue labels slice length before calling xorm Insert(#20655) (#20836)
  * Executable check always returns true for windows (#20637) (#20835)
  * Correctly escape within tribute.js (#20831) (#20832)
  * Use the total issue count for UI (#20785) (#20827)
  * fix merge (#20819)
  * Improve comment header for mobile (#20781) (#20789)
  * Add missing translation for queue flush workers (#20791) (#20792)
  * Fix git.Init for doctor sub-command (#20782) (#20783)
  * Make branch icon stand out more (#20726) (#20774)
  * Add disable download source configuration (#20548) (#20579)
  * Check webhooks slice length before calling xorm (#20642) (#20768)
  * Remove manual rollback for failed generated repositories (#20639) (#20762)
  * Fix loading button with invalid form (#20754) (#20759)
  * Use correct field name. (#20675) (#20760)
  * Add support for NuGet API keys (#20721) (#20734)
  * Keep download count on Container tag overwrite (#20728) (#20735)
  * Fix v220 migration to be compatible for MSSQL 2008 r2 (#20702) (#20707)
  *  Fix SecToTime edge-cases (#20610) (#20611)
  * Update issues.ref_closing_from in locale_ru-RU.ini (#20699)
  * Use request timeout for git service rpc (#20689) (#20693)
  * Use correct context to get package content (#20673) (#20676)
  * Send correct NuGet status codes (#20647) (#20677)
  * Add username check to doctor (#20140) (#20671)
  * Fix the JS error "EventSource is not defined" caused by some non-standard browsers (#20584) (#20663)
  * Add default commit messages to PR for squash merge (#20618) (#20645)
  * Fix package upload for files >32mb (#20622) (#20635)
  * Adjust line detection in highlight.go (#20612)
  * Display project in issue list (#20583)
  * Enable Wire 2 for Internal SSH Server (#20616) (#20617)
  * Clean up and fix clone button script (#20415 & #20600) (#20599)
  * Fix default merge style for pull requests (#20564) (#20565)

-------------------------------------------------------------------
Tue Aug 02 11:50:09 UTC 2022 - dmueller@suse.com

- Update to version 1.17.0:
  * Changelog v1.17.0 (#20541)
  * WebAuthn CredentialID field needs to be increased in size (#20530) (#20555)
  * Rework raw file http header logic (#20484) (#20542)
  * Add Docker /v2/_catalog endpoint (#20469) (#20556)
  * Update notification count for non-mobile version (#20544)
  * Add missing Tabs on organisation/package view (#20539)
  * Ensure that all unmerged files are merged when conflict checking (#20528) (#20536)
  * Update lunny/levelqueue to prevent NPE when reads are performed after close (#20534) (#20537)
  * Stop logging EOFs and exit(1)s in ssh handler (#20476) (#20529)
  * packages/generic: Do not restrict package versions to SemVer (#20414) (#20531)
  * Add labels to two buttons that were missing them (#20419) (#20524)
  * Allow non-semver packages in the Conan package registry (#20412) (#20523)
  * Fix possible panic when repository is empty (#20509) (#20526)
  * Fix Ruby package parsing by removed unused email field (#20470) (#20525)
  * Fix dashboard switching on Mobile (#20238) (#20239)
  * Fix package permission checks for organizations (#20517) (#20520)
  * Fix ROOT_URL detection for URLs without trailing slash (#20503)
  * Show hint to link package to repo when viewing empty repo package list (#20504) (#20507)
  * Modify milestone search keywords to be case insensitive (#20266) (#20498)
  * Add repository condition for issue count (#20496)
  * fix enabling repo packages when projects are off (#20486) (#20488)
  * Add Cache-Control header to html and api responses, add no-transform (#20432) (#20459)
  * Dismiss prior pull reviews if done via web in review dismiss (#20197) (#20407)
  * Changelog v1.17.0-rc2 (#20350)
  * Allow RSA 2047 bit keys (#20272) (#20396)
  * Add missing return for when topic isn't found (#20351) (#20395)
  * Fix commit status icon when in subdirectory (#20285) (#20385)
  * Set target on create release with existing tag (#20381) (#20382)
  * Initialize cron last (#20373) (#20384)
  * Make sure `repo_dir` is an empty directory or doesn't exist before 'dump-repo' (#20205) (#20370)
  * update xorm.io/xorm v1.3.2-0.20220714055524-c3bce556200f (#20371) (#20372)
  * Prevent context deadline error propagation in GetCommitsInfo (#20346) (#20361)
  * Fix org label open count, including close count issue (#20364)
  * Fix checks in PR for empty commits (#20290) (#20352)
  * Hide notify mail setting ui if not enabled (#20138) (#20336)
  * Correctly handle draft releases without a tag (#20314) (#20335)
  * Add write check for creating Commit status (#20332) (#20333)
  * Refactor SSH init code, fix directory creation for TrustedUserCAKeys file (#20299) (#20306)
  * Prevent "empty" scrollbars on Firefox (#20294) (#20308)
  * Do not create empty ".ssh" directory when loading config (#20289) (#20298)
  * Bump goldmark to v1.4.13 (#20300) (#20301)
  * Store read access in access for team repo's (#20275) (#20276)
  * Use git.HOME_PATH for Git HOME directory (#20114) (#20293)
  * Make notification bell more prominent on mobile (#20108, #20236, #20251) (#20269)
  * Fix NPE when using non-numeric (#20277) (#20278)
  * Only show Followers that current user can access (#20220) (#20252)
  * EscapeFilter the group dn membership (#20200) (#20254)
  * Display full name (#20171) (#20246)
  * Adjust max-widths for the repository file table (#20243) (#20247)
  * Bypass Firefox (iOS) bug (#20244) (#20250)
  * Init popup for new code comment (#20234) (#20235)
  * Update Bluemonday to v1.0.19 (#20199) (#20209)
  * Refix indices on actions table (#20158) (#20198)
  * Fix `dump-repo` git init, fix wrong error type for NullDownloader (#20182) (#20186)
  * Fix cli command restore-repo: "units" should be parsed as cli.String (#20183) (#20187)
  * Check if project has the same repository id with issue when assign project to issue (#20133) (#20188)
  * Update default allowed attachment types (#20193)
  * Show scrollbar when necessary (#20142) (#20143)
  * Fix remove file on initial comment (#20127) (#20128)
  * Fix wrong login requirement routers (#20101) (#20104)
  * Catch the error before the response is processed by goth. (#20000) (#20102)
  * Dashboard feed respect setting.UI.FeedPagingNum again (#20094) (#20099)
  * Use correct variable for issue count (#20086)
  * Release page show all tags in compare dropdown (#20070) (#20072)
  * Changelog v1.17.0-rc1 (#20023)
  * Disable federation by default (#20045) (#20046)
  * Simplify and fix migration 216 (#20036)
  * Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041)
  * Backtick table name in generic orphan check (#20019) (#20037)
  * Respond with a 401 on git push when password isn't changed yet (#20027)
  * Fix delete pull head ref for DeleteIssue (#20032)  (#20034)
  * use quoted regexp instead of git fixed-value (#20030)
  * Dump should only copy regular files and symlink regular files (#20015) (#20021)
  * Return 404 when tag is broken (#20024)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Add fgprof pprof profiler (#20005)
  * [skip ci] Updated translations via Crowdin
  * Improve action table indices (#19472)
  * Add dbconsistency checks for Stopwatches (#20010)
  * fix push mirrors URL are no longer displayed on the UI (#20011)
  * Empty log queue on flush and close (#19994)
  * [skip ci] Updated translations via Crowdin
  * Stop spurious APIFormat stopwatches logs (#20008)
  * Fix CountOrphanedLabels in orphan check (#20009)
  * Write Commit-Graphs in RepositoryDumper (#20004)
  * Add fetch.writeCommitGraph to gitconfig (#20006)
  * move agit dependcy (#19998)
  * Fix a JS error in initRepoCommitLastCommitLoader's entryMap (#19996)
  * gitconfig: set safe.directory = * (#19870)
  * Fix Readme render bug (#19992)
  * Delete duplicated update btn on pull request view page (#19993)
  * Use DisplayName() instead of FullName in Oauth provider (#19991)
  * fix permission check for delete tag (#19985)
  * [skip ci] Updated translations via Crowdin
  * Remove legacy git code (ver < 2.0), fine tune markup tests (#19930)
  * [skip ci] Updated translations via Crowdin
  * Don't prevent overflow on y-as (#19978)
  * [skip ci] Updated translations via Crowdin
  * fix `go to file` link for mirror repository (#19983)
  * Don't buffer doctor logger (#19982)
  * Allow render HTML with css/js external links (#19017)
  * Use correct count for `NumOpenIssues` (#19980)
  * In code search, get code unit accessible repos in one (main) query (#19764)
  * [skip ci] Updated translations via Crowdin
  * Always try to fetch repo for mirrors (#19975)
  * Remove tab/TabName usage where it's not needed (#19973)
  * Fix cli command restore-repo: "units" should be parsed as StringSlice (#19953)
  * Uppercase first languages letters (#19965)
  * Move tests as seperate sub packages to reduce duplicated file names (#19951)
  * Replace unstyled meter with progress (#19968)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Remove singuliere from MAINTAINERS (#19883)
  * Fix aria for logo (#19955)
  * Fix mirror template bug (#19959)
  * Add deprecated log when using MySQL with utf8 charset (#19952)
  * Move issues related files into models/issues (#19931)
  * fix: some typos (#19956)
  * [skip ci] Updated translations via Crowdin
  * Move some code into models/git (#19879)
  * Fix signal loop in graceful manager (#19943)
  * Prettify number of issues (#17760)
  * Improve file header on mobile (#19945)
  * Unify repo settings & show better error (#19828)
  * [skip ci] Updated translations via Crowdin
  * fixed comment typo (#19944)
  * Auto merge pull requests when all checks succeeded via WebUI (#19648)
  * Fix some mirror bugs (#18649)
  * Fix data-race problems in git module (quick patch) (#19934)
  * [skip ci] Updated translations via Crowdin
  * Fix copy/paste of empty lines (#19798)
  * Normalize line endings in fomantic build files (#19932)
  * Make user profile image show full image on mobile (#19840)
  * Custom regexp external issues (#17624)
  * Use Golang 1.18 for Gitea 1.17 release (#19918)
  * Refactor git module, make Gitea use internal git config (#19732)
  * [skip ci] Updated translations via Crowdin
  * Feature: Find files in repo (#15028)
  * Prevent NPE whilst migrating if there is a team request review (#19855)
  * [skip ci] Updated translations via Crowdin
  * Add support for rendering terminal output with colors (#19497)
  * Fix viewed images not loading in a PR (#19919)
  * Remove out-dated comments (#19921)
  * Automatically render wiki TOC (#19873)
  * Improve wording on delete access token modal (#19909)
  * [skip ci] Updated translations via Crowdin
  * Add breaking email restrictions checker in doctor (#19903)
  * Ensure minimum mirror interval is reported on settings page (#19895)
  * Improve UX on modal for deleting an access token (#19894)
  * update discord invite (#19907)
  * Only log non ErrNotExist errors in git.GetNote  (#19884)
  * [skip ci] Updated translations via Crowdin
  * Update frontend guideline (#19901)
  * Make AppDataPath absolute against the AppWorkPath if it is not (#19815)
  * Move some repository related code into sub package (#19711)
  * A minimal change to replace data calls with attr as per guidelines (#19900)
  * Modernize JS build scripts (#19824)
  * [skip ci] Updated translations via Crowdin
  * Update MAINTAINERS (#19896)
  * Add alt text to logo (#19892)
  * Limit max-height of CodeMirror editors for issue comment and wiki (#18271)
  * Implement http signatures support for the API (#17565)
  * Increment tests time out from 40m to 50m because sometimes the machine is slow (#19887)
  * fix(CI/CD): correct CI variable. (#19886)
  * Fix typo (#19889)
  * Fixing wrong paging when filtering on the issue dashboard (#19801)
  * Move `/info` outside authorization (#19888)
  * Fix order by parameter (#19849)
  * Exclude Archived repos from Dashboard Milestones (#19882)
  * use exact search instead of fuzzy search for branch filter dropdown (#19885)
  * Add API to serve blob or LFS file content (#19689)
  * Disable unnecessary mirroring elements (#18527)
  * [skip ci] Updated translations via Crowdin
  * Remove customized (unmaintained) dropdown, improve aria a11y for dropdown (#19861)
  * Set Setpgid on child git processes (#19865)
  * Allow postgres integration tests to run over unix pipe (#19875)
  * improvement some release related code (#19867)
  * feat: add DEFAULT_MERGE_STYLE to `repository.pull-request` section for repo init (#19751)
  * [skip ci] Updated translations via Crowdin
  * Prevent NPE on update mirror settings (#19864)
  * update documents (#19868)
  * Only return valid stopwatches (#19863)
  * [skip ci] Updated translations via Crowdin
  * Add title attribute to dependencies in sidebar (#19807)
  * Fix spelling mistake in ProcReceive (#19853)
  * Ensure responses are context.ResponseWriters (#19843)
  * Fix inconsistency in doctor output (#19836)
  * docs: recommendations to ensure backup consistency and reliability (#19845)
  * feat: Add support for extra sshd_config parameters via 'Include' file (#19842)
  * [skip ci] Updated translations via Crowdin
  * docs: update the ROOT documentation and error messages (#19832)
  * [skip ci] Updated translations via Crowdin
  * Add version hint in the docs when packages are available (#19838)
  * docs(hacking-on-gitea): fix installation instruction for elasticsearch docker (#19829)
  * Fix i18n for Link Account button, re-format tmpl (#19835)
  * [skip ci] Updated translations via Crowdin
  * Adding button to link accounts from user settings (#19792)
  * fix(telegram): fix link bot to release tag (#19830)
  * Fix raw endpoint PDF file headers (#19825)
  * docs: FAQ: the WorkPath can be set from --work-path (#19822)
  * [skip ci] Updated translations via Crowdin
  * Fix duplicate paragraph in documentation (#19820)
  * Make WIP prefixes case insensitive, e.g. allow `Draft` as a WIP prefix (#19780)
  * Fix follower display on user page (#19805)
  * Show source/target branches on PR's list (#19747)
  * Github style following followers (#19482)
  * alpine 3.16 (#19797)
  * Prevent loop if there is an error in GetNotificationCount (#19799)
  * Add 'make tidy' (#19800)
  * Update document to use FHS `/usr/local/bin/gitea` instead of `/app/...` for Docker (#19794)
  * [skip ci] Updated translations via Crowdin
  * Add the possibility to allow the user to have a favicon which differs from the main logo (#18542)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated licenses and gitignores
  * Estimate Action Count in Statistics (#19775)
  * Prevent NPE when cache service is disabled (#19703)
  * Detect truncated utf-8 characters at the end of content as still representing utf-8 (#19773)
  * Add silentcodeg to MAINTAINERS (#19771)
  * Allows repo search to match against "owner/repo" pattern strings (#19754)
  * Update JS dependencies (#19767)
  * Nuke the incorrect permission report on /api/v1/notifications (#19761)
  * Move almost all functions' parameter db.Engine to context.Context (#19748)
  * Move org functions (#19753)
  * [doctor] pq: syntax error at or near "." quote user table name (#19765)
  * [doctor] update the help with fix capabilities (#19762)
  * Remove fomantic progress module (#19760)
  * Make Ctrl+Enter (quick submit) work for issue comment and wiki editor (#19729)
  * Enable packages by default again (as described by docs) (#19746)
  * Replace blue button and label classes with primary (#19763)
  * Fix org package owner permissions (#19742)
  * Update base.go (#19739)
  * [doctor] do not update User Stars numbers unless --fix (#19750)
  * Fix incorrect translation key (#19744)
  * Improved ref comment link when origin is body/title (#19741)
  * [doctor] explain what enable-push-options does (#19740)
  * Add doctor orphan check for orphaned pull requests without an existing base repo  (#19731)
  * ContainerRegistry - removed Basic Auth header (#19735)
  * [skip ci] Updated translations via Crowdin
  * Add changelog for v1.16.8 (#19724) (#19730)
  * Improve commit list/view on mobile (#19712)
  * Fix issue overview for teams (#19652)
  * Fix nodeinfo caching and prevent NPE if cache non-existent (#19721)
  * Update go-chi/cache to utilize Ping() (#19719)
  * Disable blank issues (#19717)
  * clarify what session provider 'db' does (#19713)
  * [skip ci] Updated translations via Crowdin
  * Fix duplicate entry error when add team member (#19702)
  * [Refactor] convert team(s) to apiTeam(s) (#13745)
  * Use a better OlderThan for DeleteInactiveUsers (#19693)
  * [skip ci] Updated translations via Crowdin
  * Introduce eslint-plugin-jquery (#19690)
  * Use Vue to refactor pull merge UI (#19650)
  * [skip ci] Updated translations via Crowdin
  * Fix oauth setting list bug (#19682)
  * Delete user related oauth stuff on user deletion too (#19677)
  * Move access and repo permission to models/perm/access (#19350)
  * Tidy up `<head>` template (#19678)
  * Update go tool dependencies (#19676)
  * Update JS dependencies (#19675)
  * Use better message for consistency check (#19672)
  * Fix new release from tags list UI (#19670)
  * Update go deps (#19665)
  * [doctor] Add check/fix for bogus action rows (#19656)
  * [skip ci] Updated translations via Crowdin
  * Add tooltip to pending PR comments (#19662)
  * Add Webfinger endpoint (#19462)
  * Update documentation to disable duration settings with -1 instead of 0 (#19647)
  * Set the LastModified header for raw files (#18356)
  * Don't select join table's columns (#19660)
  * [skip ci] Updated translations via Crowdin
  * Calculate filename hash only once (#19654)
  * Admin should not delete himself (#19423)
  * Restore reviewed-on message  (#19657)
  * Move some helper files out of models (#19355)
  * Repository level enable package or disable (#19323)
  * Delete related PullAutoMerge and ReviewState on User/Repo Deletion (#19649)
  * Allow custom default merge message with .gitea/default_merge_message/<merge_style>_TEMPLATE.md (#18177)
  * Allow to mark files in a PR as viewed (#19007)
  * Auto merge pull requests when all checks succeeded via API (#9307)
  * Hide private repositories in packages (#19584)
  * Only show accessible teams in dashboard dropdown list (#19642)
  * prevent double click new issue/pull/comment button (#16157)
  * Improve reviewing PR UX (#19612)
  * [skip ci] Updated translations via Crowdin
  * Add Changelog v1.16.7 (#19575) (#19644)
  * Set safe dir for git operations in .drone.yml CI (#19641)
  * Add missing `sorting` column in `project_issue` table (#19635)
  * Simplify `IsVendor` (#19626)
  * Prevent NPE when checking repo units if the user is nil (#19625)
  * Skip duplicated layers. (#19624)
  * Add "Reference" section to Issue view sidebar (#19609)
  * GetFeeds must always discard actions with dangling repo_id (#19598)
  * Call MultipartForm.RemoveAll when request finishes (#19606)
  * Remove `RequireHighlightJS` field, update plantuml example. (#19615)
  * [skip ci] Updated translations via Crowdin
  * PullService lock via pullID (#19520)
  * Add health check endpoint (#18465)
  * Only check for non-finished migrating task (#19601)
  * Make .cs highlighting legible on dark themes. (#19604)
  * Fix broken TR on cherrypick page (#19599)
  * Use correct context in `routers/web` (#19597)
  * Use for a repo action one database transaction (#19576)
  * Only set CanColorStdout / CanColorStderr to true if the stdout/stderr is a terminal (#19581)
  * Don't fetch Mirror when it's migrating (#19588)
  * Move user password verification after checking his groups on ldap auth (#19587)
  * Fix some slice problems (incorrect slice length) (#19592)
  * Fix sending empty notifications (#19589)
  * Handle the error of a missing blob object fix #19530 (#19552)
  * Remove legacy `+build:` constraint (#19582)
  * Federation: return useful statistic information for nodeinfo (#19561)
  * Upgrade required git version to 2.0 (#19577)
  * add smtp password to install page (#17564)
  * ignore DNS error when doing migration allow/block check (#19566)
  * [skip ci] Updated translations via Crowdin
  * Dont overwrite err with nil & rename PullCheckingFuncs to reflect there usage (#19572)
  * Improve UI on mobile (#19546)
  * Add API to check if team has repo access (#19540)
  * Avoid MoreThanOne Error (#19557)
  * [skip ci] Updated licenses and gitignores
  * Simplify loops to copy (#19569)
  * Use middleware to open gitRepo (#19559)
  * Added X-Mailer header to outgoing emails (#19562)
  * fix #19545 (#19563)
  * [skip ci] Updated translations via Crowdin
  * Respect DefaultUserIsRestricted system default when creating new user (#19310)
  * Mute link in diff header (#19556)
  * Add API to query collaborators permission for a repository (#18761)
  * Permalink files In PR diff (#19534)
  * Fix Pull Request comment filename word breaks (#19535)
  * Don't error when branch's commit doesn't exist (#19547)
  * [skip ci] Updated translations via Crowdin
  * Support `hostname:port` to pass host matcher's check #19543  (#19543)
  * Add "Allow edits from maintainer" feature (#18002)
  * Better describe what `/repos/{owner}/{repo}/raw/{filepath}` returns on 200 (#19542)
  * more context for models  (#19511)
  * Prevent intermittent race in attribute reader close (#19537)
  * Make repository file list useable on mobile (#19515)
  * Update image URL for Discord webhook (#19536)
  * [skip ci] Updated translations via Crowdin
  * Fix 64-bit atomic operations on 32-bit machines (#19531)
  * Fix `upgrade.sh` script error with `su -c` (#19483)
  * When view _Siderbar or _Footer, just display once (#19501)
  * Fix migrate release from github (#19510)
  * Prevent dangling archiver goroutine (#19516)
  * Don't let repo clone URL overflow (#19517)
  * Add commit status popup to issuelist (#19375)
  * Disable unnecessary GitHooks elements
  * Improve dashboard's repo list performance (#18963)
  * By default force vertical tabs on mobile (#19486)
  * Refactor readme file renderer (#19502)
  * Allow package dump skipping (#19506)
  * Unset git author/committer variables when running integration tests (#19512)
  * Allow commit status popup on /pulls page (#19507)
  * Use router param for filepath in GetRawFile (#19499)
  * Fix two typos (#19504)
  * Add a new menu in file view to open blame view and fix blame view select range bug (#19500)
  * Fix two UI bugs: JS error in imagediff.js, 500 error in diff/compare.tmpl
  * [skip ci] Updated translations via Crowdin
  * Improve Stopwatch behavior (#18930)
  * Pass gitRepo down to GetRawDiff, since its used for main repo and wiki (#19461)
  * Use queue instead of memory queue in webhook send service (#19390)
  * add a directory prefix `gitea-src-VERSION` to release-tar-file (#19396)
  * User specific repoID or xorm builder conditions for issue search (#19475)
  * Add notags to fetch (#19487)
  * Simplify the code to get issue count (#19380)
  * use IsLoopback (#19477)
  * [skip ci] Updated translations via Crowdin
  * Add RSS Feed buttons to Repo, User and Org pages (#19370)
  * [doctor] authorized-keys: fix displayed check name (#19464)
  * [skip ci] Updated translations via Crowdin
  * Use horizontal tabs for repo header on mobile (#19468)
  * [skip ci] Updated translations via Crowdin
  * Mark TemplateLoading error as "UnprocessableEntity" (#19445)
  * Prevent dangling cat-file calls (goroutine alternative) (#19454)
  * [skip ci] Updated translations via Crowdin
  * Set correct PR status on 3way on conflict checking (#19457)
  * Fix logging of Transfer API (#19456)
  * RepoAssignment ensure to close before overwrite (#19449)
  * node12 is EOL (#19451)
  * Add Changelog v1.16.6 (#19339) (#19450)
  * Fix DELETE request for non-existent public key (#19443)
  * [skip ci] Updated translations via Crowdin
  * Don't panic on `ErrEmailInvalid` (#19441)
  * When dumping trim the standard suffices instead of a random suffix (#19440)
  * Add uploadpack.allowAnySHA1InWant to allow --filter=blob:none with older git clients (#19430)
  * Don't allow merging PR's which are being conflict checked (#19357)
  * doc: add brief intro on using traefik as reverse-proxy (#19432)
  * Fix panic in team repos API (#19431)
  * When updating mirror repo intervals by API reschedule next update too (#19429)
  * Fix nil error when some pages are rendered outside request context (#19427)
  * Add Helm Chart registry (#19406)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated licenses and gitignores
  * upgrade postgres refrence to 14 (#19416)
  * Fix datarace in gitea_uploader.go (#19409)
  * Fix double blob-hunk (#19404)
  * Use a struct as test options (#19393)
  * Disallow selecting the text of buttons (#19330)
  * [skip ci] Updated translations via Crowdin
  * Note where frontend files are located in docs (#19379)
  * Document 409 error returned by repos/migrate api (#19376)
  * Fix middleware function's placements for some `/user/...` (#19377)
  * Fix panic in teams API when requesting members (#19360)
  * Add logic to switch between source/rendered on Markdown (#19356)
  * Fixed registry host value. (#19363)
  * [skip ci] Updated translations via Crowdin
  * Allow package linking to private repository (#19348)
  * Use "main" as default branch name (#19354)
  * Move milestone to models/issues/ (#19278)
  * Refactor CSRF protection modules, make sure CSRF tokens can be up-to-date. (#19337)
  * Remove dependent on session auth for api/v1 routers (#19321)
  * API: Search Issues, dont show 500 if filter result in empty list (#19244)
  * [skip ci] Updated translations via Crowdin
  * Never use /api/v1 from Gitea UI Pages (#19318)
  * [skip ci] Updated translations via Crowdin
  * Show ssh command directly in template instead of i18n translation (#19335)
  * Package registry changes (#19305)
  * [skip ci] Updated translations via Crowdin
  * Add `ENABLE_SSH_LOG` to debugging problems (#19316)
  * Warn on SSH connection for incorrect configuration (#19317)
  * escape fake link
  * Allow custom redirect for landing page (#19324)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Fix links to packages documentation (#19315)
  * Remove legacy unmaintained packages, refactor to support change default locale (#19308)
  * [skip ci] Updated translations via Crowdin
  * Prevent intermittent NPE in queue tests (#19301)
  * Upgrade xorm/builder from v0.3.9 to v0.3.10 (#19296)
  * An attempt to sync a non-mirror repo must give 400 (Bad Request) (#19300)
  * Remove legacy `unknwon/com` package (#19298)
  * Improve package registry docs (#19273)
  * A pull-mirror repo should be marked as such on creation (#19295)
  * Refactor legacy `unknwon/com` package, improve golangci lint (#19284)
  * Skip frontend ROOT_URL check on installation page, remove unnecessary global var (#19291)
  * Fix broken of team create (#19288)
  * Remove `git.Command.Run` and `git.Command.RunInDir*` (#19280)
  * Performance improvement for add team user when org has more than 1000 repositories (#19227)
  * [skip ci] Updated translations via Crowdin
  * Update JS dependencies (#19281)
  * Fix container download counter (#19287)
  * go.mod: update kevinburke/ssh_config to v1.2.0 (#19286)
  * Fix global packages enabled avaiable (#19276)
  * Add Goroutine stack inspector to admin/monitor (#19207)
  * Move checks for pulls before merge into own function (#19271)
  * Restore user autoregistration with email addresses (#19261)
  * Improve sync performance for pull-mirrors (#19125)
  * Refactor `git.Command.Run*`, introduce `RunWithContextString` and `RunWithContextBytes` (#19266)
  * Move reaction to models/issues/ (#19264)
  * Update reserved usernames list (#18438)
  * Configure OpenSSH log level via Environment in Docker (#19274)
  * Use a more general (and faster) method to sanitize URLs with credentials (#19239)
  * [skip ci] Updated translations via Crowdin
  * fix link to package registry docs (#19268)
  * Add Redis Sentinel Authentication Support (#19213)
  * Add Package Registry (#16510)
  * Show messages for users if the ROOT_URL is wrong, show JavaScript errors (#18971)
  * [skip ci] Updated translations via Crowdin
  * Make git.OpenRepository accept Context (#19260)
  * Use full output of git show-ref --tags to get tags for PushUpdateAddTag (#19235)
  * When conflicts have been previously detected ensure that they can be resolved (#19247)
  * More commit info from API (#19252)
  * Move some issue methods as functions (#19255)
  * Move project files into models/project sub package (#17704)
  * Granular webhook events in editHook (#19251)
  * Provide configuration to allow camo-media proxying (#12802)
  * Move init repository related functions to modules (#19159)
  * Move organization related structs into sub package (#18518)
  * Refactor repo clone button and repo clone links, fix JS error on empty repo page (#19208)
  * Show last cron messages on monitor page (#19223)
  * Allow API to create file on empty repo (#19224)
  * Use goproxy.io instead of goproxy.cn (#19242)
  * New cron task: delete old system notices (#19219)
  * Let web and API routes have different auth methods group (#19168)
  * Only send webhook events to active system webhooks and only deliver to active hooks (#19234)
  * [skip ci] Updated translations via Crowdin
  * Prevent intermittent failures in RepoIndexerTest (2) (#19229)
  * Fix `contrib/upgrade.sh` (#19222)
  * Touch mirrors on even on fail to update (#19217)
  * Hide sensitive content on admin panel progress monitor (#19218)
  * Do not include global arguments in process manager (#19226)
  * Prevent intermittent failures in RepoIndexerTest (#19225)
  * Set the default branch for repositories generated from templates (#19136)
  * [skip ci] Updated licenses and gitignores
  * Make cron task no notice on success (#19221)
  * Add auto logging of goroutine pid label (#19212)
  * Check go and nodejs version by go.mod and package.json (#19197)
  * Add `ContextUser` to http request context (#18798)
  * Set OpenGraph title to DisplayName in profile pages (#19206)
  * Add pprof labels in processes and for lifecycles (#19202)
  * [skip ci] Updated translations via Crowdin
  * Bump goldmark to v1.4.11 (#19201)
  * Bump minimist from 1.2.5 to 1.2.6 (#19194)
  * Changelog for 1.16.5 (#19189) (#19192)
  * Fix showing issues in your repositories (#18916)
  * Update issue_no_dependencies description (#19112)
  * Prevent redirect to Host (2) (#19175)
  * Prevent start panic due to missing DotEscape function
  * Fix compare link in active feeds for new branch (#19149)
  * Redirect .wiki/* ui link to /wiki (#18831)
  * Try to prevent autolinking of displaynames by email readers (#19169)
  * Update HTTP status codes to modern codes (#18063)
  * Remove the Go version in UI, add a link on Gitea Version to show config details (Go/Git version) (#19173)
  * [skip ci] Updated translations via Crowdin
  * Clean paths when looking in Storage (#19124)
  * Use the new/choose link for New Issue on project page (#19172)
  * Ensure that setting.LocalURL always has a trailing slash (#19171)
  * Use `ctx` instead of `db.DefaultContext` in some packages(routers/services/modules) (#19163)
  * Fix the bug: deploy key with write access can not push (#19010)
  * Renamed ctx.User to ctx.Doer. (#19161)
  * [docs] Enhance container selection in docker dump (#14292)
  * Cleanup protected branches when deleting users & teams (#19158)
  * Reorder issue templates and automatically add labels (#18875)
  * Use IterateBufferSize whilst querying repositories during adoption check (#19140)
  * Add 1.18 (#19151)
  * [skip ci] Updated translations via Crowdin
  * Fix NPE `/repos/issues/search` when not signed in (#19154)
  * [skip ci] Updated licenses and gitignores
  * Use custom favicon when viewing static files if it exists (#19130)
  * not send notification emails to inactive users (part 2) (#19142)
  * Make migrations SKIP_TLS_VERIFY apply to git too (#19132)
  * Do not send notification emails to inactive users (#19131)
  * remove not needed (#19128)
  * Add warning to set SENDMAIL_ARGS to --  (#19102)
  * Do not send activation email if manual confirm is set (#19119)
  * Update tool dependencies (#19120)
  * Delete related notifications on issue deletion too (#18953)
  * nit fix (#19116)
  * Store the foreign ID of issues during migration  (#18446)
  * Remove italics for `due_date_not_set` (#19113)
  * [skip ci] Updated translations via Crowdin
  * Fixed log path in fail2ban documentation (#19103)
  * rm .sample hooks which aren't used (#19101)
  * use go1.18 to build gitea (#19099)
  * Use `go run` for tool dependencies, require go 1.17 (#18874)
  * Update golang.org/x/crypto (#19097)
  * Handle email address not exist. (#19089)
  * Frontport Changelogs (#19088)
  * Restrict email address validation (#17688)
  * Fix lfs bug (#19072)
  * [skip ci] Updated translations via Crowdin
  * Fix documentation and #19065 (#19067)
  * RSS/Atom support for Repos (#19055)
  * [skip ci] Updated licenses and gitignores
  * Feeds: render markdown to html (#19058)
  * [skip ci] Updated translations via Crowdin
  * Prevent 500 when there is an error during new auth source post (#19041)
  * Update the webauthn_credential_id_sequence in Postgres (#19048)
  * If rendering has failed due to a net.OpError stop rendering (attempt 2) (#19049)
  * use xorm builder for models.getReviewers() (#19033)
  * RSS/Atom support for Orgs (#17714)
  * Fix flag validation (#19046)
  * Improve SyncMirrors logging (#19045)
  * fix pam authorization (#19040)
  * [skip ci] Updated translations via Crowdin
  * Upgrading binding package (#19034)
  * Ensure isSSH is set whenever DISABLE_HTTP_GIT is set (#19028)
  * Add button for issue deletion (#19032)
  * Fix script compatiable with OpenWrt (#19000)
  * Allow users to self-request a PR review (#19030)
  * Fix wrong scopes caused by empty scope input (#19029)
  * Feature: show issue assignee on project board (#15232)
  * bump go deps (#19021)
  * Don't show context cancelled errors in attribute reader (#19006)
  * Set `rel="nofollow noindex"` on new issue links (#19023)
  * update to correct stable version
  * [skip ci] Updated translations via Crowdin
  * Add Index to comment for migrations and mirroring (#18806)
  * Support ignore all santize for external renderer (#18984)
  * Fix EasyMDE error when input Enter (#19004)
  * Fix update hint bug (#18996)
  * Fix the editor height in review box (#19003)
  * Add a "admin user generate-access-token" subcommand (#17722)
  * Fix potential assignee query for repo (#18994)
  * Add config option to disable "Update branch by rebase" (#18745)
  * Update `go-enry` to v2.8.0 (#18993)
  * homebrew updates via cron
  * ignore missing comment for user notifications (#18954)
  * allow overwrite artifacts for github releases (#18987)
  * fix & refactor (#18973)
  * Don't clean up hardcoded `tmp` (#18983)
  * git backend ignore replace objects (#18979)
  * Improve the deletion of issue (#18945)
  * Add note to GPG key response if user has no keys (#18961)
  * adds restore docs for docker based instances (#18844)
  * Refactor admin user filter query parameters (#18965)
  * Refactor mirror code & fix `StartToMirror` (#18904)
  * Send 404 on `/{org}.gpg` (#18959)
  * Accounts with WebAuthn only (no TOTP) now exist ... fix code to handle that case (#18897)
  * Fix lfs management setting (#18946)
  * Fix admin user list pagination (#18957)
  * [API] Allow removing issues (#18879)
  * Refactor SecToTime() function (#18863)
  * Improve mirror iterator (#18928)
  * Fix login with email panic when email is not exist (#18941)
  * Adjust error for already locked db and prevent level db lock on malformed connstr (#18923)
  * Avoid database lookups for `DescriptionHTML` (#18924)
  * Update go-org to v1.6.1 (#18932)
  * Fix trace log to show value instead of pointers (#18926)
  * Add announcement steps to release-howto (#18896)
  * Fix `<strong>` html in translation (#18929)
  * Fix page and missing return on unadopted repos API (#18848)
  * [skip ci] Updated licenses and gitignores
  * Allow adminstrator teams members to see other teams (#18918)
  * Update nginx reverse proxy docs (#18922)
  * Don't treat BOM escape sequence as hidden character. (#18909)
  * Remove CodeMirror dependencies (#18911)
  * Uncapitalize errors (#18915)
  * Disable service worker by default (#18914)
  * Set is_empty in fixtures (#18869)
  * Don't update email for organisation (#18905)
  * Correctly link URLs to users/repos with dashes, dots or underscores (#18890)
  * Set is_private in fixtures. (#18868)
  * Fix team management UI (#18886)
  * Update JS dependencies (#18898)
  * Fix migration v210 (#18892)
  * migrations: add test for importing pull requests in gitea uploader (#18752)
  * BeforeSourcePath should point to base commit (#18799)
  * Prevent Stats Indexer reporting error if repo dir missing (#18870)
  * [skip ci] Updated translations via Crowdin
  * Fix update user (#18878)
  * Fix ldap user sync missed email in email_address table (#18786)
  * Update assignees check to include any writing team and change org sidebar (#18680)
  * Set max text height to prevent overflow (#18862)
  * Lock gofumpt to v0.3.0 and run it (#18866)
  * Fix ldap edit bug (#18856)
  * Fix behavior or checkbox submission. (#18851)
  * Don't report signal: killed errors in serviceRPC (#18850)
  * Fix bug for get user by email (#18833)
  * migrations: remove dead code in gitea uploader (#18725)
  * [skip ci] Updated translations via Crowdin
  * Show fullname on issue edits and gpg/ssh signing info (#18827)
  * Update go-org to 1.6.0 (#18824)
  * Fix login with email for ldap users (#18800)
  * [skip ci] Updated licenses and gitignores
  * Immediately Hammer if second kill is sent (#18823)
  * Fix panic in EscapeReader (#18820)
  * Put buttons back in org dashboard (#18817)
  * Generate coverage with sqlite. (#18813)
  * Update on-cloud-provider.md (#18807)
  * Fix ldap loginname (#18789)
  * Replace deprecated String.prototype.substr() with String.prototype.slice() (#18796)
  * Fix problem when self-assign notification (#18797)
  * Move editorconfig-checker to lint-backend and remove JS wrapper (#18793)
  * [skip ci] Updated translations via Crowdin
  * Fix redirect when using lowercase reponame (#18775)
  * Move deletebeans into models/db (#18781)
  * Allow mermaid render error to wrap (#18790)
  * Attempt to fix the webauthn migration again - part 3 (#18770)
  * Fix template bug of LFS lock (#18784)
  * Various Mermaid improvements (#18776)
  * [skip ci] Updated translations via Crowdin
  * Fix display time of milestones (#18753)
  * [skip ci] Updated translations via Crowdin
  * Prevent dangling GetAttribute calls (#18754)
  * Add example to render html files (#18736)
  * Fix a broken link in `commits_list_small.tmpl` (#18763)
  * Fix broken cancel button link on patch page (#18718)
  * Ignore the migrate if u2f_registration is not exist (#18760)
  * [skip ci] Updated translations via Crowdin
  * Increase the size of the webauthn_credential credential_id field (#18739)
  * Fix isempty detection of git repository (#18746)
  * [skip ci] Updated translations via Crowdin
  * Send mail to issue/pr assignee/reviewer also when OnMention is set (#18707)
  * Reduce CI go module downloads, add make targets (#18708)
  * Add number in queue status to monitor page (#18712)
  * Fix source code line highlighting (#18729)
  * Fix forked repositories missed tags (#18719)
  * [skip ci] Updated translations via Crowdin
  * Fix release typo (#18728)
  * Display template path of current page in dev mode (#18717)
  * Separate the details links of commit-statuses in headers (#18661)
  * Add LDAP group sync to Teams, fixes #1395 (#16299)
  * Change git.cmd to RunWithContext (#18693)
  * Always set PullRequestWorkInProgressPrefixes in PrepareViewPullInfo (#18713)
  * Prevent double encoding of branch names in delete branch (#18714)
  * [skip ci] Updated translations via Crowdin
  * Attempt to improve docs (yet again) (#18687)
  * Make the proformas clearer that we need DEBUG logs (#18700)
  * Update SSH Server crypto settings (#18697)
  * Fix bug for version update hint (#18701)
  * Fix issue with docker-rootless shimming script (#18690)
  * tests: remove redundant comparison in repo dump/restore (#18660)
  * [skip ci] Updated translations via Crowdin
  * Disable unnecessary OpenID/OAuth2 elements (#18491)
  * Add apply-patch, basic revert and cherry-pick functionality (#17902)
  * C preprocessor colors improvement (#18671)
  * Update object repo with the migrated repository (#18684)
  * Prevent security failure due to bad APP_ID (#18678)
  * [skip ci] Updated translations via Crowdin
  * Let `MinUnitAccessMode` return correct perm (#18675)
  * Simplify Boost/Pause logic (#18673)
  * update the comparison documents (#18669)
  * Restart zero worker if there is still work to do (#18658)
  * Added auto-save whitespace behavior if it changed manually (#15566)
  * Support custom ACME provider (#18340)
  * Refactor i18n, use Locale to provide i18n/translation related functions (#18648)
  * Only request write when necessary (#18657)
  * [skip ci] Updated translations via Crowdin
  * Add separate SSH_USER config option (#17584)
  * Be more lenient with label colors (#17752)
  * remove redundant call to UpdateRepoStats during migration (#18591)
  * more repo dump/restore tests, including pull requests (#18621)
  * No longer show the db-downgrade SQL in production (#18653)
  * Fix the missing i18n key for update checker (#18646)
  * Update gitea-vet (#18640)
  * Future proof for 1.18 (#18644)
  * Add `contrib/upgrade.sh` (#18286)
  * If rendering has failed due to a net.OpError stop rendering (#18642)
  * Delete old git.NewCommand() and use it as git.NewCommandContext() (#18552)
  * Update JS dependencies (#18636)
  * fix commits_list_small.tmpl (#18641)
  * Fix `make fmt` and `make fmt-check` (#18633)
  * Frontport of changelog for v1.16.1 (#18615)
  * Pass correct context (#18638)
  * comments on migrated issues/prs must link to the comment ID (#18630)
  * preserve users if restoring a repository on the same Gitea instance (#18604)
  * Stop logging an error when notes are not found (#18626)
  * [skip ci] Updated licenses and gitignores
  * Only attempt to flush queue if the underlying worker pool is not finished (#18593)
  * quote MAKE to prevent path expansion with space error (#18622)
  * Ensure that blob-excerpt links work for wiki (#18587)
  * Use `CryptoRandomBytes` instead of `CryptoRandomString` (#18439)
  * Remove the spurious space in the .ui.right additional selector (#18605)
  * Ensure commit-statuses box is sized correctly in headers (#18538)
  * [skip ci] Updated translations via Crowdin
  * Prevent merge messages from being sorted to the top of email chains (#18566)
  * Fix pushing to 1-x-dev docker tag (#18578)
  * Replace `sync.Map` with normal maps (#18584)
  * Fix oauth docs usage for 2fa (#18581)
  * Update .gitattributes for .tmpl files (#18576)
  * Prevent panic on prohibited user login with oauth2 (#18562)
  * Fix manifest.tmpl (#18573)
  * Make docker gitea/gitea:v1.16-dev etc refer to the latest build on that branch (#18551)
  * Add dropdown icon to template loading dropdown (#18564)
  * Collaborator trust model should trust collaborators (#18539)
  * Detect conflicts with 3way merge (#18536)
  * [skip ci] Updated translations via Crowdin
  * Update 1.16.0 changelog to set #17846 as breaking (#18533)
  * In docker rootless use $GITEA_APP_INI if provided (#18524)
  * revert to node14 for snapcraft
  * Add `GetUserTeams` (#18499)
  * Fix review excerpt (#18502)
  * Update JS dependencies, fix lint (#18389)
  * add test coverage for original author conversion during migrations (#18506)
  * add gitea-fmt back (#18526)
  * Fix non-ASCII search on database  (#18437)
  * Use "read" value for General Access (#18496)
  * Fix for AvatarURL database type (#18487)
  * Remove go 1.15 support (#18511)
  * [skip ci] Updated translations via Crowdin
  * Use `ImagedProvider` for gplus oauth2 provider (#18504)
  * build with node16 in snap (#18508)
  * point to s3 endpoint directly (#18497)
  * Fix OAuth Source Edit Page (#18495)
  * [skip ci] Updated translations via Crowdin
  * Prevent NPE on partial match of compare URL and allow short SHA1 compare URLs (#18472)
  * upload to github & s3 at same time (#18475)
  * Add a few more comments to the CONTRIBUTING.md document (#18469)
  * Frontport changelog 1.16.0 (#18468) (#18470)
  * Warn at startup if the provided `SCRIPT_TYPE` is not on the PATH (#18467)
  * use next gen codecov uploader (#18443)
  * [skip ci] Updated licenses and gitignores
  * Change some logging levels (#18421)
  * GitLab reviews may not have the updated_at field set (#18450)
  * Attempt to prevent intermittent failure TestGit/xxx/BranchProtectMerge/MergePR (#18451)
  * Update Goldmark to Goldmark 1.4.4 (#18420)
  * Ensure git tag tests and others create test repos in tmpdir (#18447)
  * Attempt to prevent the deadlock in the QueueDiskChannel Test again (#18415)
  * [skip ci] Updated translations via Crowdin
  * Use explicit jQuery import, remove unused eslint globals (#18435)
  * Fix typo (#18436)
  * Allow to filter repositories by language in explore, user and organization repositories lists (#18430)
  * Fix broken when no commits and default branch is not master (#18422)
  * [skip ci] Updated translations via Crowdin
  * Automatically pause queue if index service is unavailable (#15066)
  * [skip ci] Updated translations via Crowdin
  * Only view milestones from current repo (#18414)
  * Validate migration files (#18203)
  * Use base32 for 2FA scratch token (#18384)
  * [skip ci] Updated translations via Crowdin
  * Fix broken oauth2 authentication source edit page (#18412)
  * Prevent deadlocks in persistable channel pause test (#18410)
  * Bump golangci-lint version (#18411)
  * Unexport git.GlobalCommandArgs (#18376)
  * Place inline diff comment dialogs on split diff in 4th and 8th columns (#18403)
  * API: Return primary language and repository language stats API URL (#18396)
  * Update to work with latest VS Code go debugger (#18397)
  * Fix restore without topic failure (#18387)
  * [skip ci] Updated translations via Crowdin
  * Make WrappedQueues and PersistableChannelUniqueQueues Pausable (#18393)
  * Fix commit's time (#18375)
  * Prevent showing webauthn error for every time visiting `/user/settings/security` (#18385)
  * Refactor webhooks i18n (#18380)
  * [skip ci] Updated translations via Crowdin
  * Fix partial cloning a repo (#18373)
  * Switch to non-deprecation setting (#18358)
  * Update the SSH passthrough documentation (#18366)
  * Don't underline commit status icon on hover (#18372)
  * Add packagist webhook (#18224)
  * Fix mime-type detection for HTTP server (#18370)
  * Always use git command but not os.Command (#18363)
  * Add deprecated for LFS_CONTENT_PATH on zh-cn docs (#18362)
  * [skip ci] Updated translations via Crowdin
  * Make gitea, gitea-vet future-proof (#18361)
  * Pause queues (#15928)
  * Disable content sniffing on `PlainTextBytes` (#18359)
  * Update github.com/duo-labs/webauthn (#18357)
  * Fix route wrap (#18360)
  * [skip ci] Updated translations via Crowdin
  * Add config options to hide issue events (#17414)
  * Add js vendor directory to .gitattributes (#18350)
  * [skip ci] Updated translations via Crowdin
  * Refactor jwt.StandardClaims to RegisteredClaims (#18344)
  * format with gofumpt (#18184)
  * Enable deprecation error for v1.17.0 (#18341)
  * Use correct translation key for errors (#18342)
  * Refactor Router Logger (#17308)
  * Updated Chroma to v0.10.0 (#18270)
  * Change initial TrustModel to committer (#18335)
  * refactor httplib (#18338)
  * Propagate context and ensure git commands run in request context (#17868)
  * Upgrade Alpine from 3.13 to 3.15 (#18050)

-------------------------------------------------------------------
Wed Jul 20 10:21:01 UTC 2022 - Dirk Müller <dmueller@suse.com>

- update node_modules fetching script to fetch esbuild in 0.14.49 version
- avoid duplicate ExclusiveArch
- use Golang 1.18 because thats what upstream CI is using for 1.16.9
- require git-core, not full git, also during runtime
- small cleanups

-------------------------------------------------------------------
Tue Jul 19 09:20:33 UTC 2022 - ecsos <ecsos@opensuse.org>

- Switch to systemd-sysusers to generate user and group.
- Set ExclusiveArch to 64bit only.

-------------------------------------------------------------------
Wed Jul 13 06:20:43 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.9:
  * SECURITY
    * Add write check for creating Commit status (#20332) (#20334)
    * Check for permission when fetching user controlled issues (#20133) (#20196)
  * Hide notify mail setting ui if not enabled (#20138) (#20337)
  * Add write check for creating Commit status (#20332) (#20334)
  * Ensure that drone tags 1.16.x and 1.16 on push to v1.16.x tag (#20304)
  * Only show Followers that current user can access (#20220) (#20253)
  * Check for permission when fetching user controlled issues (#20133) (#20196)
  * CI: disable auto_tag (#20062)
  * Release page show all tags in compare dropdown (#20070) (#20071)
  * Changelog for 1.16.9 (#20059)
  * CI: disable push to latest docker tag (#20025)
  * fix permission check for delete tag (#19985) (#20001)
  * Only log non ErrNotExist errors in git.GetNote  (#19884) (#19905)
  * use exact search instead of fuzzy search for branch filter dropdown (#19893)
  * Set Setpgid on child git processes (#19865) (#19881)
  * Ensure responses are context.ResponseWriters (#19843) (#19859)
  * git 2.36 is needed for safe.directory = '*' to work (#19876)
  * Fix count bug (#19850)
  * Fix raw endpoint PDF file headers (#19825) (#19826)
  * Make WIP prefixes case insensitive, e.g. allow `Draft` as a WIP prefix (#19780) (#19811)
  * Prevent NPE when cache service is disabled (#19703) (#19783)
  * Fix NotificationUnreadCount (#19802)
  * Detect truncated utf-8 characters at the end of content as still representing utf-8 (#19773) (#19774)
  * [doctor] pq: syntax error at or near "." quote user table name (#19765) (#19770)
  * Fix bug (#19757)
- Rebase get-gitea-source.sh
  - The node module inquirer which is needed to compile will install in version >= 9
    But this version is to new for gitea. So it musst install older Version 8.2.4.

-------------------------------------------------------------------
Mon May 16 20:51:48 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.8:
  * Add changelog for v1.16.8 (#19724)
  * Fix issue overview for teams (#19652) (#19653)
  * Delete user related oauth stuff on user deletion too (#19677) (#19680)
  * Fix oauth setting list bug (#19681)
  * Fix new release from tags list UI (#19670) (#19673)
  * [doctor] Add check/fix for bogus action rows (#19656) (#19669)
  * Revert "Add finalizers to ensure that repos are closed and blobreaders are closed (#19495) (#19496)" (#19659)
  * GetFeeds must always discard actions with dangling repo_id (#19598) (#19629)
  * Only show accessible teams in dashboard dropdown list (#19642) (#19645)
  * Set safe dir for git operations in .drone.yml CI (#19641) (#19643)
  * Prevent NPE when checking repo units if the user is nil (#19625) (#19630)
  * Call MultipartForm.RemoveAll when request finishes (#19606) (#19607)
  * Make .cs highlighting legible on dark themes (#19604) (#19605)
  * Avoid MoreThanOne Error (#19557) (#19591)
  * Fix sending empty notifications (#19589) (#19590)
  * Add finalizers to ensure that repos are closed and blobreaders are closed (#19495) (#19496)
  * ignore DNS error when doing migration allow/block check (#19567)

-------------------------------------------------------------------
Mon May 02 08:14:49 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.7:
  * Add Changelog v1.16.7 (#19575)
  * Dont overwrite err with nil (part #19572) (#19574)
  * Migration: only write commit-graph if wiki clone was successfull (#19563) (#19568)
  * Respect DefaultUserIsRestricted system default when creating new user (#19310 ) (#19560)
  * Don't error when branch's commit doesn't exist (#19547) (#19548)
  * Support `hostname:port` to pass host matcher's check (#19543) (#19544)
  * Prevent intermittent race in attribute reader close (#19537) (#19539)
  * Fix 64-bit atomic operations on 32-bit machines (#19531) (#19532)
  * Fix migrate release from github (#19510) (#19523)
  * When view _Siderbar or _Footer, just display once (#19501) (#19522)
  * Prevent dangling archiver goroutine (#19516) (#19526)
  * Unset git author/committer variables when running integration tests (#19512) (#19519)
  * Fix blame page select range error and some typos (#19503)
  * Add notags to fetch (#19487) (#19490)
  * User specific repoID or xorm builder conditions for issue search (#19475) (#19476)
  * [doctor] authorized-keys: fix displayed check name (backport #19464) (#19484)
  * Mark TemplateLoading error as "UnprocessableEntity" (#19445) (#19446)
  * Prevent dangling cat-file calls (goroutine alternative) (#19454) (#19466)
  * Set correct PR status on 3way on conflict checking (#19457) (#19458)
  * RepoAssignment ensure to close before overwrite (#19449) (#19460)

-------------------------------------------------------------------
Thu Apr 21 07:01:59 UTC 2022 - michael@stroeder.com

- Update to version 1.16.6:
  * ENHANCEMENTS
    - Only request write when necessary (#18657) (#19422)
    - Disable service worker by default (#18914) (#19342)
  * BUGFIXES
    - When dumping trim the standard suffices instead of a random suffix (#19440) (#19447)
    - Fix DELETE request for non-existent public key (#19443) (#19444)
    - Don't panic on ErrEmailInvalid (#19441) (#19442)
    - Add uploadpack.allowAnySHA1InWant to allow --filter=blob:none with older git clients (#19430) (#19438)
    - Warn on SSH connection for incorrect configuration (#19317) (#19437)
    - Search Issues via API, dont show 500 if filter result in empty list (#19244) (#19436)
    - When updating mirror repo intervals by API reschedule next update too (#19429) (#19433)
    - Fix nil error when some pages are rendered outside request context (#19427) (#19428)
    - Fix double blob-hunk on diff page (#19404) (#19405)
    - Don't allow merging PR's which are being conflict checked (#19357) (#19358)
    - Fix middleware function's placements (#19377) (#19378)
    - Fix invalid CSRF token bug, make sure CSRF tokens can be up-to-date (#19338)
    - Restore user autoregistration with email addresses (#19261) (#19312)
    - Move checks for pulls before merge into own function (#19271) (#19277)
    - Granular webhook events in editHook (#19251) (#19257)
    - Only send webhook events to active system webhooks and only deliver to active hooks (#19234) (#19248)
    - Use full output of git show-ref --tags to get tags for PushUpdateAddTag (#19235) (#19236)
    - Touch mirrors on even on fail to update (#19217) (#19233)
    - Hide sensitive content on admin panel progress monitor (#19218 & #19226) (#19231)
    - Fix clone url JS error for the empty repo page (#19209)
    - Bump goldmark to v1.4.11 (#19201) (#19203)
  * TESTING
    - Prevent intermittent failures in RepoIndexerTest (#19225 #19229) (#19228)
  * BUILD
    - Revert the minimal golang version requirement from 1.17 to 1.16 and add a warning in Makefile (#19319)
  * MISC
    - Performance improvement for add team user when org has more than 1000 repositories (#19227) (#19289)
    - Check go and nodejs version by go.mod and package.json (#19197) (#19254)

-------------------------------------------------------------------
Fri Apr  8 15:21:26 UTC 2022 - ecsos <ecsos@opensuse.org>

- Set correct go version >= 1.17.

-------------------------------------------------------------------
Thu Mar 24 08:21:08 UTC 2022 - michael@stroeder.com

- Update to version 1.16.5:
  * BREAKING
    - Bump to build with go1.18 (#19120 et al) (#19127)
  * SECURITY
    - Prevent redirect to Host (2) (#19175) (#19186)
    - Try to prevent autolinking of displaynames by email readers (#19169) (#19183)
    - Clean paths when looking in Storage (#19124) (#19179)
    - Do not send notification emails to inactive users (#19131) (#19139)
    - Do not send activation email if manual confirm is set (#19119) (#19122)
  * ENHANCEMENTS
    - Use the new/choose link for New Issue on project page (#19172) (#19176)
  * BUGFIXES
    - Fix showing issues in your repositories (#18916) (#19191)
    - Fix compare link in active feeds for new branch (#19149) (#19185)
    - Redirect .wiki/* ui link to /wiki (#18831) (#19184)
    - Ensure deploy keys with write access can push (#19010) (#19182)
    - Ensure that setting.LocalURL always has a trailing slash (#19171) (#19177)
    - Cleanup protected branches when deleting users & teams (#19158) (#19174)
    - Use IterateBufferSize whilst querying repositories during adoption check (#19140) (#19160)
    - Fix NPE /repos/issues/search when not signed in (#19154) (#19155)
    - Use custom favicon when viewing static files if it exists (#19130) (#19152)
    - Fix the editor height in review box (#19003) (#19147)
    - Ensure isSSH is set whenever DISABLE_HTTP_GIT is set (#19028) (#19146)
    - Fix wrong scopes caused by empty scope input (#19029) (#19145)
    - Make migrations SKIP_TLS_VERIFY apply to git too (#19132) (#19141)
    - Handle email address not exist (#19089) (#19121)
  * MISC
    - Update json-iterator to allow compilation with go1.18 (#18644) (#19100)
    - Update golang.org/x/crypto (#19097) (#19098)

-------------------------------------------------------------------
Mon Mar 14 22:06:07 UTC 2022 - michael@stroeder.com

- Update to version 1.16.4:
  * SECURITY
    - Restrict email address validation (#17688) (#19085)
    - Fix lfs bug (#19072) (#19080)
  * ENHANCEMENTS
    - Improve SyncMirrors logging (#19045) (#19050)
  * BUGFIXES
    - Refactor mirror code & fix StartToMirror (#18904) (#19075)
    - Update the webauthn_credential_id_sequence in Postgres (#19048) (#19060)
    - Prevent 500 when there is an error during new auth source post (#19041) (#19059)
    - If rendering has failed due to a net.OpError stop rendering (attempt 2) (#19049) (#19056)
    - Fix flag validation (#19046) (#19051)
    - Add pam account authorization check (#19040) (#19047)
    - Ignore missing comment for user notifications (#18954) (#19043)
    - Set rel="nofollow noindex" on new issue links (#19023) (#19042)
    - Upgrading binding package (#19034) (#19035)
    - Don't show context cancelled errors in attribute reader (#19006) (#19027)
    - Fix update hint bug (#18996) (#19002)
  * MISC
    - Fix potential assignee query for repo (#18994) (#18999)

-------------------------------------------------------------------
Thu Mar 03 16:08:29 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.3:
  * Changelog for v1.16.3 (#18966)
  * git backend ignore replace objects (#18979) (#18980)
  * Set max text height to prevent overflow (#18862) (#18977)
  * Fix problem when self-assign notification (#18797) (#18976)
  * backport fix of #18973 (#18974)
  * Refactor admin user filter query parameters (#18965) (#18975)
  * Accounts with WebAuthn only (no TOTP) now exist ... fix code to handle that case (#18897) (#18964)
  * Send 404 on `/{org}.gpg` (#18959) (#18962)
  * Fix admin user list pagination (#18957) (#18960)
  * Fix lfs management setting (#18947)
  * Backport locales from master (#18944)
  * Fix login with email panic when email is not exist (#18942)
  * Adjust error for already locked db and prevent level db lock on malformed connstr (#18923) (#18938)
  * Update go-org to v1.6.1 (#18932) (#18933)
  * Fix `<strong>` html in translation (#18929) (#18931)
  *  Fix page and missing return on unadopted repos API (#18848) (#18927)
  * Don't treat BOM escape sequence as hidden character. (#18909) (#18910)
  *  Allow adminstrator teams members to see other teams (#18918) (#18919)
  * Correctly link URLs to users/repos with dashes, dots or underscores (#18890) (#18908)
  * Don't update email for organisation (#18905) (#18906)
  * Fix redirect when using lowercase reponame (#18775) (#18902)
  * Fix team management UI (#18887)
  * Fix migration v210 (#18893)
  * BeforeSourcePath should point to base commit (#18880)

-------------------------------------------------------------------
Thu Feb 24 19:58:07 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.2:
  * Add changelog for v1.16.2 (#18840)
  * Fix ldap user sync missed email in email_address table (#18786) (#18876)
  * Don't report signal: killed errors in serviceRPC (#18850) (#18865)
  * Update assignees check to include any writing team and change org sidebar (#18680) (#18873)
  * Fix login with email for ldap users (#18800) (#18836)
  * Fix ldap edit bug (#18859)
  * Fix ldap loginname (#18789) (#18804)
  * In disk_channel queues synchronously push to disk on shutdown (#18415) (#18788)
  * Fix bug for get user by email (#18834)
  * Update go-org to 1.6.0 (#18824) (#18839)
  * Show fullname on issue edits and gpg/ssh signing info (#18828)
  * Put buttons back in org dashboard (#18817) (#18825)
  * Immediately Hammer if second kill is sent (#18823) (#18826)
  * Fix panic in EscapeReader (#18820) (#18821)
  * remove redundant call to UpdateRepoStats during migration (#18591) (#18794)
  * Allow mermaid render error to wrap (#18791)
  * Attempt to fix the webauthn migration again - part 3 (#18770) (#18771)
  * Fix template bug of LFS lock (#18784) (#18787)
  * Various Mermaid improvements (#18776) (#18780)
  * Ensure git tag tests and others create test repos in tmpdir (#18447) (#18767)
  * Increase the size of the webauthn_credential credential_id field (#18739) (#18756)
  * Prevent dangling GetAttribute calls (#18754) (#18755)
  * Send mail to issue/pr assignee/reviewer also when OnMention is set (#18707) (#18765)
  * Fix a broken link in `commits_list_small.tmpl` (#18764)
  * Fix isempty detection of git repository (#18746) (#18750)
  * Prevent double encoding of branch names in delete branch (#18714) (#18738)
  * Fix forked repositories missed tags (#18719) (#18735)
  * Always set PullRequestWorkInProgressPrefixes in PrepareViewPullInfo (#18713) (#18737)
  * Fix source code line highlighting (#18729) (#18740)
  * Reduce CI go module downloads, add make targets (#18708, #18475, #18443) (#18741)
  * Separate the details links of commit-statuses in headers (#18661) (#18730)
  * Fix release typo (#18728) (#18731)
  * Update object repo with the migrated repository (#18684) (#18726)
  * Fix bug for version update hint (#18701) (#18705)
  * Prevent security failure due to bad APP_ID (#18678) (#18682)
  * Fix issue with docker-rootless shimming script (#18690) (#18699)
  * C preprocessor colors improvement (#18671) (#18696)
  * Let  return correct perm (#18675) (#18689)
  * Restart zero worker if there is still work to do (#18658) (#18672)
  * Backport: fix the missing i18n key for update checker (#18646) (#18665)
  * No longer show the db-downgrade SQL in production (#18654)
  * If rendering has failed due to a net.OpError stop rendering (#18642) (#18645)

-------------------------------------------------------------------
Sun Feb 06 13:59:56 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.1:
  * Add changelog for v1.16.1 (#18614)
  * comments on migrated issues/prs must link to the comment ID (#18637)
  * Stop logging an error when notes are not found (#18626) (#18635)
  * Only attempt to flush queue if the underlying worker pool is not finished (#18593) (#18620)
  * Ensure that blob-excerpt links work for wiki (#18587) (#18624)
  * Attempt to prevent intermittent failure TestGit/xxx/BranchProtectMerge/MergePR (#18451) (#18619)
  * Ensure commit-statuses box is sized correctly in headers (#18538) (#18606)
  * Prevent merge messages from being sorted to the top of email chains (#18566) (#18588)
  * Fix pushing to 1-x-dev docker tag (#18578) (#18579)
  * Collaborator trust model should trust collaborators (#18539) (#18557)
  * Prevent panic on prohibited user login with oauth2 (#18562) (#18563)
  * Make docker gitea/gitea:v1.16-dev etc refer to the latest build on that branch (#18551) (#18569)
  * Add dropdown icon to template loading dropdown (#18571)
  * Detect conflicts with 3way merge (#18536) (#18537)
  * Update JS dependencies, fix lint (#18389) (#18540)
  * Add `GetUserTeams` (#18499) (#18531)
  * Fix review excerpt (#18502) (#18530)
  * Fix for AvatarURL database type (#18487) (#18529)
  * In docker rootless use $GITEA_APP_INI if provided (#18524) (#18535)
  * Update 1.16.0 changelog to set #17846 as breaking (#18533) (#18534)
  * Use "read" value for General Access (#18496) (#18500)
  * Use `ImagedProvider` for gplus oauth2 provider (#18504) (#18505)
  * point to s3 endpoint directly (#18497) (#18510)
  * Fix OAuth Source Edit Page (#18495) (#18503)
  * Prevent NPE on partial match of compare URL and allow short SHA1 compare URLs (#18472) (#18473)

-------------------------------------------------------------------
Fri Feb 04 12:56:15 UTC 2022 - ecsos@opensuse.org

- Update to version 1.16.0:
  * Changelog 1.16.0 (#18468)
  * GitLab reviews may not have the updated_at field set (#18450) (#18461)
  * Fix broken when no commits and default branch is not master (#18423)
  * Fix broken oauth2 authentication source edit page (#18412) (#18419)
  * Only view milestones from current repo (#18414) (#18417)
  * Place inline diff comment dialogs on split diff in 4th and 8th columns (#18403)  (#18404)
  * Fix restore without topic failure (#18387) (#18400)
  * Fix commit's time (#18375) (#18392)
  * Prevent showing webauthn error for every time visiting `/user/settings/security` (#18385) (#18386)
  * Fix partial cloning a repo (#18373) (#18377)
  * Fix mime-type detection for HTTP server (#18371)
  * Backport: Disable content sniffing on `PlainTextBytes` (#18365)
  * Update github.com/duo-labs/webauthn (#18357) (#18364)
  * [skip ci] Updated translations via Crowdin
  * Stop trimming preceding and suffixing spaces from editor filenames (#18334)
  * [skip ci] Updated translations via Crowdin
  * Left-Align text in Unicode warning boxes (#18331)
  * Only warn on bidi but still escape non-bidi (#18333)
  * Fix incorrect OAuth message (#18332)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.16.0-rc1 (#18309)
  * Restore propagation of ErrDependenciesLeft (#18325)
  * Fix PR comments UI (#18323)
  * Make the height of the editor in Review Box smaller (4 lines as GitHub) (#18319)
  * Fix commit links on compare page (#18310)
  * Update JS dependencies, remove eslint-plugin-github (#18317)
  * Add MirrorUpdated field to Repository API type (#18267)
  * replace satori/go.uuid with gofrs/uuid (#18311)
  * Place inline diff comment dialogs in the 4th column. (#18321)
  * Use indirect comparison when showing pull requests (#18313)
  * Prevent ambiguous column error in organizations page (#18314)
  * Correctly upload LFS files (#18316)
  * [skip ci] Updated translations via Crowdin
  * update description about vendoring in CONTRIBUTING.md (#18280)
  * Fix CheckRepoStats and reuse it during migration (#18264)
  * Minor tweak to tag list (#18295)
  * show pull link for agit pull request also (#18235)
  * [skip ci] Updated translations via Crowdin
  * Add some .ignore entries (#18296)
  * Remove unneeded debug messages to stdout. (#18298)
  * Handle missing default branch better in owner/repo/branches page (#18290)
  * Revert "Prevent possible XSS when using jQuery (#18289)" (#18293)
  * not show double error response in git hook (#18292)
  * Remove accidental debugging in blob_excerpt.tmpl (#18287)
  * Prevent possible XSS when using jQuery (#18289)
  * Return nicer error if trying to pull from non-existent user (#18288)
  * [skip ci] Updated translations via Crowdin
  * docs: mention client_max_body_size affects LFS (#18291)
  * Add lockfile-check (#18285)
  * Webauthn nits (#18284)
  * Update `package-lock.json` (#18283)
  * Upgrade EasyMDE to 2.16.1 (#18278)
  * Remove golang vendored directory (#18277)
  * Changelog for 1.15.10 (#18274) (#18276)
  * Support webauthn (#17957)
  * [skip ci] Updated translations via Crowdin
  * Improve the comment for 2FA filter in admin panel (#18017)
  * fix regression from #16075 (#18260)
  * Prevent underline hover on cards (#18259)
  * Fix release link broken (#18252)
  * migrations: a deadline at January 1st, 1970 is valid (#18237)
  * Fix documents for development and bug report (#18249)
  * Add/update SMTP auth providers via cli (#18197)
  * Fix NPE on try to get tag reference via API (#18245)
  * Fix update user bug (#18250)
  * [doc] https-setup: explain relative paths for {CERT,KEY}_FILE fields. (#18244)
  * chore: remove unnecessary section (#18209)
  * Fix purple color in suggested label colors (#18241)
  * Prevent NPE when viewing non-rendered files (#18234)
  * Fix collobration template (#18232)
  * Fix identation typo in doc installation with Docker (#18233)
  * [skip ci] Updated translations via Crowdin
  * Fix source typos (#18227)
  * Fix various typos (#18219)
  * Remove `ioutil` (#18222)
  * [skip ci] Updated translations via Crowdin
  * Fix typos in docs/content (#18215)
  * [skip ci] Updated licenses and gitignores
  * In the Organization member page, 2fa column is too narrow for Simplified Chinese and Chinese Traditional. (#18213)
  * Fix new team (#18212)
  * Fix EasyMDE image paste bug during refactoring (#18207)
  * Sort locales according to their names (#18211)
  * Restore setting of ctx.Repo.Mirror (#18205)
  * [skip ci] Updated translations via Crowdin
  * Show OAuth callback error message (#18185)
  * Fix CSS specificity issue with easymde's css (#18201)
  * Fix mermaid rendering in milestone dashboard (#18202)
  * Don't store assets modified time into generated files (#18193)
  * Add warning for BIDI characters in page renders and in diffs (#17562)
  * [skip ci] Updated translations via Crowdin
  * Bump mermaid from 8.13.4 to 8.13.8 (#18198)
  * fix location for custom/options/license (#18194)
  * Enable partial clone by default (#18195)
  * Add option to convert CRLF to LF line endings for sendmail (#18075)
  * Add replay of webhooks. (#18191)
  * Load EasyMDE/CodeMirror dynamically, remove RequireEasyMDE (#18069)
  * refactoring nits (#18188)
  * slight optimization for default avatar (#18187)
  * code.gitea.io/sdk/gitea v0.14.0 -> v0.15.1 (#18186)
  * Team permission allow different unit has different permission (#17811)
  * Integration test for migration (#18124)
  * Update `TODOs` badge to reflect new default branch (#18182)
  * Increase Salt randomness  (#18179)
  * Add MP4 as default allowed attachment type (#18170)
  * [skip ci] Updated translations via Crowdin
  * Include folders into size cost (#18158)
  * Don't delete branch if other PRs with this branch are open (#18164)
  * Remove unused route "/tasks/trigger" (#18160)
  * Fix EasyMDE validation (#18161)
  * Fix bug (#18168)
  * tests: add coverage for models migration helpers  (#18162)
  * [skip ci] Updated translations via Crowdin
  * Require codereview to have content (#18156)
  * chore(lint): use golangci-lint to call revive and misspell checker. (#18145)
  * Update owners for 2022 (#18155)
  * Refactor auth package (#17962)
  * Unify and simplify TrN for i18n (#18141)
  * Use correct user when determining max repo limits for error messages (#18153)
  * Add singuliere to MAINTAINERS (#18148)
  * [skip ci] Updated licenses and gitignores
  * Add API to get issue/pull comments and events (timeline) (#17403)
  * Upgrade certmagic from v0.14.1 to v0.15.2 (#18138)
  * Allow admin to associate missing LFS objects for repositories (#18143)
  * Upgrade bleve from v2.0.6 to v2.3.0 (#18132)
  * tests: s/GITEA_UNIT_TESTS_VERBOSE/GITEA_UNIT_TESTS_LOG_SQL/ (#18142)
  * services/repository: fix ListUnadoptedRepositories incorrect total count (#17865)
  * Improve document for developers: Windows CGO, unit test option (#18140)
  * Reset the conflicted files list in testpatch (#18139)
  * Use correct translation key (#18135)
  * [skip ci] Updated translations via Crowdin
  * [Frontport] Changelog v1.15.9 (#18136)
  * Fix wrong redirect on org labels (#18128)
  * Fix performance regression when user has many organization (#18125)
  * docs: add various ways to install from package (#18120)
  * Removed unused method. (#18129)
  * [skip ci] Updated translations via Crowdin
  * Removed unused endpoint. (#18127)
  * Use conditions but not repo ids as query condition (#16839)
  * Set HeadCommit when creating tags. (#18116)
  * Fix: unstable sort skips/duplicates issues across pages (#18094)
  * Handle invalid issues (#18111)
  * [skip ci] Updated translations via Crowdin
  * Fix documents for Windows development (#18109)
  * Enable linter [rule.modifies-value-receiver] and refactor RoleDescriptor (#18093)
  * doc: clarify INSTALL_LOCK behavior (#17945)
  * [skip ci] Updated translations via Crowdin
  * Add issue hyperlinks in the webhook of wechatwork (#18102)
  * Fix a navbar UI bug in Safari (#18092)
  * Instead of using routerCtx just escape the url before routing (#18086)
  * When the git repository on storage is changed, the repository modal should also be updated (#18088)
  * - name: new parameter in CreateForkOption to give the forked repository (#18066)
  * When attempting to subscribe other user to issue report why access denied (#18091)
  * Improve interface when comparing a branch which has created a pull request (#17911)
  * Add API to manage repo tranfers (#17963)
  * Fix various typos of software names (#18083)
  * Prevent NPE if gitea uploader fails to open url (#18080)
  * Do not read or write git reference files directly (#18079)
  * Migrated Repository will show modifications when possible (#17191)
  * Quote references to the user table in consistency checks (#18072)
  * Only create pprof files for gitea serv if explicitly asked for (#18068)
  * Add NotFound handler (#18062)
  * Add API to get file commit history (#17652)
  * [skip ci] Updated translations via Crowdin
  * Add List-Unsubscribe header (#17804)
  * Avoid running go vet twice (#18059)
  * [Frontport] Changelog v1.15.8 (#18052)
  * Fix continuance tests (#18027)
  * update docker image to latest go version (#18048)
  * TestRepository_GetTag intermittently panics due to an NPE (#18043)
  * Ensure that git repository is closed before transfer (#18049)
  * [skip ci] Updated translations via Crowdin
  * Make test work with different default branch config (#18038)
  * Extract CodeMirror styles (#17960)
  * Migration 204 use Sync2 (#18044)
  * Move POST /{username}/action/{action} to simply POST /{username} (#18045)
  * Fix delete u2f keys modal (#18040)
  * Reset Session ID on login (#18018)
  * Add grafana gitea-mixin (#17758)
  * Simplify parameter types (#18006)
  * Update chroma (#18033)
  * Prevent off-by-one error on comments on newly appended lines (#18029)
  * Abort merge if head has been updated before pressing merge (#18032)
  * no need for docker image mirror (#18031)
  * Stop printing 03d after escaped characters in logs (#18030)
  * Reset locale on login (#18023)
  * Add support for ssh commit signing (#17743)
  * Improve TestPatch to use git read-tree -m and implement git-merge-one-file functionality (#18004)
  * [skip ci] Updated licenses and gitignores
  * Change <a> elements to underline on hover (#17898)
  * [skip ci] Updated translations via Crowdin
  * Support open compare page directly (#17975)
  * Add option to define refs in issue templates (#17842)
  * Fix outType on gitea dump (#18000)
  * Fix rename notification bug (#18008)
  * Ensure complexity, minlength and ispwned are checked on password setting (#18005)
  * Use JSON module instead of stdlib json (#18003)
  * Prevent hang in git cat-file if repository is not a valid repository and other fixes (#17991)
  * Prevent double decoding of % in url params  (#17997)
  * Add Reindex buttons to repository settings page (#17494)
  * Set correct language for Dockerfile variants (#17999)
  * Fix TemplateRepo no longer in models.repo (#17993)
  * Make AvatarRenderedSizeFactor configurable and set it to 3 (#17951)
  * [skip ci] Updated translations via Crowdin
  * Fixed emoji alias not parsed in links (#16221)
  * Shorten page title in file view (#17987)
  * Refactor HTTP request context (#17979)
  * Add missing `X-Total-Count` and fix some related bugs (#17968)
  * [skip ci] Updated translations via Crowdin
  * Use non-expiring key. (#17984)
  * Add Option to synchronize Admin & Restricted states from OIDC/OAuth2 along with Setting Scopes (#16766)
  * Return nicer error for ForcePrivate (#17971)
  * Fixed wording. (#17973)
  * [skip ci] Updated translations via Crowdin
  * Prevent deadlock in create issue (#17970)
  * Bump swagger-ui-dist from 4.1.2 to 4.1.3 (#17965)
  * Improve behavior of "Fork" button (#17288)
  * Prefer "Hiragino Kaku Gothic ProN" in system-ui-ja (#17954)
  * Some repository refactors (#17950)
  * [skip ci] Updated licenses and gitignores
  * Fix markdown URL parsing (#17924)
  * Fix overflow in commit graph (#17947)
  * Prevent services/mailer/mailer_test.go tests from deleteing data directory (#17941)
  * Move keys to models/asymkey (#17917)
  * Clean legacy SimpleMDE code (#17926)
  * Move repository model into models/repo (#17933)
  * [skip ci] Updated translations via Crowdin
  * Fix a panic in NotifyCreateIssueComment (caused by string truncation) (#17928)
  * [skip ci] Updated translations via Crowdin
  * Use disable_form_autofill on Codebase and Gitbucket (#17936)
  * Improve checkBranchName (#17901)
  * allways set a message-id on mails (#17900)
  * Support sorting for project board issuses (#17152)
  * Remove unnecessary `X-Remote` HTTP header in AJAX request (#17932)
  * Refactor install page (db type) (#17919)
  * [skip ci] Updated translations via Crowdin
  * Allow default branch to be inferred on compare page (#17908)
  * Apply CSS Variables to all message elements (#17920)
  * Move repo archiver to models/repo (#17913)
  * Replace "unix" by "http+unix" for PROTOCOL (#17771)
  * Fix loading content history on show more (#17819)
  * update xgo to use 1.17 (#17915)
  * [skip ci] Updated translations via Crowdin
  * Test cache during init (#17852)
  * Display issue/comment role even if repo archived (#17907)
  * [skip ci] Updated licenses and gitignores
  * fix i18n (#17906)
  * Fix svg colors in file list table (#17903)
  * Update JS dependencies, adjust eslint config (#17904)
  * [skip ci] Updated translations via Crowdin
  * Fix the bug: no wiki page can be created if the repo didn't have any page yet. (#17894)
  * tests: more integration tests for notifications (#17845)
  * Render issue references in file table (#17897)
  * Improve seek-help documents (#17895)
  * Add hints for special Wiki pages (#17283)
  * Removed SizeFmt. (#17890)
  * Changelog for v1.15.7 (#17871) (#17889)
  * [skip ci] Updated translations via Crowdin
  * Add migrate from Codebase (#16768)
  * Update chi/middleware to chi/v5/middleware (#17888)
  * Use fmt.Sprintf correctly (#17886)
  * Added missing `data-` prefix. (#17884)
  * Check if column exist before rename if exist, just return with no error (#17870)
  * Refactor various strings (#17784)
  * fix 500 error while use a reserved name in org rename (#17878)
  * [skip ci] Updated translations via Crowdin
  * Use shadowing script for docker (#17846)
  * Improve install code to avoid low-level mistakes. (#17779)
  * [skip ci] Updated translations via Crowdin
  * Rework commit page header (#17849)
  * Make Requests Processes and create process hierarchy. Associate OpenRepository with context. (#17125)
  * Fix position of label color picker colors (#17866)
  * docs: modules do not rely on models, services do (#17861)
  * Refactor commit graph styling to use css variables (#17860)
  * [skip ci] Updated translations via Crowdin
  * Remove whitespace inside rendered code `<td>` (#17859)
  * Switch archive URL code back to href attributes (#17796)
  * Make Co-committed-by and co-authored-by trailers optional (#17848)
  * Fix various typos in docs (#17844)
  * Move more model into models/user (#17826)
  * Docs: replace `gitea` with `Gitea` (#17838)
  * Move accessmode into models/perm (#17828)
  * Disable ref selection dropdown if you don't have permissions to use it (#17837)
  * Fix value of User.IsRestricted to default setting when oauth2 user auto registration; (#17839)
  * Handle relative unix socket paths (#17836)
  * Fix code formating (#17830)
  * Replace regex usage for MIME parsing (#17831)
  * [skip ci] Updated translations via Crowdin
  * Implement Well-Known URL for password change (#17777)
  * Add archived label for code search results in archived repo's (#17817)
  * Fix database inconsistent when admin change user email (#17549)
  * [skip ci] Updated translations via Crowdin
  * org settings -> webhook/labels/deletion should also active the menu (#17809)
  * Fixed org styles. (#17807)
  * Fix org webchatwork webhook (#17810)
  * Detect dark theme via css variable (#17800)
  * Allow forks to org if you can create repos (#17783)
  * Use correct user on releases (#17806)
  * [skip ci] Updated translations via Crowdin
  * Create menus for organization pages (#17802)
  * Preserve color when inverting emojis (#17797)
  * Move user related model into models/user (#17781)
  * Use `*PushUpdateOptions` as receiver (#17724)
  * Move repofiles from modules/repofiles to services/repository/files (#17774)
  * Fix visibility of org avatars (#17789)
  * Use correct Sender on webhook change title (#17791)
  * [skip ci] Updated translations via Crowdin
  * Use new OneDev /milestones endpoint (#17782)
  * Fix keys test (#17776)
  * Add `PULL_LIMIT` and `PUSH_LIMIT` to cron.update_mirror task (#17568)
  * Improve ellipsis buttons (#17773)
  * Harden authorized keys a bit more (#17772)
  * Add copy Commit ID button in commits list (#17759)
  * Add documentation for backend development (#17512)
  * [skip ci] Updated translations via Crowdin
  * More pleasantly handle broken or missing git repositories (#17747)
  * Remove unnecessary attributes of User struct (#17745)
  * Support pagination of organizations on user settings pages (#16083)
  * Make `bind` error more readable (#17750)
  * Improvements to content history (#17746)
  * Fix project board bug and improve documents (#17753)
  * Fix navbar on project view (#17749)
  * Exclude from watching tests (#17744)
  * Add user settings key/value DB table (#16834)
  * Add new JS linter rules (#17699)
  * Use `f` variant to parse formatting (#17751)
  * [skip ci] Updated translations via Crowdin
  * Allow Loading of Diffs that are too large (#17739)
  * Remove NewSession method from db.Engine interface (#17577)
  * Fix close issue but time watcher still running (#17643)
  * [skip ci] Updated licenses and gitignores
  * Reset locale on login (#17734)
  * Extract constant names out for the ReverseProxy and Basic authentication methods (#17735)
  * Enable show more files in diff for git <2.31 (#17733)
  * Make a.add-code-comment click handler an event handler (#17737)
  * Use `hostmatcher` to replace `matchlist`, improve security (#17605)
  * Make SSL cipher suite configurable (#17440)
  * Fix correct usage of teams (#17732)
  * [skip ci] Updated translations via Crowdin
  * Better builtin avatar generator (#17707)
  * Add settings to allow different SMTP envelope from address (#17479)
  * Allow Token API calls be authorized using the reverse-proxy header (#15119)
  * Move attachment into models/repo/ (#17650)
  * Use a standalone struct name for Organization (#17632)
  * Prevent double sanitize (#16386)
  * Added comment for changing issue ref (#17672)
  * Remove unused `user` paramater (#17723)
  * Prepare and check test env during CI (#17725)
  * Fix bug when project board get open issue number (#17703)
  * perf: sent `data-path` once for each file (#17657)
  * Prevent deadlock in TestPersistableChannelQueue (#17717)
  * [skip ci] Updated translations via Crowdin
  * Move user/org deletion to services (#17673)
  * Refactor repo-legacy.js, remove messy global variables. Fix errors. (#17646)
  * Fix Migrate Description (#17692)
  * Add pagination to fork list (#17639)
  * Fix possible panic (#17694)
  * Simplify code for wrting SHA to name-rev (#17696)
  * Prevent NPE due to missing repo in regression in #17551 (#17697)
  * Move task from modules to services (#17680)
  * Move user functions into user.go (#17659)
  * Cleanup and use global style on popups (#17674)
  * Remove unnecessary variable assignments (#17695)
  * [skip ci] Updated translations via Crowdin
  * Fixed commit count. (#17698)
  * Add .gitattribute assisted language detection to blame, diff and render (#17590)
  * Return 400 but not 500 when request archive with wrong format (#17691)
  * Sanitize user-input on file name (#17666)
  * Move some functions into services/repository (#17677)
  * A better go code formatter, and now `make fmt` can run in Windows (#17684)
  * Fix bug when read mysql database max lifetime (#17682)
  * Move user follow and openid into models/user/ (#17613)
  * Enable bidichk (#17610)
  * fix migrations documents (#17679)
  * Update golangci-lint in Makefile (#17647)
  * Set unit test timeout to 20 minutes (#17664)
  * Update for reverse proxying static resources (#17670)
  * [skip ci] Updated translations via Crowdin
  * Allow admins to change user avatars (#17661)
  * Multiple Escaping Improvements (#17551)
  * Move migrations into services and base into modules/migration (#17663)
  * Move some functions into services/repository (#17660)
  * Remove superfluous argument (#17667)
  * Decouple unit test, remove intermediate `unittestbridge` package (#17662)
  * Add copy button to markdown code blocks (#17638)
  * Migrating wiki don't require token, so we should move it out of the require form (#17645)
  * Fix GitBucket icon (#17644)
  * Fix database deadlock when update issue labels (#17649)
  * [skip ci] Updated translations via Crowdin
  * Changed migration text. (#17654)
  * Fix nil checking on typed interface (#17598)
  * Remove unnecassary calls to `filepath.Join` (#17608)
  * Add download button for file viewer (#17640)
  * [skip ci] Updated translations via Crowdin
  * fix typo (#17614)
  * Add icon to vscode clone link (#17641)
  * Add migration from GitBucket (#16767)
  * Fix offBy1 errors (#17606)
  * perf: only generate data-comment-url once (#17618)
  * [skip ci] Updated licenses and gitignores
  * Correctly handle failed migrations (#17575)
  * Minor readability patch. (#17627)
  * Decouple unit test code from business code (#17623)
  * Fix some incorrect async functions, improve frontend document. (#17597)
  * unbind the CheckConsistency for some structs so that they can be moved to sub packages easier (#17612)
  * Move EmailAddress & UserRedirect into models/user/ (#17607)
  * Refactor commentTags functionality (#17558)
  * Remove `golint` as linter (#17609)
  * Update JS dependencies (#17611)
  * Move oauth2 error to oauth2 service package (#17603)
  * Fix 500 when a comment was deleted which has a notification (#17550)
  * Move webhook into models/webhook/ (#17579)
  * Added GetUserByIDCtx. (#17602)
  * [skip ci] Updated translations via Crowdin
  * Move unit into models/unit/ (#17576)
  * tune sqlite3 message (#17601)
  * Remove me from the maintainers (#17599)
  * Fix 500 when review pull request with anonymous (#17594)
  * Move merge-section to `> .content` (#17582)
  * Update `User` model comments about permissions (#17583)
  * Improve async/await usage, and sort init calls in `index.js` (#17386)
  * Use provided database Engine (#17595)
  * Fix bug on detect issue/comment writer (#17591)
  * Allow U2F 2FA without TOTP (#11573)
  * Fix stats upon searching issues (#17566)
  * Only allow returned deleted branche to be on repo (#17570)
  * Avoid double imports (#17569)
  * Remove appSubUrl from pasted images (#17572)
  * Fix documents for ALLOWED_HOST_LIST, its default value differs between 1.15 and 1.16 (#17530)
  * Add @Gusted to maintainers filer (#17581)
  * Make ParsePatch more robust (#17573)
  * Fix bug on admin subcommand (#17533)
  * [skip ci] Updated translations via Crowdin
  * Fix ipv6 parsing for builtin ssh server (#17561)
  * Update locale_en-US.ini (#17553)
  * Escape issue titles in comments list (#17555)
  * Use correct defaultValue for stracktrace (#17552)
  * Fix zero created time bug on commit api (#17546)
  * [skip ci] Updated translations via Crowdin
  * Fix database keyword quote problem on migration v161 (#17522)
  * Hide label comments if labels were added and removed immediately (#17455)
  * Show correct "No" icon (#17537)
  * Use exec -a in the FHS compliant script (#17513)
  * Fix list for options under cli->user->admin->create (#17382)
  * hide note message for pull request template (#17529)
  * Simplify Gothic to use our session store instead of creating a different store (#17507)
  * Add QueryEscape to general funcmap (#17526)
  * fix email with + when active (#17518)
  * Make Repo Code Indexer an Unique Queue (#17515)
  * docs: add SSH passthrough instructions to with-docker-rootless (#17505) (#17508)
  * Only allow webhook to send requests to allowed hosts (#17482)
  * Stop double encoding blame commit messages (#17498)
  * [skip ci] Updated licenses and gitignores
  * Properly determine CSV delimiter (#17459)
  * Rename db Engines related functions (#17481)
  * Quote the table name in CountOrphanedObjects (#17487)
  * [skip ci] Updated translations via Crowdin
  * Run Migrate in Install rather than just SyncTables (#17475)
  * [skip ci] Updated translations via Crowdin
  * Update docs/config.yaml to 1.15.6 (#17472)
  * Move key forms before list and add cancel button (#17432)
  * Fix login redirection links (#17451)
  * Changelog 1.15.6 (#17457) (#17468)
  * Fix mispelling of starred as stared (#17465)
  * Ensure that restricted users can access repos for which they are members (#17460)
  * make commit-statuses popup can be shown correctly. (#17447)
  * Add integration tests for private.NoServCommand and private.ServCommand (#17456)
  * Add appearance section in settings (#17433)
  * Fix a UI error when folding a file content in a commit view (#17446)
  * Show client-side error if wiki page is empty (#17415)
  * Fixes #16559 - Do not trim leading spaces for tab delimited (#17442)
  * Fix docker rootless build (#17441)
  * Tune UI alignment for nav bar notification icon, avatar image, issue label (#17438)
  * Upgrade go-github to v39 (#17437)
  * Prevent panic in serv.go with Deploy Keys (#17434)
  * chmod executables when copying to the docker (#17423)
  * Upgrade webpack to 5.59.1 to resolve the `waitFor` bug with `watch-frontend` (#17428)
  * fix markdown checkbox rendering (#17425)
  * In many cases user avatar link should be an absolute URL with http host (#17420)
  * Add API to get/edit wiki (#17278)
  * [skip ci] Updated translations via Crowdin
  * Fix CSV render error (#17406)
  * Read expected buffer size (#17409)
  * Add HAProxy Config to reverse-proxies.en-us.md (#17407)
  * [skip ci] Updated translations via Crowdin
  * Fix issue content history problems, improve UI (#17404)
  * Fix issue markdown bugs (#17411)
  * [skip ci] Updated translations via Crowdin
  * Remove deprecated `extendDefaultPlugins` method of svgo (#17399)
  * Frontport Changelog 1.15.5 (#17392) (#17401)
  * Fix context popup error (#17398)
  * Add groups scope/claim to OIDC/OAuth2 Provider (#17367)
  * Stop sanitizing full name in API (#17396)
  * [skip ci] Updated translations via Crowdin
  * Re-separate the color translation strings (#17390)
  * Fix the click behavior for <tr> and <td> with [data-href] (#17388)
  * Refactor update checker to use AppState (#17387)
  * Fix SVG side by side comparison link (#17375)
  * Fix history count failure (#17351)
  * Sync gitea app path for git hooks and authorized keys when starting (#17335)
  * Handle broken references in mirror sync (#17013)
  * Frontend refactor, PascalCase to camelCase, remove unused code (#17365)
  * Fix heatmap test (#17381)
  * [skip ci] Updated translations via Crowdin
  * Ensure correct SSH permissions check for private and restricted users (#17370)
  * Upgrade Bluemonday to v1.0.16 (#17372)
  * Offer rsa-sha2-512 and rsa-sha2-256 algorithms in internal SSH (#17281)
  * Prevent NPE in CSV diff rendering when column removed (#17018)
  * Use a variable but a function for IsProd because of a slight performance increment (#17368)
  *  "Copy branch name" button in pull request (#17323)
  * Rename .air.conf to .air.toml (#17360)
  * Re-allow clipboard copy on non-https sites (#17118)
  * Update JS dependencies (#17357)
  * Fix dashboard repolist alignment and repolisting (#17355)
  * [skip ci] Updated translations via Crowdin
  * Disable form autofill (#17291)
  * Allow mocking timeutil (#17354)
  * docs: add permission notes to `SSH Container Passthrough` (#17347)
  * api: integration test for nodeinfo (#17346)
  * [skip ci] Updated translations via Crowdin
  * Use go1.16+ way of installing binaries (#17342)
  * Fix some lints (#17337)
  * Move session to models/login (#17338)
  * Hide command line merge instructions when user can't push (#17339)
  * fix: repository summary on mobile (#17322)
  * Make the Mirror Queue a queue (#17326)
  * Ensure popup text is aligned left (#17327)
  * [skip ci] Updated translations via Crowdin
  * Fix the PR review form bug during frontend refactor (#17332)
  * Split `index.js` to separate files (#17315)
  * Add RSS/Atom feed support for user actions (#16002)
  * Add simple update checker to Gitea (#17212)
  * Update documents for Gitea behind reverse proxy. Fix some small bugs (some URLs are generated without sub-path) (#17320)
  * fix: issue close/comment buttons on mobile (#17317)
  * fix: code review comments on mobile (#17321)
  * [skip ci] Updated translations via Crowdin
  * Check for context exceeded in WalkGitLog (#17319)
  * Add buttons to allow loading of incomplete diffs (#16829)
  * Multiple tokens support for migrating from github (#17134)
  * Frontend refactor: move Vue related code from `index.js` to `components` dir, and remove unused codes. (#17301)
  * [skip ci] Updated translations via Crowdin
  * Show direct match on top for user search (#17303)
  * Don't panic if we fail to parse U2FRegistration data (#17304)
  * Upgrade chi to v5 (#17298)
  * [skip ci] Updated translations via Crowdin
  * Ensure that git daemon export ok is created for mirrors (#17243)
  * Disable core.protectNTFS (#17300)
  * Use pointer for wrappedConn methods (#17295)
  * Add user status filter to admin user management page (#16770)
  * [API] Add endpount to get user org permissions (#17232)
  * [skip ci] Updated translations via Crowdin
  * AutoRegistration is supposed to be working with disabled registration (#17219)
  * Open markdown image links in new window (#17287)
  * [skip ci] Updated translations via Crowdin
  * Save and view issue/comment content history (#16909)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * changelog for 1.15.4 (frontport) (#17273)
  * Add a simple way to rename branch like gh (#15870)
  * Move add deploy key form before the list and add a cancel button (#17228)
  * Defer Last Commit Info (#16467)
  * Remove heads pointing to missing old refs (#17076)
  * Fix incorrect repository count on organization tab of dashboard (#17256)
  * Allow adding multiple issues to a project  (#17226)
  * Fix unwanted team review request deletion (#17257)
  * Handle duplicate keys on GPG key ring (#17242)
  * Fix broken Activities link in team dashboard (#17255)
  * Add protection to disable Gitea when run as root (#17168)
  * API pull's head/base have correct permission (#17214)
  * Fix problem when database ID is not incremented as expected (#17229)
  * fix navbar ui (#17235)
  * CI: migrate from 'plugins/s3:1' to 'woodpeckerci/plugin-s3:latest' (#17234)
  * Avatar refactor, move avatar code from `models` to `models.avatars`, remove duplicated code (#17123)
  * Remove Dashboard/Home button from the navbar (#16844)
  * Redirect on project after issue created (#17211)
  * Add metrics to get issues by repository (#17225)
  * Add specific event type to header (#17222)
  * Fix stange behavior of DownloadPullDiffOrPatch in incorect index (#17223)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Add metrics to get issues by label (#17201)
  * Fix typo in app.example.ini (#17213)
  * API: don't allow merged PRs to be reopened (#17192)
  * Reference in new issue modal: dont pre-populate issue title (#17208)
  * Add option to copy line permalink (#17145)
  * Add projects and project boards in exposed metrics (#17202)
  * [skip ci] Updated translations via Crowdin
  * Always set a unique Message-ID header. (#17206)
  * [skip ci] Updated translations via Crowdin
  * Prevent NPE on invalid diff (#17197)
  * API: add html urls to notification subjects (#17178)
  * [skip ci] Updated translations via Crowdin
  * Fix missing repo link in issue/pull assigned emails (#17183)
  * Kanban colored boards (#16647)
  * upgrade xorm to v1.2.5 (#17177)
  * Fix wording in issue template (#17176)
  * [skip ci] Updated translations via Crowdin
  * Create pub/priv keypair for federation (#17071)
  * Fix bug of get context user (#17169)
  * Add delvh to MAINTAINERS (#17170)
  * [skip ci] Updated translations via Crowdin
  * Add nodeinfo endpoint for federation purposes (#16953)
  * Don't return binary file changes in raw PR diffs by default (#17158)
  * Nicely handle missing user in collaborations (#17049)
  * Create doctor command to fix repo_units broken by dumps from 1.14.3-1.14.6 (#17136)
  * Use light/dark theme based on system preference (#17051)
  * docs: explain where are settings for release files (#17161)
  * Support direct comparison (git diff a..b) as well merge comparison (a...b) (#16635)
  * Allow LDAP Sources to provide Avatars (#16851)
  * Add SkipLocal2FA option to pam and smtp sources (#17078)
  * [skip ci] Updated translations via Crowdin
  * Fix bundle creation (#17079)
  * Fix wrong i18n keys (#17150)
  * Move twofactor to models/login (#17143)
  * Force color-adjust for markdown checkboxes (#17146)
  * [skip ci] Updated translations via Crowdin
  * Prevent panic in Org mode HighlightCodeBlock (#17140)
  * Move login related structs and functions to models/login (#17093)
  * Unify issue and pr subtitles (#17133)
  * DBContext is just a Context (#17100)
  * Fix typo skipping a migration (#17130)
  * Fix commit status index problem (#17061)
  * Fix problem when database id is not increment as expected (#17124)
  * refactor: move from io/ioutil to io and os package (#17109)
  * update docs to 1.15.3
  * Changelog 1.15.3 (#17091) (#17113)
  * Merge endpoints for pull diff/patch (#17104)
  * Add Horizontal scrollbar to inner menu on Chrome (#17086)
  * Ignore Sync errors on pipes when doing `CheckAttributeReader.CheckPath`, fix the hang of `git cat-file` (#17096)
  * Add API to get commit diff/patch (#17095)
  * [skip ci] Updated translations via Crowdin
  * Move db related basic functions to models/db (#17075)
  * [skip ci] Updated licenses and gitignores
  * Open the DingTalk link in browser (#17084)
  * Add left padding for chunk header of split diff view (#13397)
  * Switch migration icon to svg (#15954)
  * Fixed issue where creating a reference of an issue would create a tag with the full name instead of the username if this is the default in the .ini file (#17074)
  * Render full plain readme. (#17083)
  * OpenAPI: correct documentation of issue listing parameters (#17060)
  * Add caller to cat-file batch calls (#17082)
  * [skip ci] Updated translations via Crowdin
  * Notifications API: respond with updated notifications (#17064)
  * Add minimum versions of databases to the docs (#17080)
  * Make LDAP be able to skip local 2FA (#16954)
  * [skip ci] Updated translations via Crowdin
  * Upgrade xorm to v1.2.4 (#17059) (#17068)
  * Clean-up HookPreReceive and restore functionality for pushing non-standard refs (#16705)
  * Issue template form (#16349)
  * Fix bug of migrate comments which only fetch one page (#17055)
  * Improve LDAP synchronization efficiency (#16994)
  * Do not show issue context popup on external issues (#17050)
  * Update template (#17043)
  * [skip ci] Updated translations via Crowdin
  * Add doctor dbconsistency check for release and attachment (#16978)
  * Add `AbsoluteListOptions` (#17028)
  * Decrement Fork Num when converting from Fork (#17035)
  * Correctly rollback in ForkRepository (#17034)
  * Always emit the configuration path (#17036)
  * Update go-chi/session (fixes "race" in tests) (#17031)
  * [skip ci] Updated translations via Crowdin
  * fixed create repo page layout (#17012)
  * Use common sessioner for API and Web (#17027)
  * Fix reset password email template (#17025)
  * Fix overflow label in mobile view (#17020)
  * [skip ci] Updated translations via Crowdin
  * Support unprotected file patterns (#16395)
  * [skip ci] Updated translations via Crowdin
  * Report the associated filter if there is an error in LDAP (#17014)
  * Add skip and limit to git.GetTags (#16897)
  * Add setting to OAuth handlers to skip local 2FA authentication (#16594)
  * Calculate label URL on API  (#16186)
  * Add "new issue" button on project (#17001)
  * Fix missing close in WalkGitLog (#17008)
  * Use git attributes to determine generated and vendored status for language stats and diffs (#16773)
  * doc: Upgrade from an old Gitea (#16918)
  * Use filename as id/class prefix. (#16997)
  * Enable Malayalam, Greek, Persian, Hungarian & Indonesian by default (#16998)
  * [skip ci] Updated translations via Crowdin
  * Return correct error response for agit force-push (#16989)
  * Fix bug of migrated repository not index (#16991)
  * Changes for German language (#16985)
  * Skip AllowedUserVisibilityModes validation on update user if it is an organisation (#16988)
  * Add repo_id for attachment (#16958)
  * Make TestOneDevDownloadRepo work again & more resistant (#16987)
  * Disable Fomantic's CSS tooltips (#16974)
  * Make mirror feature more configurable (#16957)
  * [skip ci] Updated translations via Crowdin
  * Add Cache-Control to avatar redirects (#16973)
  * Resolve TODO: Enable pagination on GiteaDownloader.GetComments() & update another TODO (#16963)
  * Fix storage Iterate bug and Add storage doctor to delete garbage attachments (#16971)
  * Add missing icon set for `ActionRenameRepo` (#16972)
  * Prevent panic on diff generation (#16950)
  * Ensure that rebase conflicts are handled in updates (#16952)
  * Fix issue with issue default mail template (#16956)
  * [skip ci] Updated translations via Crowdin
  * update docs to 1.15.2
  * Changelog 1.15.2 (#16940) (#16944)
  * Doc: Mail-Tempales: Fix AppUrl function name (#16939)
  * Close storage objects before cleaning (#16934)
  * Use immediate queues in integration tests and ensure that immediate (#16927)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.14.7 (#16924) (#16928)
  * Changelog 1.15.1 (#16925) (#16929)
  * Allow BASIC authentication access to /:owner/:repo/releases/download/* (#16916)
  * Prevent leave changes dialogs due to autofill fields (#16912)
  * [skip ci] Updated translations via Crowdin
  * Fix wrong attachment removal (#16915)
  * Ensure that the testlogger has its final test removal safely (#16907)
  * Ignore review comment when ref commit is missed (#16905)
  * Gitlab Migrator: dont ignore reactions of last request (#16903)
  * Correctly return the number of Repositories for Organizations (#16807)
  * Workaround coverage bug part 2 (#16906)
  * Add option to update pull request by `rebase` (#16125)
  * Test if LFS object is accessible (#16865)
  * Fix git.Blob.DataAsync(): close pipe since we return a NopCloser (#16899)
  * Repare and Improve GetDiffRangeWithWhitespaceBehavior (#16894)
  * Remove ParseQueueConnStr as it is unused (#16878)
  * Fix wiki raw commit diff/patch view (#16891)
  * Fix dump and restore respository (#16698)
  * Prevent coverage break (#16887)
  * Fix report card link (#16885)
  * Ensure wiki repos are all closed (#16886)
  * [API] List limited and private orgs if authentificated (#16866)
  * Timeout on flush in testing (#16864)
  * [skip ci] Updated translations via Crowdin
  * Remove unused Fomantic sidebar module (#16853)
  * update theme doc (#16860)
  * Paginate releases page & set default page size to 10 (#16857)
  * Simplify split diff view generation and remove JS dependency (#16775)
  * Add GoLand configuration in hacking on gitea (#16843)
  * CI: rm unit-test-race step since its now coverd by unit-test too (#16856)
  * [skip ci] Updated translations via Crowdin
  * In Render tolerate not being passed a context (#16842)
  * Ensure that the default visibility is set on the user create page (#16845)
  * Refactor the fork service slightly to take ForkRepoOptions (#16744)
  * Add test to ensure that dumping of login sources remains correct (#16847)
  * Decoupled code from DefaultSigningKey (#16743)
  * Prevent "Race" detected in TestAdmin*User (#16830)
  * Add modals to Organization and Team remove/leave (#16471)
  * [skip ci] Updated translations via Crowdin
  * Enable race detector for CI (#1441)
  * [skip ci] Updated translations via Crowdin
  * Report the correct number of pushes on the feeds (#16811)
  * Add EdDSA JWT signing algorithm (#16786)
  * Actually compute proper foreground color for labels (#16729)
  * Unify migration descriptions (#16781)
  * Use a common quote to instead of check database type (#16817)
  * Add primary_key to issue_index (#16813)
  * Prevent NPE on empty commit (#16812)
  * Fix branch pagination error (#16805)
  * Add information for migrate failure (#16803)
  * Add bundle download for repository (#14538)
  * [skip ci] Updated translations via Crowdin
  * Add missing return to handleSettingRemoteAddrError (#16794)
  * Update caddyserver/certmagic (#16789)
  * Just use a slice when rendering file (#16774)
  * Ensure that template compilation panics are sent to the logs (#16788)
  * [skip ci] Updated translations via Crowdin
  * frontport: 1.15.0 changelog (#16772)
  * Alter issue/comment table TEXT fields to LONGTEXT (#16765)
  * Fix openidConnect source regression from #16544 (#16759)
  * [skip ci] Updated licenses and gitignores
  * Add migrate from OneDev (#16356)
  * Upgrade go.mod go version to 1.16 (#16764)
  * Download lfs in git and web workflow from minio/s3 directly (#16731)
  * when the update request doesn't intend to update attachments (eg: change checkbox state), ignore attachment updates (#16762)
  * Added introspection endpoint. (#16752)
  * Fix dependency link rendering in PR sidebar (#16754)
  * Fix dependency translations (#16753)
  * Keep attachments on tasklist update (#16750)
  * Do not use thin scrollbars on Firefox (#16738)
  * Return nil proxy function if proxy not enabled (#16742)
  * Fix wrong user in OpenID response (#16736)
  * Recreate Tables should Recreate indexes on MySQL (#16718)
  * Add edit button to wiki sidebar and footer (#16719)
  * Fix migration svg color (#16715)
  * Add proxy settings and support for migration and webhook (#16704)
  * Refactored and fixed migration tests. (#16714)
  * [skip ci] Updated translations via Crowdin
  * Add API Token Cache (#16547)
  * build with go1.17 (#16707)
  * Use github token URL when fetching oauth token (#16709)
  * Update JS dependencies (#16708)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Upgrade levelqueue 0.4.1 (#16696)
  * [skip ci] Updated translations via Crowdin
  * Improve resource string (#16691)
  *  Fix spelling of HookProcReceiveResult (#16690)
  * [skip ci] Updated translations via Crowdin
  * Ensure empty lines are copiable and final new line too (#16678)
  * Add filter by owner and team to issue/pulls search endpoint (#16662)
  * Update issue_index to finish migration (#16685)
  * [skip ci] Updated translations via Crowdin
  * Upgrade xorm to v1.2.2 (#16663)
  * Fix NPE in fuzzer (#16680)
  * [API] generalize list header (#16551)
  * Add link to vscode to repo header (#16664)
  * Send registration email on user autoregistration (#16523)
  * Improve SMTP authentication and Fix user creation bugs  (#16612)
  * Related refactors to ctx.FormX functions (#16567)
  * Add an api endpoint to fetch git notes (#15373) (#16649)
  * Rename ctx.Form() to ctx.FormString() and move code into own file (#16571)
  * [skip ci] Updated translations via Crowdin
  * Upgrade github.com/google/go-github v32.1.0 -> v37.0.0 (#16661)
  * Replace `list.List` with slices (#16311)
  * Change the implementation of the go-git version of GetNote to mirror the non go-git version when passed a non-existent commit (#16658)
  * [skip ci] Updated translations via Crowdin
  * Add Version info to migrations.go (#16653)
  * Restore compatibility with SQLServer 2008 R2 in migrations (#16627)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.15.0-rc3 (#16621) (#16645)
  * Separate open and closed issue in metrics (#16637)
  * Add note about build-time flags for PAM support (#16641)
  * [skip ci] Updated translations via Crowdin
  * Allow setting X-FRAME-OPTIONS (#16643)
  * Prevent 500 on draft releases without tag (#16634)
  * Add microsoft oauth2 providers (#16544)
  * [skip ci] Updated translations via Crowdin
  * Frontport changelog for v1.14.6 (#16632)
  * Restore Accessibility for Dropdown (#16576)
  * Fixes #16557 - duplicate csv import (#16631)
  * Update node tar dependency to 6.1.6 (#16622)
  * Switch back to node 16 (#16624)
  * Set AllowedHeaders on API CORS handler (#16524)
  * Pass down SignedUserName down to AccessLogger context (#16605)
  * [skip ci] Updated translations via Crowdin
  * Upgrade to golang-jwt 3.2.2 (#16590)
  * Clarify where server.LFS_CONTENT_PATH was moved to (#16601)
  * Make PR merge options more intuitive (#5863) (#16582)
  * Fix table alignment in markdown (#16596)
  * [CI] Use node v14 instead of node v16 untill it will pass again (#16595)
  * [skip ci] Updated translations via Crowdin
  * Swagger AccessToken fixes (#16574)
  * Fix 500 on first wiki page (#16586)
  * Fix swagger doc by rename repoAddTopíc to repoAddTopic (#16580)
  * Use node:16.5 for frontend  instead of node:16 (#16591)
  * [skip ci] Updated translations via Crowdin
  * [skip ci] Updated translations via Crowdin
  * Lock goth/gothic and Re-attempt OAuth2 registration on login if registration failed at startup (#16564)
  * Pre-fill suggested New File 'name' and 'content' with Query Params (#16556)
  * Show correct text when comparing commits on empty pull request (#16569)
  * Rename context.Query to context.Form (#16562)
  * Add agit flow support in gitea (#14295)
  * Upgrade levelqueue to v0.4.0 (#16560)
  * [skip ci] Updated translations via Crowdin
  * not show private user's repo in explore view (#16550)
  * Fix session bugs (#16552)
  * [skip ci] Updated translations via Crowdin
  * Fix add authentication page (#16543)
  * Handle too long PR titles correctly (#16517)
  * [skip ci] Updated licenses and gitignores
  * bump github.com/markbates/goth from v1.67.1 to v1.68.0 (#16538)
  * Add an abstract json layout to make it's easier to change json library (#16528)
  * Add Linode as an installation option in docs (#16529)
  * Add snap to docs (#16530)
  * switch to maintained lib (#16532)
  * Refactor: Move login out of models (#16199)
  * Make Mermaid.js limit configurable (#16519)
  * [skip ci] Updated translations via Crowdin
  * Fix issue pasted image missing if no release permission (#16520)
  * Fix typo (#16522)
  * Add support for corporate WeChat webhooks (#15910)
  * [skip ci] Updated translations via Crowdin
  * Changelog for 1.15.0-rc2 (#16511) (#16515)
  * Restore creation of git-daemon-export-ok files (#16508)
  * [skip ci] Updated translations via Crowdin
  * update `user/repos` api description (#16503)
  * Restore CORS on git smart http protocol (#16496)
  * Fix race in log (#16490)
  * Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479)
  * Add TestPrepareWikiFileName (#16487)
  * Add basic edit ldap auth test & actually fix #16252 (#16465)
  * Add fluid to ui container class to remove margin (#16396)
  * fix: support delete non-urlencoded wiki page (#16482)
  * [skip ci] Updated translations via Crowdin
  * Fix data race in bleve indexer (#16474)
  * docs: fix various typos and translate to french (#16477)
  * modules/markup/markdown: fix dropped test error (#16438)
  * [skip ci] Updated translations via Crowdin
  * Improve 2FA autofill (#16473)
  * show tag name on dashboard items list (#16466)
  * CI: Add unit-test-race (#16470)
  * Prevent race in TestPersistableChannelQueue (#16468)
  * Update notification table with only latest data (#16445)
  * Retry rename on lock induced failures (re-fix) (#16461)
  * Frontport v1.14.5 (#16454)
  * Extend the fail2ban instructions with a hint on how to make X-Real-IP… (#16446)
  * revert to use alpine 3.13 (#16451)
  * Fix crash following ldap authentication update (#16447)
  * [skip ci] Updated translations via Crowdin
  * cleanup code `issueFullPattern` in modules/markup (#16419)
  * Update documentation to reflect #15219 (#16442)
  * add configuration option to restrict users by default (#16256)
  * Check user instead of organization when creating a repo from a template via API (#16346)
  * microbadger is no more, rm from readme (#16440)
  * Change @every 24h default schedules to @midnight (#16431)

-------------------------------------------------------------------
Sun Jan 30 17:36:15 UTC 2022 - ecsos <ecsos@opensuse.org>

- Update to 1.15.11
  * SECURITY
    - Only view milestones from current repo (#18414) (#18418)
  * BUGFIXES
    - Fix broken when no commits and default branch is not master (#18422) (#18424)
    - Fix commit's time (#18375) (#18409)
    - Fix restore without topic failure (#18387) (#18401)
    - Fix mermaid import in 1.15 (it uses ESModule now) (#18382)
    - Update to go/text 0.3.7 (#18336)
  * MISC
    - Upgrade EasyMDE to 2.16.1 (#18278) (#18279)

-------------------------------------------------------------------
Fri Jan 14 21:01:38 UTC 2022 - Michael Ströder <michael@stroeder.com>

- Update to 1.15.10
  * BUGFIXES
    - Fix inconsistent PR comment counts (#18260) (#18261)
    - Fix release link broken (#18252) (#18253)
    - Fix update user from site administration page bug (#18250) (#18251)
    - Set HeadCommit when creating tags (#18116) (#18173)
    - Use correct translation key for error messages due to max repo limits (#18135 & #18153) (#18152)
    - Fix purple color in suggested label colors (#18241) (#18242)
  * SECURITY
    - Bump mermaid from 8.10.1 to 8.13.8 (#18198) (#18206)

-------------------------------------------------------------------
Thu Dec 30 21:21:05 UTC 2021 - Michael Ströder <michael@stroeder.com>

- Update to 1.15.9
  * BUGFIXES
    - Fix wrong redirect on org labels (#18128) (#18134)
    - Fix: unstable sort skips/duplicates issues across pages (#18094) (#18095)
    - Revert "Fix delete u2f keys bug (#18042)" (#18107)
    - Migrating wiki don't require token, so we should move it out of the require form (#17645) (#18104)
    - Prevent NPE if gitea uploader fails to open url (#18080) (#18101)
    - Reset locale on login (#17734) (#18100)
    - Correctly handle failed migrations (#17575) (#18099)
    - Instead of using routerCtx just escape the url before routing (#18086) (#18098)
    - Quote references to the user table in consistency checks (#18072) (#18073)
    - Add NotFound handler (#18062) (#18067)
    - Ensure that git repository is closed before transfer (#18049) (#18057)
    - Use common sessioner for API and web routes (#18114)
  * TRANSLATION
    - Fix code search result hint on zh-CN (#18053)

-------------------------------------------------------------------
Tue Dec 21 07:29:03 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.8
  * BUGFIXES
    - Move POST /{username}/action/{action} to simply POST /{username} (#18045) (#18046)
    - Fix delete u2f keys bug (#18040) (#18042)
    - Reset Session ID on login (#18018) (#18041)
    - Prevent off-by-one error on comments on newly appended lines (#18029) (#18035)
    - Stop printing 03d after escaped characters in logs (#18030) (#18034)
    - Reset locale on login (#18023) (#18025)
    - Fix reset password email template (#17025) (#18022)
    - Fix outType on gitea dump (#18000) (#18016)
    - Ensure complexity, minlength and isPwned are checked on password setting (#18005) (#18015)
    - Fix rename notification bug (#18011)
    - Prevent double decoding of % in url params (#17997) (#18001)
    - Prevent hang in git cat-file if the repository is not a valid repository (Partial #17991) (#17992)
    - Prevent deadlock in create issue (#17970) (#17982)
  * TESTING
    - Use non-expiring key. (#17984) (#17985)

-------------------------------------------------------------------
Fri Dec  3 11:10:45 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.7
  * ENHANCEMENTS
    - Only allow webhook to send requests to allowed hosts (#17482) (#17510)
    - Fix login redirection links (#17451) (#17473)
  * BUGFIXES
    - Fix database inconsistent when admin change user email (#17549) (#17840)
    - Use correct user on releases (#17806) (#17818)
    - Fix commit count in tag view (#17698) (#17790)
    - Fix close issue but time watcher still running (#17643) (#17761)
    - Fix Migrate Description (#17692) (#17727)
    - Fix bug when project board get open issue number (#17703) (#17726)
    - Return 400 but not 500 when request archive with wrong format (#17691) (#17700)
    - Fix bug when read mysql database max lifetime (#17682) (#17690)
    - Fix database deadlock when update issue labels (#17649) (#17665)
    - Fix bug on detect issue/comment writer (#17592)
    - Remove appSubUrl from pasted images (#17572) (#17588)
    - Make ParsePatch more robust (#17573) (#17580)
    - Fix stats upon searching issues (#17566) (#17578)
    - Escape issue titles in comments list (#17555) (#17556)
    - Fix zero created time bug on commit api (#17546) (#17547)
    - Fix database keyword quote problem on migration v161 (#17522) (#17523)
    - Fix email with + when active (#17518) (#17520)
    - Stop double encoding blame commit messages (#17498) (#17500)
    - Quote the table name in CountOrphanedObjects (#17487) (#17488)
    - Run Migrate in Install rather than just SyncTables (#17475) (#17486)
  * BUILD
    - Fix golangci-lint warnings (#17598 et al) (#17668)
  * MISC
    - Preserve color when inverting emojis (#17797) (#17799)

-------------------------------------------------------------------
Thu Oct 28 15:26:46 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.6
  * BUGFIXES
    - Prevent panic in serv.go with Deploy Keys (#17434) (#17435)
    - Fix CSV render error (#17406) (#17431)
    - Read expected buffer size (#17409) (#17430)
    - Ensure that restricted users can access repos for which they are members (#17460) (#17464)
    - Make commit-statuses popup show correctly (#17447) (#17466)
  * TESTING
    - Add integration tests for private.NoServCommand and private.ServCommand (#17456) (#17463)

-------------------------------------------------------------------
Wed Oct 27 08:58:31 UTC 2021 - ecsos <ecsos@opensuse.org>

- Fix wrong nodejs dependencies for Tumbleweed.

-------------------------------------------------------------------
Fri Oct 22 05:34:05 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.5
  * SECURITY
    - Upgrade Bluemonday to v1.0.16 (#17372) (#17374)
    - Ensure correct SSH permissions check for private and restricted users (#17370) (#17373)
  * BUGFIXES
    - Prevent NPE in CSV diff rendering when column removed (#17018) (#17377)
    - Offer rsa-sha2-512 and rsa-sha2-256 algorithms in internal SSH (#17281) (#17376)
    - Don't panic if we fail to parse U2FRegistration data (#17304) (#17371)
    - Ensure popup text is aligned left (backport for 1.15) (#17343)
    - Ensure that git daemon export ok is created for mirrors (#17243) (#17306)
    - Disable core.protectNTFS (#17300) (#17302)
    - Use pointer for wrappedConn methods (#17295) (#17296)
    - AutoRegistration is supposed to be working with disabled registration (backport) (#17292)
    - Handle duplicate keys on GPG key ring (#17242) (#17284)
    - Fix SVG side by side comparison link (#17375) (#17391)
- Add gitea-nodejs_package.json.patch to install eslint-module-utils version < 2.7.0.
  With newest version gitea will not build.

-------------------------------------------------------------------
Sat Oct  9 07:59:53 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.4
  * BUGFIXES
    - Raw file API: don't try to interpret 40char filenames as commit SHA (#17185) (#17272)
    - Don't allow merged PRs to be reopened (#17192) (#17271)
    - Fix incorrect repository count on organization tab of dashboard (#17256) (#17266)
    - Fix unwanted team review request deletion (#17257) (#17264)
    - Fix broken Activities link in team dashboard (#17255) (#17258)
    - API pull's head/base have correct permission(#17214) (#17245)
    - Fix stange behavior of DownloadPullDiffOrPatch in incorect index (#17223) (#17227)
    - Upgrade xorm to v1.2.5 (#17177) (#17188)
    - Fix missing repo link in issue/pull assigned emails (#17183) (#17184)
    - Fix bug of get context user (#17169) (#17172)
    - Nicely handle missing user in collaborations (#17049) (#17166)
    - Add Horizontal scrollbar to inner menu on Chrome (#17086) (#17164)
    - Fix wrong i18n keys (#17150) (#17153)
    - Fix Archive Creation: correct transaction ending (#17151)
    - Prevent panic in Org mode HighlightCodeBlock (#17140) (#17141)
    - Create doctor command to fix repo_units broken by dumps from 1.14.3-1.14.6 (#17136) (#17137)
  * ENHANCEMENT
    - Check user instead of organization when creating a repo from a template via API (#16346) (#17195)
  * TRANSLATION
    - v1.15 fix Sprintf format 'verbs' in locale files (#17187)

-------------------------------------------------------------------
Wed Sep 22 05:08:26 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.3
  * ENHANCEMENTS
    - Add fluid to ui container class to remove margin (#16396) (#16976)
    - Add caller to cat-file batch calls (#17082) (#17089)
  * BUGFIXES
    - Render full plain readme. (#17083) (#17090)
    - Upgrade xorm to v1.2.4 (#17059)
    - Fix bug of migrate comments which only fetch one page (#17055) (#17058)
    - Do not show issue context popup on external issues (#17050) (#17054)
    - Decrement Fork Num when converting from Fork (#17035) (#17046)
    - Correctly rollback in ForkRepository (#17034) (#17045)
    - Fix missing close in WalkGitLog (#17008) (#17009)
    - Add prefix to SVG id/class attributes (#16997) (#17000)
    - Fix bug of migrated repository not index (#16991) (#16996)
    - Skip AllowedUserVisibilityModes validation on update user if it is an organisation (#16988) (#16990)
    - Fix storage Iterate bug and Add storage doctor to delete garbage attachments (#16971) (#16977)
    - Fix issue with issue default mail template (#16956) (#16975)
    - Ensure that rebase conflicts are handled in updates (#16952) (#16960)
    - Prevent panic on diff generation (#16950) (#16951)

-------------------------------------------------------------------
Fri Sep  3 13:30:00 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.2
  * BUGFIXES
    - Add unique constraint back into issue_index (#16938)
    - Close storage objects before cleaning (#16934) (#16942)

-------------------------------------------------------------------
Fri Sep  3 05:48:01 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.1
  * BUGFIXES
    - Allow BASIC authentication access to /:owner/:repo/releases/download/* (#16916) (#16923)
    - Prevent leave changes dialogs due to autofill fields (#16912) (#16920)
    - Ignore review comment when ref commit is missed (#16905) (#16919)
    - Fix wrong attachment removal (#16915) (#16917)
    - Gitlab Migrator: dont ignore reactions of last request (#16903) (#16913)
    - Correctly return the number of Repositories for Organizations (#16807) (#16911)
    - Test if LFS object is accessible (#16865) (#16904)
    - Fix git.Blob.DataAsync(): close pipe since we return a NopCloser (#16899) (#16900)
    - Fix dump and restore respository (#16698) (#16898)
    - Repair and Improve GetDiffRangeWithWhitespaceBehavior (#16894) (#16895)
    - Fix wiki raw commit diff/patch view (#16891) (#16892)
    - Ensure wiki repos are all closed (#16886) (#16888)
    - List limited and private orgs if authenticated on API (#16866) (#16879)
    - Simplify split diff view generation and remove JS dependency (#16775) (#16863)
    - Ensure that the default visibility is set on the user create page (#16845) (#16862)
    - In Render tolerate not being passed a context (#16842) (#16858)
    - Upgrade xorm to v1.2.2 (#16663) & Add test to ensure that dumping of login sources remains correct (#16847) (#16848)
    - Report the correct number of pushes on the feeds (#16811) (#16822)
    - Add primary_key to issue_index (#16813) (#16820)
    - Prevent NPE on empty commit (#16812) (#16819)
    - Fix branch pagination error (#16805) (#16816)
    - Add missing return to handleSettingRemoteAddrError (#16794) (#16795)
    - Remove spurious / from issues.opened_by (#16793)
    - Ensure that template compilation panics are sent to the logs (#16788) (#16792)
    - Update caddyserver/certmagic (#16789) (#16790)

-------------------------------------------------------------------
Sun Aug 29 10:38:44 UTC 2021 - ecsos <ecsos@opensuse.org>

- Add missing docs.

-------------------------------------------------------------------
Tue Aug 24 10:29:41 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.15.0
  * BREAKING
    - Make app.ini permissions more restrictive (#16266)
    - Refactor Webhook + Add X-Hub-Signature (#16176)
    - Add asymmetric JWT signing (#16010)
    - Clean-up the settings hierarchy for issue_indexer queue (#16001)
    - Change default queue settings to be low go-routines (#15964)
    - Improve assets handler middleware (#15961)
    - Rename StaticUrlPrefix to AssetUrlPrefix (#15779)
    - Use a generic markup class to display externally rendered files and diffs (#15735)
    - Add frontend testing, require node 12 (#15315)
    - Move (custom) assets into subpath /assets (#15219)
    - Use level config in log section when sub log section not set level (#15176)
    - Links in markdown should be absolute to the repository not the server (#15088)
    - Upgrade to the latest version of golang-jwt (#16590) (#16606)
    - Set minimum supported version of go to 1.16 (#16710)
  * SECURITY
    - Encrypt LDAP bind password in db with SECRET_KEY (#15547)
    - Remove random password in Dockerfiles (#15362)
    - Upgrade to the latest version of golang-jwt and increase minimum go to 1.15 (#16590) (#16606)
    - Correctly create of git-daemon-export-ok files (#16508) (#16514)
    - Don't show private user's repo in explore view (#16550) (#16554)
    - Update node tar dependency to 6.1.6 (#16622) (#16623)
  * FEATURES
    - Update Go-Git to take advantage of LargeObjectThreshold (#16316)
    - Support custom mime type mapping for text files (#16304)
    - Link to previous blames in file blame page (#16259)
    - Add LRU mem cache implementation (#16226)
    - Localize Email Templates (#16200)
    - Make command in authorized keys a template (#16003)
    - Add possibility to make branch in branch page (#15960)
    - Add email headers (#15939)
    - Make tasklist checkboxes clickable (#15791)
    - Add selecting tags on the compare page (#15723)
    - Add cron job to delete old actions from database (#15688)
    - On open repository open common cat file batch and batch-check (#15667)
    - Add tag protection (#15629)
    - Add push to remote mirror repository (#15157)
    - Add Image Diff for SVG files (#14867)
    - Add dashboard milestone search and repo milestone search by name. (#14866)
    - Add LFS Migration and Mirror (#14726)
    - Improve notifications for WIP draft PR's (#14663)
    - Disable Stars config option (#14653)
    - GPG Key Ownership verification with Signed Token (#14054)
    - OAuth2 auto-register (#5123)
  * API
    - Return updated repository when changing repository using API (#16420)
    - Let branch/tag name be a valid ref to get CI status (#16400)
    - Add endpoint to get commits of PR (#16300)
    - Allow COMMENT reviews to not specify a body (#16229)
    - Add subject-type filter to list notification API endpoints (#16177)
    - ListReleases add filter for draft and pre-releases (#16175)
    - ListIssues add more filters (#16174)
    - Issue Search Add filter for MilestoneNames (#16173)
    - GET / SET User Settings (#16169)
    - Expose repo.GetReviewers() & repo.GetAssignees() (#16168)
    - User expose counters (#16167)
    - Add repoGetTag (#16166)
    - Add repoCreateTag (#16165)
    - Creating a repo from a template repo via API (#15958)
    - Add Active and ProhibitLogin to API (#15689)
    - Add Location, Website and Description to API (#15675)
    - Expose resolver via API (#15167)
    - Swagger AccessToken fixes (#16574) (#16597)
    - Set AllowedHeaders on API CORS handler (#16524) (#16618)
  * ENHANCEMENTS
    - Support HTTP/2 in Let's Encrypt (#16371)
    - Introduce NotifySubjectType (#16320)
    - Add forge emojies (#16296)
    - Implemented head_commit for webhooks (#16282)
    - Upgrade Gliderlabs SSH to 0.3.3 and add FailedConnectionCallback (#16278)
    - Add previous/next buttons to review comments (#16273)
    - Review comments: break-word for long file names (#16272)
    - Add configuration to restrict allowed user visibility modes (#16271)
    - Add scroll-margin-top to account for sticky header (#16269)
    - Add --quiet and --verbose to gitea web to control initial logging (#16260)
    - Use gitea logging module for git module (#16243)
    - Add tests for all webhooks (#16214)
    - Add button to delete undeleted repositories from failed migrations (#16197)
    - Speed up git diff highlight generation (#16180)
    - Add OpenID claims "profile" and "email". (#16141)
    - Reintroduce squash merge default comment as a config setting (#16134)
    - Add sanitizer rules per renderer (#16110)
    - Improve performance of dashboard list orgs (#16099)
    - Refactor assert statements in tests (#16089)
    - Add sso.Group, context.Auth, context.APIAuth to allow auth special routes (#16086)
    - Remove unnecessary goroutine (#16080)
    - Add attachments for PR reviews (#16075)
    - Make the github migration less rate limit waiting to get comment per page from repository but not per issue (#16070)
    - Add Visible modes function from Organisation to Users too (#16069)
    - Add checkbox to delete pull branch after successful merge (#16049)
    - Make commit info cancelable (#16032)
    - Make modules/context.Context a context.Context (#16031)
    - Unified custom config creation (#16012)
    - Make sshd_config more flexible regarding connections (#16009)
    - Append to existing trailers in generated squash commit message (#15980)
    - Always store primary email address into email_address table and also the state (#15956)
    - Load issue/PR context popup data only when needed (#15955)
    - Remove remaining fontawesome usage in templates (#15952)
    - Remove fomantic accordion module (#15951)
    - Small refactoring of modules/private (#15947)
    - Double the avatar size factor (#15941)
    - Add curl to rootless docker image (#15908)
    - Replace clipboard.js with async clipboard api (#15899)
    - Allow custom highlight mapping beyond file extensions (#15808)
    - Add trace logging to SSO methods (#15803)
    - Refactor routers directory (#15800)
    - Allow only internal registration (#15795)
    - Add a new internal hook to save ssh log (#15787)
    - Respect default merge message syntax when parsing item references (#15772)
    - OAuth2 login: Set account link to "login" as default behavior (#15768)
    - Use single shared random string generation function (#15741)
    - Hold the event source when there are no listeners (#15725)
    - Code comments improvements (#15722)
    - Provide OIDC compliant user info endpoint (#15721)
    - Fix webkit calendar icon color on arc-green (#15713)
    - Improve Light Chroma style (#15699)
    - Only use boost workers for leveldb shadow queues (#15696)
    - Add compare tag dropdown to releases page (#15695)
    - Add caret styling CSS (#15651)
    - Remove x-ua-compatible meta tag (#15640)
    - Refactor of link creation (#15619)
    - Add a new table issue_index to store the max issue index so that issue could be deleted with no duplicated index (#15599)
    - Rewrite of the LFS server (#15523)
    - Display more repository type on admin repository management (#15440)
    - Remove usage of some JS globals (#15378)
    - SHA in merged commit comment should be rendered ui sha (#15376)
    - Add well-known config for OIDC (#15355)
    - Use route rather than use thus reducing the number of stack frames (#15301)
    - Code Formats, Nits & Unused Func/Var deletions (#15286)
    - Let package git depend on setting but not opposite (#15241)
    - Fixed sanitize errors (#15240)
    - response simple text message for not html request when 404 (#15229)
    - Remove file-loader dependency (#15196)
    - Refactor renders (#15175)
    - Add mimetype mapping settings (#15133)
    - Add Status Updates whilst Gitea migrations are occurring (#15076)
    - Reload locales in initialisation if needed by utilizing i18n.Reset (#15073)
    - Counterwork seemingly unclickable repo button labels (#15064)
    - Add DefaultMergeStyle option to repository (#14789)
    - Added support for gopher URLs. (#14749)
    - Rework repository archive (#14723)
    - Add links to toggle WIP status (#14677)
    - Add Tabular Diff for CSV files (#14661)
    - Use milestone deadline when sorting issues (#14551)
  * BUGFIXES
    - Fix invalid params and typo of email templates (#16394)
    - Fix activation of primary email addresses (#16385)
    - Fix calculation for finalPage in repo-search component (#16382)
    - Specify user in rootless container numerically (#16361)
    - Detect encoding changes while parsing diff (#16330)
    - Fix U2F error reasons always hidden (#16327)
    - Prevent zombie processes (#16314)
    - Escape reference to user table in models.SearchEmails (#16313)
    - Fix default push instructions on empty repos (#16302)
    - Fix modified files list in webhooks when there is a space (#16288)
    - Fix webhook commits wrong hash on HEAD reset (#16283)
    - Fuzzer finds an NPE due to incorrect URLPrefix (#16249)
    - Don't WARN log UserNotExist errors on ExternalUserLogin failure (#16238)
    - Do not show No match found for tribute (#16231)
    - Fix "Copy Link" for pull requests (#16230)
    - Fix diff expansion is missing final line in a file (#16222)
    - Fix private repo permission problem (#16142)
    - Fix not able to update local created non-urlencoded wiki pages (#16139)
    - More efficiently parse shas for shaPostProcessor (#16101)
    - Fix doctor --run check-db-consistency --fix with label fix (#16094)
    - Prevent webhook action buttons from shifting (#16087)
    - Change default TMPDIR path in rootless containers (#16077)
    - Fix typo and add TODO notice (#16064)
    - Use git log name-status in get last commit (#16059)
    - Fix 500 Error with branch and tag sharing the same name (#16040)
    - Fix get tag when migration (#16014)
    - Add custom emoji support (#16004)
    - Use filepath.ToSlash and Join in indexer defaults and queues (#15971)
    - Add permission check for GenerateRepository (#15946)
    - Ensure settings for Service and Mailer are read on the install page (#15943)
    - Fix layout of milestone view (#15927)
    - Unregister non-matching serviceworkers (#15834)
    - Multiple Queue improvements: LevelDB Wait on empty, shutdown empty shadow level queue, reduce goroutines etc (#15693)
    - Attachment support repository route (#15580)
    - Fix missing icons and colorpicker when mounted on suburl (#15501)
    - Create a session on ReverseProxy and ensure that ReverseProxy users cannot change username (#15304)
    - Prevent double-login for Git HTTP and LFS and simplify login (#15303)
    - Resolve Object { type: "error", data: undefined } in stopwatch.js (#15278)
    - Fix heatmap activity (#15252)
    - Remove vendored copy of fomantic-dropdown (#15193)
    - Update repository size on cron gc task (#15177)
    - Add NeedPostProcess for Parser interface to improve performance of csv parser and some external parser (#15153)
    - Add code block highlight to orgmode back (#14222)
    - Remove User.GetOrganizations() (#14032)
    - Restore Accessibility for Dropdown (#16576) (#16617)
    - Pass down SignedUserName down to AccessLogger context (#16605) (#16616)
    - Fix table alignment in markdown (#16596) (#16602)
    - Fix 500 on first wiki page (#16586) (#16598)
    - Lock goth/gothic and Re-attempt OAuth2 registration on login if registration failed at startup (#16564) (#16570)
    - Upgrade levelqueue to v0.4.0 (#16560) (#16561)
    - Handle too long PR titles correctly (#16517) (#16549)
    - Fix data race in bleve indexer (#16474) (#16509)
    - Restore CORS on git smart http protocol (#16496) (#16506)
    - Fix race in log (#16490) (#16505)
    - Fix prepareWikiFileName to respect existing unescaped files (#16487) (#16498)
    - Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479) (#16480)
    - Update notification table with only latest data (#16445) (#16469)
    - Fix crash following ldap authentication update (#16447) (#16448)
    - Fix direct creation of external users on admin page (partial #16612) (#16613)
    - Prevent 500 on draft releases without tag (#16634) (#16636)
    - Restore creation of git-daemon-export-ok files (#16508) (#16514)
    - Fix data race in bleve indexer (#16474) (#16509)
    - Restore CORS on git smart http protocol (#16496) (#16506)
    - Fix race in log (#16490) (#16505)
    - Fix prepareWikiFileName to respect existing unescaped files (#16487) (#16498)
    - Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479) (#16480)
    - Update notification table with only latest data (#16445) (#16469)
    - Fix crash following ldap authentication update (#16447) (#16448)
    - Restore compatibility with SQLServer 2008 R2 in migrations (#16638)
    - Fix direct creation of external users on admin page (#16613)
    - Fix go-git implementation of GetNote when passed a non-existent commit (#16658) (#16659)
    - Fix NPE in fuzzer (#16680) (#16682)
    - Set issue_index when finishing migration (#16685) (#16687)
    - Skip patch download when no patch file exists (#16356) (#16681)
    - Ensure empty lines are copiable and final new line too (#16678) (#16692)
    - Fix wrong user in OpenID response (#16736) (#16741)
    - Do not use thin scrollbars on Firefox (#16738) (#16745)
    - Recreate Tables should Recreate indexes on MySQL (#16718) (#16739)
    - Keep attachments on tasklist update (#16750) (#16757)
  * TESTING
    - Bump postgres and mysql versions (#15710)
    - Add tests for clone from wiki (#15513)
    - Fix Benchmark tests, remove a broken one & add two new (#15250)
    - Create Proper Migration tests (#15116)
  * TRANSLATION
    - Use a special name for update default branch on repository setting (#15893)
    - Fix mirror_lfs source string in en-US locale (#15369)
  * BUILD
    - Upgrade xorm to v1.1.1 (#16339)
    - Disable legal comments in esbuild (#15929)
    - Switch to Node 16 to build fronted (#15804)
    - Use esbuild to minify CSS (#15756)
    - Use binary version of revive linter (#15739)
    - Fix: npx webpack make: *** [Makefile:699: public/js/index.js] Error -… (#15465)
    - Stop packaging node_modules in release tarballs (#15273)
    - Introduce esbuild on webpack (#14578)
  * DOCS
    - Update queue workers documentation (#15999)
    - Comment out app.example.ini (#15807)
    - Improve logo customization docs (#15754)
    - Add some response status on api docs (#15399)
    - Rework Token API comments (#15162)
    - Add better errors for disabled account recovery (#15117)
  * MISC
    - Remove utf8 option from installation page (#16126)
    - Use Wants= over Requires= in systemd file (#15897)
- Switch again to download node_modules for myself, because upstream has removed node_mules again.

-------------------------------------------------------------------
Fri Aug  6 06:07:10 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.6
  * SECURITY
    - Bump github.com/markbates/goth from v1.67.1 to v1.68.0 (#16538) (#16540)
    - Switch to maintained JWT lib (#16532) (#16535)
    - Upgrade to latest version of golang-jwt (as forked for 1.14) (#16590) (#16607)
  * BUGFIXES
    - Add basic edit ldap auth test & actually fix #16252 (#16465) (#16495)
    - Make cancel from CatFileBatch and CatFileBatchCheck wait for the command to end (#16479) (#16481)

-------------------------------------------------------------------
Fri Jul 16 08:21:43 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.5
  * SECURITY
    - Hide mirror passwords on repo settings page (#16022) (#16355)
    - Update bluemonday to v1.0.15 (#16379) (#16380)
  * BUGFIXES
    - Retry rename on lock induced failures (#16435) (#16439)
    - Validate issue index before querying DB (#16406) (#16410)
    - Fix crash following ldap authentication update (#16447) (#16449)
  * ENHANCEMENTS
    - Redirect on bad CSRF instead of presenting bad page (#14937) (#16378)

-------------------------------------------------------------------
Tue Jul  6 14:54:49 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.4
  * BUGFIXES
    - Fix relative links in postprocessed images (#16334) (#16340)
    - Fix list_options GetStartEnd (#16303) (#16305)
    - Fix API to use author for commits instead of committer (#16276) (#16277)
    - Handle misencoding of login_source cfg in mssql (#16268) (#16275)
    - Fixed issues not updated by commits (#16254) (#16261)
    - Improve efficiency in FindRenderizableReferenceNumeric and getReference (#16251) (#16255)
    - Use html.Parse rather than html.ParseFragment (#16223) (#16225)
    - Fix milestone counters on new issue (#16183) (#16224)
    - reqOrgMembership calls need to be preceded by reqToken (#16198) (#16219)

-------------------------------------------------------------------
Sat Jun 19 07:13:40 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.3
  * SECURITY
    - Encrypt migration credentials at rest (#15895) (#16187)
    - Only check access tokens if they are likely to be tokens (#16164) (#16171)
    - Add missing SameSite settings for the i_like_gitea cookie (#16037) (#16039)
    - Fix setting of SameSite on cookies (#15989) (#15991)
  * API
    - Repository object only count releases as releases (#16184) (#16190)
    - EditOrg respect RepoAdminChangeTeamAccess option (#16184) (#16190)
    - Fix overly strict edit pr permissions (#15900) (#16081)
  * BUGFIXES
    - Run processors on whole of text (#16155) (#16185)
    - Class issue-keyword is being incorrectly stripped off spans (#16163) (#16172)
    - Fix language switch for install page (#16043) (#16128)
    - Fix bug on getIssueIDsByRepoID (#16119) (#16124)
    - Set self-adjusting deadline for connection writing (#16068) (#16123)
    - Fix http path bug (#16117) (#16120)
    - Fix data URI scramble (#16098) (#16118)
    - Merge all deleteBranch as one function and also fix bug when
      delete branch don't close related PRs (#16067) (#16097)
    - git migration: don't prompt interactively for clone credentials (#15902) (#16082)
    - Fix case change in ownernames (#16045) (#16050)
    - Don't manipulate input params in email notification (#16011) (#16033)
    - Remove branch URL before IssueRefURL (#15968) (#15970)
    - Fix layout of milestone view (#15927) (#15940)
    - GitHub Migration, migrate draft releases too (#15884) (#15888)
    - Close the gitrepo when deleting the repository (#15876) (#15887)
    - Upgrade xorm to v1.1.0 (#15869) (#15885)
    - Fix blame row height alignment (#15863) (#15883)
    - Fix error message when saving generated LOCAL_ROOT_URL config (#15880) (#15882)
    - Backport Fix LFS commit finder not working (#15856) (#15874)
    - Stop calling WriteHeader in Write (#15862) (#15873)
    - Add timeout to writing to responses (#15831) (#15872)
    - Return go-get info on subdirs (#15642) (#15871)
    - Restore PAM user autocreation functionality (#15825) (#15867)
    - Fix truncate utf8 string (#15828) (#15854)
    - Fix bound address/port for caddy's certmagic library (#15758) (#15848)
    - Upgrade unrolled/render to v1.1.1 (#15845) (#15846)
    - Queue manager FlushAll can loop rapidly - add delay (#15733) (#15840)
    - Tagger can be empty, as can Commit and Author - tolerate this (#15835) (#15839)
    - Set autocomplete off on branches selector (#15809) (#15833)
    - Add missing error to Doctor log (#15813) (#15824)
    - Move restore repo to internal router and invoke from command
      to avoid open the same db file or queues files (#15790) (#15816)
  * ENHANCEMENTS
    - Removable media support to snap package (#16136) (#16138)
    - Move sans-serif fallback font higher than emoji fonts (#15855) (#15892)
  * DOCKER
    - Only write config in environment-to-ini if there are changes (#15861) (#15868)
    - Only offer hostcertificates if they exist (#15849) (#15853)
- Use gitea-src-1.14.3.tar.gz and gitea-docs-1.14.3.tar.gz from github instead of
  source from gitea-fetch_source_and_node_modules.sh.
- Add docs package.

-------------------------------------------------------------------
Sun May  9 10:59:00 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.2
  * API
    - Make change repo settings work on empty repos (#15778) (#15789)
    - Add pull "merged" notification subject status to API (#15344) (#15654)
  * BUGFIXES
    - Ensure that ctx.Written is checked after issues(...) calls (#15797) (#15798)
    - Use pulls in commit graph unless pulls are disabled (#15734 & #15740 & #15774) (#15775)
    - Set GIT_DIR correctly if it is not set (#15751) (#15769)
    - Fix bug where repositories appear unadopted (#15757) (#15767)
    - Not show ref-in-new-issue pop when issue was disabled (#15761) (#15765)
    - Drop back to use IsAnInteractiveSession for SVC (#15749) (#15762)
    - Fix setting version table in dump (#15753) (#15759)
    - Fix close button change on delete in simplemde area (#15737) (#15747)
    - Defer closing the gitrepo until the end of the wrapped context functions (#15653) (#15746)
    - Fix some ui bug about draft release (#15137) (#15745)
    - Only log Error on getLastCommitStatus error to let pull list still be visible (#15716) (#15715)
    - Move tooltip down to allow selection of Remove File on error (#15672) (#15714)
    - Fix setting redis db path (#15698) (#15708)
    - Fix DB session cleanup (#15697) (#15700)
    - Fixed several activation bugs (#15473) (#15685)
    - Delete references if repository gets deleted (#15681) (#15684)
    - Fix orphaned objects deletion bug (#15657) (#15683)
    - Delete protected branch if repository gets removed (#15658) (#15676)
    - Remove spurious set name from eventsource.sharedworker.js (#15643) (#15652)
    - Not update updated uinx for git gc (#15637) (#15641)
    - Fix commit graph author link (#15627) (#15630)
    - Fix webhook timeout bug (#15613) (#15621)
    - Resolve panic on failed interface conversion in migration v156 (#15604) (#15610)
    - Fix missing storage init (#15589) (#15598)
    - If the default branch is not present do not report error on stats indexing (#15546 & #15583) (#15594)
    - Fix lfs management find (#15537) (#15578)
    - Fix NPE on view commit with notes (#15561) (#15573)
    - Fix bug on commit graph (#15517) (#15530)
    - Send size to /avatars if requested (#15459) (#15528)
    - Prevent migration 156 failure if tag commit missing (#15519) (#15527)
  * ENHANCEMENTS
    - Display conflict-free merge messages for pull requests (#15773) (#15796)
    - Exponential Backoff for ByteFIFO (#15724) (#15793)
    - Issue list alignment tweaks (#15483) (#15766)
    - Implement delete release attachments and update release attachments' name (#14130) (#15666)
    - Add placeholder text to deploy key textarea (#15575) (#15576)
    - Project board improvements (#15429) (#15560)
    - Repo branch page: label size, PR ref, new PR button alignment (#15363) (#15365)
  * MISC
    - Fix webkit calendar icon color on arc-green (#15713) (#15728)
    - Performance improvement for last commit cache and show-ref (#15455) (#15701)
    - Bump unrolled/render to v1.1.0 (#15581) (#15608)
    - Add ETag header (#15370) (#15552)

-------------------------------------------------------------------
Fri Apr 16 08:43:33 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.1
  * BUGFIXES
    - Fix bug clone wiki (#15499) (#15502)
    - Github Migration ignore rate limit, if not enabled (#15490) (#15495)
    - Use subdir for URL (#15446) (#15493)
    - Query the DB for the hash before inserting in to email_hash (#15457) (#15491)
    - Ensure review dismissal only dismisses the correct review (#15477) (#15489)
    - Use index of the supported tags to choose user lang (#15452) (#15488)
    - Fix wrong file link in code search page (#15466) (#15486)
    - Quick template fix for built-in SSH server in admin config (#15464) (#15481)
    - Prevent superfluous response.WriteHeader (#15456) (#15476)
    - Fix ambiguous argument error on tags (#15432) (#15474)
    - Add created_unix instead of expiry to migration (#15458) (#15463)
    - Fix repository search (#15428) (#15442)
    - Prevent NPE on avatar direct rendering if federated avatars disabled (#15434) (#15439)
    - Fix wiki clone urls (#15430) (#15431)
    - Fix dingtalk icon url at webhook (#15417) (#15426)
    - Standardise icon on projects PR page (#15387) (#15408)
  * ENHANCEMENTS
    - Add option to skip LFS/attachment files for dump (#15407) (#15492)
    - Clone panel fixes (#15436)
    - Use semantic dropdown for code search query type (#15276) (#15364)
  * BUILD
    - Build go-git variants for windows (#15482) (#15487)
    - Lock down build-images dependencies (Partial #15479) (#15480)
  * MISC
    - Performance improvement for list pull requests (#15447) (#15500)
    - Fix potential copy lfs records failure when fork a repository (#15441) (#15485)

-------------------------------------------------------------------
Sun Apr 11 11:21:24 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.14.0
  * SECURITY
    * Respect approved email domain list for externally validated user registration (#15014)
    * Add reverse proxy configuration support for remote IP address detection (#14959)
    * Ensure validation occurs on clone addresses too (#14994)
  * BREAKING
    * Fix double 'push tag' action feed (#15078) (#15083)
    * Remove possible resource leak (#15067) (#15082)
    * Handle unauthorized user events gracefully (#15071) (#15074)
    * Restore Access.log following migration to Chi framework
      (Stops access logging of /api/internal routes) (#14475)
    * Migrate from Macaron to Chi framework (#14293)
    * Deprecate building for mips (#14174)
    * Consolidate Logos and update README header (#14136)
    * Inline manifest.json (#14038)
    * Store repository data in data path if not previously set (#13991)
    * Rename "gitea" png to "logo" (#13974)
    * Standardise logging of failed authentication attempts in internal SSH (#13962)
    * Add markdown support in organization description (#13549)
    * Improve users management through the CLI (#6001) (#10492)
  * FEATURES
    * Create a new issue with reference to lines of code from file view (#14863)
    * Repository transfer has to be confirmed, if user can not
      create repo for new owner (#14792)
    * Allow blocking some email domains from registering an account (#14667)
    * Create a new issue based on reference to an issue comment (#14366)
    * Add support to migrate from gogs (#14342)
    * Add pager to the branches page (#14202)
    * Minimal OpenID Connect implementation (#14139)
    * Display current stopwatch in navbar (#14122)
    * Display SVG files as images instead of text (#14101)
    * Disable SSH key deletion of externally managed Keys (#13985)
    * Add support for ed25519_sk and ecdsa_sk SSH keys (#13462)
    * Add support for Mastodon OAuth2 provider (#13293)
    * Add gitea sendmail command (#13079)
    * Create DB session provider(based on xorm) (#13031)
    * Add dismiss review feature (#12674)
    * Make manual merge autodetection optional and add manual merge
      as merge method (#12543)
    * Dump github/gitlab/gitea repository data to a local directory
      and restore to gitea (#12244)
    * Create Rootless Docker image (#10154)
  * API
    * Speedup issue search (#15179) (#15192)
    * Get pull, return head branch sha, even if deleted (#14931)
    * Export LFS & TimeTracking function status (#14753)
    * Show Gitea version in swagger (#14654)
    * Fix PATCH /repos/{owner}/{repo} panic (#14637)
    * Add Restricted Field to User (#14630)
    * Add support for ref parameter to get raw file API (#14602)
    * Add affected files of commits to commit struct (#14579)
    * Fix CJK fonts again and misc. font issues (#14575)
    * Add delete release by tag & delete tag (#14563) & (#13358)
    * Add pagination to ListBranches (#14524)
    * Add signoff option in commit form (#14516)
    * GetRelease by tag only return release (#14397)
    * Add MirrorInterval to the API (#14163)
    * Make BasicAuth Prefix case insensitive (#14106)
    * Add user filter to issueTrackedTimes, enable usage for issue managers (#14081)
    * Add ref to create/edit issue options & deprecated assignee (#13992)
    * Add Ref to Issue (#13946)
    * Expose default theme in meta and API (#13809)
    * Send error message when CSRF token is missing (#13676)
    * List, Check, Add & delete endpoints for repository teams (#13630)
    * Admin EditUser: Make FullName, Email, Website & Location optional (#13562)
    * Add more filters to issues search (#13514)
    * Add review request api (#11355)
  * BUGFIXES
    * Fix delete nonexist oauth application 500 and prevent deadlock (#15384) (#15396)
    * Always set the merge base used to merge the commit (#15352) (#15385)
    * Upgrade to bluemonday 1.0.7 (#15379) (#15380)
    * Turn RepoRef and RepoAssignment back into func(*Context) (#15372) (#15377)
    * Move FCGI req.URL.Path fix-up to the FCGI listener (#15292) (#15361)
    * Show diff on rename with diff changes (#15338) (#15339)
    * Fix handling of logout event (#15323) (#15337)
    * Fix CanCreateRepo check (#15311) (#15321)
    * Fix xorm log stack level (#15285) (#15316)
    * Fix bug in Wrap (#15302) (#15309)
    * Drop the event source if we are unauthorized (#15275) (#15280)
    * Backport Fix graph pagination (#15225)  (#15249)
    * Prevent NPE in CommentMustAsDiff if no hunk header (#15199) (#15200)
    * should run RetrieveRepoMetas() for empty pr (#15187) (#15190)
    * Move setting to enable closing issue via commit in non
      default branch to repo settings (#14965)
    * Show correct issues for team dashboard (#14952)
    * Ensure that new pull request button works on forked forks owned
      by owner of the root and reduce ambiguity (#14932)
    * Only allow issue labels from owner repository or organization (#14928)
    * Fix alignment of People and Teams right arrow on org homepage (#14924)
    * Fix overdue marking of closed issues and milestones (#14923)
    * Prevent panic when empty MilestoneID in repo/issue/list (#14911)
    * Fix migration context data (#14910)
    * Handle URLs with trailing slash (#14852)
    * Add CORS config on to /login/oauth/access_token endpoint (#14850)
    * Make searching issues by keyword case insensitive on DB (#14848)
    * Prevent use of double sub-path and incorrect asset path in manifest (#14827)
    * Fix link account ui (#14763)
    * Fix preview status switch button on wiki editor (#14742)
    * Fix github download on migration (#14703)
    * Fix svg spacing (#14638)
    * Prevent adding nil label to .AddedLabels or .RemovedLabels (#14623)
    * Truncated organizations name (#14615)
    * Exclude the current dump file from the dump (#14606)
    * Use OldRef instead of CommitSHA for DeleteBranch comments (#14604)
    * Ensure memcache caching works when TTL greater than 30 days (#14592)
    * Remove NULs byte arrays passed to PostProcess (#14587)
    * Restore detection of branches are equal on compare page (#14586)
    * Fix incorrect key name so registerManualConfirm works (#14455)
    * Fix close/reopen with comment (#14436)
    * Allow passcode invalid error to appear (#14371)
    * Escape branch names in compare url (#14364)
    * Label and milestone webhooks on issue/pull creation (#14363)
    * Handle NotifyCreateRef as create branch in feeds (#14245)
    * Prevent clipping input text in Chrome + Segoe UI Font (#14179)
    * Fix UI on edit auth source page (#14137)
    * Fix git.parseTagData (#14105)
    * Refactor get tag to remove unnecessary steps (#14058)
    * Fix integrations test error with space in CURDIR path (#14056)
    * Dropdown triangle fixes (#14028)
    * Fix label of --id in admin delete user (#14005)
    * Cause NotifyMigrateRepository to emit a repo create webhook (#14004)
    * Update HEAD to match defaultBranch in template generation (#13948)
    * Fix action avatar loading (#13909)
    * Fix issue participants (#13893)
    * Fix avatar template error (#13833)
    * Fix review request notification email links when external
      issue tracker is enabled (#13723)
    * Fix blame line alignment (#13542)
    * Include OriginalAuthor in Reaction constraint (#13505)
    * Comments on review should have the same sha (#13448)
    * Fix whitespace rendering in diff (#13415)
    * Fixed git args duplication (#13411)
    * Fix bug on release publisherid migrations (#13410)
    * Fix --port setting (#13288)
    * Keep database transactions not too big (#13254)
    * Git version check, ignore pre-releases constraints (#13234)
    * Handle and propagate errors when checking if paths are Dirs,
      Files or Exist (#13186)
    * Update Mirror IsEmpty status on synchronize (#13185)
    * Use GO variable in go-check target (#13146) (#13147)
  * ENHANCEMENTS
    * UI style improvements
    * Dropzone styling improvements (#15291) (#15374)
    * Add size to Save function (#15264) (#15270)
    * Monaco improvements (#15333) (#15345)
    * Support .mailmap in code activity stats (#15009)
    * Sort release attachments by name (#15008)
    * Add ui.explore settings to control view of explore pages (#14094)
    * Make internal SSH server host key path configurable (#14918)
    * Hide resync all ssh principals when using internal ssh server (#14904)
    * Add SameSite setting for cookies (#14900)
    * Move Bleve and Elastic code indexers to use a common cat-file --batch (#14781)
    * Add environment-to-ini to docker image (#14762)
    * Add preview support for wiki editor when disable simpleMDE (#14757)
    * Add easyMDE(simpleMDE) support for release content editor (#14744)
    * Organization removal confirmation using name not password (#14738)
    * Make branch names in PR description clickable (#14716)
    * Add Password Algorithm option to install page (#14701)
    * Add fullTextSearch to dropdowns by default (#14694)
    * Fix truncated organization names (#14655)
    * Whitespace in commits (#14650)
    * Sort / move project boards (#14634)
    * Make fileheader sticky in diffs (#14616)
    * Add helper descriptions on new repo page (#14591)
    * Move the stopwatches to the eventsource stream (#14588)
    * Add Content-Length header to HEAD requests (#14542)
    * Add Image Diff options in Diff view (#14450)
    * Improve Description in new/ edit Project template (#14429)
    * Allow ssh-keygen on Windows to detect ssh key type (#14413)
    * Display error if twofaSecret cannot be retrieved (#14372)
    * Sort issue search results by revelance (#14353)
    * Implement ghost comment mitigation (#14349)
    * Upgrade blevesearch dependency to v2.0.1 (#14346)
    * Add edit, delete and reaction support to code review comments on issue page (#14339)
    * Merge default and system webhooks under one menu (#14244)
    * Add option for administrator to reset user 2FA (#14243)
    * Add option to change username to the admin panel (#14229)
    * Check for 'main' as potential default branch name (#14193)
    * Project: show referenced PRs in issue cards (#14183)
    * Use caddy's certmagic library for extensible/robust ACME handling (#14177)
    * CLI support for OAuth sources custom icons (#14166)
    * Custom icons for OAuth sources (#14161)
    * Team dashboards (#14159)
    * KanBan: be able to set default board (#14147)
    * Disable Fomantic's custom scrollbars (#14109)
    * Add UI to delete tracked times (#14100)
    * Rework heatmap permissions (#14080)
    * Issue and pull request filters on organization dashboard (#14072)
    * Fix webhook list styling (#14001)
    * Show dropdown with all statuses for commit (#13977)
    * Show status check for merged PRs (#13975)
    * Diff stat improvements (#13954)
    * Report permissions denied in internal SSH (#13953)
    * Markdown task list improvements (#13952)
    * Heatmap days clickable (#13935)
    * chore: use octicon-mirror for feeds display (#13928)
    * Move diff split code into own template file (#13919)
    * Markdown: Enable wrapping in code blocks and a color tweak (#13894)
    * Do not reload page after adding comments in Pull Request reviews (#13877)
    * Add pull request manually merge instruction (#13840)
    * add thumbnail preview section to issue attachments (#13826)
    * Move Repo APIFormat to convert package (#13787)
    * Move notification APIFormat (#13783)
    * Swap swagger-ui with swagger-ui-dist (#13777)
    * User Settings: Ignore empty language codes & validate (#13755)
    * Improve migrate page and add card CSS (#13751)
    * Add block on official review requests branch protection (#13705)
    * Add review requested filter on pull request overview (#13701)
    * Use chronological commit order in default squash message (#13696)
    * Clickable links in pull request (and issue) titles (#13695)
    * Support shortened commit SHAs in URLs (#13686)
    * Use native git variants by default with go-git variants as build tag (#13673)
    * Don't render dropdown when only 1 merge style is available (#13670)
    * Move webhook type from int to string (#13664)
    * Direct avatar rendering (#13649)
    * Verify password for local-account activation (#13631)
    * Prevent clone protocol button flash on page load (#13626)
    * Remove fetch request from heatmap (#13623)
    * Refactor combine label comments with tests (#13619)
    * Move metrics from macaron to chi (#13601)
    * Issue and Pulls lists rework (#13594)
    * HTTP cache rework and enable caching for storage assets (#13569)
    * Use mount but not register for chi routes (#13555)
    * Use monaco for the git hook editor (#13552)
    * Make heatmap colors more distinct (#13533)
    * Lazy-load issue reviewers and assignees avatars (#13526)
    * Change search and filter icons to SVG (#13473)
    * Create tag on ui (#13467)
    * updateSize when create a repo with init commit (#13441)
    * Added title and action buttons to Project view page (#13437)
    * Override fomantic monospace fonts and set size (#13435)
    * Rework focused comment styling (#13434)
    * Tags cleanup (#13428)
    * Various style tweaks (#13418)
    * Refactor push update (#13381)
    * Comment box tweaks and SVG dropdown triangles (#13376)
    * Various style fixes (#13372)
    * Change repo home page icons to SVG (#13364)
    * Use CSS Vars for primary color (#13361)
    * Refactor image paste code (#13354)
    * Switch from SimpleMDE to EasyMDE (#13333)
    * Group Label Changed Comments in timeline (#13304)
    * Make the logger an interface (#13294)
    * Fix PR/Issue titles on mobile (#13292)
    * Rearrange the order of the merged by etc. in locale (#13284)
    * Replace footer and modal icons with SVG (#13245)
    * Issues overview should not show issues from archived repos (#13220)
    * Show stale label for stale code comment which is marked as resolved (#13213)
    * Use CSS Variables for fonts, remove postcss-loader (#13204)
    * Add mentionable teams to tributeValues and change team mention rules to gh's style (#13198)
    * Move install pages out of main macaron routes (#13195)
    * Update outdated label to use Fomantic UI style (#13181)
    * Added option to disable webhooks (#13176)
    * Change order of possible-owner organizations to alphabetical (#13160)
    * Log IP on SSH authentication failure for Built-in SSH server (#13150)
    * Added option to disable migrations (#13114)
    * New "Add Mirror" Button in the Organization view (#13105)
    * Manually approve new registration (#13083)
    * Cron job to cleanup hook_task table (#13080)
    * Use the headline comment of pull-request as the squash commit's message (#13071)
    * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (#12999)
    * Slightly simplify the queue settings code to help reduce the risk of problems (#12976)
    * Add precise search type for Elastic Search (#12869)
    * Move APIFormat functions into convert package (#12856)
    * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links,
      Show only certain branches, (#12766)
    * Add TrN for repository limit (#12492)
    * Refactor doctor (#12264)
    * Add the tag list page to the release page (#12096)
    * Redirect on changed user and org name (#11649)
    * load U2F js only on pages which need it (#11585)
    * Make archival asynchronous (#11296)
    * Introduce go chi web framework as frontend of macaron, so that
      we can move routes from macaron to chi step by step (#7420)
    * Improve vfsgen to not unzip bindata files but send to browser directly (#7109)
    * Enhance release list (#6025)
  * DOCS
    * Swagger show models by default (#14880)
    * Add missing repo.projects unit into swagger (#14876)
    * Update docs and comments to remove macaron (#14491)
    * Issue template addition: Are you using Gitea behind CloudFlare? (#14098)
    * Generate man pages (#13901)
    * Reformat/fine-tune docs (#13897)
    * Added Table of Contents to long documentation pages (#13890)
    * Add docs command (#13429)
    * Update external-renderers.en-us.md (#13165)
  * MISC
    * Add builds for apple M1 (darwin arm64) (#14951)
    * Migrate to use jsoniter instead of encoding/json (#14841)
    * Reduce make verbosity (#13803)
    * Add git command error directory on log (#13194)

-------------------------------------------------------------------
Sun Apr 11 11:08:57 UTC 2021 - ecsos <ecsos@opensuse.org>

- Enable support for sqlite3 database.

-------------------------------------------------------------------
Thu Apr  8 06:19:29 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.13.7
  * SECURITY
    - Update to bluemonday-1.0.6 (#15294) (#15298)
    - Clusterfuzz found another way (#15160) (#15169)
  * API
    - Fix wrong user returned in API (#15139) (#15150)
  * BUGFIXES
    - Add 'fonts' into 'KnownPublicEntries' (#15188) (#15317)
    - Speed up enry.IsVendor (#15213) (#15246)
    - Response 404 for diff/patch of a commit that not exist
     (#15221) (#15238)
    - Prevent NPE in CommentMustAsDiff if no hunk header
     (#15199) (#15201)
  * MISC
    - Add size to Save function (#15264) (#15271)

-------------------------------------------------------------------
Wed Mar 24 06:41:38 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.13.6
  * SECURITY
    - Fix bug on avatar middleware (#15124) (#15125)
    - Fix another clusterfuzz identified issue (#15096) (#15114)
  * API
    - Fix nil exeption for get pull reviews API #15104 (#15106)
  * BUGFIXES
    - Fix markdown rendering in milestone content (#15056) (#15092)

-------------------------------------------------------------------
Tue Mar 23 10:28:58 UTC 2021 - ecsos <ecsos@opensuse.org>

- Fix build error in Tumbleweed. (npm>10 has problems)

-------------------------------------------------------------------
Sun Mar 21 15:36:17 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.13.5
  * SECURITY
    - Update to goldmark 1.3.3 (#15059) (#15061)
    - Another clusterfuzz spotted issue (#15032) (#15034)
  * API
    - Fix set milestone on PR creation (#14981) (#15001)
    - Prevent panic when editing forked repos by API (#14960) (#14963)
  * BUGFIXES
    - Fix bug when upload on web (#15042) (#15055)
    - Delete Labels & IssueLabels on Repo Delete too (#15039) (#15051)
    - Fix postgres ID sequences broken by recreate-table (#15015) (#15029)
    - Fix several render issues (#14986) (#15013)
    - Make sure sibling images get a link too (#14979) (#14995)
    - Fix Anchor jumping with escaped query components (#14969) (#14977)
    - Fix release mail html template (#14976)
    - Fix excluding more than two labels on issues list (#14962) (#14973)
    - Don't mark each comment poster as OP (#14971) (#14972)
    - Add "captcha" to list of reserved usernames (#14930)
    - Re-enable import local paths after reversion from #13610 (#14925) (#14927)

-------------------------------------------------------------------
Sun Mar  7 16:48:24 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.13.4
  * SECURITY
    - Fix issue popups (#14898) (#14899)
  * BUGFIXES
    - Fix race in LFS ContentStore.Put(...) (#14895) (#14913)
    - Fix a couple of issues with a feeds (#14897) (#14903)
    - When transfering repository and database transaction failed, rollback the renames (#14864) (#14902)
    - Fix race in local storage (#14888) (#14901)
    - Fix 500 on pull view page if user is not loged in (#14885) (#14886)
  * DOCS
    - Fix how lfs data path is set (#14855) (#14884)

-------------------------------------------------------------------
Thu Mar  4 15:32:25 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.13.3
  * BREAKING & SECURITY
    - Turn default hash password algorithm back to pbkdf2 from argon2 until we find a better one (#14673) (#14675)
  * BUGFIXES
    - Fix paging of file commit logs (#14831) (#14879)
    - Print useful error if SQLite is used in settings but not supported (#14476) (#14874)
    - Fix display since time round (#14226) (#14873)
    - When Deleting Repository only explicitly close PRs whose base is not this repository (#14823) (#14842)
    - Set HCaptchaSiteKey on Link Account pages (#14834) (#14839)
    - Fix a couple of CommentAsPatch issues. (#14804) (#14820)
    - Disable broken OAuth2 providers at startup (#14802) (#14811)
    - Repo Transfer permission checks (#14792) (#14794)
    - Fix double alert in oauth2 application edit view (#14764) (#14768)
    - Fix broken spans in diffs (#14678) (#14683)
    - Prevent race in PersistableChannelUniqueQueue.Has (#14651) (#14676)
    - HasPreviousCommit causes recursive load of commits unnecessarily (#14598) (#14649)
    - Do not assume all 40 char strings are SHA1s (#14624) (#14648)
    - Allow org labels to be set with issue templates (#14593) (#14647)
    - Accept multiple SSH keys in single LDAP SSHPublicKey attribute (#13989) (#14607)
    - Fix bug about ListOptions and stars/watchers pagnation (#14556) (#14573)
    - Fix GPG key deletion during account deletion (#14561) (#14569)

-------------------------------------------------------------------
Tue Feb  2 07:04:02 UTC 2021 - ecsos <ecsos@opensuse.org>

- Update to 1.13.2
  * SECURITY
    - Prevent panic on fuzzer provided string (#14405) (#14409)
    - Add secure/httpOnly attributes to the lang cookie (#14279) (#14280)
  * API
    - If release publisher is deleted use ghost user (#14375)
  * BUGFIXES
    - Internal ssh server respect Ciphers, MACs and KeyExchanges settings (#14523) (#14530)
    - Set the name Mapper in migrations (#14526) (#14529)
    - Fix wiki preview (#14515)
    - Update code.gitea.io/sdk/gitea v0.13.1 -> v0.13.2 (#14497)
    - ChangeUserName: rename user files back on DB issue (#14447)
    - Fix lfs preview bug (#14428) (#14433)
    - Ensure timeout error is shown on u2f timeout (#14417) (#14431)
    - Fix Deadlock & Delete affected reactions on comment deletion (#14392) (#14425)
    - Use path not filepath in routers/editor (#14390) (#14396)
    - Check if label template exist first (#14384) (#14389)
    - Fix migration v141 (#14387) (#14388)
    - Use Request.URL.RequestURI() for fcgi (#14347)
    - Use ServerError provided by Context (#14333) (#14345)
    - Fix edit-label form init (#14337)
    - Fix mailIssueCommentBatch for pull request (#14252) (#14296)
    - Render links for commit hashes followed by comma (#14224) (#14227)
    - Send notifications for mentions in pulls, issues, (code-)comments (#14218) (#14221)
    - Fix avatar bugs (#14217) (#14220)
    - Ensure that schema search path is set with every connection on postgres (#14131) (#14216)
    - Fix dashboard issues labels filter bug (#14210) (#14214)
    - When visit /favicon.ico but the static file is not exist return 404 but not continue to handle the route (#14211) (#14213)
    - Fix branch selector on new issue page (#14194) (#14207)
    - Check for notExist on profile repository page (#14197) (#14203)

-------------------------------------------------------------------
Mon Dec 28 19:38:25 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.13.1
  * SECURITY
    - Hide private participation in Orgs (#13994) (#14031)
    - Fix escaping issue in diff (#14153) (#14154)
  * BUGFIXES
    - Fix bug of link query order on markdown render (#14156) (#14171)
    - Drop long repo topics during migration (#14152) (#14155)
    - Ensure that search term and page are not lost on adoption page-turn (#14133) (#14143)
    - Fix storage config implementation (#14091) (#14095)
    - Fix panic in BasicAuthDecode (#14046) (#14048)
    - Always wait for the cmd to finish (#14006) (#14039)
    - Don't use simpleMDE editor on mobile devices for 1.13 (#14029)
    - Fix incorrect review comment diffs (#14002) (#14011)
    - Trim the branch prefix from action.GetBranch (#13981) (#13986)
    - Ensure template renderer is available before storage handler (#13164) (#13982)
    - Whenever the password is updated ensure that the hash algorithm is too (#13966) (#13967)
    - Enforce setting HEAD in wiki to master (#13950) (#13961)
    - Fix feishu webhook caused by API changed (#13938)
    - Fix Quote Reply button on review diff (#13830) (#13898)
    - Fix Pull Merge when tag with same name as base branch exist (#13882) (#13896)
    - Fix mermaid chart size (#13865)
    - Fix branch/tag notifications in mirror sync (#13855) (#13862)
    - Fix crash in short link processor (#13839) (#13841)
    - Update font stack to bootstrap's latest (#13834) (#13837)
    - Make sure email recipients can see issue (#13820) (#13827)
    - Reply button is not removed when deleting a code review comment (#13824)
    - When reinitialising DBConfig reset the database use flags (#13796) (#13811)
  * ENHANCEMENTS
    - Add emoji in label to project boards (#13978) (#14021)
    - Send webhook when tag is removed via Web UI (#14015) (#14019)
    - Use Process Manager to create own Context (#13792) (#13793)
  * API
    - GetCombinedCommitStatusByRef always return json & swagger doc fixes (#14047)
    - Return original URL of Repositories (#13885) (#13886)

-------------------------------------------------------------------
Sun Dec 13 11:08:34 UTC 2020 - ecsos <ecsos@opensuse.org>

- Put apache configuration files in separate subpackage.

-------------------------------------------------------------------
Wed Dec  2 06:21:35 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.13.0
  * SECURITY
  * Add Allow-/Block-List for Migrate & Mirrors (#13610) (#13776)
    - Prevent git operations for inactive users (#13527) (#13536)
    - Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13524)
    - Mitigate Security vulnerability in the git hook feature (#13058)
    - Disable DSA ssh keys by default (#13056)
    - Set TLS minimum version to 1.2 (#12689)
    - Use argon as default password hash algorithm (#12688)
  * BREAKING
    - Set RUN_MODE prod by default (#13765) (#13767)
    - Don't replace underscores in auto-generated IDs in goldmark (#12805)
    - Add Primary Key to Topic and RepoTopic tables (#12639)
    - Disable password complexity check default (#12557)
    - Change PIDFile default from /var/run/gitea.pid to /run/gitea.pid (#12500)
    - Add extension Support to Attachments (allow all types for releases) (#12465)
    - Remove IE11 Support (#11470)
  * FEATURES
    - Adopt repositories (#12920)
    - Check passwords against HaveIBeenPwned (#12716)
    - Gitea 2 Gitea migration (#12657)
    - Support storing Avatars in minio (#12516)
    - Allow addition of gpg keyring with multiple keys (#12487)
    - Add email notify for new release (#12463)
    - Add Access-Control-Expose-Headers (#12446)
    - UserProfile Page: Render Description (#12415)
    - Add command to recreate tables (#12407)
    - Add mermaid JS renderer (#12334)
    - Add ssh certificate support (#12281)
    - Add spent time to referenced issue in commit message (#12220)
    - Initial support for push options (#12169)
    - Provide option to unlink a fork (#11858)
    - Show exact tag for commit on diff view (#11846)
    - Pause, Resume, Release&Reopen, Add and Remove Logging from command line (#11777)
    - Issue templates directory (#11450)
    - Add a storage layer for attachments (#11387)
    - Add hide activity option (#11353)
    - Add push commits history comment on PR time-line (#11167)
    - Support elastic search for code search (#10273)
    - Kanban board (#8346)
  * API
    - If User is Admin, show 500 error message on PROD mode too (#13115)
    - Add Timestamp to Tag list API (#13026)
    - Return sample message for login error in api context (#12994)
    - Add IsTemplate option in create repo ui and api (#12942)
    - GetReleaseByID return 404 if not found (#12933)
    - Get release by tags endpoint (#12932)
    - NotificationSubject show Issue/Pull State (#12901)
    - Expose its limitation settings (#12714)
    - Add Created & Updated to Milestone (#12662)
    - Milestone endpoints accept names too (#12649)
    - Expose Attachment Settings in the API (#12514)
    - Add Issue and Repo info to StopWatch (#12458)
    - Add cron running API (#12421)
    - Add Update Pull HeadBranch Function (#12419)
    - Add TOTP header to Swagger Documentation (#12402)
    - Delete Token accept names too (#12366)
    - Add name filter for GetMilestoneList (#12336)
    - Fixed count of filtered issues when api request. (#12275)
    - Do not override API issue pagination with UI settings (#12068)
    - Expose useful General Repo settings settings (#11758)
    - Return error when trying to create Mirrors but Mirrors are globally disabled (#11757)
    - Provide diff and patch API endpoints (#11751)
    - Allow to create closed milestones (#11745)
    - Add language Statistics endpoint (#11737)
    - Add Endpoint to get GetGeneralUI Settings (#11735) & (#11854)
    - Issue/Pull expose IsLocked Property on API (#11708)
    - Add endpoint for Branch Creation (#11607)
    - Add pagination headers on endpoints that support total count from database (#11145)
  * BUGFIXES
    - Fix bogus http requests on diffs (#13760) (#13761)
    - Show 'owner' tag for real owner (#13689) (#13743)
    - Validate email before inserting/updating (#13475) (#13666)
    - Fix issue/pull request list assignee filter (#13647) (#13651)
    - Gitlab migration support for subdirectories (#13563) (#13591)
    - Fix logic for preferred license setting (#13550) (#13557)
    - Add missed sync branch/tag webhook (#13538) (#13556)
    - Migration won't fail on non-migrated reactions (#13507)
    - Fix Italian language file parsing error (#13156)
    - Show outdated comments in pull request (#13148) (#13162)
    - Fix parsing of pre-release git version (#13169) (#13172)
    - Fix diff skipping lines (#13154) (#13155)
    - When handling errors in storageHandler check underlying error (#13178) (#13193)
    - Fix size and clickable area on file table back link (#13205) (#13207)
    - Add better error checking for inline html diff code (#13251)
    - Fix initial commit page & binary munching problem (#13249) (#13258)
    - Fix migrations from remote Gitea instances when configuration not set (#13229) (#13273)
    - Store task errors following migrations and display them (#13246) (#13287)
    - Fix bug isEnd detection on getIssues/getPullRequests (#13299) (#13301)
    - When the git ref is unable to be found return broken pr (#13218) (#13303)
    - Ensure topics added using the API are added to the repository (#13285) (#13302)
    - Fix avatar autogeneration (#13233) (#13282)
    - Add migrated pulls to pull request task queue (#13331) (#13334)
    - Issue comment reactions should also check pull type on API (#13349) (#13350)
    - Fix links to repositories in /user/setting/repos (#13360) (#13362)
    - Remove obsolete change of email on profile page (#13341) (#13347)
    - Fix scrolling to resolved comment anchors (#13343) (#13371)
    - Storage configuration support [storage] (#13314) (#13379)
    - When creating line diffs do not split within an html entity (#13357) (#13375) (#13425) (#13427)
    - Fix reactions on code comments (#13390) (#13401)
    - Add missing full names when DEFAULT_SHOW_FULL_NAME is enabled (#13424)
    - Replies to outdated code comments should also be outdated (#13217) (#13433)
    - Fix panic bug in handling multiple references in commit (#13486) (#13487)
    - Prevent panic on git blame by limiting lines to 4096 bytes at most (#13470) (#13491)
    - Show original author's reviews on pull summary box (#13127)
    - Update golangci-lint to version 1.31.0 (#13102)
    - Fix line break for MS teams webhook (#13081)
    - Fix Issue & Pull Request comment headers on mobile (#13039)
    - Avoid setting the CONN_STR in queues unless it is meant to be set (#13025)
    - Remove code-view class from diff view (#13011)
    - Fix the color of PR comment hyperlinks. (#13009)
    - (Re)Load issue labels when changing them (#13007)
    - Fix Media links in org files not liked to media files (#12997)
    - Always return a list from GetCommitsFromIDs (#12981)
    - Only set the user password if the password field would have been shown (#12980)
    - Fix admin/config page (#12979)
    - Changed width of commit signature avatar (#12961)
    - Completely quote AppPath and CustomConf paths (#12955)
    - Fix handling of migration errors (#12928)
    - Fix anonymous GL migration (#12862)
    - Fix git open close bug (#12834)
    - Fix markdown meta parsing (#12817)
    - Add default storage configurations (#12813)
    - Show PR settings on empty repos (#12808)
    - Disable watch and star if not signed in (#12807)
    - Whilst changing the character set to utf8mb4 we should set ROW_FORMAT=dynamic too (#12804)
    - Set opengraph attributes on org pages (#12803)
    - Return error when creating gitlabdownloader failed (#12790)
    - Add migration for password algorithm change (#12784)
    - Compare SSH_DOMAIN when parsing submodule URLs (#12753)
    - Fix editor.commit_empty_file_text locale string (#12744)
    - Fix wrong poster message for code comment on Pull view (#11721)
    - Escape failed highlighted files (#12685)
    - Ensure that all migration requests are cancellable (#12669)
    - Ensure RepoPath is lowercased in gitea serv (#12668)
    - Do not disable commit changes button on repost (#12644)
    - Dark theme for line numbers in blame view (#12632)
    - Fix message when deleting last owner from an organization (#12628)
    - Use shellquote to unpack arguments to gitea serv (#12624)
    - Fix signing.wont_sign.%!s() if Require Signing commits but not signed in. (#12581)
    - Set utf8mb4 as the default charset on MySQL if CHARSET is unset (#12563)
    - Set context for running CreateArchive to that of the request (#12555)
    - Prevent redirect back to /user/events (#12462)
    - Re-attempt to delete temporary upload if the file is locked by another process (#12447)
    - Mirror System Notice reports are too frequent (#12438)
    - Do not show arrows on comment diffs on pull comment pages (#12434)
    - Fix milestone links (#12405)
    - Increase size of the language column in language_stat (#12396)
    - Use transaction in V102 migration (#12395)
    - Only use --exclude on name-rev with git >= 2.13 (#12347)
    - Add action feed for new release (#12324)
    - Set NoAutoTime when updating is_archived (#12266)
    - Support Force-update in Mirror and improve Tracing in mirror (#12242)
    - Avoid sending "0 new commits" webhooks (#12212)
    - Fix U2F button icon (#12167)
    - models/repo_sign.go: break out of loops (#12159)
    - Ensure that git commit tree continues properly over the page (#12142)
    - Rewrite GitGraph.js (#12137)
    - Fix repo API listing stability (#12057)
    - Add team support for review request (#12039)
    - Fix 500 error on repos with no tags (#11870)
    - Fix nil pointer in default issue mail template (#11862)
    - Fix commit search in all branches (#11849)
    - Don't consider tag refs as valid for branch name (#11847)
    - Don't add same line code comment box twice (#11837)
    - Fix visibility of forked public repos from private orgs (#11717)
    - Fix chardet test and add ordering option (#11621)
    - Fix number of files, total additions, and deletions on Diff pages (#11614)
    - Properly handle and return empty string for dangling commits in GetBranchName (#11587)
    - Include query in sign in redirect (#11579)
    - Fix Enter not working in SimpleMDE (#11564)
    - Fix bug about can't skip commits base on base branch (#11555)
  * ENHANCEMENTS
    - Only Return JSON for responses (#13511) (#13565)
    - Use existing analyzer module for language detection for highlighting (#13522) (#13551)
    - Return the full rejection message and errors in flash errors (#13221) (#13237)
    - Remove PAM from auth dropdown when unavailable (#13276) (#13281)
    - Add HostCertificate to sshd_config in Docker image (#13143)
    - Save TimeStamps for Star, Label, Follow, Watch and Collaboration to Database (#13124)
    - Improve error feedback for duplicate deploy keys (#13112)
    - Set appropriate autocomplete attributes on password fields (#13078)
    - Adding visual cue for "Limited" & "Private" organizations. (#13040)
    - Fix Pull Request merge buttons on mobile (#13035)
    - Gitea serv, hooks, manager and the like should always display Fatals (#13032)
    - CSS tweaks to warning/error segments and misc fixes (#13024)
    - Fix formatting of branches ahead-behind on narrow windows (#12989)
    - Add config option to make create-on-push repositories public by default (#12936)
    - Disable migration items when mirror is selected (#12918)
    - Add the checkbox quick button to the comment tool bar also (#12885)
    - Support GH enterprise (#12863)
    - Simplify CheckUnitUser logic (#12854)
    - Fix background of signed-commits on arc-green of timeline commits (#12837)
    - Move git update-server-info to hooks (#12826)
    - Add ui style for "Open a blank issue" button (#12824)
    - Use a simple format for the big number on ui (#12822)
    - Make SVG size argument optional (#12814)
    - Add placeholder text for bio profile text form (#12792)
    - Set language via AJAX (#12785)
    - Show git-pull-request icon for closed pull request (#12742)
    - Migrate version parsing library to hashicorp/go-version (#12719)
    - Only use async pre-empt hack if go < 1.15 (#12718)
    - Inform user about meaning of an hourglass on reviews (#12713)
    - Add a migrate service type switch page (#12697)
    - Migrations: Gitlab Add Reactions Support for Issues & MergeRequests (#12695)
    - Remove duplicate logic in initListSubmits (#12660)
    - Set avatar image dimensions (#12654)
    - Rename models.ProtectedBranchRepoID/PRID to models.EnvRepoID/PRID and ensure EnvPusherEmail is set (#12646)
    - Set setting.AppURL as GITEA_ROOT_URL environment variable during pushes (#12752)
    - Add postgres schema to the search_path on database connection (#12634)
    - Git migration UX improvements (#12619)
    - Add link to home page on swagger ui (#12601)
    - hCaptcha Support (#12594)
    - OpenGraph: use repo avatar if exist (#12586)
    - Reaction picker display improvements (#12576)
    - Fix emoji replacements, make emoji images consistent (#12567)
    - Increase clickable area on files table links (#12553)
    - Set z-index for sticky diff box lower (#12537)
    - Report error if API merge is not allowed (#12528)
    - LFS support to be stored on minio (#12518)
    - Show 2FA info on Admin Pannel: Users List (#12515)
    - Milestone Issue/Pull List: Add octicons type (#12499)
    - Make dashboard newsfeed list length a configurable item (#12469)
    - Add placeholder text for send testing email button in admin/config (#12452)
    - Add SVG favicon (#12437)
    - In issue comments, put issue participants also in completion list when hitting @ (#12433)
    - Collapse Swagger UI tags by default (#12428)
    - Detect full references to issues and pulls in commit messages (#12399)
    - Allow common redis and leveldb connections (#12385)
    - Don't use legacy method to send Matrix Webhook (#12348)
    - Remove padding/border-radius on image diffs (#12346)
    - Render the git graph on the server (#12333)
    - Fix clone panel in wiki position not always align right (#12326)
    - Rework 'make generate-images' (#12316)
    - Refactor webhook payload convertion (#12310)
    - Move jquery-minicolors to npm/webpack (#12305)
    - Support use nvarchar for all varchar columns when using mssql (#12269)
    - Update Octicons to v10 (#12240)
    - Disable search box autofocus (#12229)
    - Replace code fold icons with octicons (#12222)
    - Ensure syntax highlighting is the same inside diffs (#12205)
    - Auto-init repo on license, .gitignore select (#12202)
    - Default to showing closed Issues/PR list when there are only closed issues/PRs (#12200)
    - Enable cloning via Git Wire Protocol v2 over HTTP (#12170)
    - Direct SVG rendering (#12157)
    - Improve arc-green code colors (#12111)
    - Allow admin to merge pr with protected file changes (#12078)
    - Show description on individual milestone view (#12055)
    - Update the wiki repository remote origin while update the mirror
      repository's Clone From URL (#12053)
    - Server-side syntax highlighting for all code (#12047)
    - Use Fomantic's fluid padded for blame full width (#12023)
    - Use custom SVGs for commit signing lock icon (#12017)
    - Make tabs smaller (#12003)
    - Fix sticky diff stats container (#12002)
    - Move fomantic and jQuery to main webpack bundle (#11997)
    - Use enry language type to detect special languages (#11974)
    - Use only first line of commit when creating referenced comment (#11960)
    - Rename custom/conf/app.ini.sample to custom/conf/app.example.ini
      for better syntax light on editor (#11926)
    - Fix double divider on issue sidebar (#11919)
    - Shorten markdown heading anchors links (#11903)
    - Add org avatar on top of internal repo icon (#11895)
    - Use label to describe repository type (#11891)
    - Make repository size unclickable on repo summary bar (#11887)
    - Rework blame template and styling (#11885)
    - Fix icon alignment for show/hide outdated link on resolved conversation (#11881)
    - Vertically align review icons on repository sidebar (#11880)
    - Better align items using flex within review request box (#11879)
    - Only write to global gitconfig if necessary (#11876)
    - Disable all typographic replacements in markdown renderer (#11871)
    - Improve label edit buttons labels (#11841)
    - Use crispEdges rendering for octicon-internal-repo (#11801)
    - Show update branch item in merge box when it's necessary (#11761)
    - Add compare link to releases (#11752)
    - Allow site admin to disable mirrors (#11740)
    - Export monaco editor on window.codeEditors (#11739)
    - Add configurable Trust Models (#11712)
    - Show full GPG commit status on PR commit history (#11702)
    - Fix align issues and decrease avatar size on PR timeline (#11689)
    - Replace jquery-datetimepicker with native date input (#11684)
    - Change Style of Tags on Comments (#11668)
    - Fix missing styling for shabox on PR commit history (#11625)
    - Apply padding to approval icons on PR list (#11622)
    - Fix message wrapping on PR commit list (#11616)
    - Right-align status icon on pull request commit history (#11594)
    - Add missing padding for multi-commit list on PR view (#11593)
    - Do not show avatar for "{{user}} added X commits" (#11591)
    - Fix styling and padding for commit list on PR view (#11588)
    - Style code review comment for arc-green (#11572)
    - Use default commit message for wiki edits (#11550)
    - Add internal-repo octicon for public repos of private org (#11529)
    - Fix dropzone color on arc-green (#11514)
    - Insert ui divider directly in templates instead of from inside heatmap vue component (#11508)
    - Move tributejs to npm/webpack (#11497)
    - Fix text-transform on wiki revisions page (#11486)
    - Do not show lock icon on repo list for public repos in private org (#11445)
    - Include LFS when calculating repo size (#11060)
    - Add check for LDAP group membership (#10869)
    - When starting new stopwatch stop previous if it is still running (#10533)
    - Add queue for code indexer (#10332)
    - Move all push update operations to a queue (#10133)
    - Cache last commit when pushing for big repository (#10109)
    - Change/remove a branch of an open issue (#9080)
    - Sortable Tables Header By Click (#7980)
  * TESTING
    - Use community codecov drone plugin (#12468)
    - Add more tests for diff highlighting (#12467)
    - Don't put integration test data outside of test folder (#11746)
    - Add debug option to hooks (#11624)
    - Log slow tests (#11487)
  * TRANSLATION
    - Translate two small lables on commit statuse list (#12821)
    - Make issues.force_push_codes message shorter (#11575)
  * BUILD
    - Bump min required golang to 1.13 (#12717)
    - Add 'make watch' (#12636)
    - Extract Swagger CSS to its own file (#12616)
    - Update eslint config (#12609)
    - Avoid unnecessary system-ui expansion (#12522)
    - Make the default PID file compile-time settable (#12485)
    - Add 'watch-backend' (#12330)
    - Detect version of sed in Makefile (#12319)
    - Update gitea-vet to v0.2.1 (#12282)
    - Add logic to build stable and edge builds for gitea snap (#12052)
    - Fix missing CGO_EXTRA_FLAGS build arg for docker (#11782)
    - Alpine 3.12 (#11720)
    - Enable stylelint's shorthand-property-no-redundant-values (#11436)
  * DOCS
    - Change default log configuration (#13088)
    - Add automatic JS license generation (#11810)
    - Remove page size limit comment from swagger (#11806)
    - Narrow down Edge version in browser support docs (#11640)
- Rebase gitea.app.ini.patch.

------------------------------------------------------------------
Mon Nov 16 15:19:59 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.12.6
  * SECURITY
    - Prevent git operations for inactive users (#13527) (#13537)
    - Disallow urlencoded new lines in git protocol paths if there
      is a port (#13521) (#13525)
  * BUGFIXES
    - API should only return Json (#13511) (#13564)
    - Fix before and since query arguments at API (#13559) (#13560)
    - Prevent panic on git blame by limiting lines to 4096 bytes at
      most (#13470) (#13492)
    - Fix link detection in repository description with tailing '_'
      (#13407) (#13408)
    - Remove obsolete change of email on profile page
      (#13341) (#13348)
    - Fix permission check on get Reactions API endpoints
      (#13344) (#13346)
    - Add migrated pulls to pull request task queue
      (#13331) (#13335)
    - API deny wrong pull creation options (#13308) (#13327)
    - Fix initial commit page & binary munching problem
      (#13249) (#13259)
    - Fix diff parsing (#13157) (#13136) (#13139)
    - Return error 404 not 500 from API if team does not exist
      (#13118) (#13119)
    - Prohibit automatic downgrades (#13108) (#13111)
    - Fix GitLab Migration Option AuthToken (#13101)
    - GitLab Label Color Normalizer (#12793) (#13100)
    - Log the underlying panic in runMigrateTask (#13096) (#13098)
    - Fix attachments list in edit comment (#13036) (#13097)
    - Fix deadlock when deleting team user (#13093)
    - Fix error create comment on outdated file (#13041) (#13042)
    - Fix repository create/delete event webhooks (#13008) (#13027)
    - Fix internal server error on README in submodule
      (#13006) (#13016)

-------------------------------------------------------------------
Thu Oct  1 21:16:12 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.12.5
  * BUGFIXES
    - Allow U2F with default settings for gitea in subpath
      (#12990) (#13001)
    - Prevent empty div when editing comment (#12404) (#12991)
    - On mirror update also update address in DB (#12964) (#12967)
    - Allow extended config on cron settings (#12939) (#12943)
    - Open transaction when adding Avatar email-hash pairs to the
      DB (#12577) (#12940)
    - Fix internal server error from ListUserOrgs API
      (#12910) (#12915)
    - Update only the repository columns that need updating
      (#12900) (#12912)
    - Fix panic when adding long comment (#12892) (#12894)
    - Add size limit for content of comment on action ui
      (#12881) (#12890)
    - Convert User expose ID each time (#12855) (#12883)
    - Support slashes in release tags (#12864) (#12882)
    - Add missing information to CreateRepo API endpoint
      (#12848) (#12867)
    - On Migration respect old DefaultBranch (#12843) (#12858)
    - Fix notifications page links (#12838) (#12853)
    - Stop cloning unnecessarily on PR update (#12839) (#12852)
    - Escape more things that are passed through str2html
      (#12622) (#12850)
    - Remove double escape on labels addition in comments
      (#12809) (#12810)
    - Fix "only mail on mention" bug (#12775) (#12789)
    - Fix yet another bug with diff file names (#12771) (#12776)
    - RepoInit Respect AlternateDefaultBranch (#12746) (#12751)
    - Fix Avatar Resize (resize algo NearestNeighbor -> Bilinear)
      (#12745) (#12750)
  * ENHANCEMENTS
    - gitea dump: include version & Check InstallLock
    (#12760) (#12762)

-------------------------------------------------------------------
Fri Sep 25 10:10:53 UTC 2020 - ecsos <ecsos@opensuse.org>

- Fix build error in Tumbleweed.
  - Remove macros %{goprep} code.gitea.io/gitea, %{goinstall} and
    %{gosrc}, because not need and it is a bug boo#1163689 in macro
    %{gosrc} from package golang-packaging since version 15.0.12.

-------------------------------------------------------------------
Fri Sep  4 06:55:56 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.12.4
  * SECURITY
    - Escape provider name in oauth2 provider redirect
      (#12648) (#12650)
    - Escape Email on password reset page (#12610) (#12612)
    - When reading expired sessions - expire them
      (#12686) (#12690)
  * ENHANCEMENTS
    - StaticRootPath configurable at compile time (#12371) (#12652)
  * BUGFIXES
    - Fix to show an issue that is related to a deleted issue
      (#12651) (#12692)
    - Expire time acknowledged for cache (#12605) (#12611)
    - Fix diff path unquoting (#12554) (#12575)
    - Improve HTML escaping helper (#12562)
    - models: break out of loop (#12386) (#12561)
    - Default empty merger list to those with write permissions
      (#12535) (#12560)
    - Skip SSPI authentication attempts for /api/internal
      (#12556) (#12559)
    - Prevent NPE on commenting on lines with invalidated comments
      (#12549) (#12550)
    - Remove hardcoded ES indexername (#12521) (#12526)
    - Fix bug preventing transfer to private organization
      (#12497) (#12501)
    - Keys should not verify revoked email addresses
      (#12486) (#12495)
    - Do not add prefix on http/https submodule links
      (#12477) (#12479)
    - Fix ignored login on compare (#12476) (#12478)
    - Fix incorrect error logging in Stats indexer and OAuth2
      (#12387) (#12422)
    - Upgrade google/go-github to v32.1.0 (#12361) (#12390)
    - Render emoji's of Commit message on feed-page (#12373)
    - Fix handling of diff on unrelated branches when Git 2.28 used
      (#12370)

-------------------------------------------------------------------
Wed Jul 29 10:45:16 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.12.3
  - Don't change creation date when updating Release (#12343)
    (#12351)
  - Show 404 page when release not found (#12328) (#12332)
  - Fix emoji detection in certain cases (#12320) (#12327)
  - Reduce emoji size (#12317) (#12327)
  - Fix double-indirection bug in logging IDs (#12294) (#12308)
  - Link to pull list page on sidebar when view pr (#12256)
    (#12263)
  - Extend Notifications API and return pinned notifications
    by default (#12164) (#12232)

-------------------------------------------------------------------
Tue Jul 14 09:13:18 UTC 2020 - Eric Schirra <ecsos@opensuse.org>

- Cleanup npx section in spec.
- Add gitea-apache-vhost.conf  example in doc.
- Correct README.SUSE and rename gitea.conf in gitea-apache.conf
  in doc.

-------------------------------------------------------------------
Mon Jul 13 08:38:05 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.12.2
  * BUGFIXES
    - When deleting repository decrese user repositry count in
      cache (#11954) (#12188)
    - Gitea commits API again returns commit summaries, not full
      messages (#12186) (#12187)
    - Properly set HEAD when a repo is created with a non-master
      default branch (#12135) (#12182)
    - Ensure Subkeys are verified (#12155) (#12168)
    - Fix failing to cache last commit with key being to long
      (#12151) (#12161)
    - Multiple small admin dashboard fixes (#12153) (#12156)
    - Remove spurious logging (#12139) (#12148)
    - Fix repository setup instructions when default branch is not
      master (#12122) (#12147)
    - Move EventSource to SharedWorker (#12095) (#12130)
    - Fix ui bug in wiki commit page (#12089) (#12125)
    - Fix gitgraph branch continues after merge (#12044) (#12105)
    - Set the base url when migrating from Gitlab using access token
      or username without password (#11852) (#12104)
    - Ensure BlameReaders close at end of request (#12102) (#12103)
    - Fix comments webhook panic backport (#12058)
  * ENHANCEMENTS
    - Disable dropzone's timeout (#12024) (#12032)
- Changes from 1.12.1
  * BUGFIXES
    - Handle multiple merges in gitgraph.js (#11996) (#12000)
    - Add serviceworker.js to KnownPublicEntries (#11992) (#11994)
    - For language detection do not try to analyze big files by
      content (#11971) (#11975)
  * ENHANCEMENTS
    - Fix scrollable header on dropdowns (#11893) (#11965)
- Changes from 1.12.0
  Too many changes.
  Please see: https://github.com/go-gitea/gitea/releases/tag/v1.12.0

-------------------------------------------------------------------
Mon Jun 22 08:54:38 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.11.8
  * BUGFIXES
    - Really fix webpack_public_path for 1.11 (#11961)

-------------------------------------------------------------------
Thu Jun 18 17:46:19 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.11.7
  * BUGFIXES
    - Use ID or Where to instead directly use Get when load object
      from database (#11925) (#11935)
    - Fix __webpack_public_path__ for 1.11 (#11907)
    - Fix verification of subkeys of default gpg key
      (#11713) (#11902)
    - Remove unnecessary parentheses in wiki/view template
      (#11781)
    - Doctor fix xorm.Count nil on sqlite error (#11741)

-------------------------------------------------------------------
Sun May 31 08:20:23 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.11.6
  * SECURITY
    - Fix missing authorization check on pull for public repos of
      private/limited org (#11656) (#11683)
    - Use session for retrieving org teams (#11438) (#11439)
  * BUGFIXES
    - Return json on 500 error from API (#11574) (#11660)
    - Fix wrong milestone in webhook message (#11596) (#11612)
    - Prevent (caught) panic on login (#11590) (#11598)
    - Fix commit page js error (#11527)
    - Use media links for img in post-process (#10515) (#11504)
    - Ensure public repositories in private organizations are
      visible and fix admin organizations list (#11465) (#11475)
    - Set correct Content-Type value for Gogs/Gitea webhooks
      (#9504) (#10456) (#11461)
    - Allow all members of private orgs to see public repos
      (#11442) (#11459)
    - Whenever the ctx.Session is updated, release it to save it
      before sending the redirect (#11456) (#11457)
    - Forcibly clean and destroy the session on logout
      (#11447) (#11451)
    - Fix /api/v1/orgs/* endpoints by changing parameter to :org
      from :orgname (#11381)
    - Add tracked time fix to doctor (part of #11111) (#11138)
    - Fix webpack chunk loading with STATIC_URL_PREFIX
      (#11526) (#11544)
    - Remove unnecessary parentheses in wiki/revision.tmpl to allow
      1.11 to build on go1.14 (#11481)

-------------------------------------------------------------------
Sun May 10 08:36:50 UTC 2020 - ecsos <ecsos@opensuse.org>

- Update to 1.11.5
  * BUGFIXES
    - Prevent timer leaks in Workerpool and others
      (#11333) (#11340)
    - Fix tracked time issues (#11349) (#11354)
    - Add NotifySyncPushCommits to indexer notifier
      (#11309) (#11338)
    - Allow X in addition to x in tasks (#10979) (#11335)
    - When delete tracked time through the API return 404 not 500
      (#11319) (#11326)
    - Prevent duplicate records in organizations list when creating
      a repository (#11303) (#11325)
    - Manage port in submodule refurl (#11305) (#11323)
    - api.Context.NotFound(...) should tolerate nil
      (#11288) (#11306)
    - Show pull request selection even when unrelated branches
      (#11239) (#11283)
    - Repo: milestone: make /milestone/:id endpoint accessible
      (#11264) (#11282)
    - Fix GetContents(): Dont't ignore Executables
      (#11192) (#11209)
    - Fix submodule paths when AppSubUrl is not root
      (#11098) (#11176)
    - Prevent clones and pushes to disabled wiki
      (#11131) (#11134)
    - Remove errant third closing curly-bracket from account.tmpl
      and send account ID in account.tmpl (#11130)
    - On Repo Deletion: Delete related TrackedTimes too
      (#11110) (#11125)
    - Refresh codemirror on show pull comment tab
      (#11100) (#11122)
    - Fix merge dialog on protected branch with missing required
      statuses (#11074) (#11084)
    - Load pr Issue Poster on API too (#11033) (#11039)
    - Fix release counter on API repository info (#10968) (#10996)
    - Generate Diff and Patch direct from Pull head
      (#10936) (#10938)
    - Fix rebase conflict detection in git 2.26 (#10929) (#10930)
  * ENHANCEMENT
    - Fix 404 and 500 image size in small size screen
      (#11043) (#11049)
    - Multiple Gitea Doctor improvements (#10943) (#10990) (#10064)
      (#9095) (#10991)

-------------------------------------------------------------------
Wed Apr  1 18:44:10 UTC 2020 - ecsos@opensuse.org

- Update to 1.11.4
  * BUGFIXES
    - Only update merge_base if not already merged (#10909)
    - Fix milestones too many SQL variables bug (#10880) (#10904)
    - Protect against NPEs in notifications list (#10879) (#10883)
    - Convert plumbing.ErrObjectNotFound to git.ErrNotExist in
      getCommit (#10862) (#10868)
    - Convert plumbing.ErrReferenceNotFound to git.ErrNotExist in
      GetRefCommitID (#10676) (#10797)
    - Account for empty lines in receive-hook message
      (#10773) (#10784)
    - Fix bug on branch API (#10767) (#10775)
    - Migrate to go-git/go-git v5.0.0 (#10735) (#10753)
    - Fix hiding of fields in authorization source page
      (#10734) (#10752)
    - Prevent default for linkAction (#10742) (#10743)

-------------------------------------------------------------------
Wed Mar 11 09:15:30 UTC 2020 - ecsos@opensuse.org

- Update to 1.11.3
  * BUGFIXES
    - Prevent panic in stopwatch (#10670) (#10673)
    - Fix bug on pull view when required status check no ci result
      (#10648) (#10651)
    - Build explicitly with Go 1.13 (#10684)

-------------------------------------------------------------------
Sat Mar  7 11:38:29 UTC 2020 - ecsos@opensuse.org

- Update to 1.11.2
  * BREAKING
    - Various fixes in login sources (#10428) (#10429)
  * SECURITY
    - Ensure only own addresses are updated (#10397) (#10399)
    - Logout POST action (#10582) (#10585)
    - Org action fixes and form cleanup (#10512) (#10514)
    - Change action GETs to POST (#10462) (#10464)
    - Fix admin notices (#10480) (#10483)
    - Change admin dashboard to POST (#10465) (#10466)
    - Update markbates/goth (#10444) (#10445)
    - Update crypto vendors (#10385) (#10398)
  * BUGFIXES
    - Allow users with write permissions to modify issue
      descriptions and comments. (#10623) (#10626)
    - Handle deleted base branch in PR (#10618) (#10619)
    - Delete dependencies when deleting a repository
      (#10608) (#10616)
    - Ensure executable bit is kept on the web editor
      (#10607) (#10614)
    - Update mergebase in pr checker (#10586) (#10605)
    - Fix release attachments being deleted while upgrading
      (#10572) (#10573)
    - Fix redirection path if Slack webhook channel is invalid
      (#10566)
    - Fix head.tmpl og:image picture location (#10531) (#10556)
    - Fix 404 after activating secondary email (#10547) (#10553)
    - Show Signer in commit lists and add basic trust
      (#10425 & #10511) (#10524)
    - Fix potential bugs (#10513) (#10518)
    - Use [:space:] instead of \s (#10508) (#10509)
    - Avoid mailing users that have explicitly unwatched an issue
      (#10475) (#10500)
    - Handle push rejection message in Merge & Web Editor
      (#10373) (#10497)
    - Fix SQLite concurrency problems by using BEGIN IMMEDIATE
      (#10368) (#10493)
    - Fix double PR notification from API (#10482) (#10486)
    - Show the username as a fallback on feeds if full name is
      blank (#10461)
    - Trigger webhooks on issue label-change via API too
      (#10421) (#10439)
    - Fix git reference type in webhooks (#10427) (#10432)
    - Prevent panic on merge to PR (#10403) (#10408)
    - Fix wrong num closed issues on repository when close issue
      via commit… (#10364) (#10380)
    - Reading pull attachments should depend on read
      UnitTypePullRequests (#10346) (#10354)
    - Set max-width on review-box comment box (#10348) (#10353)
    - Prevent nil pointer in GetPullRequestCommitStatusState
      (#10342) (#10344)
    - Fix protected branch status check settings (#10341) (#10343)
    - Truncate long commit message header (#10301) (#10319)
    - Set the initial commit status to Success otherwise it will
      always be Pending (#10317) (#10318)
    - Don't manually replace whitespace during render
      (#10291) (#10315)
  * ENHANCEMENTS
    - Admin page for managing user e-mail activation
      (#10557) (#10579)

-------------------------------------------------------------------
Mon Feb 17 17:49:10 UTC 2020 - ecsos@opensuse.org

- Fix generation of arc-green theme.

-------------------------------------------------------------------
Mon Feb 17 07:26:49 UTC 2020 - ecsos@opensuse.org

- Update to 1.11.1
  * BUGFIXES
    - Repo name added to automatically generated commit message
      when merging (#9997) (#10285)
    - Fix Workerpool deadlock (#10283) (#10284)
    - Divide GetIssueStats query in smaller chunks
      (#10176) (#10282)
    - Fix reply on code review (#10257)
    - Stop hanging issue indexer initialisation from preventing
      shutdown (#10243) (#10249)
    - Fix filter label emoji width (#10241) (#10244)
    - Fix issue sidebar menus having an infinite height
      (#10239) (#10240)
    - Fix commit between two commits calculation if there is only
      last commit (#10225) (#10226)
    - Only check for conflicts/merging if the PR has not been
       merged in the interim (#10132) (#10206)
    - Blacklist manifest.json & milestones user (#10292) (#10293)

-------------------------------------------------------------------
Sat Feb 15 13:36:15 UTC 2020 - ecsos@opensuse.org

- Fix position-independent-executable-suggested.

-------------------------------------------------------------------
Thu Feb 13 09:40:43 UTC 2020 - ecsos@opensuse.org

- Change AppWorkPath to /var/lib/gitea.
- Set default CustomPath and AppWorkPath in gitea binary.

-------------------------------------------------------------------
Mon Feb 10 13:41:52 UTC 2020 - ecsos@opensuse.org

- Update to 1.11.0
  There are to many changes.
  Please look in CHANGELOG.md or at:
  https://github.com/go-gitea/gitea/releases/tag/v1.11.0
- New version needs webpack and nodejs modules to run.
  Create a script gitea-fetch_source_and_node_modules.sh to
  generate needed files.
- Run spec-cleaner.

-------------------------------------------------------------------
Sat Jan 18 09:43:29 UTC 2020 - ecsos@opensuse.org

- Update to 1.10.3
  * SECURITY
    - Hide credentials when submitting migration (#9102) (#9704)
    - Never allow an empty password to validate (#9682) (#9684)
    - Prevent redirect to Host (#9678) (#9680)
    - Hide public repos owned by private orgs (#9609) (#9616)
  * BUGFIXES
    - Allow assignee on Pull Creation when Issue Unit is
      deactivated (#9836) (#9838)
    - Fix download file wrong content-type (#9825) (#9835)
    - Fix wrong identify poster on a migrated pull request when
      submit review (#9827) (#9831)
    - Fix dump non-exist log directory (#9818) (#9820)
    - Fix compare (#9808) (#9815)
    - Fix missing msteam webhook on organization (#9781) (#9795)
    - Fix add team on collaborator page when same name as
      organization (#9783)
    - Fix cache problem on dashboard (#9358) (#9703)
    - Send tag create and push webhook when release created on UI
      (#8671) (#9702)
    - Branches not at ref commit ID should not be listed as Merged
      (#9614) (#9639)

-------------------------------------------------------------------
Thu Jan  2 14:55:41 UTC 2020 - ecsos@opensuse.org

- Update to 1.10.2
  * BUGFIXES
    - Allow only specific Columns to be updated on Issue via API
      (#9539) (#9580)
    - Add ErrReactionAlreadyExist error (#9550) (#9564)
    - Fix bug when migrate from API (#8631) (#9563)
    - Use default avatar for ghost user (#9536) (#9537)
    - Fix repository issues pagination bug when there are more than
      one label filter (#9512) (#9528)
    - Fix deleted branch not removed when push the branch again
      (#9516) (#9524)
    - Fix missing repository status when migrating repository via
      API (#9511)
    - Trigger webhook when deleting a branch after merging a PR
      (#9510)
    - Fix paging on /repos/{owner}/{repo}/git/trees/{sha} API
      endpoint (#9482)
    - Fix NewCommitStatus (#9434) (#9435)
    - Use OriginalURL instead of CloneAddr in migration logging
      (#9418) (#9420)
    - Fix Slack webhook payload title generation to work with
      Mattermost (#9404)
    - DefaultBranch needs to be prefixed by BranchPrefix
      (#9356) (#9359)
    - Fix issue indexer not triggered when migrating a repository
      (#9333)
    - Fix bug that release attachment files not deleted when
      deleting repository (#9322) (#9329)
    - Fix migration releases (#9319) (#9326) (#9328)
    - Fix File Edit: Author/Committer interchanged (#9297) (#9300)

-------------------------------------------------------------------
Thu Dec  5 19:23:01 UTC 2019 - ecsos@opensuse.org

- Update to 1.10.1
  * BUGFIXES
  - Fix max length check and limit in multiple repo forms
    (#9148) (#9204)
  - Properly fix displaying virtual session provider in admin panel
    (#9137) (#9203)
  - Upgrade levelqueue to 0.1.0 (#9192) (#9199)
  - Fix panic when diff (#9187) (#9193)
  - Smtp logger configuration sendTos should be an array
    (#9154) (#9157)
  - Always Show Password Field on Link Account Sign-in Page (#9150)
  - Create PR on Current Repository by Default (#8670) (#9141)
  - Fix race on indexer (#9136) (#9139)
  - Fix reCAPTCHA URL (#9119)
  - Hide migrated credentials (#9098)
  - Update golang.org/x/crypto vendor to use acme v2
    (#9056) (#9085)
  - Fix password checks on admin create/edit user (#9076) (#9081)
  - Fix add search as a reserved username (#9063) (#9065)
  - Fix permission checks for close/reopen from commit
    (#8875) (#9033)
  - Ensure Written is set in GZIP ProxyResponseWriter
    (#9018) (#9025)
  - Fix broken link to branch from issue list (#9003) (#9021)
  - Fix wrong system notice when repository is empty (#9020)
  - Shadow password correctly for session config (#8984) (#9002)

-------------------------------------------------------------------
Thu Nov 14 11:48:52 UTC 2019 - ecsos@opensuse.org

- Update to 1.10.0
  Changelog is to long. See instead online:
  https://github.com/go-gitea/gitea/blob/v1.10.0/CHANGELOG.md

- Changes from 1.9.6
  * BUGFIXES
    - Allow to merge if file path contains " or \ (#8629) (#8772)
    - Fix 500 when edit hook (#8782) (#8790)
    - Fix issue with user.fullname (#8904)
    - Update Github Migration Test (#8897) (#8946)
    - Add Close() method to gogitRepository (#8901) (#8958)

- Rebase gitea.app.ini.patch.

-------------------------------------------------------------------
Thu Oct 31 09:15:38 UTC 2019 - ecsos@opensuse.org

- Update to 1.9.5
  * BREAKING
    - Hide some user information via API if user doesn't have
      enough permission (#8655) (#8658)
  * BUGFIXES
    - Fix milestone close timestamp (#8728) (#8731)
    - Fix deadline on update issue or PR via API (#8699)
    - Fix 'New Issue Missing Milestone Comment' (#8678) (#8682)
    - Fix 500 when getting user as unauthenticated user (#8653)
      (#8662)
    - Use AppSubUrl for more redirections (#8647) (#8652)
    - Add SubURL to redirect path (#8632) (#8634) (#8640)
    - Fix #8582 by handling empty repos (#8587) (#8593)
    - Fix bug on pull requests when transfer head repository
      (#8571)
    - Add missed close in ServeBlobLFS (#8527) (#8543)
    - Return false if provided branch name is empty for
      IsBranchExist (#8485) (#8492)
    - Create .ssh dir as necessary (#8369) (#8486) (#8489)
    - Restore functionality for early gits (#7775) (#8476)
    - Add check for empty set when dropping indexes during
      migration (#8475)
    - Ensure Request Body Readers are closed in LFS server (#8454)
      (#8459)
    - Ensure that LFS files are relative to the LFS content path
      (#8455) (#8458)
  * SECURITY
    - Ignore mentions for users with no access (#8395) (#8484)
  * TESTING
    - Update heatmap fixtures to restore tests (#8615) (#8617)

-------------------------------------------------------------------
Wed Oct  9 05:34:49 UTC 2019 - ecsos@opensuse.org

- Update to 1.9.4
  * BUGFIXES
    - Highlight issue references (#8101) (#8404)
    - Fix bug when migrating a private repository #7917 (#8403)
    - Change general form binding to gogs form (#8334) (#8402)
    - Fix editor commit to new branch if PR disabled
      (#8375) (#8401)
    - Fix milestone num_issues (#8221) (#8400)
    - Allow users with explicit read access to give approvals
      (#8398)
    - Fix commit status in PR #8316 and PR #8321 (#8339)
    - Fix API for edit and delete release attachment (#8290)
    - Fix assets on release webhook (#8283)
    - Fix release API URL generation (#8239)
    - Allow registration when button is hidden (#8238)
    - MS Teams webhook misses commit messages (backport v1.9)
      (#8225)
    - Fix data race (#8206)
    - Fix pull merge 500 error caused by git-fetch breaking
      behaviors (#8194)
    - Fix the SSH config specification in the authorized_keys
       template (#8193)
    - Fix reading git notes from nested trees (#8189)
    - Fix team user api (#8172) (#8188)
    - Add reviewers as participants (#8124)
  * BUILD
    - Use vendored go-swagger (#8087) (#8165)
    - Fix version-validation for GO 1.13 (go-macaron/cors) (#8389)
  * MISC
    - Make show private icon when repo avatar set (#8144) (#8175)

-------------------------------------------------------------------
Sun Sep  8 08:24:05 UTC 2019 - ecsos@opensuse.org

- Update to 1.9.3
  * BUGFIXES
    - Fix go get from a private repository with Go 1.13 (#8100)
    - Strict name matching for Repository.GetTagID() (#8082)
    - Avoid ambiguity of branch/directory names for the
      git-diff-tree command (#8070)
    - Add change title notification for issues (#8064)
    - Run CORS handler first for /api routes (#7967) (#8053)
    - Evaluate emojis in commit messages in list view (#8044)
    - Fix failed to synchronize tags to releases for repository
      (#7990) (#7994)
    - Fix adding default Telegram webhook (#7972) (#7992)
    - Abort synchronization from LDAP source if there is some error
      (#7965)
    - Fix deformed emoji in commit message (#8071)
  * ENHANCEMENT
    - Keep blame view buttons sequence consistent with normal view
      when viewing a file (#8007) (#8009)

-------------------------------------------------------------------
Sat Aug 24 18:53:05 UTC 2019 - ecsos@opensuse.org

- Update to 1.9.2
  * BUGFIXES
    - Fix wrong sender when send slack webhook (#7918) (#7924)
    - Upload support text/plain; charset=utf8 (#7899)
    - Lfs/lock: round locked_at timestamp to second (#7872) (#7875)
    - Fix non existent milestone with 500 error (#7867) (#7873)
  * SECURITY
    - Fix No PGP signature on 1.9.1 tag (#7874)
    - Release built with go 1.12.9 to fix security fixes in golang
      std lib, ref: https://groups.google.com/forum/#!msg/golang-announce/oeMaeUnkvVE/a49yvTLqAAAJ
  * ENHANCEMENT
    - Fix pull creation with empty changes (#7920) (#7926)
  * BUILD
    - Drone/docker: prepare multi-arch release +
      provide arm64 image (#7571) (#7884)

-------------------------------------------------------------------
Tue Jun 18 05:36:13 UTC 2019 - ecsos@opensuse.org

- Update to version 1.8.3
  * BUGFIXES
    - Always set userID on LFS authentication
      (#7224) (Part of #6993)
    - Fix LFS Locks over SSH (#6999) (#7223)
    - Fix duplicated file on pull request conflicted files
      (#7211) (#7214)
    - Detect noreply email address as user (#7133) (#7195)
    - Don't get milestone from DB if ID is zero (#7169) (#7174)
    - Allow archived repos to be (un)starred and (un)watched
      (#7163) (#7168)
    - Fix GCArgs load from ini (#7156) (#7157)

-------------------------------------------------------------------
Thu May 30 07:36:18 UTC 2019 - ecsos@opensuse.org

- update to version 1.8.2
  * BUGFIXES
    - Fix possbile mysql invalid connnection error (#7051) (#7071)
    - Handle invalid administrator username on install page
      (#7060) (#7063)
    - Disable arm7 builds (#7037) (#7042)
    - Fix default for allowing new organization creation for new
      users (#7017) (#7034)
    - SearchRepositoryByName improvements and unification
      (#6897) (#7002)
    - Fix u2f registrationlist ToRegistrations() method
      (#6980) (#6982)
    - Allow collaborators to view repo owned by private org
      (#6965) (#6968)
    - Use AppURL for Oauth user link (#6894) (#6925)
    - Escape the commit message on issues update (#6901) (#6902)
    - Fix regression for API users search (#6882) (#6885)
    - Handle early git version's lack of get-url (#7065) (#7076)
    - Fix wrong init dependency on markup extensions
      (#7038) (#7074)

-------------------------------------------------------------------
Sun May 12 08:05:14 UTC 2019 - ecsos@opensuse.org

- update to version 1.8.1
  * BUGFIXES
    - Fix 404 when sending pull requests in some situations
      (#6871) (#6873)
    - Enforce osusergo build tag for releases (#6862) (#6869)
    - Don't post process commit summary in templates
      (#6842) (#6868)
    - Fix 500 when reviewer is deleted (#6856) (#6860)
    - Fix v78 migration for MSSQL (#6823) (#6854)
    - Added tags pull step to drone config to show correct version
      hashes (#6836) (#6839)
    - Fix double-generation of scratch token (#6833) (#6835)
    - When mirroring we should set the remote to mirror
      (#6824) (#6834)
    - Show scrollbar only when needed (#6802) (#6803)
    - Service worker js is missing a comma (#6788) (#6795)
    - Set user search base field optional in LDAP (simple auth)
      edit page (#6779) (#6789)
    - Fix team edit API panic (#6780) (#6785)
    - Minor CSS cleanup for the navbar (#6553) (#6781)
    - Stricter domain name pattern in email regex (#6739) (#6768)
    - Detect and restore encoding and BOM in content
      (#6727) (#6765)
    - Fix org visibility bug when git cloning (#6743) (#6762)
    - OAuth2 token can be used in basic auth (#6747) (#6761)
    - Fix missing return (#6751) (#6756)
    - Fix sorting repos on org home page with non-admin login
      (#6741) (#6746)
    - Drop is_bare IDX only when it exists for MySQL and MariaDB
      (#6736) (#6744)
    - Fix team members API (#6714) (#6729)
    - Load issue attributes when editing an issue with API
      (#6723) (#6725)
    - Fix config ui error about cache ttl (#6861) (#6865)

-------------------------------------------------------------------
Thu Apr 25 08:31:31 UTC 2019 - ecsos@opensuse.org

- update to version 1.8.0
  * SECURITY
    - Prevent remote code execution vulnerability with mirror repo
      URL settings (#6593) (#6594)
    - Resolve 2FA bypass on API (#6676) (#6674)
    - Prevent the creation of empty sessions for non-logged in
      users (#6690) (#6677)
  * BREAKING
    - Add "ghost" and "notifications" to list of reserved user
      names. (#6208)
    - Change sqlite DB path default to data directory (#6198)
    - Adds MustChangePassword to user create/edit API (#6193)
    - Disable redirect for i18n (#5910)
    - Releases API paging (#5831)
    - Allow Macaron to be set to log through to gitea.log (#5667)
    - Don't close issues via commits on non-default branch (#5622)
  * FEATURE
    - Add regenerate secret feature for oauth2 (#6291)
    - Expose issue stopwatch toggling via API (#5970)
    - Add other session providers (#5963)
    - Pull request conflict files detection (#5951)
    - Integrate OAuth2 Provider (#5378)
    - Implement "conversation lock" for issue comments (#5073)
    - Feature: Archive repos (#5009)
    - Discord Oauth2 support (#4476)
    - Allow to set organization visibility
      (public, internal, private) (#1763)
    - Added URL mapping for Release attachments like on github.com
      (#1707)
  * ENHANCEMENT
    - Add support for client basic auth for exchanging access
      tokens (#6293)
    - Add ability to sort issues by due date (#6206) (#6244)
    - Style tweaks to issue selection (#6196)
    - Increase Username and Orgname MaxSize 35 -> 40 (#6178)
    - Coverage profile with multiple packages (#6167)
    - Split setting.go to multiple files (#6154)
    - Allow labels to contain emoji (#6063)
    - Disable git fsck for mirrored repos by default (#6018)
    - Add default time out for git operations (#6015)
    - Split setting.go as multiple files (#6014)
    - Make dashboard navbar and footer full-width (#6013)
    - Add lang specific font stacks for CJK (#6007)
    - Fix header menu misalignment (#6002)
    - Enhance closed PR and Issue status in the list (#6000)
    - Make navbar full width (#5998)
    - Add option to close issues via commit on a non master branch
      (#5992)
    - Support n as a line highlight prefix (#5987)
    - Search for org repos (#3031) (#5986)
    - Minor UI tweaks (#5980)
    - Use native golang SSH library but ssh-keygen when enable
      built-in SSH server to remove dependent on that command lines
      (#5976)
    - Dashboard tweaks (#5974)
    - Fixes for repo topic editor (#5971)
    - Display the branch name in the commit view (#5950)
    - handle milestone events for issues and PR (#5947)
    - Add label names as filter in issue search api (#5946)
    - Repo header tweaks (#5945)
    - Better support for long repo names (#5932)
    - Fix wrapping long code lines (#5927)
    - Change GPG Validation colors and remove inline CSS
      (#5404) (#5896)
    - Fix "pulls.blocked_by_approvals" text (#5879)
    - Rename reject to 'request changes' (#5858)
    - Move input fields to add members to a team and repos
      to a team (#5853)
    - Config option to disable automatic repo watching (#5852)
    - New Issue ?body= query (#5851)
    - Add API to list tags (#5850)
    - Pagination for git tree API (#5838)
    - Add InternalTokenURI to load InternalToken from an external
      file (#5812)
    - Allow markdown files to read from the LFS (#5787)
    - Add the ability to use multiple labels as filters (#5786)
    - Adjust log settings when a user is not found. (#5771)
    - Log IP of failed ssh connection (#5766)
    - Moved defaults in defaults.go to setting.go (#5764)
    - Make DB connect more robust (#5738)
    - Add Default Pull Request Title (#5735)
    - Refactor repo.isBare to repo.isEmpty #5629 (#5714)
    - Add flag to skip repository dumping (#5695)
    - Prioritize "readme.md" (#5691)
    - Improve "Fork button" for guests by showing a pop up asking
      them to log in before forking (#5690)
    - Allow for user specific themes (#5668)
    - Display branch name in delete branch confirmation modal.
      (#5654)
    - New API routes added (#5594)
    - Refactor notification for indexer (#5111)
    - Refactor mail notification (#5110)
    - Show email if the authenticated user owns the profile page
      being requested for (#4981)
    - Optimize pulls merging (#4921)
    - Sort Repositories widget by most recently updated
      (#3963) (#4599)
    - Allow markdown table to scroll (#4401)
    - Automatically clear stopwatch on merging a PR (#4327)
    - Add the Owner Name to differentiate when merging (#3807)
    - Add title attributes to all items in the repo list viewer
      (#6258) (#6650)
  * BUGFIXES
    - Fix dropdown icon padding (#6651) (#6654)
    - Fix wrong GPG expire date (#6643) (#6644)
    - Fix forking an empty repository (#6637) (#6653)
    - Remove call to EscapePound .Link as it is already escaped
      (#6656) (#6666)
    - Properly escape on the redirect from the web editor
      (#6657) (#6667)
    - Allow resend of confirmation email when logged in
      (#6482) (#6486)
    - Fix mail notification when close/reopen issue (#6581) (#6588)
    - Change API commit summary to full message (#6591) (#6592)
    - Add option to disable refresh token invalidation
      (#6584) (#6587)
    - Fix bug user search API pagesize didn't obey ExplorePagingNum
      (#6579) (#6586)
    - Fix new repo alignment (#6583) (#6585)
    - Prevent server 500 on compare branches with no common history
      (#6555) (#6558)
    - Properly escape release attachment URL (#6512) (#6523)
    - Hacky fix for alignment of the create-organization dialog
      (#6455) (#6462)
    - Disable benchmarking during tag events on DroneIO
     (#6365) (#6366)
    - Make sure units of a team are returned (#6379) (#6381)
    - Don't Unescape redirect_to cookie value (#6399) (#6401)
    - Fix dump table name error and add some test for dump database
      (#6394) (#6402)
    - Fix migration v82 to ignore unsynced tags between database
      and git data; Add missing is_archived column on repository
      table (#6387) (#6403)
    - Display correct error for invalid mirror interval
      (#6414) (#6429)
    - Clean up ref name rules (#6437) (#6439)
    - Fix Hook & HookList in Swagger (#6432) (#6440)
    - Change order that PostProcess Processors are run
      (#6445) (#6447)
    - Clean up various use of escape/unescape functions for URL
      generation (#6334)
    - Return 409 when creating repo if it already exists. (#6330)
    - Add same changes from issues page to milestone->issues page
      (#6328)
    - Fix ParsePatch function to work with quoted diff --git
      strings (#6323)
    - Fix reported issue in repo description (#6306)
    - Use url.PathEscape to escape the branchname (#6304)
    - Add robots.txt as reserved username (#6272)
    - Replace linkRegex with xurls library (#6261)
    - Remove visitLinksForShortLinks features (#6257)
    - Add unit types to repo action URL to correctly show 404 when
      archived (#6247)
    - Check organization visibility before everything else
      (#6234) (#6235)
    - Prevent double-close of issues (#6233)
    - Override xorm type mapping for U2F counter (#6232)
    - Add isAdmin to user API response (#6231)
    - Update git vendor to fix wrong release commit id and add
      migrations (#6224)
    - Fix fork button (#6223)
    - Fix renames over redirects (#6216)
    - Fix display dashboard even if require to change password
      (#6214)
    - Create a repo redirect when transferring ownership (#6210)
      (#6211)
    - Fix issue update race condition (#6194)
    - Fix bug when migrate repository 500 when repo is existed
      (#6188)
    - Fix scrollbar always present on page body (#6177)
    - Fix bug when set indexer as db and add tests (#6173)
    - Modify linkRegex to require http|https (#6171)
    - Fix bug user could change private repository to public when
      force private enabled. (#6156)
    - Fix admin list user/org API (#6143)
    - Make repo creation for API similar to UI (#6142)
    - Make document body a flexbox (#6139)
    - Refactor issue indexer, add some testing and fix a bug
      (#6131)
    - Load Issue attributes for API call (#6122)
    - Fix bug when update owner team then visit team's repo
      return 404 (#6119)
    - Fix heatmap and repository menu display in
      Internet Explorer 9+ (#6117)
    - Show private organization for admin, fix #6111 (#6112)
    - Fix prohibit login check on authorization (#6106)
    - Move to ldap.v3 to fix #5928 (#6105)
    - Remove use MakeAssigneeList in webhooks to fix deadlock
      (#6102)
    - Allow display of LFS stored Readme.md on directory page
      (#6073) (#6099)
    - Make sure labels are actually returned (#6053)
    - Fix panic: template: repo/issue/list:210: unexpected "=" in
      operand (#6041)
    - After deleting a repo on admin panel, UI should remember the
      last sort type (#6033)
    - Default create repository on organisation on its dashboard
      (#6026)
    - Swagger: Remove spaces in MergePullRequestOption enum (#6016)
    - Fix metrics auth token detection (#6006)
    - Fix repo header issues (#5995)
    - Fix bug when deleting a linked account will removed all
      (#5989)
    - Make organization dropdown scrollable when using mouse wheel
      (#5988)
    - Fix empty ssh key importing in ldap (#5984)
    - Admin config page mailertype setting option update (#5973)
    - Fix redirect loop during forced password change (#5965)
    - Show user who created the repository instead of the
      organisation in action feed (#5948)
    - Remove all CommitStatus when a repo is deleted (#5940)
    - Fix ssh deploy and user key constraints (#1357) (#5939)
    - Fix log output (#5938)
    - Set PusherName and PusherID to owner on deploy key to fix
      pushing with deploy keys (#5935)
    - Fix compare button (#5929)
    - Fix bug when read public repo lfs file (#5912)
    - Only allow local login if password is non-empty (#5906)
    - Recover panic in orgmode.Render if bad orgfile (#4982)
      (#5903)
    - Provide better panic handling (#5902)
    - Respect value of REQUIRE_SIGNIN_VIEW (#5901)
    - Show a 404 not a 500 if a repo does not exist (#5900)
    - Ensure repo is loaded in mailer (Completely fix #5891)
      (#5895)
    - Ensure issue.Poster is loaded in
      mailIssueCommentToParticipants (#5891)
    - Correct footer height if screen-width is to small
      (fixes #5878) (#5889)
    - In gitea serv switch off console logger to fix #5866 (#5887)
    - Don't allow pull requests to be created on an archived
      repository (#5883)
    - Support reviews on a deleted file path (#5880)
    - Fix compare button on upstream repo leading to 404 (#5877)
    - Fix null pointer on not logged in attempt to Sudo (#5872)
    - Fix new release creation API to allow empty target (#5870)
    - Fix an error while adding a dependency via UI. (#5862)
    - Fix failing migration v67 (#5849)
    - Fix delete correct temp directory (#5839)
    - Make sure .git/info is created before generating
      .git/info/sparse-che… (#5825)
    - Fix topics saving internal error and disable for archived
      repos (#5821)
    - Fix TLS errors when using acme/autocert for local connections
      (#5820)
    - When creating new repository fsck option should be enabled
      (#5817)
    - Request for public keys only if LDAP attribute is set (#5816)
    - Fix serving of raw wiki files other than .md (#5814)
    - Fix migration 78 error mssql (#5791)
    - Disallow empty titles (#5785)
    - Fix the v78 migration script (#5776)
    - Ensure valid git author names passed in signatures (#5774)
    - Fix wrong assumption where a user is always said to have
      unassigned (her)himself (#5769)
    - Upgrade go-sql-driver/mysql to fix invalid connection error
      (#5748)
    - Fixing PostgreSQL dump creation (#5747)
    - Add proper CORS preflight origin validation (#5740)
    - Disable auto-migrate in docker container (#5730)
    - In basic auth check for tokens before call UserSignIn (#5725)
    - Pooled and buffered gzip implementation (#5722)
    - Ensure that sessions are passed into queries that could use
      the database to prevent deadlocks (#5718)
    - Keep file permissions during database migration (#5707)
    - Use correct value for "MSpan Structures Obtained" #4742
      (#5706)
    - Refactor editor upload, update and delete to use git plumbing
      and add LFS support (#5702)
    - Update xorm to fix issue #5659 and #5651 (#5680)
    - Fix public will not be reused as public key after deleting as
      deploy key (#5671)
    - When redirecting, clean the path (#5669)
    - Don't list an issue on its own dependency list UI. (#5658)
    - Fix commit page showing status for current default branch
      (#5649) (#5650)
    - Only count users own actions for heatmap contributions
      (#5647)
    - Fix sqlite deadlock when assigning to a PR (#5640)
    - Refactor issue indexer (#5363)
  * TESTING
    - Run benchmark at tag to track performances (#6035)
    - Add test environment for MySQL8 (#5234)
  * BUILD
    - Use go 1.12 for tests and deprecate go 1.9 (#6186)
    - Makefile changes for Windows and easier development (#6103)
    - Update bleve dependency to latest master revision (#6100)
    - Switch to more recent build of xgo (#6070)
    - Add autoprefixer to css build (#6029)
    - Update the version of less (#6010)
    - Make log mailer for testing (#5893)
  * DOCS
    - Add more tests and docs for issue indexer, add db indexer
      type for searching from database (#6144)
    - update default value of --must-change-password cli flag
      (#6032)
    - Update and expand information about building Gitea (#6019)
    - Update U2F Section of app.ini.sample (#5994)
    - Update swagger for release API pagination (#5841)
    - Added docs for the tree api (#5834)
  * MISC
   - Add single commit API support (#5843)
   - Add missing GET teams endpoints (#5382)
   - Migrate database if app.ini found (#5290)

-------------------------------------------------------------------
Sat Apr 20 08:07:53 UTC 2019 - ecsos@opensuse.org

- update to version 1.7.6
  * SECURITY
    - Prevent remote code execution vulnerability with mirror repo
      URL settings (#6593) (#6595)
  * BUGFIXES
    - Allow resend of confirmation email when logged in
      (#6482) (#6487)

-------------------------------------------------------------------
Sun Mar 31 08:57:58 UTC 2019 - ecsos@opensuse.org

- update to version 1.7.5
  * BUGFIXES
    - Fix unitTypeCode not being used in accessLevelUnit
      (#6419) (#6423)
    - Fix bug where manifest.json was being requested without
      cookies and continuously creating new sessions
      (#6372) (#6383)·
    - Fix ParsePatch function to work with quoted
      diff --git strings (#6323) (#6332)

-------------------------------------------------------------------
Wed Mar 20 08:37:57 UTC 2019 - ecsos@opensuse.org

- update to version 1.7.4
  * SECURITY
    - Fix potential XSS vulnerability in repository description.
      (#6306) (#6308)
  * BUGFIXES
    - Fix wrong release commit id (#6224) (#6300)
    - Fix panic on empty signed commits (#6292) (#6300)
    - Fix organization dropdown not being scrollable when using
      mouse wheel (#5988) (#6246)
    - Fix displaying dashboard even if required to change password
      (#6214) (#6215)

-------------------------------------------------------------------
Mon Mar  4 14:41:20 UTC 2019 - ecsos@opensuse.org

- update to version 1.7.3
  * BUGFIXES
    - Fix server 500 when trying to migrate to an already existing
      repository (#6188) (#6197)
    - Load Issue attributes for API
      /repos/{owner}/{repo}/issues/{index} (#6122) (#6185)
    - Fix bug whereby user could change private repository to
      public when force private enabled. (#6156) (#6165)
    - Fix bug when update owner team then visit team's repo return
      404 (#6119) (#6166)
    - Fix heatmap and repository menu display in
      Internet Explorer 9+ (#6117) (#6137)
    - Fix prohibit login check on authorization (#6106) (#6115)
    - Fix LDAP protocol error regression by moving to ldap.v3
      (#6105) (#6107)
    - Fix deadlock in webhook PullRequest (#6102) (#6104)
    - Fix redirect loop when password change is required and Gitea
      is installed as a suburl (#5965) (#6101)
    - Fix compare button regression (#5929) (#6098)
    - Recover panic in orgmode.Render if bad orgfile (#4982)
      (#5903) (#6097)

-------------------------------------------------------------------
Thu Feb 21 14:47:22 UTC 2019 - ecsos@opensuse.org

- update to version 1.7.2
  * BUGFIXES
    - Remove all CommitStatus when a repo is deleted
      (#5940) (#5941)
    - Fix notifications on pushing with deploy keys by setting
      hook environment variables (#5935) (#5944)
    - Silence console logger in gitea serv (#5887) (#5943)
    - Handle milestone webhook events for issues and PR
      (#5947) (#5955)
    - Show user who created the repository instead of the
      organization in action feed (#5948) (#5956)
    - Fix ssh deploy and user key constraints (#1357) (#5939)
      (#5966)
    - Fix bug when deleting a linked account will removed all
      (#5989) (#5990)
    - Fix empty ssh key importing in ldap (#5984) (#6009)
    - Fix metrics auth token detection (#6006) (#6017)
    - Create repository on organisation by default on its dashboard
      (#6026) (#6048)
    - Make sure labels are actually returned in API (#6053) (#6059)
    - Switch to more recent build of xgo (#6070) (#6072)
    - In basic auth check for tokens before call UserSignIn (#5725)
      (#6083)

-------------------------------------------------------------------
Fri Feb  1 13:40:03 UTC 2019 - info@paolostivanin.com

- update to version 1.7.1
  * security:
    - Disable redirect for i18n (#5910) (#5916)
    - Only allow local login if password is non-empty
      (#5906) (#5908)
    - Fix go-get URL generation (#5905) (#5907)
  * bugfixes:
    - Fix TLS errors when using acme/autocert for local connections
      (#5820) (#5826)
    - Request for public keys only if LDAP attribute is set
      (#5816) (#5819)
    - Fix delete correct temp directory (#5840) (#5839)
    - Fix an error while adding a dependency via UI (#5862) (#5876)
    - Fix null pointer in attempt to Sudo if not logged in
      (#5872) (#5884)
    - When creating new repository fsck option should be enabled
      (#5817) (#5885)
    - Prevent nil dereference in mailIssueCommentToParticipants
      (#5891) (#5895) (#5894)
    - Fix bug when read public repo lfs file (#5913) (#5912)
    - Respect value of REQUIRE_SIGNIN_VIEW (#5901) (#5915)
    - Fix compare button on upstream repo leading to 404
      (#5877) (#5914)
  * docs:
    - Added docs for the tree api (#5835)
  * misc:
    - Include Go toolchain to --version (#5832) (#5830)

-------------------------------------------------------------------
Fri Jan 25 10:22:33 UTC 2019 - ecsos@opensuse.org

- Add missing directories.

-------------------------------------------------------------------
Thu Jan 24 12:56:26 UTC 2019 - ecsos@opensuse.org

- Conflicts with git-web.

-------------------------------------------------------------------
Wed Jan 23 12:57:07 UTC 2019 - ecsos@opensuse.org

- Update to 1.7.0
  To many changes to list here. See:
  https://github.com/go-gitea/gitea/releases/tag/v1.7.0

-------------------------------------------------------------------
Wed Jan 16 07:51:35 UTC 2019 - ecsos@opensuse.org

- Update to 1.6.4
  * BUGFIX
    - Fix SSH key now can be reused as public key after deleting as
      deploy key (#5671) (#5685)
    - When redirecting clean the path to avoid redirecting to
      external site (#5669) (#5703)
    - Fix to use correct value for MSpan Structures Obtained
      (#5706) (#5715)

-------------------------------------------------------------------
Mon Jan  7 16:43:29 UTC 2019 - ecsos@opensuse.org

- Update to 1.6.3
  * SECURITY
    - Prevent DeleteFilePost doing arbitrary deletion (#5631)
  * BUGFIX
    - Fix wrong text getting saved on editing second comment on an
      issue (#5608)
- Change source name.

-------------------------------------------------------------------
Fri Dec 21 18:58:27 UTC 2018 - ecsos@opensuse.org

- Update to 1.6.2
  * SECURITY
    - Sanitize uploaded file names (#5571) (#5573)
    - HTMLEncode user added text (#5570) (#5575)
  * BUGFIXES
    - Fix indexer reindex bug when gitea restart (#5563) (#5564)
    - Remove a double slash in the HTTPS redirect with
      Let's Encrypt (#5537) (#5539)
    - Fix bug when a read perm user to edit his issue (#5516)
      (#5534)
    - Detect force push failure on deletion of protected branches
      (#5522) (#5531)
    - Let's Encrypt handler listens on correct port for certificate
      validation (#5525) (#5527)
    - Fix forgot deletion of notification when delete repository
      (#5506) (#5514)
    - Fix undeleted content when deleting user (#5429) (#5509)
    - Fix empty wiki (#5504) (#5508)

-------------------------------------------------------------------
Tue Dec 11 11:42:40 UTC 2018 - ecsos@opensuse.org

- Update to 1.6.1
  * BUGFIXES
    - Fix dependent issue searching when gitea is run in subpath
      (#5392) (#5400)
    - API: '/orgs/:org/repos': return private repos with read
      access (#5393)
    - Fix repository deletion when there is large number of issues
      in it (#5426) (#5434)
    - Word-break the WebHook url to prevent a ui-break (#5445)
    - Admin should be able to delete repos via the API even if they
      are not a member of the organization (#5443) (#5447)
    - Ensure that the closed_at is set for closed (#5450)
    - Fix topic name length on database (#5493) (#5495)

-------------------------------------------------------------------
Tue Nov 27 10:57:45 UTC 2018 - ecsos@opensuse.org

- Update to 1.6.0
  * BREAKING
    - Respect email privacy option in user search via API (#4512)
    - Simply remove tidb and deps (#3993)
    - Swagger.v1.json template (#3572)
  * SECURITY
    - Add CSRF checking to reqToken and add reqToken to admin API
      routes (#5272) (#5250)
    - Improve URL validation for external wiki  and external issues
      (#4710)
    - Make cookies HttpOnly and obey COOKIE_SECURE flag (#4706)
    - Don't disclose emails of all users when sending out emails
      (#4664)
    - Check that repositories can only be migrated to own user or
      organizations (#4366)
  * FEATURE
    - Add comment replies (#5147) (#5104)
    - Pull request review/approval and comment on code (#3748)
    - Added dependencies for issues (#2196) (#2531)
    - Add the ability to have built in themes in Gitea and provide
      dark theme arc-green (#4198)
    - Add sudo functionality to the API (#4809)
    - Add oauth providers via cli (#4591)
    - Disable merging a WIP Pull request (#4529)
    - Force user to change password (#4489)
    - Add letsencrypt to Gitea (#4189)
    - Add push webhook support for mirrored repositories (#4127)
    - Add csv file render support defaultly (#4105)
    - Add Recaptcha functionality to Gitea (#4044)
  * ENHANCEMENT
    - Fix milestones sorted wrongly (#4987)
    - Allow api to create tags for releases if they don't exist
      (#4890)
    - Fix #4877 to follow the OpenID Connect Audiences spec (#4878)
    - Enforce token on api routes [fixed critical security issue
      #4357] (#4840)
    - Update legacy branch and tag URLs in dashboard to new format
      (#4812)
    - Slack webhook channel name cannot be empty or just contain
      an hashtag (#4786)
    - Add whitespace handling to PR-comparsion (#4683)
    - Make reverse proxy auth optional (#4643)
    - MySQL TLS (#4642)
    - Make sure to set PR split view when creating/previewing
      a pull request  (#4617)
    - Log user in after a successful sign up (#4615)
    - Fix typo IsPullReuqestBroken -> IsPullRequestBroken (#4578)
    - Allow admin toggle forcing a password change for newly
      created users (#4563)
    - Update jQuery to v1.12.4 (#4551)
    - Env var GITEA_PUSHER_EMAIL (#4516)
    - Feat(repo): support search repository by topic name (#4505)
    - Small improvements to dependency UI (#4503)
    - Make max commits in graph configurable (#4498)
    - Add valid for lfs oid (#4461)
    - Add shortcut to save wiki page (#4452)
    - Allow administrator to create repository for any organization
      (#4368)
    - Fix repository last updated time update when delete a user
      who watched the repo (#4363)
    - Switch plaintext scratch tokens to use hash instead (#4331)
    - Increase default TOTP secret size to 320 bits (#4287)
    - Keep preseeded database password (#4284)
    - Implemented hover text showing user FullName (#4261)
    - Add ability to delete a token (#4235)
    - Fix typos in i18n variable names. (#4080)
    - Api: repos/search: add parameters to control the sort order
      (#3964)
    - Add missing path in the Docker app.ini template (#2181)
    - Add file name and branch to page title (#4902)
    - Offline use of google fonts (#4872)
    - Add missing History link to directory listings v2 (#4829)
    - Locale for Edit and Remove due date issue (#4802)
    - Disable 'May Import Local Repository' when is disabled by
      setting (Is… (#4780)
    - API /admin/users/{username} missing parameter (#4775)
    - Display error when adding a user to a team twice (#4746)
    - Remove UsePrivilegeSeparation from the Docker sshd_config,
       see #2876 (#4722)
    - Focus title input when clicking helper link (#4696)
    - Add vendor to user reserved words and format words list
      according alphabet (#4685)
    - Add gitea/issues link to 500 page (#4654)
    - Hide home button when landing page is not set to home (#4651)
    - Remove link to GitHub issues in 404 template (#4639)
    - Cmd/serve: pprof cpu and memory profile dumps to disk (#4560)
    - Add flash message after an account has been successfully
      activated (#4510)
    - Prevent html entity escaping on delete branch (#4471)
    - Locale for button Edit on protected branch (#4442)
    - Update notification icon (#4343)
    - Added front-end topics validation (#4316)
    - Don't display buttons if there are no system notifications
      (#4280)
    - Issue due date api (#3890)
  * BUGFIXES
    - dont' send assign webhooks when creating issue (#5365)
    - Fix create team, update team missing units (#5188)
    - Fix file edit change preview functionality (#5300)
    - *ix bug when users have serval teams with different units on
      different repositories (#5307)
    - Fix U2F if gitea is configured in subpath (#5302)
    - Fix markdown image with link (#4675)
    - Remove maxlines option for file logger (#5282)
    - Fix wrong api request url for instances running in subfolders
      (#5261) (#5247)
    - Accept web-command cli flags if web-command is commited
      (#5245) (#5200)
    - Reduce join star, repo_topic, topic tables on repo search,
      to resolve extra columns problem on MSSQL (#5136) (#5229)
    - Fix data race on migrate repository (#5224) (#5230)
    - Add secret to all webhook's payload where it has been missing
      (#5208) (#5199)
    - Fix sqlite and MSSQL lock (#5210) (#5223) (#5214) (#5218)
      (#5176) (#5179)
    - Fix race on updatesize (#5190) (#5215)
    - Fix filtering issues by tags on main screen issues (#5219)
      (#3824)
    - Fix SQL quoting (#5137) (#5117)
    - Fix regex to support optional end line of old section in diff
      hunk (#5097) (#5096)
    - Fix release creation via API (#5076)
    - Remove links from topics in edit mode  (#5026)
    - Fix missing AppSubUrl in few more templates (fixup) (#5021)
    - Fix missing AppSubUrl in some templates (#5020)
    - Hide outdated comments in file view (#5017)
    - Upgrade gopkg.in/testfixtures.v2 (#4999)
    - Disable debug routes unless PPROF is enabled in configuration
      (#4995)
    - Fix user menu item styling (#4985)
    - Fix layout of the topics editing form (#4971)
    - Fix null pointer dereference in ParseCommitWithSignature
      (#4962)
    - Fix url in discord webhook (#4953)
    - Detect charset and convert non UTF-8 files for display
      (#4950)
    - Make sure to catch the right error so it is displayed on
      the UI (#4945)
    - Fix(topics): don't redirect to explore page. (#4938)
    - Fix bug forget to remove Stopwatch when remove repository
      (#4928)
    - Fix bug when repo remained bare if multiple branches pushed
      in single push (#4923)
    - Fix: Crippled diff (#4726) (#4900)
    - Fix trimming of markup section names (#4863)
    - Issues api allow pulls and fix #4832 (#4852)
    - Do not autocreate directory for new users/orgs (#4828)
      (#4849)
    - Fix redirect with non-ascii branch names (#4764) (#4810)
    - Fix missing release title in webhook (#4783) (#4796)
    - User shouldn't be able to approve or reject his/her own PR
      (#4729)
    - Make sure to reset commit count in the cache on mirror
      syncing (#4720)
    - Fixed bug where team with admin privelege type doesn't get
      any unit  (#4719)
    - Fix incorrect caption of webhook setting (#4701) (#4717)
    - Allow WIP marker to contains < or > (#4709)
    - Hide org/create menu item in Dashboard if user has no rights
      (#4678) (#4680)
    - Site admin could create repos even MAX_CREATION_LIMIT=0
      (#4645)
    - Fix custom templates being ignored (#4638)
    - Fix starring icon after semantic ui update (#4628)
    - Fix Split-View line adjustment (#4622)
    - Fix integer constant overflows in tests (#4616)
    - Push whitelist now doesn't apply to branch deletion (#4601)
      (#4607)
    - Fix bugs when too many IN variables (#4594)
    - Fix failure on creating pull request with assignees (#4419)
      (#4583)
    - Fix panic issue on update avatar email (#4580) (#4581)
    - Fix status code label for a successful webhook (#4540)
    - An inactive user shouldn't be able to be added as
      a collaborator (#4535)
    - Don't fail silently if trying to add a collaborator twice
      (#4533)
    - Fix incorrect MergeWhitelistTeamIDs check in CanUserMerge
      function (#4519) (#4525)
    - Fix out-of-transaction query in removeOrgUser (#4521) (#4522)
    - Fix migration from older releases (#4495)
    - Accept 'Data:' in commit graph (#4487)
    - Update xorm to latest version and fix correct `user` table
      referencing in sql (#4473)
    - Relative URLs for LibreJS page (#4460)
    - Redirect to correct page after using scratch token (#4458)
    - Fix column droping for MSSQL that need new transaction for
      that (#4440)
    - Replace src with raw to fix image paths (#4377)
    - Add default merge options when creating new repository (#4369)
    - Fix docker build (#4358)
    - Fixes repo membership check in API (#4341)
    - Dep upgrade mysql lib (#4161)
    - Fix some issues with special chars in branch names (#3767)
    - Responsive design fixes (#4508)
  * TRANSLATION
    - Fix punctuation in English translation (#4958)
    - Fix translation (#4355)
- rebase gitea.app.ini.patch

-------------------------------------------------------------------
Mon Nov 12 10:52:25 UTC 2018 - ecsos@opensuse.org

- Fix problems with use of ssh.
  - Move .ssh from etc to gitea path.
  - Change rights for /usr/share/gitea
  - Update README.SUSE

-------------------------------------------------------------------
Thu Nov  1 23:48:14 UTC 2018 - ecsos@opensuse.org

- update to 1.5.3
  * SECURITY
    - Fix remote command execution vulnerability in upstream
      library (#5177) (#5196)

-------------------------------------------------------------------
Mon Oct 15 12:58:36 UTC 2018 - ecsos@opensuse.org

- update to 1.5.2
  * SECURITY
    - Enforce token on api routes (#4840) (#4905)
  * BUGFIXES
    - Remove links from topics in edit mode (#5030)
    - Detect charset and convert non UTF-8 files for display
      (#4950) (#4994)
    - Fix layout of the topics editing form (#4971) (#4993)
    - Fix null pointer dereference in ParseCommitWithSignature
      (#4964)
    - Fix url in discord webhook (#4951)
    - Fix font-cropping UI bug in diff (#4726) (#4929)
    - Fix bug forget to remove Stopwatch when remove repository
      (#4933)
    - Fix bug when repo remained bare if multiple branches pushed
      (#4927)
    - Fix redirect with non-ascii branch names (#4764) (#4887)
    - Fix issues api allow pulls (#4852) (#4862)
    - Fix trimming of markup section names (#4864)

-------------------------------------------------------------------
Mon Sep  3 11:47:33 UTC 2018 - ecsos@opensuse.org

- update 1.5.1
  * SECURITY
    - Don't disclose emails of all users when sending out emails
      (#4784)
    - Improve URL validation for external wiki and external issues
      (#4710) (#4740)
    - Make cookies HttpOnly and obey COOKIE_SECURE flag
      (#4706) (#4707)
  * BUGFIXES
    - Fix missing release title in webhook (#4783) (#4800)
    - Make sure to reset commit count in the cache on mirror
      syncing (#4770)
    - Fixed bug where team with admin privelege type doesn't get
      any unit (#4759)
    - Fix failure on creating pull request with assignees
      (#4583) (#4727)
    - Hide org/create menu item in Dashboard if user has no rights
      (#4678) (#4686)
  * TRANSLATION
    - Fix incorrect caption of webhook setting (#4701) (#4718)

-------------------------------------------------------------------
Sat Aug 11 17:47:31 UTC 2018 - ecsos@opensuse.org

- update to 1.5.0
  * SECURITY
    - Check that repositories can only be migrated to own user or
      organizations (#4366) (#4370)
    - Limit uploaded avatar image-size to 4096px x 3072px by
      default (#4353)
    - Do not allow to reuse TOTP passcode (#3878)
  * BUGFIXES
    - Fix column droping for MSSQL that need new transaction for
      that (#4440) (#4484)
    - Redirect to correct page after using scratch token (#4458)
      (#4472)
    - Replace src with raw to fix image paths (#4377) (#4386)
    - Fixes repo membership check in API (#4341) (#4379)
    - Add default merge options when adding new repository (#4369)
      (#4373)
    - Fix repository last updated time update when delete a user
      who watched the repo (#4363) (#4371)
    - Fix html entity escaping in branch deletion message (#4471)
      (#4485)
    - Fix out-of-transaction query in removeOrgUser (#4521) (#4524)
    - Fix incorrect MergeWhitelistTeamIDs check in CanUserMerge
      function (#4519)
    - Fix panic issue on update avatar email (#4580) (#4590)
    - Fix bugs when too many IN variables (#4594) (#4597)
    - Push whitelist now doesn't apply to branch deletion (#4601)
      (#4640)
    - Site admin could create repos even MAX_CREATION_LIMIT=0
      (#4645) (#4650)
  * FEATURE
    - Add cli commands to regen hooks & keys (#3979)
    - Add support for FIDO U2F (#3971)
    - Added user language setting (#3875)
    - LDAP Public SSH Keys synchronization (#1844)
    - Add topic support (#3711)
    - Multiple assignees (#3705)
    - Add protected branch whitelists for merging (#3689)
    - Global code search support (#3664)
    - Add label descriptions (#3662)
    - Add issue search via API (#3612)
    - Add repository setting to enable/disable health checks
      (#3607)
    - Emoji Autocomplete (#3433)
    - Implements generator cli for secrets (#3531)
  * ENHANCEMENT
    - Add more webhooks support and refactor webhook templates
      directory (#3929)
    - Add new option to allow only OAuth2/OpenID user registration
      (#3910)
    - Add option to use paged LDAP search when synchronizing users
      (#3895)
    - Symlink icons (#1416)
    - Improve release page UI (#3693)
    - Add admin dashboard option to run health checks (#3606)
    - Add branch link in branch list (#3576)
    - Reduce sql query times in retrieveFeeds (#3547)
    - Option to enable or disable swagger endpoints (#3502)
    - Add missing licenses (#3497)
    - Reduce repo indexer disk usage (#3452)
    - Enable caching on assets and avatars (#3376)
    - Add repository search ordered by stars/forks.
      Forks column in admin repo list (#3969)
    - Add Environment Variables to Docker template (#4012)
    - LFS: make HTTP auth period configurable (#4035)
    - Add config path as an optionial flag when changing pass via
      CLI (#4184)
    - Refactor User Settings sections (#3900)
    - Allow square brackets in external issue patterns (#3408)
    - Add Attachment API (#3478)
    - Add EnableTimetracking option to app settings (#3719)
    - Add config option to enable or disable log executed SQL
      (#3726)
    - Shows total tracked time in issue and milestone list (#3341)
  * TRANSLATION
    - Improve English grammar and consistency (#3614)
  * DEPLOYMENT
    - Allow Gitea to run as different USER in Docker (#3961)
    - Provide compressed release binaries (#3991)
    - Sign release binaries (#4188)
- rebase gitea.app.ini.patch

-------------------------------------------------------------------
Sat Aug  4 09:42:13 UTC 2018 - ecsos@opensuse.org

- add conf for apache to reach gitea under git location in docdir.

-------------------------------------------------------------------
Wed Jun 27 16:58:01 UTC 2018 - ecsos@opensuse.org

- update to 1.4.3
  * SECURITY
    - HTML-escape plain-text READMEs (#4192) (#4214)
    - Fix open redirect vulnerability on login screen
      (#4312) (#4312)
  * BUGFIXES
    - Fix broken monitoring page when running processes are shown
      (#4203) (#4208)
    - Fix delete comment bug (#4216) (#4228)
    - Delete reactions added to issues and comments when deleting
      repository (#4232) (#4237)
    - Fix wiki URL encoding bug (#4091) (#4254)
    - Fix code tab link when viewing tags (#3908) (#4263)
    - Fix webhook type conflation (#4285) (#4285)

-------------------------------------------------------------------
Wed Jun  6 13:39:07 UTC 2018 - ecsos@opensuse.org

- update to 1.4.2
  * BUGFIXES
    - Adjust z-index for floating labels (#3939) (#3950)
    - Add missing token validation on application settings page
      (#3976) #3978
    - Webhook and hook_task clean up (#4006)
    - Fix webhook bug of response info is not displayed in UI
      (#4023)
    - Fix writer cannot read bare repo guide (#4033) (#4039)
    - Don’t force due date to current time (#3830) (#4057)
    - Fix wiki redirects (#3919) (#4065)
    - Fix attachment ENABLED (#4064) (#4066)
    - Added deletion of an empty line at the end of file
      (#4054) (#4074)
    - Use ResolveReference instead of path.Join (#4073)
    - Fix #4081 Check for leading / in base before removing it
      (#4083)
    - Respository’s home page not updated after first push (#4075)
- fix wrong version in main.go
- add firewall configurations for susefirewall2 ( < 1500 ) and
  firewalld ( >= 1500 )

-------------------------------------------------------------------
Sat Jun  2 16:13:19 UTC 2018 - ecsos@opensuse.org

- initial version 1.4.1
- add patch gitea.app.ini.patch to set some variables
openSUSE Build Service is sponsored by