v1.17.0 * BREAKING * Require go1.18 for Gitea 1.17 (#19918) * Make AppDataPath absolute against the AppWorkPath if it is not (#19815) * Nuke the incorrect permission report on /api/v1/notifications (#19761) * Refactor git module, make Gitea use internal git config (#19732) * Remove `RequireHighlightJS` field, update plantuml example. (#19615) * Increase minimal required git version to 2.0 (#19577) * Add a directory prefix `gitea-src-VERSION` to release-tar-file (#19396) * Use "main" as default branch name (#19354) * Make cron task no notice on success (#19221) * Add pam account authorization check (#19040) * Show messages for users if the ROOT_URL is wrong, show JavaScript errors (#18971) * Refactor mirror code & fix StartToMirror (#18904) * Remove deprecated SSH ciphers from default (#18697) * Add the possibility to allow the user to have a favicon which differs from the main logo (#18542) * Update reserved usernames list (#18438) * Support custom ACME provider (#18340) * Change initial TrustModel to committer (#18335) * Update HTTP status codes (#18063) * Upgrade Alpine from 3.13 to 3.15 (#18050) * Restrict email address validation (#17688) * Refactor Router Logger (#17308) * SECURITY * Use git.HOME_PATH for Git HOME directory (#20114) (#20293) * Add write check for creating Commit Statuses (#20332) (#20333) * Remove deprecated SSH ciphers from default (#18697) * FEDERATION * Return statistic information for nodeinfo (#19561) * Add Webfinger endpoint (#19462) * Store the foreign ID of issues during migration (#18446) * FEATURES * Automatically render wiki TOC (#19873) * Adding button to link accounts from user settings (#19792) * Allow set default merge style while creating repo (#19751) * Auto merge pull requests when all checks succeeded (#9307 & #19648) * Improve reviewing PR UX (#19612) * Add support for rendering console output with colors (#19497) * Add Helm Chart registry (#19406) * Add Goroutine stack inspector to admin/monitor (#19207) * RSS/Atom support for Orgs & Repos (#17714 & #19055) * Add button for issue deletion (#19032) * Allow to mark files in a PR as viewed (#19007) * Add Index to comment for migrations and mirroring (#18806) * Add health check endpoint (#18465) * Add packagist webhook (#18224) * Add "Allow edits from maintainer" feature (#18002) * Add apply-patch, basic revert and cherry-pick functionality (#17902) * Add Package Registry (#16510) * Add LDAP group sync to Teams (#16299) * Pause queues (#15928) * Added auto-save whitespace behavior if it changed manually (#15566) * Find files in repo (#15028) * Provide configuration to allow camo-media proxying (#12802) * API * Add endpoint to serve blob or LFS file content (#19689) * Add endpoint to check if team has repo access (#19540) * More commit info (#19252) * Allow to create file on empty repo (#19224) * Allow removing issues (#18879) * Add endpoint to query collaborators permission for a repository (#18761) * Return primary language and repository language stats API URL (#18396) * Implement http signatures support for the API (#17565) * ENHANCEMENTS * Make notification bell more prominent on mobile (#20108, #20236, #20251) (#20269) * Adjust max-widths for the repository file table (#20243) (#20247) * Display full name (#20171) (#20246) * Add dbconsistency checks for Stopwatches (#20010) * Add fetch.writeCommitGraph to gitconfig (#20006) * Add fgprof pprof profiler (#20005) * Move agit dependency (#19998) * Empty log queue on flush and close (#19994) * Remove tab/TabName usage where it's not needed (#19973) * Improve file header on mobile (#19945) * Move issues related files into models/issues (#19931) * Add breaking email restrictions checker in doctor (#19903) * Improve UX on modal for deleting an access token (#19894) * Add alt text to logo (#19892) * Move some code into models/git (#19879) * Remove customized (unmaintained) dropdown, improve aria a11y for dropdown (#19861) * Make user profile image show full image on mobile (#19840) * Replace blue button and label classes with primary (#19763) * Remove fomantic progress module (#19760) * Allows repo search to match against "owner/repo" pattern strings (#19754) * Move org functions (#19753) * Move almost all functions' parameter db.Engine to context.Context (#19748) * Show source/target branches on PR's list (#19747) * Use http.StatusTemporaryRedirect(307) when serve avatar directly (#19739) * Add doctor orphan check for orphaned pull requests without an existing base repo (#19731) * Make Ctrl+Enter (quick submit) work for issue comment and wiki editor (#19729) * Update go-chi/cache to utilize Ping() (#19719) * Improve commit list/view on mobile (#19712) * Move some repository related code into sub package (#19711) * Use a better OlderThan for DeleteInactiveUsers (#19693) * Introduce eslint-plugin-jquery (#19690) * Tidy up `<head>` template (#19678) * Calculate filename hash only once (#19654) * Simplify `IsVendor` (#19626) * Add "Reference" section to Issue view sidebar (#19609) * Only set CanColorStdout / CanColorStderr to true if the stdout/stderr is a terminal (#19581) * Use for a repo action one database transaction (#19576) * Simplify loops to copy (#19569) * Added X-Mailer header to outgoing emails (#19562) * use middleware to open gitRepo (#19559) * Mute link in diff header (#19556) * Improve UI on mobile (#19546) * Fix Pull Request comment filename word breaks (#19535) * Permalink files In PR diff (#19534) * PullService lock via pullID (#19520) * Make repository file list useable on mobile (#19515) * more context for models (#19511) * Refactor readme file renderer (#19502) * By default force vertical tabs on mobile (#19486) * Github style following followers (#19482) * Improve action table indices (#19472) * Use horizontal tabs for repo header on mobile (#19468) * pass gitRepo down since its used for main repo and wiki (#19461) * Admin should not delete himself (#19423) * Use queue instead of memory queue in webhook send service (#19390) * Simplify the code to get issue count (#19380) * Add commit status popup to issuelist (#19375) * Add RSS Feed buttons to Repo, User and Org pages (#19370) * Add logic to switch between source/rendered on Markdown (#19356) * Move some helper files out of models (#19355) * Move access and repo permission to models/perm/access (#19350) * Disallow selecting the text of buttons (#19330) * Allow custom redirect for landing page (#19324) * Remove dependent on session auth for api/v1 routers (#19321) * Never use /api/v1 from Gitea UI Pages (#19318) * Remove legacy unmaintained packages, refactor to support change default locale (#19308) * Move milestone to models/issues/ (#19278) * Configure OpenSSH log level via Environment in Docker (#19274) * Move reaction to models/issues/ (#19264) * Make git.OpenRepository accept Context (#19260) * Move some issue methods as functions (#19255) * Show last cron messages on monitor page (#19223) * New cron task: delete old system notices (#19219) * Add Redis Sentinel Authentication Support (#19213) * Add auto logging of goroutine pid label (#19212) * Set OpenGraph title to DisplayName in profile pages (#19206) * Add pprof labels in processes and for lifecycles (#19202) * Let web and API routes have different auth methods group (#19168) * Move init repository related functions to modules (#19159) * Feeds: render markdown to html (#19058) * Allow users to self-request a PR review (#19030) * Allow render HTML with css/js external links (#19017) * Fix script compatiable with OpenWrt (#19000) * Support ignore all santize for external renderer (#18984) * Add note to GPG key response if user has no keys (#18961) * Improve Stopwatch behavior (#18930) * Improve mirror iterator (#18928) * Uncapitalize errors (#18915) * Prevent Stats Indexer reporting error if repo dir missing (#18870) * Refactor SecToTime() function (#18863) * Replace deprecated String.prototype.substr() with String.prototype.slice() (#18796) * Move deletebeans into models/db (#18781) * Fix display time of milestones (#18753) * Add config option to disable "Update branch by rebase" (#18745) * Display template path of current page in dev mode (#18717) * Add number in queue status to monitor page (#18712) * Change git.cmd to RunWithContext (#18693) * Refactor i18n, use Locale to provide i18n/translation related functions (#18648) * Delete old git.NewCommand() and use it as git.NewCommandContext() (#18552) * Move organization related structs into sub package (#18518) * Warn at startup if the provided `SCRIPT_TYPE` is not on the PATH (#18467) * Use `CryptoRandomBytes` instead of `CryptoRandomString` (#18439) * Use explicit jQuery import, remove unused eslint globals (#18435) * Allow to filter repositories by language in explore, user and organization repositories lists (#18430) * Use base32 for 2FA scratch token (#18384) * Unexport var git.GlobalCommandArgs (#18376) * Don't underline commit status icon on hover (#18372) * Always use git command but not os.Command (#18363) * Switch to non-deprecation setting (#18358) * Set the LastModified header for raw files (#18356) * Refactor jwt.StandardClaims to RegisteredClaims (#18344) * Enable deprecation error for v1.17.0 (#18341) * Refactor httplib (#18338) * Limit max-height of CodeMirror editors for issue comment and wiki (#18271) * Validate migration files (#18203) * Format with gofumpt (#18184) * Allow custom default merge message with .gitea/default_merge_message/<merge_style>_TEMPLATE.md (#18177) * Prettify number of issues (#17760) * Add a "admin user generate-access-token" subcommand (#17722) * Custom regexp external issues (#17624) * Add smtp password to install page (#17564) * Add config options to hide issue events (#17414) * Prevent double click new issue/pull/comment button (#16157) * Show issue assignee on project board (#15232) * BUGFIXES * WebAuthn CredentialID field needs to be increased in size (#20530) (#20555) * Ensure that all unmerged files are merged when conflict checking (#20528) (#20536) * Stop logging EOFs and exit(1)s in ssh handler (#20476) (#20529) * Add labels to two buttons that were missing them (#20419) (#20524) * Fix ROOT_URL detection for URLs without trailing slash (#20502) (#20503) * Dismiss prior pull reviews if done via web in review dismiss (#20197) (#20407) * Allow RSA 2047 bit keys (#20272) (#20396) * Add missing return for when topic isn't found (#20351) (#20395) * Fix commit status icon when in subdirectory (#20285) (#20385) * Initialize cron last (#20373) (#20384) * Set target on create release with existing tag (#20381) (#20382) * Update xorm.io/xorm to fix a interpreting db column sizes issue on 32bit systems (#20371) (#20372) * Make sure `repo_dir` is an empty directory or doesn't exist before 'dump-repo' (#20205) (#20370) * Prevent context deadline error propagation in GetCommitsInfo (#20346) (#20361) * Correctly handle draft releases without a tag (#20314) (#20335) * Prevent "empty" scrollbars on Firefox (#20294) (#20308) * Refactor SSH init code, fix directory creation for TrustedUserCAKeys file (#20299) (#20306) * Bump goldmark to v1.4.13 (#20300) (#20301) * Do not create empty ".ssh" directory when loading config (#20289) (#20298) * Fix NPE when using non-numeric (#20277) (#20278) * Store read access in access for team repositories (#20275) (#20276) * EscapeFilter the group dn membership (#20200) (#20254) * Only show Followers that current user can access (#20220) (#20252) * Update Bluemonday to v1.0.19 (#20199) (#20209) * Refix indices on actions table (#20158) (#20198) * Check if project has the same repository id with issue when assign project to issue (#20133) (#20188) * Fix remove file on initial comment (#20127) (#20128) * Catch the error before the response is processed by goth (#20000) (#20102) * Dashboard feed respect setting.UI.FeedPagingNum again (#20094) (#20099) * Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041) * Respond with a 401 on git push when password isn't changed yet (#20026) (#20027) * Return 404 when tag is broken (#20017) (#20024) * Alter hook_task TEXT fields to LONGTEXT (#20038) (#20041) * Respond with a 401 on git push when password isn't changed yet (#20026) (#20027) * Return 404 when tag is broken (#20017) (#20024) * Write Commit-Graphs in RepositoryDumper (#20004) * Use DisplayName() instead of FullName in Oauth Provider (#19991) * Don't buffer doctor logger (#19982) * Always try to fetch repo for mirrors (#19975) * Uppercase first languages letters (#19965) * Fix cli command restore-repo: "units" should be parsed as StringSlice (#19953) * Ensure minimum mirror interval is reported on settings page (#19895) * Exclude Archived repos from Dashboard Milestones (#19882) * gitconfig: set safe.directory = * (#19870) * Prevent NPE on update mirror settings (#19864) * Only return valid stopwatches to the EventSource (#19863) * Prevent NPE whilst migrating if there is a team request review (#19855) * Fix inconsistency in doctor output (#19836) * Fix release tag for webhook (#19830) * Add title attribute to dependencies in sidebar (#19807) * Estimate Action Count in Statistics (#19775) * Do not update user stars numbers unless fix is specified (#19750) * Improved ref comment link when origin is body/title (#19741) * Fix nodeinfo caching and prevent NPE if cache non-existent (#19721) * Fix duplicate entry error when add team member (#19702) * Fix sending empty notifications (#19589) * Update image URL for Discord webhook (#19536) * Don't let repo clone URL overflow (#19517) * Allow commit status popup on /pulls page (#19507) * Fix two UI bugs: JS error in imagediff.js, 500 error in diff/compare.tmpl (#19494) * Fix logging of Transfer API (#19456) * Fix panic in teams API when requesting members (#19360) * Refactor CSRF protection modules, make sure CSRF tokens can be up-to-date. (#19337) * An attempt to sync a non-mirror repo must give 400 (Bad Request) (#19300) * Move checks for pulls before merge into own function (#19271) * Fix `contrib/upgrade.sh` (#19222) * Set the default branch for repositories generated from templates (#19136) * Fix EasyMDE error when input Enter (#19004) * Don't clean up hardcoded `tmp` (#18983) * Delete related notifications on issue deletion too (#18953) * Fix trace log to show value instead of pointers (#18926) * Fix behavior or checkbox submission. (#18851) * Add `ContextUser` (#18798) * Fix some mirror bugs (#18649) * Quote MAKE to prevent path expansion with space error (#18622) * Preserve users if restoring a repository on the same Gitea instance (#18604) * Fix non-ASCII search on database (#18437) * Automatically pause queue if index service is unavailable (#15066) * TESTING * Allow postgres integration tests to run over unix pipe (#19875) * Prevent intermittent NPE in queue tests (#19301) * Add test for importing pull requests in gitea uploader for migrations (#18752) * Remove redundant comparison in repo dump/restore (#18660) * More repo dump/restore tests, including pull requests (#18621) * Add test coverage for original author conversion during migrations (#18506) * TRANSLATION * Update issue_no_dependencies description (#19112) * Refactor webhooks i18n (#18380) * BUILD * Use alpine 3.16 (#19797) * Require node 14.0 (#19451) * DOCS * Update documents (git/fomantic/db, etc) (#19868) * Update the ROOT documentation and error messages (#19832) * Update document to use FHS `/usr/local/bin/gitea` instead of `/app/...` for Docker (#19794) * Update documentation to disable duration settings with -1 instead of 0 (#19647) * Add warning to set SENDMAIL_ARGS to -- (#19102) * Update nginx reverse proxy docs (#18922) * Add example to render html files (#18736) * Make SSH passtrough documentation better (#18687) * Changelog 1.16.0 & 1.15.11 (#18468 & #18455) (#18470) * Update the SSH passthrough documentation (#18366) * Add `contrib/upgrade.sh` (#18286) * MISC * Fix aria for logo (#19955) * In code search, get code unit accessible repos in one (main) query (#19764) * Add tooltip to pending PR comments (#19662) * Improve sync performance for pull-mirrors (#19125) * Improve dashboard's repo list performance (#18963) * Avoid database lookups for `DescriptionHTML` (#18924) * Remove CodeMirror dependencies (#18911) * Disable unnecessary mirroring elements (#18527) * Disable unnecessary OpenID/OAuth2 elements (#18491) * Disable unnecessary GitHooks elements (#18485) * Change some logging levels (#18421) * Prevent showing webauthn error for every time visiting `/user/settings/security` (#18385) * Use correct translation key for errors (#18342)