v1.20.3   * BREAKING * Fix the wrong derive path (#26271) (#26318) * SECURITY * Fix API leaking Usermail if not logged in (#25097) (#26350) * FEATURES * Add ThreadID parameter for Telegram webhooks (#25996) (#26480) * ENHANCEMENTS * Add minimum polyfill to support "relative-time-element" in PaleMoon (#26575) (#26578) * Fix dark theme highlight for "NameNamespace" (#26519) (#26527) * Detect ogg mime-type as audio or video (#26494) (#26505) * Use `object-fit: contain` for oauth2 custom icons (#26493) (#26498) * Move dropzone progress bar to bottom to show filename when uploading (#26492) (#26497) * Remove last newline from config file (#26468) (#26471) * Minio: add missing region on client initialization (#26412) (#26438) * Add pull request review request webhook event (#26401) (#26407) * Fix text truncate (#26354) (#26384) * Fix incorrect color of selected assignees when create issue (#26324) (#26372) * Display human-readable text instead of cryptic filemodes (#26352) (#26358) * Hide `last indexed SHA` when a repo could not be indexed yet (#26340) (#26345) * Fix the topic validation rule and suport dots (#26286) (#26303) * Fix due date rendering the wrong date in issue (#26268) (#26274) * Don't autosize textarea in diff view (#26233) (#26244) * Fix commit compare style (#26209) (#26226) * Warn instead of reporting an error when a webhook cannot be found (#26039) (#26211) * BUGFIXES * Use "input" event instead of "keyup" event for migration form (#26602) (#26605) * Do not use deprecated log config options by default (#26592) (#26600) * Fix "issueReposQueryPattern does not match query" (#26556) (#26564) * Sync repo's IsEmpty status correctly (#26517) (#26560) * Fix project filter bugs (#26490) (#26558) * Use `hidden` over `clip` for text truncation (#26520) (#26522) * Set "type=button" for editor's toolbar buttons (#26510) (#26518) * Fix NuGet search endpoints (#25613) (#26499) * Fix storage path logic especially for relative paths (#26441) (#26481) * Close stdout correctly for "git blame" (#26470) (#26473) * Check first if minio bucket exists before trying to create it (#26420) (#26465) * Avoiding accessing undefined tributeValues #26461 (#26462) * Call git.InitSimple for runRepoSyncReleases (#26396) (#26450) * Add transaction when creating pull request created dirty data (#26259) (#26437) * Fix wrong middleware sequence (#26428) (#26436) * Fix admin queue page title and fix CI failures (#26409) (#26421) * Introduce ctx.PathParamRaw to avoid incorrect unescaping (#26392) (#26405) * Bypass MariaDB performance bug of the "IN" sub-query, fix incorrect IssueIndex (#26279) (#26368) * Fix incorrect CLI exit code and duplicate error message (#26346) (#26347) * Prevent newline errors with Debian packages (#26332) (#26342) * Fix bug with sqlite load read (#26305) (#26339) * Make git batch operations use parent context timeout instead of default timeout (#26325) (#26330) * Support getting changed files when commit ID is `EmptySHA` (#26290) (#26316) * Clarify the logger's MODE config option (#26267) (#26281) * Use shared template for webhook icons (#26242) (#26246) * Fix pull request check list is limited (#26179) (#26245) * Fix attachment clipboard copy on insecure origin (#26224) (#26231) * Fix access check for org-level project (#26182) (#26223) * DOCS * Update upgrade documentation to add a check for deprecated configurations (#26451) (#26452) * Remove backslashed newlines on markdown (#26344) (#26348) * MISC * Improve profile readme rendering (#25988) (#26453) * [docs] Add missing backtick in quickstart.zh-cn.md (#26349) (#26357) * Upgrade x/net to 0.13.0 (#26301)

v1.20.2   * ENHANCEMENTS * Calculate MAX_WORKERS default value by CPU number (#26177) (#26183) * Display deprecated warning in admin panel pages as well as in the log file (#26094) (#26154) * BUGFIXES * Fix allowed user types setting problem (#26200) (#26206) * Fix handling of plenty Nuget package versions (#26075) (#26173) * Fix UI regression of asciinema player (#26159) (#26162) * Fix LFS object list style (#26133) (#26147) * Fix allowed user types setting problem (#26200) (#26206) * Prevent primary key update on migration (#26192) (#26199) * Fix bug when pushing to a pull request which enabled dismiss approval automatically (#25882) (#26158) * Fix bugs in LFS meta garbage collection (#26122) (#26157) * Update xorm version (#26128) (#26150) * Remove "misc" scope check from public API endpoints (#26134) (#26149) * Fix CLI allowing creation of access tokens with existing name (#26071) (#26144) * Fix incorrect router logger (#26137) (#26143) * Improve commit graph alignment and truncating (#26112) (#26127) * Avoid writing config file if not installed (#26107) (#26113) * Fix escape problems in the branch selector (#25875) (#26103) * Fix handling of Debian files with trailing slash (#26087) (#26098) * Fix Missing 404 swagger response docs for /admin/users/{username} (#26086) (#26089) * Use stderr as fallback if the log file can't be opened (#26074) (#26083) * Increase table cell horizontal padding (#26140) (#26142) * Fix wrong workflow status when rerun a job in an already finished workflow (#26119) (#26124) * Fix duplicated url prefix on issue context menu (#26066) (#26067)

v1.20.1   * SECURITY * Disallow dangerous URL schemes (#25960) (#25964) * ENHANCEMENTS * Show the mismatched ROOT_URL warning on the sign-in page if OAuth2 is enabled (#25947) (#25972) * Make pending commit status yellow again (#25935) (#25968) * BUGFIXES * Fix version in rpm repodata/primary.xml.gz (#26009) (#26048) * Fix env config parsing for "GITEA____APP_NAME" (#26001) (#26013) * ParseScope with owner/repo always sets owner to zero (#25987) (#25989) * Fix SSPI auth panic (#25955) (#25969) * Avoid creating directories when loading config (#25944) (#25957) * Make environment-to-ini work with INSTALL_LOCK=true (#25926) (#25937) * Ignore `runs-on` with expressions when warning no matched runners (#25917) (#25933) * Avoid opening/closing PRs which are already merged (#25883) (#25903) * DOCS * RPM Registry: Show zypper commands for SUSE based distros as well (#25981) (#26020) * Correctly refer to dev tags as nightly in the docker docs (#26004) (#26019) * Update path related documents (#25417) (#25982) * MISC * Adding remaining enum for migration repo model type. (#26021) (#26034) * Fix the route for pull-request's authors (#26016) (#26018) * Fix commit status color on dashboard repolist (#25993) (#25998) * Avoid hard-coding height in language dropdown menu (#25986) (#25997) * Add shutting down notice (#25920) (#25922) * Fix incorrect milestone count when provide a keyword (#25880) (#25904)

v1.20.0   * BREAKING * Fix WORK_DIR for docker (root) image (#25738) (#25811) * Restrict `[actions].DEFAULT_ACTIONS_URL` to only `github` or `self` (#25581) (#25604) * Refactor path & config system (#25330) (#25416) * Fix all possible setting error related storages and added some tests (#23911) (#25244) * Use a separate admin page to show global stats, remove `actions` stat (#25062) * Remove the service worker (#25010) * Remove meta tags `theme-color` and `default-theme` (#24960) * Use `[git.config]` for reflog cleaning up (#24958) * Allow all URL schemes in Markdown links by default (#24805) * Redesign Scoped Access Tokens (#24767) * Fix team members API endpoint pagination (#24754) * Rewrite logger system (#24726) * Increase default LFS auth timeout from 20m to 24h (#24628) * Rewrite queue (#24505) * Remove unused setting `time.FORMAT` (#24430) * Refactor `setting.Other` and remove unused `SHOW_FOOTER_BRANDING` (#24270) * Correct the access log format (#24085) * Reserve ".png" suffix for user/org names (#23992) * Prefer native parser for SSH public key parsing (#23798) * Editor preview support for external renderers (#23333) * Add Gitea Profile Readmes (#23260) * Refactor `ctx` in templates (#23105) * SECURITY * Test if container blob is accessible before mounting (#22759) (#25784) * Set type="password" on all auth_token fields (#22175) * FEATURES * Add button on diff header to copy file name, misc diff header tweaks (#24986) * API endpoint for changing/creating/deleting multiple files (#24887) * Support changing git config through `app.ini`, use `diff.algorithm=histogram` by default (#24860) * Add up and down arrows to selected lookup repositories (#24727) * Add Go package registry (#24687) * Add status indicator on main home screen for each repo (#24638) * Support for status check pattern (#24633) * Implement Cargo HTTP index (#24452) * Add Debian package registry (#24426) * Add the ability to pin Issues (#24406) * Add follow organization and fix the logic of following page (#24345) * Allow `webp` images as avatars (#24248) * Support upload `outputs` and use `needs` context on Actions (#24230) * Allow adding new files to an empty repo (#24164) * Make wiki title supports dashes and improve wiki name related features (#24143) * Add monospace toggle button to textarea (#24034) * Use auto-updating, natively hoverable, localized time elements (#23988) * Add ntlm authentication support for mail (#23811) * Add CLI command to register runner tokens (#23762) * Add Alpine package registry (#23714) * Expand/Collapse all changed files (#23639) * Add unset default project column (#23531) * Add activity feeds API (#23494) * Add RPM registry (#23380) * Add meilisearch support (#23136) * Add API for License templates (#23009) * Add admin API email endpoints (#22792) * Add user rename endpoint to admin api (#22789) * Add API for gitignore templates (#22783) * Implement actions artifacts (#22738) * Add RSS Feeds for branches and files (#22719) * Display when a repo was archived (#22664) * Add Swift package registry (#22404) * Add CRAN package registry (#22331) * Add user webhooks (#21563) * Implement systemd-notify protocol (#21151) * Implement Issue Config (#20956) * Add API to manage issue dependencies (#17935) * API * Use correct response code in push mirror creation response in v1_json.tmpl (#25476) (#25571) * Fix `Permission` in API returned repository struct (#25388) (#25441) * Add API for Label templates (#24602) * Filters for GetAllCommits (#24568) * Add ability to specify '--not' from GetAllCommits (#24409) * Support uploading file to empty repo by API (#24357) * Add absent repounits to create/edit repo API (#23500) * Add login name and source id for admin user searching API (#23376) * Create a branch directly from commit on the create branch API (#22956) * ENHANCEMENTS * Make `add line comment` buttons focusable (#25894) (#25896) * Always pass 6-digit hex color to monaco (#25780) (#25782) * Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764) * Hide `add file` button for pull mirrors (#25748) (#25751) * Allow/fix review (approve/reject) of empty PRs (#25690) (#25732) * Fix tags header and pretty format numbers (#25624) (#25694) * Actions list enhancements (#25601) (#25678) * Fix show more for image on diff page (#25672) (#25673) * Prevent SVG shrinking (#25652) (#25669) * Fix UI misalignment on user setting page (#25629) (#25656) * Use css on labels (#25626) (#25636) * Read-only checkboxes don't appear and don't entirely act the way one might expect (#25573) (#25602) * Redirect to package after version deletion (#25594) (#25599) * Reduce table padding globally (#25568) (#25577) * Change `Regenerate Secret` button display (#25534) (#25541) * Fix rerun icon on action view component (#25531) (#25536) * Move some regexp out of functions (#25430) (#25445) * Diff page enhancements (#25398) (#25437) * Various UI fixes (#25264) (#25431) * Fix label list divider (#25312) (#25372) * Fix UI on mobile view (#25315) (#25340) * When viewing a file, hide the add button (#25320) (#25339) * Show if File is Executable (#25287) (#25300) * Fix edit OAuth application width (#25262) (#25263) * Use flex to align SVG and text (#25163) (#25260) * Revert overflow: overlay (revert #21850) (#25231) (#25239) * Use inline SVG for built-in OAuth providers (#25171) (#25234) * Change access token UI to select dropdowns (#25109) (#25230) * Remove hacky patch for "safari emoji glitch fix" (#25208) (#25211) * Minor arc-green color tweaks (#25175) (#25205) * Button and color enhancements (#24989) (#25176) * Fix mobile navbar and misc cleanups (#25134) (#25169) * Modify OAuth login ui and fix display name, iconurl related logic (#25030) (#25161) * Improve notification icon and navbar (#25111) (#25124) * Add details summary for vertical menus in settings to allow toggling (#25098) * Don't display `select all issues` checkbox when no issues are available (#25086) * Use RepositoryList instead of []*Repository (#25074) * Add ability to set multiple redirect URIs in OAuth application UI (#25072) * Use git command instead of the ini package to remove the `origin` remote (#25066) * Remove cancel button from branch protection form (#25063) * Show file tree by default (#25052) * Add Progressbar to Milestone Page (#25050) * Minor UI improvements: logo alignment, auth map editor, auth name display (#25043) * Allow for PKCE flow without client secret + add docs (#25033) * Refactor INI package (first step) (#25024) * Various style fixes (#25008) * Fix delete user account modal (#25004) * Refactor diffFileInfo / DiffTreeStore (#24998) * Add user level action runners (#24995) * Rename NotifyPullReviewRequest to NotifyPullRequestReviewRequest (#24988) * Add step start time to `ViewStepLog` (#24980) * Add dark mode to API Docs (#24971) * Display file mode for new file and file mode changes (#24966) * Make the 500 page load themes (#24953) * Show `bot` label next to username when rendering autor link if the user is a bot (#24943) * Repo list improvements, fix bold helper classes (#24935) * Improve queue and logger context (#24924) * Improve RunMode / dev mode (#24886) * Improve some Forms (#24878) * Add show timestamp/seconds and fullscreen options to action page (#24876) * Fix double border and adjust width for user profile page (#24870) * Improve Actions CSS (#24864) * Fix `@font-face` overrides (#24855) * Remove `In your repositories` link in milestones dashboard (#24853) * Fix missing yes/no in delete time log modal (#24851) * Show new pull request button also on subdirectories and files (#24842) * Make environment-to-ini support loading key value from file (#24832) * Support wildcard in email domain allow/block list (#24831) * Use `CommentList` instead of `[]*Comment` (#24828) * Add RTL rendering support to Markdown (#24816) * Rework notifications list (#24812) * Mute repo names in dashboard repo list (#24811) * Fix max width and margin of comment box on conversation page (#24809) * Some refactors for issues stats (#24793) * Rework label colors (#24790) * Fix OAuth login loading state (#24788) * Remove duplicated issues options and some more refactors (#24787) * Decouple the different contexts from each other (#24786) * Remove background on user dashboard filter bar (#24779) * Improve and fix bugs surrounding reactions (#24760) * Make the color of zero-contribution-squares in the activity heatmap more subtle (#24758) * Fix WEBP image copying (#24743) * Rework OAuth login buttons, swap github logo to monocolor (#24740) * Consolidate the two review boxes into one (#24738) * Unification of registration fields order (#24737) * Refactor Pull Mirror and fix out-of-sync bugs (#24732) * Improvements for action detail page (#24718) * Fix flash of unstyled content in action view page (#24712) * Don't filter action runs based on state (#24711) * Optimize actions list by removing an unnecessary `git` call (#24710) * Support no label/assignee filter and batch clearing labels/assignees (#24707) * Add icon support for safari (#24697) * Use standard HTTP library to serve files (#24693) * Improve button-ghost, remove tertiary button (#24692) * Only hide tooltip tippy instances (#24688) * Support migrating storage for actions log via command line (#24679) * Remove highlight in repo list (#24675) * Add markdown preview to Submit Review Textarea (#24672) * Update pin and add pin-slash (#24669) * Improve empty notifications display (#24668) * Support SSH for go get (#24664) * Improve avatar uploading / resizing / compressing, remove Fomantic card module (#24653) * Only show one tippy at a time (#24648) * Notification list enhancements, fix striped tables on dark theme (#24639) * Improve queue & process & stacktrace (#24636) * Use the type RefName for all the needed places and fix pull mirror sync bugs (#24634) * Remove fluid on compare diff page (#24627) * Add a tooltip to the job rerun button (#24617) * Attach a tooltip to the action status icon (#24614) * Make the actions control button look like an actual button (#24611) * Remove unnecessary code (#24610) * Make repo migration cancelable and fix various bugs (#24605) * Improve updating Actions tasks (#24600) * Attach a tooltip to the action control button (#24595) * Make repository response support HTTP range request (#24592) * Improve Gitea's web context, decouple "issue template" code into service package (#24590) * Modify luminance calculation and extract related functions into single files (#24586) * Simplify template helper functions (#24570) * Split "modules/context.go" to separate files (#24569) * Add org visibility label to non-organization's dashboard (#24558) * Update LDAP filters to include both username and email address (#24547) * Review fixes and enhancements (#24526) * Display warning when user try to rename default branch (#24512) * Fix color for transfer related buttons when having no permission to act (#24510) * Rework button coloring, add focus and active colors (#24507) * New webhook trigger for receiving Pull Request review requests (#24481) * Add goto issue id function (#24479) * Fix incorrect webhook time and use relative-time to display it (#24477) * RSS icon fixes (#24476) * Replace `N/A` with `-` everywhere (#24474) * Pass 'not' to commit count (#24473) * Enhance stylelint rule config, remove dead CSS (#24472) * Remove `font-awesome` and fomantic `icon` module (#24471) * Improve "new-menu" (#24465) * Remove fomantic breadcrumb module (#24463) * Improve template system and panic recovery (#24461) * Make Issue/PR/projects more compact, misc CSS tweaks (#24459) * Replace remaining fontawesome dropdown icons with SVG (#24455) * Remove all direct references to font-awesome (#24448) * Move links out of translation (#24446) * Add `ui-monospace` and `SF Mono` to `--fonts-monospace` (#24442) * Hide 'Mirror Settings' when unneeded, improve hints (#24433) * Add "Updated" column for admin repositories list (#24429) * Improve issue list filter (#24425) * Rework header bar on issue, pull requests and milestone (#24420) * Improve template helper (#24417) * Make repo size style matches others (commits/branches/tags) (#24408) * Support markdown editor for issue template (#24400) * Improve commit date in commit graph (#24399) * Start cleaning the messy ".ui.left / .ui.right", improve label list page, fix stackable menu (#24393) * Merge setting.InitXXX into one function with options (#24389) * Move `Rename branch` from repo settings page to the page of branches list (#24380) * Improve protected branch setting page (#24379) * Display 'Unknown' when runner.version is empty (#24378) * Display owner of a runner as a tooltip instead of static text (#24377) * Fix incorrect last online time in runner_edit.tmpl (#24376) * Fix unclear `IsRepositoryExist` logic (#24374) * Add custom helm repo name generated from url (#24363) * Replace placeholders in licenses (#24354) * Add rerun workflow button and refactor to use SVG octicons (#24350) * Fix runner button height (#24338) * Restore bold on repolist (#24337) * Improve RSS (#24335) * Refactor "route" related code, fix Safari cookie bug (#24330) * Alert error message if open dependencies are included in the issues that try to batch close (#24329) * Add missed column title in runner management page (#24328) * Automatically select the org when click create repo from org dashboard (#24325) * Modify width of ui container, fine tune css for settings pages and org header (#24315) * Fix config list overflow and layout (#24312) * Improve some modal action buttons (#24289) * Move code from module to service (#24287) * Sort users and orgs on explore by recency by default (#24279) * Allow using localized absolute date times within phrases with place holders and localize issue due date events (#24275) * Show workflow config error on file view also (#24267) * Improve template helper functions: string/slice (#24266) * Use more specific test methods (#24265) * Add `DumpVar` helper function to help debugging templates (#24262) * Limit avatar upload to valid image files (#24258) * Improve emoji and mention matching (#24255) * Change to vertical navbar layout for secondary navbar for repo/user/admin settings (#24246) * Refactor config provider (#24245) * Improve test logger (#24235) * Default show closed actions list if all actions was closed (#24234) * Add missing badges in user profile for /projects and /packages (#24232) * Add repository counter badge to repository tab (#24205) * Move secrets and runners settings to actions settings (#24200) * Require at least one unit to be enabled (#24189) * Use same action status svg icons on actions list as on action page (#24178) * Use secondary pointing menu for tabs on user/organization home page (#24162) * Improve Wiki TOC (#24137) * Refactor locale number (#24134) * Localize activity heatmap (except tooltip) (#24131) * Fix duplicate modals when clicking on "remove all" repository button (#24129) * Add runner check in repo action page (#24124) * Support triggering workflows by wiki related events (#24119) * Refactor cookie (#24107) * Remove untranslatable `on_date` key (#24106) * Refactor delete_modal_actions template and use it for project column related actions (#24097) * Improve git log for debugging (#24095) * Add option to search for users is active join a team (#24093) * Add PDF rendering via PDFObject (#24086) * Refactor web route (#24080) * Make more functions use ctx instead of db.DefaultContext (#24068) * Make HTML template functions support context (#24056) * Refactor rename user and rename organization (#24052) * Localize milestone related time strings (#24051) * Expand selected file when clicking file tree (#24041) * Add popup to hashed comments/pull requests/issues in file editing/adding preview tab (#24040) * Add placeholder and aria attributes to release and wiki edit page (#24031) * Add new user types `reserved`, `bot`, and `remote` (#24026) * Allow adding SSH keys even if SSH server is disabled (#24025) * Use a general approach to access custom/static/builtin assets (#24022) * Update github.com/google/go-github to v52 (#24004) * Replace tribute with text-expander-element for textarea (#23985) * Group template helper functions, remove `Printf`, improve template error messages (#23982) * Drop "unrolled/render" package (#23965) * Add job.duration in web ui (#23963) * Tweak pull request branch delete ui (#23951) * Merge template functions "dict/Dict/mergeinto" (#23932) * Use a general Eval function for expressions in templates. (#23927) * Clean template/helper.go (#23922) * Actions: Use default branch as ref when a branch/tag delete occurs (#23910) * Add tooltips for MD editor buttons and add `muted` class for buttons (#23896) * Improve markdown editor: width, height, preferred (#23895) * Make Release Download URLs predictable (#23891) * Remove fomantic ".link" selector and styles (#23888) * Added close/open button to details page of milestone (#23877) * Introduce GitHub markdown editor, keep EasyMDE as fallback (#23876) * Introduce GiteaLocaleNumber custom element to handle number localization on pages. (#23861) * Make first section on home page full width (#23854) * Use different SVG for pending and running actions (#23836) * Display image size for multiarch container images (#23821) * Improve action log display with control chars (#23820) * Fix dropdown direction behavior (#23806) * Fix incorrect/Improve error handle in edit user page (#23805) * Use clippie module to copy to clipboard (#23801) * Make minio package support legacy MD5 checksum (#23768) * Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) * Refactor docs (#23752) * Fix markup background, improve wiki rendering (#23750) * Make label templates have consistent behavior and priority (#23749) * Improve LoadUnitConfig to handle invalid or duplicate units (#23736) * Append `(comment)` when a link points at a comment rather than the whole issue (#23734) * Clean some legacy files and move some build files (#23699) * Refactor repo commit list (#23690) * Refactor internal API for git commands, use meaningful messages instead of "Internal Server Error" (#23687) * Add aria attributes to interactive time tooltips. (#23661) * Fix long project name display in issue list and in related dropdown (#23653) * Use data-tooltip-content for tippy tooltip (#23649) * Fix new issue/pull request btn margin when it is next to sort (#23647) * Fine tune more downdrop settings, use SVG for labels, improve Repo Topic Edit form (#23626) * Allow new file and edit file preview if it has editable extension (#23624) * Replace a few fontawesome icons with svg (#23602) * `Publish Review` buttons should indicate why they are disabled (#23598) * Convert issue list checkboxes to native (#23596) * Set opaque background on markup and images (#23578) * Use a general approach to show tooltip, fix temporary tooltip bug (#23574) * Improve `<SvgIcon>` to make it output `svg` node and optimize performance (#23570) * Enable color for consistency checks diffs (#23563) * Fix dropdown icon misalignment when using fomantic icon (#23558) * Decouple the issue-template code from comment_tab.tmpl (#23556) * Remove `id="comment-form"` dead code, fix tag (#23555) * Diff improvements (#23553) * Sort Python package descriptors by version to mimic PyPI format (#23550) * Use a general approch to improve a11y for all checkboxes and dropdowns. (#23542) * Fix long name ui issues and label ui issue (#23541) * Return `repository` in npm package metadata endpoint (#23539) * Use `project.IconName` instead of repeated unreadable `if-else` chains (#23538) * Remove stars in dashboard repo list (#23530) * Update mini-css-extract-plugin, remove postcss (#23520) * Change `Close` to either `Close issue` or `Close pull request` (#23506) * Fix theme-auto loading (#23504) * Fix tags sort by creation time (descending) on branch/tag dropdowns (#23491) * Display the version of runner in the runner list (#23490) * Replace Less with CSS (#23481) * Fix `.locale.Tr` function not found in delete modal (#23468) * Allow both fullname and username search when `DEFAULT_SHOW_FULL_NAME` is true (#23463) * Add project type descriptions in issue badge and improve project icons (#23437) * Use context for `RepositoryList.LoadAttributes` (#23435) * Refactor branch/tag selector to Vue SFC (#23421) * Keep (add if not existing) xmlns attribute for generated SVG images (#23410) * Refactor dashboard repo list to Vue SFC (#23405) * Add workflow error notification in ui (#23404) * Refactor branch/tag selector dropdown (first step) (#23394) * Reduce duplicate and useless code in options (#23369) * Convert `<div class="button">` to `<button class="button">` (#23337) * Add path prefix to ObjectStorage.Iterator (#23332) * Improve cache context (#23330) * Move pidfile creation from setting to web cmd package (#23285) * Fix tags view (#23243) * Add commit info in action page (#23210) * Support paste treepath when creating a new file or updating the file name (#23209) * Allow skipping forks and mirrors from being indexed (#23187) * Use context parameter in services/repository (#23186) * Hide target selector if tag exists when creating new release (#23171) * Improve FindProjects (#23085) * Clean Path in Options (#23006) * Add margin top to the top of branches (#23002) * Remove unnecessary and incorrect `find('.menu').toggle()` (#22987) * Improve GetBoards and getDefaultBoard (#22981) * Improve squash merge commit author and co-author with private emails (#22977) * Add --quiet option to gitea dump (#22969) * Add pagination for dashboard and user activity feeds (#22937) * Handle files starting with colons in WalkGitLog (#22935) * Add "Reviewed by you" filter for pull requests (#22927) * Parse external request id from request headers, and print it in access log (#22906) * Replace `repo.namedBlob` by `git.TreeEntry`. (#22898) * Pull Requests: add button to compare force pushed commits (#22857) * Fix pull request update showing too many commits with multiple branches (#22856) * Require approval to run actions for fork pull request (#22803) * Projects: rename Board to Column in interface and improve consistency (#22767) * Add user visibility in dashboard navbar (#22747) * Add .livemd as a markdown extension (#22730) * Clean up WebAuthn javascript code and remove JQuery code (#22697) * Merge message template support for rebase without merge commit (#22669) * Show editorconfig warnings when viewing a malformed editorconfig (#21257) * Npm packages: set repository link based on the url in package.json (#20379) * BUGFIXES * Add support for different Maven POM encoding (#25873) (#25890) * Fix incorrect repo url when changed the case of ownername (#25733) (#25881) * Fix empty project displayed in issue sidebar (#25802) (#25854) * Show correct SSL Mode on "install page" (#25818) (#25838) * Fix the error message when the token is incorrect (#25701) (#25836) * Fix incorrect oldest sort in project list (#25806) (#25835) * For API attachments, use API URL (#25639) (#25814) * Avoid amending the Rebase and Fast-forward merge if there is no message template (#25779) (#25809) * Make "install page" respect environment config (#25648) (#25799) * Fix activity type match in `matchPullRequestEvent` (#25746) (#25796) * Fix notification list bugs (#25781) (#25787) * Revert package access change from #23879 (#25707) (#25785) * Check `ctx.Written()` for `GetActionIssue` (#25698) (#25711) * Fix position of org follow button (#25688) (#25692) * Fix the nil pointer when assigning issues to projects (#25665) (#25677) * Log the real reason when authentication fails (but don't show the user) (#25414) (#25660) * Fix bug when change user name (#25637) (#25646) * Make "cancel" buttons have proper type in modal forms (#25618) (#25641) * Use AfterCommitId to get commit for Viewed functionality (#25529) (#25612) * Fix bug of branches API with tests(#25578) (#25579) * Fix content holes in Actions task logs file (#25560) (#25566) * Fix bugs related to notification endpoints (#25548) (#25562) * Add Adopt repository event and handler (#25497) (#25518) * Improve wiki sidebar and TOC (#25460) (#25477) * Make "dismiss" content shown correctly (#25461) (#25465) * Change default email domain for LDAP users (#25425) (#25434) * Fix missing commit message body when the message has leading newlines (#25418) (#25422) * Fix LDAP sync when Username Attribute is empty (#25278) (#25379) * Fetch all git data for embedding correct version in docker image (#25361) (#25373) * Fix incorrect actions ref_name (#25358) (#25367) * Write absolute AppDataPath to app.ini when installing (#25331) (#25347) * Fix incorrect config argument position for builtin SSH server (#25341) * Remove EasyMDE focus outline on text (#25328) (#25332) * Fix displayed RPM repo url (#25310) (#25313) * Fix index generation parallelly failure (#25235) (#25269) * Fix panic when migrating a repo from GitHub with issues (#25246) (#25247) * Fix task list checkbox toggle to work with YAML front matter (#25184) (#25227) * Fix compatible for webhook ref type (#25195) (#25223) * Hide limited users if viewed by anonymous ghost (#25214) (#25220) * Do not overwrite the log mode when installing (#25203) (#25209) * Fix fullscreen for action (#25200) (#25207) * Add `WithPullRequest` for `actionsNotifier` (#25144) (#25197) * Fix `MilestoneIDs` when querying issues (#25125) (#25141) * Fix incorrect git ignore rule and add missing license files (#25135) (#25138) * Remove incorrect element ID on "post-install" page (#25104) (#25129) * Fix 500 error caused by notifications without an issue such as repo transfers (#25101) * Help to recover from corrupted levelqueue (#24912) * Fix 500 error when select `No assignee` filter in issue list page (#24854) * Add validations.required check to dropdown field (#24849) * Reenable creating default webhooks. (#24626) * Fix incorrect user visibility (#24557) * Fix commits pushed with deploy keys not shown in dashboard (#24521) * Check length of `LogIndexes` in case it is outdated (#24516) * Fix incorrect CurrentUser check for docker rootless (#24441) * Fix some mistakes when using `ignSignIn` (#24415) * Fix incorrect CORS response in Http Git handler (#24303) * Fix issue attachment handling (#24202) * Make mention autocomplete case insensitive in new markdown editor (#24190) * Use 1.18's aria role for dropdown menus (#24144) * Fix internal sever error when visiting a PR that bound to the deleted team (#24127) * Add migration to fix external unit access mode of owner/admin team (#24117) * Show friendly 500 error page to users and developers (#24110) * Fix meilisearch not working when searching across multiple repositories (#24109) * Fix math and mermaid rendering bugs (#24049) * Remove "inverted" class on creating new label and cancel buttons (#24030) * Allow repo admins too to delete the repo (#23940) * Disable editing tags (#23883) * Fix review conversation reply (#23846) * Fix incorrect CORS failure detection logic (#23844) * Remove incorrect HTML self close tag (#23748) * Fix incorrect `toggle` buttons (#23676) * Introduce path Clean/Join helper functions (#23495) * Fix missed migration in #22235 (#23482) * Do not store user projects as organization projects (#23353) * Fix incorrect display for comment context menu (#23343) * Make Ctrl+Enter submit a pending comment (starting review) instead of submitting a single comment (#23245) * Fix submit button won't refresh in New Repository Fork page (#22994) * Remove stars when repo goes private (#19904) * TESTING * Add unit test for repository collaboration (#25640) (#25658) * Add missing test case and fix typo in tests (#24915) * Kd/fix redis unit test (#24650) * Add owner team permission check test (#24096) * Test renderReadmeFile (#23185) * Add default owner team to privated_org and limited_org in unit test (#23109) * Speed up HasUserStopwatch & GetActiveStopwatch (#23051) * Remove all package data after tests (#22984) * TRANSLATION * Backport locales to v1.20 (#25899) * Translate untranslated string in issues list (#25759) (#25761) * Remove broken translations (#25737) * Show correct naming for 1 comment (#25704) (#25712) * Add Chinese documentations for Actions (#24902) * Change `valid_until` translation to `valid_until_date` and include placeholder for the date (#24563) * Change `add_on` translation to `added_on` and include placeholder for the date (#24562) * Change `join_on` translation to `joined_on` and include placeholder for the date (#24550) * Use double quotes consistently in en-US (#24141) * Clarify Gitea/Crowdin locale behaviors, add tests for LocaleStore, fix some strings with semicolons (#23819) * Update localization.zh-cn.md (#23448) * Fix grammar in error message (#23273) * BUILD * Correct permissions for `.ssh` and `authorized_keys` (#25721) (#25730) * Upgrade snap to node 20 (#24990) * Use Go 1.20 for next release (#24859) * Ignore build for docs only (#24761) * Update cron-translations.yml (#24708) * Update to Alpine 3.18 (#24700) * Check latest version on CI (#24556) * Upgrade to Node 20 on CI, enable actions cancellation (#24524) * Mark `/templates/swagger/v1_json.tmpl` as generated file (#24306) * Enable forbidigo linter (#24278) * Introduce lint-md and compliance-docs pipeline (#24021) * Add eslint-plugin-custom-elements (#23991) * Update eslints for Vue 3 (#23935) * Improve backport-locales.go (#23807) * Don't run unnecessary steps when only docs changed (#23103) * DOCS * Docs: rootless docker ssh's default port is 2222 (#25771) (#25772) * Add documentation about supported workflow trigger events (#25582) (#25589) * Document creating an API key from the CLI (#25504) * Use the new download domain replace the old (#25405) (#25409) * Add Exoscale to installation on cloud provider docs (#25342) (#25346) * Improve some documents: release version, logging, NFS lock (#25202) (#25204) * Change branch name from master to main in some documents' links (#25126) (#25140) * Introduce how to configure cache when starting a Runner with Docker (#25077) * Docs: remove an extraneous whitespace (#24949) * Update Asciidoc markup example with safe defaults (#24920) * Fix \<empty\> in administration/config-cheat-sheet.en-us.md (#24905) * Rename docs packages title from xxx Packages Repository -> xxx Package Registry (#24895) * Replace `drone exec` to `act_runner exec` in test README.md (#24791) * Update packages overview page (#24730) * Docs for creating a user to run Gitea on Fedora/RHEL/CentOS (#24725) * Move actions as usage's subdirectory and update comparsion zh-cn version (#24719) * Document `redis-cluster` explicitly in config (#24717) * Improve reverse-proxy document and fix nginx config bug (#24616) * Fix broken `README` link (#24546) * Update `CONTRIBUTING.md` (#24492) * Docs for Gitea Actions (#24405) * Zh-cn support on doc pages (#24166) * Fix https setup doc zh-cn (#24015) * Adjust some documentations titles (#23941) * More specific and unique feed name for NuGet install command template. (#23889) * Clarify that Gitea requires JavaScript (#23677) * Rename develop -> development, contribute -> contributing, administer -> administration (#23662) * Update PR documentation (#23620) * Add package registry architecture overview (#23445) * Add gradle samples in maven doc of packages (#23374) * Improve the frontend guideline (#23298) * Add document for `webcomponents` (#23261) * Add Gitea Community Code of Conduct (#23188) * Avoid Hugo from adding quote to actions url (#23097) * Improve reverse proxies documentation (#23068) * Docs: HTTPS configuration for zh-cn (#23039) * MISC * Do not prepare oauth2 config if it is not enabled, do not write config in some sub-commands (#25567) (#25576) * Align language menu icon and fit the footer area (#25556) (#25563) * Fix sub-command log level (#25537) (#25553) * Fix admin-dl-horizontal (#25512) (#25535) * Fix input `line-height` cutting off `g` (#25334) (#25533) * Clarify the reason why the user can't add a new email if there is a pending activation (#25509) (#25514) * Improve loadprojects for issue list (#25468) (#25493) * Use "utf8mb4" for MySQL by default (#25432) * Show outdated comments in files changed tab (#24936) (#25428) * Avoid polluting config file when "save" (#25395) (#25406) * Fix blank dir message when uploading files from web editor (#25391) (#25400) * Fix issue filters on mobile view (#25368) (#25371) * Avoid polluting the config (#25345) (#25354) * Fix action runner last online state on edit page (#25337) * Remove fomantic inverted variations (#25286) (#25289) * Show OAuth2 errors to end users (#25261) (#25271) * Fix profile render when the README.md size is larger than 1024 bytes (#25270) * Fix strange UI behavior of cancelling dismiss review modal (#25172) * Update js dependencies (#25137) (#25151) * Fix swagger documentation for multiple files API endpoint (#25110) * Fix link to customizing-gitea (#25056) * Add Link to Stars and Forks Page to Repo List (#24931) * Improve confusable character string (#24911) * Fix install page context, make the install page tests really test (#24858) * Add gitea manager reload-templates command (#24843) * Create pull request for base after editing file, if not enabled on fork (#24841) * Fix video width overflow in markdown, and other changes to match img (#24834) * Support Copy Link for video attachments (#24833) * Improve accessibility when (re-)viewing files (#24817) * Update JS dependencies (#24815) * Bump vm2 from 3.9.17 to 3.9.18 (#24742) * Add IsErrRepoFilesAlreadyExist check when fork repo (#24678) * Fix typo in act-runner file (#24652) * Do not send "registration success email" for external auth sources (#24632) * Filter get single commit (#24613) * Make diff view full width again (#24598) * Add permission check for moving issue action in project view page (#24589) * Revert "Prevent a user with a different email from accepting the team invite" (#24531) * Temporarily disable PATs until next release (#24527) * Clean up polluted styles and remove dead CSS code (#24497) * Faster git.GetDivergingCommits (#24482) * Fix test delivery button in repo webhook settings page (#24478) * Use globally shared HTMLRender (#24436) * Changelog 1.19.2 (#24365) (#24403) * Fix layouts of admin table / adapt repo / email test (#24370) * Gitea Actions add `base_ref`, `head_ref`, `api_url`, `ref_type` fields (#24356) * Fix 404 error when leaving the last private org team (#24322) * Improve External Wiki in Repo Header (#24304) * Updated upgrade script that is informing user that Gitea service has to be running in order to upgrade it (#24260) * Add run status in action view page (#24223) * Update JS dependencies (#24218) * Bump vm2 from 3.9.15 to 3.9.16 (#24089) * Update github.com/google/go-github to v51 (#23946) * Show visibility status of email in own profile (#23900) * Refactor authors dropdown (send get request from frontend to avoid long wait time) (#23890) * Add self to maintainers (#23644) * Upgrade to npm lockfile v3 and explicitely set it (#23561) * Improve indices for `action` table (#23532) * Update JS dependencies, Require Node.js 16 (#23528) * Add init file for Ubuntu (#23362) * Update go.mod dependencies (#23126) * Use minio/sha256-simd for accelerated SHA256 (#23052) * More detailed branch delete message (#22696) * Add tooltips to `Hide comment type` settings where necessary (#21306)

v1.19.4   v1.19.4 * SECURITY * Fix open redirect check for more cases (#25143) (#25155) * API * Return `404` in the API if the requested webhooks were not found (#24823) (#24830) * Fix `organization` field being `null` in `GET /api/v1/teams/{id}` (#24694) (#24696) * ENHANCEMENTS * Set `--font-weight-bold` to 600 (#24840) * Make mailer SMTP check have timed context (#24751) (#24759) * Do not select line numbers when selecting text from the action run logs (#24594) (#24596) * BUGFIXES * Fix bug when change user name (#25637) (#25645) * Fix task list checkbox toggle to work with YAML front matter (#25184) (#25236) * Hide limited users if viewed by anonymous ghost (#25214) (#25224) * Add `WithPullRequest` for `actionsNotifier` (#25144) (#25196) * Fix parallelly generating index failure with Mysql (#24567) (#25081) * GitLab migration: Sanitize response for reaction list (#25054) (#25059) * Fix users cannot visit issue attachment bug (#25019) (#25027) * Fix missing reference prefix of commits when sync mirror repository (#24994) * Only validate changed columns when update user (#24867) (#24903) * Make DeleteIssue use correct context (#24885) * Fix topics deleted via API not being deleted in org page (#24825) (#24829) * Fix Actions being enabled accidentally (#24802) (#24810) * Fix missed table name on iterate lfs meta objects (#24768) (#24774) * Fix safari cookie session bug (#24772) * Respect original content when creating secrets (#24745) (#24746) * Fix Pull Mirror out-of-sync bugs (#24732) (#24733) * Fix run list broken when trigger user deleted (#24706) (#24709) * Fix issues list page multiple selection update milestones (#24660) (#24663) * Fix: release page for empty or non-existing target (#24659) * Fix close org projects (#24588) (#24591) * Refresh the refernce of the closed PR when reopening (#24231) (#24587) * Fix the permission of team's `Actions` unit issue (#24536) (#24545) * Bump go.etcd.io/bbolt and blevesearch deps (#23062) (#24519) * Fix new wiki page mirror (#24518) * Match unqualified references when syncing pulls as well (#23070) * DOCS * Change branch name from master to main in some documents' links (#25126) (#25139) * Remove unnecessary content on docs (#24976) (#25001) * Unify doc links to use paths relative to doc folder (#24979) (#25000) * Fix docs documenting invalid `@every` for `OLDER_THAN` cron settings (#24695) (#24698) * MISC * Merge different languages for language stats (#24900) (#24921) * Hiding Secrets options when Actions feature is disabled (#24792) * Improve decryption failure message (#24573) (#24575) * Makefile: Use portable !, not GNUish -not, with find(1). (#24565) (#24572)

v1.20.0-rc2   Third release candidate for 1.20

v1.20.0-rc1

v1.21.0-dev   v1.21.0-dev

v1.20.0-rc0

v1.19.3   * SECURITY * Use golang 1.20.4 to fix CVE-2023-24539, CVE-2023-24540, and CVE-2023-29400 * ENHANCEMENTS * Enable whitespace rendering on selection in Monaco (#24444) (#24485) * Improve milestone filter on issues page (#22423) (#24440) * BUGFIXES * Fix api error message if fork exists (#24487) (#24493) * Fix user-cards format (#24428) (#24431) * Fix incorrect CurrentUser check for docker rootless (#24435) * Getting the tag list does not require being signed in (#24413) (#24416)

v1.19.2   * SECURITY * Require repo scope for PATs for private repos and basic authentication (#24362) (#24364) * Only delete secrets belonging to its owner (#24284) (#24286) * API * Fix typo in API route (#24310) (#24332) * Fix access token issue on some public endpoints (#24194) (#24259) * ENHANCEMENTS * Fix broken clone script on an empty archived repo (#24339) (#24348) * Fix Monaco IOS keyboard button (#24341) (#24347) * Don't set meta `theme-color` by default (#24340) (#24346) * Wrap too long push mirror addresses (#21120) (#24334) * Add --font-weight-bold and set previous bold to 601 (#24307) (#24331) * Unify nightly naming across binaries and docker images (#24116) (#24308) * Fix footer display (#24251) (#24269) * Fix label color, fix divider in dropdown (#24215) (#24244) * Vertical widths of containers removed (#24184) (#24211) * Use correct locale key for forks page (#24172) (#24175) * Sort repo topic labels by name (#24123) (#24153) * Highlight selected file in the PR file tree (#23947) (#24126) * BUGFIXES * Fix auth check bug (#24382) (#24387) * Add tags list for repos whose release setting is disabled (#23465) (#24369) * Fix wrong error info in RepoRefForAPI (#24344) (#24351) * Fix no edit/close/delete button in org repo project view page (#24349) * Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) (#24333) * Remove org users who belong to no teams (#24247) (#24313) * Fix bug when deleting wiki with no code write permission (#24274) (#24295) * Handle canceled workflow as a warning instead of a fail (#24282) (#24292) * Load reviewer for comments when dismissing a review (#24281) (#24288) * Show commit history for closed/merged PRs (#24238) (#24261) * Fix owner team access mode value in team_unit table (#24224) * Fix issue attachment handling (#24202) (#24221) * Fix incorrect CORS default values (#24206) (#24217) * Fix template error in pull request with deleted head repo (#24192) (#24216) * Don't list root repository on compare page if pulls not allowed (#24183) (#24210) * Fix calReleaseNumCommitsBehind (#24148) (#24197) * Fix Org edit page bugs: renaming detection, maxlength (#24161) (#24171) * Update redis library to support redis v7 (#24114) (#24156) * Use 1.18's aria role for dropdown menus (#24144) (#24155) * Fix 2-dot direct compare to use the right base commit (#24133) (#24150) * Fix incorrect server error content in RunnersList (#24118) (#24121) * Fix mismatch between hook events and github event types (#24048) (#24091) * BUILD * Support converting varchar to nvarchar for mssql database (#24105) (#24168)

v1.19.1   * BREAKING * Rename actions unit to `repo.actions` and add docs for it (#23733) (#23881) * ENHANCEMENTS * Add card type to org/user level project on creation, edit and view (#24043) (#24066) * Refactor commit status for Actions jobs (#23786) (#24060) * Show errors for KaTeX and mermaid on the preview tab (#24009) (#24019) * Show protected branch rule names again (#23907) (#24018) * Adjust sticky PR header to cover background (#23956) (#23999) * Discolor pull request tab labels (#23950) (#23987) * Treat PRs with agit flow as fork PRs when triggering actions. (#23884) (#23967) * Left-align review comments (#23937) * Fix image border-radius (#23886) (#23930) * Scroll collapsed file into view (#23702) (#23929) * Fix code view (diff) broken layout (#23096) (#23918) * Org pages style fixes (#23901) (#23914) * Fix user profile description rendering (#23882) (#23902) * Fix review box viewport overflow issue (#23800) (#23898) * Prefill input values in OAuth settings as intended (#23829) (#23871) * CSS color tweaks (#23828) (#23842) * Fix incorrect visibility dropdown list in add/edit user page (#23804) (#23833) * Add CSS rules for basic colored labels (#23774) (#23777) * Add creation time in tag list page (#23693) (#23773) * Fix br display for packages curls (#23737) (#23764) * Fix issue due date edit toggle bug (#23723) (#23758) * Improve commit graph page UI alignment (#23751) (#23754) * Use GitHub Actions compatible globbing for `branches`, `tag`, `path` filter (#22804) (#23740) * Redirect to project again after editing it (#23326) (#23739) * Remove row clicking from notification table (#22695) (#23706) * Remove conflicting CSS rules on notifications, improve notifications table (#23565) (#23621) * Fix diff tree height and adjust target file style (#23616) * BUGFIXES * Improve error logging for LFS (#24072) (#24082) * Fix custom mailer template on Windows platform (#24081) * Update the value of `diffEnd` when clicking the `Show More` button in the DiffFileTree (#24069) (#24078) * Make label templates have consistent behavior and priority (#23749) * Fix accidental overwriting of LDAP team memberships (#24050) (#24065) * Fix branch protection priority (#24045) (#24061) * Use actions job link as commit status URL instead of run link (#24023) (#24032) * Add actions support to package auth verification (#23729) (#24028) * Fix protected branch for API (#24013) (#24027) * Do not escape space between PyPI repository URL and package name… (#23981) (#24008) * Fix redirect bug when creating issue from a project (#23971) (#23997) * Set `ref` to fully-formed of the tag when trigger event is `release` (#23944) (#23989) * Use Get/Set instead of Rename when regenerating session ID (#23975) (#23983) * Ensure RSS icon is present on all repo tabs (#23904) (#23973) * Remove `Repository.getFilesChanged` to fix Actions `paths` and `paths-ignore` filter (#23920) (#23969) * Delete deleted release attachments immediately from storage (#23913) (#23958) * Use ghost user if package creator does not exist (#23822) (#23915) * User/Org Feed render description as per web (#23887) (#23906) * Fix `cases.Title` crash for concurrency (#23885) (#23903) * Convert .Source.SkipVerify to $cfg.SkipVerify (#23839) (#23899) * Support "." char as user name for User/Orgs in RSS/ATOM/GPG/KEYS path ... (#23874) (#23878) * Fix JS error when changing PR's target branch (#23862) (#23864) * Fix 500 error if there is a name conflict when editing authentication source (#23832) (#23852) * Fix closed PR also triggers Webhooks and actions (#23782) (#23834) * Fix checks for `needs` in Actions (#23789) (#23831) * Fix "Updating branch by merge" bug in "update_branch_by_merge.tmpl" (#23790) (#23825) * Fix cancel button in the page of project edit not work (#23655) (#23813) * Don't apply the group filter when listing LDAP group membership if it is empty (#23745) (#23788) * Fix profile page email display, respect settings (#23747) (#23756) * Fix project card preview select and template select (#23684) (#23731) * Check LFS/Packages settings in dump and doctor command (#23631) (#23730) * Add git dashes separator to some "log" and "diff" commands (#23606) (#23720) * Create commit status when event is `pull_request_sync` (#23683) (#23691) * Fix incorrect `HookEventType` of pull request review comments (#23650) (#23678) * Fix incorrect `show-modal` and `show-panel` class (#23660) (#23663) * Improve workflow event triggers (#23613) (#23648) * Introduce path Clean/Join helper functions, partially backport&refactor (#23495) (#23607) * Fix pagination on `/notifications/watching` (#23564) (#23603) * Fix submodule is nil panic (#23588) (#23601) * Polyfill the window.customElements (#23592) (#23595) * Avoid too long names for actions (#23162) (#23190) * TRANSLATION * Backport locales (with manual fixes) (#23808, #23634, #24083) * BUILD * Hardcode the path to docker images (#23955) (#23968) * DOCS * Update documentation to explain which projects allow Gitea to host static pages (#23993) (#24058) * Merge `push to create`, `open PR from push`, and `push options` docs articles into one (#23744) (#23959) * Fix code blocks in the cheat sheet (#23664) (#23669) * MISC * Do not crash when parsing an invalid workflow file (#23972) (#23976) * Remove assertion debug code for show/hide refactoring (#23576) (#23868) * Add ONLY_SHOW_RELEVANT_REPOS back, fix explore page bug, make code more strict (#23766) (#23791) * Make minio package support legacy MD5 checksum (#23768) (#23770) * Improve template error reporting (#23396) (#23600)

v1.19.0   * BREAKING * Add loading yaml label template files (#22976) (#23232) * Make issue and code search support camel case for Bleve (#22829) * Repositories: by default disable all units except code and pulls on forks (#22541) * Support template for merge message description (#22248) * Remove ONLY_SHOW_RELEVANT_REPOS setting (#21962) * Implement actions (#21937) * Remove deprecated DSA host key from Docker Container (#21522) * Improve valid user name check (#20136) * SECURITY * Return 404 instead of 403 if user can not access the repo (#23155) (#23158) * Support scoped access tokens (#20908) * FEATURES * Add support for commit cross references (#22645) * Scoped labels (#22585) * Add Chef package registry (#22554) * Support asciicast files as new markup (#22448) * cgo cross-compile for freebsd (#22397) * Add cron method to gc LFS MetaObjects (#22385) * Add new captcha: cloudflare turnstile (#22369) * Enable `@<user>`- completion popup on the release description textarea (#22359) * make /{username}.png redirect to user/org avatar (#22356) * Add Conda package registry (#22262) * Support org/user level projects (#22235) * Add Mermaid copy button (#22225) * Add user secrets (#22191) * Secrets storage with SecretKey encrypted (#22142) * Preview images for Issue cards in Project Board view (#22112) * Add support for incoming emails (#22056) * Add Cargo package registry (#21888) * Add option to prohibit fork if user reached maximum limit of repositories (#21848) * Add attention blocks within quote blocks for `Note` and `Warning` (#21711) * Add Feed for Releases and Tags (#21696) * Add package registry cleanup rules (#21658) * Add "Copy" button to file view of raw text (#21629) * Allow disable sitemap (#21617) * Add package registry quota limits (#21584) * Map OIDC groups to Orgs/Teams (#21441) * Keep languages defined in .gitattributes (#21403) * Add Webhook authorization header (#20926) * Supports wildcard protected branch (#20825) * Copy citation file content, in APA and BibTex format, on repo home page (#19999) * API * Match api migration behavior to web behavior (#23552) (#23573) * Purge API comment (#23451) (#23452) * User creation API: allow custom "created" timestamps (#22549) * Add `updated_at` field to PullReview API object (#21812) * Add API management for issue/pull and comment attachments (#21783) * Add API endpoint to get latest release (#21267) * Support system hook API (#14537) * ENHANCEMENTS * Add `.patch` to `attachment.ALLOWED_TYPES` (#23580) (#23582) * Fix sticky header in diff view (#23554) (#23568) * Refactor merge/update git command calls (#23366) (#23544) * Fix review comment context menu clipped bug (#23523) (#23543) * Imrove scroll behavior to hash issuecomment(scroll position, auto expand if file is folded, and on refreshing) (#23513) (#23540) * Increase horizontal page padding (#23507) (#23537) * Use octicon-verified for gpg signatures (#23529) (#23536) * Make time tooltips interactive (#23526) (#23527) * Replace Less with CSS (#23508) * Fix 'View File' button in code search (#23478) (#23483) * Convert GitHub event on actions and fix some pull_request events. (#23037) (#23471) * Support reflogs (#22451) (#23438) * Fix actions frontend bugs (pagination, long name alignment) and small simplify (#23370) (#23436) * Scoped label display and documentation tweaks (#23430) (#23433) * Add missing tabs to org projects page (#22705) (#23412) * Fix and move "Use this template" button (#23398) (#23408) * Handle OpenID discovery URL errors a little nicer when creating/editing sources (#23397) (#23403) * Rename `canWriteUnit` to `canWriteProjects` (#23386) (#23399) * Refactor and tidy-up the merge/update branch code (#22568) (#23365) * Refactor `setting.Database.UseXXX` to methods (#23354) (#23356) * Fix incorrect project links and use symlink icon for org-wide projects (#23325) (#23336) * Fix PR view misalignment caused by long name file (#23321) (#23335) * Scoped labels: don't require holding alt key to remove (#23303) (#23331) * Add context when rendering labels or emojis (#23281) (#23319) * Change interactiveBorder to fix popup preview (#23169) (#23314) * Scoped labels: set aria-disabled on muted Exclusive option for a11y (#23306) (#23311) * update to mermaid v10 (#23178) (#23299) * Fix code wrap for unbroken lines (#23268) (#23293) * Use async await to fix empty quote reply at first time (#23168) (#23256) * Fix switched citation format (#23250) (#23253) * Allow `<video>` in MarkDown (#22892) (#23236) * Order pull request conflict checking by recently updated, for each push (#23220) (#23225) * Fix Fomantic UI's `touchstart` fastclick, always use `click` for click events (#23065) (#23195) * Add word-break to sidebar-item-link (#23146) (#23180) * Add InsecureSkipVerify to Minio Client for Storage (#23166) (#23177) * Fix height for sticky head on large screen on PR page (#23111) (#23123) * Change style to improve whitespaces trimming inside inline markdown code (#23093) (#23120) * Avoid warning for system setting when start up (#23054) (#23116) * Add accessibility to the menu on the navbar (#23059) (#23095) * Improve accessibility for issue comments (#22612) (#23083) * Remove delete button for review comment (#23036) * Remove dashes between organization member avatars on hover (#23034) * Use `gt-relative` class instead of the ambiguous `gt-pr` class (#23008) * handle deprecated settings (#22992) * Add scopes to API to create token and display them (#22989) * Improve PR Review Box UI (#22986) * Improve issues.LoadProject (#22982) * Add all units to the units permission list in org team members sidebar (#22971) * Rename `GetUnits` to `LoadUnits` (#22970) * Rename `repo.GetOwner` to `repo.LoadOwner` (#22967) * Rename "People" to "Members" in organization page and use a better icon (#22960) * Fix avatar misalignment (#22955) * Sort issues and pulls by recently updated in user and organization home (#22925) * Add `title` to PR file tree items (#22918) * First step to refactor the `.hide` to `.gt-hidden` (#22916) * Add tooltip to issue reference (#22913) * Always show the `command line instructions` button even if there are conflicts (#22909) * Fix dark-colored description text in arc-green theme (#22908) * Remove Fomantic-UI's `.hidden` CSS class for menu elements (#22895) * Move helpers to be prefixed with `gt-` (#22879) * Move `IsReadmeFile*` from `modules/markup/` to `modules/util` (#22877) * Highlight focused diff file (#22870) * Add some headings to repo views (#22869) * Fix milestone title font problem (#22863) * Pull Requests: setting to allow edits by maintainers by default, tweak UI (#22862) * Introduce customized HTML elements, fix incorrect AppUrl usages in templates (#22861) * Add `/$count` endpoints for NuGet v2 (#22855) * Remove Fomantic-UI's `.hidden` CSS class for checkbox elements (#22851) * Fix notification and stopwatch empty states (#22845) * Always go full width in PR view (#22844) * Improve AppUrl/ROOT_URL checking (#22836) * Fix style of actions rerun button (#22835) * Fix more HTMLURL in templates (#22831) * Fix inconsistent Filter Project name in issue list (#22827) * include build info in Prometheus metrics (#22819) * Make clone URL use current page's host (#22808) * Refactor legacy strange git operations (#22756) * Improve error report when user passes a private key (#22726) * set user dashboard org visibility to basic (#22706) * Fix diff UI for unexpandable items (#22700) * Remove 'primary' class from tab counter labels (#22687) * Add more events details supports for actions (#22680) * Refactor git command package to improve security and maintainability (#22678) * Use relative url in actions view (#22675) * set user visibility class to basic (#22674) * Add repository setting to enable/disable releases unit (#22671) * Remove label color from global issue filters (#22660) * Fix poor alignment of organization description on organization home page (#22656) * Small refactor for loading PRs (#22652) * Allow setting access token scope by CLI (#22648) * Improve accessibility of navigation bar and footer (#22635) * Fixes accessibility behavior of Watching, Staring and Fork buttons (#22634) * Fixes accessibility of empty repository commit status (#22632) * Pull request yaml template support for including commit body in a field (#22629) * Show migration validation error (#22619) * set org visibility class to basic in header (#22605) * Fix cache-control header clearing comment text when editing issue (#22604) * Add ARIA support for Fomantic UI checkboxes (#22599) * Add templates to customize text when creating and migrating repositories (#22597) * Allow setting `redirect_to` cookie on OAuth login (#22594) * Improve checkbox accessibility a bit by adding the title attribute (#22593) * Allow issue templates to not render title (#22589) * Webhooks: for issue close/reopen action, add commit ID that caused it (#22583) * Fix missing title and filter in issue sidebar project menu (#22557) * Issues: support setting issue template field values with query (#22545) * Issues: add Project filter to issues list and search (#22544) * Pull Requests: add color to approved/reject icon in pull requests list (#22543) * Mute all links in issue timeline (#22533) * Dropzone: Add "Copy link" button for new uploads (#22517) * Support importing comment types (#22510) * Load asciicast css async (#22502) * Move delete user to service (#22478) * Change use of Walk to WalkDir to improve disk performance (#22462) * Add reply hint to mail text (#22459) * fix wrong theme class when logged out if default theme is changed (#22408) * Refactor the setting to make unit test easier (#22405) * Improve utils of slices (#22379) * Use context parameter in models/git (#22367) * Always reuse transaction (#22362) * Fix unstable emoji sort (#22346) * Add context cache as a request level cache (#22294) * Reminder for no more logs to console (#22282) * Support estimated count with multiple schemas (#22276) * Move `convert` package to services (#22264) * Use dynamic package type list (#22263) * Hide file borders on sticky diff box (#22217) * Improve notification and stopwatch styles (#22169) * Fixed Project view .board-column height for tall screens. (#22108) * Use multi reader instead to concat strings (#22099) * Use git command instead of exec.Cmd in blame (#22098) * Fix autofilled text visibility in dark mode (#22088) * Rename almost all Ctx functions (#22071) * Rename actions to operations on UI (#22067) * refactor bind functions based on generics (#22055) * Support disabling database auto migration (#22053) * remove duplicated read file code (#22042) * Use link in UI which returned a relative url but not html_url which contains an absolute url (#21986) * Skip initing disabled storages (#21985) * Add doctor command for full GC of LFS (#21978) * Util type to parse ref name (#21969) * Replace fmt.Sprintf with hex.EncodeToString (#21960) * Use random bytes to generate access token (#21959) * Add index for access_token (#21908) * Move all remaining colors into CSS variables (#21903) * Webhook list enhancements (#21893) * Embed Matrix icon as SVG (#21890) * Remove useless "Cancel" buttons (#21872) * fix(web): keep the pages of the navigation in the center (#21867) * fix(web): reduce page jitter on browsers that support overlay scrollbar (#21850) * Improvements for Content Copy (#21842) * Tweak katex options (#21828) * Show syntax lexer name in file view/blame (#21814) * Remove `href="javascript:;"` in "save topics (Done)" button (#21813) * Render number of commits in repo page in a user friendly way (#21786) * Adjust clone timeout error to suggest increasing timeout (#21769) * Update message of reach_limit_of_creation (#21757) * Allow detect whether it's in a database transaction for a context.Context (#21756) * Add configuration for CORS allowed headers (#21747) * Move svg html render to modules/svg (#21716) * Release and Tag List tweaks (#21712) * Remove template previewer (#21701) * Clean up formatting on install page (#21668) * Configure update checker on installation page (#21655) * Merge db.Iterate and IterateObjects (#21641) * Add option to enable CAPTCHA validation for login (#21638) * Allow disable RSS/Atom feed (#21622) * Use CSS color-scheme instead of invert (#21616) * Localize time units on activity heatmap (#21570) * Fix UI column width, button overflow Fomantic's grid (#21559) * feat: notify doers of a merge when automerging (#21553) * Split migrations folder (#21549) * feat: add button to quickly clear merge message (#21548) * Add `context.Context` to more methods (#21546) * Add index for hook_task table (#21545) * Allow disable code tab (#20805) * BUGFIXES * Fix template error when reference Project (#23584) * Fix dropdown icon misalignment when using fomantic icon (#23558) (#23577) * Fix diff detail buttons wrapping, use tippy for review box (#23271) (#23546) * Handle missing `README` in create repos API (#23387) (#23510) * Disable sending email after push a commit to a closed PR (#23462) (#23492) * Fix aria.js bugs: incorrect role element problem, mobile focus problem, tippy problem (#23450) (#23486) * Fix due date being wrong on issue list (#23475) (#23477) * Remove wrongly added column on migration test fixtures (#23456) (#23470) * Make branches list page operations remember current page (#23420) (#23460) * Fix missing commit status in PR which from forked repo (#23351) (#23453) * Show edit/close/delete button on organization wide repositories (#23388) (#23429) * Preserve file size when creating attachments (#23406) (#23426) * Fix broken Chroma CSS styles (#23174) (#23402) * Fix incorrect NotFound conditions in org/projects.go (#23384) (#23395) * Set `X-Gitea-Debug` header once (#23361) (#23381) * Pass context to avatar for projects view (#23359) (#23378) * Fix panic when getting notes by ref (#23372) (#23377) * Do not recognize text files as audio (#23355) (#23368) * Fix adding of empty class name (#23352) (#23360) * Fix various ImageDiff/SVG bugs (#23312) (#23358) * Fix incorrect display for comment context menu (#23343) (#23344) * Remove unnecessary space on link (#23334) (#23340) * Fix incorrect redirect link of delete org project (#23327) (#23339) * Fix cannot reopen after pushing commits to a closed PR (#23189) (#23324) * Fix broken code editor diff preview (#23307) (#23320) * Support sanitising the URL by removing extra slashes in the URL (#21333) (#23300) * Avoid panic caused by broken payload when creating commit status (#23216) (#23294) * Fill head commit to in payload when notifying push commits for mirroring (#23215) (#23292) * Fix various bugs for "install" page (#23194) (#23286) * Fix GetFilesChangedBetween if the file name may be escaped (#23272) (#23279) * Revert relative links to absolute links in mail templates (#23267) (#23269) * Fix commit retrieval by tag (#21804) (#23266) * Use correct README link to render the README (#23152) (#23264) * Close the temp file when dumping database to make the temp file can be deleted on Windows (#23249) (#23251) * Use the correct selector to hide the checkmark of selected labels on clear (#23224) (#23228) * Fix incorrect checkbox behaviors in the dashboard repolist's filter (#23147) (#23205) * Properly flush unique queues on startup (#23154) (#23201) * Pass `--global` when calling `git config --get`, for consistency with `git config --set` (#23157) (#23199) * Make `gitea serv` respect git binary home (#23138) (#23197) * Change button text for commenting and closing an issue at the same time (#23135) (#23182) * Fix DBConsistency checks on MSSQL (#23132) (#23134) * Show empty repos in Admin Repository Management page (#23114) (#23130) * Redirect to the commit page after applying patch (#23056) (#23127) * Fix nil context in RenderMarkdownToHtml (#23092) (#23108) * Make issue meta dropdown support Enter, confirm before reloading (#23014) (#23102) * Fix SyncOnCommit always return false in API of push_mirrors (#23088) (#23100) * Fix commit name in Apply Patch page (#23086) (#23099) * Fix some more hidden problems (#23074) (#23075) * Bump golang.org/x/net from 0.4.0 to 0.7.0 (#22980) * Get rules by id when editing branch protection rule (#22932) * Fix panic when call api (/repos/{owner}/{repo}/pulls/{index}/files) (#22921) * Increase Content field size of gpg_import_key to MEDIUMTEXT (#22897) * Fix hidden commit status on multiple checks (#22889) * Fix update by rebase being wrongly disabled by protected base branch (#22825) * Make issue title edit buttons focusable and fix incorrect ajax requests (#22807) * Fix rerun button of Actions (#22798) * remove update language in ProfilePost (#22748) * Do not overwrite empty DefaultBranch (#22708) * Fix ref to trigger Actions (#22679) * Fix time to NotifyPullRequestSynchronized (#22650) * Show all projects, not just repo projects and open/closed projects (#22640) * Project links should use parent link methods (#22587) * Fix group filter for ldap source sync (#22506) * Check quota limits for container uploads (#22450) * Fix halfCommitter and WithTx (#22366) * Attempt to fix TestExportUserGPGKeys (#22159) * Fix heatmap first color being unused (#22157) * Fix scroll over mermaid frame (#21925) * Move migration test fixtures to the correct directories (#21901) * fix(web): add `alt` for logo in home page (#21887) * Fix webhook attachment text is not set in review comment (#21763) * Alter package_version.metadata_json to LONGTEXT (#21667) * Ensure that Webhook tasks are not double delivered (#21558) * TESTING * Make CI use a dummy password hasher for all tests (#22983) * Disable test for incoming email (#22686) * Move fuzz tests into tests/fuzz (#22376) * Test views of LFS files (#22196) * Specify ID in `TestAPITeam` (#22192) * verify nodeinfo response by schema (#22137) * Skip GitHub migration tests if the API token is undefined (#21824) * Add a simple test for external renderer (#20033) * TRANSLATION * Use "Title Case" for text "Reference in new issue" (#22936) * BUILD * Wrap unless-check in docker manifests (#23079) (#23081) * Adjust manifest to prevent tagging latest on rcs (#22811) * update to build with go1.20 (#22732) * Add Bash and Zsh completion scripts (#22646) * Add Contributed backport command (#22643) * Remove deprecated packages & staticcheck fixes (#22012) * Update to Alpine 3.17 (#21904) * Fix webpack license warning (#21815) * DOCS * Update documentation for the new YAML label file format (#23020) (#23341) * Update hacking-on-gitea-zh_cn documentation (#23315) (#23323) * Add basic documentation for labels, including scoped labels (#23304) (#23309) * Re-add accidentally removed `hacking-on-gitea.zh-cn.md` (#23297) (#23305) * Fix secrets overview page missing from docs sidebar (#23143) (#23145) * Add some guidelines for refactoring (#22880) * Explain that the no-access team unit does not affect public repositories (#22661) * Fix incorrect Redis URL snippets in the example app.ini (#22573) * docs: add swagger.json file location to FAQ (#22489) * Update index.de-de.md (#22363) * Update Gmail mailer configuration (#22291) * Add missed reverse proxy authentication documentation (#22250) * Add plural definitions for German translations (#21802) * Attempt clarify AppWorkPath etc. (#21656) * Add some documentation to packages (#21648) * MISC * Use `<nav>` instead of `<div>` in the global navbar (#23125) (#23533) * Do not create commit graph for temporary repos (#23219) (#23229) * Update button is shown when a Pull Request is marked WIP - Issue #21740 (#22683) * Add main landmark to templates and adjust titles (#22670) * Fix error on account activation with wrong passwd (#22609) * Update JS dependencies (#22538) * Display unreferenced packages total size in package admin panel (#22498) * Mobile fix for Project view: Add delay to Sortable.js on mobile, to ensure scrolling is possible. (#22152) * Update chroma to v2.4.0 (#22000) * Hide collapse icon in diff with no lines (#21094)

v1.19.0-rc1   Second release candidate for 1.19.0

v1.20.0-dev   v1.20.0-dev

v1.19.0-rc0   v1.19.0-rc0

v1.18.5   * ENHANCEMENTS * Hide 2FA status from other members in organization members list (#22999) (#23023) * BUGFIXES * Add force_merge to merge request and fix checking mergable (#23010) (#23032) * Use `--message=%s` for git commit message (#23028) (#23029) * Render access log template as text instead of HTML (#23013) (#23025) * Fix the Manually Merged form (#23015) (#23017) * Use beforeCommit instead of baseCommit (#22949) (#22996) * Display attachments of review comment when comment content is blank (#23035) (#23046) * Return empty url for submodule tree entries (#23043) (#23048)

v1.18.4   * SECURITY * Provide the ability to set password hash algorithm parameters (#22942) (#22943) * Add command to bulk set must-change-password (#22823) (#22928) * ENHANCEMENTS * Use import of OCI structs (#22765) (#22805) * Fix color of tertiary button on dark theme (#22739) (#22744) * Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642) * BUGFIXES * Notify on container image create (#22806) (#22965) * Fix blame view missing lines (#22826) (#22929) * Fix incorrect role labels for migrated issues and comments (#22914) (#22923) * Fix PR file tree folders no longer collapsing (#22864) (#22872) * Escape filename when assemble URL (#22850) (#22871) * Fix isAllowed of escapeStreamer (#22814) (#22837) * Load issue before accessing index in merge message (#22822) (#22830) * Improve trace logging for pulls and processes (#22633) (#22812) * Fix restore repo bug, clarify the problem of ForeignIndex (#22776) (#22794) * Add default user visibility to cli command "admin user create" (#22750) (#22760) * Escape path for the file list (#22741) (#22757) * Fix bugs with WebAuthn preventing sign in and registration. (#22651) (#22721) * Add missing close bracket in imagediff (#22710) (#22712) * Move code comments to a standalone file and fix the bug when adding a reply to an outdated review appears to not post(#20821) (#22707) * Fix line spacing for plaintext previews (#22699) (#22701) * Fix wrong hint when deleting a branch successfully from pull request UI (#22673) (#22698) * Fix README TOC links (#22577) (#22677) * Fix missing message in git hook when pull requests disabled on fork (#22625) (#22658) * Improve checkIfPRContentChanged (#22611) (#22644) * Prevent duplicate labels when importing more than 99 (#22591) (#22598) * Don't return duplicated users who can create org repo (#22560) (#22562) * BUILD * Upgrade golangcilint to v1.51.0 (#22764) * MISC * Use proxy for pull mirror (#22771) (#22772) * Use `--index-url` in PyPi description (#22620) (#22636)

v1.18.3   * SECURITY * Prevent multiple `To` recipients (#22566) (#22569) * BUGFIXES * Truncate commit summary on repo files table. (#22551) (#22552) * Mute all links in issue timeline (#22534)

v1.18.2   * BUGFIXES * When updating by rebase we need to set the environment for head repo (#22535) (#22536) * Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521) * Fix invalid issue branch reference if not specified in template (#22513) (#22520) * Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515) * Reliable selection of admin user (#22509) (#22511) * Set disable_gravatar/enable_federated_avatar when offline mode is true (#22479) (#22496) * BUILD * cgo cross-compile for freebsd (#22397) (#22519)