• SECURITY
  • Respect approved email domain list for externally validated user registration (#15014)
  • Add reverse proxy configuration support for remote IP address detection (#14959)
  • Ensure validation occurs on clone addresses too (#14994)
• BREAKING
  • Fix double 'push tag' action feed (#15078) (#15083)
  • Remove possible resource leak (#15067) (#15082)
  • Handle unauthorized user events gracefully (#15071) (#15074)
  • Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (#14475)
  • Migrate from Macaron to Chi framework (#14293)
  • Deprecate building for mips (#14174)
  • Consolidate Logos and update README header (#14136)
  • Inline manifest.json (#14038)
  • Store repository data in data path if not previously set (#13991)
  • Rename "gitea" png to "logo" (#13974)
  • Standardise logging of failed authentication attempts in internal SSH (#13962)
  • Add markdown support in organization description (#13549)
  • Improve users management through the CLI (#6001) (#10492)
• FEATURES
  • Create a new issue with reference to lines of code from file view (#14863)
  • Repository transfer has to be confirmed, if user can not create repo for new owner (#14792)
  • Allow blocking some email domains from registering an account (#14667)
  • Create a new issue based on reference to an issue comment (#14366)
  • Add support to migrate from gogs (#14342)
  • Add pager to the branches page (#14202)
  • Minimal OpenID Connect implementation (#14139)
  • Display current stopwatch in navbar (#14122)
  • Display SVG files as images instead of text (#14101)
  • Disable SSH key deletion of externally managed Keys (#13985)
  • Add support for ed25519_sk and ecdsa_sk SSH keys (#13462)
  • Add support for Mastodon OAuth2 provider (#13293)
  • Add gitea sendmail command (#13079)
  • Create DB session provider(based on xorm) (#13031)
  • Add dismiss review feature (#12674)
  • Make manual merge autodetection optional and add manual merge as merge method (#12543)
  • Dump github/gitlab/gitea repository data to a local directory and restore to gitea (#12244)
  • Create Rootless Docker image (#10154)
• API
  • Speedup issue search (#15179) (#15192)
  • Get pull, return head branch sha, even if deleted (#14931)
  • Export LFS & TimeTracking function status (#14753)
  • Show Gitea version in swagger (#14654)
  • Fix PATCH /repos/{owner}/{repo} panic (#14637)
  • Add Restricted Field to User (#14630)
  • Add support for ref parameter to get raw file API (#14602)
  • Add affected files of commits to commit struct (#14579)
  • Fix CJK fonts again and misc. font issues (#14575)
  • Add delete release by tag & delete tag (#14563) & (#13358)
  • Add pagination to ListBranches (#14524)
  • Add signoff option in commit form (#14516)
  • GetRelease by tag only return release (#14397)
  • Add MirrorInterval to the API (#14163)
  • Make BasicAuth Prefix case insensitive (#14106)
  • Add user filter to issueTrackedTimes, enable usage for issue managers (#14081)
  • Add ref to create/edit issue options & deprecated assignee (#13992)
  • Add Ref to Issue (#13946)
  • Expose default theme in meta and API (#13809)
  • Send error message when CSRF token is missing (#13676)
  • List, Check, Add & delete endpoints for repository teams (#13630)
  • Admin EditUser: Make FullName, Email, Website & Location optional (#13562)
  • Add more filters to issues search (#13514)
  • Add review request api (#11355)
• BUGFIXES
  • Fix delete nonexist oauth application 500 and prevent deadlock (#15384) (#15396)
  • Always set the merge base used to merge the commit (#15352) (#15385)
  • Upgrade to bluemonday 1.0.7 (#15379) (#15380)
  • Turn RepoRef and RepoAssignment back into func(*Context) (#15372) (#15377)
  • Move FCGI req.URL.Path fix-up to the FCGI listener (#15292) (#15361)
  • Show diff on rename with diff changes (#15338) (#15339)
  • Fix handling of logout event (#15323) (#15337)
  • Fix CanCreateRepo check (#15311) (#15321)
  • Fix xorm log stack level (#15285) (#15316)
  • Fix bug in Wrap (#15302) (#15309)
  • Drop the event source if we are unauthorized (#15275) (#15280)
  • Backport Fix graph pagination (#15225) (#15249)
  • Prevent NPE in CommentMustAsDiff if no hunk header (#15199) (#15200)
  • should run RetrieveRepoMetas() for empty pr (#15187) (#15190)
  • Move setting to enable closing issue via commit in non default branch to repo settings (#14965)
  • Show correct issues for team dashboard (#14952)
  • Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (#14932)
  • Only allow issue labels from owner repository or organization (#14928)
  • Fix alignment of People and Teams right arrow on org homepage (#14924)
  • Fix overdue marking of closed issues and milestones (#14923)
  • Prevent panic when empty MilestoneID in repo/issue/list (#14911)
  • Fix migration context data (#14910)
  • Handle URLs with trailing slash (#14852)
  • Add CORS config on to /login/oauth/access_token endpoint (#14850)
  • Make searching issues by keyword case insensitive on DB (#14848)
  • Prevent use of double sub-path and incorrect asset path in manifest (#14827)
  • Fix link account ui (#14763)
  • Fix preview status switch button on wiki editor (#14742)
  • Fix github download on migration (#14703)
  • Fix svg spacing (#14638)
  • Prevent adding nil label to .AddedLabels or .RemovedLabels (#14623)
  • Truncated organizations name (#14615)
  • Exclude the current dump file from the dump (#14606)
  • Use OldRef instead of CommitSHA for DeleteBranch comments (#14604)
  • Ensure memcache caching works when TTL greater than 30 days (#14592)
  • Remove NULs byte arrays passed to PostProcess (#14587)
  • Restore detection of branches are equal on compare page (#14586)
  • Fix incorrect key name so registerManualConfirm works (#14455)
  • Fix close/reopen with comment (#14436)
  • Allow passcode invalid error to appear (#14371)
  • Escape branch names in compare url (#14364)
  • Label and milestone webhooks on issue/pull creation (#14363)
  • Handle NotifyCreateRef as create branch in feeds (#14245)
  • Prevent clipping input text in Chrome + Segoe UI Font (#14179)
  • Fix UI on edit auth source page (#14137)
  • Fix git.parseTagData (#14105)
  • Refactor get tag to remove unnecessary steps (#14058)
  • Fix integrations test error with space in CURDIR path (#14056)
  • Dropdown triangle fixes (#14028)
  • Fix label of --id in admin delete user (#14005)
  • Cause NotifyMigrateRepository to emit a repo create webhook (#14004)
  • Update HEAD to match defaultBranch in template generation (#13948)
  • Fix action avatar loading (#13909)
  • Fix issue participants (#13893)
  • Fix avatar template error (#13833)
  • Fix review request notification email links when external issue tracker is enabled (#13723)
  • Fix blame line alignment (#13542)
  • Include OriginalAuthor in Reaction constraint (#13505)
  • Comments on review should have the same sha (#13448)
  • Fix whitespace rendering in diff (#13415)
  • Fixed git args duplication (#13411)
  • Fix bug on release publisherid migrations (#13410)
  • Fix --port setting (#13288)
  • Keep database transactions not too big (#13254)
  • Git version check, ignore pre-releases constraints (#13234)
  • Handle and propagate errors when checking if paths are Dirs, Files or Exist (#13186)
  • Update Mirror IsEmpty status on synchronize (#13185)
  • Use GO variable in go-check target (#13146) (#13147)
• ENHANCEMENTS
  • UI style improvements
  • Dropzone styling improvements (#15291) (#15374)
  • Add size to Save function (#15264) (#15270)
  • Monaco improvements (#15333) (#15345)
  • Support .mailmap in code activity stats (#15009)
  • Sort release attachments by name (#15008)
  • Add ui.explore settings to control view of explore pages (#14094)
  • Make internal SSH server host key path configurable (#14918)
  • Hide resync all ssh principals when using internal ssh server (#14904)
  • Add SameSite setting for cookies (#14900)
  • Move Bleve and Elastic code indexers to use a common cat-file --batch (#14781)
  • Add environment-to-ini to docker image (#14762)
  • Add preview support for wiki editor when disable simpleMDE (#14757)
  • Add easyMDE(simpleMDE) support for release content editor (#14744)
  • Organization removal confirmation using name not password (#14738)
  • Make branch names in PR description clickable (#14716)
  • Add Password Algorithm option to install page (#14701)
  • Add fullTextSearch to dropdowns by default (#14694)
  • Fix truncated organization names (#14655)
  • Whitespace in commits (#14650)
  • Sort / move project boards (#14634)
  • Make fileheader sticky in diffs (#14616)
  • Add helper descriptions on new repo page (#14591)
  • Move the stopwatches to the eventsource stream (#14588)
  • Add Content-Length header to HEAD requests (#14542)
  • Add Image Diff options in Diff view (#14450)
  • Improve Description in new/ edit Project template (#14429)
  • Allow ssh-keygen on Windows to detect ssh key type (#14413)
  • Display error if twofaSecret cannot be retrieved (#14372)
  • Sort issue search results by revelance (#14353)
  • Implement ghost comment mitigation (#14349)
  • Upgrade blevesearch dependency to v2.0.1 (#14346)
  • Add edit, delete and reaction support to code review comments on issue page (#14339)
  • Merge default and system webhooks under one menu (#14244)
  • Add option for administrator to reset user 2FA (#14243)
  • Add option to change username to the admin panel (#14229)
  • Check for 'main' as potential default branch name (#14193)
  • Project: show referenced PRs in issue cards (#14183)
  • Use caddy's certmagic library for extensible/robust ACME handling (#14177)
  • CLI support for OAuth sources custom icons (#14166)
  • Custom icons for OAuth sources (#14161)
  • Team dashboards (#14159)
  • KanBan: be able to set default board (#14147)
  • Disable Fomantic's custom scrollbars (#14109)
  • Add UI to delete tracked times (#14100)
  • Rework heatmap permissions (#14080)
  • Issue and pull request filters on organization dashboard (#14072)
  • Fix webhook list styling (#14001)
  • Show dropdown with all statuses for commit (#13977)
  • Show status check for merged PRs (#13975)
  • Diff stat improvements (#13954)
  • Report permissions denied in internal SSH (#13953)
  • Markdown task list improvements (#13952)
  • Heatmap days clickable (#13935)
  • chore: use octicon-mirror for feeds display (#13928)
  • Move diff split code into own template file (#13919)
  • Markdown: Enable wrapping in code blocks and a color tweak (#13894)
  • Do not reload page after adding comments in Pull Request reviews (#13877)
  • Add pull request manually merge instruction (#13840)
  • add thumbnail preview section to issue attachments (#13826)
  • Move Repo APIFormat to convert package (#13787)
  • Move notification APIFormat (#13783)
  • Swap swagger-ui with swagger-ui-dist (#13777)
  • User Settings: Ignore empty language codes & validate (#13755)
  • Improve migrate page and add card CSS (#13751)
  • Add block on official review requests branch protection (#13705)
  • Add review requested filter on pull request overview (#13701)
  • Use chronological commit order in default squash message (#13696)
  • Clickable links in pull request (and issue) titles (#13695)
  • Support shortened commit SHAs in URLs (#13686)
  • Use native git variants by default with go-git variants as build tag (#13673)
  • Don't render dropdown when only 1 merge style is available (#13670)
  • Move webhook type from int to string (#13664)
  • Direct avatar rendering (#13649)
  • Verify password for local-account activation (#13631)
  • Prevent clone protocol button flash on page load (#13626)
  • Remove fetch request from heatmap (#13623)
  • Refactor combine label comments with tests (#13619)
  • Move metrics from macaron to chi (#13601)
  • Issue and Pulls lists rework (#13594)
  • HTTP cache rework and enable caching for storage assets (#13569)
  • Use mount but not register for chi routes (#13555)
  • Use monaco for the git hook editor (#13552)
  • Make heatmap colors more distinct (#13533)
  • Lazy-load issue reviewers and assignees avatars (#13526)
  • Change search and filter icons to SVG (#13473)
  • Create tag on ui (#13467)
  • updateSize when create a repo with init commit (#13441)
  • Added title and action buttons to Project view page (#13437)
  • Override fomantic monospace fonts and set size (#13435)
  • Rework focused comment styling (#13434)
  • Tags cleanup (#13428)
  • Various style tweaks (#13418)
  • Refactor push update (#13381)
  • Comment box tweaks and SVG dropdown triangles (#13376)
  • Various style fixes (#13372)
  • Change repo home page icons to SVG (#13364)
  • Use CSS Vars for primary color (#13361)
  • Refactor image paste code (#13354)
  • Switch from SimpleMDE to EasyMDE (#13333)
  • Group Label Changed Comments in timeline (#13304)
  • Make the logger an interface (#13294)
  • Fix PR/Issue titles on mobile (#13292)
  • Rearrange the order of the merged by etc. in locale (#13284)
  • Replace footer and modal icons with SVG (#13245)
  • Issues overview should not show issues from archived repos (#13220)
  • Show stale label for stale code comment which is marked as resolved (#13213)
  • Use CSS Variables for fonts, remove postcss-loader (#13204)
  • Add mentionable teams to tributeValues and change team mention rules to gh's style (#13198)
  • Move install pages out of main macaron routes (#13195)
  • Update outdated label to use Fomantic UI style (#13181)
  • Added option to disable webhooks (#13176)
  • Change order of possible-owner organizations to alphabetical (#13160)
  • Log IP on SSH authentication failure for Built-in SSH server (#13150)
  • Added option to disable migrations (#13114)
  • New "Add Mirror" Button in the Organization view (#13105)
  • Manually approve new registration (#13083)
  • Cron job to cleanup hook_task table (#13080)
  • Use the headline comment of pull-request as the squash commit's message (#13071)
  • Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (#12999)
  • Slightly simplify the queue settings code to help reduce the risk of problems (#12976)
  • Add precise search type for Elastic Search (#12869)
  • Move APIFormat functions into convert package (#12856)
  • Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (#12766)
  • Add TrN for repository limit (#12492)
  • Refactor doctor (#12264)
  • Add the tag list page to the release page (#12096)
  • Redirect on changed user and org name (#11649)
  • load U2F js only on pages which need it (#11585)
  • Make archival asynchronous (#11296)
  • Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (#7420)
  • Improve vfsgen to not unzip bindata files but send to browser directly (#7109)
  • Enhance release list (#6025)
• DOCS
  • Swagger show models by default (#14880)
  • Add missing repo.projects unit into swagger (#14876)
  • Update docs and comments to remove macaron (#14491)
  • Issue template addition: Are you using Gitea behind CloudFlare? (#14098)
  • Generate man pages (#13901)
  • Reformat/fine-tune docs (#13897)
  • Added Table of Contents to long documentation pages (#13890)
  • Add docs command (#13429)
  • Update external-renderers.en-us.md (#13165)
• MISC
  • Add builds for apple M1 (darwin arm64) (#14951)
  • Migrate to use jsoniter instead of encoding/json (#14841)
  • Reduce make verbosity (#13803)
  • Add git command error directory on log (#13194)