df31ac0e09
Fixed log path in fail2ban documentation ( #19103 )
...
This updates the log path in the [gitea-docker] jail configuration
to match the path in the [gitea] jail, which was updated in #13726 .
3 years ago
0b15a729cf
rm .sample hooks which aren't used ( #19101 )
3 years ago
ed1d95c55d
use go1.18 to build gitea ( #19099 )
...
* use go1.18 to build gitea& update min go version to 1.17
* bump in a few more places
* add a few simple tests for isipprivate
* update go.mod
* update URL to https://go.dev/dl/
* golangci-lint
* attempt golangci-lint workaround
* change version
* bump fumpt version
* skip strings.title test
* go mod tidy
* update tests as some aren't private??
* update tests
3 years ago
fe9626af29
Use `go run` for tool dependencies, require go 1.17 ( #18874 )
...
This ensures the tools only run in the versions we've tested and it also
does not polute PATH with those tools so they are truly isolated. This
syntax of `go run` requires go 1.17, so the minimum version is set
accordingly.
Fixes: https://github.com/go-gitea/gitea/issues/18867
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
3 years ago
6ab4a96855
Update golang.org/x/crypto ( #19097 )
...
* Update golang.org/x/crypto
- Update dependency to include fix for CVE.
- See https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ?utm_medium=email&utm_source=footer
* Fix deprecation notice
* Remove workaround
- Introduced in https://github.com/go-gitea/gitea/pull/17281
- Fixed in x/crypto:
- 5d542ad81a3147a52a759b076918e3e4b3678e5f
3 years ago
c88f2e2acc
Handle email address not exist. ( #19089 )
3 years ago
2ba72cedbe
Frontport Changelogs ( #19088 )
...
* Frontport Changelogs
* bump version in docs
3 years ago
18033f49ba
Restrict email address validation ( #17688 )
...
This didn't follow the RFC but it's a subset of that. I think we should narrow the allowed chars at first and discuss more possibility in future PRs.
3 years ago
49db87a035
Fix lfs bug ( #19072 )
...
* Fix lfs bug
3 years ago
3ad6cf2069
[skip ci] Updated translations via Crowdin
3 years ago
35541f853b
Fix documentation and #19065 ( #19067 )
3 years ago
bc0d2c8ada
RSS/Atom support for Repos ( #19055 )
...
* support for repos
* refactor
* advertise the feeds via meta tags
* allow feed suffix and feed header
* optimize performance
3 years ago
780cf76f6e
[skip ci] Updated licenses and gitignores
3 years ago
9cca834aac
Feeds: render markdown to html ( #19058 )
...
* feeds: render markdown to html
3 years ago
a0c043f5c6
[skip ci] Updated translations via Crowdin
3 years ago
a223bc8765
Prevent 500 when there is an error during new auth source post ( #19041 )
...
Fix #19036
Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
886b1de949
Update the webauthn_credential_id_sequence in Postgres ( #19048 )
...
* Update the webauthn_credential_id_sequence in Postgres
There is (yet) another problem with v210 in that Postgres will silently allow preset
ID insertions ... but it will not update the sequence value.
This PR simply adds a little step to the end of the v210 migration to update the
sequence number.
Users who have already migrated who find that they cannot insert new
webauthn_credentials into the DB can either run:
```bash
gitea doctor recreate-table webauthn_credential
```
or
```bash
./gitea doctor --run=check-db-consistency --fix
```
which will fix the bad sequence.
Fix #19012
Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
a0db075f21
If rendering has failed due to a net.OpError stop rendering (attempt 2) ( #19049 )
...
Unfortunately #18642 does not work because a `*net.OpError` does not implement
the `Is` interface to make `errors.Is` work correctly - thus leading to the
irritating conclusion that a `*net.OpError` is not a `*net.OpError`.
Here we keep the `errors.Is` because presumably this will be fixed at
some point in the golang main source code but also we add a simply type
cast to also check.
Fix #18629
Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
ba470a85dd
use xorm builder for models.getReviewers() ( #19033 )
...
* xorm builder
* dedup code
3 years ago
cc98737ca8
RSS/Atom support for Orgs ( #17714 )
...
part of #569
3 years ago
5fdd30423e
Fix flag validation ( #19046 )
...
Regression from #5785
3 years ago
75eb6cc9c1
Improve SyncMirrors logging ( #19045 )
...
Yet another issue has come up where the logging from SyncMirrors does not provide
enough context. This PR adds more context to these logging events.
Related #19038
Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
1314f38b59
fix pam authorization ( #19040 )
...
https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb/
Co-authored-by: ysf <34326+ysf@users.noreply.github.com>
3 years ago
7443213707
[skip ci] Updated translations via Crowdin
3 years ago
2448c5ad8b
Upgrading binding package ( #19034 )
...
Fix #18855
3 years ago
c21735b49a
Ensure isSSH is set whenever DISABLE_HTTP_GIT is set ( #19028 )
...
When DISABLE_HTTP_GIT is set we should always show the SSH button
3 years ago
ea46142bce
Add button for issue deletion ( #19032 )
...
Co-authored-by: Norwin <noerw@users.noreply.github.com>
Co-authored-by: 6543 <6543@obermui.de>
3 years ago
ddf7f1319f
Fix script compatiable with OpenWrt ( #19000 )
...
* Fix compatibility of upgrade.sh in openwrt and add service init script for openwrt.
* Apply suggestions from code review
Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: zeripath <art27@cantab.net>
* Update contrib/upgrade.sh
Co-authored-by: Norwin <noerw@users.noreply.github.com>
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: zeripath <art27@cantab.net>
Co-authored-by: techknowlogick <matti@mdranta.net>
Co-authored-by: Norwin <noerw@users.noreply.github.com>
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
3 years ago
eceab9e26f
Allow users to self-request a PR review ( #19030 )
...
The review request feature was added in https://github.com/go-gitea/gitea/pull/10756 ,
where the doer got explicitly excluded from available reviewers. I don't see a
functionality or security related reason to forbid this case.
As shown by GitHubs implementation, it may be useful to self-request a review,
to be reminded oneselves about reviewing, while communicating to team mates that a
review is missing.
Co-authored-by: delvh <dev.lh@web.de>
3 years ago
e73c5fd698
Fix wrong scopes caused by empty scope input ( #19029 )
3 years ago
bbce905b6a
Feature: show issue assignee on project board ( #15232 )
...
* Show assignees in project boards.
3 years ago
1546580f9e
bump go deps ( #19021 )
...
* update gitea.com/go-chi/binding
* update gitea.com/go-chi/cache
* update github.com/42wim/sshsig
* update github.com/PuerkitoBio/goquery
* update github.com/blevesearch/bleve/v2
* update github.com/caddyserver/certmagic
* update github.com/denisenkom/go-mssqldb
* update github.com/duo-labs/webauthn
* update github.com/dustin/go-humanize
* update github.com/editorconfig/editorconfig-core-go/v2
* update github.com/ethantkoenig/rupture
* update github.com/go-chi/chi/v5
* update github.com/go-git/go-git/v5
* update github.com/go-ldap/ldap/v3
* update github.com/go-redis/redis/v8
* update github.com/go-swagger/go-swagger
* update github.com/gogs/chardet
* update github.com/golang-jwt/jwt/v4
* update github.com/hashicorp/go-version
* update github.com/jaytaylor/html2text
* update github.com/klauspost/compress
* update github.com/lib/pq
* update github.com/markbates/goth
* update github.com/mattn/go-sqlite3
* update github.com/mholt/archiver/v3
* update github.com/microcosm-cc/bluemonday
* update github.com/minio/minio-go/v7
* update github.com/msteinert/pam
* update github.com/niklasfasching/go-org
* update github.com/olivere/elastic/v7
* update github.com/prometheus/client_golang
* update github.com/quasoft/websspi
* update github.com/stretchr/testify
* update github.com/unknwon/i18n
* update github.com/unrolled/render
* update github.com/xanzy/go-gitlab
* update github.com/yuin/goldmark
* update github.com/yuin/goldmark-highlighting
* update github.com/yuin/goldmark-meta
* post make vendor
Signed-off-by: Andrew Thornton <art27@cantab.net>
* add make vendor back into update_dependencies.sh
Signed-off-by: Andrew Thornton <art27@cantab.net>
* Update update_dependencies.sh
* Update contrib/update_dependencies.sh
Co-authored-by: zeripath <art27@cantab.net>
* update mvdan.cc/xurls/v2
Co-authored-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
3 years ago
8ddb5490e8
Don't show context cancelled errors in attribute reader ( #19006 )
...
Fix #18997
Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
3 years ago
78b38a5ccc
Set `rel="nofollow noindex"` on new issue links ( #19023 )
...
Fix #19018
Signed-off-by: Andrew Thornton <art27@cantab.net>
3 years ago
9c5696e428
update to correct stable version
3 years ago
98f54081d6
[skip ci] Updated translations via Crowdin
3 years ago
cc643284de
Add Index to comment for migrations and mirroring ( #18806 )
...
Comments have an id (see Gitea[0], GitLab[1], GitHub[2], etc.), and the
comment migration format must represent it during migrations so that
it can be used during mirroring or incremental migrations.
[0] https://try.gitea.io/api/swagger#/issue/issueGetComment
[1] https://docs.gitlab.com/ee/api/discussions.html#get-single-issue-discussion-item
[2] https://docs.github.com/en/rest/reference/issues#get-an-issue-comment
Signed-off-by: Loïc Dachary <loic@dachary.org>
Co-authored-by: Loïc Dachary <loic@dachary.org>
3 years ago
b24e8d38af
Support ignore all santize for external renderer ( #18984 )
...
* Support ignore all santize for external renderer
* Update docs
* Apply suggestions from code review
Co-authored-by: silverwind <me@silverwind.io>
* Fix doc
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: 6543 <6543@obermui.de>
3 years ago
3e28fa72ce
Fix EasyMDE error when input Enter ( #19004 )
...
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
3 years ago
814750e647
Fix update hint bug ( #18996 )
3 years ago
997deecbfa
Fix the editor height in review box ( #19003 )
...
Fix the height problem in https://github.com/go-gitea/gitea/pull/18862#issuecomment-1059329539
I have tested this fix.
# Screenshots
### Min-height
<img width="1138" alt="image" src="https://user-images.githubusercontent.com/2114189/156811831-93d4d31a-1b0a-4c4c-a7b4-fafc706133d6.png ">
### Max-height
<img width="1126" alt="image" src="https://user-images.githubusercontent.com/2114189/156811889-10ae41de-c63b-45e7-9d89-21a1ed29e58b.png ">
3 years ago
95c8d53d28
Add a "admin user generate-access-token" subcommand ( #17722 )
...
* Add a "admin user generate-access-token" subcommand
Fixes #17721
* Update cmd/admin.go
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* Update cmd/admin.go
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
* Fix code to match new interfaces
Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: zeripath <art27@cantab.net>
3 years ago
e46a8c90ea
Fix potential assignee query for repo ( #18994 )
...
* Fix potential assignee query for repo
* Add tests for `GetRepoAssignees`
- As per https://github.com/go-gitea/gitea/pull/18994#issuecomment-1058506640
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Gusted <williamzijl7@hotmail.com>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
3 years ago
5184c83f6b
Add config option to disable "Update branch by rebase" ( #18745 )
3 years ago
3c7201682c
Update `go-enry` to v2.8.0 ( #18993 )
...
- It was reported in the Matrix channel that Chroma [has support](d4021029760affa3ccca
3 years ago
286355c754
homebrew updates via cron
3 years ago
7a893dab39
ignore missing comment for user notifications ( #18954 )
...
* ignore missing comment for user notifications
* instead fix bug in notifications model
* use local variable instead
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: 6543 <6543@obermui.de>
3 years ago
e800bc0cf4
allow overwrite artifacts for github releases ( #18987 )
3 years ago
eddd2fb242
fix & refactor ( #18973 )
...
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
3 years ago
f3cbdee38e
Don't clean up hardcoded `tmp` ( #18983 )
...
* Don't clean up hardcoded `tmp`.
* Fixed import.
3 years ago
Fredrik Ekre
techknowlogick
silverwind
Gusted
KN4CK3R
6543
Lunny Xiao
GiteaBot
mscherer
Norwin
zeripath
wxiaoguang
Otto Richter (fnetX)
YISH
Roger Luo
singuliere
Otto Richter (fnetX)
Jimmy Praet
eladyn
