## [1.26.0-rc0](https://github.com/go-gitea/gitea/releases/tag/v1.26.0-rc0) - 2026-04-07 * BREAKING * Correct swagger annotations for enums, status codes, and notification state (#37030) * Remove GET API registration-token (#36801) * Support Actions `concurrency` syntax (#32751) * Make PUBLIC_URL_DETECTION default to "auto" (#36955) * SECURITY * Bound PageSize in `ListUnadoptedRepositories` (#36884) * FEATURES * Support Actions `concurrency` syntax (#32751) * Add terraform state registry (#36710) * Instance-wide (global) info banner and maintenance mode (#36571) * Support rendering OpenAPI spec (#36449) * Add keyboard shortcuts for repository file and code search (#36416) * Add support for archive-upload rpc (#36391) * Add ability to download subpath archive (#36371) * Add workflow dependencies visualization (#26062) (#36248) & Restyle Workflow Graph (#36912) * Automatic generation of release notes (#35977) * Add "Go to file", "Delete Directory" to repo file list page (#35911) * Introduce "config edit-ini" sub command to help maintaining INI config file (#35735) * Add button to re-run failed jobs in Actions (#36924) * Support actions and reusable workflows from private repos (#32562) * Add summary to action runs view (#36883) * Add user badges (#36752) * Add configurable permissions for Actions automatic tokens (#36173) * Add per-runner “Disable/Pause” (#36776) * PERFORMANCE * WorkflowDispatch API optionally return runid (#36706) * Add render cache for SVG icons (#36863) * Load `mentionValues` asynchronously (#36739) * Lazy-load some Vue components, fix heatmap chunk loading on every page (#36719) * Load heatmap data asynchronously (#36622) * Use prev/next pagination for user profile activities page to speed up (#36642) * Refactor cat-file batch operations and support `--batch-command` approach (#35775) * Use merge tree to detect conflicts when possible (#36400) * ENHANCEMENTS * Adds option to force update new branch in contents routes (#35592) * Add viewer controller for mermaid (zoom, drag) (#36557) * Add code editor setting dropdowns (#36534) * Add `elk` layout support to mermaid (#36486) * Add resolve/unresolve review comment API endpoints (#36441) * Allow configuring default PR base branch (fixes #36412) (#36425) * Add support for RPM Errata (updateinfo.xml) (#37125) * Require additional user confirmation for making repo private (#36959) * Feature non-zipped actions artifacts (action v7 / nodejs / npm v6.2.0) (#36786) * Add `actions.WORKFLOW_DIRS` setting (#36619) * Avoid opening new tab when downloading actions logs (#36740) * Implements OIDC RP-Initiated Logout (#36724) * Show workflow link (#37070) * Desaturate dark theme background colors (#37056) * Refactor "org teams" page and help new users to "add member" to an org (#37051) * Add webhook name field to improve webhook identification (#37025) (#37040) * Make task list checkboxes clickable in the preview tab (#37010) * Improve severity labels in Actions logs and tweak colors (#36993) * Linkify URLs in Actions workflow logs (#36986) * Allow text selection on checkbox labels (#36970) * Support dark/light theme images in markdown (#36922) * Enable native dark mode for swagger-ui (#36899) * Rework checkbox styling, remove `input` border hover effect (#36870) * Refactor storage content-type handling of ServeDirectURL (#36804) * Use "Enable Gravatar" but not "Disable" (#36771) * Use case-insensitive matching for Git error "Not a valid object name" (#36728) * Add “Copy Source” to markup comment menu (#36726) * Change image transparency grid to CSS (#36711) * Add "Run" prefix for unnamed action steps (#36624) * Persist actions log time display settings in `localStorage` (#36623) * Use first commit title for multi-commit PRs and fix auto-focus title field (#36606) * Improve BuildCaseInsensitiveLike with lowercase (#36598) * Improve diff highlighting (#36583) * Exclude cancelled runs from failure-only email notifications (#36569) * Use full-file highlighting for diff sections (#36561) * Color command/error logs in Actions log (#36538) * Add paging headers (#36521) * Improve timeline entries for WIP prefix changes in pull requests (#36518) * Add FOLDER_ICON_THEME configuration option (#36496) * Normalize guessed languages for code highlighting (#36450) * Add chunked transfer encoding support for LFS uploads (#36380) * Indicate when only optional checks failed (#36367) * Add 'allow_maintainer_edit' API option for creating a pull request (#36283) * Support closing keywords with URL references (#36221) * Improve diff file headers (#36215) * Fix and enhance comment editor monospace toggle (#36181) * Add git.DIFF_RENAME_SIMILARITY_THRESHOLD option (#36164) * Add matching pair insertion to markdown textarea (#36121) * Add sorting/filtering to admin user search API endpoint (#36112) * Allow action user have read permission in public repo like other user (#36095) * Disable matchBrackets in monaco (#36089) * Use GitHub-style commit message for squash merge (#35987) * Make composer registry support tar.gz and tar.bz2 and fix bugs (#35958) * Add GITEA_PR_INDEX env variable to githooks (#35938) * Add proper error message if session provider can not be created (#35520) * Add button to copy file name in PR files (#35509) * Move `X_FRAME_OPTIONS` setting from `cors` to `security` section (#30256) * Add placeholder content for empty content page (#37114) * Add `DEFAULT_DELETE_BRANCH_AFTER_MERGE` setting (#36917) * Redirect to the only OAuth2 provider when no other login methods and fix various problems (#36901) * Add admin badge to navbar avatar (#36790) * Add `never` option to `PUBLIC_URL_DETECTION` configuration (#36785) * Add background and run count to actions list page (#36707) * Add icon to buttons "Close with Comment", "Close Pull Request", "Close Issue" (#36654) * Add support for in_progress event in workflow_run webhook (#36979) * Report commit status for pull_request_review events (#36589) * Render merged pull request title as such in dashboard feed (#36479) * Feature to be able to filter project boards by milestones (#36321) * Use user id in noreply emails (#36550) * Enable pagination on GiteaDownloader.getIssueReactions() (#36549) * Remove striped tables in UI (#36509) * Improve control char rendering and escape button styling (#37094) * Support legacy run/job index-based URLs and refactor migration 326 (#37008) * Add date to "No Contributions" tooltip (#36190) * Show edit page confirmation dialog on tree view file change (#36130) * Mention proc-receive in text for dashboard.resync_all_hooks func (#35991) * Reuse selectable style for wiki (#35990) * Support blue yellow colorblind theme (#35910) * Support selecting theme on the footer (#35741) * Improve online runner check (#35722) * Add quick approve button on PR page (#35678) * Enable commenting on expanded lines in PR diffs (#35662) * Print PR-Title into tooltip for actions (#35579) * Use explicit, stronger defaults for newly generated repo signing keys for Debian (#36236) * Improve the compare page (#36261) * Unify repo names in system notices (#36491) * Move package settings to package instead of being tied to version (#37026) * Add Actions API rerun endpoints for runs and jobs (#36768) * Add branch_count to repository API (#35351) (#36743) * Add created_by filter to SearchIssues (#36670) * Allow admins to rename non-local users (#35970) * Support updating branch via API (#35951) * Add an option to automatically verify SSH keys from LDAP (#35927) * Make "update file" API can create a new file when SHA is not set (#35738) * Update issue.go with labels documentation (labels content, not ids) (#35522) * Expose content_version for optimistic locking on issue and PR edits (#37035) * Pass ServeHeaderOptions by value instead of pointer, fine tune httplib tests (#36982) * BUGFIXES * Fix API not persisting pull request unit config when has_pull_requests is not set (#36718) * Rename CSS variables and improve colorblind themes (#36353) * Hide `add-matcher` and `remove-matcher` from actions job logs (#36520) * Prevent navigation keys from triggering actions during IME composition (#36540) * Fix vertical alignment of `.commit-sign-badge` children (#36570) * Fix duplicate startup warnings in admin panel (#36641) * Fix CODEOWNERS review request attribution using comment metadata (#36348) * Fix HTML tags appearing in wiki table of contents (#36284) * Fix various bugs (#37096) * Fix various legacy problems (#37092) * Fix RPM Registry 404 when package name contains 'package' (#37087) * Merge some standalone Vite entries into index.js (#37085) * Fix various problems (#37077) * Fix issue label deletion with Actions tokens (#37013) * Hide delete branch or tag buttons in mirror or archived repositories. (#37006) * Fix org contact email not clearable once set (#36975) * Fix a bug when forking a repository in an organization (#36950) * Preserve sort order of exclusive labels from template repo (#36931) * Make container registry support Apple Container (basic auth) (#36920) * Fix the wrong push commits in the pull request when force push (#36914) * Add class "list-header-filters" to the div for projects (#36889) * Fix dbfs error handling (#36844) * Fix incorrect viewed files counter if reverted change was viewed (#36819) * Refactor avatar package, support default avatar fallback (#36788) * Fix README symlink resolution in subdirectories like .github (#36775) * Fix CSS stacking context issue in actions log (#36749) * Add gpg signing for merge rebase and update by rebase (#36701) * Delete non-exist branch should return 404 (#36694) * Fix `TestActionsCollaborativeOwner` (#36657) * Fix multi-arch Docker build SIGILL by splitting frontend stage (#36646) * Fix linguist-detectable attribute being ignored for configuration files (#36640) * Fix state desync in ComboMarkdownEditor (#36625) * Unify DEFAULT_SHOW_FULL_NAME output in templates and dropdown (#36597) * Pull Request Pusher should be the author of the merge (#36581) * Fix various version parsing problems (#36553) * Fix highlight diff result (#36539) * Fix mirror sync parser and fix mirror messages (#36504) * Fix bug when list pull request commits (#36485) * Fix various bugs (#36446) * Fix issue filter menu layout (#36426) * Restrict branch naming when new change matches with protection rules (#36405) * Fix link/origin referrer and login redirect (#36279) * Generate IDs for HTML headings without id attribute (#36233) * Use a migration test instead of a wrong test which populated the meta test repositories and fix a migration bug (#36160) * Fix issue close timeline icon (#36138) * Fix diff blob excerpt expansion (#35922) * Fix external render (#35727) * Fix review request webhook bug (#35339) (#35723) * Fix shutdown waitgroup panic (#35676) * Cleanup ActionRun creation (#35624) * Fix possible bug when migrating issues/pull requests (#33487) * Various fixes (#36697) * Apply notify/register mail flags during install load (#37120) * Repair duration display for bad stopped timestamps (#37121) * Fix(upgrade.sh): use HTTPS for GPG key import and restore SELinux context after upgrade (#36930) * Fix various trivial problems (#36921) * Fix various trivial problems (#36953) * Fix NuGet package upload error handling (#37074) * Fix CodeQL code scanning alerts (#36858) * Refactor issue sidebar and fix various problems (#37045) * Fix various problems (#37029) * Fix relative-time RangeError (#37021) * Fix chroma lexer mapping (#36629) * Fix typos and grammar in English locale (#36751) * Fix milestone/project text overflow in issue sidebar (#36741) * Fix `no-content` message not rendering after comment edit (#36733) * Fix theme loading in development (#36605) * Fix workflow run jobs API returning null steps (#36603) * Fix timeline event layout overflow with long content (#36595) * Fix minor UI issues in runner edit page (#36590) * Fix incorrect vendored detections (#36508) * Fix editorconfig not respected in PR Conversation view (#36492) * Don't create self-references in merged PRs (#36490) * Fix potential incorrect runID in run status update (#36437) * Fix file-tree ui error when adding files to repo without commits (#36312) * Improve image captcha contrast for dark mode (#36265) * Fix panic in blame view when a file has only a single commit (#36230) * Fix spelling error in migrate-storage cmd utility (#36226) * Fix code highlighting on blame page (#36157) * Fix nilnil in onedev downloader (#36154) * Fix actions lint (#36029) * Fix oauth2 session gob register (#36017) * Fix Arch repo pacman.conf snippet (#35825) * Fix a number of `strictNullChecks`-related issues (#35795) * Fix URLJoin, markup render link reoslving, sign-in/up/linkaccount page common data (#36861) * Hide delete directory button for mirror or archive repository and disable the menu item if user have no permission (#36384) * Update message severity colors, fix navbar double border (#37019) * Inline and lazy-load EasyMDE CSS, fix border colors (#36714) * Closed milestones with no issues now show as 100% completed (#36220) * Add test for ExtendCommentTreePathLength migration and fix bugs (#35791) * Only turn links to current instance into hash links (#36237) * Fix typos in code comments: doesnt, dont, wont (#36890) * REFACTOR * Replace Monaco with CodeMirror (#36764) * Replace CSRF cookie with `CrossOriginProtection` (#36183) * Replace index with id in actions routes (#36842) * Remove unnecessary function parameter (#35765) * Move jobparser from act repository to Gitea (#36699) * Refactor compare router param parse (#36105) * Optimize 'refreshAccesses' to perform update without removing then adding (#35702) * Clean up checkbox cursor styles (#37016) * Remove undocumented support of signing key in the repository git configuration file (#36143) * Switch `cmd/` to use constructor functions. (#36962) * Use `relative-time` to render absolute dates (#36238) * Some refactors about GetMergeBase (#36186) * Some small refactors (#36163) * Use gitRepo as parameter instead of repopath when invoking sign functions (#36162) * Move blame to gitrepo (#36161) * Move some functions to gitrepo package to reduce RepoPath reference directly (#36126) * Use gitrepo's clone and push when possible (#36093) * Remove mermaid margin workaround (#35732) * Move some functions to gitrepo package (#35543) * Move GetDiverging functions to gitrepo (#35524) * Use global lock instead of status pool for cron lock (#35507) * Use explicit mux instead of DefaultServeMux (#36276) * Use gitrepo's push function (#36245) * Pass request context to generateAdditionalHeadersForIssue (#36274) * Move assign project when creating pull request to the same database transaction (#36244) * Move catfile batch to a sub package of git module (#36232) * Use gitrepo.Repository instead of wikipath (#35398) * Use experimental go json v2 library (#35392) * Refactor template render (#36438) * Refactor GetRepoRawDiffForFile to avoid unnecessary pipe or goroutine (#36434) * Refactor text utility classes to Tailwind CSS (#36703) * Refactor git command stdio pipe (#36422) * Refactor git command context & pipeline (#36406) * Refactor git command stdio pipe (#36393) * Remove unused functions (#36672) * Refactor Actions Token Access (#35688) * Move commit related functions to gitrepo package (#35600) * Move archive function to repo_model and gitrepo (#35514) * Move some functions to gitrepo package (#35503) * Use git model to detect whether branch exist instead of gitrepo method (#35459) * Some refactor for repo path (#36251) * Extract helper functions from SearchIssues (#36158) * Refactor merge conan and container auth preserve actions taskID (#36560) * Refactor Nuget Auth to reuse Basic Auth Token Validation (#36558) * Refactor ActionsTaskID (#36503) * Refactor auth middleware (#36848) * Refactor code render and render control chars (#37078) * Clean up AppURL, remove legacy origin-url webcomponent (#37090) * Remove `util.URLJoin` and replace all callers with direct path concatenation (#36867) * Replace legacy tw-flex utility classes with flex-text-block/inline (#36778) * Mark unused&immature activitypub as "not implemented" (#36789) * TESTING * Add e2e tests for server push events (#36879) * Rework e2e tests (#36634) * Add e2e reaction test, improve accessibility, enable parallel testing (#37081) * Increase e2e test timeouts on CI to fix flaky tests (#37053) * BUILD * Convert locale files from ini to json format (#35489) * Bump golangci-lint to 2.7.2, enable modernize stringsbuilder (#36180) * Port away from `flake-utils` (#35675) * Remove nolint (#36252) * Update the Unlicense copy to latest version (#36636) * Update to go 1.26.0 and golangci-lint 2.9.0 (#36588) * Replace `google/go-licenses` with custom generation (#36575) * Update go dependencies (#36548) * Bump appleboy/git-push-action from 1.0.0 to 1.2.0 (#36306) * Remove fomantic form module (#36222) * Bump setup-node to v6, re-enable cache (#36207) * Bump crowdin/github-action from 1 to 2 (#36204) * Revert "Bump alpine to 3.23 (#36185)" (#36202) * Update chroma to v2.21.1 (#36201) * Bump astral-sh/setup-uv from 6 to 7 (#36198) * Bump docker/build-push-action from 5 to 6 (#36197) * Bump aws-actions/configure-aws-credentials from 4 to 5 (#36196) * Bump dev-hanz-ops/install-gh-cli-action from 0.1.0 to 0.2.1 (#36195) * Add JSON linting (#36192) * Enable dependabot for actions (#36191) * Bump alpine to 3.23 (#36185) * Update chroma to v2.21.0 (#36171) * Update JS deps and eslint enhancements (#36147) * Update JS deps (#36091) * update golangci-lint to v2.7.0 (#36079) * Update JS deps, fix deprecations (#36040) * Update JS deps (#35978) * Add toolchain directive to go.mod (#35901) * Move `gitea-vet` to use `go tool` (#35878) * Update to go 1.25.4 (#35877) * Enable TypeScript `strictNullChecks` (#35843) * Enable `vue/require-typed-ref` eslint rule (#35764) * Update JS dependencies (#35759) * Move `codeformat` folder to tools (#35758) * Update dependencies (#35733) * Bump happy-dom from 20.0.0 to 20.0.2 (#35677) * Bump setup-go to v6 (#35660) * Update JS deps, misc tweaks (#35643) * Bump happy-dom from 19.0.2 to 20.0.0 (#35625) * Use bundled version of spectral (#35573) * Update JS and PY deps (#35565) * Bump github.com/wneessen/go-mail from 0.6.2 to 0.7.1 (#35557) * Migrate from webpack to vite (#37002) * Update JS dependencies and misc tweaks (#37064) * Update to eslint 10 (#36925) * Optimize Docker build with dependency layer caching (#36864) * Update JS deps (#36850) * Update tool dependencies and fix new lint issues (#36702) * Remove redundant linter rules (#36658) * Move Fomantic dropdown CSS to custom module (#36530) * Remove and forbid `@ts-expect-error` (#36513) * Refactor git command stderr handling (#36402) * Enable gocheckcompilerdirectives linter (#36156) * Replace `lint-go-gopls` with additional `govet` linters (#36028) * Update golangci-lint to v2.6.0 (#35801) * Misc tool tweaks (#35734) * Add cache to container build (#35697) * Upgrade vite (#37126) * Update `setup-uv` to v8.0.0 (#37101) * Upgrade `go-git` to v5.17.2 and related dependencies (#37060) * Raise minimum Node.js version to 22.18.0 (#37058) * Upgrade `golang.org/x/image` to v0.38.0 (#37054) * Update minimum go version to 1.26.1, golangci-lint to 2.11.2, fix test style (#36876) * Enable eslint concurrency (#36878) * Vendor relative-time-element as local web component (#36853) * Update material-icon-theme v5.32.0 (#36832) * Update Go dependencies (#36781) * Upgrade minimatch (#36760) * Remove i18n backport tool at the moment because of translation format changed (#36643) * Update emoji data for Unicode 16 (#36596) * Update JS dependencies, adjust webpack config, misc fixes (#36431) * Update material-icon-theme to v5.31.0 (#36427) * Update JS and PY deps (#36383) * Bump alpine to 3.23, add platforms to `docker-dryrun` (#36379) * Update JS deps (#36354) * Update goldmark to v1.7.16 (#36343) * Update chroma to v2.22.0 (#36342) * DOCS * Update AI Contribution Policy (#37022) * Update AGENTS.md with additional guidelines (#37018) * Add missing cron tasks to example ini (#37012) * Add AI Contribution Policy to CONTRIBUTING.md (#36651) * Minor punctuation improvement in CONTRIBUTING.md (#36291) * Add documentation for markdown anchor post-processing (#36443) * MISC * Correct spelling (#36783) * Update Nix flake (#37110) * Update Nix flake (#37024) * Add valid github scopes (#36977) * Update Nix flake (#36943) * Update Nix flake (#36902) * Update Nix flake (#36857) * Update Nix flake (#36787)

* SECURITY * Upgrade golang.org/x/crypto to 0.45.0 (#35985) (#35988) * Fix various permission & login related bugs (#36002) (#36004) * ENHANCEMENTS * Display source code downloads last for release attachments (#35897) (#35903) * Change project default column icon to 'star' (#35967) (#35979) * BUGFIXES * Allow empty commit when merging pull request with squash style (#35989) (#36003) * Fix container push tag overwriting (#35936) (#35954) * Fix corrupted external render content (#35946) and upgrade golang.org/x packages (#35950) * Limit reading bytes instead of ReadAll (#35928) (#35934) * Use correct form field for allowed force push users in branch protection API (#35894) (#35908) * Fix team member access check (#35899) (#35905) * Fix conda null depend issue (#35900) (#35902) * Set the dates to now when not specified by the caller (#35861) (#35874) * Fix gogit ListEntriesRecursiveWithSize (#35862) * Misc CSS fixes (#35888) (#35981) * Don't show unnecessary error message to end users for DeleteBranchAfterMerge (#35937) (#35941) * Load jQuery as early as possible to support custom scripts (#35926) (#35929) * Allow to display embed images/pdfs when SERVE_DIRECT was enabled on MinIO storage (#35882) (#35917) * Make OAuth2 issuer configurable (#35915) (#35916) * Fix #35763: Add proper page title for project pages (#35773) (#35909) * Fix avatar upload error handling (#35887) (#35890) * Contribution heatmap improvements (#35876) (#35880) * Remove padding override on `.ui .sha.label` (#35864) (#35873) * Fix pull description code label background (#35865) (#35870)

* SECURITY * Refactor legacy code (#35708) (#35713) * Fixing issue #35530: Password Leak in Log Messages (#35584) (#35665) * Fix a bug missed return (#35655) (#35671) * BUGFIXES * Fix inputing review comment will remove reviewer (#35591) (#35664) * TESTING * Mock external service in hcaptcha TestCaptcha (#35604) (#35663) * Fix build (#35669)

* SECURITY * Upgrade xz to v0.5.15 (#35385) * BUGFIXES * Fix a compare page 404 bug when the pull request disabled (#35441) (#35453) * Fix bug when issue disabled, pull request number in the commit message cannot be redirected (#35420) (#35442) * Add author.name field to Swift Package Registry API response (#35410) (#35431) * Remove usernames when empty in discord webhook (#35412) (#35417) * Allow foreachref parser to grow its buffer (#35365) (#35376) * Allow deleting comment with content via API like web did (#35346) (#35354) * Fix atom/rss mixed error (#35345) (#35347) * Fix review request webhook bug (#35339) * Remove duplicate html IDs (#35210) (#35325) * Fix LFS range size header response (#35277) (#35293) * Fix GitHub release assets URL validation (#35287) (#35290) * Fix token lifetime, closes #35230 (#35271) (#35281) * Fix push commits comments when changing the pull request target branch (#35386) (#35443)

* BUGFIXES * Fix form property assignment edge case (#35073) (#35078) * Improve submodule relative path handling (#35056) (#35075) * Fix incorrect comment diff hunk parsing, fix github asset ID nil panic (#35046) (#35055) * Fix updating user visibility (#35036) (#35044) * Support base64-encoded agit push options (#35037) (#35041) * Make submodule link work with relative path (#35034) (#35038) * Fix bug when displaying git user avatar in commits list (#35006) * Fix API response for swagger spec (#35029) * Start automerge check again after the conflict check and the schedule (#34988) (#35002) * Fix the response format for actions/workflows (#35009) (#35016) * Fix repo settings and protocol log problems (#35012) (#35013) * Fix project images scroll (#34971) (#34972) * Mark old reviews as stale on agit pr updates (#34933) (#34965) * Fix git graph page (#34948) (#34949) * Don't send trigger for a pending review's comment create/update/delete (#34928) (#34939) * Fix some log and UI problems (#34863) (#34868) * Fix archive API (#34853) (#34857) * Ignore force pushes for changed files in a PR review (#34837) (#34843) * Fix SSH LFS timeout (#34838) (#34842) * Fix team permissions (#34827) (#34836) * Fix job status aggregation logic (#34823) (#34835) * Fix issue filter (#34914) (#34915) * Fix typo in pull request merge warning message text (#34899) (#34903) * Support the open-icon of folder (#34168) (#34896) * Optimize flex layout of release attachment area (#34885) (#34886) * Fix the issue of abnormal interface when there is no issue-item on the project page (#34791) (#34880) * Skip updating timestamp when sync branch (#34875) * Fix required contexts and commit status matching bug (#34815) (#34829)

* BUGFIXES * Fix container range bug (#34795) (#34796) * Upgrade chi to v5.2.2 (#34798) (#34799) * BUILD * Bump poetry feature to new url for dev container (#34787) (#34790)

* ENHANCEMENTS * Improve alignment of commit status icon on commit page (#34750) (#34757) * Support title and body query parameters for new PRs (#34537) (#34752) * BUGFIXES * When using rules to delete packages, remove unclean bugs (#34632) (#34761) * Fix ghost user in feeds when pushing in an actions, it should be gitea-actions (#34703) (#34756) * Prevent double markdown link brackets when pasting URL (#34745) (#34748) * Prevent duplicate form submissions when creating forks (#34714) (#34735) * Fix markdown wrap (#34697) (#34702) * Fix pull requests API convert panic when head repository is deleted. (#34685) (#34687) * Fix commit message rendering and some UI problems (#34680) (#34683) * Fix container range bug (#34725) (#34732) * Fix incorrect cli default values (#34765) (#34766) * Fix dropdown filter (#34708) (#34711) * Hide href attribute of a tag if there is no target_url (#34556) (#34684) * Fix tag target (#34781) #34783

* BREAKING * Make Gitea always use its internal config, ignore `/etc/gitconfig` (#33076) * Improve log format (#33814) * Fix markdown render behaviors (#34122) * Add package version api endpoints (#34173) * FEATURES * Enforce two-factor auth (2FA: TOTP or WebAuthn) (#34187) * Add fullscreen mode as a more efficient operation way to view projects (#34081) * Add anonymous access support for private/unlisted repositories (#34051) * Support public code/issue access for private repositories (#33127) * Add middleware for request prioritization (#33951) * Add cli flags LDAP group configuration (#33933) * Add file tree to file view page (#32721) * Add material icons for file list (#33837) * Artifacts download api for artifact actions v4 (#33510) * Support choose email when creating a commit via web UI (#33432) * Add basic auth support to rss/atom feeds (#33371) * Add sorting by exclusive labels (issue priority) (#33206) * Add sub issue list support (#32940) * Private README.md for organization (#32872) * Email option to embed images as base64 instead of link (#32061) * Option to delay conflict checking of old pull requests until page view (#27779) * Worktime tracking for the organization level (#19808) * PERFORMANCE * Add cache for common package queries (#22491) * Move issue pin to an standalone table for querying performance (#33452) * Improve commits list performance to reduce unnecessary database queries (#33528) * Optimize total count of feed when loading activities in user dashboard. (#33841) * Optimize heatmap query (#33853) * Only use prev and next buttons for pagination on user dashboard (#33981) * Improve pull request list API performance (#34052) * Cache GPG keys, emails and users when list commits (#34086) * Refactor Git Attribute & performance optimization (#34154) * Performance optimization for tags synchronization (#34355) #34522 * ENHANCEMENTS * Code * Display when a release attachment was uploaded (#34261) * Support creating relative link to raw path in markdown (#34105) * Improve code block readability and isolate copy button (#34009) * Improve repository commit view (#33877) * Full-file syntax highlighting for diff pages (#33766) * Clone repository with Tea CLI (#33725) * Improve sync fork behavior (#33319) * Make git clone URL could use current signed-in user (#33091) * Add submodule diff links (#33097) * Link to tree views of submodules if possible (#33424) * Only keep popular licenses (#33832) * De-emphasize signed commits (#31160) * Actions * Add flat-square action badge style (#34062) * Update action status badge layout (#34018) * Download actions job logs from API (#33858) * Always show the "rerun" button for action jobs (#33692) * Add auto-expanding running actions step (#30058) * Update status check for all supported on.pull_request.types in Gitea (#33117) * Workflow_dispatch use workflow from trigger branch (#33098) * Add action auto-scroll (#30057) * Add workflow_job webhook (#33694) * Add a button editing action secret (#34462) * Pull Request * Auto expand "New PR" form (#33971) * Mark parent directory as viewed when all files are viewed (#33958) * Show info about maintainers are allowed to edit a PR (#33738) * Automerge supports deleting branch automatically after merging (#32343) * Add additional command hints for PowerShell & CMD (#33548) * Issues * Allow filtering issues by any assignee (#33343) * Show warning on navigation if currently editing comment or title (#32920) * Make tracked time representation display as hours (#33315) * Add No Results Prompt Message on Issue List Page (#33699) * Add sort option recentclose for issues and pulls (#34525) #34539 * Packages * Link to nuget dependencies (#26554) * Add composor source field (#33502) * Administration * Improve navbar: add "admin" tip, add "active" style (#32927) * Add a option "--user-type bot" to admin user create, improve role display (#27885) * Improve admin user view page (#33735) * Support performance trace (#32973) * Change pprof labels to be prometheus compatible (#32865) * Allow admins and org owners to change org member public status (#28294) * Optimize the installation page (#32994) * Make public URL generation configurable (#34250) * Add a --fullname arg to gitea admin user create. (#34241) * Others * Improve oauth2 error handling (#33969) * Fail mirroring more gracefully (#34002) * Align User Details Page Header Layout with Design Specifications (#34192) * Webhook add X-Gitea-Hook-Installation-Target-Type Header (#33752) * Optimize the dashboard (#32990) * Improve button layout on small screens (#33633) * Add cropping support when modifying the user/org/repo avatar (#33498) * Make ROOT_URL support using request Host header (#32564) * Add `show more` organizations icon in user's profile (#32986) * Introduce `--page-space-bottom` at 64px (#30692) * Improve theme display (#30671) * Add alphabetical project sorting (#33504) * Add global lock for migrations to make upgrade more safe with multiple replications (#33706) * Add descriptions for private repo public access settings and improve the UI (#34057) * API * Actions Runner rest api (#33873) * Inclusion of rename organization api (#33303) * Add API to support link package to repository and unlink it (#33481) * Add API endpoint to request contents of multiple files simultaniously (#34139) * Actions artifacts API list/download check status upload confirmed (#34273) * Add API routes to lock and unlock issues (#34165) * Fix some user name usages (#33689) * Allow filtering /repos/{owner}/{repo}/pulls by target base branch queryparam (#33684) * Improve swagger generation (#33664) * Support Ephemeral action runners (#33570) * Support workflow event dispatch via API (#33545) * Support workflow event dispatch via API (#32059) * Added Description Field for Secrets and Variables (#33526) * Reject star-related requests if stars are disabled (#33208) * Let API create and edit system webhooks, attempt 2 (#33180) * Use `Project-URL` metadata field to get a PyPI package's homepage URL (#33089) * Add `last_committer_date` and `last_author_date` for file contents API (#32921) * REFACTORS * Remove context from git struct (#33793) * Refactor admin/common.ts (#33788) * Refactor repo-settings.ts (#33785) * Refactor repo-issue.ts (#33784) * Small refactor to reduce unnecessary database queries and remove duplicated functions (#33779) * Refactor initRepoBranchTagSelector to use new init framework (#33776) * Refactor buttons to use new init framework (#33774) * Refactor markup and pdf-viewer to use new init framework (#33772) * Refactor error system (#33771) * Refactor mail code (#33768) * Update TypeScript types (#33799) * Refactor older tests to use testify (#33140) * Move notifywatch to service layer (#33825) * Decouple context from repository related structs (#33823) * Remove context from mail struct (#33811) * Refactor dropdown ellipsis (#34123) * Refactor functions to reduce repopath expose (#33892) * Refactor repo-diff.ts (#33746) * Refactor web route handler (#33488) * Refactor user & avatar (#33433) * Refactor user package (#33423) * Refactor decouple context from migration structs (#33399) * Refactor context flash msg and global variables (#33375) * Refactor response writer & access logger (#33323) * Refactor ref type (#33242) * Refactor context repository (#33202) * Refactor legacy JS (#33115) * Refactor legacy line-number and scroll code (#33094) * Refactor env var related code (#33075) * Move SetMerged to service layer (#33045) * Merge updatecommentattachment functions (#33044) * Refactor pull-request compare&create page (#33071) * Refactor repo-new.ts (#33070) * Refactor pagination (#33037) * Refactor tests (#33021) * Refactor markup render to fix various path problems (#34114) * Refactor Branch struct in package modules/git (#33980) * Don't create duplicated functions for code repositories and wiki repositories (#33924) * Move git references checking to gitrepo packages to reduce expose of repository path (#33891) * Refactor cache-control (#33861) * Decouple diff stats query from actual diffing (#33810) * Move part of updating protected branch logic to service layer (#33742) * Decouple Batch from git.Repository to simplify usage without requiring the creation of a Repository struct. (#34001) * Refactor tmpl and blob_excerpt (#32967) * Refactor template & test related code (#32938) * Refactor db package and remove unnecessary `DumpTables` (#32930) * Refactor pprof labels and process desc (#32909) * Refactor repo-projects.ts (#32892) * Refactor getpatch/getdiff functions and remove unnecessary fallback (#32817) * Uniform all temporary directories and allow customizing temp path (#32352) * Remove context from retry downloader (#33871) * Refactor global init code and add more comments (#33755) * Remove some unnecessary template helpers (#33069) * Move and rename UpdateRepository (#34136) * Move hooks function to gitrepo and reduce expose repopath (#33890) * Add abstraction layer to delete repository from disk (#33879) * Add abstraction layer to check if the repository exists on disk (#33874) * Move ParseCommitWithSSHSignature to service layer (#34087) * Move duplicated functions (#33977) * Extract code to their own functions for push update (#33944) * Move gitgraph from modules to services layer (#33527) * Move commits signature and verify functions to service layers (#33605) * Use `CloseIssue` and `ReopenIssue` instead of `ChangeStatus` (#32467) * Refactor arch route handlers (#32993) * Refactor "string truncate" (#32984) * Refactor arch route handlers (#32972) * Clarify path param naming (#32969) * Refactor request context (#32956) * Move some errors to their own sub packages (#32880) * Move RepoTransfer from models to models/repo sub package (#32506) * Move delete deploy keys into service layer (#32201) * Refactor webhook events (#33337) * Move some Actions related functions from `routers` to `services` (#33280) * Refactor RefName (#33234) * Refactor context RefName and RepoAssignment (#33226) * Refactor repository transfer (#33211) * Refactor error system (#33626) * Refactor error system (#33610) * Refactor package (routes and error handling, npm peer dependency) (#33111) * Use test context in tests and new loop system in benchmarks (#33648) * Some small refactors (#33144) * Simplify context ref name (#33267) * BUGFIXES * Fix some dropdown problems on the issue sidebar (#34308) #34327 * Do not return archive download URLs in API if downloads are disabled (#34324) #34338 * Fix LFS files being editable in web UI (#34356) #34362 * Fix only text/* being viewable in web UI (#34374) #34378 * Fix LFS file not stored in LFS when uploaded/edited via API or web UI (#34367) * Grey out expired artifact on Artifacts list (#34314) #34404 * Fix incorrect divergence cache after switching default branch (#34370) #34406 * Refactor commit message rendering and fix bugs (#34412) #34414 * Merge and tweak markup editor expander CSS (#34409) #34415 * Fix GetUsersByEmails (#34423) #34425 * Only git operations should update last changed of a repository (#34388) #34427 * Fix comment textarea scroll issue in Firefox (#34438) #34446 * Fix repo broken check (#34444) #34452 * Fix remove org user failure on mssql (#34449) #34453 * Fix Workflow run Not Found page (#34459) #34466 * When updating comment, if the content is the same, just return and not update the database (#34422) #34464 * Fix project board view (#34470) #34475 * Fix get / delete runner to use consistent http 404 and 500 status (#34480) #34488 * Fix url validation in webhook add/edit API (#34492) #34496 * Fix edithook api can not update package, status and workflow_job events (#34495) #34499 * Fix ephemeral runner deletion (#34447) #34513 * Don't display error log when .git-blame-ignore-revs doesn't exist (#34457) * Only allow admins to rename default/protected branches (#33276) * Improve "lock conversation" UI (#34207) * Fix incorrect file links (#34189) * Optimize Overflow Menu (#34183) * Check user/org repo limit instead of doer (#34147) * Make markdown render match GitHub's behavior (#34129) * Fix team permission (#34128) * Correctly handle submodule view and avoid throwing 500 error (#34121) * Fix users being able bypass limits with repo transfers (#34031) * Avoid creating unnecessary temporary cat file sub process (#33942) * Refactor organization menu (#33928) * Fix various Fomantic UI and htmx problems (#33851) * Fix 500 error when error occurred in migration page (#33256) * Validate that the tag doesn't exist when creating a tag via the web (#33241) * Add missed transaction on setmerged (#33079) * Rework create/fork/adopt/generate repository to make sure resources will be cleanup once failed (#31035) * Valid email address should only start with alphanumeric (#28174) * Fix webhook url (#34186) * Fix "toAbsoluteLocaleDate" test when system locale is not en-US (#33939) * Fix file name could not be searched if the file was not a text file when using the Bleve indexer (#33959) * Fix cannot delete runners via the modal dialog (#33895) * Fix unpin hint on the pinned pull requests (#33207) * Fix parentCommit invalid memory address or nil pointer dereference. (#33204) * Fix comment header padding (#33377) * Fix some migration and repo name problems (#33986) * Fix various trivial frontend problems (#34263) * Fix Set Email Preference dropdown and button placement (#34255) * Fix quoted replies incorrectly render user input as part of the quote (#34216) * Fix button alignments and remove unnecessary styles (#34206) * Restore form inputs on organization create error (#34201) * Try to fix ACME (3rd) (#33807) * Fix incorrect ref "blob" (#33240) * Fix dynamic content loading init problem (#33748) * Fix git empty check and HEAD request (#33690) * Fix Untranslated Text on Actions Page (#33635) * Fix issue label delete incorrect labels webhook payload (#34575) * Fix incorrect page navigation with up and down arrow on last item of dashboard repos (#34570) * Fix/improve avatar sync from LDAP (#34573) * Fix some trivial problems (#34579) * Retain issue sort type when a keyword search is introduced (#34559) * Always use an empty line to separate the commit message and trailer (#34512) * Fix line-button issue after file selection in file tree (#34574) * Fix doctor deleting orphaned issues attachments (#34142) * Add webhook assigning test and fix possible bug (#34420) * Fix possible nil description of pull request when migrating from CodeCommit (#34541) * Refactor commit reader (#34542) * Fix possible pull request broken when leave the page immediately after clicking the update button #34509 * Ignore "Close" error when uploading container blob (#34620) * Fix missed merge commit sha and time when migrating from codecommit (#34645) * Fix GetUsersByEmails (#34643) * Misc CSS fixes (#34638) * Add codecommit to supported services in api docs (#34626) * Validate hex colors when creating/editing labels (#34623) * Fix possible pull request broken when leave the page immediately after clicking the update button (#34509) * Fix margin issue in markup paragraph rendering (#34599) * Fix migration pull request title too long (#34577) * Fix footnote jump behavior on the issue page. (#34621) * Fix "oras" OCI client compatibility (#34666) * Fix last admin check when syncing users (#34649) * Fix skip paths check on tag push events in workflows (#34602) #34670 * MISC * Bump to alpine 3.22 (#34613) * Make pull request and issue history more compact (#34588) * Run integration tests against postgres 14 (#34514) #34536 * Enable addtional linters (#34085) * Enable testifylint rules (#34075) * Enable staticcheck QFxxxx rules (#34064) * Improve Actions test (#32883) * Drop fomantic build (#33845) * Go1.24 (#33562) * Run yamllint with strict mode, fix issue (#33551) * Disable cron task to update license (#33486) * Optimize makefile help information generation (#33390) * Convert github.com/xanzy/go-gitlab into gitlab.com/gitlab-org/api/client-go (#33126) * Add missed changelogs (#33649) * Update .changelog file to add performance label group (#33472) * Add missing POPULATE_SQUASH_COMMENT_WITH_COMMIT_MESSAGES in app.example.ini (#33363) * Update README screenshots (#33347) * Update unrs-resolver (#34279) * Update go&js dependencies (#34262) * Optimize the calling code of queryElems (#34235) * Update protected_branch.tmpl (#34193) * Feat/optimize span svg layout (#34185) * Set MERMAID_MAX_SOURCE_CHARACTERS to 50000 (#34152) * Update JS and PY deps (#34143) * Add Chinese translations for README files (#34132) * Use `overflow-wrap: anywhere` to replace `word-break: break-all` (#34126) * Clarify ownership in password change error messages (#34092) * Add toggleClass function in dom.ts (#34063) * Update to golangci-lint v2 (#34054) * Update Makefile test comments (#34013) * Update go mod dependencies (#33988) * Use filepath.Join instead of path.Join for file system file operations (#33978) * Prepare common tmpl functions in a middleware (#33957) * Remove unused or abused styles (#33918) * Update JS and PY deps, misc tweaks (#33903) * Try to figure out attribute checker problem (#33901) * Add lock for a repository pull mirror (#33876) * Fine tune push mirror UI (#33866) * Improve issue & code search (#33860) * Use pullrequestlist instead of []*pullrequest (#33765) * Upgrade act to 0.261.4 and actions-proto-go to v0.4.1 (#33760) * Align sidebar gears to the right (#33721) * Update Go dependencies (skip blevesearch, meilisearch) (#33655) * Add migrations and doctor fixes (#33556) * Remove "class-name" from svg icon (#33540) * Update MAINTAINERS (#33529) * Add "No data available" display when list is empty (#33517) * Use `git diff-tree` for `DiffFileTree` on diff pages (#33514) * Give organisation members access to organisation feeds (#33508) * Update feishu icon (#33470) * Hide/disable unusable UI elements when a repository is archived (#33459) * Update `@github/text-expander-element` to 2.9.0 (#33435) * Do not access GitRepo when a repo is being created (#33380) * Fix incorrect ref usages (#33301) * Prepare for support performance trace (#33286) * Enable Typescript `noImplicitThis` (#33250) * Remove unused CSS styles and move some styles to proper files (#33217) * Add .run to gitignore (#33175) * Fix typo in gitea downloader test and add missing codebase in `ToGitServiceType` (#33146) * Remove extended glob pattern from branch protection UI (#33125) * Clean up legacy form CSS styles (#33081) * Unset XDG_HOME_CONFIG as gitea manages configuration locations (#33067) * Add IntelliJ Gateway's .uuid to gitignore (#33052) * User facing messages for AGit errors (#33012) * Always show assignees on right (#33006) * Fix eslint (#33002) * Update JS dependencies (#32914) * Bump x/net (#32896) (#32900) * Only activity tab needs heatmap data loading (#34652)