Commit Graph

5427 Commits (e309bc8324ca0799a320169747c2f11d56968631)

Author SHA1 Message Date
Joe Chen e309bc8324
release: update version to 0.12.5 2022-03-11 14:58:57 +08:00
ysf 64102be2c9
security: fix improper PAM authorization handling (#6819)
Co-authored-by: Joe Chen <jc@unknwon.io>
# Conflicts:
#	CHANGELOG.md
#	internal/auth/pam/pam.go
2022-03-11 14:52:11 +08:00
Michael Rowley 91f2cde5e9
security: fix SSRF in repository migration (#6812)
Co-authored-by: Joe Chen <jc@unknwon.io>
# Conflicts:
#	CHANGELOG.md
#	internal/route/repo/webhook.go
2022-03-11 14:51:32 +08:00
Joe Chen b3541030c3
Update Taskfile for Windows 2022-01-18 00:23:27 +08:00
Joe Chen bc8b8c3767
Add Taskfile 2022-01-17 21:38:13 +08:00
Joe Chen d4ae178b72
Fix docker scripts permissions 2022-01-17 10:19:45 +08:00
Joe Chen fa1d9174ad
ci: add docker workflow 2022-01-17 09:45:19 +08:00
Joe Chen 2210ab7a42
release: update version to 0.12.4 2022-01-17 09:25:29 +08:00
Joe Chen 01a2c68abb
ci: sync workflows from `main` branch (#6730) 2022-01-16 19:51:14 +08:00
Joe Chen 2626bcf94f
chore: sync up Dockerfile and Makefile 2022-01-13 14:19:58 +08:00
Joe Chen 5a04c47cf0
markup: use default link formation when no format in metas (#6723)
# Conflicts:
#	CHANGELOG.md
2022-01-13 10:19:59 +08:00
stypr ec84506da4
repo: disallow urlencoded new lines in git protocol paths (#6420)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-11-27 18:53:38 +08:00
Matheus Mosca eb3386c4aa
context: add X-Frame-Options header (#6411)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
# Conflicts:
#	CHANGELOG.md
2020-11-11 12:20:58 +08:00
ᴜɴᴋɴᴡᴏɴ f0e3cd90f8
release: update version to 0.12.3 2020-10-07 22:39:36 +08:00
ᴜɴᴋɴᴡᴏɴ fbe34c8c61
lfs: ask client to always send the same value for the HTTP header (#6369)
# Conflicts:
#	go.sum
2020-10-06 13:12:56 +08:00
Jeff e6b4c467e8
markup: render SHA links without branch prefix (#6350)
Co-authored-by: Zhukov Roman <zhukov.roman@gmail.com>
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-10-06 13:08:27 +08:00
ᴜɴᴋɴᴡᴏɴ 6b6bfe8bb0
cmd/serv: use different log files for ORMs in hook mode (#6361)
# Conflicts:
#	CHANGELOG.md
#	go.sum
#	internal/db/db.go
#	internal/db/models.go
2020-09-29 22:36:02 +08:00
ᴜɴᴋɴᴡᴏɴ 253b2bef4c
ci: update Go workflow from main 2020-09-26 16:53:26 +08:00
ᴜɴᴋɴᴡᴏɴ 1a051ae5f8
release: update version to 0.12.2 2020-09-26 16:50:07 +08:00
ᴜɴᴋɴᴡᴏɴ ca54cbd055
action: fix issue reference regexp and error handling (#6352) 2020-09-26 16:23:40 +08:00
ᴜɴᴋɴᴡᴏɴ 9044afa40f
dep: update github.com/unknwon/cae to v1.0.2 (#6342)
# Conflicts:
#	go.mod
#	go.sum
2020-09-21 20:32:05 +08:00
ᴜɴᴋɴᴡᴏɴ 672625b55c
gitutil: infer submodule with baseURL when it is a relative path (#6337)
# Conflicts:
#	internal/assets/templates/templates_gen.go
#	internal/conf/testdata/TestInit.golden.ini
2020-09-18 16:21:16 +08:00
ᴜɴᴋɴᴡᴏɴ 98c65f319f
web: correctly serving go-get pages for subdirs (#6318)
* web: correctly serving go-get page for subdirs

* Update CHANGELOG

* Fix golint error
# Conflicts:
#	CHANGELOG.md
2020-09-09 20:15:44 +08:00
ᴜɴᴋɴᴡᴏɴ 43fc826085
release: update version to 0.12.1 2020-08-27 14:47:41 +08:00
ᴜɴᴋɴᴡᴏɴ d7a6bb8bcb
db: fix wrong column type of `login_source` (#6283)
# Conflicts:
#	CHANGELOG.md
2020-08-27 14:46:26 +08:00
Kosadchiy db037495de
issue: fix timestamp updating (#6210)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-08-27 14:46:06 +08:00
ᴜɴᴋɴᴡᴏɴ 39bdd5c2cd
assets: make generate (#6265) 2020-08-22 19:13:00 +08:00
ᴜɴᴋɴᴡᴏɴ f17e7d5a2c
release: remove dev version notion 2020-08-22 17:55:16 +08:00
ᴜɴᴋɴᴡᴏɴ 720cb5fcb1
CHANGELOG: cut 0.12.0 and 0.13.0+dev (#6264) 2020-08-22 17:52:27 +08:00
ᴜɴᴋɴᴡᴏɴ c7a10dd90d
locale: sync from Crowdin (#6263) 2020-08-22 17:49:33 +08:00
ᴜɴᴋɴᴡᴏɴ 178b73fecd
repo: users have access to base repository can also view forks (#6261) 2020-08-22 13:17:45 +08:00
ᴜɴᴋɴᴡᴏɴ bc8428ca42
conf: make generate for #6237 (#6260) 2020-08-22 01:49:51 +08:00
David Refoua 90b1ee1dfa
conf: fix some typos in comments (app.ini) (#6237) 2020-08-22 01:36:29 +08:00
ᴜɴᴋɴᴡᴏɴ 7f9a4b7578
CHANGELOG: add entry for gogs/git-module#59 (#6257) 2020-08-21 22:37:01 +08:00
Fernando San Julián e789f82979
deps: update git-module to v.1.1.2 (#6256)
Co-authored-by: Gogs <gogs@fake.local>
2020-08-21 22:31:50 +08:00
ᴜɴᴋɴᴡᴏɴ c6143edb44
osutil: update docstring and tests (#6255) 2020-08-19 21:30:01 +08:00
bibo38 252d0fd977
osutil: use system API to get the username when env vars are empty (#6246)
As Golang supports getting usernames via the standard library, this function
is now used to get the username if the environment variables are empty.
Using the standard library as a fallback is intended to keep compability
to existing implementations that rely on the environment variables dictating
the current username.
2020-08-19 21:17:16 +08:00
InsanusMokrassar d1caae3f79
docker: fix gosu link in Dockerfile.rpi (#6203) 2020-08-17 21:29:22 +08:00
dependabot-preview[bot] 874d2fd602
build(deps): bump golang.org/x/text from 0.3.2 to 0.3.3 (#6207)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.2 to 0.3.3.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.3.2...v0.3.3)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-08-17 21:28:13 +08:00
dependabot-preview[bot] 32adb0f2da
build(deps): bump github.com/microcosm-cc/bluemonday from 1.0.2 to 1.0.4 (#6251)
Bumps [github.com/microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) from 1.0.2 to 1.0.4.
- [Release notes](https://github.com/microcosm-cc/bluemonday/releases)
- [Commits](https://github.com/microcosm-cc/bluemonday/compare/v1.0.2...v1.0.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-08-17 21:24:43 +08:00
ᴜɴᴋɴᴡᴏɴ f3993b9cdb
organization: limit showing at most 12 members in profile page (#6254) 2020-08-17 21:09:22 +08:00
ᴜɴᴋɴᴡᴏɴ a961afe52b
db: fix update team panic (#6253)
* db: fix update team panic

* Update CHANGELOG
2020-08-16 21:31:08 +08:00
ᴜɴᴋɴᴡᴏɴ f667d139bc
README: update VPS sponsor 2020-08-16 19:50:40 +08:00
Dre 90904b3f42
workflow: add shellcheck as a linter (#6202)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-07-17 22:49:32 +08:00
ᴜɴᴋɴᴡᴏɴ a7afa11610
lsif: fix upload to private instance (#6216) 2020-06-30 00:25:57 +08:00
dependabot-preview[bot] 2fe4d07599
build(deps): bump github.com/json-iterator/go from 1.1.9 to 1.1.10 (#6199)
Bumps [github.com/json-iterator/go](https://github.com/json-iterator/go) from 1.1.9 to 1.1.10.
- [Release notes](https://github.com/json-iterator/go/releases)
- [Commits](https://github.com/json-iterator/go/compare/v1.1.9...v1.1.10)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-13 13:39:31 +08:00
dependabot-preview[bot] da4f5d79f5
build(deps): bump gopkg.in/macaron.v1 from 1.3.8 to 1.3.9 (#6200)
Bumps [gopkg.in/macaron.v1](https://github.com/go-macaron/macaron) from 1.3.8 to 1.3.9.
- [Release notes](https://github.com/go-macaron/macaron/releases)
- [Commits](https://github.com/go-macaron/macaron/compare/v1.3.8...v1.3.9)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-13 13:39:04 +08:00
dependabot-preview[bot] 2af4114d64
build(deps): bump github.com/stretchr/testify from 1.6.0 to 1.6.1 (#6201)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.6.0...v1.6.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-06-13 13:38:49 +08:00
Baptiste Covolato 8366bd1cbe
Update Dockerfiles for ARM to use alpine golang (#6183) 2020-06-11 23:10:10 +08:00
Justin Hutchings 79d8aa0cb8
Add CodeQL security scanning (#6188)
Co-authored-by: ᴜɴᴋɴᴡᴏɴ <u@gogs.io>
2020-06-11 23:02:57 +08:00