Version 1.28.2

CHANGELOG.md

@@ -1060,3 +1060,142 @@
   * Use en-US as fallback when using other default language (#21200) (#21256)
   * Make the vscode clone link respect transport protocol (#20557) (#21128)
 
+[1.24.4]
+* Make email display name configurable
+
+[1.24.5]
+* Support autosigning via gnupg
+
+[1.25.0]
+* Update Gitea to 1.17.4
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.17.4)
+* Do not allow Ghost access to limited visible user/org (#21849) (#21875)
+* Fix package access for admins and inactive users (#21580) (#21592)
+* Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21927)
+* Fix vertical align of committer avatar rendered by email address (#21884) (#21919)
+* Fix setting HTTP headers after write (#21833) (#21874)
+* Ignore line anchor links with leading zeroes (#21728) (#21777)
+* Enable Monaco automaticLayout (#21516)
+
+[1.25.1]
+* Trust reverse proxy IP
+
+[1.26.0]
+* Update Gitea to 1.18.0
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.18.0)
+* Remove ReverseProxy authentication from the API (#22219) (#22251)
+* Support Go Vulnerability Management (#21139)
+* Forbid HTML string tooltips (#20935)
+* Rework mailer settings (#18982)
+* Remove U2F support (#20141)
+* Refactor i18n to locale (#20153)
+* Enable contenthash in filename for dynamic assets (#20813)
+* And a lot more enhancements
+
+[1.26.1]
+* Update Gitea to 1.18.1
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.18.1)
+* Update github.com/zeripath/zapx/v15 (#22485)
+* Fix pull request API field closed_at always being null (#22482) (#22483)
+* Fix container blob mount (#22226) (#22476)
+* Fix error when calculating repository size (#22392) (#22474)
+* Fix Operator does not exist bug on explore page with ONLY_SHOW_RELEVANT_REPOS (#22454) (#22472)
+* Fix environments for KaTeX and error reporting (#22453) (#22473)
+* Remove the netgo tag for Windows build (#22467) (#22468)
+* Fix migration from GitBucket (#22477) (#22465)
+* Prevent panic on looking at api "git" endpoints for empty repos (#22457) (#22458)
+* Fix PR status layout on mobile (#21547) (#22441)
+* Fix wechatwork webhook sends empty content in PR review (#21762) (#22440)
+* Remove duplicate "Actions" label in mobile view (#21974) (#22439)
+* Fix leaving organization bug on user settings -> orgs (#21983) (#22438)
+* Fixed colour transparency regex matching in project board sorting (#22092) (#22437)
+* Correctly handle select on multiple channels in Queues (#22146) (#22428)
+* Prepend refs/heads/ to issue template refs (#20461) (#22427)
+* Restore function to "Show more" buttons (#22399) (#22426)
+* Continue GCing other repos on error in one repo (#22422) (#22425)
+* Allow HOST has no port (#22280) (#22409)
+* Fix omit `avatar_url` in discord payload when empty (#22393) (#22394)
+* Don't display stop watch top bar icon when disabled and hidden when click other place (#22374) (#22387)
+* Don't lookup mail server when using sendmail (#22300) (#22383)
+* Fix gravatar disable bug (#22337)
+* Fix update settings table on install (#22326) (#22327)
+* Fix sitemap (#22272) (#22320)
+* Fix code search title translation (#22285) (#22316)
+* Fix due date rendering the wrong date in issue (#22302) (#22306)
+* Fix get system setting bug when enabled redis cache (#22298)
+* Fix bug of DisableGravatar default value (#22297)
+* Fix key signature error page (#22229) (#22230)
+
+[1.26.2]
+* Update Gitea to 1.18.2
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.18.2)
+* When updating by rebase we need to set the environment for head repo (#22535) (#22536)
+* Fix issue not auto-closing when it includes a reference to a branch (#22514) (#22521)
+* Fix invalid issue branch reference if not specified in template (#22513) (#22520)
+* Fix 500 error viewing pull request when fork has pull requests disabled (#22512) (#22515)
+* Reliable selection of admin user (#22509) (#22511)
+* Set `disable_gravatar`/`enable_federated_avatar` when offline mode is true (#22479) (#22496)
+
+[1.26.3]
+* Update Gitea to 1.18.3
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.18.3)
+* Prevent multiple To recipients (#22566) (#22569)
+* Truncate commit summary on repo files table. (#22551) (#22552)
+* Mute all links in issue timeline (#22534)
+
+[1.26.4]
+* Update Gitea to 1.18.4
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.18.4)
+* SECURITY
+  * Provide the ability to set password hash algorithm parameters (#22942) (#22943)
+  * Add command to bulk set must-change-password (#22823) (#22928)
+* ENHANCEMENTS
+  * Use import of OCI structs (#22765) (#22805)
+  * Fix color of tertiary button on dark theme (#22739) (#22744)
+  * Link issue and pull requests status change in UI notifications directly to their event in the timelined view. (#22627) (#22642)
+* BUGFIXES
+  * Notify on container image create (#22806) (#22965)
+  * Fix blame view missing lines (#22826) (#22929)
+  * Fix incorrect role labels for migrated issues and comments (#22914) (#22923)
+  * Fix PR file tree folders no longer collapsing (#22864) (#22872)
+  * Escape filename when assemble URL (#22850) (#22871)
+
+[1.27.0]
+* Email display name support
+
+[1.27.1]
+* Update Gitea to 1.18.5
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.18.5)
+* Hide 2FA status from other members in organization members list (#22999) (#23023)
+* Add `force_merge` to merge request and fix checking mergable (#23010) (#23032)
+* Use --message=%s for git commit message (#23028) (#23029)
+* Render access log template as text instead of HTML (#23013) (#23025)
+* Fix the Manually Merged form (#23015) (#23017)
+
+[1.28.0]
+* Update Gitea to 1.19.0
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.19.0)
+
+[1.28.1]
+* Update Gitea to 1.19.1
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.19.1)
+* Breaking: Rename actions unit to repo.actions and add docs for it (#23733) (#23881)
+* Add card type to org/user level project on creation, edit and view (#24043) (#24066)
+* Refactor commit status for Actions jobs (#23786) (#24060)
+* Show errors for KaTeX and mermaid on the preview tab (#24009) (#24019)
+* Show protected branch rule names again (#23907) (#24018)
+* Adjust sticky PR header to cover background (#23956) (#23999)
+* Discolor pull request tab labels (#23950) (#23987)
+* Treat PRs with agit flow as fork PRs when triggering actions. (#23884) (#23967)
+* Left-align review comments (#23937)
+
+[1.28.2]
+* Update Gitea to 1.19.2
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.19.2)
+* Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
+* Only delete secrets belonging to its owner (#24284) (#24286)
+* Fix typo in API route (#24310) (#24332)
+* Fix access token issue on some public endpoints (#24194) (#24259)
+* Fix broken clone script on an empty archived repo (#24339) (#24348)
+* Fix Monaco IOS keyboard button (#24341) (#24347)
+* Don't set meta theme-color by default (#24340) (#24346)

CloudronManifest.json

@@ -4,15 +4,15 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.24.3",
-  "upstreamVersion": "1.17.3",
+  "version": "1.28.2",
+  "upstreamVersion": "1.19.2",
   "healthCheckPath": "/explore",
   "httpPort": 3000,
   "memoryLimit": 536870912,
   "addons": {
     "mysql": { },
     "sendmail": { },
-    "localstorage": { },
+    "localstorage": { "supportsDisplayName": true },
     "ldap": { }
   },
   "tcpPorts": {
@@ -37,7 +37,7 @@
   "tags": [ "version control", "git", "code hosting", "development", "github", "bitbucket", "gitlab" ],
   "changelog": "file://CHANGELOG.md",
   "postInstallMessage": "file://POSTINSTALL.md",
-  "minBoxVersion": "7.1.2",
+  "minBoxVersion": "7.3.0",
   "forumUrl": "https://forum.cloudron.io/category/19/gitea",
   "documentationUrl": "https://docs.cloudron.io/apps/gitea/"
 }

Dockerfile

@@ -1,4 +1,4 @@
-FROM cloudron/base:3.2.0@sha256:ba1d566164a67c266782545ea9809dc611c4152e27686fd14060332dd88263ea
+FROM cloudron/base:4.0.0@sha256:31b195ed0662bdb06a6e8a5ddbedb6f191ce92e8bee04c03fb02dd4e9d0286df
 
 RUN apt-get update && \
     apt-get install -y openssh-server git asciidoctor pandoc && \
@@ -16,7 +16,10 @@ RUN passwd -d git
 RUN mkdir -p /home/git/gitea
 WORKDIR /home/git
 
-ARG VERSION=1.17.3
+# for autosign feature
+ENV GNUPGHOME="/app/data/gnupg"
+
+ARG VERSION=1.19.2
 
 RUN curl -L https://dl.gitea.io/gitea/${VERSION}/gitea-${VERSION}-linux-amd64 -o /home/git/gitea/gitea \
     && chmod +x /home/git/gitea/gitea

POSTINSTALL.md

@@ -1,8 +1,10 @@
-This app is pre-setup with an admin account (use the `Local` authentication source for logging in as admin).
-The initial credentials are:
+This app is pre-setup with an admin account. The initial credentials are:
 
 **Username**: root<br/>
 **Password**: changeme<br/>
 
 Please change the admin password immediately.
 
+<sso>
+Use the `Local` authentication source for logging in as admin.
+</sso>

app.ini.template

@@ -64,7 +64,8 @@ SKIP_VERIFY = true
 ; those settings are protected and can't be modified
 INSTALL_LOCK = true
 SECRET_KEY = ##SECRET_KEY
-
+REVERSE_PROXY_LIMIT = 1
+REVERSE_PROXY_TRUSTED_PROXIES = *
 
 [service]
 DISABLE_REGISTRATION = false

start.sh

@@ -28,7 +28,7 @@ setup_ldap_source() {
 setup_root_user() {
     set -eu
 
-    if sudo -H -u git /home/git/gitea/gitea admin user create --username root --password changeme --email test@cloudron.io --admin -c /run/gitea/app.ini; then
+    if sudo -H -u git /home/git/gitea/gitea admin user create --username root --password changeme --email admin@cloudron.local --admin -c /run/gitea/app.ini; then
         echo "==> root user added"
     else
         echo "==> Failed to add root user"
@@ -114,19 +114,20 @@ crudini --set "/run/gitea/app.ini" repository.upload TEMP_PATH "/run/gitea/tmp/u
 crudini --set "/run/gitea/app.ini" mailer HOST "${CLOUDRON_MAIL_SMTP_SERVER}:${CLOUDRON_MAIL_SMTPS_PORT}"
 crudini --set "/run/gitea/app.ini" mailer USER "${CLOUDRON_MAIL_SMTP_USERNAME}"
 crudini --set "/run/gitea/app.ini" mailer PASSWD "${CLOUDRON_MAIL_SMTP_PASSWORD}"
-crudini --set "/run/gitea/app.ini" mailer FROM "${CLOUDRON_MAIL_FROM}"
+crudini --set "/run/gitea/app.ini" mailer FROM "${CLOUDRON_MAIL_FROM_DISPLAY_NAME:-Gitea} <${CLOUDRON_MAIL_FROM}>"
 crudini --set "/run/gitea/app.ini" mailer SKIP_VERIFY "true"
 crudini --set "/run/gitea/app.ini" security INSTALL_LOCK "true"
+crudini --set "/run/gitea/app.ini" security REVERSE_PROXY_LIMIT 1
+crudini --set "/run/gitea/app.ini" security REVERSE_PROXY_TRUSTED_PROXIES "*"
 crudini --set "/run/gitea/app.ini" log MODE "console"
 crudini --set "/run/gitea/app.ini" log ROOT_PATH "/run/gitea"
 crudini --set "/run/gitea/app.ini" indexer ISSUE_INDEXER_PATH "/app/data/appdata/indexers/issues.bleve"
 
 echo "==> Creating dirs and changing permissions"
-mkdir -p /app/data/repository /app/data/ssh /app/data/custom
+mkdir -p /app/data/repository /app/data/ssh /app/data/custom /app/data/gnupg
 chown -R git:git /app/data /run/gitea
 
 # this expects app.ini to be available
 ( setup_auth ) &
 
 exec /usr/bin/supervisord --configuration /etc/supervisor/supervisord.conf --nodaemon -i Gitea
-

supervisor/sshd.conf

@@ -8,4 +8,3 @@ stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
-

test/package.json

@@ -9,11 +9,10 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^106.0.1",
+    "chromedriver": "^112.0.0",
     "expect.js": "^0.3.1",
-    "mocha": "^10.1.0",
-    "rimraf": "^3.0.2",
-    "selenium-webdriver": "^4.5.0",
-    "superagent": "^8.0.0"
+    "mocha": "^10.2.0",
+    "selenium-webdriver": "^4.9.0",
+    "superagent": "^8.0.9"
   }
 }