Version 1.25.1

CHANGELOG.md

@@ -1063,3 +1063,20 @@
 [1.24.4]
 * Make email display name configurable
 
+[1.24.5]
+* Support autosigning via gnupg
+
+[1.25.0]
+* Update Gitea to 1.17.4
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.17.4)
+* Do not allow Ghost access to limited visible user/org (#21849) (#21875)
+* Fix package access for admins and inactive users (#21580) (#21592)
+* Fix button in branch list, avoid unexpected page jump before restore branch actually done (#21562) (#21927)
+* Fix vertical align of committer avatar rendered by email address (#21884) (#21919)
+* Fix setting HTTP headers after write (#21833) (#21874)
+* Ignore line anchor links with leading zeroes (#21728) (#21777)
+* Enable Monaco automaticLayout (#21516)
+
+[1.25.1]
+* Trust reverse proxy IP
+

CloudronManifest.json

@@ -4,8 +4,8 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.24.4",
-  "upstreamVersion": "1.17.3",
+  "version": "1.25.1",
+  "upstreamVersion": "1.17.4",
   "healthCheckPath": "/explore",
   "httpPort": 3000,
   "memoryLimit": 536870912,

Dockerfile

@@ -1,4 +1,4 @@
-FROM cloudron/base:3.2.0@sha256:ba1d566164a67c266782545ea9809dc611c4152e27686fd14060332dd88263ea
+FROM cloudron/base:4.0.0@sha256:31b195ed0662bdb06a6e8a5ddbedb6f191ce92e8bee04c03fb02dd4e9d0286df
 
 RUN apt-get update && \
     apt-get install -y openssh-server git asciidoctor pandoc && \
@@ -16,7 +16,10 @@ RUN passwd -d git
 RUN mkdir -p /home/git/gitea
 WORKDIR /home/git
 
-ARG VERSION=1.17.3
+# for autosign feature
+ENV GNUPGHOME="/app/data/gnupg"
+
+ARG VERSION=1.17.4
 
 RUN curl -L https://dl.gitea.io/gitea/${VERSION}/gitea-${VERSION}-linux-amd64 -o /home/git/gitea/gitea \
     && chmod +x /home/git/gitea/gitea

app.ini.template

@@ -64,7 +64,8 @@ SKIP_VERIFY = true
 ; those settings are protected and can't be modified
 INSTALL_LOCK = true
 SECRET_KEY = ##SECRET_KEY
-
+REVERSE_PROXY_LIMIT = 1
+REVERSE_PROXY_TRUSTED_PROXIES = *
 
 [service]
 DISABLE_REGISTRATION = false

start.sh

@@ -117,16 +117,17 @@ crudini --set "/run/gitea/app.ini" mailer PASSWD "${CLOUDRON_MAIL_SMTP_PASSWORD}
 crudini --set "/run/gitea/app.ini" mailer FROM "${CLOUDRON_MAIL_FROM}"
 crudini --set "/run/gitea/app.ini" mailer SKIP_VERIFY "true"
 crudini --set "/run/gitea/app.ini" security INSTALL_LOCK "true"
+crudini --set "/run/gitea/app.ini" security REVERSE_PROXY_LIMIT 1
+crudini --set "/run/gitea/app.ini" security REVERSE_PROXY_TRUSTED_PROXIES "*"
 crudini --set "/run/gitea/app.ini" log MODE "console"
 crudini --set "/run/gitea/app.ini" log ROOT_PATH "/run/gitea"
 crudini --set "/run/gitea/app.ini" indexer ISSUE_INDEXER_PATH "/app/data/appdata/indexers/issues.bleve"
 
 echo "==> Creating dirs and changing permissions"
-mkdir -p /app/data/repository /app/data/ssh /app/data/custom
+mkdir -p /app/data/repository /app/data/ssh /app/data/custom /app/data/gnupg
 chown -R git:git /app/data /run/gitea
 
 # this expects app.ini to be available
 ( setup_auth ) &
 
 exec /usr/bin/supervisord --configuration /etc/supervisor/supervisord.conf --nodaemon -i Gitea
-

supervisor/sshd.conf

@@ -8,4 +8,3 @@ stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr
 stderr_logfile_maxbytes=0
-

test/package-lock.json

@@ -13,8 +13,8 @@
         "expect.js": "^0.3.1",
         "mocha": "^10.1.0",
         "rimraf": "^3.0.2",
-        "selenium-webdriver": "^4.6.0",
-        "superagent": "^8.0.3"
+        "selenium-webdriver": "^4.6.1",
+        "superagent": "^8.0.4"
       }
     },
     "node_modules/@testim/chrome-version": {
@@ -1205,9 +1205,9 @@
       ]
     },
     "node_modules/selenium-webdriver": {
-      "version": "4.6.0",
-      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.6.0.tgz",
-      "integrity": "sha512-HIH/+J+V7l/lbSRSOwyLcpjezg9CV4DLo1pBhP9aphuMlf/PJXEDwC/A/Ht2bFc1AqQppFBGvClYcuMzyO6tRw==",
+      "version": "4.6.1",
+      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.6.1.tgz",
+      "integrity": "sha512-FT8Dw0tbzaTp8YYLuwhaCnve/nw03HKrOJrA3aUmTKmxaIFSP4kT2R5fN3K0RpV5kbR0ZnM4FGVI2vANBvekaA==",
       "dependencies": {
         "jszip": "^3.10.0",
         "tmp": "^0.2.1",
@@ -1293,9 +1293,9 @@
       }
     },
     "node_modules/superagent": {
-      "version": "8.0.3",
-      "resolved": "https://registry.npmjs.org/superagent/-/superagent-8.0.3.tgz",
-      "integrity": "sha512-oBC+aNsCjzzjmO5AOPBPFS+Z7HPzlx+DQr/aHwM08kI+R24gsDmAS1LMfza1fK+P+SKlTAoNZpOvooE/pRO1HA==",
+      "version": "8.0.4",
+      "resolved": "https://registry.npmjs.org/superagent/-/superagent-8.0.4.tgz",
+      "integrity": "sha512-yaQB7YqAHhutt8yU7XIRKXGXtkxKidVuiDJ8FJPBG7JPd7Ckv4X9cOdxVGH5DFsPXodsCrOSzdUi2xL+o9z1qw==",
       "dependencies": {
         "component-emitter": "^1.3.0",
         "cookiejar": "^2.1.3",
@@ -2353,9 +2353,9 @@
       "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="
     },
     "selenium-webdriver": {
-      "version": "4.6.0",
-      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.6.0.tgz",
-      "integrity": "sha512-HIH/+J+V7l/lbSRSOwyLcpjezg9CV4DLo1pBhP9aphuMlf/PJXEDwC/A/Ht2bFc1AqQppFBGvClYcuMzyO6tRw==",
+      "version": "4.6.1",
+      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.6.1.tgz",
+      "integrity": "sha512-FT8Dw0tbzaTp8YYLuwhaCnve/nw03HKrOJrA3aUmTKmxaIFSP4kT2R5fN3K0RpV5kbR0ZnM4FGVI2vANBvekaA==",
       "requires": {
         "jszip": "^3.10.0",
         "tmp": "^0.2.1",
@@ -2417,9 +2417,9 @@
       "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig=="
     },
     "superagent": {
-      "version": "8.0.3",
-      "resolved": "https://registry.npmjs.org/superagent/-/superagent-8.0.3.tgz",
-      "integrity": "sha512-oBC+aNsCjzzjmO5AOPBPFS+Z7HPzlx+DQr/aHwM08kI+R24gsDmAS1LMfza1fK+P+SKlTAoNZpOvooE/pRO1HA==",
+      "version": "8.0.4",
+      "resolved": "https://registry.npmjs.org/superagent/-/superagent-8.0.4.tgz",
+      "integrity": "sha512-yaQB7YqAHhutt8yU7XIRKXGXtkxKidVuiDJ8FJPBG7JPd7Ckv4X9cOdxVGH5DFsPXodsCrOSzdUi2xL+o9z1qw==",
       "requires": {
         "component-emitter": "^1.3.0",
         "cookiejar": "^2.1.3",

test/package.json

@@ -13,7 +13,7 @@
     "expect.js": "^0.3.1",
     "mocha": "^10.1.0",
     "rimraf": "^3.0.2",
-    "selenium-webdriver": "^4.6.0",
-    "superagent": "^8.0.3"
+    "selenium-webdriver": "^4.6.1",
+    "superagent": "^8.0.4"
   }
 }