git

Update docker.io/gitea/gitea Docker tag to v1.23.0

Michi Kofler-Häusler

Michi Kofler-Häusler

— 11 min read
Update docker.io/gitea/gitea Docker tag to v1.23.0
Photo by Yancy Min / Unsplash

No problems automatically updating minor version Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package Update Change
docker.io/gitea/gitea minor 1.22.6-rootless -> 1.23.0-rootless

Release Notes

go-gitea/gitea (docker.io/gitea/gitea)

v1.23.0

Compare Source

BREAKING

  • Rename config option [camo].Allways to [camo].Always (#​32097)
  • Remove SHA1 for support for SSH RSA signing (#​31857)
  • Use UTC as the default timezone when scheduling Actions cron tasks (#​31742)
  • Delete Actions logs older than 1 year by default (#​31735)
  • Make OIDC introspection authentication strictly require Client ID and secret (#​31632)

SECURITY

  • Include file extension checks in attachment API (#​32151)
  • Include all security fixes that have been backported to v1.22

FEATURES

  • Allow to fork repository into the same owner (#​32819)
  • Support "merge upstream branch" (Sync fork) (#​32741)
  • Add Arch package registry (#​32692)
  • Allow to disable the password-based login (sign-in) form (#​32687)
  • Allow cropping an avatar before setting it (#​32565)
  • Support quote selected comments to reply (#​32431)
  • Add reviewers' selection to new pull request (#​32403)
  • Suggestions for issues (#​32327)
  • Add priority to the protected branch (#​32286)
  • Included tag search capabilities (#​32045)
  • Add option to filter board cards by labels and assignees (#​31999)
  • Add automatic light/dark option for the colorblind theme (#​31997)
  • Support migration from AWS CodeCommit (#​31981)
  • Introduce globallock as distributed locks (#​31908 & #​31813)
  • Support compression for Actions logs & enable by default (#​31761 & #​32013)
  • Add pure SSH LFS support (#​31516)
  • Add Passkey login support (#​31504)
  • Actions support workflow dispatch event (#​28163)
  • Support repo license (#​24872)
  • Issue time estimate, meaningful time tracking (#​23113)
  • GitHub like repo home page (#​32213 & #​32847)
  • Rearrange Clone Panel (#​31142)
  • Enhancing Gitea OAuth2 Provider with Granular Scopes for Resource Access (#​32573)
  • Use env GITEA_RUNNER_REGISTRATION_TOKEN as global runner token (#​32946) #​32964
  • Update i18n.go - Language Picker (#​32933) #​32935

PERFORMANCE

  • Perf: add extra index to notification table (#​32395)
  • Introduce OrgList and add LoadTeams, optimize Load teams for organizations (#​32543)
  • Improve performance of diffs (#​32393)
  • Make LFS http_client parallel within a batch. (#​32369)
  • Add a new index for action to resolve the performance problem (#​32333)
  • Improve get feed with pagination (#​31821)
  • Performance improvements for pull request list API (#​30490)
  • Use batch database operations instead of one-by-one to optimze api pulls (#​32680)
  • Use gitrepo.GetTreePathLatestCommit to get file's lastest commit instead from the latest commit cache (#​32987) #​33046

ENHANCEMENTS

  • Code

    • Remove unnecessary border in repo home page sidebar (#​32767)
    • Add 'Copy path' button to file view (#​32584)
    • Improve diff file tree (#​32658)
    • Add new [lfs_client].BATCH_SIZE and [server].LFS_MAX_BATCH_SIZE config settings. (#​32307)
    • Updated tokenizer to better matching when search for code snippets (#​32261)
    • Change the code search to sort results by relevance (#​32134)
    • Support migrating GitHub/GitLab MR draft status (#​32242)
    • Move lock icon position and add additional tooltips to branch list page (#​31839)
    • Add tag name in the commits list (#​31082)
    • Add MAX_ROWS option for CSV rendering (#​30268)
    • Allow code search by filename (#​32210)
    • Make git push options accept short name (#​32245)
    • Repo file list enhancements (#​32835)

  • Markdown & Editor

    • Refactor markdown math render, add dollor-backquote syntax support (#​32831)
    • Make Monaco theme follow browser, fully type codeeditor.ts (#​32756)
    • Refactor markdown editor and use it for milestone description editor (#​32688)
    • Add some handy markdown editor features (#​32400)
    • Improve markdown textarea for indentation and lists (#​31406)

  • Issue

    • Add label/author/assignee filters to the user/org home issue list (#​32779)
    • Refactor issue filter (labels, poster, assignee) (#​32771)
    • Style unification for the issue_management area (#​32605)
    • Add "View all branches/tags" entry to Branch Selector (#​32653)
    • Improve textarea paste (#​31948)
    • Add avif image file support (#​32508)
    • Prevent from submitting issue/comment on uploading (#​32263)
    • Issue Templates: add option to have dropdown printed list (#​31577)
    • Allow searching issues by ID (#​31479)
    • Add is_archived option for issue indexer (#​32735)
    • Improve attachment upload methods (#​30513)
    • Support issue template assignees (#​31083)
    • Prevent simultaneous editing of comments and issues (#​31053)
    • Add issue comment when moving issues from one column to another of the project (#​29311)

  • Merge Request

    • Display head branch more comfortable on pull request view (#​32000)
    • Simplify review UI (#​31062)
    • Allow force push to protected branches (#​28086)
    • Add line-through for deleted branch on pull request view page (#​32500)
    • Support requested_reviewers data in comment webhook events (#​26178)
    • Allow maintainers to view and edit files of private repos when "Allow maintainers to edit" is enabled (#​32215)
    • Allow including Reviewed-on/Reviewed-by lines for custom merge messages (#​31211)

  • Actions

    • Render job title as commit message (#​32748)
    • Refactor RepoActionView.vue, add ::group:: support (#​32713)
    • Make RepoActionView.vue support ##[group] (#​32770)
    • Support pull_request_target event for commit status (#​31703)
    • Detect whether action view branch was deleted (#​32764)
    • Allow users with write permission to run actions (#​32644)
    • Show latest run when visit /run/latest (#​31808)

  • Packages

    • Improve rubygems package registry (#​31357)
    • Add support for npm bundleDependencies (#​30751)
    • Add signature support for the RPM module (#​27069)
    • Extract and display readme and comments for Composer packages (#​30927)

  • Project

    • Add title to project view page (#​32747)
    • Set the columns height to hug all its contents (#​31726)
    • Rename project board -> column to make the UI less confusing (#​30170)

  • User & Organazition

    • Use better name for userinfo structure (#​32544)
    • Use user.FullName in Oauth2 id_token response (#​32542)
    • Limit org member view of restricted users (#​32211)
    • Allow disabling authentication related user features (#​31535)
    • Add option to change mail from user display name (#​31528)
    • Use FullName in Emails to address the recipient if possible (#​31527)

  • Administration

    • Add support for a credentials chain for minio access (#​31051)
    • Move admin routers from /admin to /-/admin (#​32189)
    • Add cache test for admins (#​31265)
    • Add option for mailer to override mail headers (#​27860)
    • Azure blob storage support (#​30995)
    • Supports forced use of S3 virtual-hosted style (#​30969)
    • Move repository visibility to danger zone in the settings area (#​31126)

  • Others

    • Remove urls from translations (#​31950)
    • Simplify 404/500 page (#​31409)
    • Optimize installation-page experience (#​32558)
    • Refactor login page (#​31530)
    • Add new event commit status creation and webhook implementation (#​27151)
    • Repo Activity: count new issues that were closed (#​31776)
    • Set manual tabindexes on login page (#​31689)
    • Add YEAR, MONTH, MONTH_ENGLISH, DAY variables for template repos (#​31584)
    • Add typescript guideline and typescript-specific eslint plugins and fix issues (#​31521)
    • Make toast support preventDuplicates (#​31501)
    • Fix tautological conditions (#​30735)
    • Issue change title notifications (#​33050) #​33065

API

  • Implement update branch API (#​32433)
  • Fix missing outputs for jobs with matrix (#​32823)
  • Make API "compare" accept commit IDs (#​32801)
  • Add github compatible tarball download API endpoints (#​32572)
  • Harden runner updateTask and updateLog api (#​32462)
  • Add DISABLE_ORGANIZATIONS_PAGE and DISABLE_CODE_PAGE settings for explore pages and fix an issue related to user search (#​32288)
  • Make admins adhere to branch protection rules (#​32248)
  • Calculate PublicOnly for org membership only once (#​32234)
  • Allow filtering MRs by poster in the ListPullRequests API (#​32209)
  • Return 404 instead of error when commit not exist (#​31977)
  • Save initial signup information for users to aid in spam prevention (#​31852)
  • Fix upload maven pacakge parallelly (#​31851)
  • Fix null requested_reviewer from API (#​31773)
  • Add permission description for API to add repo collaborator (#​31744)
  • Add return type to GetRawFileOrLFS and GetRawFile (#​31680)
  • Add skip secondary authorization option for public oauth2 clients (#​31454)
  • Add tag protection via rest api #​17862 (#​31295)
  • Document possible action types for the user activity feed API (#​31196)
  • Add topics for repository API (#​31127)
  • Add support for searching users by email (#​30908)
  • Add API endpoints for getting action jobs status (#​26673)

REFACTOR

  • Update JS and PY dependencies (#​31940)
  • Enable no-jquery/no-parse-html-literal and fix violation (#​31684)
  • Refactor image diff (#​31444)
  • Refactor CSRF token (#​32216)
  • Fix some typescript issues (#​32586)
  • Refactor names (#​31405)
  • Use per package global lock for container uploads instead of memory lock (#​31860)
  • Move team related functions to service layer (#​32537)
  • Move GetFeeds to service layer (#​32526)
  • Resolve lint for unused parameter and unnecessary type arguments (#​30750)
  • Reimplement GetUserOrgsList to make it simple and clear (#​32486)
  • Move some functions from issue.go to standalone files (#​32468)
  • Refactor sidebar assignee&milestone&project selectors (#​32465)
  • Refactor sidebar label selector (#​32460)
  • Fix a number of typescript issues (#​32459)
  • Refactor language menu and dom utils (#​32450)
  • Refactor issue page info (#​32445)
  • Split issue sidebar into small templates (#​32444)
  • Refactor template ctx and render utils (#​32422)
  • Refactor repo legacy (#​32404)
  • Refactor markup package (#​32399)
  • Refactor markup render system (#​32533 & #​32589 & #​32612)
  • Refactor the DB migration system slightly (#​32344)
  • Remove jQuery import from some files (#​32512)
  • Strict pagination check (#​32548)
  • Split mail sender sub package from mailer service package (#​32618)
  • Remove outdated code about fixture generation (#​32708)
  • Refactor RepoBranchTagSelector (#​32681)
  • Refactor issue list (#​32755)
  • Refactor LabelEdit (#​32752)
  • Split issue/pull view router function as multiple smaller functions (#​32749)
  • Refactor some LDAP code (#​32849)
  • Unify repo search order by logic (#​30876)
  • Remove duplicate empty repo check in delete branch API (#​32569)
  • Replace deprecated math/rand functions (#​30733)
  • Remove fomantic dimmer module (#​30723)
  • Add types to fetch,toast,bootstrap,svg (#​31627)
  • Refactor webhook (#​31587)
  • Move AddCollabrator and CreateRepositoryByExample to service layer (#​32419)
  • Refactor RepoRefByType (#​32413)
  • Refactor: remove redundant err declarations (#​32381)
  • Refactor markup code (#​31399)
  • Refactor render system (orgmode) (#​32671)
  • Refactor render system (#​32492)
  • Refactor markdown render (#​32736 & #​32728)
  • Refactor repo unit "disabled" check (#​31389)
  • Refactor route path normalization (#​31381)
  • Refactor to use UnsafeStringToBytes (#​31358)
  • Migrate vue components to setup (#​32329)
  • Refactor globallock (#​31933)
  • Use correct function name (#​31887)
  • Use a common message template instead of a special one (#​31878)
  • Fix a number of Typescript issues (#​31877)
  • Refactor dropzone (#​31482)
  • Move custom tw- helpers to tailwind plugin (#​31184)
  • Replace gt-word-break with tw-break-anywhere (#​31183)
  • Drop IDOrderDesc for listing Actions task and always order by id DESC (#​31150)
  • Split common-global.js into separate files (#​31438)
  • Improve detecting empty files (#​31332)
  • Use querySelector over alternative DOM methods (#​31280)
  • Remove jQuery .text() (#​30506)
  • Use repo as of renderctx's member rather than a repoPath on metas (#​29222)
  • Refactor some frontend problems (#​32646)
  • Refactor DateUtils and merge TimeSince (#​32409)
  • Replace DateTime with proper functions (#​32402)
  • Replace DateTime with DateUtils (#​32383)
  • Convert frontend code to typescript (#​31559)
  • Refactor maven package registry (#​33049) #​33057
  • Refactor testfixtures #​33028

BUGFIXES

MISC

  • Optimize branch protection rule loading (#​32280)
  • Bump to go 1.23 (#​31855)
  • Remove unused call to $.HeadRepo in view_title template (#​32317)
  • Do not display attestation-manifest and use short sha256 instead of full sha256 (#​32851)
  • Upgrade htmx to 2.0.4 (#​32834)
  • Improve JSX/TSX support in code editor (#​32833)
  • Add User-Agent for gitea's self-implemented lfs client. (#​32832)
  • Use errors.New to replace fmt.Errorf with no parameters (#​32800)
  • Add "n commits" link to contributors in contributors graph page (#​32799)
  • Update dependencies, tweak eslint (#​32719)
  • Remove all "floated" CSS styles (#​32691)
  • Show tag name on branch/tag selector if repo shown from tag ref (#​32689)
  • Use new mail package instead of an unmintained one (#​32682)
  • Optimize the styling of icon buttons within file-header-right (#​32675)
  • Validate OAuth Redirect URIs (#​32643)
  • Support optional/configurable IAMEndpoint for Minio Client (#​32581) (#​32581)
  • Make search box in issue sidebar dropdown list always show when scrolling (#​32576)
  • Bump CI,Flake and Snap to Node 22 (#​32487)
  • Update github.com/meilisearch/meilisearch-go (#​32484)
  • Add DEFAULT_MIRROR_REPO_UNITS and DEFAULT_TEMPLATE_REPO_UNITS options (#​32416)
  • Update go dependencies (#​32389)
  • Update JS and PY dependencies (#​32388)
  • Upgrade rollup to 4.24.0 (#​32312)
  • Upgrade vue to 3.5.12 (#​32311)
  • Improve the maintainblity of the reserved username list (#​32229)
  • Upgrade htmx to 2.0.3 (#​32192)
  • Count typescript files as frontend for labeling (#​32088)
  • Only use Host header from reverse proxy (#​32060)
  • Failed authentications are logged to level Warning (#​32016)
  • Enhance USER_DISABLED_FEATURES to allow disabling change username or full name (#​31959)
  • Distinguish official vs non-official reviews, add tool tips, and upgr… (#​31924)
  • Update mermaid to v11 (#​31913)
  • Bump relative-time-element to v4.4.3 (#​31910)
  • Upgrade htmx to 2.0.2 (#​31847)
  • Add warning message in merge instructions when AutodetectManualMerge was not enabled (#​31805)
  • Add types to various low-level functions (#​31781)
  • Update JS dependencies (#​31766)
  • Remove unused code from models/repos/release.go (#​31756)
  • Support delete user email in admin panel (#​31690)
  • Add username to OIDC introspection response (#​31688)
  • Use GetDisplayName() instead of DisplayName() to generate rss feeds (#​31687)
  • Code editor theme enhancements (#​31629)
  • Update JS dependencies (#​31616)
  • Add types for js globals (#​31586)
  • Add back esbuild-loader for .js files (#​31585)
  • Don't show hidden labels when filling out an issue template (#​31576)
  • Allow synchronizing user status from OAuth2 login providers (#​31572)
  • Display app name in the registration email title (#​31562)
  • Use stable version of fabric (#​31526)
  • Support legacy _links LFS batch responses (#​31513)
  • Fix JS error with disabled attachment and easymde (#​31511)
  • Always use HTML attributes for avatar size (#​31509)
  • Use nolyfill to remove some polyfills (#​31468)
  • Disable issue/MR comment button given empty input (#​31463)
  • Add simple JS init performance trace (#​31459)
  • Bump htmx to 2.0.0 (#​31413)
  • Update JS dependencies, remove eslint-plugin-jquery (#​31402)
  • Split org Propfile README to a new tab overview (#​31373)
  • Update nix flake and add gofumpt (#​31320)
  • Code optimization (#​31315)
  • Enable poetry non-package mode (#​31282)
  • Optimize profile layout to enhance visual experience (#​31278)
  • Update golang.org/x/net (#​31260)
  • Bump @github/relative-time-element to v4.4.1 (#​31232)
  • Remove unnecessary inline style for tab-size (#​31224)
  • Update golangci-lint to v1.59.0 (#​31221)
  • Update chroma to v2.14.0 (#​31177)
  • Update JS dependencies (#​31120)
  • Improve the handling of jobs.<job_id>.if (#​31070)
  • Clean up revive linter config, tweak golangci output (#​30980)
  • Use CSS inset shorthand (#​30939)
  • Forbid deprecated break-word in CSS (#​30934)
  • Remove obsolete monaco workaround (#​30893)
  • Update JS dependencies, add new eslint rules (#​30840)
  • Fix body margin shifting with modals, fix error on project column edit (#​30831)
  • Remove disk-clean workflow (#​30741)
  • Bump github.com/google/go-github to v61 (#​30738)
  • Add built js files to eslint ignore (#​30737)
  • Use ProtonMail/go-crypto for opengpg in tests (#​30736)
  • Upgrade xorm to v1.3.9 and improve some migrations Sync (#​29899)
  • Added default sorting milestones by name (#​27084)
  • Enable unparam linter (#​31277)
  • Use Alpine 3.21 for the docker images (#​32924) #​32951
  • Bump x/net (#​32896) #​32899
  • Use -s -w ldflags for release artifacts (#​33041) #​33042
  • Remove aws go sdk package dependency (#​33029) #​33047

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

Read more

Me on Mastodon - This link is here for verification purposes.