Update docker.io/gitea/gitea Docker tag to v1.23.0

No problems automatically updating minor version Docker image and run the container by Watchtower with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package Update Change
docker.io/gitea/gitea minor 1.22.6-rootless -> 1.23.0-rootless

Release Notes

go-gitea/gitea (docker.io/gitea/gitea)

v1.23.0

Compare Source

BREAKING

  • Rename config option [camo].Allways to [camo].Always (#​32097)
  • Remove SHA1 for support for SSH RSA signing (#​31857)
  • Use UTC as the default timezone when scheduling Actions cron tasks (#​31742)
  • Delete Actions logs older than 1 year by default (#​31735)
  • Make OIDC introspection authentication strictly require Client ID and secret (#​31632)

SECURITY

  • Include file extension checks in attachment API (#​32151)
  • Include all security fixes that have been backported to v1.22

FEATURES

  • Allow to fork repository into the same owner (#​32819)
  • Support "merge upstream branch" (Sync fork) (#​32741)
  • Add Arch package registry (#​32692)
  • Allow to disable the password-based login (sign-in) form (#​32687)
  • Allow cropping an avatar before setting it (#​32565)
  • Support quote selected comments to reply (#​32431)
  • Add reviewers' selection to new pull request (#​32403)
  • Suggestions for issues (#​32327)
  • Add priority to the protected branch (#​32286)
  • Included tag search capabilities (#​32045)
  • Add option to filter board cards by labels and assignees (#​31999)
  • Add automatic light/dark option for the colorblind theme (#​31997)
  • Support migration from AWS CodeCommit (#​31981)
  • Introduce globallock as distributed locks (#​31908 & #​31813)
  • Support compression for Actions logs & enable by default (#​31761 & #​32013)
  • Add pure SSH LFS support (#​31516)
  • Add Passkey login support (#​31504)
  • Actions support workflow dispatch event (#​28163)
  • Support repo license (#​24872)
  • Issue time estimate, meaningful time tracking (#​23113)
  • GitHub like repo home page (#​32213 & #​32847)
  • Rearrange Clone Panel (#​31142)
  • Enhancing Gitea OAuth2 Provider with Granular Scopes for Resource Access (#​32573)
  • Use env GITEA_RUNNER_REGISTRATION_TOKEN as global runner token (#​32946) #​32964
  • Update i18n.go - Language Picker (#​32933) #​32935

PERFORMANCE

  • Perf: add extra index to notification table (#​32395)
  • Introduce OrgList and add LoadTeams, optimize Load teams for organizations (#​32543)
  • Improve performance of diffs (#​32393)
  • Make LFS http_client parallel within a batch. (#​32369)
  • Add a new index for action to resolve the performance problem (#​32333)
  • Improve get feed with pagination (#​31821)
  • Performance improvements for pull request list API (#​30490)
  • Use batch database operations instead of one-by-one to optimze api pulls (#​32680)
  • Use gitrepo.GetTreePathLatestCommit to get file's lastest commit instead from the latest commit cache (#​32987) #​33046

ENHANCEMENTS

  • Code

    • Remove unnecessary border in repo home page sidebar (#​32767)
    • Add 'Copy path' button to file view (#​32584)
    • Improve diff file tree (#​32658)
    • Add new [lfs_client].BATCH_SIZE and [server].LFS_MAX_BATCH_SIZE config settings. (#​32307)
    • Updated tokenizer to better matching when search for code snippets (#​32261)
    • Change the code search to sort results by relevance (#​32134)
    • Support migrating GitHub/GitLab MR draft status (#​32242)
    • Move lock icon position and add additional tooltips to branch list page (#​31839)
    • Add tag name in the commits list (#​31082)
    • Add MAX_ROWS option for CSV rendering (#​30268)
    • Allow code search by filename (#​32210)
    • Make git push options accept short name (#​32245)
    • Repo file list enhancements (#​32835)
  • Markdown & Editor

    • Refactor markdown math render, add dollor-backquote syntax support (#​32831)
    • Make Monaco theme follow browser, fully type codeeditor.ts (#​32756)
    • Refactor markdown editor and use it for milestone description editor (#​32688)
    • Add some handy markdown editor features (#​32400)
    • Improve markdown textarea for indentation and lists (#​31406)
  • Issue

    • Add label/author/assignee filters to the user/org home issue list (#​32779)
    • Refactor issue filter (labels, poster, assignee) (#​32771)
    • Style unification for the issue_management area (#​32605)
    • Add "View all branches/tags" entry to Branch Selector (#​32653)
    • Improve textarea paste (#​31948)
    • Add avif image file support (#​32508)
    • Prevent from submitting issue/comment on uploading (#​32263)
    • Issue Templates: add option to have dropdown printed list (#​31577)
    • Allow searching issues by ID (#​31479)
    • Add is_archived option for issue indexer (#​32735)
    • Improve attachment upload methods (#​30513)
    • Support issue template assignees (#​31083)
    • Prevent simultaneous editing of comments and issues (#​31053)
    • Add issue comment when moving issues from one column to another of the project (#​29311)
  • Merge Request

    • Display head branch more comfortable on pull request view (#​32000)
    • Simplify review UI (#​31062)
    • Allow force push to protected branches (#​28086)
    • Add line-through for deleted branch on pull request view page (#​32500)
    • Support requested_reviewers data in comment webhook events (#​26178)
    • Allow maintainers to view and edit files of private repos when "Allow maintainers to edit" is enabled (#​32215)
    • Allow including Reviewed-on/Reviewed-by lines for custom merge messages (#​31211)
  • Actions

    • Render job title as commit message (#​32748)
    • Refactor RepoActionView.vue, add ::group:: support (#​32713)
    • Make RepoActionView.vue support ##[group] (#​32770)
    • Support pull_request_target event for commit status (#​31703)
    • Detect whether action view branch was deleted (#​32764)
    • Allow users with write permission to run actions (#​32644)
    • Show latest run when visit /run/latest (#​31808)
  • Packages

    • Improve rubygems package registry (#​31357)
    • Add support for npm bundleDependencies (#​30751)
    • Add signature support for the RPM module (#​27069)
    • Extract and display readme and comments for Composer packages (#​30927)
  • Project

    • Add title to project view page (#​32747)
    • Set the columns height to hug all its contents (#​31726)
    • Rename project board -> column to make the UI less confusing (#​30170)
  • User & Organazition

    • Use better name for userinfo structure (#​32544)
    • Use user.FullName in Oauth2 id_token response (#​32542)
    • Limit org member view of restricted users (#​32211)
    • Allow disabling authentication related user features (#​31535)
    • Add option to change mail from user display name (#​31528)
    • Use FullName in Emails to address the recipient if possible (#​31527)
  • Administration

    • Add support for a credentials chain for minio access (#​31051)
    • Move admin routers from /admin to /-/admin (#​32189)
    • Add cache test for admins (#​31265)
    • Add option for mailer to override mail headers (#​27860)
    • Azure blob storage support (#​30995)
    • Supports forced use of S3 virtual-hosted style (#​30969)
    • Move repository visibility to danger zone in the settings area (#​31126)
  • Others

    • Remove urls from translations (#​31950)
    • Simplify 404/500 page (#​31409)
    • Optimize installation-page experience (#​32558)
    • Refactor login page (#​31530)
    • Add new event commit status creation and webhook implementation (#​27151)
    • Repo Activity: count new issues that were closed (#​31776)
    • Set manual tabindexes on login page (#​31689)
    • Add YEAR, MONTH, MONTH_ENGLISH, DAY variables for template repos (#​31584)
    • Add typescript guideline and typescript-specific eslint plugins and fix issues (#​31521)
    • Make toast support preventDuplicates (#​31501)
    • Fix tautological conditions (#​30735)
    • Issue change title notifications (#​33050) #​33065

API

  • Implement update branch API (#​32433)
  • Fix missing outputs for jobs with matrix (#​32823)
  • Make API "compare" accept commit IDs (#​32801)
  • Add github compatible tarball download API endpoints (#​32572)
  • Harden runner updateTask and updateLog api (#​32462)
  • Add DISABLE_ORGANIZATIONS_PAGE and DISABLE_CODE_PAGE settings for explore pages and fix an issue related to user search (#​32288)
  • Make admins adhere to branch protection rules (#​32248)
  • Calculate PublicOnly for org membership only once (#​32234)
  • Allow filtering MRs by poster in the ListPullRequests API (#​32209)
  • Return 404 instead of error when commit not exist (#​31977)
  • Save initial signup information for users to aid in spam prevention (#​31852)
  • Fix upload maven pacakge parallelly (#​31851)
  • Fix null requested_reviewer from API (#​31773)
  • Add permission description for API to add repo collaborator (#​31744)
  • Add return type to GetRawFileOrLFS and GetRawFile (#​31680)
  • Add skip secondary authorization option for public oauth2 clients (#​31454)
  • Add tag protection via rest api #​17862 (#​31295)
  • Document possible action types for the user activity feed API (#​31196)
  • Add topics for repository API (#​31127)
  • Add support for searching users by email (#​30908)
  • Add API endpoints for getting action jobs status (#​26673)

REFACTOR

  • Update JS and PY dependencies (#​31940)
  • Enable no-jquery/no-parse-html-literal and fix violation (#​31684)
  • Refactor image diff (#​31444)
  • Refactor CSRF token (#​32216)
  • Fix some typescript issues (#​32586)
  • Refactor names (#​31405)
  • Use per package global lock for container uploads instead of memory lock (#​31860)
  • Move team related functions to service layer (#​32537)
  • Move GetFeeds to service layer (#​32526)
  • Resolve lint for unused parameter and unnecessary type arguments (#​30750)
  • Reimplement GetUserOrgsList to make it simple and clear (#​32486)
  • Move some functions from issue.go to standalone files (#​32468)
  • Refactor sidebar assignee&milestone&project selectors (#​32465)
  • Refactor sidebar label selector (#​32460)
  • Fix a number of typescript issues (#​32459)
  • Refactor language menu and dom utils (#​32450)
  • Refactor issue page info (#​32445)
  • Split issue sidebar into small templates (#​32444)
  • Refactor template ctx and render utils (#​32422)
  • Refactor repo legacy (#​32404)
  • Refactor markup package (#​32399)
  • Refactor markup render system (#​32533 & #​32589 & #​32612)
  • Refactor the DB migration system slightly (#​32344)
  • Remove jQuery import from some files (#​32512)
  • Strict pagination check (#​32548)
  • Split mail sender sub package from mailer service package (#​32618)
  • Remove outdated code about fixture generation (#​32708)
  • Refactor RepoBranchTagSelector (#​32681)
  • Refactor issue list (#​32755)
  • Refactor LabelEdit (#​32752)
  • Split issue/pull view router function as multiple smaller functions (#​32749)
  • Refactor some LDAP code (#​32849)
  • Unify repo search order by logic (#​30876)
  • Remove duplicate empty repo check in delete branch API (#​32569)
  • Replace deprecated math/rand functions (#​30733)
  • Remove fomantic dimmer module (#​30723)
  • Add types to fetch,toast,bootstrap,svg (#​31627)
  • Refactor webhook (#​31587)
  • Move AddCollabrator and CreateRepositoryByExample to service layer (#​32419)
  • Refactor RepoRefByType (#​32413)
  • Refactor: remove redundant err declarations (#​32381)
  • Refactor markup code (#​31399)
  • Refactor render system (orgmode) (#​32671)
  • Refactor render system (#​32492)
  • Refactor markdown render (#​32736 & #​32728)
  • Refactor repo unit "disabled" check (#​31389)
  • Refactor route path normalization (#​31381)
  • Refactor to use UnsafeStringToBytes (#​31358)
  • Migrate vue components to setup (#​32329)
  • Refactor globallock (#​31933)
  • Use correct function name (#​31887)
  • Use a common message template instead of a special one (#​31878)
  • Fix a number of Typescript issues (#​31877)
  • Refactor dropzone (#​31482)
  • Move custom tw- helpers to tailwind plugin (#​31184)
  • Replace gt-word-break with tw-break-anywhere (#​31183)
  • Drop IDOrderDesc for listing Actions task and always order by id DESC (#​31150)
  • Split common-global.js into separate files (#​31438)
  • Improve detecting empty files (#​31332)
  • Use querySelector over alternative DOM methods (#​31280)
  • Remove jQuery .text() (#​30506)
  • Use repo as of renderctx's member rather than a repoPath on metas (#​29222)
  • Refactor some frontend problems (#​32646)
  • Refactor DateUtils and merge TimeSince (#​32409)
  • Replace DateTime with proper functions (#​32402)
  • Replace DateTime with DateUtils (#​32383)
  • Convert frontend code to typescript (#​31559)
  • Refactor maven package registry (#​33049) #​33057
  • Refactor testfixtures #​33028

BUGFIXES

MISC

  • Optimize branch protection rule loading (#​32280)
  • Bump to go 1.23 (#​31855)
  • Remove unused call to $.HeadRepo in view_title template (#​32317)
  • Do not display attestation-manifest and use short sha256 instead of full sha256 (#​32851)
  • Upgrade htmx to 2.0.4 (#​32834)
  • Improve JSX/TSX support in code editor (#​32833)
  • Add User-Agent for gitea's self-implemented lfs client. (#​32832)
  • Use errors.New to replace fmt.Errorf with no parameters (#​32800)
  • Add "n commits" link to contributors in contributors graph page (#​32799)
  • Update dependencies, tweak eslint (#​32719)
  • Remove all "floated" CSS styles (#​32691)
  • Show tag name on branch/tag selector if repo shown from tag ref (#​32689)
  • Use new mail package instead of an unmintained one (#​32682)
  • Optimize the styling of icon buttons within file-header-right (#​32675)
  • Validate OAuth Redirect URIs (#​32643)
  • Support optional/configurable IAMEndpoint for Minio Client (#​32581) (#​32581)
  • Make search box in issue sidebar dropdown list always show when scrolling (#​32576)
  • Bump CI,Flake and Snap to Node 22 (#​32487)
  • Update github.com/meilisearch/meilisearch-go (#​32484)
  • Add DEFAULT_MIRROR_REPO_UNITS and DEFAULT_TEMPLATE_REPO_UNITS options (#​32416)
  • Update go dependencies (#​32389)
  • Update JS and PY dependencies (#​32388)
  • Upgrade rollup to 4.24.0 (#​32312)
  • Upgrade vue to 3.5.12 (#​32311)
  • Improve the maintainblity of the reserved username list (#​32229)
  • Upgrade htmx to 2.0.3 (#​32192)
  • Count typescript files as frontend for labeling (#​32088)
  • Only use Host header from reverse proxy (#​32060)
  • Failed authentications are logged to level Warning (#​32016)
  • Enhance USER_DISABLED_FEATURES to allow disabling change username or full name (#​31959)
  • Distinguish official vs non-official reviews, add tool tips, and upgr… (#​31924)
  • Update mermaid to v11 (#​31913)
  • Bump relative-time-element to v4.4.3 (#​31910)
  • Upgrade htmx to 2.0.2 (#​31847)
  • Add warning message in merge instructions when AutodetectManualMerge was not enabled (#​31805)
  • Add types to various low-level functions (#​31781)
  • Update JS dependencies (#​31766)
  • Remove unused code from models/repos/release.go (#​31756)
  • Support delete user email in admin panel (#​31690)
  • Add username to OIDC introspection response (#​31688)
  • Use GetDisplayName() instead of DisplayName() to generate rss feeds (#​31687)
  • Code editor theme enhancements (#​31629)
  • Update JS dependencies (#​31616)
  • Add types for js globals (#​31586)
  • Add back esbuild-loader for .js files (#​31585)
  • Don't show hidden labels when filling out an issue template (#​31576)
  • Allow synchronizing user status from OAuth2 login providers (#​31572)
  • Display app name in the registration email title (#​31562)
  • Use stable version of fabric (#​31526)
  • Support legacy _links LFS batch responses (#​31513)
  • Fix JS error with disabled attachment and easymde (#​31511)
  • Always use HTML attributes for avatar size (#​31509)
  • Use nolyfill to remove some polyfills (#​31468)
  • Disable issue/MR comment button given empty input (#​31463)
  • Add simple JS init performance trace (#​31459)
  • Bump htmx to 2.0.0 (#​31413)
  • Update JS dependencies, remove eslint-plugin-jquery (#​31402)
  • Split org Propfile README to a new tab overview (#​31373)
  • Update nix flake and add gofumpt (#​31320)
  • Code optimization (#​31315)
  • Enable poetry non-package mode (#​31282)
  • Optimize profile layout to enhance visual experience (#​31278)
  • Update golang.org/x/net (#​31260)
  • Bump @github/relative-time-element to v4.4.1 (#​31232)
  • Remove unnecessary inline style for tab-size (#​31224)
  • Update golangci-lint to v1.59.0 (#​31221)
  • Update chroma to v2.14.0 (#​31177)
  • Update JS dependencies (#​31120)
  • Improve the handling of jobs.<job_id>.if (#​31070)
  • Clean up revive linter config, tweak golangci output (#​30980)
  • Use CSS inset shorthand (#​30939)
  • Forbid deprecated break-word in CSS (#​30934)
  • Remove obsolete monaco workaround (#​30893)
  • Update JS dependencies, add new eslint rules (#​30840)
  • Fix body margin shifting with modals, fix error on project column edit (#​30831)
  • Remove disk-clean workflow (#​30741)
  • Bump github.com/google/go-github to v61 (#​30738)
  • Add built js files to eslint ignore (#​30737)
  • Use ProtonMail/go-crypto for opengpg in tests (#​30736)
  • Upgrade xorm to v1.3.9 and improve some migrations Sync (#​29899)
  • Added default sorting milestones by name (#​27084)
  • Enable unparam linter (#​31277)
  • Use Alpine 3.21 for the docker images (#​32924) #​32951
  • Bump x/net (#​32896) #​32899
  • Use -s -w ldflags for release artifacts (#​33041) #​33042
  • Remove aws go sdk package dependency (#​33029) #​33047

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.