gitea-blog/content/post/release-of-1.19.2.md

8.1 KiB

date authors title tags draft coverImageRelease
2023-04-27T18:59:47+07:00 jolheiser Gitea 1.19.2 is released
release
false 1.19.2

We are proud to present the release of Gitea version 1.19.2.

We highly encourage users to update to this version for some important bug-fixes.

We have merged 42 pull requests to release this version.

In this release, we introduced a database conversion tool via ./gitea admin convert to help convert MSSQL columns from VARCHAR to NVARCHAR. Any Gitea instances set up with MSSQL before 1.13.0 may need this tool.

This release also includes an update to the go-redis library used by Gitea which adds support for redis-cluster (in combination with #23869 from the 1.19.1 release). Gitea configured with redis-cluster allows for high-availability in Kubernetes environments. (PS: We are currently working on switching to redis-cluster (from memcached) in the helm chart and providing detailed HA documentation - stay tuned!)

Thanks to @KN4CK3R for reporting both security issues patched in this release, and thanks to him and @lunny for the subsequent fixes!

You can download one of our pre-built binaries from our downloads page - make sure to select the correct platform! For further details on how to install, follow our installation guide.

We would also like to thank all of our supporters on Open Collective who are helping to sustain us financially.

Have you heard? We now have a swag shop! 👕 🍵

Changelog

1.19.2 - 2023-04-27

  • SECURITY
    • Require repo scope for PATs for private repos and basic authentication (#24362) (#24364)
    • Only delete secrets belonging to its owner (#24284) (#24286)
  • API
  • ENHANCEMENTS
  • BUGFIXES
    • Fix auth check bug (#24382) (#24387)
    • Add tags list for repos whose release setting is disabled (#23465) (#24369)
    • Fix wrong error info in RepoRefForAPI (#24344) (#24351)
    • Fix no edit/close/delete button in org repo project view page (#24349)
    • Respect the REGISTER_MANUAL_CONFIRM setting when registering via OIDC (#24035) (#24333)
    • Remove org users who belong to no teams (#24247) (#24313)
    • Fix bug when deleting wiki with no code write permission (#24274) (#24295)
    • Handle canceled workflow as a warning instead of a fail (#24282) (#24292)
    • Load reviewer for comments when dismissing a review (#24281) (#24288)
    • Show commit history for closed/merged PRs (#24238) (#24261)
    • Fix owner team access mode value in team_unit table (#24224)
    • Fix issue attachment handling (#24202) (#24221)
    • Fix incorrect CORS default values (#24206) (#24217)
    • Fix template error in pull request with deleted head repo (#24192) (#24216)
    • Don't list root repository on compare page if pulls not allowed (#24183) (#24210)
    • Fix calReleaseNumCommitsBehind (#24148) (#24197)
    • Fix Org edit page bugs: renaming detection, maxlength (#24161) (#24171)
    • Update redis library to support redis v7 (#24114) (#24156)
    • Use 1.18's aria role for dropdown menus (#24144) (#24155)
    • Fix 2-dot direct compare to use the right base commit (#24133) (#24150)
    • Fix incorrect server error content in RunnersList (#24118) (#24121)
    • Fix mismatch between hook events and github event types (#24048) (#24091)
  • BUILD
    • Support converting varchar to nvarchar for mssql database (#24105) (#24168)