发布日期: 2024-02-01
版本号: v1.21.5

本次更新包含安全修复、错误修复及功能优化。安全方面禁止了启用RequireSignInView时的匿名容器访问，并更新了go依赖库。错误修复涉及回滚MySQL/MariaDB仪表盘加载优化、修正Actions定时任务错误、修复镜像仓库设置同步问题、解决上传工件覆盖异常、保留Web编辑器BOM头、处理相对链接格式、修复镜像仓库版本删除异常、完善仓库迁移逻辑、修复分支链接匹配问题、优化讨论页刷新机制、限制GitHub问题标题迁移长度、修正仓库问题列表排序错误、修复协作关系删除事务问题、解决定时任务触发异常、修复存储迁移漏洞、修复合并提交回退失败、修复PostgreSQL连接字符串格式等。功能优化包括减弱加载动画强度、避免重复错误提示、升级前端组件。其他调整包含改进配置项警告提示、移除冗余代码检查。Gitea云端实例将在维护窗口自动升级至此版本。

更新内容 （中文）

  • 安全更新
    • 启用 RequireSignInView 时禁止匿名容器访问 (#28877) (#28882)
    • 更新 Go 依赖并修复 go-git 问题 (#28893) (#28934)
  • 错误修复
    • 撤销「加速 MySQL/MariaDB 仪表盘加载速度 (#28546)」改动 (#29006) (#29007)
    • 修复 Actions 定时任务漏洞 (#28942) (#28999)
    • 修复未提供 mirror_interval 时 enable_prune 更新问题 (#28905) (#28929)
    • 修复应覆盖上传的 artifacts 文件 (#28726) 回溯到 v1.21 (#28832)
    • 在 Web 编辑器中保留 BOM (#28935) (#28959)
    • 去除相对链接中的 \/ 符号 (#28932) (#28952)
    • 镜像仓库时不删除所有版本 (#28817) (#28939)
    • 为 Actions 通知器实现 MigrateRepository 方法 (#28920) (#28923)
    • 相对链接保留分支信息 (#28909) (#28922)
    • 解决/取消解决对话或回复时不重载时间线页面 (#28654) (#28917)
    • 仅迁移 GitHub Issue 标题前 255 字符 (#28902) (#28912)
    • 修复仓库议题列表排序问题 (#28897) (#28901)
    • 修复 DeleteCollaboration 事务行为 (#28886) (#28889)
    • 修复完整引用名与短引用名匹配导致的定时任务不触发 (#28874) (#28888)
    • 修复存储迁移问题 (#28830) (#28867)
    • 修复归档操作创建 LFS 钩子破坏 PR 的问题 (#28848) (#28851)
    • 修复合并提交回退失败问题 (#28794) (#28825)
    • 升级 xorm 至 v1.3.7 修复 Iterate 导致的资源泄漏 (#28891) (#28895)
    • 修复 Unix 套接字 PostgreSQL 连接字符串错误 (#28865) (#28870)
  • 功能改进
    • 优化加载动画显示效果 (#28955) (#28956)
    • 避免重复显示 JS 错误信息 (#28873) (#28881)
    • 升级 @github/relative-time-element 至 4.3.1 (#28819) (#28826)
  • 其他
    • 仅在显式定义时警告 DISABLE_QUERY_AUTH_TOKEN 为 false (#28783) (#28868)
    • 移除 git 模块重复的 checkinit 检测 (#28824) (#28831)

部署于 Gitea 云平台 的实例将在指定维护窗口期间自动升级至此版本。

更新内容 （原始）

  • SECURITY
    • Prevent anonymous container access if RequireSignInView is enabled (#28877) (#28882)
    • Update go dependencies and fix go-git (#28893) (#28934)
  • BUGFIXES
    • Revert “Speed up loading the dashboard on mysql/mariadb (#28546)” (#29006) (#29007)
    • Fix an actions schedule bug (#28942) (#28999)
    • Fix update enable_prune even if mirror_interval is not provided (#28905) (#28929)
    • Fix uploaded artifacts should be overwritten (#28726) backport v1.21 (#28832)
    • Preserve BOM in web editor (#28935) (#28959)
    • Strip / from relative links (#28932) (#28952)
    • Don’t remove all mirror repository’s releases when mirroring (#28817) (#28939)
    • Implement MigrateRepository for the actions notifier (#28920) (#28923)
    • Respect branch info for relative links (#28909) (#28922)
    • Don’t reload timeline page when (un)resolving or replying conversation (#28654) (#28917)
    • Only migrate the first 255 chars of a Github issue title (#28902) (#28912)
    • Fix sort bug on repository issues list (#28897) (#28901)
    • Fix DeleteCollaboration transaction behaviour (#28886) (#28889)
    • Fix schedule not trigger bug because matching full ref name with short ref name (#28874) (#28888)
    • Fix migrate storage bug (#28830) (#28867)
    • Fix archive creating LFS hooks and breaking pull requests (#28848) (#28851)
    • Fix reverting a merge commit failing (#28794) (#28825)
    • Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate (#28891) (#28895)
    • Fix incorrect PostgreSQL connection string for Unix sockets (#28865) (#28870)
  • ENHANCEMENTS
    • Make loading animation less aggressive (#28955) (#28956)
    • Avoid duplicate JS error messages on UI (#28873) (#28881)
    • Bump @github/relative-time-element to 4.3.1 (#28819) (#28826)
  • MISC
    • Warn that DISABLE_QUERY_AUTH_TOKEN is false only if it’s explicitly defined (#28783) (#28868)
    • Remove duplicated checkinit on git module (#28824) (#28831)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

下载链接