发布日期: 2024-02-22
版本号: v1.21.6

本次更新包含安全修复、功能优化及错误修正。安全方面修复了XSS漏洞并统一使用通用令牌签名密钥。功能改进包括重构Git版本兼容性检查、优化过时评论显示逻辑、隐藏无权限的代码链接、修正按钮样式错误等。错误修复涉及API端点模板解析、Swift包解析失败、SSH遗留问题处理、合并请求错误显示、Git操作会话异常等30余项问题，涵盖用户界面、版本控制、工作流触发等方面。文档更新移除了过时内容并修正拼写错误。所有Gitea云服务实例将在维护窗口期自动升级至该版本。

更新内容 （中文）

  • 安全
    • 修复XSS漏洞 (#29336)
    • 使用通用令牌签名密钥 (#29205) (#29325)
  • 功能增强
    • 重构Git版本函数并检查兼容性 (#29155) (#29157)
    • 改进过时评论的用户体验 (#29050) (#29086)
    • 隐藏发布页面的代码链接（当用户无代码读取权限时） (#29064) (#29066)
    • 重新换行包裹包含的标签和分支 (#29021) (#29026)
    • 修复按钮CSS的错误使用方式 (#29015) (#29023)
    • 去除Markdown代码复制中的尾部换行符 (#29019) (#29022)
    • 实现部分操作通知功能 (#29173) (#29308)
    • 在PR时间线上（取消）解决对话时加载过时评论 (#29203) (#29221)
  • 错误修复
    • 重构议题模板解析并修复API端点 (#29069) (#29140)
    • 修复Swift软件包无法解析的问题 (#29095) (#29102)
    • 移除SSH临时解决方案 (#27893) (#29332)
    • 仅在标签同步失败时记录错误 (#29295) (#29327)
    • 修复SSPI用户创建 (#28948) (#29323)
    • 改进issue_comment工作流触发事件 (#29277) (#29322)
    • 丢弃git cat-file未读数据 (#29297) (#29310)
    • 修复合并PR时的错误显示 (#29288) (#29309)
    • 防止git cat-file会话重复使用 (#29298) (#29301)
    • 修复新版本发布通知的缺失链接 (#29079) (#29300)
    • 修复Debian InRelease Acquire-By-Hash换行问题 (#29204) (#29299)
    • 为所有Git版本始终写入proc-receive钩子 (#29287) (#29291)
    • 时间追踪禁用时不显示删除按钮 (#29257) (#29279)
    • 创建新评审时清理旧评审的临时方案 (#28554) (#29264)
    • 修复关联账户被禁用时的显示问题 (#29263)
    • 不使用小写标签名查找发布/标签 (#29261) (#29262)
    • 修复actions的编辑事件丢失问题 (#29237) (#29251)
    • 仅在需要时删除计划工作流 (#29091) (#29235)
    • 使提交事件同时兼容jQuery和原生事件 (#29223) (#29234)
    • 修复仓库名大写时的推送创建问题 (#29090) (#29206)
    • 用户未找到时使用幽灵用户 (#29161) (#29169)
    • 当评论类型为审查请求时不加载评审 (#28551) (#29160)
    • 重构commit行签名解析 (#29054) (#29108)
    • 避免显示跨源元素的JS错误 (#29081) (#29089)
    • 修复含默认端口的gitea-origin-url (#29085) (#29088)
    • 修复orgmode链接解析 (#29024) (#29076)
    • 修复Elasticsearch请求实体过大问题 (#28117) (#29062) (#29075)
    • 不渲染空评论 (#29039) (#29049)
    • 草稿状态时不发送发布更新/删除通知 (#29008) (#29025)
    • 修复Gitea Action用户头像在编辑菜单中的显示 (#29190) (#29307)
    • 必需检查未完成时禁止合并 (#29143) (#29268)
    • 修复Swift文档链接和包注册登录命令 (#29096) (#29103)
  • 文档
    • 移除部分语言中的过时文档 (#27530) (#29208)
    • 修正文档中的拼写错误 (#29048) (#29056)
    • 说明如何创建议题/PR模板 (#29035)
  • 杂项
    • 将可见性转换为数字 (#29226) (#29244)

Gitea云 实例将在指定维护窗口期间自动升级至此版本

更新内容 （原始）

  • SECURITY
    • Fix XSS vulnerabilities (#29336)
    • Use general token signing secret (#29205) (#29325)
  • ENHANCEMENTS
    • Refactor git version functions and check compatibility (#29155) (#29157)
    • Improve user experience for outdated comments (#29050) (#29086)
    • Hide code links on release page if user cannot read code (#29064) (#29066)
    • Wrap contained tags and branches again (#29021) (#29026)
    • Fix incorrect button CSS usages (#29015) (#29023)
    • Strip trailing newline in markdown code copy (#29019) (#29022)
    • Implement some action notifier functions (#29173) (#29308)
    • Load outdated comments when (un)resolving conversation on PR timeline (#29203) (#29221)
  • BUGFIXES
    • Refactor issue template parsing and fix API endpoint (#29069) (#29140)
    • Fix swift packages not resolving (#29095) (#29102)
    • Remove SSH workaround (#27893) (#29332)
    • Only log error when tag sync fails (#29295) (#29327)
    • Fix SSPI user creation (#28948) (#29323)
    • Improve the issue_comment workflow trigger event (#29277) (#29322)
    • Discard unread data of git cat-file (#29297) (#29310)
    • Fix error display when merging PRs (#29288) (#29309)
    • Prevent double use of git cat-file session. (#29298) (#29301)
    • Fix missing link on outgoing new release notifications (#29079) (#29300)
    • Fix debian InRelease Acquire-By-Hash newline (#29204) (#29299)
    • Always write proc-receive hook for all git versions (#29287) (#29291)
    • Do not show delete button when time tracker is disabled (#29257) (#29279)
    • Workaround to clean up old reviews on creating a new one (#28554) (#29264)
    • Fix bug when the linked account was disactived and list the linked accounts (#29263)
    • Do not use lower tag names to find releases/tags (#29261) (#29262)
    • Fix missed edit issues event for actions (#29237) (#29251)
    • Only delete scheduled workflows when needed (#29091) (#29235)
    • Make submit event code work with both jQuery event and native event (#29223) (#29234)
    • Fix push to create with capitalize repo name (#29090) (#29206)
    • Use ghost user if user was not found (#29161) (#29169)
    • Dont load Review if Comment is CommentTypeReviewRequest (#28551) (#29160)
    • Refactor parseSignatureFromCommitLine (#29054) (#29108)
    • Avoid showing unnecessary JS errors when there are elements with different origin on the page (#29081) (#29089)
    • Fix gitea-origin-url with default ports (#29085) (#29088)
    • Fix orgmode link resolving (#29024) (#29076)
    • Fix: Elasticsearch: Request Entity Too Large #28117 (#29062) (#29075)
    • Do not render empty comments (#29039) (#29049)
    • Avoid sending update/delete release notice when it is draft (#29008) (#29025)
    • Fix gitea-action user avatar broken on edited menu (#29190) (#29307)
    • Disallow merge when required checked are missing (#29143) (#29268)
    • Fix incorrect link to swift doc and swift package-registry login command (#29096) (#29103)
  • DOCS
    • Rm outdated docs from some languages (#27530) (#29208)
    • Fix typos in the documentation (#29048) (#29056)
    • Explained where create issue/PR template (#29035)
  • MISC
    • Convert visibility to number (#29226) (#29244)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

下载链接