发布日期: 2024-10-09
版本号: v1.22.3

本次更新包含以下改进和修复：安全方面修复了令牌公开授予时的漏洞；性能优化包括延长缓存生命周期以减少误报，并优化仓库数据加载方式。错误修复涉及匿名用户访问迁移页面异常、禁用OAuth2时密钥初始化问题、任务状态显示错误、分支删除异常、提交消息截断处理、空仓库分支保护设置、SSH格式错误导致的崩溃、分支重命名权限问题、强制推送标签时数据库更新异常等20余项问题，同时修复了API接口、评论回复、文档同步等多个功能异常。测试方面调整了MSSQL数据库版本兼容性。其他改进包含依赖库升级、Composer元数据补充、头像图片懒加载机制优化。云端实例将在维护窗口自动升级至该版本。

更新内容 （中文）

  • 安全
    • 修复令牌仅被赋予公开权限时的错误 (#32204) (#32218)
  • 性能
    • 提升 cacheContextLifetime 以降低误报率 (#32011) (#32023)
    • 加载动作表数据时不关联存储库 (#32127) (#32143)
  • 错误修复
    • 修复匿名用户访问迁移页面时的 JavaScript 错误 (#32144) (#32179)
    • 当 OAuth2 提供程序禁用时不初始化签名密钥 (#32177)
    • 修复首个步骤被跳过时Set up Job状态错误的问题 (#32120) (#32125)
    • 修复删除迁移分支时的错误 (#32075) (#32123)
    • 在 Discord webhook 推送事件中截断提交消息 (#31970) (#32121)
    • 允许在空存储库中设置分支保护 (#32095) (#32119)
    • 修复使用错误 SSH 格式克隆时的崩溃问题 (#32076) (#32118)
    • 修复重命名分支权限错误 (#32066) (#32108)
    • 修复使用git push --tags --force时数据库未更新发布的问题 (#32040) (#32074)
    • 添加缺失的评论回复处理 (#32050) (#32065)
    • 不在 RPM 主索引中转义相对路径 (#32038) (#32054)
    • 修复\/repos\/{owner}\/{repo}\/pulls\/{index}\/files端点未填充previous_filename的问题 (#32017) (#32028)
    • 支持通过代理进行迁移的允许主机配置 (#32025) (#32026)
    • 修复查找最新 Pull Request 审查提交 ID 的逻辑 (#32139) (#32165)
    • 修复通过提交获取合并 Pull Request 的缺陷 (#32079) (#32117)
    • 修复最后修改时间错误 (#32102) (#32104)
    • 修复不正确的\/tokens API (#32085) (#32092)
    • 处理通过 API 创建发布时无效的目标参数 (#31841) (#32043)
    • 编辑 issue 时检查due_date是否为空 (#32035) (#32042)
    • 修复容器并行上传缺陷 (#32022)
    • 修复 ElasticSearch 按 repoId 删除文档时的竞态条件 (#32185) (#32188)
    • 重构 CSRF 保护机制 (#32057) (#32069)
    • 修复 Issue/Pull 列表中的缺陷 (#32081) (#32115)
    • 在仪表板源/分叉/镜像列表包含协作存储库 (#31946) (#32122)
    • 为 responseData.invalidTopics 添加空值检查 (#32212) (#32217)
  • 测试
    • 在 CI 中使用新版 MSSQL 版本修复 MSSQL 集成测试问题 (#32094)
  • 其他
    • 升级部分依赖项（含 minio-go）(#32166)
    • 向 Composer Metadata 添加 bin 目录 (#32099) (#32106)
    • 延迟加载头像图片 (#32051) (#32063)
    • 升级缓存至 v0.2.1 (#32003) (#32009)

托管于 Gitea Cloud 的实例将在指定维护窗口期间自动升级至该版本。

更新内容 （原始）

  • SECURITY
    • Fix bug when a token is given public only (#32204) (#32218)
  • PERFORMANCE
    • Increase cacheContextLifetime to reduce false reports (#32011) (#32023)
    • Don’t join repository when loading action table data (#32127) (#32143)
  • BUGFIXES
    • Fix javascript error when an anonymous user visits migration page (#32144) (#32179)
    • Don’t init signing keys if oauth2 provider is disabled (#32177)
    • Fix wrong status of Set up Job when first step is skipped (#32120) (#32125)
    • Fix bug when deleting a migrated branch (#32075) (#32123)
    • Truncate commit message during Discord webhook push events (#31970) (#32121)
    • Allow to set branch protection in an empty repository (#32095) (#32119)
    • Fix panic when cloning with wrong ssh format. (#32076) (#32118)
    • Fix rename branch permission bug (#32066) (#32108)
    • Fix: database not update release when using git push --tags --force (#32040) (#32074)
    • Add missing comment reply handling (#32050) (#32065)
    • Do not escape relative path in RPM primary index (#32038) (#32054)
    • Fix /repos/{owner}/{repo}/pulls/{index}/files endpoint not populating previous_filename (#32017) (#32028)
    • Support allowed hosts for migrations to work with proxy (#32025) (#32026)
    • Fix the logic of finding the latest pull review commit ID (#32139) (#32165)
    • Fix bug in getting merged pull request by commit (#32079) (#32117)
    • Fix wrong last modify time (#32102) (#32104)
    • Fix incorrect /tokens api (#32085) (#32092)
    • Handle invalid target when creating releases using API (#31841) (#32043)
    • Check if the due_date is nil when editing issues (#32035) (#32042)
    • Fix container parallel upload bugs (#32022)
    • Fixed race condition when deleting documents by repoId in ElasticSearch (#32185) (#32188)
    • Refactor CSRF protector (#32057) (#32069)
    • Fix Bug in Issue/pulls list (#32081) (#32115)
    • Include collaboration repositories on dashboard source/forks/mirrors list (#31946) (#32122)
    • Add null check for responseData.invalidTopics (#32212) (#32217)
  • TESTING
    • Fix mssql ci with a new mssql version on ci (#32094)
  • MISC
    • Upgrade some dependencies include minio-go (#32166)
    • Add bin to Composer Metadata (#32099) (#32106)
    • Lazy load avatar images (#32051) (#32063)
    • Upgrade cache to v0.2.1 (#32003) (#32009)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

下载链接