发布日期: 2025-04-07
版本号: v1.23.7

本次更新包含安全修复、功能增强和错误修正。安全方面升级至Go 1.23.8版本。新增匿名用户访问限制功能,优化SSH证书默认路径检查。修复了包括Discord webhook描述超限、拉取请求触发条件判断、RPM包路径版本错误、默认头像显示等多项问题。同时改进了用户权限控制、页面布局、emoji渲染等功能,并解决了Windows系统下check-attr命令的日志报错问题。所有Gitea云端实例将在维护窗口期自动升级至此版本。

更新内容 (中文)

  • 安全更新
    • 使用 Go 1.23.8 版本编译
  • 功能增强
    • 新增配置选项以阻止匿名用户访问"高消耗"页面 (#34024) (#34071)
    • 同时检查主机的默认 ssh-cert 路径 (#34099) (#34100) (#34116)
  • 错误修复
    • 修复 Discord 网页钩子在描述超限时返回 400 状态码的问题 (#34084) (#34124)
    • 检查 pull_request 动作触发时基于合并基准获取变更文件 (#34106) (#34120)
    • 修复 RPM 包路径中的无效版本号 (#34112) (#34115)
    • 当用户 ID 为零时返回默认头像 URL 而非更新数据库 (#34094) (#34095)
    • 在路径分隔符处理中增加额外 ReplaceAll 以适配不同分隔符 (#34061) (#34070)
    • 尝试修复 check-attr 命令的缺陷 (#34029) (#34033)
    • Git 客户端将遵循 301 但非 307 重定向 (#34005) (#34010)
    • 修复 1.23 版本的高消耗页面拦截问题 (#34127)
    • 修正 Markdown 前置元数据渲染 (#34102) (#34107)
    • 新增 CLI 参数用于创建带访问令牌用户时设置名称和权限范围 (#34080) (#34103)
    • 当默认分支不存在时不显示 500 错误 (#34096) (#34097)
    • 若无代码权限则隐藏活动贡献者/近期提交/代码频率左侧标签页 (#34053) (#34065)
    • 简化表情符号渲染逻辑 (#34048) (#34049)
    • 调整 Issues/Projects 页面工具栏布局 (#33667) (#34047)
    • 拉取请求更新也将触发代码所有者审查请求 (#33744) (#34045)
    • 修复组织仓库创建受用户限制影响的问题 (#34030) (#34044)
    • 修复 Git 客户端访问重命名仓库的问题 (#34034) (#34043)
    • 修复 Windows 系统上 check-attr 命令的错误消息记录问题 (#34035) (#34036)
    • 实现 WeakRef 的 Polyfill 支持 (#34025) (#34028)

**Gitea 云服务**上的实例将在指定维护窗口期间自动升级至此版本。

更新内容 (原始)

  • SECURITY
    • Compile with Go 1.23.8
  • Enhancements
    • Add a config option to block “expensive” pages for anonymous users (#34024) (#34071)
    • Also check default ssh-cert location for host (#34099) (#34100) (#34116)
  • BUGFIXES
    • Fix discord webhook 400 status code when description limit is exceeded (#34084) (#34124)
    • Get changed files based on merge base when checking pull_request actions trigger (#34106) (#34120)
    • Fix invalid version in RPM package path (#34112) (#34115)
    • Return default avatar url when user id is zero rather than updating database (#34094) (#34095)
    • Add additional ReplaceAll in pathsep to cater for different pathsep (#34061) (#34070)
    • Try to fix check-attr bug (#34029) (#34033)
    • Git client will follow 301 but 307 (#34005) (#34010)
    • Fix block expensive for 1.23 (#34127)
    • Fix markdown frontmatter rendering (#34102) (#34107)
    • Add new CLI flags to set name and scopes when creating a user with access token (#34080) (#34103)
    • Do not show 500 error when default branch doesn’t exist (#34096) (#34097)
    • Hide activity contributors, recent commits and code frequrency left tabs if there is no code permission (#34053) (#34065)
    • Simplify emoji rendering (#34048) (#34049)
    • Adjust the layout of the toolbar on the Issues/Projects page (#33667) (#34047)
    • Pull request updates will also trigger code owners review requests (#33744) (#34045)
    • Fix org repo creation being limited by user limits (#34030) (#34044)
    • Fix git client accessing renamed repo (#34034) (#34043)
    • Fix the issue with error message logging for the check-attr command on Windows OS. (#34035) (#34036)
    • Polyfill WeakRef (#34025) (#34028)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

下载链接