Gitea 1.22.3 is released

1.22.3Release

We are proud to present the release of Gitea version 1.22.3.

We highly encourage users to update to this version for one security bug-fixes.

We have merged 36 pull requests to release this version.

We would like to give a special thanks to dankar for reporting the access token scope security issue which is fixed by #32218.Thanks to @lunny for fixing the problem.

You can download one of our pre-built binaries from our downloads page – make sure to select the correct platform! For further details on how to install, follow our installation guide.

We would also like to thank all of our supporters on Open Collective who are helping to sustain us financially.

Are you looking for a seamless, hassle-free solution to manage your Git repositories? Look no further! Gitea Cloud is here to revolutionize your development experience.

Changelog

1.22.3 – 2024-10-08

  • SECURITY
    • Fix bug when a token is given public only (#32204) (#32218)
  • PERFORMANCE
    • Increase cacheContextLifetime to reduce false reports (#32011) (#32023)
    • Don’t join repository when loading action table data (#32127) (#32143)
  • BUGFIXES
    • Fix javascript error when an anonymous user visits migration page (#32144) (#32179)
    • Don’t init signing keys if oauth2 provider is disabled (#32177)
    • Fix wrong status of Set up Job when first step is skipped (#32120) (#32125)
    • Fix bug when deleting a migrated branch (#32075) (#32123)
    • Truncate commit message during Discord webhook push events (#31970) (#32121)
    • Allow to set branch protection in an empty repository (#32095) (#32119)
    • Fix panic when cloning with wrong ssh format. (#32076) (#32118)
    • Fix rename branch permission bug (#32066) (#32108)
    • Fix: database not update release when using git push --tags --force (#32040) (#32074)
    • Add missing comment reply handling (#32050) (#32065)
    • Do not escape relative path in RPM primary index (#32038) (#32054)
    • Fix /repos/{owner}/{repo}/pulls/{index}/files endpoint not populating previous_filename (#32017) (#32028)
    • Support allowed hosts for migrations to work with proxy (#32025) (#32026)
    • Fix the logic of finding the latest pull review commit ID (#32139) (#32165)
    • Fix bug in getting merged pull request by commit (#32079) (#32117)
    • Fix wrong last modify time (#32102) (#32104)
    • Fix incorrect /tokens api (#32085) (#32092)
    • Handle invalid target when creating releases using API (#31841) (#32043)
    • Check if the due_date is nil when editing issues (#32035) (#32042)
    • Fix container parallel upload bugs (#32022)
    • Fixed race condition when deleting documents by repoId in ElasticSearch (#32185) (#32188)
    • Refactor CSRF protector (#32057) (#32069)
    • Fix Bug in Issue/pulls list (#32081) (#32115)
    • Include collaboration repositories on dashboard source/forks/mirrors list (#31946) (#32122)
    • Add null check for responseData.invalidTopics (#32212) (#32217)
  • TESTING
    • Fix mssql ci with a new mssql version on ci (#32094)
  • MISC

Contributors