From 1e4baa843993ff98117adec87721dc474c4773f6 Mon Sep 17 00:00:00 2001 From: forgejo-release-manager Date: Sat, 8 Feb 2025 10:47:59 +0000 Subject: [PATCH] chore(release-notes): Forgejo v10.0.1 (#6848) https://codeberg.org/forgejo/forgejo/milestone/9468 Co-authored-by: Earl Warren Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/6848 Reviewed-by: 0ko <0ko@noreply.codeberg.org> Co-authored-by: forgejo-release-manager Co-committed-by: forgejo-release-manager --- release-notes-published/10.0.1.md | 44 +++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 release-notes-published/10.0.1.md diff --git a/release-notes-published/10.0.1.md b/release-notes-published/10.0.1.md new file mode 100644 index 0000000000..35608f761e --- /dev/null +++ b/release-notes-published/10.0.1.md @@ -0,0 +1,44 @@ +See also the [dedicated blog post](https://forgejo.org/2025-02-release-v1001/). + + + +## Release notes + +- Security bug fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6839): Verify the ID of Forgejo Actions web endpoints belongs to the repository to prevent the deletion of runners or variables or the modification of variables. [Read more in the dedicated blog post](https://forgejo.org/2025-02-release-v1001/). + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6838): Enforce permissions on publicly available user or organizations projects to not leak information from issues and pull requests that belong to private repositories. [Read more in the dedicated blog post](https://forgejo.org/2025-02-release-v1001/). +- User Interface bug fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6803) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6833)): fix(ui): display verified icon for default gpg key +- Localization + - Updates from Codeberg Translate: [[1]](https://codeberg.org/forgejo/forgejo/pulls/6764), [[2]](https://codeberg.org/forgejo/forgejo/pulls/6834) +- Bug fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6674) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6678)): fix: load settings for valid user and email check + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6639) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6651)): Teach the doctor to remove orphaned two_factor with `forgejo doctor check --run check-db-consistency --fix`. Such rows may contain invalid data and [block the migration to v10](https://codeberg.org/forgejo/forgejo/issues/6637) with a message such as `failed: AesDecrypt invalid decrypted base64 string: illegal base64 data at input byte 0`. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6633) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6643)): fix: listing tokens must not require basic auth +- Included for completeness but not worth a release note + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6817) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6832)): fix: avoid y-axis clipping for branch name + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6646) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6810)): ci: fix go version check + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6808) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6809)): chore(i18n): lint errors + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6782) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6783)): fix: make author search case insenstive + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6620) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6770)): fix(ui): add triangle down octicon to code search options dropdown + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6708) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6749)): Set explore pages to configurable default sort + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6734) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6748)): Disable autofocus on the dashboard repository search box + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6525) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6739)): fix inline file preview for files with encoded URL, fix #5069 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6726) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6730)): fix: check for webauthn in 2fa user search + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6716) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6720)): fix: disallow blame on directories + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6701) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6718)): fix(i18n): add forgotten translatable string + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6715) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6717)): fix: render issue titles consistently + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6704): chore: consistent docker image and action references + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6694): Update dependency katex to v0.16.21 [SECURITY] (v10.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6572) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6685)): Fix inline file preview for rendered files + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6677) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6684)): fix: add non allowed domain translation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6655) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6668)): chore(security): update security.txt with new expiration date + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6644): Update dependency go to v1.23.5 (v10.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6617) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6636)): fix(ui): prevent overflow of branch selector in commit graph + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6597) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6632)): Fix mention and emoji expansion & Improve leaving list completion + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6613) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6614)): Hide git note add button for commit, if commit already has a note + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6595) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6601)): fix: Reset content of comment edit field on cancel + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6591) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6594)): fix: reduce noise for the v303 migration + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6569) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6587)): tests(e2e): Various fixes to visual testing + - [PR](https://codeberg.org/forgejo/forgejo/pulls/6400) ([backported](https://codeberg.org/forgejo/forgejo/pulls/6585)): Refactor e2e tests to simplify authentication setup +