blog/content/post/release-of-1.21.11.md

6.4 KiB

date authors title tags draft
2024-04-16T12:04:00+08:00
lunny
Gitea 1.21.11 is released
release
false

We are proud to present the release of Gitea version 1.21.11.

We highly encourage users to update to this version for some important bug-fixes, notably #30136 which can cause XSS problem. We also upgrade to Golang 1.21.9 to include Golang security fix.

We have merged 32 pull requests to release this version.

You can download one of our pre-built binaries from our downloads page - make sure to select the correct platform! For further details on how to install, follow our installation guide.

We would also like to thank all of our supporters on Open Collective who are helping to sustain us financially.

Are you looking for a seamless, hassle-free solution to manage your Git repositories? Look no further! Gitea Cloud is here to revolutionize your development experience.

Changelog

1.21.11 - 2024-04-16

  • SECURITY
    • Use go1.21.9 to include Golang security fix
    • Fix possible renderer security problem (#30136) (#30315)
    • Performance optimization for git push and check permissions for push options (#30104) (#30354)
  • BUGFIXES
    • Fix close file in the Upload func (#30262) (#30269)
    • Fix inline math blocks can't be preceeded/followed by alphanumerical characters (#30175) (#30250)
    • Fix missing 0 prefix of GPG key id (#30245) (#30247)
    • Include encoding in signature payload (#30174) (#30181)
    • Move from max( id ) to max( index ) for latest commit statuses (#30076) (#30155)
    • Load attachments for code comments (#30124) (#30126)
    • Fix gitea doctor will remove repo-avatar files when executing command storage-archives (#30094) (#30120)
    • Fix possible data race on tests (#30093) (#30108)
    • Fix duplicate migrated milestones (#30102) (#30105)
    • Fix panic for fixBrokenRepoUnits16961 (#30068) (#30100)
    • Fix incorrect SVGs (#30087)
    • Fix create commit status (#30225) (#30340)
    • Fix misuse of unsupported global variables (#30402)
    • Fix to delete the cookie when AppSubURL is non-empty (#30375) (#30468)
    • Avoid user does not exist error when detecting schedule actions when the commit author is an external user (#30357) (#30408)
    • Change the default maxPerPage for gitbucket (#30392) (#30471)
    • Check the token's owner and repository when registering a runner (#30406) (#30412)
    • Avoid losing token when updating mirror settings (#30429) (#30466)
    • Fix commit status cache which missed target_url (#30426) (#30445)
    • Fix rename branch 500 when the target branch is deleted but exist in database (#30430) (#30437)
    • Fix mirror error when mirror repo is empty (#30432) (#30467)
    • Use db.ListOptions directly instead of Paginator interface to make it easier to use and fix performance of /pulls and /issues (#29990) (#30447)
    • Fix code owners will not be mentioned when a pull request comes from a forked repository (#30476) (#30497)
  • DOCS
  • MISC
    • Update katex to 0.16.10 (#30089)
    • Upgrade go-sqlite to v1.14.22 (#30462)

Contributors