realaravinth/forgejo-federation
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity
forgejo-federation/go.mod

309 lines
14 KiB
Modula-2
Raw Normal View History

Use Go1.11 module (#5743) * Migrate to go modules * make vendor * Update mvdan.cc/xurls * make vendor * Update code.gitea.io/git * make fmt-check * Update github.com/go-sql-driver/mysql * make vendor
2019-03-27 16:45:23 +05:30
module code.gitea.io/gitea
fix(security): CVE-2024-24788 malformed DNS message Refs: https://pkg.go.dev/vuln/GO-2024-2824
2024-05-08 17:51:20 +05:30
go 1.22.3
Use Go1.11 module (#5743) * Migrate to go modules * make vendor * Update mvdan.cc/xurls * make vendor * Update code.gitea.io/git * make fmt-check * Update github.com/go-sql-driver/mysql * make vendor
2019-03-27 16:45:23 +05:30
require (
[CHORE] Update `connect-go` to maintained fork - Update github.com/bufbuild/connect-go to https://github.com/connectrpc/connect-go. - This is a fork that's actively maintained and is recommend by the original library. Looking at the recent release notes, it looks like going in the right direction what one would expect of a library, no strange features being added, lots of improvements. - There's still an indirect dependency by `code.gitea.io/actions-proto-go` on a old version of `connect-go`.
2024-02-21 03:52:30 +05:30
code.gitea.io/actions-proto-go v0.4.0
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
code.gitea.io/gitea-vet v0.2.3
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
code.gitea.io/sdk/gitea v0.17.1
Update a few go dependencies (#21022) There are a lot of go dependencies that appear old and we should update them. The following packages have been updated: * codeberg.org/gusted/mcaptcha * github.com/markbates/goth * github.com/buildkite/terminal-to-html * github.com/caddyserver/certmagic * github.com/denisenkom/go-mssqldb * github.com/duo-labs/webauthn * github.com/editorconfig/editorconfig-core-go/v2 * github.com/felixge/fgprof * github.com/gliderlabs/ssh * github.com/go-ap/activitypub * github.com/go-git/go-git/v5 * github.com/go-ldap/ldap/v3 * github.com/go-swagger/go-swagger * github.com/go-testfixtures/testfixtures/v3 * github.com/golang-jwt/jwt/v4 * github.com/klauspost/compress * github.com/lib/pq * gitea.com/lunny/dingtalk_webhook - instead of github.com * github.com/mattn/go-sqlite3 * github/matn/go-isatty * github.com/minio/minio-go/v7 * github.com/niklasfasching/go-org * github.com/prometheus/client_golang * github.com/stretchr/testify * github.com/unrolled/render * github.com/xanzy/go-gitlab * gopkg.in/ini.v1 Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-09-02 02:43:17 +05:30
codeberg.org/gusted/mcaptcha v0.0.0-20220723083913-4f3072e1d570
Update module connectrpc.com/connect to v1.16.1
2024-04-27 05:37:16 +05:30
connectrpc.com/connect v1.16.1
Update module gitea.com/go-chi/binding to v0.0.0-20240430071103-39a851e106ed
2024-05-02 05:35:56 +05:30
gitea.com/go-chi/binding v0.0.0-20240430071103-39a851e106ed
Update go-chi/cache to utilize Ping() (#19719) * update gitea.com/go-chi/cache -> v0.2.0 * ajust to new interface * refactor
2022-05-16 00:13:27 +05:30
gitea.com/go-chi/cache v0.2.0
Update gitea.com/go-chi/captcha digest to fb487f6
2024-03-25 19:07:57 +05:30
gitea.com/go-chi/captcha v0.0.0-20240315150714-fb487f629098
Update gitea.com/go-chi/session digest to 16768d9
2024-03-25 20:48:21 +05:30
gitea.com/go-chi/session v0.0.0-20240316035857-16768d98ec96
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
gitea.com/lunny/levelqueue v0.4.2-0.20230414023320-3c0159fe0fe4
Add support for ssh commit signing (#17743) * Add support for ssh commit signing * Split out ssh verification to separate file * Show ssh key fingerprint on commit page * Update sshsig lib * Make sure we verify against correct namespace * Add ssh public key verification via ssh signatures When adding a public ssh key also validate that this user actually owns the key by signing a token with the private key. * Remove some gpg references and make verify key optional * Fix spaces indentation * Update options/locale/locale_en-US.ini Co-authored-by: Gusted <williamzijl7@hotmail.com> * Update templates/user/settings/keys_ssh.tmpl Co-authored-by: Gusted <williamzijl7@hotmail.com> * Update options/locale/locale_en-US.ini Co-authored-by: Gusted <williamzijl7@hotmail.com> * Update options/locale/locale_en-US.ini Co-authored-by: Gusted <williamzijl7@hotmail.com> * Update models/ssh_key_commit_verification.go Co-authored-by: Gusted <williamzijl7@hotmail.com> * Reword ssh/gpg_key_success message * Change Badsignature to NoKeyFound * Add sign/verify tests * Fix upstream api changes to user_model User * Match exact on SSH signature * Fix code review remarks Co-authored-by: Gusted <williamzijl7@hotmail.com> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2021-12-19 11:07:18 +05:30
github.com/42wim/sshsig v0.0.0-20211121163825-841cf5bbc121
Add ntlm authentication support for mail (#23811) Add ntlm authentication support for mail use "github.com/Azure/go-ntlmssp" --------- Co-authored-by: yangtan_win <YangTan@Fitsco.com.cn> Co-authored-by: silverwind <me@silverwind.io>
2023-05-03 03:10:46 +05:30
github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358
Use `ProtonMail/go-crypto` for `opengpg` in tests (#30736) (cherry picked from commit 8b8b48ef5fb1c5c164d5534ea4b8049f1db26ce9) Conflicts: go.mod trivial context confllict
2024-04-28 04:51:33 +05:30
github.com/ProtonMail/go-crypto v1.0.0
Update module github.com/PuerkitoBio/goquery to v1.9.2
2024-05-05 05:35:34 +05:30
github.com/PuerkitoBio/goquery v1.9.2
Update Chroma to v2.13.0 (#29732) This adds new lexers and includes some fixes. See https://github.com/alecthomas/chroma/releases/tag/v2.13.0 for the full changelog. --------- Co-authored-by: Giteabot <teabot@gitea.io> (cherry picked from commit 3e7ae79f99ef0e5ba3d1201c38f491121ea2a156)
2024-03-13 03:10:43 +05:30
github.com/alecthomas/chroma/v2 v2.13.0
Add Debian package registry (#24426) Co-authored-by: @awkwardbunny This PR adds a Debian package registry. You can follow [this tutorial](https://www.baeldung.com/linux/create-debian-package) to build a *.deb package for testing. Source packages are not supported at the moment and I did not find documentation of the architecture "all" and how these packages should be treated. ![grafik](https://user-images.githubusercontent.com/1666336/218126879-eb80a866-775c-4c8e-8529-5797203a64e6.png) Part of #20751. Revised copy of #22854. --------- Co-authored-by: Brian Hong <brian@hongs.me> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: Giteabot <teabot@gitea.io>
2023-05-02 22:01:35 +05:30
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb
bump bleve (#27300) Co-authored-by: yp05327 <576951401@qq.com> Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-09-27 12:40:58 +05:30
github.com/blevesearch/bleve/v2 v2.3.10
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/buildkite/terminal-to-html/v3 v3.10.1
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/caddyserver/certmagic v0.20.0
Add reverse proxy configuration support for remote IP address (#14959) * Add reverse proxy configuration support for remote IP address validation * Trust all IP addresses in containerized environments by default * Use single option to specify networks and proxy IP addresses. By default trust all loopback IPs Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2021-03-16 03:57:28 +05:30
github.com/chi-middleware/proxy v1.1.1
Add support for incoming emails (#22056) closes #13585 fixes #9067 fixes #2386 ref #6226 ref #6219 fixes #745 This PR adds support to process incoming emails to perform actions. Currently I added handling of replies and unsubscribing from issues/pulls. In contrast to #13585 the IMAP IDLE command is used instead of polling which results (in my opinion 😉) in cleaner code. Procedure: - When sending an issue/pull reply email, a token is generated which is present in the Reply-To and References header. - IMAP IDLE waits until a new email arrives - The token tells which action should be performed A possible signature and/or reply gets stripped from the content. I added a new service to the drone pipeline to test the receiving of incoming mails. If we keep this in, we may test our outgoing emails too in future. Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-01-14 21:27:10 +05:30
github.com/dimiro1/reply v0.0.0-20200315094148-d0136a4c9e21
Use git log name-status in get last commit (#16059) * Improve get last commit using git log --name-status git log --name-status -c provides information about the diff between a commit and its parents. Using this and adjusting the algorithm to use the first change to a path allows for a much faster generation of commit info. There is a subtle change in the results generated but this will cause the results to more closely match those from elsewhere. Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: Lauris BH <lauris@nix.lv>
2021-06-21 03:30:46 +05:30
github.com/djherbis/buffer v1.2.0
github.com/djherbis/nio/v3 v3.0.1
Add Conda package registry (#22262) This PR adds a [Conda](https://conda.io/) package registry.
2023-02-02 00:00:39 +05:30
github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5
Update go.mod dependencies (#23126) This PR does a bulk update of a lot of our go deps. I have not included nektos/act and xorm for the following reasons: * Xorm updates can sometimes be complex and I'd rather do that in a separate PR * I think people more update with the actions code should double check that the latest nektos/act library works correctly. --------- Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2023-02-25 01:48:49 +05:30
github.com/dustin/go-humanize v1.0.1
Update module github.com/editorconfig/editorconfig-core-go/v2 to v2.6.2
2024-04-03 09:38:11 +05:30
github.com/editorconfig/editorconfig-core-go/v2 v2.6.2
Add support for incoming emails (#22056) closes #13585 fixes #9067 fixes #2386 ref #6226 ref #6219 fixes #745 This PR adds support to process incoming emails to perform actions. Currently I added handling of replies and unsubscribing from issues/pulls. In contrast to #13585 the IMAP IDLE command is used instead of polling which results (in my opinion 😉) in cleaner code. Procedure: - When sending an issue/pull reply email, a token is generated which is present in the Reply-To and References header. - IMAP IDLE waits until a new email arrives - The token tells which action should be performed A possible signature and/or reply gets stripped from the content. I added a new service to the drone pipeline to test the receiving of incoming mails. If we keep this in, we may test our outgoing emails too in future. Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-01-14 21:27:10 +05:30
github.com/emersion/go-imap v1.2.1
Update go deps (#19665) * update gitea.com/go-chi/binding * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/duo-labs/webauthn * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/emirpasic/gods * update github.com/gliderlabs/ssh * update github.com/go-chi/cors * update github.com/go-enry/go-enry/v2 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/golang-jwt/jwt/v4 * update github.com/google/pprof * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/minio/minio-go/v7 * update github.com/olivere/elastic/v7 * update github.com/unrolled/render * update github.com/urfave/cli * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * adopt breaking changes of certmagic
2022-05-10 16:02:42 +05:30
github.com/emirpasic/gods v1.18.1
Update module github.com/felixge/fgprof to v0.9.4
2024-03-30 15:41:45 +05:30
github.com/felixge/fgprof v0.9.4
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/fsnotify/fsnotify v1.7.0
Update module github.com/gliderlabs/ssh to v0.3.7
2024-03-25 23:54:23 +05:30
github.com/gliderlabs/ssh v0.3.7
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/go-ap/activitypub v0.0.0-20231114162308-e219254dc5c9
Update golang deps (#22410) Note, hashicorp's LRU has been updated to v2 which supports generics but this was left out as it is a more involved upgrade.
2023-01-12 13:51:16 +05:30
github.com/go-ap/jsonld v0.0.0-20221030091449-f2a191312c73
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/go-chi/chi/v5 v5.0.11
Update go deps (#19665) * update gitea.com/go-chi/binding * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/duo-labs/webauthn * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/emirpasic/gods * update github.com/gliderlabs/ssh * update github.com/go-chi/cors * update github.com/go-enry/go-enry/v2 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/golang-jwt/jwt/v4 * update github.com/google/pprof * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/minio/minio-go/v7 * update github.com/olivere/elastic/v7 * update github.com/unrolled/render * update github.com/urfave/cli * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * adopt breaking changes of certmagic
2022-05-10 16:02:42 +05:30
github.com/go-chi/cors v1.2.1
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/go-co-op/gocron v1.37.0
Update module github.com/go-enry/go-enry/v2 to v2.8.7
2024-03-26 00:35:23 +05:30
github.com/go-enry/go-enry/v2 v2.8.7
User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133) * go.mod: add go-fed/{httpsig,activity/pub,activity/streams} dependency go get github.com/go-fed/activity/streams@master go get github.com/go-fed/activity/pub@master go get github.com/go-fed/httpsig@master * activitypub: implement /api/v1/activitypub/user/{username} (#14186) Return informations regarding a Person (as defined in ActivityStreams https://www.w3.org/TR/activitystreams-vocabulary/#dfn-person). Refs: https://github.com/go-gitea/gitea/issues/14186 Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: add the public key to Person (#14186) Refs: https://github.com/go-gitea/gitea/issues/14186 Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: go-fed conformant Clock instance Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: signing http client Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: implement the ReqSignature middleware Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: hack_16834 Signed-off-by: Loïc Dachary <loic@dachary.org> * Fix CI checks-backend errors with go mod tidy Signed-off-by: Anthony Wang <ta180m@pm.me> * Change 2021 to 2022, properly format package imports Signed-off-by: Anthony Wang <ta180m@pm.me> * Run make fmt and make generate-swagger Signed-off-by: Anthony Wang <ta180m@pm.me> * Use Gitea JSON library, add assert for pkp Signed-off-by: Anthony Wang <ta180m@pm.me> * Run make fmt again, fix err var redeclaration Signed-off-by: Anthony Wang <ta180m@pm.me> * Remove LogSQL from ActivityPub person test Signed-off-by: Anthony Wang <ta180m@pm.me> * Assert if json.Unmarshal succeeds Signed-off-by: Anthony Wang <ta180m@pm.me> * Cleanup, handle invalid usernames for ActivityPub person GET request Signed-off-by: Anthony Wang <ta180m@pm.me> * Rename hack_16834 to user_settings Signed-off-by: Anthony Wang <ta180m@pm.me> * Use the httplib module instead of http for GET requests * Clean up whitespace with make fmt * Use time.RFC1123 and make the http.Client proxy-aware * Check if digest algo is supported in setting module * Clean up some variable declarations * Remove unneeded copy * Use system timezone instead of setting.DefaultUILocation * Use named constant for httpsigExpirationTime * Make pubKey IRI #main-key instead of /#main-key * Move /#main-key to #main-key in tests * Implemented Webfinger endpoint. * Add visible check. * Add user profile as alias. * Add actor IRI and remote interaction URL to WebFinger response * fmt * Fix lint errors * Use go-ap instead of go-fed * Run go mod tidy to fix missing modules in go.mod and go.sum * make fmt * Convert remaining code to go-ap * Clean up go.sum * Fix JSON unmarshall error * Fix CI errors by adding @context to Person() and making sure types match * Correctly decode JSON in api_activitypub_person_test.go * Force CI rerun * Fix TestActivityPubPersonInbox segfault * Fix lint error * Use @mariusor's suggestions for idiomatic go-ap usage * Correctly add inbox/outbox IRIs to person * Code cleanup * Remove another LogSQL from ActivityPub person test * Move httpsig algos slice to an init() function * Add actor IRI and remote interaction URL to WebFinger response * Update TestWebFinger to check for ActivityPub IRI in aliases * make fmt * Force CI rerun * WebFinger: Add CORS header and fix Href -> Template for remote interactions The CORS header is needed due to https://datatracker.ietf.org/doc/html/rfc7033#section-5 and fixes some Peertube <-> Gitea federation issues * make lint-backend * Make sure Person endpoint has Content-Type application/activity+json and includes PreferredUsername, URL, and Icon Setting the correct Content-Type is essential for federating with Mastodon * Use UTC instead of GMT * Rename pkey to pubKey * Make sure HTTP request Date in GMT * make fmt * dont drop err * Make sure API responses always refer to username in original case Copied from what I wrote on #19133 discussion: Handling username case is a very tricky issue and I've already encountered a Mastodon <-> Gitea federation bug due to Gitea considering Ta180m and ta180m to be the same user while Mastodon thinks they are two different users. I think the best way forward is for Gitea to only use the original case version of the username for federation so other AP software don't get confused. * Move httpsig algs constant slice to modules/setting/federation.go * Add new federation settings to app.example.ini and config-cheat-sheet * Return if marshalling error * Make sure Person IRIs are generated correctly This commit ensures that if the setting.AppURL is something like "http://127.0.0.1:42567" (like in the integration tests), a trailing slash will be added after that URL. * If httpsig verification fails, fix Host header and try again This fixes a very rare bug when Gitea and another AP server (confirmed to happen with Mastodon) are running on the same machine, Gitea fails to verify incoming HTTP signatures. This is because the other AP server creates the sig with the public Gitea domain as the Host. However, when Gitea receives the request, the Host header is instead localhost, so the signature verification fails. Manually changing the host header to the correct value and trying the veification again fixes the bug. * Revert "If httpsig verification fails, fix Host header and try again" This reverts commit f53e46c721a037c55facb9200106a6b491bf834c. The bug was actually caused by nginx messing up the Host header when reverse-proxying since I didn't have the line `proxy_set_header Host $host;` in my nginx config for Gitea. * Go back to using ap.IRI to generate inbox and outbox IRIs * use const for key values * Update routers/web/webfinger.go * Use ctx.JSON in Person response to make code cleaner * Revert "Use ctx.JSON in Person response to make code cleaner" This doesn't work because the ctx.JSON() function already sends the response out and it's too late to edit the headers. This reverts commit 95aad988975be3393c76094864ed6ba962157e0c. * Use activitypub.ActivityStreamsContentType for Person response Content Type * Limit maximum ActivityPub request and response sizes to a configurable setting * Move setting key constants to models/user/setting_keys.go * Fix failing ActivityPubPerson integration test by checking the correct field for username * Add a warning about changing settings that can break federation * Add better comments * Don't multiply Federation.MaxSize by 1<<20 twice * Add more better comments * Fix failing ActivityPubMissingPerson test We now use ctx.ContextUser so the message printed out when a user does not exist is slightly different * make generate-swagger For some reason I didn't realize that /templates/swagger/v1_json.tmpl was machine-generated by make generate-swagger... I've been editing it by hand for three months! 🤦 * Move getting the RFC 2616 time to a separate function * More code cleanup * Update go-ap to fix empty liked collection and removed unneeded HTTP headers * go mod tidy * Add ed25519 to httpsig algorithms * Use go-ap/jsonld to add @context and marshal JSON * Change Gitea user agent from the default to Gitea/Version * Use ctx.ServerError and remove all remote interaction code from webfinger.go
2022-06-19 10:55:12 +05:30
github.com/go-fed/httpsig v1.1.1-0.20201223112313-55836744818e
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/go-git/go-billy/v5 v5.5.0
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/go-git/go-git/v5 v5.11.0
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/go-ldap/ldap/v3 v3.4.6
Update module github.com/go-sql-driver/mysql to v1.8.1
2024-03-30 20:16:43 +05:30
github.com/go-sql-driver/mysql v1.8.1
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/go-swagger/go-swagger v0.30.5
Partially enable MSSQL case-sensitive collation support (#29238) Follow #28662 (cherry picked from commit 29a8c8de779924694fadad80b31cc855dd62c0f2)
2024-03-08 08:49:35 +05:30
github.com/go-testfixtures/testfixtures/v3 v3.10.0
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/go-webauthn/webauthn v0.10.0
Implement webhook branch filter (#7791) * Fix validate() function to handle errors in embedded anon structs * Implement webhook branch filter See #2025, #3998.
2019-09-09 11:18:21 +05:30
github.com/gobwas/glob v0.2.3
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2022-03-08 16:45:30 +05:30
github.com/gogs/chardet v0.0.0-20211120154057-b7413eaefb8f
rm redirect (#14534)
2021-02-01 10:19:25 +05:30
github.com/gogs/go-gogs-client v0.0.0-20210131175652-1d7215cd8d85
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/golang-jwt/jwt/v5 v5.2.0
Bump google/go-github to v57 (#28514)
2023-12-19 03:12:04 +05:30
github.com/google/go-github/v57 v57.0.0
Update module github.com/felixge/fgprof to v0.9.4
2024-03-30 15:41:45 +05:30
github.com/google/pprof v0.0.0-20240227163752-401108e1b7e7
Partially enable MSSQL case-sensitive collation support (#29238) Follow #28662 (cherry picked from commit 29a8c8de779924694fadad80b31cc855dd62c0f2)
2024-03-08 08:49:35 +05:30
github.com/google/uuid v1.6.0
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/gorilla/feeds v1.1.2
github.com/gorilla/sessions v1.2.2
Remove external API calls in `TestPassword` (#30716) The test had a dependency on `https://api.pwnedpasswords.com` which caused many failures on CI recently: ``` --- FAIL: TestPassword (2.37s) pwn_test.go:41: Get "https://api.pwnedpasswords.com/range/e6b6a": context deadline exceeded (Client.Timeout exceeded while awaiting headers) FAIL coverage: 82.9% of statements ``` (cherry picked from commit 9235442ba58524c8d12ae54865d583acfa1f439d)
2024-05-02 20:13:23 +05:30
github.com/h2non/gock v1.2.0
Update Golang deps (#21304)
2022-10-01 19:19:30 +05:30
github.com/hashicorp/go-version v1.6.0
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/hashicorp/golang-lru/v2 v2.0.7
Update golang deps (#22410) Note, hashicorp's LRU has been updated to v2 which supports generics but this was left out as it is a more involved upgrade.
2023-01-12 13:51:16 +05:30
github.com/huandu/xstrings v1.4.0
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/jaytaylor/html2text v0.0.0-20230321000545-74c2419ad056
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/jhillyerd/enmime v1.1.0
Future proof for 1.18 (#18644) - Update json-iterator/go to handle 1.18's new memory model with slices. - Don't panic while running gitea with go 1.18
2022-02-07 02:08:14 +05:30
github.com/json-iterator/go v1.1.12
Vendor Update Go Libs (#13444) * denisenkom/go-mssqldb untagged -> v0.9.0 * github.com/editorconfig/editorconfig-core-go v2.3.7 -> v2.3.8 * github.com/go-testfixtures/testfixtures v3.4.0 -> v3.4.1 * github.com/mholt/archiver v3.3.2 -> v3.5.0 * github.com/olivere/elastic v7.0.20 -> v7.0.21 * github.com/urfave/cli v1.22.4 -> v1.22.5 * github.com/xanzy/go-gitlab v0.38.1 -> v0.39.0 * github.com/yuin/goldmark-meta untagged -> v1.0.0 * github.com/ethantkoenig/rupture 0a76f03a811a -> c3b3b810dc77 * github.com/jaytaylor/html2text 8fb95d837f7d -> 3577fbdbcff7 * github.com/kballard/go-shellquote cd60e84ee657 -> 95032a82bc51 * github.com/msteinert/pam 02ccfbfaf0cc -> 913b8f8cdf8b * github.com/unknwon/paginater 7748a72e0141 -> 042474bd0eae * CI.restart() Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2020-11-07 00:11:42 +05:30
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
update vendor keybase/go-crypto (#10234)
2020-02-12 00:28:23 +05:30
github.com/keybase/go-crypto v0.0.0-20200123153347-de78d2cb44f4
Update module github.com/klauspost/compress to v1.17.8
2024-04-10 07:40:00 +05:30
github.com/klauspost/compress v1.17.8
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/klauspost/cpuid/v2 v2.2.6
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/lib/pq v1.10.9
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/markbates/goth v1.78.0
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/mattn/go-isatty v0.0.20
Partially enable MSSQL case-sensitive collation support (#29238) Follow #28662 (cherry picked from commit 29a8c8de779924694fadad80b31cc855dd62c0f2)
2024-03-08 08:49:35 +05:30
github.com/mattn/go-sqlite3 v1.14.22
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/meilisearch/meilisearch-go v0.26.1
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2022-03-08 16:45:30 +05:30
github.com/mholt/archiver/v3 v3.5.1
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/microcosm-cc/bluemonday v1.0.26
Update module github.com/minio/minio-go/v7 to v7.0.70
2024-04-26 07:35:51 +05:30
github.com/minio/minio-go/v7 v7.0.70
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/msteinert/pam v1.2.0
github.com/nektos/act v0.2.52
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/niklasfasching/go-org v1.7.0
Update go deps (#19665) * update gitea.com/go-chi/binding * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/duo-labs/webauthn * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/emirpasic/gods * update github.com/gliderlabs/ssh * update github.com/go-chi/cors * update github.com/go-enry/go-enry/v2 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/golang-jwt/jwt/v4 * update github.com/google/pprof * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/minio/minio-go/v7 * update github.com/olivere/elastic/v7 * update github.com/unrolled/render * update github.com/urfave/cli * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * adopt breaking changes of certmagic
2022-05-10 16:02:42 +05:30
github.com/olivere/elastic/v7 v7.0.32
Use import of OCI structs (#22765) Fixes #22758 Otherwise we would need to rewrite the structs in `oci.go`.
2023-02-06 15:37:09 +05:30
github.com/opencontainers/go-digest v1.0.0
Update module github.com/opencontainers/image-spec to v1.1.0
2024-03-30 11:35:12 +05:30
github.com/opencontainers/image-spec v1.1.0
Update golang deps (#22410) Note, hashicorp's LRU has been updated to v2 which supports generics but this was left out as it is a more involved upgrade.
2023-01-12 13:51:16 +05:30
github.com/pquerna/otp v1.4.0
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/prometheus/client_golang v1.18.0
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2022-03-08 16:45:30 +05:30
github.com/quasoft/websspi v1.1.2
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/redis/go-redis/v9 v9.4.0
chore(actions): support cron schedule task (#26655) Replace #22751 1. only support the default branch in the repository setting. 2. autoload schedule data from the schedule table after starting the service. 3. support specific syntax like `@yearly`, `@monthly`, `@weekly`, `@daily`, `@hourly` ## How to use See the [GitHub Actions document](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#schedule) for getting more detailed information. ```yaml on: schedule: - cron: '30 5 * * 1,3' - cron: '30 5 * * 2,4' jobs: test_schedule: runs-on: ubuntu-latest steps: - name: Not on Monday or Wednesday if: github.event.schedule != '30 5 * * 1,3' run: echo "This step will be skipped on Monday and Wednesday" - name: Every time run: echo "This step will always run" ``` Signed-off-by: Bo-Yi.Wu <appleboy.tw@gmail.com> --------- Co-authored-by: Jason Song <i@wolfogre.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-08-24 08:36:51 +05:30
github.com/robfig/cron/v3 v3.0.1
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
Use new RPM constants (#28931) https://github.com/sassoftware/go-rpmutils/pull/24 got merged.
2024-01-26 03:10:24 +05:30
github.com/sassoftware/go-rpmutils v0.2.1-0.20240124161140-277b154961dd
Update go.mod dependencies (#23126) This PR does a bulk update of a lot of our go deps. I have not included nektos/act and xorm for the following reasons: * Xorm updates can sometimes be complex and I'd rather do that in a separate PR * I think people more update with the actions code should double check that the latest nektos/act library works correctly. --------- Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2023-02-25 01:48:49 +05:30
github.com/sergi/go-diff v1.3.1
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/shurcooL/vfsgen v0.0.0-20230704071429-0000e147ea92
Update module gitea.com/gitea/act to v0.261.1
2024-04-27 07:34:59 +05:30
github.com/stretchr/testify v1.9.0
Allow common redis and leveldb connections (#12385) * Allow common redis and leveldb connections Prevents multiple reopening of redis and leveldb connections to the same place by sharing connections. Further allows for more configurable redis connection type using the redisURI and a leveldbURI scheme. Signed-off-by: Andrew Thornton <art27@cantab.net> * add unit-test Signed-off-by: Andrew Thornton <art27@cantab.net> * as per @lunny Signed-off-by: Andrew Thornton <art27@cantab.net> * add test Signed-off-by: Andrew Thornton <art27@cantab.net> * Update modules/cache/cache_redis.go * Update modules/queue/queue_disk.go * Update modules/cache/cache_redis.go * Update modules/cache/cache_redis.go * Update modules/queue/unique_queue_disk.go * Update modules/queue/queue_disk.go * Update modules/queue/unique_queue_disk.go * Update modules/session/redis.go Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: Lauris BH <lauris@nix.lv>
2020-09-28 02:39:46 +05:30
github.com/syndtr/goleveldb v1.0.0
Add Debian package registry (#24426) Co-authored-by: @awkwardbunny This PR adds a Debian package registry. You can follow [this tutorial](https://www.baeldung.com/linux/create-debian-package) to build a *.deb package for testing. Source packages are not supported at the moment and I did not find documentation of the architecture "all" and how these packages should be treated. ![grafik](https://user-images.githubusercontent.com/1666336/218126879-eb80a866-775c-4c8e-8529-5797203a64e6.png) Part of #20751. Revised copy of #22854. --------- Co-authored-by: Brian Hong <brian@hongs.me> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: Giteabot <teabot@gitea.io>
2023-05-02 22:01:35 +05:30
github.com/ulikunitz/xz v0.5.11
Update module github.com/urfave/cli/v2 to v2.27.2
2024-04-28 05:35:53 +05:30
github.com/urfave/cli/v2 v2.27.2
feat(federation): validate like activities (#3494) First step on the way to #1680 The PR will * accept like request on the api * validate activity in a first level You can find * architecture at: https://codeberg.org/meissa/forgejo/src/branch/forgejo-federated-star/docs/unsure-where-to-put/federation-architecture.md Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/3494 Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org> Co-authored-by: Michael Jerger <michael.jerger@meissa-gmbh.de> Co-committed-by: Michael Jerger <michael.jerger@meissa-gmbh.de>
2024-05-07 13:29:49 +05:30
github.com/valyala/fastjson v1.6.4
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/xanzy/go-gitlab v0.96.0
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/yohcop/openid-go v1.0.1
Update module gitea.com/gitea/act to v0.261.1
2024-04-27 07:34:59 +05:30
github.com/yuin/goldmark v1.7.0
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2022-03-08 16:45:30 +05:30
github.com/yuin/goldmark-meta v1.1.0
Update module github.com/PuerkitoBio/goquery to v1.9.2
2024-05-05 05:35:34 +05:30
golang.org/x/crypto v0.22.0
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
golang.org/x/image v0.15.0
Update module github.com/PuerkitoBio/goquery to v1.9.2
2024-05-05 05:35:34 +05:30
golang.org/x/net v0.24.0
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
golang.org/x/oauth2 v0.16.0
Update module github.com/PuerkitoBio/goquery to v1.9.2
2024-05-05 05:35:34 +05:30
golang.org/x/sys v0.19.0
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
golang.org/x/text v0.14.0
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
golang.org/x/tools v0.17.0
google.golang.org/grpc v1.60.1
bump protobuf module (#29617) (cherry picked from commit 06039bf0b7ec4dffe74ae323b8bbbbedec69d0c8)
2024-03-06 07:05:29 +05:30
google.golang.org/protobuf v1.33.0
Use Go1.11 module (#5743) * Migrate to go modules * make vendor * Update mvdan.cc/xurls * make vendor * Update code.gitea.io/git * make fmt-check * Update github.com/go-sql-driver/mysql * make vendor
2019-03-27 16:45:23 +05:30
gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
Update a few go dependencies (#21022) There are a lot of go dependencies that appear old and we should update them. The following packages have been updated: * codeberg.org/gusted/mcaptcha * github.com/markbates/goth * github.com/buildkite/terminal-to-html * github.com/caddyserver/certmagic * github.com/denisenkom/go-mssqldb * github.com/duo-labs/webauthn * github.com/editorconfig/editorconfig-core-go/v2 * github.com/felixge/fgprof * github.com/gliderlabs/ssh * github.com/go-ap/activitypub * github.com/go-git/go-git/v5 * github.com/go-ldap/ldap/v3 * github.com/go-swagger/go-swagger * github.com/go-testfixtures/testfixtures/v3 * github.com/golang-jwt/jwt/v4 * github.com/klauspost/compress * github.com/lib/pq * gitea.com/lunny/dingtalk_webhook - instead of github.com * github.com/mattn/go-sqlite3 * github/matn/go-isatty * github.com/minio/minio-go/v7 * github.com/niklasfasching/go-org * github.com/prometheus/client_golang * github.com/stretchr/testify * github.com/unrolled/render * github.com/xanzy/go-gitlab * gopkg.in/ini.v1 Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-09-02 02:43:17 +05:30
gopkg.in/ini.v1 v1.67.0
Add KaTeX rendering to Markdown. (#20571) This PR adds mathematical rendering with KaTeX. The first step is to add a Goldmark extension that detects the latex (and tex) mathematics delimiters. The second step to make this extension only run if math support is enabled. The second step is to then add KaTeX CSS and JS to the head which will load after the dom is rendered. Fix #3445 Signed-off-by: Andrew Thornton <art27@cantab.net> Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2022-09-13 22:03:37 +05:30
gopkg.in/yaml.v3 v3.0.1
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
mvdan.cc/xurls/v2 v2.5.0
Update strk.kbt.io/projects/go/libravatar to latest; closes #7860 (#8429)
2019-10-09 01:18:57 +05:30
strk.kbt.io/projects/go/libravatar v0.0.0-20191008002943-06d1c002b251
Update xorm version (#26128) Test new xorm version compatible with Gitea --------- Co-authored-by: KN4CK3R <admin@oldschoolhack.me>
2023-07-26 01:57:44 +05:30
xorm.io/builder v0.3.13
Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate (#28891) Mainly fix an error https://gitea.com/xorm/xorm/issues/2393
2024-01-22 15:54:55 +05:30
xorm.io/xorm v1.3.7
Use Go1.11 module (#5743) * Migrate to go modules * make vendor * Update mvdan.cc/xurls * make vendor * Update code.gitea.io/git * make fmt-check * Update github.com/go-sql-driver/mysql * make vendor
2019-03-27 16:45:23 +05:30
)
[Vendor] Fix Version Compare Lib (#12735) * switch to patched fork * vendor * reference upstream lib and use replace in go.mod * reference upstream lib and use replace in go.mod * Apply suggestions from code review * vendor Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2020-09-06 06:14:34 +05:30
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
require (
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
cloud.google.com/go/compute v1.23.3 // indirect
Update go.mod dependencies (#23126) This PR does a bulk update of a lot of our go deps. I have not included nektos/act and xorm for the following reasons: * Xorm updates can sometimes be complex and I'd rather do that in a separate PR * I think people more update with the actions code should double check that the latest nektos/act library works correctly. --------- Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2023-02-25 01:48:49 +05:30
cloud.google.com/go/compute/metadata v0.2.3 // indirect
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
dario.cat/mergo v1.0.0 // indirect
[DEPS] Bump mysql driver - Bump the SQL driver for MySQL to [v1.8.0](https://github.com/go-sql-driver/mysql/releases/tag/v1.8.0), which notably includes support for ed25519 authentication scheme (by yours truly). - Resolves #1868
2024-03-10 19:20:56 +05:30
filippo.io/edwards25519 v1.1.0 // indirect
Update a few go dependencies (#21022) There are a lot of go dependencies that appear old and we should update them. The following packages have been updated: * codeberg.org/gusted/mcaptcha * github.com/markbates/goth * github.com/buildkite/terminal-to-html * github.com/caddyserver/certmagic * github.com/denisenkom/go-mssqldb * github.com/duo-labs/webauthn * github.com/editorconfig/editorconfig-core-go/v2 * github.com/felixge/fgprof * github.com/gliderlabs/ssh * github.com/go-ap/activitypub * github.com/go-git/go-git/v5 * github.com/go-ldap/ldap/v3 * github.com/go-swagger/go-swagger * github.com/go-testfixtures/testfixtures/v3 * github.com/golang-jwt/jwt/v4 * github.com/klauspost/compress * github.com/lib/pq * gitea.com/lunny/dingtalk_webhook - instead of github.com * github.com/mattn/go-sqlite3 * github/matn/go-isatty * github.com/minio/minio-go/v7 * github.com/niklasfasching/go-org * github.com/prometheus/client_golang * github.com/stretchr/testify * github.com/unrolled/render * github.com/xanzy/go-gitlab * gopkg.in/ini.v1 Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-09-02 02:43:17 +05:30
git.sr.ht/~mariusor/go-xsd-duration v0.0.0-20220703122237-02e73435a078 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/ClickHouse/ch-go v0.61.1 // indirect
Partially enable MSSQL case-sensitive collation support (#29238) Follow #28662 (cherry picked from commit 29a8c8de779924694fadad80b31cc855dd62c0f2)
2024-03-08 08:49:35 +05:30
github.com/ClickHouse/clickhouse-go/v2 v2.18.0 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/DataDog/zstd v1.5.5 // indirect
Update a few go dependencies (#21022) There are a lot of go dependencies that appear old and we should update them. The following packages have been updated: * codeberg.org/gusted/mcaptcha * github.com/markbates/goth * github.com/buildkite/terminal-to-html * github.com/caddyserver/certmagic * github.com/denisenkom/go-mssqldb * github.com/duo-labs/webauthn * github.com/editorconfig/editorconfig-core-go/v2 * github.com/felixge/fgprof * github.com/gliderlabs/ssh * github.com/go-ap/activitypub * github.com/go-git/go-git/v5 * github.com/go-ldap/ldap/v3 * github.com/go-swagger/go-swagger * github.com/go-testfixtures/testfixtures/v3 * github.com/golang-jwt/jwt/v4 * github.com/klauspost/compress * github.com/lib/pq * gitea.com/lunny/dingtalk_webhook - instead of github.com * github.com/mattn/go-sqlite3 * github/matn/go-isatty * github.com/minio/minio-go/v7 * github.com/niklasfasching/go-org * github.com/prometheus/client_golang * github.com/stretchr/testify * github.com/unrolled/render * github.com/xanzy/go-gitlab * gopkg.in/ini.v1 Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-09-02 02:43:17 +05:30
github.com/Masterminds/goutils v1.1.1 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/Masterminds/semver/v3 v3.2.1 // indirect
Update go.mod dependencies (#23126) This PR does a bulk update of a lot of our go deps. I have not included nektos/act and xorm for the following reasons: * Xorm updates can sometimes be complex and I'd rather do that in a separate PR * I think people more update with the actions code should double check that the latest nektos/act library works correctly. --------- Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2023-02-25 01:48:49 +05:30
github.com/Masterminds/sprig/v3 v3.2.3 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/Microsoft/go-winio v0.6.1 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/RoaringBitmap/roaring v1.7.0 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/andybalholm/brotli v1.1.0 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/andybalholm/cascadia v1.3.2 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/aymerick/douceur v0.2.0 // indirect
github.com/beorn7/perks v1.0.1 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/bits-and-blooms/bitset v1.13.0 // indirect
github.com/blevesearch/bleve_index_api v1.1.5 // indirect
github.com/blevesearch/geo v0.1.19 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/blevesearch/go-porterstemmer v1.0.3 // indirect
Update go deps (#19665) * update gitea.com/go-chi/binding * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/duo-labs/webauthn * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/emirpasic/gods * update github.com/gliderlabs/ssh * update github.com/go-chi/cors * update github.com/go-enry/go-enry/v2 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/golang-jwt/jwt/v4 * update github.com/google/pprof * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/minio/minio-go/v7 * update github.com/olivere/elastic/v7 * update github.com/unrolled/render * update github.com/urfave/cli * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * adopt breaking changes of certmagic
2022-05-10 16:02:42 +05:30
github.com/blevesearch/gtreap v0.1.1 // indirect
Update Golang deps (#21304)
2022-10-01 19:19:30 +05:30
github.com/blevesearch/mmap-go v1.0.4 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/blevesearch/scorch_segment_api/v2 v2.2.6 // indirect
Update golang deps (#22410) Note, hashicorp's LRU has been updated to v2 which supports generics but this was left out as it is a more involved upgrade.
2023-01-12 13:51:16 +05:30
github.com/blevesearch/segment v0.9.1 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/blevesearch/snowballstem v0.9.0 // indirect
Update golang deps (#22410) Note, hashicorp's LRU has been updated to v2 which supports generics but this was left out as it is a more involved upgrade.
2023-01-12 13:51:16 +05:30
github.com/blevesearch/upsidedown_store_api v1.0.2 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/blevesearch/vellum v1.0.10 // indirect
bump bleve (#27300) Co-authored-by: yp05327 <576951401@qq.com> Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-09-27 12:40:58 +05:30
github.com/blevesearch/zapx/v11 v11.3.10 // indirect
github.com/blevesearch/zapx/v12 v12.3.10 // indirect
github.com/blevesearch/zapx/v13 v13.3.10 // indirect
github.com/blevesearch/zapx/v14 v14.3.10 // indirect
github.com/blevesearch/zapx/v15 v15.3.13 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/boombuler/barcode v1.0.1 // indirect
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/bradfitz/gomemcache v0.0.0-20230905024940-24af94b03874 // indirect
Add support for incoming emails (#22056) closes #13585 fixes #9067 fixes #2386 ref #6226 ref #6219 fixes #745 This PR adds support to process incoming emails to perform actions. Currently I added handling of replies and unsubscribing from issues/pulls. In contrast to #13585 the IMAP IDLE command is used instead of polling which results (in my opinion 😉) in cleaner code. Procedure: - When sending an issue/pull reply email, a token is generated which is present in the Reply-To and References header. - IMAP IDLE waits until a new email arrives - The token tells which action should be performed A possible signature and/or reply gets stripped from the content. I added a new service to the drone pipeline to test the receiving of incoming mails. If we keep this in, we may test our outgoing emails too in future. Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
2023-01-14 21:27:10 +05:30
github.com/cention-sany/utf7 v0.0.0-20170124080048-26cad61bd60a // indirect
Update go.mod dependencies (#23126) This PR does a bulk update of a lot of our go deps. I have not included nektos/act and xorm for the following reasons: * Xorm updates can sometimes be complex and I'd rather do that in a separate PR * I think people more update with the actions code should double check that the latest nektos/act library works correctly. --------- Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2023-02-25 01:48:49 +05:30
github.com/cespare/xxhash/v2 v2.2.0 // indirect
Update github.com/cloudflare/circl (#28789) cloudflare/circl: https://github.com/advisories/GHSA-9763-4f94-gfch Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-15 08:44:26 +05:30
github.com/cloudflare/circl v1.3.7 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/couchbase/go-couchbase v0.1.1 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/couchbase/gomemcached v0.3.0 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/couchbase/goutils v0.1.2 // indirect
Update module github.com/urfave/cli/v2 to v2.27.2
2024-04-28 05:35:53 +05:30
github.com/cpuguy83/go-md2man/v2 v2.0.4 // indirect
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/cyphar/filepath-securejoin v0.2.4 // indirect
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/davidmz/go-pageant v1.0.2 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
Update Chroma to v2.13.0 (#29732) This adds new lexers and includes some fixes. See https://github.com/alecthomas/chroma/releases/tag/v2.13.0 for the full changelog. --------- Co-authored-by: Giteabot <teabot@gitea.io> (cherry picked from commit 3e7ae79f99ef0e5ba3d1201c38f491121ea2a156)
2024-03-13 03:10:43 +05:30
github.com/dlclark/regexp2 v1.11.0 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/emersion/go-sasl v0.0.0-20231106173351-e73c9f7bad43 // indirect
github.com/fatih/color v1.16.0 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
github.com/fxamacker/cbor/v2 v2.5.0 // indirect
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/go-ap/errors v0.0.0-20231003111023-183eef4b31b7 // indirect
github.com/go-asn1-ber/asn1-ber v1.5.5 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/go-enry/go-oniguruma v1.2.1 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/go-faster/city v1.0.1 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/go-faster/errors v0.7.1 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/go-openapi/analysis v0.22.2 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/go-openapi/errors v0.21.0 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/go-openapi/inflect v0.19.0 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/go-openapi/jsonpointer v0.20.2 // indirect
github.com/go-openapi/jsonreference v0.20.4 // indirect
github.com/go-openapi/loads v0.21.5 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/go-openapi/runtime v0.26.2 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/go-openapi/spec v0.20.14 // indirect
github.com/go-openapi/strfmt v0.22.0 // indirect
github.com/go-openapi/swag v0.22.7 // indirect
github.com/go-openapi/validate v0.22.6 // indirect
github.com/go-webauthn/x v0.1.6 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/goccy/go-json v0.10.2 // indirect
Bump github.com/golang-jwt/jwt to v5 (#25975) Bumping `github.com/golang-jwt/jwt` from v4 to v5. `github.com/golang-jwt/jwt` v5 is bringing some breaking changes: - standard `Valid()` method on claims is removed. It's replaced by `ClaimsValidator` interface implementing `Validator()` method instead, which is called after standard validation. Gitea doesn't seem to be using this logic. - `jwt.Token` has a field `Valid`, so it's checked in `ParseToken` function in `services/auth/source/oauth2/token.go` --------- Co-authored-by: Giteabot <teabot@gitea.io>
2023-07-19 15:27:10 +05:30
github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/golang/geo v0.0.0-20230421003525-6adc56603217 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/golang/protobuf v1.5.3 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/golang/snappy v0.0.4 // indirect
github.com/google/go-querystring v1.1.0 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/google/go-tpm v0.9.0 // indirect
[GITEA] Vendor rupture dependency - The [rupture](https://github.com/ethantkoenig/rupture) dependency was essentially outdated in the sense it was using old version of dependencies. - The usage by Forgejo was rather a small portion, so that portion is now vendored (with its tests). - Removes old dependencies from go.sum (less dependencies is better for reviewing what the heck we're importing). Just to note that they were likely not being used by Go's build process (according to https://go.dev/ref/mod#minimal-version-selection), so it's really a matter of formal cleaning up dependencies we don't use and therefor don't want to download and be in our go.sum. (cherry picked from commit aa72a5f009b5027b2324106343f91b466ba46293) Conflicts: go.sum https://codeberg.org/forgejo/forgejo/pulls/2148 (cherry picked from commit fbe8d65f0b1836b2e771991b4d5d12f1bfa938ed) (cherry picked from commit e18debcb6a9476f60d364e847265b4ac7fb76c8e) Conflicts: go.sum https://codeberg.org/forgejo/forgejo/pulls/2245 (cherry picked from commit 8c43c2ada82102a0df44fd874c4f5fe3a36ef758)
2024-01-08 20:23:32 +05:30
github.com/gopherjs/gopherjs v0.0.0-20190910122728-9d188e94fb99 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/gorilla/css v1.0.1 // indirect
github.com/gorilla/handlers v1.5.2 // indirect
github.com/gorilla/mux v1.8.1 // indirect
github.com/gorilla/securecookie v1.1.2 // indirect
Remove external API calls in `TestPassword` (#30716) The test had a dependency on `https://api.pwnedpasswords.com` which caused many failures on CI recently: ``` --- FAIL: TestPassword (2.37s) pwn_test.go:41: Get "https://api.pwnedpasswords.com/range/e6b6a": context deadline exceeded (Client.Timeout exceeded while awaiting headers) FAIL coverage: 82.9% of statements ``` (cherry picked from commit 9235442ba58524c8d12ae54865d583acfa1f439d)
2024-05-02 20:13:23 +05:30
github.com/h2non/parth v0.0.0-20190131123155-b4df798d6542 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/hashicorp/go-retryablehttp v0.7.5 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/hashicorp/hcl v1.0.0 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/imdario/mergo v0.3.16 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
github.com/jessevdk/go-flags v1.5.0 // indirect
github.com/josharian/intern v1.0.0 // indirect
go.mod: update kevinburke/ssh_config to v1.2.0 (#19286) Previously if you tried to read a HostName in a config file that looked like this: ``` Host github HostName github.com # This is the host for code review ``` DefaultUserSettings.Get("HostName") would return "github.com ", which I think is unintuitive and unexpected. This behavior is fixed in v1.2 which would return "github.com" in the above example.
2022-04-01 03:35:57 +05:30
github.com/kevinburke/ssh_config v1.2.0 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/klauspost/pgzip v1.2.6 // indirect
Update go.mod dependencies (#23126) This PR does a bulk update of a lot of our go deps. I have not included nektos/act and xorm for the following reasons: * Xorm updates can sometimes be complex and I'd rather do that in a separate PR * I think people more update with the actions code should double check that the latest nektos/act library works correctly. --------- Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>
2023-02-25 01:48:49 +05:30
github.com/kr/pretty v0.3.1 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/kr/text v0.2.0 // indirect
github.com/libdns/libdns v0.2.1 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/magiconair/properties v1.8.7 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/mailru/easyjson v0.7.7 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/markbates/going v1.0.3 // indirect
Implement actions (#21937) Close #13539. Co-authored by: @lunny @appleboy @fuxiaohei and others. Related projects: - https://gitea.com/gitea/actions-proto-def - https://gitea.com/gitea/actions-proto-go - https://gitea.com/gitea/act - https://gitea.com/gitea/act_runner ### Summary The target of this PR is to bring a basic implementation of "Actions", an internal CI/CD system of Gitea. That means even though it has been merged, the state of the feature is **EXPERIMENTAL**, and please note that: - It is disabled by default; - It shouldn't be used in a production environment currently; - It shouldn't be used in a public Gitea instance currently; - Breaking changes may be made before it's stable. **Please comment on #13539 if you have any different product design ideas**, all decisions reached there will be adopted here. But in this PR, we don't talk about **naming, feature-creep or alternatives**. ### ⚠️ Breaking `gitea-actions` will become a reserved user name. If a user with the name already exists in the database, it is recommended to rename it. ### Some important reviews - What is `DEFAULT_ACTIONS_URL` in `app.ini` for? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1055954954 - Why the api for runners is not under the normal `/api/v1` prefix? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1061173592 - Why DBFS? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1061301178 - Why ignore events triggered by `gitea-actions` bot? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1063254103 - Why there's no permission control for actions? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1090229868 ### What it looks like <details> #### Manage runners <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205870657-c72f590e-2e08-4cd4-be7f-2e0abb299bbf.png"> #### List runs <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205872794-50fde990-2b45-48c1-a178-908e4ec5b627.png"> #### View logs <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205872501-9b7b9000-9542-4991-8f55-18ccdada77c3.png"> </details> ### How to try it <details> #### 1. Start Gitea Clone this branch and [install from source](https://docs.gitea.io/en-us/install-from-source). Add additional configurations in `app.ini` to enable Actions: ```ini [actions] ENABLED = true ``` Start it. If all is well, you'll see the management page of runners: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205877365-8e30a780-9b10-4154-b3e8-ee6c3cb35a59.png"> #### 2. Start runner Clone the [act_runner](https://gitea.com/gitea/act_runner), and follow the [README](https://gitea.com/gitea/act_runner/src/branch/main/README.md) to start it. If all is well, you'll see a new runner has been added: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205878000-216f5937-e696-470d-b66c-8473987d91c3.png"> #### 3. Enable actions for a repo Create a new repo or open an existing one, check the `Actions` checkbox in settings and submit. <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205879705-53e09208-73c0-4b3e-a123-2dcf9aba4b9c.png"> <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205879383-23f3d08f-1a85-41dd-a8b3-54e2ee6453e8.png"> If all is well, you'll see a new tab "Actions": <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205881648-a8072d8c-5803-4d76-b8a8-9b2fb49516c1.png"> #### 4. Upload workflow files Upload some workflow files to `.gitea/workflows/xxx.yaml`, you can follow the [quickstart](https://docs.github.com/en/actions/quickstart) of GitHub Actions. Yes, Gitea Actions is compatible with GitHub Actions in most cases, you can use the same demo: ```yaml name: GitHub Actions Demo run-name: ${{ github.actor }} is testing out GitHub Actions 🚀 on: [push] jobs: Explore-GitHub-Actions: runs-on: ubuntu-latest steps: - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event." - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!" - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}." - name: Check out repository code uses: actions/checkout@v3 - run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner." - run: echo "🖥️ The workflow is now ready to test your code on the runner." - name: List files in the repository run: | ls ${{ github.workspace }} - run: echo "🍏 This job's status is ${{ job.status }}." ``` If all is well, you'll see a new run in `Actions` tab: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205884473-79a874bc-171b-4aaf-acd5-0241a45c3b53.png"> #### 5. Check the logs of jobs Click a run and you'll see the logs: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205884800-994b0374-67f7-48ff-be9a-4c53f3141547.png"> #### 6. Go on You can try more examples in [the documents](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions) of GitHub Actions, then you might find a lot of bugs. Come on, PRs are welcome. </details> See also: [Feature Preview: Gitea Actions](https://blog.gitea.io/2022/12/feature-preview-gitea-actions/) --------- Co-authored-by: a1012112796 <1012112796@qq.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: delvh <dev.lh@web.de> Co-authored-by: ChristopherHX <christopher.homberger@web.de> Co-authored-by: John Olheiser <john.olheiser@gmail.com>
2023-01-31 07:15:19 +05:30
github.com/mattn/go-colorable v0.1.13 // indirect
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
github.com/mattn/go-runewidth v0.0.15 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/mholt/acmez v1.2.0 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/miekg/dns v1.1.58 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/minio/md5-simd v1.1.2 // indirect
Update a few go dependencies (#21022) There are a lot of go dependencies that appear old and we should update them. The following packages have been updated: * codeberg.org/gusted/mcaptcha * github.com/markbates/goth * github.com/buildkite/terminal-to-html * github.com/caddyserver/certmagic * github.com/denisenkom/go-mssqldb * github.com/duo-labs/webauthn * github.com/editorconfig/editorconfig-core-go/v2 * github.com/felixge/fgprof * github.com/gliderlabs/ssh * github.com/go-ap/activitypub * github.com/go-git/go-git/v5 * github.com/go-ldap/ldap/v3 * github.com/go-swagger/go-swagger * github.com/go-testfixtures/testfixtures/v3 * github.com/golang-jwt/jwt/v4 * github.com/klauspost/compress * github.com/lib/pq * gitea.com/lunny/dingtalk_webhook - instead of github.com * github.com/mattn/go-sqlite3 * github/matn/go-isatty * github.com/minio/minio-go/v7 * github.com/niklasfasching/go-org * github.com/prometheus/client_golang * github.com/stretchr/testify * github.com/unrolled/render * github.com/xanzy/go-gitlab * gopkg.in/ini.v1 Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-09-02 02:43:17 +05:30
github.com/mitchellh/copystructure v1.2.0 // indirect
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
github.com/mrjones/oauth v0.0.0-20190623134757-126b35219450 // indirect
github.com/mschoch/smat v0.2.0 // indirect
github.com/nwaples/rardecode v1.1.3 // indirect
github.com/oklog/ulid v1.3.1 // indirect
github.com/olekukonko/tablewriter v0.0.5 // indirect
Update redis library to support redis v7 (#24114)
2023-04-14 04:11:04 +05:30
github.com/onsi/ginkgo v1.16.5 // indirect
Partially enable MSSQL case-sensitive collation support (#29238) Follow #28662 (cherry picked from commit 29a8c8de779924694fadad80b31cc855dd62c0f2)
2024-03-08 08:49:35 +05:30
github.com/paulmach/orb v0.11.1 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/pelletier/go-toml/v2 v2.1.1 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/pierrec/lz4/v4 v4.1.21 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/pjbgf/sha1cd v0.3.0 // indirect
[GITEA] Use existing error functionality - There's no need to use `github.com/pkg/errors` when the standard library already has the functionality to wrap and create errors. (cherry picked from commit 40f603a538036ce7e150adf404374d794eb46993) (cherry picked from commit aa68a2753f204dfe44a037ccc91dacc2a0a53803) (cherry picked from commit 48e252d73961ae17b56544bae79bc812dac10c44) (cherry picked from commit cc6f40ccd208a6fd1527ba08e3123e9b01b218ab) (cherry picked from commit 03c4b9735824bfaed19df14550ef458d52667b40) (cherry picked from commit f25eeb76958b78fbe00fc6556aec8a37aba0ecdf) (cherry picked from commit 989d8fa1cb81e0ff017ac575fdd1cf12507eb42b) (cherry picked from commit 10e890ed8e7205c140677ff74db393fc0052da14) (cherry picked from commit 581519389d3a35e775f7d3fdc15c251a3e0828b6) (cherry picked from commit 03d00b11ac4880fd897631180c40bc1dedf5d7e5) (cherry picked from commit 04e6c853d48b0dab767046c968717f3982304c40) Conflicts: go.mod https://codeberg.org/forgejo/forgejo/pulls/2249 (cherry picked from commit 2c4c29f7bc20e31321c4932998692dd1ef73aa14)
2023-11-05 02:39:19 +05:30
github.com/pkg/errors v0.9.1 // indirect
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
github.com/prometheus/client_model v0.5.0 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
github.com/prometheus/common v0.46.0 // indirect
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/prometheus/procfs v0.12.0 // indirect
Update module gitea.com/gitea/act to v0.261.1
2024-04-27 07:34:59 +05:30
github.com/rhysd/actionlint v1.6.27 // indirect
github.com/rivo/uniseg v0.4.7 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/rogpeppe/go-internal v1.12.0 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/rs/xid v1.5.0 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/russross/blackfriday/v2 v2.1.0 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/sagikazarmark/locafero v0.4.0 // indirect
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/sagikazarmark/slog-shim v0.1.0 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
github.com/segmentio/asm v1.2.0 // indirect
github.com/shopspring/decimal v1.3.1 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c // indirect
github.com/sirupsen/logrus v1.9.3 // indirect
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
github.com/skeema/knownhosts v1.2.1 // indirect
Upgrade go dependencies (#27599) Upgrade all dependencies in `go.mod` `golang.org/x/net` v0.17.0 also fixes [CVE-2023-39325](https://github.com/advisories/GHSA-4374-p667-p6c8) --------- Co-authored-by: delvh <dev.lh@web.de>
2023-10-13 21:41:15 +05:30
github.com/sourcegraph/conc v0.3.0 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/spf13/afero v1.11.0 // indirect
github.com/spf13/cast v1.6.0 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/spf13/pflag v1.0.5 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/spf13/viper v1.18.2 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/ssor/bom v0.0.0-20170718123548-6386211fdfcf // indirect
Update go dependencies (#26534)
2023-08-16 17:32:40 +05:30
github.com/subosito/gotenv v1.6.0 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/toqueteos/webbrowser v1.2.0 // indirect
Remove legacy `unknwon/com` package (#19298) Follows: #19284 * The `CopyDir` is only used inside test code * Rewrite `ToSnakeCase` with more test cases * The `RedisCacher` only put strings into cache, here we use internal `toStr` to replace the legacy `ToStr` * The `UniqueQueue` can use string as ID directly, no need to call `ToStr`
2022-04-01 22:04:57 +05:30
github.com/unknwon/com v1.0.1 // indirect
Add meilisearch support (#23136) Add meilisearch support Fixes #20665
2023-03-29 07:53:23 +05:30
github.com/valyala/bytebufferpool v1.0.0 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
github.com/valyala/fasthttp v1.51.0 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/x448/float16 v0.8.4 // indirect
Update golang deps (#22410) Note, hashicorp's LRU has been updated to v2 which supports generics but this was left out as it is a more involved upgrade.
2023-01-12 13:51:16 +05:30
github.com/xanzy/ssh-agent v0.3.3 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
Update module github.com/urfave/cli/v2 to v2.27.2
2024-04-28 05:35:53 +05:30
github.com/xrash/smetrics v0.0.0-20240312152122-5f08fbb34913 // indirect
Upgrade go dependencies (#25819)
2023-07-14 08:30:31 +05:30
github.com/zeebo/blake3 v0.2.3 // indirect
Update module gitea.com/gitea/act to v0.261.1
2024-04-27 07:34:59 +05:30
go.etcd.io/bbolt v1.3.9 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
go.mongodb.org/mongo-driver v1.13.1 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
go.opentelemetry.io/otel v1.22.0 // indirect
go.opentelemetry.io/otel/trace v1.22.0 // indirect
Bump golang deps (#24533)
2023-05-05 14:47:19 +05:30
go.uber.org/atomic v1.11.0 // indirect
go.uber.org/multierr v1.11.0 // indirect
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
go.uber.org/zap v1.26.0 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
golang.org/x/exp v0.0.0-20240119083558-1b970713d09a // indirect
Update module github.com/editorconfig/editorconfig-core-go/v2 to v2.6.2
2024-04-03 09:38:11 +05:30
golang.org/x/mod v0.16.0 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
golang.org/x/sync v0.6.0 // indirect
Update go dependencies (#28518) Update golang.org/x/crypto for CVE-2023-48795 and update other packages. `go-git` is not updated because it needs time to figure out why some tests fail.
2023-12-19 06:48:42 +05:30
golang.org/x/time v0.5.0 // indirect
bump go-deps (#27489)
2023-10-07 11:25:08 +05:30
google.golang.org/appengine v1.6.8 // indirect
Update go dependencies and fix go-git (#28893) More details are in the comment of repo_base_gogit.go And ref: https://github.com/go-git/go-git/issues/1006
2024-01-23 11:10:00 +05:30
google.golang.org/genproto/googleapis/rpc v0.0.0-20240116215550-a9fa1716bcac // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
gopkg.in/warnings.v0 v0.1.2 // indirect
Replace yaml.v2 with yaml.v3 (#21832) I don't see why we have to use two versions of yaml. The difference between the two versions has nothing to do with our usage.
2022-11-21 14:06:59 +05:30
gopkg.in/yaml.v2 v2.4.0 // indirect
use go1.18 to build gitea (#19099) * use go1.18 to build gitea& update min go version to 1.17 * bump in a few more places * add a few simple tests for isipprivate * update go.mod * update URL to https://go.dev/dl/ * golangci-lint * attempt golangci-lint workaround * change version * bump fumpt version * skip strings.title test * go mod tidy * update tests as some aren't private?? * update tests
2022-03-16 09:38:31 +05:30
)
[Vendor] Update directly used dependencys (#15593) * update github.com/blevesearch/bleve v2.0.2 -> v2.0.3 * github.com/denisenkom/go-mssqldb v0.9.0 -> v0.10.0 * github.com/editorconfig/editorconfig-core-go v2.4.1 -> v2.4.2 * github.com/go-chi/cors v1.1.1 -> v1.2.0 * github.com/go-git/go-billy v5.0.0 -> v5.1.0 * github.com/go-git/go-git v5.2.0 -> v5.3.0 * github.com/go-ldap/ldap v3.2.4 -> v3.3.0 * github.com/go-redis/redis v8.6.0 -> v8.8.2 * github.com/go-sql-driver/mysql v1.5.0 -> v1.6.0 * github.com/go-swagger/go-swagger v0.26.1 -> v0.27.0 * github.com/lib/pq v1.9.0 -> v1.10.1 * github.com/mattn/go-sqlite3 v1.14.6 -> v1.14.7 * github.com/go-testfixtures/testfixtures v3.5.0 -> v3.6.0 * github.com/issue9/identicon v1.0.1 -> v1.2.0 * github.com/klauspost/compress v1.11.8 -> v1.12.1 * github.com/mgechev/revive v1.0.3 -> v1.0.6 * github.com/microcosm-cc/bluemonday v1.0.7 -> v1.0.8 * github.com/niklasfasching/go-org v1.4.0 -> v1.5.0 * github.com/olivere/elastic v7.0.22 -> v7.0.24 * github.com/pelletier/go-toml v1.8.1 -> v1.9.0 * github.com/prometheus/client_golang v1.9.0 -> v1.10.0 * github.com/xanzy/go-gitlab v0.44.0 -> v0.48.0 * github.com/yuin/goldmark v1.3.3 -> v1.3.5 * github.com/6543/go-version v1.2.4 -> v1.3.1 * do github.com/lib/pq v1.10.0 -> v1.10.1 again ...
2021-04-23 05:38:53 +05:30
replace github.com/hashicorp/go-version => github.com/6543/go-version v1.3.1
Upgrade to golang-jwt 3.2.2 (#16590) * Upgrade to golang-jwt 3.2.2 Upgrade to the latest version of golang-jwt Signed-off-by: Andrew Thornton <art27@cantab.net> * Forcibly replace the 3.2.1 version of golang-jwt/jwt and increase minimum Go version Using go.mod we can forcibly replace the 3.2.1 version used by goth to 3.2.2. Further given golang-jwt/jwts stated policy of only supporting supported go versions we should just raise our minimal version of go to 1.16 for 1.16 as by time of release 1.15 will be out of support. Signed-off-by: Andrew Thornton <art27@cantab.net> * update minimal go required Signed-off-by: Andrew Thornton <art27@cantab.net> * update config.yaml Signed-off-by: Andrew Thornton <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de>
2021-08-04 00:02:01 +05:30
Don't store assets modified time into generated files (#18193)
2022-01-07 08:03:17 +05:30
replace github.com/shurcooL/vfsgen => github.com/lunny/vfsgen v0.0.0-20220105142115-2c99e1ffdfa0
Support webauthn (#17957) Migrate from U2F to Webauthn Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: 6543 <6543@obermui.de> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2022-01-14 20:33:31 +05:30
Update module gitea.com/gitea/act to v0.261.1
2024-04-27 07:34:59 +05:30
replace github.com/nektos/act => gitea.com/gitea/act v0.261.1
Implement actions (#21937) Close #13539. Co-authored by: @lunny @appleboy @fuxiaohei and others. Related projects: - https://gitea.com/gitea/actions-proto-def - https://gitea.com/gitea/actions-proto-go - https://gitea.com/gitea/act - https://gitea.com/gitea/act_runner ### Summary The target of this PR is to bring a basic implementation of "Actions", an internal CI/CD system of Gitea. That means even though it has been merged, the state of the feature is **EXPERIMENTAL**, and please note that: - It is disabled by default; - It shouldn't be used in a production environment currently; - It shouldn't be used in a public Gitea instance currently; - Breaking changes may be made before it's stable. **Please comment on #13539 if you have any different product design ideas**, all decisions reached there will be adopted here. But in this PR, we don't talk about **naming, feature-creep or alternatives**. ### ⚠️ Breaking `gitea-actions` will become a reserved user name. If a user with the name already exists in the database, it is recommended to rename it. ### Some important reviews - What is `DEFAULT_ACTIONS_URL` in `app.ini` for? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1055954954 - Why the api for runners is not under the normal `/api/v1` prefix? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1061173592 - Why DBFS? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1061301178 - Why ignore events triggered by `gitea-actions` bot? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1063254103 - Why there's no permission control for actions? - https://github.com/go-gitea/gitea/pull/21937#discussion_r1090229868 ### What it looks like <details> #### Manage runners <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205870657-c72f590e-2e08-4cd4-be7f-2e0abb299bbf.png"> #### List runs <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205872794-50fde990-2b45-48c1-a178-908e4ec5b627.png"> #### View logs <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205872501-9b7b9000-9542-4991-8f55-18ccdada77c3.png"> </details> ### How to try it <details> #### 1. Start Gitea Clone this branch and [install from source](https://docs.gitea.io/en-us/install-from-source). Add additional configurations in `app.ini` to enable Actions: ```ini [actions] ENABLED = true ``` Start it. If all is well, you'll see the management page of runners: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205877365-8e30a780-9b10-4154-b3e8-ee6c3cb35a59.png"> #### 2. Start runner Clone the [act_runner](https://gitea.com/gitea/act_runner), and follow the [README](https://gitea.com/gitea/act_runner/src/branch/main/README.md) to start it. If all is well, you'll see a new runner has been added: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205878000-216f5937-e696-470d-b66c-8473987d91c3.png"> #### 3. Enable actions for a repo Create a new repo or open an existing one, check the `Actions` checkbox in settings and submit. <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205879705-53e09208-73c0-4b3e-a123-2dcf9aba4b9c.png"> <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205879383-23f3d08f-1a85-41dd-a8b3-54e2ee6453e8.png"> If all is well, you'll see a new tab "Actions": <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205881648-a8072d8c-5803-4d76-b8a8-9b2fb49516c1.png"> #### 4. Upload workflow files Upload some workflow files to `.gitea/workflows/xxx.yaml`, you can follow the [quickstart](https://docs.github.com/en/actions/quickstart) of GitHub Actions. Yes, Gitea Actions is compatible with GitHub Actions in most cases, you can use the same demo: ```yaml name: GitHub Actions Demo run-name: ${{ github.actor }} is testing out GitHub Actions 🚀 on: [push] jobs: Explore-GitHub-Actions: runs-on: ubuntu-latest steps: - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event." - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!" - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}." - name: Check out repository code uses: actions/checkout@v3 - run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner." - run: echo "🖥️ The workflow is now ready to test your code on the runner." - name: List files in the repository run: | ls ${{ github.workspace }} - run: echo "🍏 This job's status is ${{ job.status }}." ``` If all is well, you'll see a new run in `Actions` tab: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205884473-79a874bc-171b-4aaf-acd5-0241a45c3b53.png"> #### 5. Check the logs of jobs Click a run and you'll see the logs: <img width="1792" alt="image" src="https://user-images.githubusercontent.com/9418365/205884800-994b0374-67f7-48ff-be9a-4c53f3141547.png"> #### 6. Go on You can try more examples in [the documents](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions) of GitHub Actions, then you might find a lot of bugs. Come on, PRs are welcome. </details> See also: [Feature Preview: Gitea Actions](https://blog.gitea.io/2022/12/feature-preview-gitea-actions/) --------- Co-authored-by: a1012112796 <1012112796@qq.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: delvh <dev.lh@web.de> Co-authored-by: ChristopherHX <christopher.homberger@web.de> Co-authored-by: John Olheiser <john.olheiser@gmail.com>
2023-01-31 07:15:19 +05:30
Set the `isPermaLink` attribute to `false` in the `guid` sub-element (#28860) Our `guid` is not a valid URL so according to the RSS spec the `isPermaLink` attribute needs to be set to `false`. Example: ```diff <item> <title>yardenshoham opened issue &lt;a href=&#34;https://3000-yardenshoham-gitea-jqlxjixsez9.ws-us107.gitpod.io/yardenshoham/test/issues/2&#34;&gt;yardenshoham/test#2&lt;/a&gt;</title> <link>https://3000-yardenshoham-gitea-jqlxjixsez9.ws-us107.gitpod.io/yardenshoham/test/issues/2</link> <description>2#hey</description> <content:encoded><![CDATA[2#hey]]></content:encoded> <author>yardenshoham</author> - <guid>355: https://3000-yardenshoham-gitea-jqlxjixsez9.ws-us107.gitpod.io/yardenshoham/test/issues/2</guid> + <guid isPermaLink="false">355: https://3000-yardenshoham-gitea-jqlxjixsez9.ws-us107.gitpod.io/yardenshoham/test/issues/2</guid> <pubDate>Tue, 16 Jan 2024 18:54:36 +0000</pubDate> </item> ``` References: - https://www.rssboard.org/rss-specification#ltguidgtSubelementOfLtitemgt - Fixes https://github.com/go-gitea/gitea/issues/28734 - https://github.com/gorilla/feeds/issues/78 - https://github.com/go-gitea/gitea/pull/21550 - https://github.com/gorilla/feeds/pull/107 Signed-off-by: Yarden Shoham <git@yardenshoham.com>
2024-01-20 08:08:16 +05:30
replace github.com/gorilla/feeds => github.com/yardenshoham/feeds v0.0.0-20240110072658-f3d0c21c0bd5
replace satori/go.uuid with gofrs/uuid (#18311) Signed-off-by: Andrew Thornton <art27@cantab.net>
2022-01-18 16:34:24 +05:30
exclude github.com/gofrs/uuid v3.2.0+incompatible
exclude github.com/gofrs/uuid v4.0.0+incompatible
exclude github.com/goccy/go-json v0.4.11
Remove satori/go.uuid (#22375) `github.com/satori/go.uuid` is no longer used, so the `replace` is not needed now
2023-01-09 11:30:10 +05:30
exclude github.com/satori/go.uuid v1.2.0
Copy permalink