v0.14.1
0.14.1
Added
- Support comparing tags in addition to branches
- Show file name in browser tab title when viewing files
- Support using TLS for Redis session provider using [session] PROVIDER_CONFIG = ...,tls=true
- Support expanding values in app.ini from environment variables, e.g. [database] PASSWORD = ${DATABASE_PASSWORD}
- Support custom logout URL that users get redirected to after sign out using [auth] CUSTOM_LOGOUT_URL
- Start publishing next-generation, security-focused Docker image via gogs/gogs:next-latest
Changed
- Required Go version to compile source code changed to 1.25
- Build tag cert has been removed, and the gogs cert subcommand is now always available
- Switched to pure-Go SQLite driver, CGO is no longer required to compile Gogs
- Updated Mermaid JS to 11.9.0
- Halt the repository creation and leave the directory untouched if the repository root already exists
Fixed
- 500 error on repository watchers and stargazers pages when using MSSQL
- Submodules using ssh:// protocol and a port number are not rendered correctly
- Missing link to user profile on the first commit in commits history page
- Unable to delete or display files with special characters in their names
- Docker healthcheck fails when HTTP_PROXY or HTTPS_PROXY environment variables are set
Security
- Fixed unauthenticated file upload
- Fixed protected branch bypass in web UI
- Fixed authorization bypass allows cross-repository label modification
- Fixed cross-repository comment deletion
ℹ️ Heads up! There is a new patch release 0.14.3 available, we recommend directly installing or upgrading to that version.
Added
- Support comparing tags in addition to branches. #6141
- Show file name in browser tab title when viewing files. #5896
- Support using TLS for Redis session provider using
[session] PROVIDER_CONFIG = ...,tls=true. #7860 - Support expanading values in
app.inifrom environment variables, e.g.[database] PASSWORD = ${DATABASE_PASSWORD}. #8057 - Support custom logout URL that users get redirected to after sign out using
[auth] CUSTOM_LOGOUT_URL. #8089 - Start publishing next-generation, security-focused Docker image via
gogs/gogs:next-latest, which will become the default image distribution (gogs/gogs:latest) starting 0.16.0. While not all container options support have been added in the next-generation image, the use of current legacy Docker image is deprecated, it will be published asgogs/gogs:legacy-lateststarting 0.16.0, and be completely removed no earlier than 0.17.0. #8061
Changed
- The required Go version to compile source code changed to 1.25.
- The build tag
certhas been removed, and thegogs certsubcommand is now always available. #7883 - Switched to pure-Go SQLite driver, CGO is no longer required to compile Gogs. #7882
- Updated Mermaid JS to 11.9.0. #8009
- Halt the repository creation and leave the directory untouched if the repository root already exists. #8091
Fixed
- Security: Unauthenticated file upload. #8128 - GHSA-fc3h-92p8-h36f
- Security: Protected branch bypass in web UI. #8124 - GHSA-2c6v-8r3v-gh6p
- Security: Authorization bypass allows cross-repository label modification. #8123 - GHSA-cv22-72px-f4gh
- Security: Cross-repository comment deletion. #8119 - GHSA-jj5m-h57j-5gv7
- 500 error on repository watchers and stargazers pages when using MSSQL. #5482
- Submodules using
ssh://protocol and a port number are not rendered correctly. #4941 - Missing link to user profile on the first commit in commits history page. #7404
- Unable to delete or display files with special characters in their names. #7596
- Docker healthcheck fails when
HTTP_PROXYorHTTPS_PROXYenvironment variables are set. #7529