1850 Commits

Author	SHA1	Message	Date
jmiller	23bb025700	merge: incorporate main into dev for release PR #714 ... Resolve CHANGELOG conflict — deduplicate feature entries. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 04:35:52 -05:00
jmiller	98301bc92b	merge: incorporate latest dev (post status-presets merge) into cascade-merge ... Resolve CHANGELOG conflict, restore issue_metadata.go from dev. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 03:51:37 -05:00
jmiller	5a25068d81	merge: incorporate dev changes into feature/cascade-merge ... Resolve CHANGELOG.md and api.go conflicts — keep both cascade_rules and security route groups. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 03:48:52 -05:00
jmiller	57894e25fd	merge: incorporate dev changes into feature/status-presets ... Resolve CHANGELOG.md conflict — keep both status presets and default teams entries. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 03:47:37 -05:00
jmiller	cf25eef480	fix: distinguish unknown preset from DB errors in ApplyIssueStatusPreset ... db.ErrNotExist returns 404, other errors return 500 instead of masking all errors as 404. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 03:34:07 -05:00
jmiller	84df5d7932	feat: register security scanning API routes in router ... Adds /repos/{owner}/{repo}/security/* route group for security alert management, scanning, and configuration endpoints. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:33:29 -05:00
jmiller	7b334f94c0	feat: security scanning API endpoints + pre-receive hook blocking (#692) ... Add REST API for security alerts (list, get, update status, trigger scan) and scanner config (get, update). Wire block_on_push into the pre-receive hook so pushes containing detected secrets are rejected with details. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:30:04 -05:00
jmiller	805c566615	fix: remove leaked security scanning routes from cascade-merge branch ... The security route group belongs to feature/secret-scanning (#692) and was accidentally committed here during parallel agent work. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:29:27 -05:00
jmiller	f53bc895ba	fix: prevent IDOR in CopyStatusesFromOrg endpoint ... Add source org visibility + membership check before copying statuses. Non-public source orgs now require the doer to be a member or site admin, preventing unauthorized enumeration of private org statuses. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:26:23 -05:00
bircni	cbf34fb987	fix: Various security fixes (#38103) (#38151) ... Backport #38103 - Enforce org visibility on organization label read endpoints (private org labels no longer leak to non-members). - Block fork sync (`merge-upstream`) when the base repo is no longer readable (stops pulling commits after a parent goes private). - Remove `REVERSE_PROXY_LIMIT` / `REVERSE_PROXY_TRUSTED_PROXIES` from the Docker `app.ini` templates (the `= *` default allowed `X-WEBAUTH-USER` impersonation; reverse-proxy auth is now opt-in and admin-configured). - Enforce single-use TOTP passcodes across web login, password-reset, and Basic-Auth `X-Gitea-OTP` (fixes a TOCTOU race and a stateless replay). - Re-check branch write permission for every ref in a push (the pre-receive hook cached the first ref's result, letting a per-branch maintainer-edit grant escalate to full repo write). --------- Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>	2026-06-28 02:22:18 -05:00
jmiller	f627219ca8	feat: cascade merge — auto-create PRs to downstream branches after merge (#460) ... Adds configurable cascade rules per repo. When a PR merges into a source branch, the system auto-creates PRs to each configured target branch. Skips if a matching PR already exists. - Model: CascadeMergeRule (repo_id, source, target, enabled, auto_merge) - Migration v362 creates cascade_merge_rule table - Notifier hooks into MergePullRequest/AutoMergePullRequest events - API: CRUD at /repos/{owner}/{repo}/cascade_rules (admin only) Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:06:42 -05:00
jmiller	df9305758f	feat: add issue status presets and cross-org migration (#507) ... 4 built-in presets: default, software-development, support-tickets, bug-tracking. API endpoints to list presets, apply to org, and copy statuses between orgs. Web UI dropdown on org settings page. Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-28 02:05:14 -05:00
jmiller	4178e7f23e	feat: add delete allowlist for branch protection rules (#696) ... Add configurable per-user/team/deploy-key allowlist for deleting protected branches. Previously, protected branches could never be deleted via git push. Now admins can configure deletion permissions with the same granularity as force-push allowlists. - 6 new model fields: CanDelete, EnableDeleteAllowlist, DeleteAllowlistUserIDs/TeamIDs, DeleteAllowlistDeployKeys, DeleteAllowlistActionsUser - CanUserDelete() method with admin-level default (higher than push) - Migration v361 adds columns to protected_branch table - Pre-receive hook checks delete allowlist instead of unconditional block - CanDeleteBranch service uses CanUserDelete instead of IsBranchProtected - API create/edit endpoints support delete allowlist fields - Web UI settings page with radio buttons and user/team dropdowns - 12 new locale strings for the delete allowlist UI Claude-Session: https://claude.ai/code/session_011AAFzotGMf3ayvXhEmStCd	2026-06-27 15:35:13 -05:00
Giteabot	9db67cd554	fix(actions): reject workflow_dispatch for workflows without that trigger (#37660) (#37895) ... Backport #37660 by @jorgeortiz85 ## Summary Fixes #37528 This PR makes the workflow dispatch API reject workflows that do not declare `workflow_dispatch`. Previously, `POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches` could create an `ActionRun` for a workflow that only declared another event such as `push`. The service now validates that the target workflow has a `workflow_dispatch` trigger before inserting the run. The API maps that validation failure to `422 Unprocessable Entity`, matching existing validation failures in this handler. The regression test creates a push-only workflow, dispatches it through the public API, asserts the `workflow_dispatch` validation message, and verifies that no run was inserted. ## Testing - `go test ./services/actions` - `TAGS="sqlite sqlite_unlock_notify" make test-integration#TestWorkflowDispatchPublicApiRequiresWorkflowDispatchTrigger` - `TAGS="sqlite sqlite_unlock_notify" make test-integration#TestWorkflowDispatchPublicApi` ## Disclosure Developed with assistance from OpenAI Codex. Co-authored-by: Jorge Ortiz <jorge.ortiz@gmail.com> Co-authored-by: Nicolas <bircni@icloud.com>	2026-06-26 21:40:12 -05:00
Giteabot	a063c3b2e4	fix(actions): ack re-sent UpdateLog finalize idempotently (#37885) (#37892) ... Backport #37885 by @silverwind Fixes https://github.com/go-gitea/gitea/issues/37871, full backwards and forwards compatible with runners. Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: Claude (Opus 4.7) <noreply@anthropic.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>	2026-06-26 21:40:01 -05:00
jmiller	f7c2b205c5	fix: reject empty token update requests with 400	2026-06-25 09:58:00 -05:00
jmiller	d2d7c0a762	feat: add ability to edit API token scopes (#697) ... Add PATCH /users/{username}/tokens/{id} API endpoint and web UI edit button so token scopes can be modified after creation without having to delete and recreate the token.	2026-06-25 09:57:59 -05:00
jmiller	49f6380fa4	feat: add licensing API token scope (#697) ... Add read:licensing / write:licensing token scope category so licensing endpoints are guarded by the same permission system as all other API endpoints. Public-only tokens are rejected for licensing endpoints.	2026-06-25 09:22:15 -05:00
Jonathan Miller	5c43cf1f02	fix(metadata): support partial updates — only sent fields are changed ... Previously PUT /metadata replaced all fields, wiping any not included in the request. Now loads existing metadata first and merges only the fields present in the JSON body.	2026-06-23 17:28:40 -05:00
Jonathan Miller	c8c74c7afe	fix: handle DB errors in licensing API, fix wiki API URL-decode fallback ... - licensing/manage.go: capture Update/Delete errors instead of silently discarding them (UpdateLicense, UpdateTier, DeleteTier) - wiki.go API: fix findEntryForFile to allow URL-decode fallback for non-ASCII page names (was returning on ErrNotExist instead of falling through)	2026-06-23 17:25:47 -05:00
Jonathan Miller	7b68963b67	feat(metadata): add deploy fields to repo metadata API (#692) ... - Migration v360: adds deploy_host, deploy_port, deploy_user, deploy_path, docker_image, docker_registry, container_name, health_url to repo_manifest - API: GET/PUT /metadata now includes deploy fields - Settings: preserve deploy fields on web UI save - Remove 4 unneeded workflows (gitleaks, npm-publish, notify, workflow-sync) - gitleaks will become built-in (#692) - npm-publish/notify not applicable to Go repo - workflow-sync moving to MokoCLI	2026-06-23 14:32:31 -05:00
Jonathan Miller	1178975be3	feat(wiki): full-text search across wiki pages (#550) ... - Web: WikiSearch handler with case-insensitive search of titles and content - Web: search.tmpl with search form and results display - Web: "Search wiki" link added to wiki dropdown menu - API: GET /wiki/search?q=term endpoint with pagination - Recursive traversal handles nested folder wikis	2026-06-23 12:05:48 -05:00
Jonathan Miller	78b0ce9650	fix: org metadata API respects visibility for unauthenticated requests (#690) ... Add checkOrgVisibility() guard to issue-statuses, issue-priorities, and issue-types endpoints. Public orgs remain accessible to everyone. Private/limited orgs return 404 for unauthenticated callers.	2026-06-21 18:17:00 -05:00
Jonathan Miller	71d52e432e	feat: enforce required baseline issue statuses (#681) ... Add IsRequired field to IssueStatusDef. Open and Closed statuses are seeded as required and cannot be deleted. Delete attempts return an error flash in the web UI and ErrStatusRequired in the model layer. API response now includes is_required field.	2026-06-21 11:29:49 -05:00
Jonathan Miller	9149fa100c	feat: make metadata/manifest GET endpoint publicly accessible (#676) ... Remove reqRepoReader auth requirement from GET /repos/{owner}/{repo}/metadata and /manifest endpoints. PUT (update) still requires token + admin.	2026-06-21 10:20:56 -05:00
Jonathan Miller	6d194f9bdf	fix: sort imports in manage.go (stdlib before module imports)	2026-06-20 23:03:44 -05:00
Jonathan Miller	403db405cb	fix: resolve all compile errors in licensing endpoints ... - ctx.BindJSON → json.NewDecoder(ctx.Req.Body).Decode - ctx.Orm() → db.GetEngine(ctx) - ctx.NotFound() → ctx.APIErrorNotFound() - GetAttachmentsByReleaseID → db.GetEngine query	2026-06-20 22:57:19 -05:00
Jonathan Miller	79cc30e9a8	fix: use ctx.APIError instead of ctx.Error in licensing endpoints ... APIContext doesn't have an Error method — use APIError(status, msg) which is the correct 2-arg pattern for Gitea API error responses.	2026-06-20 21:47:02 -05:00
Jonathan Miller	1d1b867df5	feat: add license management API — admin CRUD, user self-service, tier management (#624) ... Admin: POST/GET/PATCH/DELETE /api/v1/licensing/licenses (reqSiteAdmin) User: GET /api/v1/licensing/my/licenses, manage domains (reqToken) Tiers: GET/POST/PATCH/DELETE /api/v1/licensing/tiers (reqSiteAdmin) Includes pagination, entitlement/activation detail in GET, tier change triggers entitlement rebuild, delete-tier blocked if active licenses exist.	2026-06-20 20:04:15 -05:00
Jonathan Miller	5bd449017c	feat: add signed download endpoint with ed25519 tokens (#622) ... GET /api/v1/licensing/download/{product}/{version}.zip?token=XXX&expires=YYY&dlid=ZZZ ed25519 keypair auto-generated on first use, stored in Gitea data dir. Update XML endpoint now generates signed URLs with 5-minute TTL. Download verifies signature + expiry + DLID + entitlement before serving the release ZIP attachment. Downloads logged to audit trail.	2026-06-20 19:59:37 -05:00
Jonathan Miller	3e909df6d4	feat: add license validation API — public validate + authenticated status (#623) ... GET /api/v1/licensing/validate?dlid=XXX&product=YYY&domain=ZZZ (public) GET /api/v1/licensing/{dlid}/status (authenticated, reqToken) Public endpoint returns valid/invalid with reason codes for Joomla plugin and external integration use. Authenticated endpoint returns full license detail with entitlement list and domain usage for admin dashboards.	2026-06-20 19:51:50 -05:00
Jonathan Miller	6f6a8b0f2c	fix: remove invalid SortType field from FindReleasesOptions	2026-06-20 17:18:52 -05:00
Jonathan Miller	212b8c9e6d	feat: add DLID-gated update XML endpoint for Joomla updater (#621) ... GET /api/v1/licensing/updates/{product}.xml?dlid=XXX&domain=YYY Validates DLID format (CRC32), checks license status and entitlement, auto-activates domain, returns Joomla-compatible update XML from the entitled repo's stable release. Invalid/expired returns empty <updates/>.	2026-06-20 17:15:24 -05:00
Jonathan Miller	2b6684536e	feat: remove display_name, compute from extension_type + name (#650) ... - Remove DisplayName field from RepoMetadata and UpdateStreamConfig - Add DerivedDisplayName() method: "{Type} - {Name}" (e.g. "Package - MokoSuiteBackup") - API returns computed display_name in GET, ignores it on PUT - Update server feeds use DerivedDisplayName() instead of stored value - Remove display_name from web forms (repo licensing, org update streams) - License settings API computes display_name from repo metadata - Migration v358: drop display_name columns from both tables	2026-06-20 10:45:54 -05:00
Jonathan Miller	7ebe6d54be	refactor: rename PackageType → ExtensionType (#646) ... Rename package_type column and Go field to extension_type across model, API, update server, manifest sync, settings UI, and changelog. SQL migration renames the column. XML tag <package-type> in .mokogitea/manifest.xml is unchanged (backward compat). Fixes #646	2026-06-19 02:00:04 -05:00
Jonathan Miller	45caf41499	fix: rename custom fields handlers, clean metadata API naming	2026-06-19 01:14:11 -05:00
Jonathan Miller	1ec0a70c0c	fix: rename API handlers to avoid collision with custom_fields GetRepoMetadata	2026-06-18 21:08:29 -05:00
Jonathan Miller	3c9e3ffa13	fix: lowercase Joomla element names, rename Manifest → Metadata (#635) ... AutoElementName() was using m.Name without lowercasing or cleaning, producing elements like pkg_MokoSuiteBackup instead of pkg_mokosuitebackup. Added cleanJoomlaElement() to replicate Joomla's InputFilter::clean('cmd') behavior. Removed incorrect "plugin": "plg_" — Joomla plugins use bare names. Renamed RepoManifest → RepoMetadata across all non-migration Go files. DB table remains repo_manifest for backward compatibility. Migration files unchanged to preserve migration chain. API endpoints /manifest and /metadata both continue to work (backward compat route preserved in api.go). Fixes #635	2026-06-18 16:03:54 -05:00
Jonathan Miller	91e50fe4bf	fix: remove version from manifest first-class fields ... Version is not a required metadata field — it's derived from git tags and releases, not stored in the manifest. Remove from RepoManifest model and the manifest API request/response struct. VersionPrefix, StandardsVersion, and TargetVersion are kept as they serve different purposes (tag parsing, standards compliance, platform targeting).	2026-06-18 11:01:23 -05:00
jmiller	9d45a767e7	Merge pull request 'feat(issues): make status_id, priority_id, type_id required on create (#598)' (#613) from feature/598-required-issue-metadata into main	2026-06-12 02:59:37 +00:00
Jonathan Miller	e0d4f5fd15	fix: handle SetIssueStatusID/PriorityID/TypeID errors on create ... Explicit caller-provided values now return 500 on failure instead of silently discarding the error. Default auto-assignment still uses best-effort (log and continue) since it's a fallback.	2026-06-11 21:57:39 -05:00
Jonathan Miller	c67e7373fb	fix: move required custom field validation before issue creation ... Validation now runs before NewIssue() to prevent orphaned issues when a required field is missing. Reuses the defs query for both validation and saving.	2026-06-11 21:56:14 -05:00
Jonathan Miller	cbaca15cda	feat(issues): make status_id, priority_id, type_id required on create (#598) ... - Change CreateIssueOption fields from *int64 (optional) to int64 - API auto-assigns org defaults when value is 0 - MCP gitea_issue_create now requires status_id, priority_id, type_id (pass 0 for org default) - Keep optional on gitea_issue_update (partial updates) Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 21:49:37 -05:00
Jonathan Miller	245b5a8e6a	feat(custom-fields): add required flag UI and API validation (#597) ... - Add required checkbox to org custom field settings form - Show red asterisk (*) indicator on required fields in the list - Validate required custom fields on API issue create (return 422) - Add locale strings for required field UI The Required column already exists in the DB (migration v343) and is already validated in the web form. This adds the missing org settings UI checkbox and API-side validation. Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 21:46:24 -05:00
Jonathan Miller	0f1002f3c9	fix: address review findings for wiki API ... - Log warning when wiki blob exceeds max size (was silent empty return) - Fix stale WebPathFromRequest test to match folder-based wiki behavior	2026-06-11 17:03:21 -05:00
Jonathan Miller	3a7b07590f	fix: wiki API sub-page support and content response (#606, #607) ... - Change wiki API routes from {pageName} to wildcard (*) to support pages with path separators (e.g. mcp/fleet-overview) - Use ListEntriesRecursiveFast() in ListWikiPages to include pages in subdirectories, not just root-level files - Add error logging in wikiContentsByEntry for diagnosing empty content_base64 responses - Fix pagination to count only regular files, not directories Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>	2026-06-11 16:56:10 -05:00
Jonathan Miller	7ed335e6c3	feat(api): add /metadata API route alongside /manifest for backward compat	2026-06-10 04:33:58 -05:00
Jonathan Miller	704d9d10be	feat(issues): status/priority/type dropdowns on new issue form (#598) ... - Add type, priority, status dropdowns to new issue sidebar - Pre-select org defaults (is_default for type/priority, first open status) - Auto-assign defaults on API create when not provided - Required indicators (*) on dropdowns and custom fields - Validate required custom fields on submit (#597) - Add feed_visibility to update server settings on manifest page	2026-06-09 23:19:19 -05:00
Jonathan Miller	549e890cd0	refactor: rename models/licenses to models/updateserver ... Rename the licensing/update server model package to better reflect its purpose. All imports updated from licenses_model to updateserver_model. License key management UI files kept (only imports updated).	2026-06-09 20:29:03 -05:00
Jonathan Miller	1caf26453f	feat: issue metadata API + org wiki tab with internal/external mode ... Issue Status/Priority/Type API: - Expose status_id, priority_id, type_id (with resolved names) on Issue API struct - New endpoints: GET /orgs/{org}/issue-statuses, /issue-priorities, /issue-types - CreateIssue and EditIssue handlers accept status_id, priority_id, type_id - MCP tools: 5 new tools + updated create/update with metadata params Org Wiki Tab: - Convention repos: wiki (public) and wiki-private (members-only) - Inline wiki rendering with markdown pipeline, sidebar, footer, page list - Public/private view dropdown (same UX as org profile README selector) - External wiki mode: link to outside URL from wiki tab - Wiki mode setting in org settings (internal vs external with URL field) - Migration 354: add wiki_mode and wiki_url to user table	2026-06-09 10:20:54 -05:00