|
|
|
@@ -1,9 +1,11 @@
|
|
|
|
|
# Changelog
|
|
|
|
|
## [Unreleased]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
All notable changes to MokoGitea are documented here. Versions follow the format
|
|
|
|
|
`v{upstream}-moko.{major}.{minor}` (e.g. `v1.26.1-moko.06.03`).
|
|
|
|
|
|
|
|
|
|
## [Unreleased]
|
|
|
|
|
## [06.14.00] --- 2026-06-14
|
|
|
|
|
|
|
|
|
|
* FEATURES
|
|
|
|
|
* feat(api): issue status/priority/type exposed in REST API - GET/PATCH on issues now includes status_id, priority_id, type_id with resolved names
|
|
|
|
@@ -194,36 +196,3 @@ All notable changes to MokoGitea are documented here. Versions follow the format
|
|
|
|
|
* fix(updates): correct dlid prefix and align XML with Joomla standard
|
|
|
|
|
* INFRASTRUCTURE
|
|
|
|
|
* fix(ci): auto-deploy to production on merge to main (#235)
|
|
|
|
|
|
|
|
|
|
## [v1.26.1-moko.04] - 2026-05-24
|
|
|
|
|
|
|
|
|
|
* SECURITY
|
|
|
|
|
* Backport 12 upstream v1.26.2 security fixes:
|
|
|
|
|
* golang.org/x/net v0.55.0 security update (#140)
|
|
|
|
|
* Token scope enforcement on raw/media/attachment downloads (#141)
|
|
|
|
|
* OAuth PKCE hardening and refresh token replay protection (#142)
|
|
|
|
|
* Wiki git write and LFS token access enforcement (#143)
|
|
|
|
|
* Public-only token filtering in API queries (#144)
|
|
|
|
|
* Artifact signature payload hardening (#146)
|
|
|
|
|
* AWS credentials encryption (#161)
|
|
|
|
|
* Mermaid v11.15.0 security update (#162)
|
|
|
|
|
* Composer package permission check (#164)
|
|
|
|
|
* BUGFIXES
|
|
|
|
|
* fix(actions): nil pointer dereference in concurrency during PR creation (#136)
|
|
|
|
|
* fix(ui): actions runs list broken row layout (#138)
|
|
|
|
|
* fix: scheduled action panic with null event payload
|
|
|
|
|
* fix: treat email addresses case-insensitively
|
|
|
|
|
* fix: .mod lexer panic — removed invalid AMPL mapping
|
|
|
|
|
* FEATURES
|
|
|
|
|
* Joomla-style updates.xml with channel selection
|
|
|
|
|
* Update checker with configurable CHANNEL setting
|
|
|
|
|
* Admin dashboard update banner with docker pull command
|
|
|
|
|
* Upstream bug sync workflow — daily automated issue creation
|
|
|
|
|
* PR RC release workflow — auto-build RC on PR to main
|
|
|
|
|
* INFRASTRUCTURE
|
|
|
|
|
* New 3-part versioning: v{upstream}-moko.{major}.{minor}.{patch}
|
|
|
|
|
* Branding updates: error pages, home page, settings link
|
|
|
|
|
* Deploy workflow updated for new version format
|
|
|
|
|
* PROCESS
|
|
|
|
|
* Created `type: bug` and `upstream` labels for automated issue tracking
|
|
|
|
|
* Closed 24 upstream bug/security issues after backporting
|
|
|
|
|
gitea-actions[bot]