git-server/CHANGELOG.md

Changelog

All notable changes to Gogs are documented in this file.

0.12.0+dev (master)

Added

• Allow admin to remove observers from the repository. #5803
• Use Last-Modified HTTP header for raw files. #5811
• Support syntax highlighting for SAS code files (i.e. .r, .sas, .tex, .yaml). #5856
• Able to fill in pull request title with a template. #5901
• Able to override static files under public/ directory, please refer to documentation for usage. #5920

Changed

• All assets are now embedded into binary and served from memory by default. Set [server] LOAD_ASSETS_FROM_DISK = true to load them from disk. #5920
• Application and Go versions are removed from page footer and only show in the admin dashboard.
• Build tag for running as Windows Service has been changed from miniwinsvc to minwinsvc.
• Configuration option APP_NAME is deprecated and will end support in 0.13.0, please start using BRAND_NAME.
• Configuration option [server] ROOT_URL is deprecated and will end support in 0.13.0, please start using [server] EXTERNAL_URL.
• Configuration option [server] LANDING_PAGE is deprecated and will end support in 0.13.0, please start using [server] LANDING_URL.

Fixed

• [Security] Potential open redirection with i18n.
• [Security] Potential ability to delete files outside a repository.
• [Security] Potential RCE on mirror repositories. #5767
• [Security] Potential XSS attack with raw markdown API. #5907
• Open/close milestone redirects to a 404 page. #5677
• Disallow multiple tokens with same name. #5587 #5820
• Enable Federated Avatar Lookup could cause server to crash. #5848
• Private repositories are hidden in the organization's view. #5869
• Server error when changing email address in user settings page. #5899

Removed

• Configuration option [other] SHOW_FOOTER_VERSION
• Configuration option [server] STATIC_ROOT_PATH

---

Older change logs can be found on GitHub.