Gogs v0.13.0 Release Notes

  • ➕ Added

    • 💻 An unlisted option is added when create or migrate a repository. Unlisted repositories are public but not being listed for users without direct access in the UI. #5733
    • 🆕 New configuration option [git.timeout] DIFF for customizing operation timeout of git diff. #6315
    • New configuration option [server] SSH_SERVER_MACS for setting list of accepted MACs for connections to builtin SSH server. #6434
    • 🆕 New languages support: Mongolian. #6510

    🔄 Changed

    • 0️⃣ The default branch has been changed to main. #6285
    • 🔧 MSSQL as database backend is deprecated, installation page no longer shows it as an option. Existing installations and manually craft configuration file continue to work. #6295
    • 🏗 Use Task as the default build tool for development. #6297

    🛠 Fixed

    • ➕ Add X-Frame-Options header to prevent Clickjacking. #6409
    • 🔒 [Security] Potential SSRF attack by CRLF injection via repository migration. #6413

    ✂ Removed

    • ⬆️ ⚠️ Migrations before 0.12 are removed, installations not on 0.12 should upgrade to it to run the migrations and then upgrade to 0.13.
    • 🔧 Configuration section [mailer] is no longer used, please use [email].
    • 🔧 Configuration section [service] is no longer used, please use [auth].
    • Configuration option APP_NAME is no longer used, please use BRAND_NAME.
    • Configuration option [security] REVERSE_PROXY_AUTHENTICATION_USER is no longer used, please use [auth] REVERSE_PROXY_AUTHENTICATION_HEADER.
    • Configuration option [auth] ACTIVE_CODE_LIVE_MINUTES is no longer used, please use [auth] ACTIVATE_CODE_LIVES.
    • Configuration option [auth] RESET_PASSWD_CODE_LIVE_MINUTES is no longer used, please use [auth] RESET_PASSWORD_CODE_LIVES.
    • Configuration option [auth] ENABLE_CAPTCHA is no longer used, please use [auth] ENABLE_REGISTRATION_CAPTCHA.
    • 🔔 Configuration option [auth] ENABLE_NOTIFY_MAIL is no longer used, please use [user] ENABLE_EMAIL_NOTIFICATION.
    • Configuration option [auth] REGISTER_EMAIL_CONFIRM is no longer used, please use [auth] REQUIRE_EMAIL_CONFIRMATION.
    • Configuration option [session] GC_INTERVAL_TIME is no longer used, please use [session] GC_INTERVAL.
    • Configuration option [session] SESSION_LIFE_TIME is no longer used, please use [session] MAX_LIFE_TIME.
    • Configuration option [server] ROOT_URL is no longer used, please use [server] EXTERNAL_URL.
    • Configuration option [server] LANDING_PAGE is no longer used, please use [server] LANDING_URL.
    • 🔧 Configuration option [database] DB_TYPE is no longer used, please use [database] TYPE.
    • 🔧 Configuration option [database] PASSWD is no longer used, please use [database] PASSWORD.