v1.14.3

* SECURITY
  * Encrypt migration credentials at rest (go-gitea#15895) (go-gitea#16187)
  * Only check access tokens if they are likely to be tokens (go-gitea#16164) (go-gitea#16171)
  * Add missing SameSite settings for the i_like_gitea cookie (go-gitea#16037) (go-gitea#16039)
  * Fix setting of SameSite on cookies (go-gitea#15989) (go-gitea#15991)
* API
  * Repository object only count releases as releases (go-gitea#16184) (go-gitea#16190)
  * EditOrg respect RepoAdminChangeTeamAccess option (go-gitea#16184) (go-gitea#16190)
  * Fix overly strict edit pr permissions (go-gitea#15900) (go-gitea#16081)
* BUGFIXES
  * Run processors on whole of text (go-gitea#16155) (go-gitea#16185)
  * Class `issue-keyword` is being incorrectly stripped off spans (go-gitea#16163) (go-gitea#16172)
  * Fix language switch for install page (go-gitea#16043) (go-gitea#16128)
  * Fix bug on getIssueIDsByRepoID (go-gitea#16119) (go-gitea#16124)
  * Set self-adjusting deadline for connection writing (go-gitea#16068) (go-gitea#16123)
  * Fix http path bug (go-gitea#16117) (go-gitea#16120)
  * Fix data URI scramble (go-gitea#16098) (go-gitea#16118)
  * Merge all deleteBranch as one function and also fix bug when delete branch don't close related PRs (go-gitea#16067) (go-gitea#16097)
  * git migration: don't prompt interactively for clone credentials (go-gitea#15902) (go-gitea#16082)
  * Fix case change in ownernames (go-gitea#16045) (go-gitea#16050)
  * Don't manipulate input params in email notification (go-gitea#16011) (go-gitea#16033)
  * Remove branch URL before IssueRefURL (go-gitea#15968) (go-gitea#15970)
  * Fix layout of milestone view (go-gitea#15927) (go-gitea#15940)
  * GitHub Migration, migrate draft releases too (go-gitea#15884) (go-gitea#15888)
  * Close the gitrepo when deleting the repository (go-gitea#15876) (go-gitea#15887)
  * Upgrade xorm to v1.1.0 (go-gitea#15869) (go-gitea#15885)
  * Fix blame row height alignment (go-gitea#15863) (go-gitea#15883)
  * Fix error message when saving generated LOCAL_ROOT_URL config (go-gitea#15880) (go-gitea#15882)
  * Backport Fix LFS commit finder not working (go-gitea#15856) (go-gitea#15874)
  * Stop calling WriteHeader in Write (go-gitea#15862) (go-gitea#15873)
  * Add timeout to writing to responses (go-gitea#15831) (go-gitea#15872)
  * Return go-get info on subdirs (go-gitea#15642) (go-gitea#15871)
  * Restore PAM user autocreation functionality (go-gitea#15825) (go-gitea#15867)
  * Fix truncate utf8 string (go-gitea#15828) (go-gitea#15854)
  * Fix bound address/port for caddy's certmagic library (go-gitea#15758) (go-gitea#15848)
  * Upgrade unrolled/render to v1.1.1 (go-gitea#15845) (go-gitea#15846)
  * Queue manager FlushAll can loop rapidly - add delay (go-gitea#15733) (go-gitea#15840)
  * Tagger can be empty, as can Commit and Author - tolerate this (go-gitea#15835) (go-gitea#15839)
  * Set autocomplete off on branches selector (go-gitea#15809) (go-gitea#15833)
  * Add missing error to Doctor log (go-gitea#15813) (go-gitea#15824)
  * Move restore repo to internal router and invoke from command to avoid open the same db file or queues files (go-gitea#15790) (go-gitea#15816)
* ENHANCEMENTS
  * Removable media support to snap package (go-gitea#16136) (go-gitea#16138)
  * Move sans-serif fallback font higher than emoji fonts (go-gitea#15855) (go-gitea#15892)
* DOCKER
  * Only write config in environment-to-ini if there are changes (go-gitea#15861) (go-gitea#15868)
  * Only offer hostcertificates if they exist (go-gitea#15849) (go-gitea#15853)

v1.14.2

* API
  * Make change repo settings work on empty repos (go-gitea#15778) (go-gitea#15789)
  * Add pull "merged" notification subject status to API (go-gitea#15344) (go-gitea#15654)
* BUGFIXES
  * Ensure that ctx.Written is checked after issues(...) calls (go-gitea#15797) (go-gitea#15798)
  * Use pulls in commit graph unless pulls are disabled (go-gitea#15734 & go-gitea#15740 & go-gitea#15774) (go-gitea#15775)
  * Set GIT_DIR correctly if it is not set (go-gitea#15751) (go-gitea#15769)
  * Fix bug where repositories appear unadopted (go-gitea#15757) (go-gitea#15767)
  * Not show `ref-in-new-issue` pop when issue was disabled (go-gitea#15761) (go-gitea#15765)
  * Drop back to use IsAnInteractiveSession for SVC (go-gitea#15749) (go-gitea#15762)
  * Fix setting version table in dump (go-gitea#15753) (go-gitea#15759)
  * Fix close button change on delete in simplemde area (go-gitea#15737) (go-gitea#15747)
  * Defer closing the gitrepo until the end of the wrapped context functions (go-gitea#15653) (go-gitea#15746)
  * Fix some ui bug about draft release (go-gitea#15137) (go-gitea#15745)
  * Only log Error on getLastCommitStatus error to let pull list still be visible (go-gitea#15716) (go-gitea#15715)
  * Move tooltip down to allow selection of Remove File on error (go-gitea#15672) (go-gitea#15714)
  * Fix setting redis db path (go-gitea#15698) (go-gitea#15708)
  * Fix DB session cleanup (go-gitea#15697) (go-gitea#15700)
  * Fixed several activation bugs (go-gitea#15473) (go-gitea#15685)
  * Delete references if repository gets deleted (go-gitea#15681) (go-gitea#15684)
  * Fix orphaned objects deletion bug (go-gitea#15657) (go-gitea#15683)
  * Delete protected branch if repository gets removed (go-gitea#15658) (go-gitea#15676)
  * Remove spurious set name from eventsource.sharedworker.js (go-gitea#15643) (go-gitea#15652)
  * Not update updated uinx for `git gc` (go-gitea#15637) (go-gitea#15641)
  * Fix commit graph author link (go-gitea#15627) (go-gitea#15630)
  * Fix webhook timeout bug (go-gitea#15613) (go-gitea#15621)
  * Resolve panic on failed interface conversion in migration v156 (go-gitea#15604) (go-gitea#15610)
  * Fix missing storage init (go-gitea#15589) (go-gitea#15598)
  * If the default branch is not present do not report error on stats indexing (go-gitea#15546 & go-gitea#15583) (go-gitea#15594)
  * Fix lfs management find (go-gitea#15537) (go-gitea#15578)
  * Fix NPE on view commit with notes (go-gitea#15561) (go-gitea#15573)
  * Fix bug on commit graph (go-gitea#15517) (go-gitea#15530)
  * Send size to /avatars if requested (go-gitea#15459) (go-gitea#15528)
  * Prevent migration 156 failure if tag commit missing (go-gitea#15519) (go-gitea#15527)
* ENHANCEMENTS
  * Display conflict-free merge messages for pull requests (go-gitea#15773) (go-gitea#15796)
  * Exponential Backoff for ByteFIFO (go-gitea#15724) (go-gitea#15793)
  * Issue list alignment tweaks (go-gitea#15483) (go-gitea#15766)
  * Implement delete release attachments and update release attachments' name (go-gitea#14130) (go-gitea#15666)
  * Add placeholder text to deploy key textarea (go-gitea#15575) (go-gitea#15576)
  * Project board improvements (go-gitea#15429) (go-gitea#15560)
  * Repo branch page: label size, PR ref, new PR button alignment (go-gitea#15363) (go-gitea#15365)
* MISC
  * Fix webkit calendar icon color on arc-green (go-gitea#15713) (go-gitea#15728)
  * Performance improvement for last commit cache and show-ref (go-gitea#15455) (go-gitea#15701)
  * Bump unrolled/render to v1.1.0 (go-gitea#15581) (go-gitea#15608)
  * Add ETag header (go-gitea#15370) (go-gitea#15552)

v1.14.1

* BUGFIXES
  * Fix bug clone wiki (go-gitea#15499) (go-gitea#15502)
  * Github Migration ignore rate limit, if not enabled (go-gitea#15490) (go-gitea#15495)
  * Use subdir for URL (go-gitea#15446) (go-gitea#15493)
  * Query the DB for the hash before inserting in to email_hash (go-gitea#15457) (go-gitea#15491)
  * Ensure review dismissal only dismisses the correct review (go-gitea#15477) (go-gitea#15489)
  * Use index of the supported tags to choose user lang (go-gitea#15452) (go-gitea#15488)
  * Fix wrong file link in code search page (go-gitea#15466) (go-gitea#15486)
  * Quick template fix for built-in SSH server in admin config (go-gitea#15464) (go-gitea#15481)
  * Prevent superfluous response.WriteHeader (go-gitea#15456) (go-gitea#15476)
  * Fix ambiguous argument error on tags (go-gitea#15432) (go-gitea#15474)
  * Add created_unix instead of expiry to migration (go-gitea#15458) (go-gitea#15463)
  * Fix repository search (go-gitea#15428) (go-gitea#15442)
  * Prevent NPE on avatar direct rendering if federated avatars disabled (go-gitea#15434) (go-gitea#15439)
  * Fix wiki clone urls (go-gitea#15430) (go-gitea#15431)
  * Fix dingtalk icon url at webhook (go-gitea#15417) (go-gitea#15426)
  * Standardise icon on projects PR page (go-gitea#15387) (go-gitea#15408)
* ENHANCEMENTS
  * Add option to skip LFS/attachment files for `dump` (go-gitea#15407) (go-gitea#15492)
  * Clone panel fixes (go-gitea#15436)
  * Use semantic dropdown for code search query type (go-gitea#15276) (go-gitea#15364)
* BUILD
  * Build go-git variants for windows (go-gitea#15482) (go-gitea#15487)
  * Lock down build-images dependencies (Partial go-gitea#15479) (go-gitea#15480)
* MISC
  * Performance improvement for list pull requests (go-gitea#15447) (go-gitea#15500)
  * Fix potential copy lfs records failure when fork a repository (go-gitea#15441) (go-gitea#15485)

v1.14.0

* SECURITY
  * Respect approved email domain list for externally validated user registration (go-gitea#15014)
  * Add reverse proxy configuration support for remote IP address detection (go-gitea#14959)
  * Ensure validation occurs on clone addresses too (go-gitea#14994)
* BREAKING
  * Fix double 'push tag' action feed (go-gitea#15078) (go-gitea#15083)
  * Remove possible resource leak (go-gitea#15067) (go-gitea#15082)
  * Handle unauthorized user events gracefully (go-gitea#15071) (go-gitea#15074)
  * Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (go-gitea#14475)
  * Migrate from Macaron to Chi framework (go-gitea#14293)
  * Deprecate building for mips (go-gitea#14174)
  * Consolidate Logos and update README header (go-gitea#14136)
  * Inline manifest.json (go-gitea#14038)
  * Store repository data in data path if not previously set (go-gitea#13991)
  * Rename "gitea" png to "logo" (go-gitea#13974)
  * Standardise logging of failed authentication attempts in internal SSH (go-gitea#13962)
  * Add markdown support in organization description (go-gitea#13549)
  * Improve users management through the CLI (go-gitea#6001) (go-gitea#10492)
* FEATURES
  * Create a new issue with reference to lines of code from file view (go-gitea#14863)
  * Repository transfer has to be confirmed, if user can not create repo for new owner (go-gitea#14792)
  * Allow blocking some email domains from registering an account (go-gitea#14667)
  * Create a new issue based on reference to an issue comment (go-gitea#14366)
  * Add support to migrate from gogs (go-gitea#14342)
  * Add pager to the branches page (go-gitea#14202)
  * Minimal OpenID Connect implementation (go-gitea#14139)
  * Display current stopwatch in navbar (go-gitea#14122)
  * Display SVG files as images instead of text (go-gitea#14101)
  * Disable SSH key deletion of externally managed Keys (go-gitea#13985)
  * Add support for ed25519_sk and ecdsa_sk SSH keys (go-gitea#13462)
  * Add support for Mastodon OAuth2 provider (go-gitea#13293)
  * Add gitea sendmail command (go-gitea#13079)
  * Create DB session provider(based on xorm) (go-gitea#13031)
  * Add dismiss review feature (go-gitea#12674)
  * Make manual merge autodetection optional and add manual merge as merge method (go-gitea#12543)
  * Dump github/gitlab/gitea repository data to a local directory and restore to gitea (go-gitea#12244)
  * Create Rootless Docker image (go-gitea#10154)
* API
  * Speedup issue search (go-gitea#15179) (go-gitea#15192)
  * Get pull, return head branch sha, even if deleted (go-gitea#14931)
  * Export LFS & TimeTracking function status (go-gitea#14753)
  * Show Gitea version in swagger (go-gitea#14654)
  * Fix PATCH /repos/{owner}/{repo} panic (go-gitea#14637)
  * Add Restricted Field to User (go-gitea#14630)
  * Add support for ref parameter to get raw file API (go-gitea#14602)
  * Add affected files of commits to commit struct (go-gitea#14579)
  * Fix CJK fonts again and misc. font issues (go-gitea#14575)
  * Add delete release by tag & delete tag (go-gitea#14563) & (go-gitea#13358)
  * Add pagination to ListBranches (go-gitea#14524)
  * Add signoff option in commit form (go-gitea#14516)
  * GetRelease by tag only return release (go-gitea#14397)
  * Add MirrorInterval to the API (go-gitea#14163)
  * Make BasicAuth Prefix case insensitive (go-gitea#14106)
  * Add user filter to issueTrackedTimes, enable usage for issue managers (go-gitea#14081)
  * Add ref to create/edit issue options & deprecated assignee (go-gitea#13992)
  * Add Ref to Issue (go-gitea#13946)
  * Expose default theme in meta and API (go-gitea#13809)
  * Send error message when CSRF token is missing (go-gitea#13676)
  * List, Check, Add & delete endpoints for repository teams (go-gitea#13630)
  * Admin EditUser: Make FullName, Email, Website & Location optional (go-gitea#13562)
  * Add more filters to issues search (go-gitea#13514)
  * Add review request api (go-gitea#11355)
* BUGFIXES
  * Fix delete nonexist oauth application 500 and prevent deadlock (go-gitea#15384) (go-gitea#15396)
  * Always set the merge base used to merge the commit (go-gitea#15352) (go-gitea#15385)
  * Upgrade to bluemonday 1.0.7 (go-gitea#15379) (go-gitea#15380)
  * Turn RepoRef and RepoAssignment back into func(*Context) (go-gitea#15372) (go-gitea#15377)
  * Move FCGI req.URL.Path fix-up to the FCGI listener (go-gitea#15292) (go-gitea#15361)
  * Show diff on rename with diff changes (go-gitea#15338) (go-gitea#15339)
  * Fix handling of logout event (go-gitea#15323) (go-gitea#15337)
  * Fix CanCreateRepo check (go-gitea#15311) (go-gitea#15321)
  * Fix xorm log stack level (go-gitea#15285) (go-gitea#15316)
  * Fix bug in Wrap (go-gitea#15302) (go-gitea#15309)
  * Drop the event source if we are unauthorized (go-gitea#15275) (go-gitea#15280)
  * Backport Fix graph pagination (go-gitea#15225)  (go-gitea#15249)
  * Prevent NPE in CommentMustAsDiff if no hunk header (go-gitea#15199) (go-gitea#15200)
  * should run RetrieveRepoMetas() for empty pr (go-gitea#15187) (go-gitea#15190)
  * Move setting to enable closing issue via commit in non default branch to repo settings (go-gitea#14965)
  * Show correct issues for team dashboard (go-gitea#14952)
  * Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (go-gitea#14932)
  * Only allow issue labels from owner repository or organization (go-gitea#14928)
  * Fix alignment of People and Teams right arrow on org homepage (go-gitea#14924)
  * Fix overdue marking of closed issues and milestones (go-gitea#14923)
  * Prevent panic when empty MilestoneID in repo/issue/list (go-gitea#14911)
  * Fix migration context data (go-gitea#14910)
  * Handle URLs with trailing slash (go-gitea#14852)
  * Add CORS config on to /login/oauth/access_token endpoint (go-gitea#14850)
  * Make searching issues by keyword case insensitive on DB (go-gitea#14848)
  * Prevent use of double sub-path and incorrect asset path in manifest (go-gitea#14827)
  * Fix link account ui (go-gitea#14763)
  * Fix preview status switch button on wiki editor (go-gitea#14742)
  * Fix github download on migration (go-gitea#14703)
  * Fix svg spacing (go-gitea#14638)
  * Prevent adding nil label to .AddedLabels or .RemovedLabels (go-gitea#14623)
  * Truncated organizations name (go-gitea#14615)
  * Exclude the current dump file from the dump (go-gitea#14606)
  * Use OldRef instead of CommitSHA for DeleteBranch comments (go-gitea#14604)
  * Ensure memcache caching works when TTL greater than 30 days (go-gitea#14592)
  * Remove NULs byte arrays passed to PostProcess (go-gitea#14587)
  * Restore detection of branches are equal on compare page (go-gitea#14586)
  * Fix incorrect key name so registerManualConfirm works (go-gitea#14455)
  * Fix close/reopen with comment (go-gitea#14436)
  * Allow passcode invalid error to appear (go-gitea#14371)
  * Escape branch names in compare url (go-gitea#14364)
  * Label and milestone webhooks on issue/pull creation (go-gitea#14363)
  * Handle NotifyCreateRef as create branch in feeds (go-gitea#14245)
  * Prevent clipping input text in Chrome + Segoe UI Font (go-gitea#14179)
  * Fix UI on edit auth source page (go-gitea#14137)
  * Fix git.parseTagData (go-gitea#14105)
  * Refactor get tag to remove unnecessary steps (go-gitea#14058)
  * Fix integrations test error with space in CURDIR path (go-gitea#14056)
  * Dropdown triangle fixes (go-gitea#14028)
  * Fix label of --id in admin delete user (go-gitea#14005)
  * Cause NotifyMigrateRepository to emit a repo create webhook (go-gitea#14004)
  * Update HEAD to match defaultBranch in template generation (go-gitea#13948)
  * Fix action avatar loading (go-gitea#13909)
  * Fix issue participants (go-gitea#13893)
  * Fix avatar template error (go-gitea#13833)
  * Fix review request notification email links when external issue tracker is enabled (go-gitea#13723)
  * Fix blame line alignment (go-gitea#13542)
  * Include OriginalAuthor in Reaction constraint (go-gitea#13505)
  * Comments on review should have the same sha (go-gitea#13448)
  * Fix whitespace rendering in diff (go-gitea#13415)
  * Fixed git args duplication (go-gitea#13411)
  * Fix bug on release publisherid migrations (go-gitea#13410)
  * Fix --port setting (go-gitea#13288)
  * Keep database transactions not too big (go-gitea#13254)
  * Git version check, ignore pre-releases constraints (go-gitea#13234)
  * Handle and propagate errors when checking if paths are Dirs, Files or Exist (go-gitea#13186)
  * Update Mirror IsEmpty status on synchronize (go-gitea#13185)
  * Use GO variable in go-check target (go-gitea#13146) (go-gitea#13147)
* ENHANCEMENTS
  * UI style improvements
  * Dropzone styling improvements (go-gitea#15291) (go-gitea#15374)
  * Add size to Save function (go-gitea#15264) (go-gitea#15270)
  * Monaco improvements (go-gitea#15333) (go-gitea#15345)
  * Support .mailmap in code activity stats (go-gitea#15009)
  * Sort release attachments by name (go-gitea#15008)
  * Add ui.explore settings to control view of explore pages (go-gitea#14094)
  * Make internal SSH server host key path configurable (go-gitea#14918)
  * Hide resync all ssh principals when using internal ssh server (go-gitea#14904)
  * Add SameSite setting for cookies (go-gitea#14900)
  * Move Bleve and Elastic code indexers to use a common cat-file --batch (go-gitea#14781)
  * Add environment-to-ini to docker image (go-gitea#14762)
  * Add preview support for wiki editor when disable simpleMDE (go-gitea#14757)
  * Add easyMDE(simpleMDE) support for release content editor (go-gitea#14744)
  * Organization removal confirmation using name not password (go-gitea#14738)
  * Make branch names in PR description clickable (go-gitea#14716)
  * Add Password Algorithm option to install page (go-gitea#14701)
  * Add fullTextSearch to dropdowns by default (go-gitea#14694)
  * Fix truncated organization names (go-gitea#14655)
  * Whitespace in commits (go-gitea#14650)
  * Sort / move project boards (go-gitea#14634)
  * Make fileheader sticky in diffs (go-gitea#14616)
  * Add helper descriptions on new repo page (go-gitea#14591)
  * Move the stopwatches to the eventsource stream (go-gitea#14588)
  * Add Content-Length header to HEAD requests (go-gitea#14542)
  * Add Image Diff options in Diff view (go-gitea#14450)
  * Improve Description in new/ edit Project template (go-gitea#14429)
  * Allow ssh-keygen on Windows to detect ssh key type (go-gitea#14413)
  * Display error if twofaSecret cannot be retrieved (go-gitea#14372)
  * Sort issue search results by revelance (go-gitea#14353)
  * Implement ghost comment mitigation (go-gitea#14349)
  * Upgrade blevesearch dependency to v2.0.1 (go-gitea#14346)
  * Add edit, delete and reaction support to code review comments on issue page (go-gitea#14339)
  * Merge default and system webhooks under one menu (go-gitea#14244)
  * Add option for administrator to reset user 2FA (go-gitea#14243)
  * Add option to change username to the admin panel (go-gitea#14229)
  * Check for 'main' as potential default branch name (go-gitea#14193)
  * Project: show referenced PRs in issue cards (go-gitea#14183)
  * Use caddy's certmagic library for extensible/robust ACME handling (go-gitea#14177)
  * CLI support for OAuth sources custom icons (go-gitea#14166)
  * Custom icons for OAuth sources (go-gitea#14161)
  * Team dashboards (go-gitea#14159)
  * KanBan: be able to set default board (go-gitea#14147)
  * Disable Fomantic's custom scrollbars (go-gitea#14109)
  * Add UI to delete tracked times (go-gitea#14100)
  * Rework heatmap permissions (go-gitea#14080)
  * Issue and pull request filters on organization dashboard (go-gitea#14072)
  * Fix webhook list styling (go-gitea#14001)
  * Show dropdown with all statuses for commit (go-gitea#13977)
  * Show status check for merged PRs (go-gitea#13975)
  * Diff stat improvements (go-gitea#13954)
  * Report permissions denied in internal SSH (go-gitea#13953)
  * Markdown task list improvements (go-gitea#13952)
  * Heatmap days clickable (go-gitea#13935)
  * chore: use octicon-mirror for feeds display (go-gitea#13928)
  * Move diff split code into own template file (go-gitea#13919)
  * Markdown: Enable wrapping in code blocks and a color tweak (go-gitea#13894)
  * Do not reload page after adding comments in Pull Request reviews (go-gitea#13877)
  * Add pull request manually merge instruction (go-gitea#13840)
  * add thumbnail preview section to issue attachments (go-gitea#13826)
  * Move Repo APIFormat to convert package (go-gitea#13787)
  * Move notification APIFormat (go-gitea#13783)
  * Swap swagger-ui with swagger-ui-dist (go-gitea#13777)
  * User Settings: Ignore empty language codes & validate (go-gitea#13755)
  * Improve migrate page and add card CSS (go-gitea#13751)
  * Add block on official review requests branch protection (go-gitea#13705)
  * Add review requested filter on pull request overview (go-gitea#13701)
  * Use chronological commit order in default squash message (go-gitea#13696)
  * Clickable links in pull request (and issue) titles (go-gitea#13695)
  * Support shortened commit SHAs in URLs (go-gitea#13686)
  * Use native git variants by default with go-git variants as build tag (go-gitea#13673)
  * Don't render dropdown when only 1 merge style is available (go-gitea#13670)
  * Move webhook type from int to string (go-gitea#13664)
  * Direct avatar rendering (go-gitea#13649)
  * Verify password for local-account activation (go-gitea#13631)
  * Prevent clone protocol button flash on page load (go-gitea#13626)
  * Remove fetch request from heatmap (go-gitea#13623)
  * Refactor combine label comments with tests (go-gitea#13619)
  * Move metrics from macaron to chi (go-gitea#13601)
  * Issue and Pulls lists rework (go-gitea#13594)
  * HTTP cache rework and enable caching for storage assets (go-gitea#13569)
  * Use mount but not register for chi routes (go-gitea#13555)
  * Use monaco for the git hook editor (go-gitea#13552)
  * Make heatmap colors more distinct (go-gitea#13533)
  * Lazy-load issue reviewers and assignees avatars (go-gitea#13526)
  * Change search and filter icons to SVG (go-gitea#13473)
  * Create tag on ui (go-gitea#13467)
  * updateSize when create a repo with init commit (go-gitea#13441)
  * Added title and action buttons to Project view page (go-gitea#13437)
  * Override fomantic monospace fonts and set size (go-gitea#13435)
  * Rework focused comment styling (go-gitea#13434)
  * Tags cleanup (go-gitea#13428)
  * Various style tweaks (go-gitea#13418)
  * Refactor push update (go-gitea#13381)
  * Comment box tweaks and SVG dropdown triangles (go-gitea#13376)
  * Various style fixes (go-gitea#13372)
  * Change repo home page icons to SVG (go-gitea#13364)
  * Use CSS Vars for primary color (go-gitea#13361)
  * Refactor image paste code (go-gitea#13354)
  * Switch from SimpleMDE to EasyMDE (go-gitea#13333)
  * Group Label Changed Comments in timeline (go-gitea#13304)
  * Make the logger an interface (go-gitea#13294)
  * Fix PR/Issue titles on mobile (go-gitea#13292)
  * Rearrange the order of the merged by etc. in locale (go-gitea#13284)
  * Replace footer and modal icons with SVG (go-gitea#13245)
  * Issues overview should not show issues from archived repos (go-gitea#13220)
  * Show stale label for stale code comment which is marked as resolved (go-gitea#13213)
  * Use CSS Variables for fonts, remove postcss-loader (go-gitea#13204)
  * Add mentionable teams to tributeValues and change team mention rules to gh's style (go-gitea#13198)
  * Move install pages out of main macaron routes (go-gitea#13195)
  * Update outdated label to use Fomantic UI style (go-gitea#13181)
  * Added option to disable webhooks (go-gitea#13176)
  * Change order of possible-owner organizations to alphabetical (go-gitea#13160)
  * Log IP on SSH authentication failure for Built-in SSH server (go-gitea#13150)
  * Added option to disable migrations (go-gitea#13114)
  * New "Add Mirror" Button in the Organization view (go-gitea#13105)
  * Manually approve new registration (go-gitea#13083)
  * Cron job to cleanup hook_task table (go-gitea#13080)
  * Use the headline comment of pull-request as the squash commit's message (go-gitea#13071)
  * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (go-gitea#12999)
  * Slightly simplify the queue settings code to help reduce the risk of problems (go-gitea#12976)
  * Add precise search type for Elastic Search (go-gitea#12869)
  * Move APIFormat functions into convert package (go-gitea#12856)
  * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (go-gitea#12766)
  * Add TrN for repository limit (go-gitea#12492)
  * Refactor doctor (go-gitea#12264)
  * Add the tag list page to the release page (go-gitea#12096)
  * Redirect on changed user and org name (go-gitea#11649)
  * load U2F js only on pages which need it (go-gitea#11585)
  * Make archival asynchronous (go-gitea#11296)
  * Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (go-gitea#7420)
  * Improve vfsgen to not unzip bindata files but send to browser directly (go-gitea#7109)
  * Enhance release list (go-gitea#6025)
* DOCS
  * Swagger show models by default (go-gitea#14880)
  * Add missing repo.projects unit into swagger (go-gitea#14876)
  * Update docs and comments to remove macaron (go-gitea#14491)
  * Issue template addition: Are you using Gitea behind CloudFlare? (go-gitea#14098)
  * Generate man pages (go-gitea#13901)
  * Reformat/fine-tune docs (go-gitea#13897)
  * Added Table of Contents to long documentation pages (go-gitea#13890)
  * Add docs command (go-gitea#13429)
  * Update external-renderers.en-us.md (go-gitea#13165)
* MISC
  * Add builds for apple M1 (darwin arm64) (go-gitea#14951)
  * Migrate to use jsoniter instead of encoding/json (go-gitea#14841)
  * Reduce make verbosity (go-gitea#13803)
  * Add git command error directory on log (go-gitea#13194)

v1.13.7

* SECURITY
  * Update to bluemonday-1.0.6 (go-gitea#15294) (go-gitea#15298)
  * Clusterfuzz found another way (go-gitea#15160) (go-gitea#15169)
* API
  * Fix wrong user returned in API (go-gitea#15139) (go-gitea#15150)
* BUGFIXES
  * Add 'fonts' into 'KnownPublicEntries' (go-gitea#15188) (go-gitea#15317)
  * Speed up `enry.IsVendor` (go-gitea#15213) (go-gitea#15246)
  * Response 404 for diff/patch of a commit that not exist (go-gitea#15221) (go-gitea#15238)
  * Prevent NPE in CommentMustAsDiff if no hunk header (go-gitea#15199) (go-gitea#15201)
* MISC
  * Add size to Save function (go-gitea#15264) (go-gitea#15271)

v1.14.0-rc2

* SECURITY
  * Fix bug on avatar middleware (go-gitea#15124) (go-gitea#15125)
  * Fix another clusterfuzz identified issue (go-gitea#15096) (go-gitea#15113)
  * Update to goldmark 1.3.3 (go-gitea#15059) (go-gitea#15060)
* BUGFIXES
  * Fix the v176 migration (go-gitea#15110) (go-gitea#15111)
  * Fix double 'push tag' action feed (go-gitea#15078) (go-gitea#15083)
  * Remove possible resource leak (go-gitea#15067) (go-gitea#15082)
  * Handle unauthorized user events gracefully (go-gitea#15071) (go-gitea#15074)

v1.13.6

* SECURITY
  * Fix bug on avatar middleware (go-gitea#15124) (go-gitea#15125)
  * Fix another clusterfuzz identified issue (go-gitea#15096) (go-gitea#15114)
* API
  * Fix nil exeption for get pull reviews API go-gitea#15104 (go-gitea#15106)
* BUGFIXES
  * Fix markdown rendering in milestone content (go-gitea#15056) (go-gitea#15092)

v1.13.5

* SECURITY
  * Update to goldmark 1.3.3 (go-gitea#15059) (go-gitea#15061)
* API
  * Fix set milestone on PR creation (go-gitea#14981) (go-gitea#15001)
  * Prevent panic when editing forked repos by API (go-gitea#14960) (go-gitea#14963)
* BUGFIXES
  * Fix bug when upload on web (go-gitea#15042) (go-gitea#15055)
  * Delete Labels & IssueLabels on Repo Delete too (go-gitea#15039) (go-gitea#15051)
  * another clusterfuzz spotted issue (go-gitea#15032) (go-gitea#15034)
  * Fix postgres ID sequences broken by recreate-table (go-gitea#15015) (go-gitea#15029)
  * Fix several render issues (go-gitea#14986) (go-gitea#15013)
  * Make sure sibling images get a link too (go-gitea#14979) (go-gitea#14995)
  * Fix Anchor jumping with escaped query components (go-gitea#14969) (go-gitea#14977)
  * fix release mail html template (go-gitea#14976)
  * Fix excluding more than two labels on issues list (go-gitea#14962) (go-gitea#14973)
  * don't mark each comment poster as OP (go-gitea#14971) (go-gitea#14972)
  * Add "captcha" to list of reserved usernames (go-gitea#14930)
  * Re-enable import local paths after reversion from go-gitea#13610 (go-gitea#14925) (go-gitea#14927)

* SECURITY

  * Respect approved email domain list for externally validated user registration (go-gitea#15014)
  * Add reverse proxy configuration support for remote IP address detection (go-gitea#14959)
  * Ensure validation occurs on clone addresses too (go-gitea#14994)
* BREAKING
  * Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (go-gitea#14475)
  * Migrate from Macaron to Chi framework (go-gitea#14293)
  * Deprecate building for mips (go-gitea#14174)
  * Consolidate Logos and update README header (go-gitea#14136)
  * Inline manifest.json (go-gitea#14038)
  * Store repository data in data path if not previously set (go-gitea#13991)
  * Rename "gitea" png to "logo" (go-gitea#13974)
  * Standardise logging of failed authentication attempts in internal SSH (go-gitea#13962)
  * Add markdown support in organization description (go-gitea#13549)
  * Improve users management through the CLI (go-gitea#6001) (go-gitea#10492)
* FEATURES
  * Create a new issue with reference to lines of code from file view (go-gitea#14863)
  * Repository transfer has to be confirmed, if user can not create repo for new owner (go-gitea#14792)
  * Allow blocking some email domains from registering an account (go-gitea#14667)
  * Create a new issue based on reference to an issue comment (go-gitea#14366)
  * Add support to migrate from gogs (go-gitea#14342)
  * Add pager to the branches page (go-gitea#14202)
  * Minimal OpenID Connect implementation (go-gitea#14139)
  * Display current stopwatch in navbar (go-gitea#14122)
  * Display SVG files as images instead of text (go-gitea#14101)
  * Disable SSH key deletion of externally managed Keys (go-gitea#13985)
  * Add support for ed25519_sk and ecdsa_sk SSH keys (go-gitea#13462)
  * Add support for Mastodon OAuth2 provider (go-gitea#13293)
  * Add gitea sendmail command (go-gitea#13079)
  * Create DB session provider(based on xorm) (go-gitea#13031)
  * Add dismiss review feature (go-gitea#12674)
  * Make manual merge autodetection optional and add manual merge as merge method (go-gitea#12543)
  * Dump github/gitlab/gitea repository data to a local directory and restore to gitea (go-gitea#12244)
  * Create Rootless Docker image (go-gitea#10154)
* API
  * Get pull, return head branch sha, even if deleted (go-gitea#14931)
  * Export LFS & TimeTracking function status (go-gitea#14753)
  * Show Gitea version in swagger (go-gitea#14654)
  * Fix PATCH /repos/{owner}/{repo} panic (go-gitea#14637)
  * Add Restricted Field to User (go-gitea#14630)
  * Add support for ref parameter to get raw file API (go-gitea#14602)
  * Add affected files of commits to commit struct (go-gitea#14579)
  * Fix CJK fonts again and misc. font issues (go-gitea#14575)
  * Add delete release by tag & delete tag (go-gitea#14563) & (go-gitea#13358)
  * Add pagination to ListBranches (go-gitea#14524)
  * Add signoff option in commit form (go-gitea#14516)
  * GetRelease by tag only return release (go-gitea#14397)
  * Add MirrorInterval to the API (go-gitea#14163)
  * Make BasicAuth Prefix case insensitive (go-gitea#14106)
  * Add user filter to issueTrackedTimes, enable usage for issue managers (go-gitea#14081)
  * Add ref to create/edit issue options & deprecated assignee (go-gitea#13992)
  * Add Ref to Issue (go-gitea#13946)
  * Expose default theme in meta and API (go-gitea#13809)
  * Send error message when CSRF token is missing (go-gitea#13676)
  * List, Check, Add & delete endpoints for repository teams (go-gitea#13630)
  * Admin EditUser: Make FullName, Email, Website & Location optional (go-gitea#13562)
  * Add more filters to issues search (go-gitea#13514)
  * Add review request api (go-gitea#11355)
* BUGFIXES
  * Move setting to enable closing issue via commit in non default branch to repo settings (go-gitea#14965)
  * Show correct issues for team dashboard (go-gitea#14952)
  * Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (go-gitea#14932)
  * Only allow issue labels from owner repository or organization (go-gitea#14928)
  * Fix alignment of People and Teams right arrow on org homepage (go-gitea#14924)
  * Fix overdue marking of closed issues and milestones (go-gitea#14923)
  * Prevent panic when empty MilestoneID in repo/issue/list (go-gitea#14911)
  * Fix migration context data (go-gitea#14910)
  * Handle URLs with trailing slash (go-gitea#14852)
  * Add CORS config on to /login/oauth/access_token endpoint (go-gitea#14850)
  * Make searching issues by keyword case insensitive on DB (go-gitea#14848)
  * Prevent use of double sub-path and incorrect asset path in manifest (go-gitea#14827)
  * Fix link account ui (go-gitea#14763)
  * Fix preview status switch button on wiki editor (go-gitea#14742)
  * Fix github download on migration (go-gitea#14703)
  * Fix svg spacing (go-gitea#14638)
  * Prevent adding nil label to .AddedLabels or .RemovedLabels (go-gitea#14623)
  * Truncated organizations name (go-gitea#14615)
  * Exclude the current dump file from the dump (go-gitea#14606)
  * Use OldRef instead of CommitSHA for DeleteBranch comments (go-gitea#14604)
  * Ensure memcache caching works when TTL greater than 30 days (go-gitea#14592)
  * Remove NULs byte arrays passed to PostProcess (go-gitea#14587)
  * Restore detection of branches are equal on compare page (go-gitea#14586)
  * Fix incorrect key name so registerManualConfirm works (go-gitea#14455)
  * Fix close/reopen with comment (go-gitea#14436)
  * Allow passcode invalid error to appear (go-gitea#14371)
  * Escape branch names in compare url (go-gitea#14364)
  * Label and milestone webhooks on issue/pull creation (go-gitea#14363)
  * Handle NotifyCreateRef as create branch in feeds (go-gitea#14245)
  * Prevent clipping input text in Chrome + Segoe UI Font (go-gitea#14179)
  * Fix UI on edit auth source page (go-gitea#14137)
  * Fix git.parseTagData (go-gitea#14105)
  * Refactor get tag to remove unnecessary steps (go-gitea#14058)
  * Fix integrations test error with space in CURDIR path (go-gitea#14056)
  * Dropdown triangle fixes (go-gitea#14028)
  * Fix label of --id in admin delete user (go-gitea#14005)
  * Cause NotifyMigrateRepository to emit a repo create webhook (go-gitea#14004)
  * Update HEAD to match defaultBranch in template generation (go-gitea#13948)
  * Fix action avatar loading (go-gitea#13909)
  * Fix issue participants (go-gitea#13893)
  * Fix avatar template error (go-gitea#13833)
  * Fix review request notification email links when external issue tracker is enabled (go-gitea#13723)
  * Fix blame line alignment (go-gitea#13542)
  * Include OriginalAuthor in Reaction constraint (go-gitea#13505)
  * Comments on review should have the same sha (go-gitea#13448)
  * Fix whitespace rendering in diff (go-gitea#13415)
  * Fixed git args duplication (go-gitea#13411)
  * Fix bug on release publisherid migrations (go-gitea#13410)
  * Fix --port setting (go-gitea#13288)
  * Keep database transactions not too big (go-gitea#13254)
  * Git version check, ignore pre-releases constraints (go-gitea#13234)
  * Handle and propagate errors when checking if paths are Dirs, Files or Exist (go-gitea#13186)
  * Update Mirror IsEmpty status on synchronize (go-gitea#13185)
  * Use GO variable in go-check target (go-gitea#13146) (go-gitea#13147)
* ENHANCEMENTS
  * UI style improvements
  * Support .mailmap in code activity stats (go-gitea#15009)
  * Sort release attachments by name (go-gitea#15008)
  * Add ui.explore settings to control view of explore pages (go-gitea#14094)
  * Make internal SSH server host key path configurable (go-gitea#14918)
  * Hide resync all ssh principals when using internal ssh server (go-gitea#14904)
  * Add SameSite setting for cookies (go-gitea#14900)
  * Move Bleve and Elastic code indexers to use a common cat-file --batch (go-gitea#14781)
  * Add environment-to-ini to docker image (go-gitea#14762)
  * Add preview support for wiki editor when disable simpleMDE (go-gitea#14757)
  * Add easyMDE(simpleMDE) support for release content editor (go-gitea#14744)
  * Organization removal confirmation using name not password (go-gitea#14738)
  * Make branch names in PR description clickable (go-gitea#14716)
  * Add Password Algorithm option to install page (go-gitea#14701)
  * Add fullTextSearch to dropdowns by default (go-gitea#14694)
  * Fix truncated organization names (go-gitea#14655)
  * Whitespace in commits (go-gitea#14650)
  * Sort / move project boards (go-gitea#14634)
  * Make fileheader sticky in diffs (go-gitea#14616)
  * Add helper descriptions on new repo page (go-gitea#14591)
  * Move the stopwatches to the eventsource stream (go-gitea#14588)
  * Add Content-Length header to HEAD requests (go-gitea#14542)
  * Add Image Diff options in Diff view (go-gitea#14450)
  * Improve Description in new/ edit Project template (go-gitea#14429)
  * Allow ssh-keygen on Windows to detect ssh key type (go-gitea#14413)
  * Display error if twofaSecret cannot be retrieved (go-gitea#14372)
  * Sort issue search results by revelance (go-gitea#14353)
  * Implement ghost comment mitigation (go-gitea#14349)
  * Upgrade blevesearch dependency to v2.0.1 (go-gitea#14346)
  * Add edit, delete and reaction support to code review comments on issue page (go-gitea#14339)
  * Merge default and system webhooks under one menu (go-gitea#14244)
  * Add option for administrator to reset user 2FA (go-gitea#14243)
  * Add option to change username to the admin panel (go-gitea#14229)
  * Check for 'main' as potential default branch name (go-gitea#14193)
  * Project: show referenced PRs in issue cards (go-gitea#14183)
  * Use caddy's certmagic library for extensible/robust ACME handling (go-gitea#14177)
  * CLI support for OAuth sources custom icons (go-gitea#14166)
  * Custom icons for OAuth sources (go-gitea#14161)
  * Team dashboards (go-gitea#14159)
  * KanBan: be able to set default board (go-gitea#14147)
  * Disable Fomantic's custom scrollbars (go-gitea#14109)
  * Add UI to delete tracked times (go-gitea#14100)
  * Rework heatmap permissions (go-gitea#14080)
  * Issue and pull request filters on organization dashboard (go-gitea#14072)
  * Fix webhook list styling (go-gitea#14001)
  * Show dropdown with all statuses for commit (go-gitea#13977)
  * Show status check for merged PRs (go-gitea#13975)
  * Diff stat improvements (go-gitea#13954)
  * Report permissions denied in internal SSH (go-gitea#13953)
  * Markdown task list improvements (go-gitea#13952)
  * Heatmap days clickable (go-gitea#13935)
  * chore: use octicon-mirror for feeds display (go-gitea#13928)
  * Move diff split code into own template file (go-gitea#13919)
  * Markdown: Enable wrapping in code blocks and a color tweak (go-gitea#13894)
  * Do not reload page after adding comments in Pull Request reviews (go-gitea#13877)
  * Add pull request manually merge instruction (go-gitea#13840)
  * add thumbnail preview section to issue attachments (go-gitea#13826)
  * Move Repo APIFormat to convert package (go-gitea#13787)
  * Move notification APIFormat (go-gitea#13783)
  * Swap swagger-ui with swagger-ui-dist (go-gitea#13777)
  * User Settings: Ignore empty language codes & validate (go-gitea#13755)
  * Improve migrate page and add card CSS (go-gitea#13751)
  * Add block on official review requests branch protection (go-gitea#13705)
  * Add review requested filter on pull request overview (go-gitea#13701)
  * Use chronological commit order in default squash message (go-gitea#13696)
  * Clickable links in pull request (and issue) titles (go-gitea#13695)
  * Support shortened commit SHAs in URLs (go-gitea#13686)
  * Use native git variants by default with go-git variants as build tag (go-gitea#13673)
  * Don't render dropdown when only 1 merge style is available (go-gitea#13670)
  * Move webhook type from int to string (go-gitea#13664)
  * Direct avatar rendering (go-gitea#13649)
  * Verify password for local-account activation (go-gitea#13631)
  * Prevent clone protocol button flash on page load (go-gitea#13626)
  * Remove fetch request from heatmap (go-gitea#13623)
  * Refactor combine label comments with tests (go-gitea#13619)
  * Move metrics from macaron to chi (go-gitea#13601)
  * Issue and Pulls lists rework (go-gitea#13594)
  * HTTP cache rework and enable caching for storage assets (go-gitea#13569)
  * Use mount but not register for chi routes (go-gitea#13555)
  * Use monaco for the git hook editor (go-gitea#13552)
  * Make heatmap colors more distinct (go-gitea#13533)
  * Lazy-load issue reviewers and assignees avatars (go-gitea#13526)
  * Change search and filter icons to SVG (go-gitea#13473)
  * Create tag on ui (go-gitea#13467)
  * updateSize when create a repo with init commit (go-gitea#13441)
  * Added title and action buttons to Project view page (go-gitea#13437)
  * Override fomantic monospace fonts and set size (go-gitea#13435)
  * Rework focused comment styling (go-gitea#13434)
  * Tags cleanup (go-gitea#13428)
  * Various style tweaks (go-gitea#13418)
  * Refactor push update (go-gitea#13381)
  * Comment box tweaks and SVG dropdown triangles (go-gitea#13376)
  * Various style fixes (go-gitea#13372)
  * Change repo home page icons to SVG (go-gitea#13364)
  * Use CSS Vars for primary color (go-gitea#13361)
  * Refactor image paste code (go-gitea#13354)
  * Switch from SimpleMDE to EasyMDE (go-gitea#13333)
  * Group Label Changed Comments in timeline (go-gitea#13304)
  * Make the logger an interface (go-gitea#13294)
  * Fix PR/Issue titles on mobile (go-gitea#13292)
  * Rearrange the order of the merged by etc. in locale (go-gitea#13284)
  * Replace footer and modal icons with SVG (go-gitea#13245)
  * Issues overview should not show issues from archived repos (go-gitea#13220)
  * Show stale label for stale code comment which is marked as resolved (go-gitea#13213)
  * Use CSS Variables for fonts, remove postcss-loader (go-gitea#13204)
  * Add mentionable teams to tributeValues and change team mention rules to gh's style (go-gitea#13198)
  * Move install pages out of main macaron routes (go-gitea#13195)
  * Update outdated label to use Fomantic UI style (go-gitea#13181)
  * Added option to disable webhooks (go-gitea#13176)
  * Change order of possible-owner organizations to alphabetical (go-gitea#13160)
  * Log IP on SSH authentication failure for Built-in SSH server (go-gitea#13150)
  * Added option to disable migrations (go-gitea#13114)
  * New "Add Mirror" Button in the Organization view (go-gitea#13105)
  * Manually approve new registration (go-gitea#13083)
  * Cron job to cleanup hook_task table (go-gitea#13080)
  * Use the headline comment of pull-request as the squash commit's message (go-gitea#13071)
  * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (go-gitea#12999)
  * Slightly simplify the queue settings code to help reduce the risk of problems (go-gitea#12976)
  * Add precise search type for Elastic Search (go-gitea#12869)
  * Move APIFormat functions into convert package (go-gitea#12856)
  * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (go-gitea#12766)
  * Add TrN for repository limit (go-gitea#12492)
  * Refactor doctor (go-gitea#12264)
  * Add the tag list page to the release page (go-gitea#12096)
  * Redirect on changed user and org name (go-gitea#11649)
  * load U2F js only on pages which need it (go-gitea#11585)
  * Make archival asynchronous (go-gitea#11296)
  * Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (go-gitea#7420)
  * Improve vfsgen to not unzip bindata files but send to browser directly (go-gitea#7109)
  * Enhance release list (go-gitea#6025)
* DOCS
  * Swagger show models by default (go-gitea#14880)
  * Add missing repo.projects unit into swagger (go-gitea#14876)
  * Update docs and comments to remove macaron (go-gitea#14491)
  * Issue template addition: Are you using Gitea behind CloudFlare? (go-gitea#14098)
  * Generate man pages (go-gitea#13901)
  * Reformat/fine-tune docs (go-gitea#13897)
  * Added Table of Contents to long documentation pages (go-gitea#13890)
  * Add docs command (go-gitea#13429)
  * Update external-renderers.en-us.md (go-gitea#13165)
* MISC
  * Add builds for apple M1 (darwin arm64) (go-gitea#14951)
  * Migrate to use jsoniter instead of encoding/json (go-gitea#14841)
  * Reduce make verbosity (go-gitea#13803)
  * Add git command error directory on log (go-gitea#13194)