Tags: tsufeki/woodpecker
Tags
v2.7.2 - 2024-11-03 To secure your instance, set `WOODPECKER_PLUGINS_PRIVILEGED` to only allow specific versions of the `woodpeckerci/plugin-docker-buildx` plugin, use version 5.0.0 or above. This prevents older, potentially unstable versions from being privileged. For example, to allow only version 5.0.0, use: ```bash WOODPECKER_PLUGINS_PRIVILEGED=woodpeckerci/plugin-docker-buildx:5.0.0 ``` To allow multiple versions, you can separate them with commas: ```bash WOODPECKER_PLUGINS_PRIVILEGED=woodpeckerci/plugin-docker-buildx:5.0.0,woodpeckerci/plugin-docker-buildx:5.1.0 ``` This setup ensures only specified, stable plugin versions are given privileged access. Read more about it in [woodpecker-ci#4213](woodpecker-ci#4213) @6543, @anbraten, @j04n-f, @pat-s, @qwerty287 - Chore(deps): update dependency vite to v5.4.6 [security] ([woodpecker-ci#4163](woodpecker-ci#4163)) [[woodpecker-ci#4187](woodpecker-ci#4187)] - Don't parse forge config files multiple times if no error occured ([woodpecker-ci#4272](woodpecker-ci#4272)) [[woodpecker-ci#4273](woodpecker-ci#4273)] - Fix repo/owner parsing for gitlab ([woodpecker-ci#4255](woodpecker-ci#4255)) [[woodpecker-ci#4261](woodpecker-ci#4261)] - Run queue.process() in background [[woodpecker-ci#4115](woodpecker-ci#4115)] - Only update agent.LastWork if not done recently ([woodpecker-ci#4031](woodpecker-ci#4031)) [[woodpecker-ci#4100](woodpecker-ci#4100)] - Backport JS dependency updates [[woodpecker-ci#4189](woodpecker-ci#4189)] @6543, @anbraten, @j04n-f, @qwerty287 - Lint privileged plugin match and allow to be set empty [[woodpecker-ci#4084](woodpecker-ci#4084)] - Allow admins to specify privileged plugins by name **and tag** [[woodpecker-ci#4076](woodpecker-ci#4076)] - Warn if using secrets/env with plugin [[woodpecker-ci#4039](woodpecker-ci#4039)] - Set refspec for gitlab MR [[woodpecker-ci#4021](woodpecker-ci#4021)] - Change Bitbucket PR hook to point the source branch, commit & ref [[woodpecker-ci#3965](woodpecker-ci#3965)] - Add updated, merged and declined events to bb webhook activation [[woodpecker-ci#3963](woodpecker-ci#3963)] - Fix login via navbar [[woodpecker-ci#3962](woodpecker-ci#3962)] - Fix panic if forge is unreachable [[woodpecker-ci#3944](woodpecker-ci#3944)] - Fix org settings page [[woodpecker-ci#4093](woodpecker-ci#4093)] - Bump github.com/docker/docker from v24.0.9 to v24.0.9+30 [[woodpecker-ci#4077](woodpecker-ci#4077)]
🎉 Release 2.7.1 (woodpecker-ci#4090) Co-authored-by: qwerty287 <[email protected]>
🎉 Release 2.7.0 (woodpecker-ci#3793) ## [2.7.0](https://github.com/woodpecker-ci/woodpecker/releases/tag/v2.7.0) - 2024-07-18 ### 🔒 Security - Add blocklist of environment variables who could alter execution of plugins [[woodpecker-ci#3934](woodpecker-ci#3934)] - Make sure plugins only mount the workspace base in a predefinde location [[woodpecker-ci#3933](woodpecker-ci#3933)] - Disallow to set arbitrary environments for plugins [[woodpecker-ci#3909](woodpecker-ci#3909)] - Use proper oauth state [[woodpecker-ci#3847](woodpecker-ci#3847)] - Enhance token checking [[woodpecker-ci#3842](woodpecker-ci#3842)] - Bump github.com/hashicorp/go-retryablehttp v0.7.5 -> v0.7.7 [[woodpecker-ci#3834](woodpecker-ci#3834)] ### ✨ Features - Gracefully shutdown server [[woodpecker-ci#3896](woodpecker-ci#3896)] - Gracefully shutdown agent [[woodpecker-ci#3895](woodpecker-ci#3895)] - Convert urls in logs to links [[woodpecker-ci#3904](woodpecker-ci#3904)] - Allow login using multiple forges [[woodpecker-ci#3822](woodpecker-ci#3822)] - Global and organization registries [[woodpecker-ci#1672](woodpecker-ci#1672)] - Cli get repo from git remote [[woodpecker-ci#3830](woodpecker-ci#3830)] - Add api for forges [[woodpecker-ci#3733](woodpecker-ci#3733)] ### 📈 Enhancement - Cli fix pipeline logs [[woodpecker-ci#3913](woodpecker-ci#3913)] - Migrate to github.com/urfave/cli/v3 [[woodpecker-ci#2951](woodpecker-ci#2951)] - Allow to change the working directory also for plugins and services [[woodpecker-ci#3914](woodpecker-ci#3914)] - Remove `unplugin-icons` [[woodpecker-ci#3809](woodpecker-ci#3809)] - Release windows binaries as zip file [[woodpecker-ci#3906](woodpecker-ci#3906)] - Convert to openapi 3.0 [[woodpecker-ci#3897](woodpecker-ci#3897)] - Enhance pipeline list [[woodpecker-ci#3898](woodpecker-ci#3898)] - Add user registries UI [[woodpecker-ci#3888](woodpecker-ci#3888)] - Sort users by login [[woodpecker-ci#3891](woodpecker-ci#3891)] - Exclude dummy backend in production [[woodpecker-ci#3877](woodpecker-ci#3877)] - Fix deploy task env [[woodpecker-ci#3878](woodpecker-ci#3878)] - Get default branch and show message in pipeline list [[woodpecker-ci#3867](woodpecker-ci#3867)] - Add timestamp for last work done by agent [[woodpecker-ci#3844](woodpecker-ci#3844)] - Adjust logger types [[woodpecker-ci#3859](woodpecker-ci#3859)] - Cleanup state reporting [[woodpecker-ci#3850](woodpecker-ci#3850)] - Unify DB tables/columns [[woodpecker-ci#3806](woodpecker-ci#3806)] - Let webhook pass on pipeline parsing error [[woodpecker-ci#3829](woodpecker-ci#3829)] - Exclude mocks from release build [[woodpecker-ci#3831](woodpecker-ci#3831)] - K8s secrets reference from step [[woodpecker-ci#3655](woodpecker-ci#3655)] ### 🐛 Bug Fixes - Handle empty repositories in gitea when listing PRs [[woodpecker-ci#3925](woodpecker-ci#3925)] - Update alpine package dep for docker images [[woodpecker-ci#3917](woodpecker-ci#3917)] - Don't report error if agent was terminated gracefully [[woodpecker-ci#3894](woodpecker-ci#3894)] - Let agents continuously report their health [[woodpecker-ci#3893](woodpecker-ci#3893)] - Ignore warnings for cli exec [[woodpecker-ci#3868](woodpecker-ci#3868)] - Correct favicon states [[woodpecker-ci#3832](woodpecker-ci#3832)] - Cleanup of the login flow and tests [[woodpecker-ci#3810](woodpecker-ci#3810)] - Fix newlines in logs [[woodpecker-ci#3808](woodpecker-ci#3808)] - Fix authentication error handling [[woodpecker-ci#3807](woodpecker-ci#3807)] ### 📚 Documentation - Streamline docs for new users [[woodpecker-ci#3803](woodpecker-ci#3803)] - Add mastodon verification [[woodpecker-ci#3843](woodpecker-ci#3843)] - chore(deps): update docs npm deps non-major [[woodpecker-ci#3837](woodpecker-ci#3837)] - fix(deps): update docs npm deps non-major [[woodpecker-ci#3824](woodpecker-ci#3824)] - Add openSUSE package [[woodpecker-ci#3800](woodpecker-ci#3800)] - chore(deps): update docs npm deps non-major [[woodpecker-ci#3798](woodpecker-ci#3798)] - Add "Docker Tags" Plugin [[woodpecker-ci#3796](woodpecker-ci#3796)] - chore(deps): update dependency marked to v13 [[woodpecker-ci#3792](woodpecker-ci#3792)] - chore: fix some comments [[woodpecker-ci#3788](woodpecker-ci#3788)] ### Misc - chore(deps): update web npm deps non-major [[woodpecker-ci#3930](woodpecker-ci#3930)] - chore(deps): update dependency vitest to v2 [[woodpecker-ci#3905](woodpecker-ci#3905)] - fix(deps): update module github.com/google/go-github/v62 to v63 [[woodpecker-ci#3910](woodpecker-ci#3910)] - chore(deps): update docker.io/woodpeckerci/plugin-docker-buildx docker tag to v4.1.0 [[woodpecker-ci#3908](woodpecker-ci#3908)] - Update plugin-git and add renovate trigger [[woodpecker-ci#3901](woodpecker-ci#3901)] - chore(deps): update docker.io/mstruebing/editorconfig-checker docker tag to v3.0.3 [[woodpecker-ci#3903](woodpecker-ci#3903)] - fix(deps): update golang-packages [[woodpecker-ci#3875](woodpecker-ci#3875)] - chore(deps): lock file maintenance [[woodpecker-ci#3876](woodpecker-ci#3876)] - [pre-commit.ci] pre-commit autoupdate [[woodpecker-ci#3862](woodpecker-ci#3862)] - Add dummy backend [[woodpecker-ci#3820](woodpecker-ci#3820)] - chore(deps): update dependency replace-in-file to v8 [[woodpecker-ci#3852](woodpecker-ci#3852)] - Update forgejo sdk [[woodpecker-ci#3840](woodpecker-ci#3840)] - chore(deps): lock file maintenance [[woodpecker-ci#3838](woodpecker-ci#3838)] - Allow to set dist dir using env var [[woodpecker-ci#3814](woodpecker-ci#3814)] - chore(deps): lock file maintenance [[woodpecker-ci#3805](woodpecker-ci#3805)] - chore(deps): update docker.io/lycheeverse/lychee docker tag to v0.15.1 [[woodpecker-ci#3797](woodpecker-ci#3797)]
- Add blocklist of environment variables who could alter execution of… … plugins [[woodpecker-ci#3934](woodpecker-ci#3934)] - Make sure plugins only mount the workspace base in a predefinde location [[woodpecker-ci#3933](woodpecker-ci#3933)] - Disalow to set arbitrary environments for plugins [[woodpecker-ci#3909](woodpecker-ci#3909)] - Bump trivy plugin version and remove unused variable [[woodpecker-ci#3833](woodpecker-ci#3833)] - Let webhook pass on pipeline parsion error [[woodpecker-ci#3829](woodpecker-ci#3829)] - Fix newlines in logs [[woodpecker-ci#3808](woodpecker-ci#3808)]
🎉 Release 2.4.1 (woodpecker-ci#3517) This PR was opened by the [ready-release-go](https://github.com/woodpecker-ci/plugin-ready-release-go) plugin. When you're ready to do a release, you can merge this pull-request and a new release with version `2.4.1` will be created automatically. If you're not ready to do a release yet, that's fine, whenever you add more changes to `main` this pull-request will be updated. ## Options - [ ] Mark this version as a release candidate ## [2.4.1](https://github.com/woodpecker-ci/woodpecker/releases/tag/2.4.1) - 2024-03-20 ### 🔒 Security - Only allow to deploy from push, tag and release [[woodpecker-ci#3522](woodpecker-ci#3522)] ### 🐛 Bug Fixes - Exclude setup from cli command exec. [[woodpecker-ci#3523](woodpecker-ci#3523)] - Fix uppercased env [[woodpecker-ci#3516](woodpecker-ci#3516)] - Fix env schema [[woodpecker-ci#3514](woodpecker-ci#3514)] ### Misc - Temp pin golangci version in makefile [[woodpecker-ci#3520](woodpecker-ci#3520)] --------- Co-authored-by: qwerty287 <[email protected]> Co-authored-by: 6543 <[email protected]>
🎉 Release 2.4.0 (woodpecker-ci#3307) ## [2.4.0](https://github.com/woodpecker-ci/woodpecker/releases/tag/2.4.0) - 2024-03-19 ### 🔒 Security - Improve security context handling [[woodpecker-ci#3482](woodpecker-ci#3482)] - fix(deps): update module github.com/moby/moby to v24.0.9+incompatible [[woodpecker-ci#3323](woodpecker-ci#3323)] ### ✨ Features - Cli setup command [[woodpecker-ci#3384](woodpecker-ci#3384)] - Add bitbucket datacenter (server) support [[woodpecker-ci#2503](woodpecker-ci#2503)] - Cli updater [[woodpecker-ci#3382](woodpecker-ci#3382)] ### 📚 Documentation - Delete docs for v0.15.x [[woodpecker-ci#3508](woodpecker-ci#3508)] - Add deployment plugin [[woodpecker-ci#3495](woodpecker-ci#3495)] - Bump follow-redirects and fix broken anchors [[woodpecker-ci#3488](woodpecker-ci#3488)] - fix: plugin doc page not found [[woodpecker-ci#3480](woodpecker-ci#3480)] - Documentation improvements [[woodpecker-ci#3376](woodpecker-ci#3376)] - fix(deps): update docs npm deps non-major [[woodpecker-ci#3455](woodpecker-ci#3455)] - Add "Sonatype Nexus" plugin [[woodpecker-ci#3446](woodpecker-ci#3446)] - Add blog post [[woodpecker-ci#3439](woodpecker-ci#3439)] - Add "Gradle Wrapper Validation" plugin [[woodpecker-ci#3435](woodpecker-ci#3435)] - Add blog post [[woodpecker-ci#3410](woodpecker-ci#3410)] - Extend core ideas documentation [[woodpecker-ci#3405](woodpecker-ci#3405)] - docs: fix contributions link [[woodpecker-ci#3363](woodpecker-ci#3363)] - Update/fix some docs [[woodpecker-ci#3359](woodpecker-ci#3359)] - chore(deps): update dependency marked to v12 [[woodpecker-ci#3325](woodpecker-ci#3325)] ### 🐛 Bug Fixes - Fix skip setup for some general cli commands [[woodpecker-ci#3498](woodpecker-ci#3498)] - Move generic agent flags to cmd/agent/core [[woodpecker-ci#3484](woodpecker-ci#3484)] - Fix usage of WOODPECKER_DATABASE_DATASOURCE_FILE [[woodpecker-ci#3404](woodpecker-ci#3404)] - Set pull-request id and labels on pr-closed event [[woodpecker-ci#3442](woodpecker-ci#3442)] - Update org name on login [[woodpecker-ci#3409](woodpecker-ci#3409)] - Do not alter secret key upper-/lowercase [[woodpecker-ci#3375](woodpecker-ci#3375)] - fix: can't run multiple services on k8s [[woodpecker-ci#3395](woodpecker-ci#3395)] - Fix agent polling [[woodpecker-ci#3378](woodpecker-ci#3378)] - Remove empty strings from slice before parsing agent config [[woodpecker-ci#3387](woodpecker-ci#3387)] - Set correct link for commit [[woodpecker-ci#3368](woodpecker-ci#3368)] - Fix schema links [[woodpecker-ci#3369](woodpecker-ci#3369)] - Fix correctly handle gitlab pr closed events [[woodpecker-ci#3362](woodpecker-ci#3362)] - fix: update schema event_enum to remove error warning when.event [[woodpecker-ci#3357](woodpecker-ci#3357)] - Fix version check on next [[woodpecker-ci#3340](woodpecker-ci#3340)] - Ignore gitlab merge request events without code changes [[woodpecker-ci#3338](woodpecker-ci#3338)] - Ignore gitlab push events without commits [[woodpecker-ci#3339](woodpecker-ci#3339)] - Consider gitlab inherited permissions [[woodpecker-ci#3308](woodpecker-ci#3308)] - fix: agent panic when node is terminated during step execution [[woodpecker-ci#3331](woodpecker-ci#3331)] ### 📈 Enhancement - Enable golangci linter gomnd [[woodpecker-ci#3171](woodpecker-ci#3171)] - Apply "grpcnotrace" go build tag [[woodpecker-ci#3448](woodpecker-ci#3448)] - Simplify store interfaces [[woodpecker-ci#3437](woodpecker-ci#3437)] - Deprecate alternative names on secrets [[woodpecker-ci#3406](woodpecker-ci#3406)] - Store workflows/steps for blocked pipeline [[woodpecker-ci#2757](woodpecker-ci#2757)] - Parse email from Gitea webhook [[woodpecker-ci#3420](woodpecker-ci#3420)] - Replace http types on forge interface [[woodpecker-ci#3374](woodpecker-ci#3374)] - Prevent agent deletion when it's still running tasks [[woodpecker-ci#3377](woodpecker-ci#3377)] - Refactor internal services [[woodpecker-ci#915](woodpecker-ci#915)] - Lint for event filter and deprecate `exclude` [[woodpecker-ci#3222](woodpecker-ci#3222)] - Allow editing all environment variables in pipeline popups [[woodpecker-ci#3314](woodpecker-ci#3314)] - Parse backend options in backend [[woodpecker-ci#3227](woodpecker-ci#3227)] - Make agent usable for external backends [[woodpecker-ci#3270](woodpecker-ci#3270)] - Add no branches text [[woodpecker-ci#3312](woodpecker-ci#3312)] - Add loading spinner to repo list [[woodpecker-ci#3310](woodpecker-ci#3310)] ### Misc - Post on mastodon when releasing a new version [[woodpecker-ci#3509](woodpecker-ci#3509)] - chore(deps): update dependency alpine_3_18/ca-certificates to v20240226 [[woodpecker-ci#3501](woodpecker-ci#3501)] - fix(deps): update module github.com/google/go-github/v59 to v60 [[woodpecker-ci#3493](woodpecker-ci#3493)] - fix(deps): update dependency @intlify/unplugin-vue-i18n to v3 [[woodpecker-ci#3492](woodpecker-ci#3492)] - chore(deps): update dependency vue-tsc to v2 [[woodpecker-ci#3491](woodpecker-ci#3491)] - chore(deps): update dependency eslint-config-airbnb-typescript to v18 [[woodpecker-ci#3490](woodpecker-ci#3490)] - chore(deps): update web npm deps non-major [[woodpecker-ci#3489](woodpecker-ci#3489)] - fix(deps): update golang (packages) [[woodpecker-ci#3486](woodpecker-ci#3486)] - fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] [[woodpecker-ci#3487](woodpecker-ci#3487)] - chore(deps): update docker.io/techknowlogick/xgo docker tag to go-1.22.1 [[woodpecker-ci#3476](woodpecker-ci#3476)] - chore(deps): update docker.io/golang docker tag to v1.22.1 [[woodpecker-ci#3475](woodpecker-ci#3475)] - Update prettier version [[woodpecker-ci#3471](woodpecker-ci#3471)] - chore(deps): update woodpeckerci/plugin-ready-release-go docker tag to v1.1.0 [[woodpecker-ci#3464](woodpecker-ci#3464)] - chore(deps): lock file maintenance [[woodpecker-ci#3465](woodpecker-ci#3465)] - chore(deps): update postgres docker tag to v16.2 [[woodpecker-ci#3461](woodpecker-ci#3461)] - chore(deps): update lycheeverse/lychee docker tag to v0.14.3 [[woodpecker-ci#3429](woodpecker-ci#3429)] - fix(deps): update golang (packages) [[woodpecker-ci#3430](woodpecker-ci#3430)] - More `when` filters [[woodpecker-ci#3407](woodpecker-ci#3407)] - Apply `documentation`/`ui` label to corresponding renovate updates [[woodpecker-ci#3400](woodpecker-ci#3400)] - chore(deps): update dependency eslint-plugin-simple-import-sort to v12 [[woodpecker-ci#3396](woodpecker-ci#3396)] - chore(deps): update typescript-eslint monorepo to v7 (major) [[woodpecker-ci#3397](woodpecker-ci#3397)] - fix(deps): update module github.com/google/go-github/v58 to v59 [[woodpecker-ci#3398](woodpecker-ci#3398)] - chore(deps): update docker.io/techknowlogick/xgo docker tag to go-1.22.0 [[woodpecker-ci#3392](woodpecker-ci#3392)] - chore(deps): update docker.io/golang docker tag [[woodpecker-ci#3391](woodpecker-ci#3391)] - fix(deps): update golang (packages) [[woodpecker-ci#3393](woodpecker-ci#3393)] - chore(deps): update docker.io/woodpeckerci/plugin-docker-buildx docker tag to v3.1.0 [[woodpecker-ci#3394](woodpecker-ci#3394)] - Add link checking [[woodpecker-ci#3371](woodpecker-ci#3371)] - Apply `dependencies` label to all PRs [[woodpecker-ci#3358](woodpecker-ci#3358)] - chore(deps): update docker.io/woodpeckerci/plugin-docker-buildx docker tag to v3.0.1 [[woodpecker-ci#3324](woodpecker-ci#3324)] --------- Co-authored-by: 6543 <[email protected]> Co-authored-by: Anbraten <[email protected]>
PreviousNext