v1.14.1

* BUGFIXES
  * Fix bug clone wiki (go-gitea#15499) (go-gitea#15502)
  * Github Migration ignore rate limit, if not enabled (go-gitea#15490) (go-gitea#15495)
  * Use subdir for URL (go-gitea#15446) (go-gitea#15493)
  * Query the DB for the hash before inserting in to email_hash (go-gitea#15457) (go-gitea#15491)
  * Ensure review dismissal only dismisses the correct review (go-gitea#15477) (go-gitea#15489)
  * Use index of the supported tags to choose user lang (go-gitea#15452) (go-gitea#15488)
  * Fix wrong file link in code search page (go-gitea#15466) (go-gitea#15486)
  * Quick template fix for built-in SSH server in admin config (go-gitea#15464) (go-gitea#15481)
  * Prevent superfluous response.WriteHeader (go-gitea#15456) (go-gitea#15476)
  * Fix ambiguous argument error on tags (go-gitea#15432) (go-gitea#15474)
  * Add created_unix instead of expiry to migration (go-gitea#15458) (go-gitea#15463)
  * Fix repository search (go-gitea#15428) (go-gitea#15442)
  * Prevent NPE on avatar direct rendering if federated avatars disabled (go-gitea#15434) (go-gitea#15439)
  * Fix wiki clone urls (go-gitea#15430) (go-gitea#15431)
  * Fix dingtalk icon url at webhook (go-gitea#15417) (go-gitea#15426)
  * Standardise icon on projects PR page (go-gitea#15387) (go-gitea#15408)
* ENHANCEMENTS
  * Add option to skip LFS/attachment files for `dump` (go-gitea#15407) (go-gitea#15492)
  * Clone panel fixes (go-gitea#15436)
  * Use semantic dropdown for code search query type (go-gitea#15276) (go-gitea#15364)
* BUILD
  * Build go-git variants for windows (go-gitea#15482) (go-gitea#15487)
  * Lock down build-images dependencies (Partial go-gitea#15479) (go-gitea#15480)
* MISC
  * Performance improvement for list pull requests (go-gitea#15447) (go-gitea#15500)
  * Fix potential copy lfs records failure when fork a repository (go-gitea#15441) (go-gitea#15485)

v1.14.0

* SECURITY
  * Respect approved email domain list for externally validated user registration (go-gitea#15014)
  * Add reverse proxy configuration support for remote IP address detection (go-gitea#14959)
  * Ensure validation occurs on clone addresses too (go-gitea#14994)
* BREAKING
  * Fix double 'push tag' action feed (go-gitea#15078) (go-gitea#15083)
  * Remove possible resource leak (go-gitea#15067) (go-gitea#15082)
  * Handle unauthorized user events gracefully (go-gitea#15071) (go-gitea#15074)
  * Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (go-gitea#14475)
  * Migrate from Macaron to Chi framework (go-gitea#14293)
  * Deprecate building for mips (go-gitea#14174)
  * Consolidate Logos and update README header (go-gitea#14136)
  * Inline manifest.json (go-gitea#14038)
  * Store repository data in data path if not previously set (go-gitea#13991)
  * Rename "gitea" png to "logo" (go-gitea#13974)
  * Standardise logging of failed authentication attempts in internal SSH (go-gitea#13962)
  * Add markdown support in organization description (go-gitea#13549)
  * Improve users management through the CLI (go-gitea#6001) (go-gitea#10492)
* FEATURES
  * Create a new issue with reference to lines of code from file view (go-gitea#14863)
  * Repository transfer has to be confirmed, if user can not create repo for new owner (go-gitea#14792)
  * Allow blocking some email domains from registering an account (go-gitea#14667)
  * Create a new issue based on reference to an issue comment (go-gitea#14366)
  * Add support to migrate from gogs (go-gitea#14342)
  * Add pager to the branches page (go-gitea#14202)
  * Minimal OpenID Connect implementation (go-gitea#14139)
  * Display current stopwatch in navbar (go-gitea#14122)
  * Display SVG files as images instead of text (go-gitea#14101)
  * Disable SSH key deletion of externally managed Keys (go-gitea#13985)
  * Add support for ed25519_sk and ecdsa_sk SSH keys (go-gitea#13462)
  * Add support for Mastodon OAuth2 provider (go-gitea#13293)
  * Add gitea sendmail command (go-gitea#13079)
  * Create DB session provider(based on xorm) (go-gitea#13031)
  * Add dismiss review feature (go-gitea#12674)
  * Make manual merge autodetection optional and add manual merge as merge method (go-gitea#12543)
  * Dump github/gitlab/gitea repository data to a local directory and restore to gitea (go-gitea#12244)
  * Create Rootless Docker image (go-gitea#10154)
* API
  * Speedup issue search (go-gitea#15179) (go-gitea#15192)
  * Get pull, return head branch sha, even if deleted (go-gitea#14931)
  * Export LFS & TimeTracking function status (go-gitea#14753)
  * Show Gitea version in swagger (go-gitea#14654)
  * Fix PATCH /repos/{owner}/{repo} panic (go-gitea#14637)
  * Add Restricted Field to User (go-gitea#14630)
  * Add support for ref parameter to get raw file API (go-gitea#14602)
  * Add affected files of commits to commit struct (go-gitea#14579)
  * Fix CJK fonts again and misc. font issues (go-gitea#14575)
  * Add delete release by tag & delete tag (go-gitea#14563) & (go-gitea#13358)
  * Add pagination to ListBranches (go-gitea#14524)
  * Add signoff option in commit form (go-gitea#14516)
  * GetRelease by tag only return release (go-gitea#14397)
  * Add MirrorInterval to the API (go-gitea#14163)
  * Make BasicAuth Prefix case insensitive (go-gitea#14106)
  * Add user filter to issueTrackedTimes, enable usage for issue managers (go-gitea#14081)
  * Add ref to create/edit issue options & deprecated assignee (go-gitea#13992)
  * Add Ref to Issue (go-gitea#13946)
  * Expose default theme in meta and API (go-gitea#13809)
  * Send error message when CSRF token is missing (go-gitea#13676)
  * List, Check, Add & delete endpoints for repository teams (go-gitea#13630)
  * Admin EditUser: Make FullName, Email, Website & Location optional (go-gitea#13562)
  * Add more filters to issues search (go-gitea#13514)
  * Add review request api (go-gitea#11355)
* BUGFIXES
  * Fix delete nonexist oauth application 500 and prevent deadlock (go-gitea#15384) (go-gitea#15396)
  * Always set the merge base used to merge the commit (go-gitea#15352) (go-gitea#15385)
  * Upgrade to bluemonday 1.0.7 (go-gitea#15379) (go-gitea#15380)
  * Turn RepoRef and RepoAssignment back into func(*Context) (go-gitea#15372) (go-gitea#15377)
  * Move FCGI req.URL.Path fix-up to the FCGI listener (go-gitea#15292) (go-gitea#15361)
  * Show diff on rename with diff changes (go-gitea#15338) (go-gitea#15339)
  * Fix handling of logout event (go-gitea#15323) (go-gitea#15337)
  * Fix CanCreateRepo check (go-gitea#15311) (go-gitea#15321)
  * Fix xorm log stack level (go-gitea#15285) (go-gitea#15316)
  * Fix bug in Wrap (go-gitea#15302) (go-gitea#15309)
  * Drop the event source if we are unauthorized (go-gitea#15275) (go-gitea#15280)
  * Backport Fix graph pagination (go-gitea#15225)  (go-gitea#15249)
  * Prevent NPE in CommentMustAsDiff if no hunk header (go-gitea#15199) (go-gitea#15200)
  * should run RetrieveRepoMetas() for empty pr (go-gitea#15187) (go-gitea#15190)
  * Move setting to enable closing issue via commit in non default branch to repo settings (go-gitea#14965)
  * Show correct issues for team dashboard (go-gitea#14952)
  * Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (go-gitea#14932)
  * Only allow issue labels from owner repository or organization (go-gitea#14928)
  * Fix alignment of People and Teams right arrow on org homepage (go-gitea#14924)
  * Fix overdue marking of closed issues and milestones (go-gitea#14923)
  * Prevent panic when empty MilestoneID in repo/issue/list (go-gitea#14911)
  * Fix migration context data (go-gitea#14910)
  * Handle URLs with trailing slash (go-gitea#14852)
  * Add CORS config on to /login/oauth/access_token endpoint (go-gitea#14850)
  * Make searching issues by keyword case insensitive on DB (go-gitea#14848)
  * Prevent use of double sub-path and incorrect asset path in manifest (go-gitea#14827)
  * Fix link account ui (go-gitea#14763)
  * Fix preview status switch button on wiki editor (go-gitea#14742)
  * Fix github download on migration (go-gitea#14703)
  * Fix svg spacing (go-gitea#14638)
  * Prevent adding nil label to .AddedLabels or .RemovedLabels (go-gitea#14623)
  * Truncated organizations name (go-gitea#14615)
  * Exclude the current dump file from the dump (go-gitea#14606)
  * Use OldRef instead of CommitSHA for DeleteBranch comments (go-gitea#14604)
  * Ensure memcache caching works when TTL greater than 30 days (go-gitea#14592)
  * Remove NULs byte arrays passed to PostProcess (go-gitea#14587)
  * Restore detection of branches are equal on compare page (go-gitea#14586)
  * Fix incorrect key name so registerManualConfirm works (go-gitea#14455)
  * Fix close/reopen with comment (go-gitea#14436)
  * Allow passcode invalid error to appear (go-gitea#14371)
  * Escape branch names in compare url (go-gitea#14364)
  * Label and milestone webhooks on issue/pull creation (go-gitea#14363)
  * Handle NotifyCreateRef as create branch in feeds (go-gitea#14245)
  * Prevent clipping input text in Chrome + Segoe UI Font (go-gitea#14179)
  * Fix UI on edit auth source page (go-gitea#14137)
  * Fix git.parseTagData (go-gitea#14105)
  * Refactor get tag to remove unnecessary steps (go-gitea#14058)
  * Fix integrations test error with space in CURDIR path (go-gitea#14056)
  * Dropdown triangle fixes (go-gitea#14028)
  * Fix label of --id in admin delete user (go-gitea#14005)
  * Cause NotifyMigrateRepository to emit a repo create webhook (go-gitea#14004)
  * Update HEAD to match defaultBranch in template generation (go-gitea#13948)
  * Fix action avatar loading (go-gitea#13909)
  * Fix issue participants (go-gitea#13893)
  * Fix avatar template error (go-gitea#13833)
  * Fix review request notification email links when external issue tracker is enabled (go-gitea#13723)
  * Fix blame line alignment (go-gitea#13542)
  * Include OriginalAuthor in Reaction constraint (go-gitea#13505)
  * Comments on review should have the same sha (go-gitea#13448)
  * Fix whitespace rendering in diff (go-gitea#13415)
  * Fixed git args duplication (go-gitea#13411)
  * Fix bug on release publisherid migrations (go-gitea#13410)
  * Fix --port setting (go-gitea#13288)
  * Keep database transactions not too big (go-gitea#13254)
  * Git version check, ignore pre-releases constraints (go-gitea#13234)
  * Handle and propagate errors when checking if paths are Dirs, Files or Exist (go-gitea#13186)
  * Update Mirror IsEmpty status on synchronize (go-gitea#13185)
  * Use GO variable in go-check target (go-gitea#13146) (go-gitea#13147)
* ENHANCEMENTS
  * UI style improvements
  * Dropzone styling improvements (go-gitea#15291) (go-gitea#15374)
  * Add size to Save function (go-gitea#15264) (go-gitea#15270)
  * Monaco improvements (go-gitea#15333) (go-gitea#15345)
  * Support .mailmap in code activity stats (go-gitea#15009)
  * Sort release attachments by name (go-gitea#15008)
  * Add ui.explore settings to control view of explore pages (go-gitea#14094)
  * Make internal SSH server host key path configurable (go-gitea#14918)
  * Hide resync all ssh principals when using internal ssh server (go-gitea#14904)
  * Add SameSite setting for cookies (go-gitea#14900)
  * Move Bleve and Elastic code indexers to use a common cat-file --batch (go-gitea#14781)
  * Add environment-to-ini to docker image (go-gitea#14762)
  * Add preview support for wiki editor when disable simpleMDE (go-gitea#14757)
  * Add easyMDE(simpleMDE) support for release content editor (go-gitea#14744)
  * Organization removal confirmation using name not password (go-gitea#14738)
  * Make branch names in PR description clickable (go-gitea#14716)
  * Add Password Algorithm option to install page (go-gitea#14701)
  * Add fullTextSearch to dropdowns by default (go-gitea#14694)
  * Fix truncated organization names (go-gitea#14655)
  * Whitespace in commits (go-gitea#14650)
  * Sort / move project boards (go-gitea#14634)
  * Make fileheader sticky in diffs (go-gitea#14616)
  * Add helper descriptions on new repo page (go-gitea#14591)
  * Move the stopwatches to the eventsource stream (go-gitea#14588)
  * Add Content-Length header to HEAD requests (go-gitea#14542)
  * Add Image Diff options in Diff view (go-gitea#14450)
  * Improve Description in new/ edit Project template (go-gitea#14429)
  * Allow ssh-keygen on Windows to detect ssh key type (go-gitea#14413)
  * Display error if twofaSecret cannot be retrieved (go-gitea#14372)
  * Sort issue search results by revelance (go-gitea#14353)
  * Implement ghost comment mitigation (go-gitea#14349)
  * Upgrade blevesearch dependency to v2.0.1 (go-gitea#14346)
  * Add edit, delete and reaction support to code review comments on issue page (go-gitea#14339)
  * Merge default and system webhooks under one menu (go-gitea#14244)
  * Add option for administrator to reset user 2FA (go-gitea#14243)
  * Add option to change username to the admin panel (go-gitea#14229)
  * Check for 'main' as potential default branch name (go-gitea#14193)
  * Project: show referenced PRs in issue cards (go-gitea#14183)
  * Use caddy's certmagic library for extensible/robust ACME handling (go-gitea#14177)
  * CLI support for OAuth sources custom icons (go-gitea#14166)
  * Custom icons for OAuth sources (go-gitea#14161)
  * Team dashboards (go-gitea#14159)
  * KanBan: be able to set default board (go-gitea#14147)
  * Disable Fomantic's custom scrollbars (go-gitea#14109)
  * Add UI to delete tracked times (go-gitea#14100)
  * Rework heatmap permissions (go-gitea#14080)
  * Issue and pull request filters on organization dashboard (go-gitea#14072)
  * Fix webhook list styling (go-gitea#14001)
  * Show dropdown with all statuses for commit (go-gitea#13977)
  * Show status check for merged PRs (go-gitea#13975)
  * Diff stat improvements (go-gitea#13954)
  * Report permissions denied in internal SSH (go-gitea#13953)
  * Markdown task list improvements (go-gitea#13952)
  * Heatmap days clickable (go-gitea#13935)
  * chore: use octicon-mirror for feeds display (go-gitea#13928)
  * Move diff split code into own template file (go-gitea#13919)
  * Markdown: Enable wrapping in code blocks and a color tweak (go-gitea#13894)
  * Do not reload page after adding comments in Pull Request reviews (go-gitea#13877)
  * Add pull request manually merge instruction (go-gitea#13840)
  * add thumbnail preview section to issue attachments (go-gitea#13826)
  * Move Repo APIFormat to convert package (go-gitea#13787)
  * Move notification APIFormat (go-gitea#13783)
  * Swap swagger-ui with swagger-ui-dist (go-gitea#13777)
  * User Settings: Ignore empty language codes & validate (go-gitea#13755)
  * Improve migrate page and add card CSS (go-gitea#13751)
  * Add block on official review requests branch protection (go-gitea#13705)
  * Add review requested filter on pull request overview (go-gitea#13701)
  * Use chronological commit order in default squash message (go-gitea#13696)
  * Clickable links in pull request (and issue) titles (go-gitea#13695)
  * Support shortened commit SHAs in URLs (go-gitea#13686)
  * Use native git variants by default with go-git variants as build tag (go-gitea#13673)
  * Don't render dropdown when only 1 merge style is available (go-gitea#13670)
  * Move webhook type from int to string (go-gitea#13664)
  * Direct avatar rendering (go-gitea#13649)
  * Verify password for local-account activation (go-gitea#13631)
  * Prevent clone protocol button flash on page load (go-gitea#13626)
  * Remove fetch request from heatmap (go-gitea#13623)
  * Refactor combine label comments with tests (go-gitea#13619)
  * Move metrics from macaron to chi (go-gitea#13601)
  * Issue and Pulls lists rework (go-gitea#13594)
  * HTTP cache rework and enable caching for storage assets (go-gitea#13569)
  * Use mount but not register for chi routes (go-gitea#13555)
  * Use monaco for the git hook editor (go-gitea#13552)
  * Make heatmap colors more distinct (go-gitea#13533)
  * Lazy-load issue reviewers and assignees avatars (go-gitea#13526)
  * Change search and filter icons to SVG (go-gitea#13473)
  * Create tag on ui (go-gitea#13467)
  * updateSize when create a repo with init commit (go-gitea#13441)
  * Added title and action buttons to Project view page (go-gitea#13437)
  * Override fomantic monospace fonts and set size (go-gitea#13435)
  * Rework focused comment styling (go-gitea#13434)
  * Tags cleanup (go-gitea#13428)
  * Various style tweaks (go-gitea#13418)
  * Refactor push update (go-gitea#13381)
  * Comment box tweaks and SVG dropdown triangles (go-gitea#13376)
  * Various style fixes (go-gitea#13372)
  * Change repo home page icons to SVG (go-gitea#13364)
  * Use CSS Vars for primary color (go-gitea#13361)
  * Refactor image paste code (go-gitea#13354)
  * Switch from SimpleMDE to EasyMDE (go-gitea#13333)
  * Group Label Changed Comments in timeline (go-gitea#13304)
  * Make the logger an interface (go-gitea#13294)
  * Fix PR/Issue titles on mobile (go-gitea#13292)
  * Rearrange the order of the merged by etc. in locale (go-gitea#13284)
  * Replace footer and modal icons with SVG (go-gitea#13245)
  * Issues overview should not show issues from archived repos (go-gitea#13220)
  * Show stale label for stale code comment which is marked as resolved (go-gitea#13213)
  * Use CSS Variables for fonts, remove postcss-loader (go-gitea#13204)
  * Add mentionable teams to tributeValues and change team mention rules to gh's style (go-gitea#13198)
  * Move install pages out of main macaron routes (go-gitea#13195)
  * Update outdated label to use Fomantic UI style (go-gitea#13181)
  * Added option to disable webhooks (go-gitea#13176)
  * Change order of possible-owner organizations to alphabetical (go-gitea#13160)
  * Log IP on SSH authentication failure for Built-in SSH server (go-gitea#13150)
  * Added option to disable migrations (go-gitea#13114)
  * New "Add Mirror" Button in the Organization view (go-gitea#13105)
  * Manually approve new registration (go-gitea#13083)
  * Cron job to cleanup hook_task table (go-gitea#13080)
  * Use the headline comment of pull-request as the squash commit's message (go-gitea#13071)
  * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (go-gitea#12999)
  * Slightly simplify the queue settings code to help reduce the risk of problems (go-gitea#12976)
  * Add precise search type for Elastic Search (go-gitea#12869)
  * Move APIFormat functions into convert package (go-gitea#12856)
  * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (go-gitea#12766)
  * Add TrN for repository limit (go-gitea#12492)
  * Refactor doctor (go-gitea#12264)
  * Add the tag list page to the release page (go-gitea#12096)
  * Redirect on changed user and org name (go-gitea#11649)
  * load U2F js only on pages which need it (go-gitea#11585)
  * Make archival asynchronous (go-gitea#11296)
  * Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (go-gitea#7420)
  * Improve vfsgen to not unzip bindata files but send to browser directly (go-gitea#7109)
  * Enhance release list (go-gitea#6025)
* DOCS
  * Swagger show models by default (go-gitea#14880)
  * Add missing repo.projects unit into swagger (go-gitea#14876)
  * Update docs and comments to remove macaron (go-gitea#14491)
  * Issue template addition: Are you using Gitea behind CloudFlare? (go-gitea#14098)
  * Generate man pages (go-gitea#13901)
  * Reformat/fine-tune docs (go-gitea#13897)
  * Added Table of Contents to long documentation pages (go-gitea#13890)
  * Add docs command (go-gitea#13429)
  * Update external-renderers.en-us.md (go-gitea#13165)
* MISC
  * Add builds for apple M1 (darwin arm64) (go-gitea#14951)
  * Migrate to use jsoniter instead of encoding/json (go-gitea#14841)
  * Reduce make verbosity (go-gitea#13803)
  * Add git command error directory on log (go-gitea#13194)

v1.13.7

* SECURITY
  * Update to bluemonday-1.0.6 (go-gitea#15294) (go-gitea#15298)
  * Clusterfuzz found another way (go-gitea#15160) (go-gitea#15169)
* API
  * Fix wrong user returned in API (go-gitea#15139) (go-gitea#15150)
* BUGFIXES
  * Add 'fonts' into 'KnownPublicEntries' (go-gitea#15188) (go-gitea#15317)
  * Speed up `enry.IsVendor` (go-gitea#15213) (go-gitea#15246)
  * Response 404 for diff/patch of a commit that not exist (go-gitea#15221) (go-gitea#15238)
  * Prevent NPE in CommentMustAsDiff if no hunk header (go-gitea#15199) (go-gitea#15201)
* MISC
  * Add size to Save function (go-gitea#15264) (go-gitea#15271)

v1.14.0-rc2

* SECURITY
  * Fix bug on avatar middleware (go-gitea#15124) (go-gitea#15125)
  * Fix another clusterfuzz identified issue (go-gitea#15096) (go-gitea#15113)
  * Update to goldmark 1.3.3 (go-gitea#15059) (go-gitea#15060)
* BUGFIXES
  * Fix the v176 migration (go-gitea#15110) (go-gitea#15111)
  * Fix double 'push tag' action feed (go-gitea#15078) (go-gitea#15083)
  * Remove possible resource leak (go-gitea#15067) (go-gitea#15082)
  * Handle unauthorized user events gracefully (go-gitea#15071) (go-gitea#15074)

v1.13.6

* SECURITY
  * Fix bug on avatar middleware (go-gitea#15124) (go-gitea#15125)
  * Fix another clusterfuzz identified issue (go-gitea#15096) (go-gitea#15114)
* API
  * Fix nil exeption for get pull reviews API go-gitea#15104 (go-gitea#15106)
* BUGFIXES
  * Fix markdown rendering in milestone content (go-gitea#15056) (go-gitea#15092)

v1.13.5

* SECURITY
  * Update to goldmark 1.3.3 (go-gitea#15059) (go-gitea#15061)
* API
  * Fix set milestone on PR creation (go-gitea#14981) (go-gitea#15001)
  * Prevent panic when editing forked repos by API (go-gitea#14960) (go-gitea#14963)
* BUGFIXES
  * Fix bug when upload on web (go-gitea#15042) (go-gitea#15055)
  * Delete Labels & IssueLabels on Repo Delete too (go-gitea#15039) (go-gitea#15051)
  * another clusterfuzz spotted issue (go-gitea#15032) (go-gitea#15034)
  * Fix postgres ID sequences broken by recreate-table (go-gitea#15015) (go-gitea#15029)
  * Fix several render issues (go-gitea#14986) (go-gitea#15013)
  * Make sure sibling images get a link too (go-gitea#14979) (go-gitea#14995)
  * Fix Anchor jumping with escaped query components (go-gitea#14969) (go-gitea#14977)
  * fix release mail html template (go-gitea#14976)
  * Fix excluding more than two labels on issues list (go-gitea#14962) (go-gitea#14973)
  * don't mark each comment poster as OP (go-gitea#14971) (go-gitea#14972)
  * Add "captcha" to list of reserved usernames (go-gitea#14930)
  * Re-enable import local paths after reversion from go-gitea#13610 (go-gitea#14925) (go-gitea#14927)

* SECURITY

  * Respect approved email domain list for externally validated user registration (go-gitea#15014)
  * Add reverse proxy configuration support for remote IP address detection (go-gitea#14959)
  * Ensure validation occurs on clone addresses too (go-gitea#14994)
* BREAKING
  * Restore Access.log following migration to Chi framework (Stops access logging of /api/internal routes) (go-gitea#14475)
  * Migrate from Macaron to Chi framework (go-gitea#14293)
  * Deprecate building for mips (go-gitea#14174)
  * Consolidate Logos and update README header (go-gitea#14136)
  * Inline manifest.json (go-gitea#14038)
  * Store repository data in data path if not previously set (go-gitea#13991)
  * Rename "gitea" png to "logo" (go-gitea#13974)
  * Standardise logging of failed authentication attempts in internal SSH (go-gitea#13962)
  * Add markdown support in organization description (go-gitea#13549)
  * Improve users management through the CLI (go-gitea#6001) (go-gitea#10492)
* FEATURES
  * Create a new issue with reference to lines of code from file view (go-gitea#14863)
  * Repository transfer has to be confirmed, if user can not create repo for new owner (go-gitea#14792)
  * Allow blocking some email domains from registering an account (go-gitea#14667)
  * Create a new issue based on reference to an issue comment (go-gitea#14366)
  * Add support to migrate from gogs (go-gitea#14342)
  * Add pager to the branches page (go-gitea#14202)
  * Minimal OpenID Connect implementation (go-gitea#14139)
  * Display current stopwatch in navbar (go-gitea#14122)
  * Display SVG files as images instead of text (go-gitea#14101)
  * Disable SSH key deletion of externally managed Keys (go-gitea#13985)
  * Add support for ed25519_sk and ecdsa_sk SSH keys (go-gitea#13462)
  * Add support for Mastodon OAuth2 provider (go-gitea#13293)
  * Add gitea sendmail command (go-gitea#13079)
  * Create DB session provider(based on xorm) (go-gitea#13031)
  * Add dismiss review feature (go-gitea#12674)
  * Make manual merge autodetection optional and add manual merge as merge method (go-gitea#12543)
  * Dump github/gitlab/gitea repository data to a local directory and restore to gitea (go-gitea#12244)
  * Create Rootless Docker image (go-gitea#10154)
* API
  * Get pull, return head branch sha, even if deleted (go-gitea#14931)
  * Export LFS & TimeTracking function status (go-gitea#14753)
  * Show Gitea version in swagger (go-gitea#14654)
  * Fix PATCH /repos/{owner}/{repo} panic (go-gitea#14637)
  * Add Restricted Field to User (go-gitea#14630)
  * Add support for ref parameter to get raw file API (go-gitea#14602)
  * Add affected files of commits to commit struct (go-gitea#14579)
  * Fix CJK fonts again and misc. font issues (go-gitea#14575)
  * Add delete release by tag & delete tag (go-gitea#14563) & (go-gitea#13358)
  * Add pagination to ListBranches (go-gitea#14524)
  * Add signoff option in commit form (go-gitea#14516)
  * GetRelease by tag only return release (go-gitea#14397)
  * Add MirrorInterval to the API (go-gitea#14163)
  * Make BasicAuth Prefix case insensitive (go-gitea#14106)
  * Add user filter to issueTrackedTimes, enable usage for issue managers (go-gitea#14081)
  * Add ref to create/edit issue options & deprecated assignee (go-gitea#13992)
  * Add Ref to Issue (go-gitea#13946)
  * Expose default theme in meta and API (go-gitea#13809)
  * Send error message when CSRF token is missing (go-gitea#13676)
  * List, Check, Add & delete endpoints for repository teams (go-gitea#13630)
  * Admin EditUser: Make FullName, Email, Website & Location optional (go-gitea#13562)
  * Add more filters to issues search (go-gitea#13514)
  * Add review request api (go-gitea#11355)
* BUGFIXES
  * Move setting to enable closing issue via commit in non default branch to repo settings (go-gitea#14965)
  * Show correct issues for team dashboard (go-gitea#14952)
  * Ensure that new pull request button works on forked forks owned by owner of the root and reduce ambiguity (go-gitea#14932)
  * Only allow issue labels from owner repository or organization (go-gitea#14928)
  * Fix alignment of People and Teams right arrow on org homepage (go-gitea#14924)
  * Fix overdue marking of closed issues and milestones (go-gitea#14923)
  * Prevent panic when empty MilestoneID in repo/issue/list (go-gitea#14911)
  * Fix migration context data (go-gitea#14910)
  * Handle URLs with trailing slash (go-gitea#14852)
  * Add CORS config on to /login/oauth/access_token endpoint (go-gitea#14850)
  * Make searching issues by keyword case insensitive on DB (go-gitea#14848)
  * Prevent use of double sub-path and incorrect asset path in manifest (go-gitea#14827)
  * Fix link account ui (go-gitea#14763)
  * Fix preview status switch button on wiki editor (go-gitea#14742)
  * Fix github download on migration (go-gitea#14703)
  * Fix svg spacing (go-gitea#14638)
  * Prevent adding nil label to .AddedLabels or .RemovedLabels (go-gitea#14623)
  * Truncated organizations name (go-gitea#14615)
  * Exclude the current dump file from the dump (go-gitea#14606)
  * Use OldRef instead of CommitSHA for DeleteBranch comments (go-gitea#14604)
  * Ensure memcache caching works when TTL greater than 30 days (go-gitea#14592)
  * Remove NULs byte arrays passed to PostProcess (go-gitea#14587)
  * Restore detection of branches are equal on compare page (go-gitea#14586)
  * Fix incorrect key name so registerManualConfirm works (go-gitea#14455)
  * Fix close/reopen with comment (go-gitea#14436)
  * Allow passcode invalid error to appear (go-gitea#14371)
  * Escape branch names in compare url (go-gitea#14364)
  * Label and milestone webhooks on issue/pull creation (go-gitea#14363)
  * Handle NotifyCreateRef as create branch in feeds (go-gitea#14245)
  * Prevent clipping input text in Chrome + Segoe UI Font (go-gitea#14179)
  * Fix UI on edit auth source page (go-gitea#14137)
  * Fix git.parseTagData (go-gitea#14105)
  * Refactor get tag to remove unnecessary steps (go-gitea#14058)
  * Fix integrations test error with space in CURDIR path (go-gitea#14056)
  * Dropdown triangle fixes (go-gitea#14028)
  * Fix label of --id in admin delete user (go-gitea#14005)
  * Cause NotifyMigrateRepository to emit a repo create webhook (go-gitea#14004)
  * Update HEAD to match defaultBranch in template generation (go-gitea#13948)
  * Fix action avatar loading (go-gitea#13909)
  * Fix issue participants (go-gitea#13893)
  * Fix avatar template error (go-gitea#13833)
  * Fix review request notification email links when external issue tracker is enabled (go-gitea#13723)
  * Fix blame line alignment (go-gitea#13542)
  * Include OriginalAuthor in Reaction constraint (go-gitea#13505)
  * Comments on review should have the same sha (go-gitea#13448)
  * Fix whitespace rendering in diff (go-gitea#13415)
  * Fixed git args duplication (go-gitea#13411)
  * Fix bug on release publisherid migrations (go-gitea#13410)
  * Fix --port setting (go-gitea#13288)
  * Keep database transactions not too big (go-gitea#13254)
  * Git version check, ignore pre-releases constraints (go-gitea#13234)
  * Handle and propagate errors when checking if paths are Dirs, Files or Exist (go-gitea#13186)
  * Update Mirror IsEmpty status on synchronize (go-gitea#13185)
  * Use GO variable in go-check target (go-gitea#13146) (go-gitea#13147)
* ENHANCEMENTS
  * UI style improvements
  * Support .mailmap in code activity stats (go-gitea#15009)
  * Sort release attachments by name (go-gitea#15008)
  * Add ui.explore settings to control view of explore pages (go-gitea#14094)
  * Make internal SSH server host key path configurable (go-gitea#14918)
  * Hide resync all ssh principals when using internal ssh server (go-gitea#14904)
  * Add SameSite setting for cookies (go-gitea#14900)
  * Move Bleve and Elastic code indexers to use a common cat-file --batch (go-gitea#14781)
  * Add environment-to-ini to docker image (go-gitea#14762)
  * Add preview support for wiki editor when disable simpleMDE (go-gitea#14757)
  * Add easyMDE(simpleMDE) support for release content editor (go-gitea#14744)
  * Organization removal confirmation using name not password (go-gitea#14738)
  * Make branch names in PR description clickable (go-gitea#14716)
  * Add Password Algorithm option to install page (go-gitea#14701)
  * Add fullTextSearch to dropdowns by default (go-gitea#14694)
  * Fix truncated organization names (go-gitea#14655)
  * Whitespace in commits (go-gitea#14650)
  * Sort / move project boards (go-gitea#14634)
  * Make fileheader sticky in diffs (go-gitea#14616)
  * Add helper descriptions on new repo page (go-gitea#14591)
  * Move the stopwatches to the eventsource stream (go-gitea#14588)
  * Add Content-Length header to HEAD requests (go-gitea#14542)
  * Add Image Diff options in Diff view (go-gitea#14450)
  * Improve Description in new/ edit Project template (go-gitea#14429)
  * Allow ssh-keygen on Windows to detect ssh key type (go-gitea#14413)
  * Display error if twofaSecret cannot be retrieved (go-gitea#14372)
  * Sort issue search results by revelance (go-gitea#14353)
  * Implement ghost comment mitigation (go-gitea#14349)
  * Upgrade blevesearch dependency to v2.0.1 (go-gitea#14346)
  * Add edit, delete and reaction support to code review comments on issue page (go-gitea#14339)
  * Merge default and system webhooks under one menu (go-gitea#14244)
  * Add option for administrator to reset user 2FA (go-gitea#14243)
  * Add option to change username to the admin panel (go-gitea#14229)
  * Check for 'main' as potential default branch name (go-gitea#14193)
  * Project: show referenced PRs in issue cards (go-gitea#14183)
  * Use caddy's certmagic library for extensible/robust ACME handling (go-gitea#14177)
  * CLI support for OAuth sources custom icons (go-gitea#14166)
  * Custom icons for OAuth sources (go-gitea#14161)
  * Team dashboards (go-gitea#14159)
  * KanBan: be able to set default board (go-gitea#14147)
  * Disable Fomantic's custom scrollbars (go-gitea#14109)
  * Add UI to delete tracked times (go-gitea#14100)
  * Rework heatmap permissions (go-gitea#14080)
  * Issue and pull request filters on organization dashboard (go-gitea#14072)
  * Fix webhook list styling (go-gitea#14001)
  * Show dropdown with all statuses for commit (go-gitea#13977)
  * Show status check for merged PRs (go-gitea#13975)
  * Diff stat improvements (go-gitea#13954)
  * Report permissions denied in internal SSH (go-gitea#13953)
  * Markdown task list improvements (go-gitea#13952)
  * Heatmap days clickable (go-gitea#13935)
  * chore: use octicon-mirror for feeds display (go-gitea#13928)
  * Move diff split code into own template file (go-gitea#13919)
  * Markdown: Enable wrapping in code blocks and a color tweak (go-gitea#13894)
  * Do not reload page after adding comments in Pull Request reviews (go-gitea#13877)
  * Add pull request manually merge instruction (go-gitea#13840)
  * add thumbnail preview section to issue attachments (go-gitea#13826)
  * Move Repo APIFormat to convert package (go-gitea#13787)
  * Move notification APIFormat (go-gitea#13783)
  * Swap swagger-ui with swagger-ui-dist (go-gitea#13777)
  * User Settings: Ignore empty language codes & validate (go-gitea#13755)
  * Improve migrate page and add card CSS (go-gitea#13751)
  * Add block on official review requests branch protection (go-gitea#13705)
  * Add review requested filter on pull request overview (go-gitea#13701)
  * Use chronological commit order in default squash message (go-gitea#13696)
  * Clickable links in pull request (and issue) titles (go-gitea#13695)
  * Support shortened commit SHAs in URLs (go-gitea#13686)
  * Use native git variants by default with go-git variants as build tag (go-gitea#13673)
  * Don't render dropdown when only 1 merge style is available (go-gitea#13670)
  * Move webhook type from int to string (go-gitea#13664)
  * Direct avatar rendering (go-gitea#13649)
  * Verify password for local-account activation (go-gitea#13631)
  * Prevent clone protocol button flash on page load (go-gitea#13626)
  * Remove fetch request from heatmap (go-gitea#13623)
  * Refactor combine label comments with tests (go-gitea#13619)
  * Move metrics from macaron to chi (go-gitea#13601)
  * Issue and Pulls lists rework (go-gitea#13594)
  * HTTP cache rework and enable caching for storage assets (go-gitea#13569)
  * Use mount but not register for chi routes (go-gitea#13555)
  * Use monaco for the git hook editor (go-gitea#13552)
  * Make heatmap colors more distinct (go-gitea#13533)
  * Lazy-load issue reviewers and assignees avatars (go-gitea#13526)
  * Change search and filter icons to SVG (go-gitea#13473)
  * Create tag on ui (go-gitea#13467)
  * updateSize when create a repo with init commit (go-gitea#13441)
  * Added title and action buttons to Project view page (go-gitea#13437)
  * Override fomantic monospace fonts and set size (go-gitea#13435)
  * Rework focused comment styling (go-gitea#13434)
  * Tags cleanup (go-gitea#13428)
  * Various style tweaks (go-gitea#13418)
  * Refactor push update (go-gitea#13381)
  * Comment box tweaks and SVG dropdown triangles (go-gitea#13376)
  * Various style fixes (go-gitea#13372)
  * Change repo home page icons to SVG (go-gitea#13364)
  * Use CSS Vars for primary color (go-gitea#13361)
  * Refactor image paste code (go-gitea#13354)
  * Switch from SimpleMDE to EasyMDE (go-gitea#13333)
  * Group Label Changed Comments in timeline (go-gitea#13304)
  * Make the logger an interface (go-gitea#13294)
  * Fix PR/Issue titles on mobile (go-gitea#13292)
  * Rearrange the order of the merged by etc. in locale (go-gitea#13284)
  * Replace footer and modal icons with SVG (go-gitea#13245)
  * Issues overview should not show issues from archived repos (go-gitea#13220)
  * Show stale label for stale code comment which is marked as resolved (go-gitea#13213)
  * Use CSS Variables for fonts, remove postcss-loader (go-gitea#13204)
  * Add mentionable teams to tributeValues and change team mention rules to gh's style (go-gitea#13198)
  * Move install pages out of main macaron routes (go-gitea#13195)
  * Update outdated label to use Fomantic UI style (go-gitea#13181)
  * Added option to disable webhooks (go-gitea#13176)
  * Change order of possible-owner organizations to alphabetical (go-gitea#13160)
  * Log IP on SSH authentication failure for Built-in SSH server (go-gitea#13150)
  * Added option to disable migrations (go-gitea#13114)
  * New "Add Mirror" Button in the Organization view (go-gitea#13105)
  * Manually approve new registration (go-gitea#13083)
  * Cron job to cleanup hook_task table (go-gitea#13080)
  * Use the headline comment of pull-request as the squash commit's message (go-gitea#13071)
  * Clarify the suffices and prefixes of setting.AppSubURL and setting.AppURL (go-gitea#12999)
  * Slightly simplify the queue settings code to help reduce the risk of problems (go-gitea#12976)
  * Add precise search type for Elastic Search (go-gitea#12869)
  * Move APIFormat functions into convert package (go-gitea#12856)
  * Multiple GitGraph improvements: Exclude PR heads, Add branch/PR links, Show only certain branches, (go-gitea#12766)
  * Add TrN for repository limit (go-gitea#12492)
  * Refactor doctor (go-gitea#12264)
  * Add the tag list page to the release page (go-gitea#12096)
  * Redirect on changed user and org name (go-gitea#11649)
  * load U2F js only on pages which need it (go-gitea#11585)
  * Make archival asynchronous (go-gitea#11296)
  * Introduce go chi web framework as frontend of macaron, so that we can move routes from macaron to chi step by step (go-gitea#7420)
  * Improve vfsgen to not unzip bindata files but send to browser directly (go-gitea#7109)
  * Enhance release list (go-gitea#6025)
* DOCS
  * Swagger show models by default (go-gitea#14880)
  * Add missing repo.projects unit into swagger (go-gitea#14876)
  * Update docs and comments to remove macaron (go-gitea#14491)
  * Issue template addition: Are you using Gitea behind CloudFlare? (go-gitea#14098)
  * Generate man pages (go-gitea#13901)
  * Reformat/fine-tune docs (go-gitea#13897)
  * Added Table of Contents to long documentation pages (go-gitea#13890)
  * Add docs command (go-gitea#13429)
  * Update external-renderers.en-us.md (go-gitea#13165)
* MISC
  * Add builds for apple M1 (darwin arm64) (go-gitea#14951)
  * Migrate to use jsoniter instead of encoding/json (go-gitea#14841)
  * Reduce make verbosity (go-gitea#13803)
  * Add git command error directory on log (go-gitea#13194)

v1.13.4

* SECURITY
  * Fix issue popups (go-gitea#14898) (go-gitea#14899)
* BUGFIXES
  * Fix race in LFS ContentStore.Put(...) (go-gitea#14895) (go-gitea#14913)
  * Fix a couple of issues with a feeds (go-gitea#14897) (go-gitea#14903)
  * When transfering repository and database transaction failed, rollback the renames (go-gitea#14864) (go-gitea#14902)
  * Fix race in local storage (go-gitea#14888) (go-gitea#14901)
  * Fix 500 on pull view page if user is not loged in (go-gitea#14885) (go-gitea#14886)
* DOCS
  * Fix how lfs data path is set (go-gitea#14855) (go-gitea#14884)

v1.13.3

* BREAKING
  * Turn default hash password algorithm back to pbkdf2 from argon2 until we find a better one (go-gitea#14673) (go-gitea#14675)
* BUGFIXES
  * Fix paging of file commit logs (go-gitea#14831) (go-gitea#14879)
  * Print useful error if SQLite is used in settings but not supported (go-gitea#14476) (go-gitea#14874)
  * Fix display since time round (go-gitea#14226) (go-gitea#14873)
  * When Deleting Repository only explicitly close PRs whose base is not this repository (go-gitea#14823) (go-gitea#14842)
  * Set HCaptchaSiteKey on Link Account pages (go-gitea#14834) (go-gitea#14839)
  * Fix a couple of CommentAsPatch issues.  (go-gitea#14804) (go-gitea#14820)
  * Disable broken OAuth2 providers at startup (go-gitea#14802) (go-gitea#14811)
  * Repo Transfer permission checks (go-gitea#14792) (go-gitea#14794)
  * Fix double alert in oauth2 application edit view (go-gitea#14764) (go-gitea#14768)
  * Fix broken spans in diffs (go-gitea#14678) (go-gitea#14683)
  * Prevent race in PersistableChannelUniqueQueue.Has (go-gitea#14651) (go-gitea#14676)
  * HasPreviousCommit causes recursive load of commits unnecessarily (go-gitea#14598) (go-gitea#14649)
  * Do not assume all 40 char strings are SHA1s (go-gitea#14624) (go-gitea#14648)
  * Allow org labels to be set with issue templates (go-gitea#14593) (go-gitea#14647)
  * Accept multiple SSH keys in single LDAP SSHPublicKey attribute (go-gitea#13989) (go-gitea#14607)
  * Fix bug about ListOptions and stars/watchers pagnation (go-gitea#14556) (go-gitea#14573)
  * Fix GPG key deletion during account deletion (go-gitea#14561) (go-gitea#14569)