Changelog for gitblit-war-1.8.0-3.1.noarch.rpm :
Mon Jul 4 14:00:00 2016 ecsosAATTopensuse.org
- update to 1.8.0

* security
- Fixed bug in My Tickets which would expose ticket metadata
(title, type, etc) for private repos. (pull request #1040)

* fixes
- Fix HTML5 date input support (pull request #982)
- Honor disable ticket repository setting (pull request #1045)
- Fix paging on filestore items (pull request #1070)
- Fix redirects on session loss (pull request #1087)
- Fix always searching all repositories (pull request #1060)
- Fix RPC list branches for requests without admin powers
(pull request #994)
- Fix baseURL handling when generating urls (pull request #1086)
- Fix my tickets ignoring repo read permissions
(pull request #1040)
- Fix bug where jgit.packedGitOpenFiles was not properly set
(pull request #1049)
- Fix encoding of JavaDoc

* changes
- Sort filestore by most recent first (pull request #1061)
- Improve the document editor tablet support
(pull request #1062)
- Improve HTTP header authentication (pull request #980)
- Improve authentication logging (pull request #981)
- Improve logic of handling dot files in the raw servlet
(pull request #983)
- Change Jenkins Groovy script to support any protocol
(pull request #986)
- Remove empty catch blocks swallowing exceptions during
authentication (pull request #979)
- Various documentation improvements

* additions
- Delete patchset feature (pull request #1039)
- Support ticket references from tickets and commits on other
branches (pull request #1048)
- YouTrack Groovy push hook (pull request #1084)

* dependency changes
- Prosemirror 0.6.1

Wed Dec 2 13:00:00 2015 ecsosAATTopensuse.org
- update to 1.7.1

* fixes
- Fix exception when viewing a ticket with a patchset where the
integration branch does not exist (issue 521, ticket 212)
- Fix exception when deleting a repository using the
FileTicketService (issue 522, ticket 213)
- Do not inject team repository permissions as explicit user
permissions when editing a user (issue 462, ticket 214)
- Whitelist the target link attribute in the XSS filter
(ticket 216)
- Strip line breaks from pasted SSH keys (ticket 245)
- Fix project sorting (pull request #287)
- Fix Lucene indexing of tags (pull request #291)
- Prevent session fixation for external authentication
(pull request #908)
- Encode email subject as UTF-8 (pull request #929)
- Do not automatically trim passwords (pull request #932)
- Fix nested repository detection in raw servlet
(pull request #950)

* changes
- Replaced Dagger with Guice (ticket 80)
- Use release name as root directory in Gitblit GO artifacts
(ticket 109)
- Split gitblit.properties into gitblit.properties &
defaults.properties (ticket 110)
- Show team type in teams page (pull request #217, ticket 168)
- Relocate the repository Delete button (ticket 225)
- Improve diff performance by gracefully limiting large diffs
(pull request #226)
- Add granular settings to disable display of git transport
urls (pull request #274)
- Use author date to be consistent with other tools
(pull request #919)

* additions
- Add GitHub Octicons (ticket 106)
- Support for chain-loading properties files (ticket 110)
- Add Priority & Severity fields for tickets
(pull request #220, ticket 157)
- Add Maintenance ticket type (pull request #223, ticket 206)
- Add commitdiff option to ignore whitespace (ticket 233)
- Add configurable tab length for blob views (ticket 253)
- Implement image diffs (pull request #229)
- Add support for configurable HTTP proxy host/port in
PluginManager (pull request #235)
- Implement collapsed empty folder navigation
(pull request #241)
- Implement hashing to detect usermodel changes and reduce
users.conf file I/O (pull request #246)
- Add support for Kerberos5/GSS authentication to SSH
(pull request #254)
- Allow extraction of additional user metadata in request
headers when using external or container authentication
(pull request #255)
- Allow custom host & port specification for advertised SSH
urls (pull request #268)
- Improve logging for fail2ban usage (pull request #296)
- Initial implementation of Git-LFS (pull request #921)
- Add \"all\" repositories parameter to Search page
(pull request #935)

* new settings
- web.displayUserPanel true
- web.tabLength 4
- web.avatarClass
- web.showHttpServletUrls true
- web.showGitDaemonUrls true
- web.showSshDaemonUrls true
- web.advertiseAccessPermissionForOtherUrls false
- web.maxDiffLinesPerFile 4000
- web.maxDiffLines 20000
- ssh.advertisedHost
- ssh.advertisedPort
- git.sshWithKrb5
- git.sshKrb5Keytab
- git.sshKrb5ServicePrincipalName
- git.sshKrb5StripDomain true
- filestore.storageFolder ${baseFolder}/lfs
- filestore.maxUploadSize -1
- plugins.httpProxyHost
- plugins.httpProxyPort
- plugins.httpProxyAuthorization
- realm.container.autoAccounts.displayName
- realm.container.autoAccounts.emailAddress
- realm.container.autoAccounts.locale
- realm.container.autoAccounts.adminRole

* dependency changes
- Guice 4.0 (ticket 80, ticket 219)
- SLF4j 1.7.12
- gson 2.3.1
- Freemarker 2.3.22
- Lucene 4.10.0 (ticket 159)
- SSHD 1.0.0
- JGit 4.1.1
- Groovy 2.4.4
- Wicket 1.4.22
- BouncyCastle 1.52
- Pegdown 1.5.0
- Jetty 9.2.13

Wed Oct 29 13:00:00 2014 ecsosAATTopensuse.org
- insert BuildRequires: tomcat, so tomcat dirs not owned by
this package.

Wed Oct 29 13:00:00 2014 ecsosAATTopensuse.org
- update to 1.6.2

* fixes
- Fix French translation (pull request #224, ticket 210)
- Fix raw servlet trashing paths with spaces (ticket 211)
- Fix PluginManager not properly respecting --noverify
(ticket 209)

Wed Oct 29 13:00:00 2014 ecsosAATTopensuse.org
- update to 1.6.1

* security
- Sanitize page parameters, form fields, and markup for XSS
vulnerabilities (issue 496, ticket 164)
- Fix flash security risk (issue 498, ticket 165)
- Fix XRF vulnerability (issue 500, ticket 166)
- Prohibit new forks from inadvertently disclosing
view-restricted contents (issue 495, ticket 167)
- Restrict Gitblit\'s cookie to the context path
(issue 507, ticket 187)

* fixes
- Fix NPE when two repository names differ only in case
(pull request #204, ticket 108)
- Fix API documentation links (issue 449, ticket 111)
- Fix internal error when specifying a blob url without a path
(ticket 113)
- Fix milestone queries for hyphentated names (ticket 115)
- Fix duplicate repositories on dashboards
(issue 454, ticket 117)
- Fix lower-case project names in RepositoryNamePanel
(issue 509, ticket 118)
- Fix ticket notifications not sent when author doesn\'t have
an email address (issue 423, ticket 132)
- Fix regression in create-ticket-on-push & clarify reported
explanation (ticket 135)
- Fix redirects after ajax form submissions with Tomcat
(issue 455, ticket 136)
- Fix potential NPE in Raw servlet (ticket 137)
- Fix Raw link path generation that does not respect
web.forwardSlashCharacter (ticket 139)
- Do not log query parameter passwords when Redmine authentication
fails (pull request #215, ticket 466)
- Fix NPE in RepositoryNamePanel for anonymous admins
(issue 490, ticket 147)
- Fix repo creation with initial commit when the creator does
not have an email address (issue 458, ticket 149)
- Fix Edit Repository page missing owners from owners list
(issue 480, ticket 150)
- Fix NPEs when handling tickets with non-existent milestones
(ticket 152)
- Quote all Lucene query args that have non-alphanumberic
characters (issue 483, issue 469, ticket 153)
- Fix 0-length files from raw servlet when file does not exist
(issue 489, ticket 154)
- Fix raw servlet failures with long project names
(issue 478, ticket 163)
- New ticket responsible selections are missing users with
RW access (issue 476, ticket 170)
- Fix NPE in TicketListPanel due to missing repository
(issue 451, ticket 171)
- Fix MigrateTickets failure for view-restricted repositories
(issue 475, ticket 173)
- Fix repository deletion bug where the Lucene ticket index
was not purged (issue 468, ticket 174)
- Fix Jenkins post-receive script repository url
(pull request #219, ticket 175)
- Fix potential NPE in retrieving a ticket comment
(issue 503, ticket 179)
- Fix bug in migrating tickets to the BranchTicketService
(issue 474, ticket 183)
- Fix failure to clear/delete a ticket topic and description
(issue 505, ticket 188)
- Fix cropped ticket status indicators (ticket 197)
- Fix bug in raw servlet extracting repository out of the
path (pull request #222, ticket 203)
- Improve relative path determiniation using Java 7 Paths
(issue 511, ticket 204)

* changes
- Remove git.streamFileThreshold setting and documentation
(ticket 119)
- Update Korean translation (pull request #206, ticket 120)
- Add additional documentation for web.canonicalUrl
(pull request #205, issue 453, ticket 121)
- Remove Wicket references from non-Wicket packages
(ticket 129)
- LDAP user accounts now clear email address when unset
in LDAP (issue 456, ticket 134)
- Update French translation (pull request #210, ticket 140)
- Update authentication documentation
(pull request #213, ticket 142)
- Pretty print Perl modules (pull request #216, ticket 144)
- Pretty print C/C++ headers (pull request #207, ticket 145)
- Do not stamp raw servlet responses with cache-control
headers (issue 489, ticket 148)
- Treat UTF-9 and UTF-18 (both fake encodings) as UTF-8
(issue 486, ticket 151)
- Allow Lucene indexing period to be configurable (ticket 161)
- Do not display stacktraces for bad requests in servlets
(issue 497, ticket 169)
- Preserve branch ref in commits, tree, and docs navbar
links (issue 501, ticket 176)
- Disable Edit User Page permission checkboxes if admin/fork/
create permission is inherited (issue 196, ticket 177)
- Explicitly declare page subclasses that reference commits
(issue 503, ticket 180)
- Explicitly attempt to register BouncyCastle as a JCE provider
(ticket 194)
- Treat .ico and .jpeg files as images
(pull request #221, ticket 202)

* additions
- Add support for GITBLIT_HOME as a -D system property
(pull request #212, ticket 141, ticket 185)
- Add support for GITBLIT_HOME as an environment variable
(ticket 193)
- Add install script for Fedora
(pull request #207, ticket 146)
- Add NO CHANGE REQUIRED ticket status (ticket 182)

* dependency changes
- JGit 3.5.1
- Jetty 9.2.3
- SSHD 0.12.0

Tue Jun 17 14:00:00 2014 ecsosAATTopensuse.org
- update to 1.6.0

* fixes
- Allow ticket responsible selection if anonymous push
is enabled (issue 425, ticket 71)
- Fix failure to generate SSH server keys on ARM
(issue 426, ticket 70)
- Fix flotr2 chart generation failure if a label contained
a single-quote (ticket 77)
- Fix repository cache refresh after ref deletion/addition
(issue 433, ticket 82)
- Fixed cache miss on repository model retrieval
(pull request #185, ticket 83)
- Fixed GitBlit static singleton reference in
localclone.groovy (issue 436, ticket 84)
- Removed Ticket responsible team permission exclusion
(ticket 87)
- Fixed SSH daemon thread exhaustion (ticket 89)
- Fixed Ticket responsible selections not considering
the AUTHENTICATED authorization control (ticket 91)
- Fixed invalid generated SSH url for port 22
(issue 444, ticket 98)
- Fix cloning repositories with `+` in their names.
(revert pull request #136, issue 362, ticket 100)
- Fixed NPE in GitblitClient (ticket 102)

* changes
- Split the pages servlet into a raw servlet and a pages servlet.
All raw links now use the raw servlet (issue 413, ticket 49)
- Drop deprecated --set-upstream syntax for -u (ticket 59)
- BARNUM: Prune deleted branches on fetch (git fetch -p)
(ticket 60)
- BARNUM: Create ticket/N instead of topic/N for pt start N
(ticket 61)
- Move repository deletion functions to the edit repository page
AND allow deletion to be disabled (pull request #180, ticket 67)
- Update the Korean translation (pull request #184,
(ticket 69)
- Update the Dutch translation (pull request #191)
- Overhaul the EmptyRepositoryPage (ticket 73)
- Overhauled the edit repository page (ticket 76)
- Process bugtraq links in the ticket description and
comments (ticket 78)
- Exclude personal repositories from the repositories list,
by default (issue 419, ticket 95)

* additions
- Add My Tickets page (issue 215, ticket 15)
- Added CRUD functionality for Ticket Milestones (ticket 17)
- Implemented Ticket migration tool to move between backends
(ticket 19)
- Added extension points for top nav links, root-level pages,
repository nav links, user menu links,
and http request filters (ticket 23)
- Added an editor panel in the user profile page
to manipulate preferences (issue 108, issue 424, ticket 64)
- Added an editor panel in the user profile page
to manipulate public SSH keys (ticket 64)
- Add FORK_REPOSITORY RPC request type (issue 371,
pull request #161, ticket 65)
- Add object type (ot) parameter for RSS queries to retrieve
tag details (pull request #165, ticket 66)
- Add setting to allow STARTTLS without requiring SMTPS
(pull request #183)
- Simplified repository creation, offer simple README generation,
and insertion of a pre-defined .gitignore file (ticket 76)
- Added an extension point for monitoring onStartup and
onShutdown (ticket 79)
- Tag server-side merges when incremental push tags are enabled
(issue 432, ticket 85)
- Add a user preference for the clone transport (ticket 90)
- Add setting to control default thread pool size
for miscellaneous background tasks (ticket 92)
- Add Norwegian transation (pull request #186)
- Add German translation (pull request #192)
- Add Italian translation (pull request #196)

* new settings
web.allowDeletingNonEmptyRepositories true
web.includePersonalRepositories false
mail.starttls false
execution.defaultThreadPoolSize 1
git.gitignoreFolder ${baseFolder}/gitignore

* dependency changes
- Update to javax.mail 1.5.1 (issue 417, ticket 58)

Wed Jun 4 14:00:00 2014 ecsosAATTopensuse.org
- initial version 1.5.1