0.15.10

Thanks to all contributors

@6543, @qwerty287

Changelog

• SECURITY
  • Fix agent auth (#1952) (#1953)
  • Return after error (#1875) (#1876)
  • Update github.com/docker/distribution (#1750)

0.15.9

Changelog

• SECURITY
  • Backport securitycheck and bump deps where needed (#1745)

Addresses

CVE-2022-23471, CVE-2023-25153, CVE-2023-25173, CVE-2023-28840, CVE-2023-28841, CVE-2023-28842, GHSA-vp35-85q5-9f25, CVE-2023-24535, GHSA-hw7c-3rfg-p46j

0.15.8

Thanks to all contributors

@6543, @alexef, @jolheiser, @tranzystorek-io, @lukaszgyg

Changelog

• BUGFIXES
  • Use codeberg.org/6543/go-yaml2json (#1719)
  • Fix faulty hardlink in release tarball (#1669) (#1671)
  • Persist DepStatus of tasks (#1610) (#1625)

0.15.7

Thanks to all contributors

@6543, @alexmt, @lafriks

Changelog

• SECURITY
  • Update dependencies golang/x libs (#1612) (#1621)
• BUGFIXES
  • Docker backend should not close 'engine.Tail' result (#1616) (#1620)
  • Force pure Go resolver onto server (#1502) (#1503)
• ENHANCEMENTS
  • SanitizeParamKey "-" to "_" for plugin settings (#1511)
• MISC
  • Bump xgo and go to v1.19.5 (#1538) (#1547)
  • Pin official default clone image (#1526) (#1534)

0.15.6

Thanks to all contributors

@6543, @anbraten, @gapodo and @mscherer

Changelog

• SECURITY
  • Update golang.org/x/net (#1494) (CVE-2022-41717)
  • [BREAKING] Disable metrics access if no token is set (#1469) (#1470)
  • Update dep moby (#1263) (#1264)
• BUGFIXES
  • Update json schema for cli lint to cover valid cases (#1384)
  • Add pipeline.step.when.branch string-array type to schema.json (#1380)
  • Display system CA error only if there is an error (#870) (#1286)
• ENHANCEMENTS
  • Bump Frontend Deps and remove unused (#1404)

0.15.5

Thanks to all contributors

@6543, @lafriks and @sb-child

Changelog

• BUGFIXES
  • Change build message column type to text (#1252) (#1253)
• ENHANCEMENTS
  • Bump DefaultCloneImage version to v1.6.0 (#1254)
  • On Repo update, keep old "Clone" if update would empty it (#1170) (#1195)

0.15.4

Thanks to all contributors

@6543, @eleith, @lafriks and @simmstein

Changelog

• BUGFIXES
  • Extract commit message from branch creation (#1150) (#1153)
  • Respect WOODPECKER_GITEA_SKIP_VERIFY (#1152) (#1151)
  • update golang.org/x/crypto (#1124)
  • Implement Refresher for GitLab (#1031) (#1120)
  • Make returned proc list to be returned always in correct order (#1060) (#1065)
  • Update type of 'log_data' from blob to longblob (#1050) (#1052)
  • Make ListItem component more accessible by using a button tag when clickable (#1044) (#1046)
• MISC
  • Update base images (#1024) (#1025)

v0.15.3

Thanks to all contributors

@6543, @anbraten

Changelog

• SECURITY
  • Update github.com/containerd/containerd (#978) (#980) CVE-2022-23648
• BUGFIXES
  • Return to page after clikcing login at navbar (#975) (#976)

v0.15.2

Thanks to all contributors

@anbraten, @IDerr and @fracai

Changelog

• BUGFIXES
  • Fix uppercase from_secrets (#842) (#925)
  • Fix key/val format for dind env vars (#889) (#890)
  • Update helm chart releasing (#882) (#888)
• DOCUMENTATION
  • Fix run_on references with runs_on in docs (#965)

v0.15.1

Thanks for the security reporting 👍🏾

This release includes a fix for a security issue reported by @mscherer one of our community members. Please update to the latest stable v0.15.1 or next release. More details regarding the security issue can be found in #879.

Changelog

• SECURITY
  • Escape html / xml in log view (#879) (#880) CVE-2022-29947
• FEATURES
  • Build multiarch images for server (#821) (#822)
• BUGFIXES
  • Branch list enhancements (#808) (#809)
  • Get Netrc machine from clone url (#800) (#803)