Read about our upcoming Code of Conduct on this issue

CHANGELOG 18.8 KB
Newer Older
Igor Drozdov's avatar
Igor Drozdov committed
1
2
3
4
v13.22.1

- Remove SSL_CERT_DIR logging !546

Ash McKenzie's avatar
Ash McKenzie committed
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
v13.22.0

- Relax key and username matching for sshd !540
- Add logging to handler/exec.go and config/config.go !539
- Improve logging for non-git commands !538
- Update to Go v1.16.9 !537
- Reject non-proxied connections when proxy protocol is enabled !536
- Log command invocation !535
- Fix logging channel type !534
- Resolve an error-swallowing issue !533
- Add more logging to gitlab-sshd !531
- Respect log-level configuration again !530
- Improve err message given when Gitaly unavailable !526
- makefile: properly escape '$' in VERSION_STRING !525
- Add context fields to logging !524
- Extract server config related code out of sshd.go !523
- Add TestInvalidClientConfig and TestNewServerWithoutHosts for sshd.go !518
- Update Ruby version to 2.7.4 and add Go version 1.16.8 for tooling !517

24
25
26
27
v13.21.1

- Only validate SSL cert file exists if a value is supplied !527

Nick Thomas's avatar
Nick Thomas committed
28
29
v13.21.0

30
31
32
33
34
35
36
- Switch to labkit for logging system setup !504
- Remove some unreliable tests !503
- Make gofmt check fail if there are any matching files !500
- Update go-proxyproto to v0.6.0 !499
- Switch to labkit/log for logging functionality !498
- Unit tests for internal/sshd/connection.go !497
- Prometheus metrics for HTTP requests !496
37
- Refactor testhelper.PrepareTestRootDir using t.Cleanup !493
Nick Thomas's avatar
Nick Thomas committed
38
39
40
41
42
43
44
45
- Change default logging format to JSON !476
- Shutdown sshd gracefully !484
- Provide liveness and readiness probes !494
- Add tracing instrumentation to http client !495
- Log same correlation_id on auth keys check of ssh connections !501
- fix: validate client cert paths exist on disk before proceeding !508
- Modify regex to prevent partial matches

Ash McKenzie's avatar
Ash McKenzie committed
46
47
48
49
50
51
52
53
v13.20.0

- Remove bin/authorized_keys !491
- Add a make install command !490
- Create PROCESS.md page with Security release process !488
- Fix the Geo SSH push proxy hanging !487
- Standardize logging timestamp format !485

Nick Thomas's avatar
Nick Thomas committed
54
55
56
57
v13.19.1

- Modify regex to prevent partial matches

Nick Thomas's avatar
Nick Thomas committed
58
59
60
61
62
63
64
v13.19.0

- Don't finish the opentracing span early !466
- gitlab-sshd: Respect the ssl_cert_dir config !467
- Stop changing directory to the filesystem root !470
- Fix opentracing setup for gitlab-sshd !473

Nick Thomas's avatar
Nick Thomas committed
65
66
67
68
v13.18.1

- Modify regex to prevent partial matches

Nick Thomas's avatar
Nick Thomas committed
69
70
71
72
73
74
v13.18.0

- Fix thread-safety issues in gitlab-shell !463
- gitlab-sshd: Support the PROXY protocol !461
- sshd: Recover from per-session and per-connection panics !464

Stan Hu's avatar
Stan Hu committed
75
76
77
78
79
v13.17.0

- Fix gitlab-shell panic when log file not writable !453
- Add monitoring endpoint to built-in SSH server !449

80
81
82
83
v13.16.1

- Read limited input when asking to generate new two-factor recovery codes

Ash McKenzie's avatar
Ash McKenzie committed
84
85
86
87
88
v13.16.0

- RFC: Simple built-in SSH server !394
- Remove the session duration information from the output of 2fa_verify command !445

89
90
91
92
v13.15.1

- Read limited input when asking to generate new two-factor recovery codes

Ash McKenzie's avatar
Ash McKenzie committed
93
94
95
96
v13.15.0

- Update httpclient.go with TLS 1.2 as minimum version !435

97
98
99
100
v13.14.1

- Read limited input when asking to generate new two-factor recovery codes

Igor Drozdov's avatar
Igor Drozdov committed
101
102
103
104
105
v13.14.0

- Add 2fa_verify command !440
- Propagate client identity to gitaly !436

106
107
108
109
v13.13.1

- Read limited input when asking to generate new two-factor recovery codes

Ash McKenzie's avatar
Ash McKenzie committed
110
111
112
113
v13.13.0

- GitLab API Client support for client certificates !432

Stan Hu's avatar
Stan Hu committed
114
115
116
117
118
119
v13.12.0

- Upgrade Bundler from 1.17.2 to 2.1.4 !428
- Log Content-Length bytes in API response !427
- Bump default Ruby version to v2.7.2 !426

Nick Thomas's avatar
Nick Thomas committed
120
121
122
123
124
v13.11.0

- Set SSL_CERT_DIR env var when building command !423
- Fix incorrect actor used to check permissions for SSH receive-pack !424

Stan Hu's avatar
Stan Hu committed
125
v13.10.0
Nick Thomas's avatar
Nick Thomas committed
126

Stan Hu's avatar
Stan Hu committed
127
128
- Add support for -version argument !421

Nick Thomas's avatar
Nick Thomas committed
129
130
131
132
133
v13.9.0

- Drop "generated random correlation ID" log message !417
- client: Allow User-Agent header to be overridden !418

Stan Hu's avatar
Stan Hu committed
134
135
136
137
138
139
v13.8.0

- Update Gitaly module dependency !414
- Make it possible to propagate correlation ID across processes !413
- Remove deprecated hooks dir !411

Stan Hu's avatar
Stan Hu committed
140
141
142
v13.7.0
- Fix gitlab-shell not handling relative URLs over UNIX sockets !406

Patrick Bajao's avatar
Patrick Bajao committed
143
144
145
v13.6.0
- Add support obtaining personal access tokens via SSH !397

Stan Hu's avatar
Stan Hu committed
146
147
148
v13.5.0
- Generate and log correlation IDs !400

Stan Hu's avatar
Stan Hu committed
149
150
151
152
153
154
v13.4.0
- Support ssl_cert_dir config setting !393
- Log SSH key details !398
- Log remote IP for executed commands !399
- Drop Go v1.12 support !401

Ash McKenzie's avatar
Ash McKenzie committed
155
156
157
158
159
160
v13.3.0
- Upgrade Ruby version to v2.6.6 !390
- Use default puma socket in example config !388
- Set client name when making requests to Gitaly !387
- Fix race conditions with logrus testing !385

Stan Hu's avatar
Stan Hu committed
161
162
163
v13.2.0
- Add HTTP status code to internal API logs !376

Nick Thomas's avatar
Nick Thomas committed
164
165
166
v13.1.0
- Ensure we are pasing the parsed secret !381

John Cai's avatar
John Cai committed
167
168
169
v13.0.0
- Move gitlabnet client into a publicly facing client package !377

Ash McKenzie's avatar
Ash McKenzie committed
170
171
172
v12.2.0
- Geo: Add custom action support for clone/pull !369

Patrick Bajao's avatar
Patrick Bajao committed
173
174
175
176
v12.1.0
- Log internal HTTP requests !366
- Log git-{upload-pack,receive-pack,upload-archive} requests !367

Ash McKenzie's avatar
Ash McKenzie committed
177
178
179
v12.0.0
- openssh: Accept GIT_PROTOCOL environment variable !364

Ash McKenzie's avatar
Ash McKenzie committed
180
v11.0.0
Ash McKenzie's avatar
Ash McKenzie committed
181
182
183
- Bump Ruby version to 2.6.5 !357
- Remove support for Custom data.info_message !356

Ash McKenzie's avatar
Ash McKenzie committed
184
185
186
187
188
v10.3.0
- Use correct git-lfs download or upload operation names !353
- Add support for Gitaly feature flags !351
- Make console messages consistent !334

Nick Thomas's avatar
Nick Thomas committed
189
190
191
v10.2.0
- Remove dead Ruby code and unused binaries !346

Nick Thomas's avatar
Nick Thomas committed
192
193
194
195
196
197
198
v10.1.0
- Remove feature flags and the fallback command !336
- Remove an obsolete section from config.yml.example !339
- Extend group IP restriction to Git activity !335
- Remove deprecated create-hooks script !342
- Rewrite `bin/check` in Go !341

Nick Thomas's avatar
Nick Thomas committed
199
200
201
v10.0.0
- Remove gitlab-keys script !329

Patrick Bajao's avatar
Patrick Bajao committed
202
203
204
v9.4.2
  - Repurpose bin/authorized_keys script !330

Douwe Maan's avatar
Douwe Maan committed
205
206
207
v9.4.1
  - Fix bug preventing gitlab-development-kit from updating !327

Patrick Bajao's avatar
Patrick Bajao committed
208
209
210
211
212
213
214
215
216
217
218
219
v9.4.0
  - Enable all migration features by default !313
  - Set Go111MODULE to 'off' during compilation !315
  - Add Makefile for easier building and testing !310
  - Resolve "Update .PHONY to have accurate list of targets" !316
  - Update rubygems version on CI for go tests !320
  - Support falling back to ruby version of checkers !318
  - Implement AuthorizedKeys command !321
  - Implement AuthorizedPrincipals command !322
  - Replace symlinks with actual binaries !324
  - Use go mod !323

Nick Thomas's avatar
Nick Thomas committed
220
221
222
223
224
225
226
227
v9.3.0
  - Go implementation for git-receive-pack !300
  - Go implementation for git-upload-pack !305
  - Return Fallback cmd if feature is enabled, but unimplemented !306
  - Go implementation for git-upload-archive !307
  - Go implementation for LFS authenticate !308
  - Respect GITLAB_SHELL_DIR in the Go version !309

Stan Hu's avatar
Stan Hu committed
228
229
230
v9.2.0
  - Upgrade to Ruby 2.6.3 !298

Nick Thomas's avatar
Nick Thomas committed
231
232
233
234
235
236
v9.1.0
  - Correctly determine the root directory for gitlab-shell !294
  - Support calling internal api using HTTP !295
  - Print keys in list-keys command !198
  - Support calling internal API using HTTPS !297

Nick Thomas's avatar
Nick Thomas committed
237
238
239
240
241
242
243
v9.0.0
  - Add a Go implementation of the "discover" command !283
  - Add a Go implementation of the 2fa_recovery_codes" command !285
  - Display console messages, if available !287
  - Allow the post-receive hook to print warnings !288
  - Remove hooks, they belong to Gitaly now !291

Nick Thomas's avatar
Nick Thomas committed
244
245
246
v8.7.1
  - Fix unmarshalling JSON from the command line !280

Nick Thomas's avatar
Nick Thomas committed
247
248
249
v8.7.0
  - Add distributed tracing to GitLab-Shell !277

Stan Hu's avatar
Stan Hu committed
250
251
252
253
v8.6.0
  - Add support for using gl_project_path !275
  - Provide expires_in for LFS if available !273

Stan Hu's avatar
Stan Hu committed
254
255
256
v8.5.0
  - Bump gitaly-proto to v1.10.0

Douwe Maan's avatar
Douwe Maan committed
257
258
259
v8.4.4
  - Pass push options along to gitlab-rails's post-receive endpoint

Stan Hu's avatar
Stan Hu committed
260
261
262
v8.4.3
  - Remove circular dependency between HTTPHelper and GitlabNet !258

Nick Thomas's avatar
Nick Thomas committed
263
264
265
v8.4.2
  - Include LFS operation when requesting auth !254

Douwe Maan's avatar
Douwe Maan committed
266
267
268
v8.4.1
  - Surface error message sent along with API Service Unavailable error to user

269
270
271
v8.4.0
  - Use Gitaly v2 auth scheme

Nick Thomas's avatar
Nick Thomas committed
272
273
274
v8.3.3
  - Release v8.3.3 as v8.3.2 tag is incorrect

Nick Thomas's avatar
Nick Thomas committed
275
276
277
278
v8.3.2
  - Ensure text/plain & text/html content types are handled !239
  - Fix newlines not appearing between new log entries !242

279
280
281
v8.3.1
  - No changes (version tag correction)

Stan Hu's avatar
Stan Hu committed
282
283
284
v8.3.0
  - Add custom action (e.g. proxying SSH push) support

Stan Hu's avatar
Stan Hu committed
285
286
287
v8.2.1
  - Fix HTTP status code handling for /api/v4/allowed API endpoint

Nick Thomas's avatar
Nick Thomas committed
288
289
290
291
v8.2.0
  - Pass custom git_config_options to Gitaly !221
  - Add missing require statement in create-hooks !225

Nick Thomas's avatar
Nick Thomas committed
292
293
294
v8.1.1
  - Fix two regressions in SSH certificate support (!226)

Nick Thomas's avatar
Nick Thomas committed
295
296
297
v8.1.0
  - Support Git v2 protocol (!217)

Nick Thomas's avatar
Nick Thomas committed
298
299
300
v8.0.0
  - SSH certificate support (!207)

Douwe Maan's avatar
Douwe Maan committed
301
302
303
v7.2.0
  - Update gitaly-proto to 0.109.0 (!216)

Stan Hu's avatar
Stan Hu committed
304
305
306
v7.1.5
  - Fix a NoMethodError in the pre-receive hook (!206)

307
308
309
v7.1.4
  - Don't truncate long strings in broadcast message (!202)

Bob Van Landuyt's avatar
Bob Van Landuyt committed
310
311
312
v7.1.3
  - Use username instead of full name for identifying users (!204)

313
314
315
v7.1.2
  - Add missing GitlabLogger#error method (!200)

316
317
318
v7.1.1
  - Flush log file after every write (!199)

319
320
321
v7.1.0
  - Migrate `git-upload-archive` to gitaly

322
323
324
v7.0.0
  - Switch to structured logging (!193)

Robert Speicher's avatar
Robert Speicher committed
325
326
327
v6.0.4
  - Don't delete GL_REPOSITORY environment variable from post-receive hook (!191)

328
329
330
v6.0.3
  - Print new project information in post-receive

Jacob Vosmaer's avatar
Jacob Vosmaer committed
331
332
333
334
v6.0.2
  - Use grpc-go 1.9.1 (!184)
  - Update gitaly-proto and gitaly libs (!185)

335
336
337
v6.0.1
  - Fix git push by removing a bad require in the pre-receive hook (!183)

338
v6.0.0
Nick Thomas's avatar
Nick Thomas committed
339
340
341
  - Remove bin/gitlab_projects (!180)
  - Remove direct redis integration (!181)
  - Remove support unhiding of all references for Geo nodes (!179)
342

Nick Thomas's avatar
Nick Thomas committed
343
344
345
v5.11.0
  - Introduce a more-complete implementation of bin/authorized_keys (!178)

346
347
348
v5.10.3
  - Remove unused redis bin configuration

Douwe Maan's avatar
Douwe Maan committed
349
350
351
v5.10.2
  - Print redirection message when pushing into renamed project

352
353
354
v5.10.1
  - Use 'git clone --no-local' when creating a fork (!176)

355
356
357
v5.10.0
  - Add a 'fork-repository' command that works with hashed storage (!174)

358
359
360
v5.9.4
  - Add relative git object dir envvars to check access request

Douwe Maan's avatar
Douwe Maan committed
361
362
363
v5.9.3
  - Expose GitLab username to hooks in `GL_USERNAME` environment variable

364
365
366
v5.9.2
  - Fix pre-receive error when gitlab doesn't have /internal/pre_receive (!169)

367
368
369
v5.9.1
  - Adds --force option to push branches

370
v5.9.0
371
  - Support new /internal/pre-receive API endpoint for post-receive operations
372
  - Support new /internal/post-receive API endpoint for post-receive operations
373
  - Support `redis` field on /internal/check API endpoint
374

375
376
377
v5.8.1
  - Support old versions of ruby without monotonic clock

378
379
380
v5.8.0
  - Fix SSH support for Git for Windows v2.14

381
382
383
v5.7.0
  - Support unhiding of all refs via Gitaly

Douwe Maan's avatar
Douwe Maan committed
384
385
386
387
v5.6.2
  - Bump redis-rb library to 3.3.3

v5.6.1
Nick Thomas's avatar
Nick Thomas committed
388
389
390
  - Fix setting permissions of SSH key tempfiles
  - Fix a missing constant error when using SSH authentication

Douwe Maan's avatar
Douwe Maan committed
391
v5.6.0
Douwe Maan's avatar
Douwe Maan committed
392
393
  - SSH authentication support

Stan Hu's avatar
Stan Hu committed
394
395
396
v5.5.0
  - Support unhiding of all references for Geo nodes

397
398
399
v5.4.0
  - Update Gitaly vendoring to use new RPC calls instead of old deprecated ones

400
401
402
v5.3.1
  - Gracefully handle internal API errors when getting merge request URLs

Kim Carlbäcker's avatar
Kim Carlbäcker committed
403
404
405
v5.3.0
  - Add ability to have git-receive-pack and git-upload-pack to go over Gitaly

Stan Hu's avatar
Stan Hu committed
406
407
408
v5.2.1
  - Revert changes in v5.2.0

Stan Hu's avatar
Stan Hu committed
409
410
411
v5.2.0
  - Disable RubyGems to increase performance

Alejandro Rodríguez's avatar
Alejandro Rodríguez committed
412
413
414
v5.1.1
  - Revert "Remove old `project` parameter, use `gl_repository` instead"

Michael Kozono's avatar
Michael Kozono committed
415
416
417
v5.1.0
  - Add `gitlab-keys list-key-ids` subcommand for iterating over key IDs to find keys that should be deleted

418
419
v5.0.6
  - Remove old `project` parameter, use `gl_repository` instead
Sean McGivern's avatar
Sean McGivern committed
420
  - Use v4 of the GitLab REST API
421

422
423
424
v5.0.5
  - Use gl_repository if present when enqueing Sidekiq PostReceive jobs

425
426
427
v5.0.4
  - Handle GL_REPOSITORY env variable and use it in API calls and Sidekiq enqueuing

428
429
430
v5.0.3
  - Use recursive lookup for git repositories in the bin/create-hooks script

431
432
433
v5.0.2
  - Adds timeout option to push branches

Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
434
435
436
v5.0.1
  - Fetch repositories with `--quiet` option by default

437
438
439
v5.0.0
  - Remove support for git-annex

Timothy Andrew's avatar
Timothy Andrew committed
440
441
442
v4.1.1
  - Send (a selection of) git environment variables while making the API call to `/allowed`, !112

Elan Ruusamäe's avatar
Elan Ruusamäe committed
443
v4.1.0
444
  - Add support for global custom hooks and chained hook directories (Elan Ruusamäe, Dirk Hörner), !113, !111, !93, !89, #32
445
  - Clear up text with merge request after new branch push (Lisanne Fellinger)
Elan Ruusamäe's avatar
Elan Ruusamäe committed
446

447
448
v4.0.3
  - Fetch repositories with `--prune` option by default
Elan Ruusamäe's avatar
Elan Ruusamäe committed
449

450
451
452
v4.0.2
  - Fix gitlab_custom_hook dependencies

Ahmad Sherif's avatar
Ahmad Sherif committed
453
454
455
v4.0.1
  - Add instrumentation to push hooks

456
457
458
v4.0.0
  - Use full repository path for API calls

459
460
461
v3.6.6
  - Re-use the default logger when logging metrics data

Paco Guzman's avatar
Paco Guzman committed
462
463
v3.6.5
  - Test against ruby 2.3
464
  - Instrument GitLab Shell and log metrics data to a file
Paco Guzman's avatar
Paco Guzman committed
465

466
v3.6.4
467
  - Fix rsync with ionice command building
468
469
  - Fix short circuit logic between rsync with and without ionice for storage migrations

Valery Sizov's avatar
Valery Sizov committed
470
471
472
v3.6.3
  - Re-exposing GL_ID to custom hooks

473
474
475
v3.6.2
  - Enable GIT_TRACE/GIT_TRACE_PACKET/GIT_TRACE_PERFORMANCE by providing the git_trace_log_file config key

476
477
478
v3.6.1
  - Set a low IO priority for storage moves to lower performance impact

Douwe Maan's avatar
Douwe Maan committed
479
480
481
v3.6.0
  - Added full support for `git-lfs-authenticate` to properly handle LFS requests and pass them on to Workhorse

482
483
484
v3.5.0
  - Add option to recover 2FA via SSH

485
486
487
v3.4.0
  - Redis Sentinel support

Douwe Maan's avatar
Douwe Maan committed
488
489
490
v3.3.3
  - Print URL for new or existing merge request after push

Douwe Maan's avatar
Douwe Maan committed
491
492
493
v3.3.2
  - Improve authorized_keys check

Douwe Maan's avatar
Douwe Maan committed
494
495
496
v3.3.1
  - Manage authorized_keys permissions continuously

497
v3.3.0
498
  - Track ongoing push commands
499
500
  - Add command to move repositories between repository storages

501
502
503
v3.2.1
  - Allow gitlab-project's fork-project command to fork projects between different repository storages

Patricio Cano's avatar
Patricio Cano committed
504
505
v3.2.0
  - Allow GitLab Shell to check for allowed access based on the used Git protocol
506
  - Add an error message when using shell commands with incompatible GitLab versions
Patricio Cano's avatar
Patricio Cano committed
507

508
509
510
v3.1.0
  - Refactor repository paths handling to allow multiple git mount points

511
512
513
v3.0.1
  - Update PostReceive worker to provide enqueued_at time.

514
v3.0.0
Robert Schilling's avatar
Robert Schilling committed
515
  - Remove rm-tag command (Robert Schilling)
Robert Schilling's avatar
Robert Schilling committed
516
  - Remove create-branch and rm-branch commands (Robert Schilling)
517
  - Update PostReceive worker so it logs a unique JID in Sidekiq
518
  - Remove update-head command
519
  - Use Redis Ruby client instead of shelling out to redis-cli
520
521
522

v2.7.2
  - Do not prune objects during 'git gc'
523

524
525
526
v2.7.1
  - Add new command to list tags from a remote repo
  - Add the ability to fetch remote repo with or without tags
527

528
v2.7.0
529
530
  - Add support for ssh AuthorizedKeysCommand query by key

531
532
533
534
v2.6.13
  - Add push-branches command
  - Add delete-remote-branches command

James Lopez's avatar
James Lopez committed
535
536
537
v2.6.12
  - Fix git-annex issue not working using custom SSH port repositories

Rémy Coutable's avatar
Rémy Coutable committed
538
539
540
541
542
v2.6.11
  - Increase HTTP timeout and log request durations
  - Workaround for a Webrick issue on Ruby 2.2
  - New optional `--force` parameter for `gitlab-projects fetch-remote`

Jeroen Nijhof's avatar
Jeroen Nijhof committed
543
544
545
v2.6.10
  - Add git gc for housekeeping

546
547
548
v2.6.9
  - Remove trailing slashes from gitlab_url

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
549
v2.6.8
550
  - Revert git-lfs-authenticate command from white list
Douwe Maan's avatar
Douwe Maan committed
551

Douwe Maan's avatar
Douwe Maan committed
552
553
554
555
v2.6.7
  - Exit with non-zero status when import-repository fails
  - Add fetch-remote command

Artem V. Navrotskiy's avatar
Artem V. Navrotskiy committed
556
v2.6.6
557
  - Do not clean LANG environment variable for the git hooks when working through the SSH-protocol
558
  - Add git-lfs-authenticate command to white list (this command is used by git-lfs for SSO authentication through SSH-protocol)
Jacob Vosmaer's avatar
Jacob Vosmaer committed
559
  - Handle git-annex and gcryptsetup
560

Robert Speicher's avatar
v2.6.5    
Robert Speicher committed
561
562
563
v2.6.5
  - Handle broken symlinks in create-hooks

564
v2.6.4
565
  - Remove keys from authorized_keys in-place
566
  - Increase batch_add_keys lock timeout to 300 seconds
Valery Sizov's avatar
Valery Sizov committed
567
  - If git-annex is enabled set GIT_ANNEX_SHELL_LIMITED variable
568

569
570
571
v2.6.3
  - Prevent keys with a very specific comment from accidentally being deleted.

572
573
v2.6.2
  - Include ecdsa keys in `gitlab_keys list-keys`.
574
  - Refactor logic around GL_ID
575

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
576
577
578
v2.6.1
  - Write errors to stderr to get git to abort and show them as such.

579
v2.6.0
580
581
  - Prevent character encoding issues by sending received changes as raw data.

582
583
584
v2.5.4
  - Remove recursive commands from bin/install

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
585
586
587
v2.5.3
  - Improve git-annex integration

588
589
590
v2.5.2
  - Safer line sub for git-annex command

591
592
593
v2.5.1
  - Expect broadcast message to return empty JSON if no message now

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
594
v2.5.0
595
  - Support git-annex tool (disabled by default)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
596
  - Add rubocop (Ruby static code analyzer) for development
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
597

598
599
600
v2.4.3
  - Print broadcast message if one is available

601
602
603
v2.4.2
  - Pass git changes list as string instead of array

Valery Sizov's avatar
Valery Sizov committed
604
605
606
v2.4.1
  - Access token masking in url before loging

607
v2.4.0
Valery Sizov's avatar
Valery Sizov committed
608
  - Show error message when git push is rejected
609

610
611
612
v2.2.0
  - Support for custom hooks (Drew Blessing and Jose Kahan)

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
613
614
615
v2.1.0
  - Use secret token with GitLab internal API. Requires GitLab 7.5 or higher

616
v2.0.1
Douwe Maan's avatar
Douwe Maan committed
617
  - Send post-receive changes to redis as a string instead of array
618

619
620
v2.0.0
  - Works with GitLab v7.3+
Job van der Voort's avatar
Job van der Voort committed
621
  - Replace raise with abort when checking path to prevent path exposure
622
  - Handle invalid number of arguments on remote commands
Douwe Maan's avatar
Douwe Maan committed
623
  - Replace update hook with pre-receive and post-receive hooks.
624
  - Symlink the whole hooks directory
625
  - Ignore missing repositories in create-hooks
626
  - Connect to Redis via sockets by default
Job van der Voort's avatar
Job van der Voort committed
627

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
628
629
630
v1.9.7
  - Increased test coverage
  - By default use direct unicorn connection (localhost:8080)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
631
  - Fix wrong repo path send to GitLab by GitlabUpdate hook
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
632

633
634
635
v1.9.6
  - Explicitly require 'timeout' from the standard library

636
637
v1.9.5
  - Put authorized_keys.lock in the same directory as authorized_keys
638
  - Use lock file when add new entries to authorized_keys
639

640
641
642
v1.9.4
  - Use lock file when modify authorized_keys

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
643
644
645
v1.9.3
  - Ignore force push detection for new branch or branch remove push

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
646
v1.9.2
Douwe Maan's avatar
Douwe Maan committed
647
  - Add support for force push detection
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
648

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
649
v1.9.1
Douwe Maan's avatar
Douwe Maan committed
650
  - Update hook sends branch and tag name
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
651

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
652
653
654
655
v1.9.0
  - Call api in update hook for both ssdh and http push. Requires GitLab 6.7+
  - Pass oldrev and newrev to api.allowed?

656
657
658
v1.8.5
  - Add `gitlab-keys batch-add-keys` subcommand for authorized_keys rebuilds

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
659
660
661
v1.8.4
  - Dont do import if repository exists

662
663
664
v1.8.3
  - Add timeout option for repository import

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
665
666
667
v1.8.2
  - Fix broken 1.8.1

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
668
669
670
671
672
v1.8.1
  - Restrict Environment Variables
  - Add bin/create-hooks command
  - More safe shell execution

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
673
674
675
v1.8.0
  - Fix return values in GitlabKeys

Dmitriy Zaporozhets's avatar
1.7.9    
Dmitriy Zaporozhets committed
676
677
678
v1.7.9
  - Fix escape of repository path for custom ssh port

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
679
v1.7.8
Jacob Vosmaer's avatar
Jacob Vosmaer committed
680
  - Escape repository path to prevent relative links (CVE-2013-4583)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
681
682

v1.7.7
Jacob Vosmaer's avatar
Jacob Vosmaer committed
683
684
  - Separate options from arguments with -- (CVE-2013-4582)
  - Bypass shell and use stdlib JSON for GitlabUpdate (CVE-2013-4581)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
685

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
686
687
688
v1.7.6
  - Fix gitlab-projects update-head for improted repo when branch exists but not listed in refs/head

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
689
690
691
v1.7.5
  - Remove keys from authorized_keys using ruby instead of shell

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
692
v1.7.4
Jacob Vosmaer's avatar
Jacob Vosmaer committed
693
  - More protection against shell injection (CVE-2013-4546)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
694

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
695
v1.7.3
Jacob Vosmaer's avatar
Jacob Vosmaer committed
696
  - Use Kernel#open to append lines to authorized_keys (CVE-2013-4490)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
697

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
698
699
700
v1.7.2
  - More safe command execution

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
701
702
703
v1.7.1
  - Fixed issue when developers are able to push to protected branches that contain a '/' in the branch name.

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
704
705
706
v1.7.0
  - Clean authorized_keys file with `gitlab-keys clear`

707
708
709
710
v1.6.0
  - Create branch/tag functionality
  - Remove branch/tag functionality

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
711
712
713
714
715
716
v1.5.0
  - Logger
  - Ability to specify ca_file/ca_path
  - Update-head command for project
  - Better regexp for key_id inside shell

717
718
719
v1.4.0
  - Regex used in rm-key command was too lax

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
720
721
722
v1.3.0
  - Fork-project command
  - Custom redis configuration
Akzhan Abdulin's avatar
Akzhan Abdulin committed
723
724
  - Interpret login with deploy key as anonymous one

725
726
v1.2.0
  - Return non-zero result if gitlab-projects and gitlab-keys execution was not successful
Akzhan Abdulin's avatar
Akzhan Abdulin committed
727
  - http_settings configuration option added
728

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
729
730
731
732
v1.1.0
  - added mv-project feature
  - increased test coverage

733
v1.0.4
Dmitriy Zaporozhets's avatar
v1.0.4    
Dmitriy Zaporozhets committed
734
  - requires gitlab c9ca15e
Johannes Schleifenbaum's avatar
Johannes Schleifenbaum committed
735
  - don't use post-receive file any more. Make all updates in update
736
737
  - fixed issue with invalid GL_USER
  - use GL_ID instead of GL_USER