CHANGELOG 149 KB
Newer Older
1
2
Please view this file on the master branch, on stable branches it's out of date.

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
3
v 8.9.0 (unreleased)
4
  - Fix Error 500 when using closes_issues API with an external issue tracker
Alfredo Sumaran's avatar
Alfredo Sumaran committed
5
  - Bulk assign/unassign labels to issues.
Alfredo Sumaran's avatar
Alfredo Sumaran committed
6
  - Ability to prioritize labels !4009 / !3205 (Thijs Wouters)
7
  - Fix endless redirections when accessing user OAuth applications when they are disabled
8
  - Allow enabling wiki page events from Webhook management UI
Stan Hu's avatar
Stan Hu committed
9
  - Bump rouge to 1.11.0
10
  - Fix issue with arrow keys not working in search autocomplete dropdown
11
  - Make EmailsOnPushWorker use Sidekiq mailers queue
12
  - Fix wiki page events' webhook to point to the wiki repository
13
  - Don't show tags for revert and cherry-pick operations
Long Nguyen's avatar
Long Nguyen committed
14
  - Fix issue todo not remove when leave project !4150 (Long Nguyen)
15
  - Allow customisable text on the 'nearly there' page after a user signs up
16
  - Bump recaptcha gem to 3.0.0 to remove deprecated stoken support
17
  - Fix SVG sanitizer to allow more elements
18
  - Allow forking projects with restricted visibility level
19
  - Added descriptions to notification settings dropdown
20
  - Improve note validation to prevent errors when creating invalid note via API
21
  - Reduce number of fog gem dependencies
22
  - Remove project notification settings associated with deleted projects
23
  - Fix 404 page when viewing TODOs that contain milestones or labels in different projects
24
  - Redesign navigation for project pages
25
  - Fix groups API to list only user's accessible projects
26
  - Redesign account and email confirmation emails
27
  - `git clone https://host/namespace/project` now works, in addition to using the `.git` suffix
Stan Hu's avatar
Stan Hu committed
28
  - Bump nokogiri to 1.6.8
29
  - Use gitlab-shell v3.0.0
30
  - Upgrade to jQuery 2
Kamil Trzcinski's avatar
Kamil Trzcinski committed
31
  - Use Knapsack to evenly distribute tests across multiple nodes
32
  - Add `sha` parameter to MR merge API, to ensure only reviewed changes are merged
33
  - Don't allow MRs to be merged when commits were added since the last review / page load
Stan Hu's avatar
Stan Hu committed
34
  - Add DB index on users.state
35
  - Add rake task 'gitlab:db:configure' for conditionally seeding or migrating the database
Aran Koning's avatar
Aran Koning committed
36
  - Changed the Slack build message to use the singular duration if necessary (Aran Koning)
Timothy Andrew's avatar
Timothy Andrew committed
37
  - Links from a wiki page to other wiki pages should be rewritten as expected
38
  - Add option to project to only allow merge requests to be merged if the build succeeds (Rui Santos)
39
  - Fix issues filter when ordering by milestone
Kamil Trzcinski's avatar
Kamil Trzcinski committed
40
  - Added artifacts:when to .gitlab-ci.yml - this requires GitLab Runner 1.3
41
  - Bamboo Service: Fix missing credentials & URL handling when base URL contains a path (Benjamin Schmid)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
42
  - Todos will display target state if issuable target is 'Closed' or 'Merged'
43
  - Fix bug when sorting issues by milestone due date and filtering by two or more labels
44
  - Add support for using Yubikeys (U2F) for two-factor authentication
Sean McGivern's avatar
Sean McGivern committed
45
  - Link to blank group icon doesn't throw a 404 anymore
Josh Frye's avatar
Josh Frye committed
46
  - Remove 'main language' feature
47
  - Pipelines can be canceled only when there are running builds
48
  - Use downcased path to container repository as this is expected path by Docker
49
  - Projects pending deletion will render a 404 page
50
  - Measure queue duration between gitlab-workhorse and Rails
51
  - Make Omniauth providers specs to not modify global configuration
52
  - Make authentication service for Container Registry to be compatible with < Docker 1.11
53
  - Add Application Setting to configure Container Registry token expire delay (default 5min)
Josh Frye's avatar
Josh Frye committed
54
  - Cache assigned issue and merge request counts in sidebar nav
55
  - Use Knapsack only in CI environment
Josh Frye's avatar
Josh Frye committed
56
  - Cache project build count in sidebar nav
Fatih Acet's avatar
Fatih Acet committed
57
  - Add milestone expire date to the right sidebar
58
  - Fix markdown_spec to use before instead of before(:all) to properly cleanup database after testing
59
  - Reduce number of queries needed to render issue labels in the sidebar
James Lopez's avatar
James Lopez committed
60
  - Improve error handling importing projects
61
  - Remove duplicated notification settings
62
  - Put project Files and Commits tabs under Code tab
63
  - Decouple global notification level from user model
Connor Shea's avatar
Connor Shea committed
64
  - Replace Colorize with Rainbow for coloring console output in Rake tasks.
Douwe Maan's avatar
Douwe Maan committed
65
  - Add workhorse controller and API helpers
Connor Shea's avatar
Connor Shea committed
66
  - An indicator is now displayed at the top of the comment field for confidential issues.
67
  - RepositoryCheck::SingleRepositoryWorker public and private methods are now instrumented
Alejandro Rodríguez's avatar
Alejandro Rodríguez committed
68
  - Improve issuables APIs performance when accessing notes !4471
Alfredo Sumaran's avatar
Alfredo Sumaran committed
69
  - External links now open in a new tab
Alfredo Sumaran's avatar
Alfredo Sumaran committed
70
  - Markdown editor now correctly resets the input value on edit cancellation !4175
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
71
  - Toggling a task list item in a issue/mr description does not creates a Todo for mentions
Phil Hughes's avatar
Phil Hughes committed
72
  - Improved UX of date pickers on issue & milestone forms
73
  - Cache on the database if a project has an active external issue tracker.
74
  - Put project Labels and Milestones pages links under Issues and Merge Requests tabs as subnav
75
  - All classes in the Banzai::ReferenceParser namespace are now instrumented
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
76
  - Remove deprecated issues_tracker and issues_tracker_id from project model
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
77

78
v 8.8.5 (unreleased)
79
  - Ensure branch cleanup regardless of whether the GitHub import process succeeds
80
81
  - Fix todos page throwing errors when you have a project pending deletion
  - Reduce number of SQL queries when rendering user references
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
82
  - Import GitHub repositories respecting the API rate limit
83
  - Fix importer for GitHub comments on diff
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
84
  - Disable Webhooks before proceeding with the GitHub import
Tomasz Maczukin's avatar
Tomasz Maczukin committed
85
  - Fix incremental trace upload API when using multi-byte UTF-8 chars in trace
86
87
88

v 8.8.4
  - Fix LDAP-based login for users with 2FA enabled. !4493
89

James Lopez's avatar
James Lopez committed
90
v 8.8.3
Robert Speicher's avatar
Robert Speicher committed
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
  - Fix 404 page when viewing TODOs that contain milestones or labels in different projects. !4312
  - Fixed JS error when trying to remove discussion form. !4303
  - Fixed issue with button color when no CI enabled. !4287
  - Fixed potential issue with 2 CI status polling events happening. !3869
  - Improve design of Pipeline view. !4230
  - Fix gitlab importer failing to import new projects due to missing credentials. !4301
  - Fix import URL migration not rescuing with the correct Error. !4321
  - Fix health check access token changing due to old application settings being used. !4332
  - Make authentication service for Container Registry to be compatible with Docker versions before 1.11. !4363
  - Add Application Setting to configure Container Registry token expire delay (default 5 min). !4364
  - Pass the "Remember me" value to the 2FA token form. !4369
  - Fix incorrect links on pipeline page when merge request created from fork.  !4376
  - Use downcased path to container repository as this is expected path by Docker. !4420
  - Fix wiki project clone address error (chujinjin). !4429
  - Fix serious performance bug with rendering Markdown with InlineDiffFilter.  !4392
  - Fix missing number on generated ordered list element. !4437
  - Prevent disclosure of notes on confidential issues in search results.
James Lopez's avatar
James Lopez committed
108

Robert Speicher's avatar
Robert Speicher committed
109
110
111
112
113
114
115
116
117
118
v 8.8.2
  - Added remove due date button. !4209
  - Fix Error 500 when accessing application settings due to nil disabled OAuth sign-in sources. !4242
  - Fix Error 500 in CI charts by gracefully handling commits with no durations. !4245
  - Fix table UI on CI builds page. !4249
  - Fix backups if registry is disabled. !4263
  - Fixed issue with merge button color. !4211
  - Fixed issue with enter key selecting wrong option in dropdown. !4210
  - When creating a .gitignore file a dropdown with templates will be provided. !4075
  - Fix concurrent request when updating build log in browser. !4183
119

Robert Speicher's avatar
Robert Speicher committed
120
121
v 8.8.1
  - Add documentation for the "Health Check" feature
Robert Speicher's avatar
Robert Speicher committed
122
  - Allow anonymous users to access a public project's pipelines !4233
123
  - Fix MySQL compatibility in zero downtime migrations helpers
124
  - Fix the CI login to Container Registry (the gitlab-ci-token user)
125

Robert Speicher's avatar
Robert Speicher committed
126
v 8.8.0
Douwe Maan's avatar
Douwe Maan committed
127
  - Implement GFM references for milestones (Alejandro Rodríguez)
128
  - Snippets tab under user profile. !4001 (Long Nguyen)
129
  - Fix error when using link to uploads in global snippets
130
  - Fix Error 500 when attempting to retrieve project license when HEAD points to non-existent ref
Long Nguyen's avatar
Long Nguyen committed
131
  - Assign labels and milestone to target project when moving issue. !3934 (Long Nguyen)
132
  - Use a case-insensitive comparison in sanitizing URI schemes
133
  - Toggle sign-up confirmation emails in application settings
134
  - Make it possible to prevent tagged runner from picking untagged jobs
135
136
  - Added `InlineDiffFilter` to the markdown parser. (Adam Butler)
  - Added inline diff styling for `change_title` system notes. (Adam Butler)
137
  - Project#open_branches has been cleaned up and no longer loads entire records into memory.
138
  - Escape HTML in commit titles in system note messages
139
  - Improve design of Pipeline View
Kamil Trzcinski's avatar
Kamil Trzcinski committed
140
  - Fix scope used when accessing container registry
141
  - Fix creation of Ci::Commit object which can lead to pending, failed in some scenarios
142
  - Improve multiple branch push performance by memoizing permission checking
143
  - Log to application.log when an admin starts and stops impersonating a user
144
  - Changing the confidentiality of an issue now creates a new system note (Alex Moore-Niemi)
Yorick Peterse's avatar
Yorick Peterse committed
145
146
  - Updated gitlab_git to 10.1.0
  - GitAccess#protected_tag? no longer loads all tags just to check if a single one exists
147
  - Reduce delay in destroying a project from 1-minute to immediately
148
  - Make build status canceled if any of the jobs was canceled and none failed
Stan Hu's avatar
Stan Hu committed
149
  - Upgrade Sidekiq to 4.1.2
DJ Mountney's avatar
DJ Mountney committed
150
  - Added /health_check endpoint for checking service status
151
  - Make 'upcoming' filter for milestones work better across projects
152
  - Sanitize repo paths in new project error message
153
  - Bump mail_room to 0.7.0 to fix stuck IDLE connections
154
  - Remove future dates from contribution calendar graph.
155
  - Support e-mail notifications for comments on project snippets
156
  - Fix API leak of notes of unauthorized issues, snippets and merge requests
157
  - Use ActionDispatch Remote IP for Akismet checking
158
  - Fix error when visiting commit builds page before build was updated
Alfredo Sumaran's avatar
Alfredo Sumaran committed
159
  - Add 'l' shortcut to open Label dropdown on issuables and 'i' to create new issue on a project
160
  - Update SVG sanitizer to conform to SVG 1.1
161
  - Speed up push emails with multiple recipients by only generating the email once
Phil Hughes's avatar
Phil Hughes committed
162
  - Updated search UI
Kamil Trzcinski's avatar
Kamil Trzcinski committed
163
  - Added authentication service for Container Registry
164
  - Display informative message when new milestone is created
165
  - Sanitize milestones and labels titles
166
  - Support multi-line tag messages. !3833 (Calin Seciu)
167
  - Force users to reset their password after an admin changes it
168
  - Allow "NEWS" and "CHANGES" as alternative names for CHANGELOG. !3768 (Connor Shea)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
169
  - Added button to toggle whitespaces changes on diff view
170
  - Backport GitHub Enterprise import support from EE
171
  - Create tags using Rugged for performance reasons. !3745
Felipe Artur's avatar
Felipe Artur committed
172
  - Allow guests to set notification level in projects
173
  - API: Expose Issue#user_notes_count. !3126 (Anton Popov)
174
  - Don't show forks button when user can't view forks
175
  - Fix atom feed links and rendering
176
  - Files over 5MB can only be viewed in their raw form, files over 1MB without highlighting !3718
177
  - Add support for supressing text diffs using .gitattributes on the default branch (Matt Oakes)
178
  - Add eager load paths to help prevent dependency load issues in Sidekiq workers. !3724
Jacob Schatz's avatar
Jacob Schatz committed
179
  - Added multiple colors for labels in dropdowns when dups happen.
Sean McGivern's avatar
Sean McGivern committed
180
  - Show commits in the same order as `git log`
181
  - Improve description for the Two-factor Authentication sign-in screen. (Connor Shea)
182
  - API support for the 'since' and 'until' operators on commit requests (Paco Guzman)
183
  - Fix Gravatar hint in user profile when Gravatar is disabled. !3988 (Artem Sidorenko)
184
  - Expire repository exists? and has_visible_content? caches after a push if necessary
185
  - Fix unintentional filtering bug in Issue/MR sorted by milestone due (Takuya Noguchi)
186
  - Fix adding a todo for private group members (Ahmad Sherif)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
187
  - Bump ace-rails-ap gem version from 2.0.1 to 4.0.2 which upgrades Ace Editor from 1.1.2 to 1.2.3
188
  - Total method execution timings are no longer tracked
Andrei Gliga's avatar
Andrei Gliga committed
189
  - Allow Admins to remove the Login with buttons for OAuth services and still be able to import !4034. (Andrei Gliga)
190
  - Add API endpoints for un/subscribing from/to a label. !4051 (Ahmad Sherif)
191
192
  - Hide left sidebar on phone screens to give more space for content
  - Redesign navigation for profile and group pages
193
  - Add counter metrics for rails cache
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
194
  - Import pull requests from GitHub where the source or target branches were removed
195
  - All Grape API helpers are now instrumented
196
  - Improve Issue formatting for the Slack Service (Jeroen van Baarsen)
Ludovic Perrine's avatar
Ludovic Perrine committed
197
  - Fixed advice on invalid permissions on upload path !2948 (Ludovic Perrine)
198
  - Allows MR authors to have the source branch removed when merging the MR. !2801 (Jeroen Jacobs)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
199
  - When creating a .gitignore file a dropdown with templates will be provided
200
  - Shows the issue/MR list search/filter form and corrects the mobile styling for guest users. #17562
201

James Lopez's avatar
James Lopez committed
202
203
204
v 8.7.7
  - Fix import by `Any Git URL` broken if the URL contains a space

205
206
v 8.7.6
  - Fix links on wiki pages for relative url setups. !4131 (Artem Sidorenko)
Rémy Coutable's avatar
Rémy Coutable committed
207
208
  - Fix import from GitLab.com to a private instance failure. !4181
  - Fix external imports not finding the import data. !4106
209
  - Fix notification delay when changing status of an issue
210
  - Bump Workhorse to 0.7.5 so it can serve raw diffs
James Lopez's avatar
James Lopez committed
211

Timothy Andrew's avatar
Timothy Andrew committed
212
213
v 8.7.5
  - Fix relative links in wiki pages. !4050
Yorick Peterse's avatar
Yorick Peterse committed
214
215
  - Fix always showing build notification message when switching between merge requests !4086
  - Fix an issue when filtering merge requests with more than one label. !3886
216
  - Fix short note for the default scope on build page (Takuya Noguchi)
Timothy Andrew's avatar
Timothy Andrew committed
217

218
v 8.7.4
219
220
221
222
223
224
225
  - Links for Redmine issue references are generated correctly again !4048 (Benedikt Huss)
  - Fix setting trusted proxies !3970
  - Fix BitBucket importer bug when throwing exceptions !3941
  - Use sign out path only if not empty !3989
  - Running rake gitlab:db:drop_tables now drops tables with cascade !4020
  - Running rake gitlab:db:drop_tables uses "IF EXISTS" as a precaution !4100
  - Use a case-insensitive comparison in sanitizing URI schemes
226

227
228
v 8.7.3
  - Emails, Gitlab::Email::Message, Gitlab::Diff, and Premailer::Adapter::Nokogiri are now instrumented
229
  - Merge request widget displays TeamCity build state and code coverage correctly again.
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
230
  - Fix the line code when importing PR review comments from GitHub. !4010
231
  - Wikis are now initialized on legacy projects when checking repositories
232
  - Remove animate.css in favor of a smaller subset of animations. !3937 (Connor Shea)
233

Yorick Peterse's avatar
Yorick Peterse committed
234
v 8.7.2
235
  - The "New Branch" button is now loaded asynchronously
236
  - Fix error 500 when trying to create a wiki page
Yorick Peterse's avatar
Yorick Peterse committed
237
  - Updated spacing between notification label and button
238
  - Label titles in filters are now escaped properly
239
240

v 8.7.1
241
  - Throttle the update of `project.last_activity_at` to 1 minute. !3848
242
243
244
  - Fix .gitlab-ci.yml parsing issue when hidde job is a template without script definition. !3849
  - Fix license detection to detect all license files, not only known licenses. !3878
  - Use the `can?` helper instead of `current_user.can?`. !3882
245
  - Prevent users from deleting Webhooks via API they do not own
246
  - Fix Error 500 due to stale cache when projects are renamed or transferred
247
  - Update width of search box to fix Safari bug. !3900 (Jedidiah)
248
  - Use the `can?` helper instead of `current_user.can?`
249
250

v 8.7.0
251
  - Gitlab::GitAccess and Gitlab::GitAccessWiki are now instrumented
252
  - Fix vulnerability that made it possible to gain access to private labels and milestones
253
  - The number of InfluxDB points stored per UDP packet can now be configured
254
  - Fix error when cross-project label reference used with non-existent project
255
  - Transactions for /internal/allowed now have an "action" tag set
256
  - Method instrumentation now uses Module#prepend instead of aliasing methods
257
  - Repository.clean_old_archives is now instrumented
258
  - Add support for environment variables on a job level in CI configuration file
259
  - SQL query counts are now tracked per transaction
Rémy Coutable's avatar
Rémy Coutable committed
260
261
262
263
  - The Projects::HousekeepingService class has extra instrumentation
  - All service classes (those residing in app/services) are now instrumented
  - Developers can now add custom tags to transactions
  - Loading of an issue's referenced merge requests and related branches is now done asynchronously
264
  - Enable gzip for assets, makes the page size significantly smaller. !3544 / !3632 (Connor Shea)
Robert Speicher's avatar
Robert Speicher committed
265
  - Add support to cherry-pick any commit into any branch in the web interface (Minqi Pan)
Rémy Coutable's avatar
Rémy Coutable committed
266
  - Project switcher uses new dropdown styling
267
  - Load award emoji images separately unless opening the full picker. Saves several hundred KBs of data for most pages. (Connor Shea)
268
  - Do not include award_emojis in issue and merge_request comment_count !3610 (Lucas Charles)
Felipe Artur's avatar
Felipe Artur committed
269
  - Restrict user profiles when public visibility level is restricted.
Rémy Coutable's avatar
Rémy Coutable committed
270
  - Add ability set due date to issues, sort and filter issues by due date (Mehmet Beydogan)
271
  - All images in discussions and wikis now link to their source files !3464 (Connor Shea).
272
  - Return status code 303 after a branch DELETE operation to avoid project deletion (Stan Hu)
273
  - Add setting for customizing the list of trusted proxies !3524
Felipe Artur's avatar
Felipe Artur committed
274
  - Allow projects to be transfered to a lower visibility level group
275
  - Fix `signed_in_ip` being set to 127.0.0.1 when using a reverse proxy !3524
Rémy Coutable's avatar
Rémy Coutable committed
276
  - Improved Markdown rendering performance !3389
277
  - Make shared runners text in box configurable
278
  - Don't attempt to look up an avatar in repo if repo directory does not exist (Stan Hu)
279
  - API: Ability to subscribe and unsubscribe from issues and merge requests (Robert Schilling)
280
  - Expose project badges in project settings
281
  - Make /profile/keys/new redirect to /profile/keys for back-compat. !3717
282
  - Preserve time notes/comments have been updated at when moving issue
Rémy Coutable's avatar
Rémy Coutable committed
283
  - Make HTTP(s) label consistent on clone bar (Stan Hu)
284
  - Add support for `after_script`, requires Runner 1.2 (Kamil Trzciński)
285
  - Expose label description in API (Mariusz Jachimowicz)
286
  - API: Ability to update a group (Robert Schilling)
287
  - API: Ability to move issues (Robert Schilling)
288
  - Fix Error 500 after renaming a project path (Stan Hu)
289
  - Fix a bug whith trailing slash in teamcity_url (Charles May)
290
  - Allow back dating on issues when created or updated through the API
291
  - Allow back dating on issue notes when created through the API
292
293
  - Propose license template when creating a new LICENSE file
  - API: Expose /licenses and /licenses/:key
Alfredo Sumaran's avatar
Alfredo Sumaran committed
294
  - Fix avatar stretching by providing a cropping feature
295
  - API: Expose `subscribed` for issues and merge requests (Robert Schilling)
Patricio Cano's avatar
Patricio Cano committed
296
  - Allow SAML to handle external users based on user's information !3530
Patricio Cano's avatar
Patricio Cano committed
297
  - Allow Omniauth providers to be marked as `external` !3657
298
  - Add endpoints to archive or unarchive a project !3372
299
  - Fix a bug whith trailing slash in bamboo_url
300
  - Add links to CI setup documentation from project settings and builds pages
301
  - Display project members page to all members
302
  - Handle nil descriptions in Slack issue messages (Stan Hu)
303
  - Add automated repository integrity checks (OFF by default)
Robert Schilling's avatar
Robert Schilling committed
304
  - API: Expose open_issues_count, closed_issues_count, open_merge_requests_count for labels (Robert Schilling)
305
  - API: Ability to star and unstar a project (Robert Schilling)
306
  - Add default scope to projects to exclude projects pending deletion
307
  - Allow to close merge requests which source projects(forks) are deleted.
308
  - Ensure empty recipients are rejected in BuildsEmailService
P.S.V.R's avatar
P.S.V.R committed
309
  - Use rugged to change HEAD in Project#change_head (P.S.V.R)
310
  - API: Ability to filter milestones by state `active` and `closed` (Robert Schilling)
311
  - API: Fix milestone filtering by `iid` (Robert Schilling)
312
  - Make before_script and after_script overridable on per-job (Kamil Trzciński)
Robert Schilling's avatar
Robert Schilling committed
313
  - API: Delete notes of issues, snippets, and merge requests (Robert Schilling)
314
  - Implement 'Groups View' as an option for dashboard preferences !3379 (Elias W.)
Felipe Artur's avatar
Felipe Artur committed
315
  - Better errors handling when creating milestones inside groups
316
  - Fix high CPU usage when PostReceive receives refs/merge-requests/<id>
317
  - Hide `Create a group` help block when creating a new project in a group
318
  - Implement 'TODOs View' as an option for dashboard preferences !3379 (Elias W.)
319
  - Allow issues and merge requests to be assigned to the author !2765
Kamil Trzcinski's avatar
Kamil Trzcinski committed
320
  - Make Ci::Commit to group only similar builds and make it stateful (ref, tag)
321
  - Gracefully handle notes on deleted commits in merge requests (Stan Hu)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
322
  - Decouple membership and notifications
323
  - Fix creation of merge requests for orphaned branches (Stan Hu)
Robert Schilling's avatar
Robert Schilling committed
324
  - API: Ability to retrieve a single tag (Robert Schilling)
325
  - While signing up, don't persist the user password across form redisplays
Rémy Coutable's avatar
Rémy Coutable committed
326
  - Fall back to `In-Reply-To` and `References` headers when sub-addressing is not available (David Padilla)
327
  - Remove "Congratulations!" tweet button on newly-created project. (Connor Shea)
PotHix's avatar
PotHix committed
328
  - Fix admin/projects when using visibility levels on search (PotHix)
329
  - Build status notifications
Phil Hughes's avatar
Phil Hughes committed
330
  - Update email confirmation interface
Robert Schilling's avatar
Robert Schilling committed
331
  - API: Expose user location (Robert Schilling)
332
  - API: Do not leak group existence via return code (Robert Schilling)
Jacob Schatz's avatar
Jacob Schatz committed
333
  - ClosingIssueExtractor regex now also works with colons. e.g. "Fixes: #1234" !3591
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
334
  - Update number of Todos in the sidebar when it's marked as "Done". !3600
Timothy Andrew's avatar
Timothy Andrew committed
335
  - Sanitize branch names created for confidential issues
336
  - API: Expose 'updated_at' for issue, snippet, and merge request notes (Robert Schilling)
337
  - API: User can leave a project through the API when not master or owner. !3613
338
  - Fix repository cache invalidation issue when project is recreated with an empty repo (Stan Hu)
339
  - Fix: Allow empty recipients list for builds emails service when pushed is added (Frank Groeneveld)
Phil Hughes's avatar
Phil Hughes committed
340
  - Improved markdown forms
341
342
343
  - Diff design updates (colors, button styles, etc)
  - Copying and pasting a diff no longer pastes the line numbers or +/-
  - Add null check to formData when updating profile content to fix Firefox bug
Arinde Eniola's avatar
Arinde Eniola committed
344
  - Disable spellcheck and autocorrect for username field in admin page
Robert Schilling's avatar
Robert Schilling committed
345
  - Delete tags using Rugged for performance reasons (Robert Schilling)
Sebastian Klier's avatar
Sebastian Klier committed
346
  - Add Slack notifications when Wiki is edited (Sebastian Klier)
Phil Hughes's avatar
Phil Hughes committed
347
348
  - Diffs load at the correct point when linking from from number
  - Selected diff rows highlight
Valery Sizov's avatar
Valery Sizov committed
349
  - Fix emoji categories in the emoji picker
350
  - API: Properly display annotated tags for GET /projects/:id/repository/tags (Robert Schilling)
James Lopez's avatar
James Lopez committed
351
  - Add encrypted credentials for imported projects and migrate old ones
352
  - Properly format all merge request references with ! rather than # !3740 (Ben Bodenmiller)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
353
  - Author and participants are displayed first on users autocompletion
BaldinoF's avatar
BaldinoF committed
354
  - Show number sign on external issue reference text (Florent Baldino)
Phil Hughes's avatar
Phil Hughes committed
355
  - Updated print style for issues
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
356
  - Use GitHub Issue/PR number as iid to keep references
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
357
  - Import GitHub labels
Alfredo Sumaran's avatar
Alfredo Sumaran committed
358
  - Add option to filter by "Owned projects" on dashboard page
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
359
  - Import GitHub milestones
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
360
  - Execute system web hooks on push to the project
361
  - Allow enable/disable push events for system hooks
362
  - Fix GitHub project's link in the import page when provider has a custom URL
Tomasz Maczukin's avatar
Tomasz Maczukin committed
363
  - Add RAW build trace output and button on build page
Tomasz Maczukin's avatar
Tomasz Maczukin committed
364
  - Add incremental build trace update into CI API
Rémy Coutable's avatar
Rémy Coutable committed
365

366
367
368
369
370
371
372
373
374
375
376
377
378
v 8.6.8
  - Prevent privilege escalation via "impersonate" feature
  - Prevent privilege escalation via notes API
  - Prevent privilege escalation via project webhook API
  - Prevent XSS via Git branch and tag names
  - Prevent XSS via custom issue tracker URL
  - Prevent XSS via `window.opener`
  - Prevent XSS via label drop-down
  - Prevent information disclosure via milestone API
  - Prevent information disclosure via snippet API
  - Prevent information disclosure via project labels
  - Prevent information disclosure via new merge request page

379
v 8.6.7
Robert Speicher's avatar
Robert Speicher committed
380
381
  - Fix persistent XSS vulnerability in `commit_person_link` helper
  - Fix persistent XSS vulnerability in Label and Milestone dropdowns
382
383
  - Fix vulnerability that made it possible to enumerate private projects belonging to group

384
v 8.6.6
Rémy Coutable's avatar
Rémy Coutable committed
385
386
387
  - Expire the exists cache before deletion to ensure project dir actually exists (Stan Hu). !3413
  - Fix error on language detection when repository has no HEAD (e.g., master branch) (Jeroen Bobbeldijk). !3654
  - Fix revoking of authorized OAuth applications (Connor Shea). !3690
Jeroen Bobbeldijk's avatar
Jeroen Bobbeldijk committed
388
  - Fix error on language detection when repository has no HEAD (e.g., master branch). !3654 (Jeroen Bobbeldijk)
Phil Hughes's avatar
Phil Hughes committed
389
390
  - Issuable header is consistent between issues and merge requests
  - Improved spacing in issuable header on mobile
391

392
393
394
395
396
397
398
399
v 8.6.5
  - Fix importing from GitHub Enterprise. !3529
  - Perform the language detection after updating merge requests in `GitPushService`, leading to faster visual feedback for the end-user. !3533
  - Check permissions when user attempts to import members from another project. !3535
  - Only update repository language if it is not set to improve performance. !3556
  - Return status code 303 after a branch DELETE operation to avoid project deletion (Stan Hu). !3583
  - Unblock user when active_directory is disabled and it can be found !3550
  - Fix a 2FA authentication spoofing vulnerability.
400

Rémy Coutable's avatar
Rémy Coutable committed
401
402
v 8.6.4
  - Don't attempt to fetch any tags from a forked repo (Stan Hu)
403
  - Redesign the Labels page
Rémy Coutable's avatar
Rémy Coutable committed
404

Rémy Coutable's avatar
Rémy Coutable committed
405
406
v 8.6.3
  - Mentions on confidential issues doesn't create todos for non-members. !3374
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
407
408
  - Destroy related todos when an Issue/MR is deleted. !3376
  - Fix error 500 when target is nil on todo list. !3376
Rémy Coutable's avatar
Rémy Coutable committed
409
410
411
412
  - Fix copying uploads when moving issue to another project. !3382
  - Ensuring Merge Request API returns boolean values for work_in_progress (Abhi Rao). !3432
  - Fix raw/rendered diff producing different results on merge requests. !3450
  - Fix commit comment alignment (Stan Hu). !3466
413
  - Fix Error 500 when searching for a comment in a project snippet. !3468
Rémy Coutable's avatar
Rémy Coutable committed
414
415
416
  - Allow temporary email as notification email. !3477
  - Fix issue with dropdowns not selecting values. !3478
  - Update gitlab-shell version and doc to 2.6.12. gitlab-org/gitlab-ee!280
417

Rémy Coutable's avatar
Rémy Coutable committed
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
v 8.6.2
  - Fix dropdown alignment. !3298
  - Fix issuable sidebar overlaps on tablet. !3299
  - Make dropdowns pixel perfect. !3337
  - Fix order of steps to prevent PostgreSQL errors when running migration. !3355
  - Fix bold text in issuable sidebar. !3358
  - Fix error with anonymous token in applications settings. !3362
  - Fix the milestone 'upcoming' filter. !3364 + !3368
  - Fix comments on confidential issues showing up in activity feed to non-members. !3375
  - Fix `NoMethodError` when visiting CI root path at `/ci`. !3377
  - Add a tooltip to new branch button in issue page. !3380
  - Fix an issue hiding the password form when signed-in with a linked account. !3381
  - Add links to CI setup documentation from project settings and builds pages. !3384
  - Fix an issue with width of project select dropdown. !3386
  - Remove redundant `require`s from Banzai files. !3391
  - Fix error 500 with cancel button on issuable edit form. !3392 + !3417
  - Fix background when editing a highlighted note. !3423
  - Remove tabstop from the WIP toggle links. !3426
  - Ensure private project snippets are not viewable by unauthorized people.
  - Gracefully handle notes on deleted commits in merge requests (Stan Hu). !3402
  - Fixed issue with notification settings not saving. !3452
439

Rémy Coutable's avatar
Rémy Coutable committed
440
441
442
443
444
445
446
447
448
449
450
451
452
453
v 8.6.1
  - Add option to reload the schema before restoring a database backup. !2807
  - Display navigation controls on mobile. !3214
  - Fixed bug where participants would not work correctly on merge requests. !3329
  - Fix sorting issues by votes on the groups issues page results in SQL errors. !3333
  - Restrict notifications for confidential issues. !3334
  - Do not allow to move issue if it has not been persisted. !3340
  - Add a confirmation step before deleting an issuable. !3341
  - Fixes issue with signin button overflowing on mobile. !3342
  - Auto collapses the navigation sidebar when resizing. !3343
  - Fix build dependencies, when the dependency is a string. !3344
  - Shows error messages when trying to create label in dropdown menu. !3345
  - Fixes issue with assign milestone not loading milestone list. !3346
  - Fix an issue causing the Dashboard/Milestones page to be blank. !3348
Rémy Coutable's avatar
Rémy Coutable committed
454
455

v 8.6.0
456
  - Add ability to move issue to another project
James Lopez's avatar
James Lopez committed
457
  - Prevent tokens in the import URL to be showed by the UI
458
  - Fix bug where wrong commit ID was being used in a merge request diff to show old image (Stan Hu)
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
459
  - Add confidential issues
Stan Hu's avatar
Stan Hu committed
460
  - Bump gitlab_git to 9.0.3 (Stan Hu)
461
  - Fix diff image view modes (2-up, swipe, onion skin) not working (Stan Hu)
462
  - Support Golang subpackage fetching (Stan Hu)
Stan Hu's avatar
Stan Hu committed
463
  - Bump Capybara gem to 2.6.2 (Stan Hu)
464
  - New branch button appears on issues where applicable
465
  - Contributions to forked projects are included in calendar
466
  - Improve the formatting for the user page bio (Connor Shea)
467
  - Easily (un)mark merge request as WIP using link
468
  - Use specialized system notes when MR is (un)marked as WIP
469
470
471
  - Removed the default password from the initial admin account created during
    setup. A password can be provided during setup (see installation docs), or
    GitLab will ask the user to create a new one upon first visit.
James Lopez's avatar
James Lopez committed
472
  - Fix issue when pushing to projects ending in .wiki
Rémy Coutable's avatar
Rémy Coutable committed
473
  - Properly display YAML front matter in Markdown
474
  - Add support for wiki with UTF-8 page names (Hiroyuki Sato)
475
  - Fix wiki search results point to raw source (Hiroyuki Sato)
476
  - Don't load all of GitLab in mail_room
Rémy Coutable's avatar
Rémy Coutable committed
477
  - Add information about `image` and `services` field at `job` level in the `.gitlab-ci.yml` documentation (Pat Turner)
478
  - HTTP error pages work independently from location and config (Artem Sidorenko)
479
  - Update `omniauth-saml` to 1.5.0 to allow for custom response attributes to be set
480
  - Memoize @group in Admin::GroupsController (Yatish Mehta)
481
  - Indicate how much an MR diverged from the target branch (Pierre de La Morinerie)
482
  - Added omniauth-auth0 Gem (Daniel Carraro)
483
  - Add label description in tooltip to labels in issue index and sidebar
484
  - Strip leading and trailing spaces in URL validator (evuez)
485
  - Add "last_sign_in_at" and "confirmed_at" to GET /users/* API endpoints for admins (evuez)
486
  - Return empty array instead of 404 when commit has no statuses in commit status API
487
  - Decrease the font size and the padding of the `.anchor` icons used in the README (Roberto Dip)
Sean Lang's avatar
Sean Lang committed
488
  - Rewrite logo to simplify SVG code (Sean Lang)
489
490
  - Allow to use YAML anchors when parsing the `.gitlab-ci.yml` (Pascal Bach)
  - Ignore jobs that start with `.` (hidden jobs)
491
  - Hide builds from project's settings when the feature is disabled
492
  - Allow to pass name of created artifacts archive in `.gitlab-ci.yml`
493
  - Refactor and greatly improve search performance
494
  - Add support for cross-project label references
495
  - Ensure "new SSH key" email do not ends up as dead Sidekiq jobs
496
  - Update documentation to reflect Guest role not being enforced on internal projects
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
497
  - Allow search for logged out users
498
  - Allow to define on which builds the current one depends on
499
  - Allow user subscription to a label: get notified for issues/merge requests related to that label (Timothy Andrew)
500
  - Fix bug where Bitbucket `closed` issues were imported as `opened` (Iuri de Silvio)
Rubén Dávila's avatar
Rubén Dávila committed
501
  - Don't show Issues/MRs from archived projects in Groups view
502
  - Fix wrong "iid of max iid" in Issuable sidebar for some merged MRs
503
  - Fix empty source_sha on Merge Request when there is no diff (Pierre de La Morinerie)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
504
  - Increase the notes polling timeout over time (Roberto Dip)
505
  - Add shortcut to toggle markdown preview (Florent Baldino)
506
  - Show labels in dashboard and group milestone views
507
  - Fix an issue when the target branch of a MR had been deleted
tiagonbotelho's avatar
tiagonbotelho committed
508
  - Add main language of a project in the list of projects (Tiago Botelho)
509
  - Add #upcoming filter to Milestone filter (Tiago Botelho)
510
  - Add ability to show archived projects on dashboard, explore and group pages
511
  - Remove fork link closes all merge requests opened on source project (Florent Baldino)
512
  - Move group activity to separate page
513
  - Create external users which are excluded of internal and private projects unless access was explicitly granted
Zeger-Jan van de Weg's avatar
Zeger-Jan van de Weg committed
514
  - Continue parameters are checked to ensure redirection goes to the same instance
515
  - User deletion is now done in the background so the request can not time out
Geoffrey Lalonde's avatar
Geoffrey Lalonde committed
516
  - Canceled builds are now ignored in compound build status if marked as `allowed to fail`
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
517
  - Trigger a todo for mentions on commits page
518
  - Let project owners and admins soft delete issues and merge requests
Rémy Coutable's avatar
Rémy Coutable committed
519

520
521
522
523
524
525
526
527
528
529
530
v 8.5.12
  - Prevent privilege escalation via "impersonate" feature
  - Prevent privilege escalation via notes API
  - Prevent privilege escalation via project webhook API
  - Prevent XSS via Git branch and tag names
  - Prevent XSS via custom issue tracker URL
  - Prevent XSS via `window.opener`
  - Prevent information disclosure via snippet API
  - Prevent information disclosure via project labels
  - Prevent information disclosure via new merge request page

531
532
533
v 8.5.11
  - Fix persistent XSS vulnerability in `commit_person_link` helper

534
535
536
v 8.5.10
  - Fix a 2FA authentication spoofing vulnerability.

Rémy Coutable's avatar
Rémy Coutable committed
537
538
539
v 8.5.9
  - Don't attempt to fetch any tags from a forked repo (Stan Hu).

540
541
542
v 8.5.8
  - Bump Git version requirement to 2.7.4

Douwe Maan's avatar
Douwe Maan committed
543
v 8.5.7
544
  - Bump Git version requirement to 2.7.3
Rémy Coutable's avatar
Rémy Coutable committed
545

Rémy Coutable's avatar
Rémy Coutable committed
546
547
548
v 8.5.6
  - Obtain a lease before querying LDAP

Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
549
v 8.5.5
Rémy Coutable's avatar
Rémy Coutable committed
550
551
552
553
  - Ensure removing a project removes associated Todo entries
  - Prevent a 500 error in Todos when author was removed
  - Fix pagination for filtered dashboard and explore pages
  - Fix "Show all" link behavior
Rémy Coutable's avatar
Rémy Coutable committed
554

555
v 8.5.4
556
557
  - Do not cache requests for badges (including builds badge)

Rémy Coutable's avatar
Rémy Coutable committed
558
559
v 8.5.3
  - Flush repository caches before renaming projects
560
  - Sort starred projects on dashboard based on last activity by default
Rubén Dávila's avatar
Rubén Dávila committed
561
  - Show commit message in JIRA mention comment
562
  - Makes issue page and merge request page usable on mobile browsers.
Phil Hughes's avatar
Phil Hughes committed
563
  - Improved UI for profile settings
Rémy Coutable's avatar
Rémy Coutable committed
564

Robert Speicher's avatar
Robert Speicher committed
565
566
v 8.5.2
  - Fix sidebar overlapping content when screen width was below 1200px
Rémy Coutable's avatar
Rémy Coutable committed
567
568
  - Don't repeat labels listed on Labels tab
  - Bring the "branded appearance" feature from EE to CE
Robert Speicher's avatar
Robert Speicher committed
569
  - Fix error 500 when commenting on a commit
Rémy Coutable's avatar
Rémy Coutable committed
570
  - Show days remaining instead of elapsed time for Milestone
571
  - Fix broken icons on installations with relative URL (Artem Sidorenko)
Rémy Coutable's avatar
Rémy Coutable committed
572
  - Fix issue where tag list wasn't refreshed after deleting a tag
Kazuki Sawada's avatar
Kazuki Sawada committed
573
  - Fix import from gitlab.com (KazSawada)
Rémy Coutable's avatar
Rémy Coutable committed
574
575
  - Improve implementation to check read access to forks and add pagination
  - Don't show any "2FA required" message if it's not actually required
576
  - Fix help keyboard shortcut on relative URL setups (Artem Sidorenko)
Rémy Coutable's avatar
Rémy Coutable committed
577
578
  - Update Rails to 4.2.5.2
  - Fix permissions for deprecated CI build status badge
579
  - Don't show "Welcome to GitLab" when the search didn't return any projects
Rémy Coutable's avatar
Rémy Coutable committed
580
  - Add Todos documentation
Rémy Coutable's avatar
Rémy Coutable committed
581
582
583

v 8.5.1
  - Fix group projects styles
584
  - Show Crowd login tab when sign in is disabled and Crowd is enabled (Peter Hudec)
Rémy Coutable's avatar
Rémy Coutable committed
585
586
587
588
589
590
591
592
593
594
  - Fix a set of small UI glitches in project, profile, and wiki pages
  - Restrict permissions on public/uploads
  - Fix the merge request side-by-side view after loading diff results
  - Fix the look of tooltip for the "Revert" button
  - Add when the Builds & Runners API changes got introduced
  - Fix error 500 on some merged merge requests
  - Fix an issue causing the content of the issuable sidebar to disappear
  - Fix error 500 when trying to mark an already done todo as "done"
  - Fix an issue where MRs weren't sortable
  - Issues can now be dragged & dropped into empty milestone lists. This is also
Rémy Coutable's avatar
Rémy Coutable committed
595
    possible with MRs
Rémy Coutable's avatar
Rémy Coutable committed
596
597
598
  - Changed padding & background color for highlighted notes
  - Re-add the newrelic_rpm gem which was removed without any deprecation or warning (Stan Hu)
  - Update sentry-raven gem to 0.15.6
599
  - Add build coverage in project's builds page (Steffen Köhler)
600
  - Changed # to ! for merge requests in activity view
601
602

v 8.5.0
603
  - Fix duplicate "me" in tooltip of the "thumbsup" awards Emoji (Stan Hu)
Rémy Coutable's avatar
Rémy Coutable committed
604
  - Cache various Repository methods to improve performance
ashleys's avatar
ashleys committed
605
  - Fix duplicated branch creation/deletion Webhooks/service notifications when using Web UI (Stan Hu)
606
  - Ensure rake tasks that don't need a DB connection can be run without one
607
  - Update New Relic gem to 3.14.1.311 (Stan Hu)
608
  - Add "visibility" flag to GET /projects api endpoint
609
  - Add an option to supply root email through an environmental variable (Koichiro Mikami)
610
  - Ignore binary files in code search to prevent Error 500 (Stan Hu)
Stan Hu's avatar
Stan Hu committed
611
  - Render sanitized SVG images (Stan Hu)
612
  - Support download access by PRIVATE-TOKEN header (Stan Hu)
613
  - Upgrade gitlab_git to 7.2.23 to fix commit message mentions in first branch push
614
  - Add option to include the sender name in body of Notify email (Jason Lee)
615
  - New UI for pagination
Robert Speicher's avatar
Robert Speicher committed
616
617
  - Don't prevent sign out when 2FA enforcement is enabled and user hasn't yet
    set it up
618
  - API: Added "merge_requests/:merge_request_id/closes_issues" (Gal Schlezinger)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
619
  - Fix diff comments loaded by AJAX to load comment with diff in discussion tab
620
  - Fix relative links in other markup formats (Ben Boeckel)
621
  - Whitelist raw "abbr" elements when parsing Markdown (Benedict Etzel)
622
  - Fix label links for a merge request pointing to issues list
623
  - Don't vendor minified JS
624
  - Increase project import timeout to 15 minutes
625
  - Be more permissive with email address validation: it only has to contain a single '@'
626
  - Display 404 error on group not found
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
627
  - Track project import failure
628
  - Support Two-factor Authentication for LDAP users
629
  - Display database type and version in Administration dashboard
630
  - Allow limited Markdown in Broadcast Messages
631
  - Fix visibility level text in admin area (Zeger-Jan van de Weg)
Robert Speicher's avatar
Robert Speicher committed
632
  - Warn admin during OAuth of granting admin rights (Zeger-Jan van de Weg)
Robert Speicher's avatar
Robert Speicher committed
633
  - Update the ExternalIssue regex pattern (Blake Hitchcock)
Robert Speicher's avatar
Robert Speicher committed
634
  - Remember user's inline/side-by-side diff view preference in a cookie (Kirill Katsnelson)
635
  - Optimized performance of finding issues to be closed by a merge request
636
637
638
639
640
  - Add `avatar_url`, `description`, `git_ssh_url`, `git_http_url`, `path_with_namespace`
    and `default_branch` in `project` in push, issue, merge-request and note webhooks data (Kirill Zaitsev)
  - Deprecate the `ssh_url` in favor of `git_ssh_url` and `http_url` in favor of `git_http_url`
    in `project` for push, issue, merge-request and note webhooks data (Kirill Zaitsev)
  - Deprecate the `repository` key in push, issue, merge-request and note webhooks data, use `project` instead (Kirill Zaitsev)
641
  - API: Expose MergeRequest#merge_status (Andrei Dziahel)
642
  - Revert "Add IP check against DNSBLs at account sign-up"
643
  - Actually use the `skip_merges` option in Repository#commits (Tony Chu)
644
  - Fix API to keep request parameters in Link header (Michael Potthoff)
645
646
  - Deprecate API "merge_request/:merge_request_id/comments". Use "merge_requests/:merge_request_id/notes" instead
  - Deprecate API "merge_request/:merge_request_id/...". Use "merge_requests/:merge_request_id/..." instead
James Lopez's avatar
James Lopez committed
647
  - Prevent parse error when name of project ends with .atom and prevent path issues
648
  - Discover branches for commit statuses ref-less when doing merge when succeeded
649
  - Mark inline difference between old and new paths when a file is renamed
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
650
  - Support Akismet spam checking for creation of issues via API (Stan Hu)
651
  - API: Allow to set or update a merge-request's milestone (Kirill Skachkov)
652
  - Improve UI consistency between projects and groups lists
653
  - Add sort dropdown to dashboard projects page
654
  - Fixed logo animation on Safari (Roman Rott)
655
  - Fix Merge When Succeeded when multiple stages
656
  - Hide remove source branch button when the MR is merged but new commits are pushed (Zeger-Jan van de Weg)
657
  - In seach autocomplete show only groups and projects you are member of
James Lopez's avatar
James Lopez committed
658
  - Don't process cross-reference notes from forks
659
  - Fix: init.d script not working on OS X
Valery Sizov's avatar
Valery Sizov committed
660
  - Faster snippet search
661
  - Added API to download build artifacts
662
  - Title for milestones should be unique (Zeger-Jan van de Weg)
663
  - Validate correctness of maximum attachment size application setting
664
  - Replaces "Create merge request" link with one to the "Merge Request" when one exists
665
  - Fix CI builds badge, add a new link to builds badge, deprecate the old one
666
  - Fix broken link to project in build notification emails
667
  - Ability to see and sort on vote count from Issues and MR lists
668
  - Fix builds scheduler when first build in stage was allowed to fail
669
  - User project limit is reached notice is hidden if the projects limit is zero
Tomasz Maczukin's avatar
Tomasz Maczukin committed
670
  - Add API support for managing runners and project's runners
671
672
673
  - Allow SAML users to login with no previous account without having to allow
    all Omniauth providers to do so.
  - Allow existing users to auto link their SAML credentials by logging in via SAML
674
  - Make it possible to erase a build (trace, artifacts) using UI and API
Rubén Dávila's avatar
Rubén Dávila committed
675
  - Ability to revert changes from a Merge Request or Commit
676
  - Emoji comment on diffs are not award emoji
Tap's avatar
Tap committed
677
678
  - Add label description (Nuttanart Pornprasitsakul)
  - Show label row when filtering issues or merge requests by label (Nuttanart Pornprasitsakul)
679
  - Add Todos
680

681
682
683
684
685
686
687
688
689
690
691
v 8.4.10
  - Prevent privilege escalation via "impersonate" feature
  - Prevent privilege escalation via notes API
  - Prevent privilege escalation via project webhook API
  - Prevent XSS via Git branch and tag names
  - Prevent XSS via custom issue tracker URL
  - Prevent XSS via `window.opener`
  - Prevent information disclosure via snippet API
  - Prevent information disclosure via project labels
  - Prevent information disclosure via new merge request page

692
693
694
v 8.4.9
  - Fix persistent XSS vulnerability in `commit_person_link` helper

695
696
697
v 8.4.8
  - Fix a 2FA authentication spoofing vulnerability.

698
699
700
701
702
703
v 8.4.7
  - Don't attempt to fetch any tags from a forked repo (Stan Hu).

v 8.4.6
  - Bump Git version requirement to 2.7.4

Robert Speicher's avatar
Robert Speicher committed
704
705
706
v 8.4.5
  - No CE-specific changes

Robert Speicher's avatar
Robert Speicher committed
707
708
v 8.4.4
  - Update omniauth-saml gem to 1.4.2
Robert Speicher's avatar
Robert Speicher committed
709
710
  - Prevent long-running backup tasks from timing out the database connection
  - Add a Project setting to allow guests to view build logs (defaults to true)
711
  - Sort project milestones by due date including issue editor (Oliver Rogers / Orih)
Robert Speicher's avatar
Robert Speicher committed
712

713
v 8.4.3
Robert Speicher's avatar
Robert Speicher committed
714
715
716
717
718
719
  - Increase lfs_objects size column to 8-byte integer to allow files larger
    than 2.1GB
  - Correctly highlight MR diff when MR has merge conflicts
  - Fix highlighting in blame view
  - Update sentry-raven gem to prevent "Not a git repository" console output
    when running certain commands
Robert Speicher's avatar
Robert Speicher committed
720
721
722
  - Add instrumentation to additional Gitlab::Git and Rugged methods for
    performance monitoring
  - Allow autosize textareas to also be manually resized
723

Robert Speicher's avatar
Robert Speicher committed
724
v 8.4.2
Robert Speicher's avatar
Robert Speicher committed
725
726
727
  - Bump required gitlab-workhorse version to bring in a fix for missing
    artifacts in the build artifacts browser
  - Get rid of those ugly borders on the file tree view
728
  - Fix updating the runner information when asking for builds
Robert Speicher's avatar
Robert Speicher committed
729
730
731
732
  - Bump gitlab_git version to 7.2.24 in order to bring in a performance
    improvement when checking if a repository was empty
  - Add instrumentation for Gitlab::Git::Repository instance methods so we can
    track them in Performance Monitoring.
Robert Speicher's avatar
Robert Speicher committed
733
  - Increase contrast between highlighted code comments and inline diff marker
734
  - Fix method undefined when using external commit status in builds
Douwe Maan's avatar
Douwe Maan committed
735
  - Fix highlighting in blame view.
736

Robert Speicher's avatar
Robert Speicher committed
737
738
739
740
741
v 8.4.1
  - Apply security updates for Rails (4.2.5.1), rails-html-sanitizer (1.0.3),
    and Nokogiri (1.6.7.2)
  - Fix redirect loop during import
  - Fix diff highlighting for all syntax themes