CHANGELOG 160 KB
Newer Older
1
2
Please view this file on the master branch, on stable branches it's out of date.

Rémy Coutable's avatar
Rémy Coutable committed
3
v 8.10.0 (unreleased)
4
  - Fix commit builds API, return all builds for all pipelines for given commit. !4849
5
  - Replace Haml with Hamlit to make view rendering faster. !3666
Rémy Coutable's avatar
Rémy Coutable committed
6
  - Wrap code blocks on Activies and Todos page. !4783 (winniehell)
7
  - Align flash messages with left side of page content !4959 (winniehell)
8
  - Display last commit of deleted branch in push events !4699 (winniehell)
9
  - Add Sidekiq queue duration to transaction metrics.
10
  - Let Workhorse serve format-patch diffs
11
  - Make images fit to the size of the viewport !4810
12
  - Fix check for New Branch button on Issue page !4630 (winniehell)
Rémy Coutable's avatar
Rémy Coutable committed
13
  - Fix MR-auto-close text added to description. !4836
14
  - Fix pagination when sorting by columns with lots of ties (like priority)
15
  - Exclude email check from the standard health check
16
  - Fix changing issue state columns in milestone view
17
  - Fix user creation with stronger minimum password requirements !4054 (nathan-pmt)
18
  - PipelinesFinder uses git cache data
19
  - Check for conflicts with existing Project's wiki path when creating a new project.
20
  - Remove unused front-end variable -> default_issues_tracker
21
  - Add API endpoint for a group issues !4520 (mahcsig)
22
  - Add Bugzilla integration !4930 (iamtjg)
Simon Welsh's avatar
Simon Welsh committed
23
  - Allow [ci skip] to be in any case and allow [skip ci]. !4785 (simon_w)
Josh Frye's avatar
Josh Frye committed
24
  - Add basic system information like memory and disk usage to the admin panel
Rémy Coutable's avatar
Rémy Coutable committed
25

James Lopez's avatar
James Lopez committed
26
v 8.9.3 (unreleased)
27
  - MergeRequestDiff reload content use update_columns to avoid multiple YAML de/serializations
Annabel Dunstone's avatar
Annabel Dunstone committed
28
  - Decreased min width of screen to 1280px for pinned sidebar
James Lopez's avatar
James Lopez committed
29
  - Fix encrypted data backwards compatibility after upgrading attr_encrypted gem
Alfredo Sumaran's avatar
Alfredo Sumaran committed
30
  - Update mobile button icons to be more inline with typical UI paradigms
Alfredo Sumaran's avatar
Alfredo Sumaran committed
31
  - Fixes missing avatar on system notes. !4954
32
  - Improve performance of obtaining the maximum access of a user in a project
James Lopez's avatar
James Lopez committed
33

Patricio Cano's avatar
Patricio Cano committed
34
v 8.9.2
35
36
  - Fix visibility of snippets when searching.
  - Fix an information disclosure when requesting access to a group containing private projects.
Patricio Cano's avatar
Patricio Cano committed
37
38
  - Update omniauth-saml to 1.6.0 !4951

James Lopez's avatar
James Lopez committed
39
v 8.9.1
Robert Speicher's avatar
Robert Speicher committed
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
  - Refactor labels documentation. !3347
  - Eager load award emoji on notes. !4628
  - Fix some CI wording in documentation. !4660
  - Document `GIT_STRATEGY` and `GIT_DEPTH`. !4720
  - Add documentation for the export & import features. !4732
  - Add some docs for Docker Registry configuration. !4738
  - Ensure we don't send the "access request declined" email to access requesters on project deletion. !4744
  - Display group/project access requesters separately in the admin area. !4798
  - Add documentation and examples for configuring cloud storage for registry images. !4812
  - Clarifies documentation about artifact expiry. !4831
  - Fix the Network graph links. !4832
  - Fix MR-auto-close text added to description. !4836
  - Add documentation for award emoji now that comments can be awarded with emojis. !4839
  - Fix typo in export failure email. !4847
  - Fix header vertical centering. !4170
  - Fix subsequent SAML sign ins. !4718
  - Set button label when picking an option from status dropdown. !4771
  - Prevent invalid URLs from raising exceptions in WikiLink Filter. !4775
  - Handle external issues in IssueReferenceFilter. !4789
  - Support for rendering/redacting multiple documents. !4828
  - Update Todos documentation and screenshots to include new functionality. !4840
  - Hide nav arrows by default. !4843
  - Added bottom padding to label color suggestion link. !4845
  - Use jQuery objects in ref dropdown. !4850
  - Fix GitLab project import issues related to notes and builds. !4855
  - Restrict header logo to 36px so it doesn't overflow. !4861
  - Fix unwanted label unassignment. !4863
  - Fix mobile Safari bug where horizontal nav arrows would flicker on scroll. !4869
  - Restore old behavior around diff notes to outdated discussions. !4870
  - Fix merge requests project settings help link anchor. !4873
  - Fix 404 when accessing pipelines as guest user on public projects. !4881
  - Remove width restriction for logo on sign-in page. !4888
  - Bump gitlab_git to 10.2.3 to fix false truncated warnings with ISO-8559 files. !4884
  - Apply selected value as label. !4886
  - Fix temp file being deleted after the request while importing a GitLab project. !4894
  - Fix pagination when sorting by columns with lots of ties (like priority)
  - Implement Subresource Integrity for CSS and JavaScript assets. This prevents malicious assets from loading in the case of a CDN compromise.
  - Fix user creation with stronger minimum password requirements !4054 (nathan-pmt)
  - Fix a wrong MR status when merge_when_build_succeeds & project.only_allow_merge_if_build_succeeds are true. !4912
  - Add SMTP as default delivery method to match gitlab-org/omnibus-gitlab!826. !4915
Annabel Dunstone's avatar
Annabel Dunstone committed
80
  - Remove duplicate 'New Page' button on edit wiki page
James Lopez's avatar
James Lopez committed
81

Rémy Coutable's avatar
Rémy Coutable committed
82
v 8.9.0
83
84
v 8.9.0 (unreleased)
  - Fix group visibility form layout in application settings
85
  - Fix builds API response not including commit data
86
  - Fix error when CI job variables key specified but not defined
87
  - Fix pipeline status when there are no builds in pipeline
88
  - Fix Error 500 when using closes_issues API with an external issue tracker
89
  - Add more information into RSS feed for issues (Alexander Matyushentsev)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
90
  - Bulk assign/unassign labels to issues.
Alfredo Sumaran's avatar
Alfredo Sumaran committed
91
  - Ability to prioritize labels !4009 / !3205 (Thijs Wouters)
92
  - Show Star and Fork buttons on mobile.
93
  - Performance improvements on RelativeLinkFilter
94
  - Fix endless redirections when accessing user OAuth applications when they are disabled
95
  - Allow enabling wiki page events from Webhook management UI
Stan Hu's avatar
Stan Hu committed
96
  - Bump rouge to 1.11.0
97
  - Fix issue with arrow keys not working in search autocomplete dropdown
98
99
  - Fix an issue where note polling stopped working if a window was in the
    background during a refresh.
100
  - Pre-processing Markdown now only happens when needed
101
  - Make EmailsOnPushWorker use Sidekiq mailers queue
102
  - Redesign all Devise emails. !4297
103
  - Don't show 'Leave Project' to group members
104
  - Fix wiki page events' webhook to point to the wiki repository
105
  - Add a border around images to differentiate them from the background.
106
  - Don't show tags for revert and cherry-pick operations
107
  - Show image ID on registry page
Long Nguyen's avatar
Long Nguyen committed
108
  - Fix issue todo not remove when leave project !4150 (Long Nguyen)
109
  - Allow customisable text on the 'nearly there' page after a user signs up
110
  - Bump recaptcha gem to 3.0.0 to remove deprecated stoken support
111
  - Fix SVG sanitizer to allow more elements
112
  - Allow forking projects with restricted visibility level
113
  - Added descriptions to notification settings dropdown
114
  - Improve note validation to prevent errors when creating invalid note via API
115
  - Reduce number of fog gem dependencies
116
  - Add number of merge requests for a given milestone to the milestones view.
Kamil Trzcinski's avatar
Kamil Trzcinski committed
117
  - Implement a fair usage of shared runners
118
  - Remove project notification settings associated with deleted projects
119
  - Fix 404 page when viewing TODOs that contain milestones or labels in different projects
Sean McGivern's avatar
Sean McGivern committed
120
  - Add a metric for the number of new Redis connections created by a transaction
121
  - Fix Error 500 when viewing a blob with binary characters after the 1024-byte mark
122
  - Redesign navigation for project pages
Sean McGivern's avatar
Sean McGivern committed
123
  - Fix images in sign-up confirmation email
124
  - Added shortcut 'y' for copying a files content hash URL #14470
125
  - Fix groups API to list only user's accessible projects
Fatih Acet's avatar
Fatih Acet committed
126
  - Fix horizontal scrollbar for long commit message.
127
  - GitLab Performance Monitoring now tracks the total method execution time and call count per method
Kamil Trzcinski's avatar
Kamil Trzcinski committed
128
  - Add Environments and Deployments
129
  - Redesign account and email confirmation emails
130
  - Don't fail builds for projects that are deleted
131
  - Support Docker Registry manifest v1
132
  - `git clone https://host/namespace/project` now works, in addition to using the `.git` suffix
Stan Hu's avatar
Stan Hu committed
133
  - Bump nokogiri to 1.6.8
134
  - Use gitlab-shell v3.0.0
135
  - Fixed alignment of download dropdown in merge requests
136
  - Upgrade to jQuery 2
Phil Hughes's avatar
Phil Hughes committed
137
  - Adds selected branch name to the dropdown toggle
Patricio Cano's avatar
Patricio Cano committed
138
  - Add API endpoint for Sidekiq Metrics !4653
139
  - Refactoring Award Emoji with API support for Issues and MergeRequests
Kamil Trzcinski's avatar
Kamil Trzcinski committed
140
  - Use Knapsack to evenly distribute tests across multiple nodes
141
  - Add `sha` parameter to MR merge API, to ensure only reviewed changes are merged
142
  - Don't allow MRs to be merged when commits were added since the last review / page load
Stan Hu's avatar
Stan Hu committed
143
  - Add DB index on users.state
Sean McGivern's avatar
Sean McGivern committed
144
  - Limit email on push diff size to 30 files / 150 KB
145
  - Add rake task 'gitlab:db:configure' for conditionally seeding or migrating the database
Aran Koning's avatar
Aran Koning committed
146
  - Changed the Slack build message to use the singular duration if necessary (Aran Koning)
Z.J. van de Weg's avatar
Z.J. van de Weg committed
147
  - Fix race condition on merge when build succeeds
Timothy Andrew's avatar
Timothy Andrew committed
148
  - Links from a wiki page to other wiki pages should be rewritten as expected
149
  - Add option to project to only allow merge requests to be merged if the build succeeds (Rui Santos)
150
  - Added navigation shortcuts to the project pipelines, milestones, builds and forks page. !4393
151
  - Fix issues filter when ordering by milestone
152
  - Disable SAML account unlink feature
Kamil Trzcinski's avatar
Kamil Trzcinski committed
153
  - Added artifacts:when to .gitlab-ci.yml - this requires GitLab Runner 1.3
154
  - Bamboo Service: Fix missing credentials & URL handling when base URL contains a path (Benjamin Schmid)
155
  - TeamCity Service: Fix URL handling when base URL contains a path
Alfredo Sumaran's avatar
Alfredo Sumaran committed
156
  - Todos will display target state if issuable target is 'Closed' or 'Merged'
157
  - Validate only and except regexp
158
  - Fix bug when sorting issues by milestone due date and filtering by two or more labels
159
  - POST to API /projects/:id/runners/:runner_id would give 409 if the runner was already enabled for this project
160
  - Add support for using Yubikeys (U2F) for two-factor authentication
Sean McGivern's avatar
Sean McGivern committed
161
  - Link to blank group icon doesn't throw a 404 anymore
Josh Frye's avatar
Josh Frye committed
162
  - Remove 'main language' feature
163
  - Toggle whitespace button now available for compare branches diffs #17881
164
  - Pipelines can be canceled only when there are running builds
Timothy Andrew's avatar
Timothy Andrew committed
165
  - Allow authentication using personal access tokens
166
  - Use downcased path to container repository as this is expected path by Docker
Kamil Trzcinski's avatar
WIP    
Kamil Trzcinski committed
167
  - Allow to use CI token to fetch LFS objects
168
  - Custom notification settings
169
  - Projects pending deletion will render a 404 page
170
  - Measure queue duration between gitlab-workhorse and Rails
Fatih Acet's avatar
Fatih Acet committed
171
  - Added Gfm autocomplete for labels
172
  - Added edit note 'up' shortcut documentation to the help panel and docs screenshot #18114
173
  - Make Omniauth providers specs to not modify global configuration
Robert Speicher's avatar
Robert Speicher committed
174
  - Remove unused JiraIssue class and replace references with ExternalIssue. !4659 (Ilan Shamir)
175
  - Make authentication service for Container Registry to be compatible with < Docker 1.11
176
  - Make it possible to lock a runner from being enabled for other projects
177
  - Add Application Setting to configure Container Registry token expire delay (default 5min)
Josh Frye's avatar
Josh Frye committed
178
  - Cache assigned issue and merge request counts in sidebar nav
179
  - Use Knapsack only in CI environment
180
  - Updated project creation page to match new UI #2542
Josh Frye's avatar
Josh Frye committed
181
  - Cache project build count in sidebar nav
Fatih Acet's avatar
Fatih Acet committed
182
  - Add milestone expire date to the right sidebar
Phil Hughes's avatar
Phil Hughes committed
183
  - Manually mark a issue or merge request as a todo
184
  - Fix markdown_spec to use before instead of before(:all) to properly cleanup database after testing
185
  - Reduce number of queries needed to render issue labels in the sidebar
James Lopez's avatar
James Lopez committed
186
  - Improve error handling importing projects
187
  - Remove duplicated notification settings
188
  - Put project Files and Commits tabs under Code tab
189
  - Decouple global notification level from user model
Connor Shea's avatar
Connor Shea committed
190
  - Replace Colorize with Rainbow for coloring console output in Rake tasks.
Douwe Maan's avatar
Douwe Maan committed
191
  - Add workhorse controller and API helpers
Connor Shea's avatar
Connor Shea committed
192
  - An indicator is now displayed at the top of the comment field for confidential issues.
Fatih Acet's avatar
Fatih Acet committed
193
  - Show categorised search queries in the search autocomplete
194
  - RepositoryCheck::SingleRepositoryWorker public and private methods are now instrumented
195
  - Dropdown for `.gitlab-ci.yml` templates
Alejandro Rodríguez's avatar
Alejandro Rodríguez committed
196
  - Improve issuables APIs performance when accessing notes !4471
197
  - Add sorting dropdown to tags page !4423
Alfredo Sumaran's avatar
Alfredo Sumaran committed
198
  - External links now open in a new tab
199
  - Prevent default actions of disabled buttons and links
Alfredo Sumaran's avatar
Alfredo Sumaran committed
200
  - Markdown editor now correctly resets the input value on edit cancellation !4175
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
201
  - Toggling a task list item in a issue/mr description does not creates a Todo for mentions
Phil Hughes's avatar
Phil Hughes committed
202
  - Improved UX of date pickers on issue & milestone forms
203
  - Cache on the database if a project has an active external issue tracker.
204
  - Put project Labels and Milestones pages links under Issues and Merge Requests tabs as subnav
James Lopez's avatar
James Lopez committed
205
  - GitLab project import and export functionality
206
  - All classes in the Banzai::ReferenceParser namespace are now instrumented
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
207
  - Remove deprecated issues_tracker and issues_tracker_id from project model
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
208
  - Allow users to create confidential issues in private projects
209
  - Measure CPU time for instrumented methods
210
  - Instrument private methods and private instance methods by default instead just public methods
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
211
  - Only show notes through JSON on confidential issues that the user has access to
212
213
  - Updated the allocations Gem to version 1.0.5
  - The background sampler now ignores classes without names
Annabel Dunstone's avatar
Annabel Dunstone committed
214
215
216
217
  - Update design for `Close` buttons
  - New custom icons for navigation
  - Horizontally scrolling navigation on project, group, and profile settings pages
  - Hide global side navigation by default
Fatih Acet's avatar
Fatih Acet committed
218
  - Fix project Star/Unstar project button tooltip
Annabel Dunstone's avatar
Annabel Dunstone committed
219
  - Remove tanuki logo from side navigation; center on top nav
220
  - Include user relationships when retrieving award_emoji
221
  - Various associations are now eager loaded when parsing issue references to reduce the number of queries executed
222
  - Set inverse_of for Project/Service association to reduce the number of queries
Annabel Dunstone's avatar
Annabel Dunstone committed
223
  - Update tanuki logo highlight/loading colors
224
  - Remove explicit Gitlab::Metrics.action assignments, are already automatic.
225
  - Use Git cached counters for branches and tags on project page
226
  - Cache participable participants in an instance variable.
227
  - Filter parameters for request_uri value on instrumented transactions.
228
  - Remove duplicated keys add UNIQUE index to keys fingerprint column
229
  - ExtractsPath get ref_names from repository cache, if not there access git.
230
  - Cache user todo counts from TodoService
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
231
  - Ensure Todos counters doesn't count Todos for projects pending delete
Annabel Dunstone's avatar
Annabel Dunstone committed
232
  - Add left/right arrows horizontal navigation
Annabel Dunstone's avatar
Annabel Dunstone committed
233
  - Add tooltip to pin/unpin navbar
Annabel Dunstone's avatar
Annabel Dunstone committed
234
  - Add new sub nav style to Wiki and Graphs sub navigation
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
235

236
237
238
239
v 8.8.6
  - Fix visibility of snippets when searching.
  - Update omniauth-saml to 1.6.0 !4951

Stan Hu's avatar
Stan Hu committed
240
241
242
243
244
245
246
247
248
249
v 8.8.5
  - Import GitHub repositories respecting the API rate limit !4166
  - Fix todos page throwing errors when you have a project pending deletion !4300
  - Disable Webhooks before proceeding with the GitHub import !4470
  - Fix importer for GitHub comments on diff !4488
  - Adjust the SAML control flow to allow LDAP identities to be added to an existing SAML user !4498
  - Fix incremental trace upload API when using multi-byte UTF-8 chars in trace !4541
  - Prevent unauthorized access for projects build traces
  - Forbid scripting for wiki files
  - Only show notes through JSON on confidential issues that the user has access to
250
  - Banzai::Filter::UploadLinkFilter use XPath instead CSS expressions
251
  - Banzai::Filter::ExternalLinkFilter use XPath instead CSS expressions
252
253
254

v 8.8.4
  - Fix LDAP-based login for users with 2FA enabled. !4493
255
256
  - Added descriptions to notification settings dropdown
  - Due date can be removed from milestones
257

James Lopez's avatar
James Lopez committed
258
v 8.8.3
Robert Speicher's avatar
Robert Speicher committed
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
  - Fix 404 page when viewing TODOs that contain milestones or labels in different projects. !4312
  - Fixed JS error when trying to remove discussion form. !4303
  - Fixed issue with button color when no CI enabled. !4287
  - Fixed potential issue with 2 CI status polling events happening. !3869
  - Improve design of Pipeline view. !4230
  - Fix gitlab importer failing to import new projects due to missing credentials. !4301
  - Fix import URL migration not rescuing with the correct Error. !4321
  - Fix health check access token changing due to old application settings being used. !4332
  - Make authentication service for Container Registry to be compatible with Docker versions before 1.11. !4363
  - Add Application Setting to configure Container Registry token expire delay (default 5 min). !4364
  - Pass the "Remember me" value to the 2FA token form. !4369
  - Fix incorrect links on pipeline page when merge request created from fork.  !4376
  - Use downcased path to container repository as this is expected path by Docker. !4420
  - Fix wiki project clone address error (chujinjin). !4429
  - Fix serious performance bug with rendering Markdown with InlineDiffFilter.  !4392
  - Fix missing number on generated ordered list element. !4437
  - Prevent disclosure of notes on confidential issues in search results.
James Lopez's avatar
James Lopez committed
276

Robert Speicher's avatar
Robert Speicher committed
277
278
279
280
281
282
283
284
285
286
v 8.8.2
  - Added remove due date button. !4209
  - Fix Error 500 when accessing application settings due to nil disabled OAuth sign-in sources. !4242
  - Fix Error 500 in CI charts by gracefully handling commits with no durations. !4245
  - Fix table UI on CI builds page. !4249
  - Fix backups if registry is disabled. !4263
  - Fixed issue with merge button color. !4211
  - Fixed issue with enter key selecting wrong option in dropdown. !4210
  - When creating a .gitignore file a dropdown with templates will be provided. !4075
  - Fix concurrent request when updating build log in browser. !4183
287

Robert Speicher's avatar
Robert Speicher committed
288
289
v 8.8.1
  - Add documentation for the "Health Check" feature
Robert Speicher's avatar
Robert Speicher committed
290
  - Allow anonymous users to access a public project's pipelines !4233
291
  - Fix MySQL compatibility in zero downtime migrations helpers
292
  - Fix the CI login to Container Registry (the gitlab-ci-token user)
293

Robert Speicher's avatar
Robert Speicher committed
294
v 8.8.0
Douwe Maan's avatar
Douwe Maan committed
295
  - Implement GFM references for milestones (Alejandro Rodríguez)
296
  - Snippets tab under user profile. !4001 (Long Nguyen)
297
  - Fix error when using link to uploads in global snippets
298
  - Fix Error 500 when attempting to retrieve project license when HEAD points to non-existent ref
Long Nguyen's avatar
Long Nguyen committed
299
  - Assign labels and milestone to target project when moving issue. !3934 (Long Nguyen)
300
  - Use a case-insensitive comparison in sanitizing URI schemes
301
  - Toggle sign-up confirmation emails in application settings
302
  - Make it possible to prevent tagged runner from picking untagged jobs
303
304
  - Added `InlineDiffFilter` to the markdown parser. (Adam Butler)
  - Added inline diff styling for `change_title` system notes. (Adam Butler)
305
  - Project#open_branches has been cleaned up and no longer loads entire records into memory.
306
  - Escape HTML in commit titles in system note messages
307
  - Improve design of Pipeline View
Kamil Trzcinski's avatar
Kamil Trzcinski committed
308
  - Fix scope used when accessing container registry
309
  - Fix creation of Ci::Commit object which can lead to pending, failed in some scenarios
310
  - Improve multiple branch push performance by memoizing permission checking
311
  - Log to application.log when an admin starts and stops impersonating a user
312
  - Changing the confidentiality of an issue now creates a new system note (Alex Moore-Niemi)
Yorick Peterse's avatar
Yorick Peterse committed
313
314
  - Updated gitlab_git to 10.1.0
  - GitAccess#protected_tag? no longer loads all tags just to check if a single one exists
315
  - Reduce delay in destroying a project from 1-minute to immediately
316
  - Make build status canceled if any of the jobs was canceled and none failed
Stan Hu's avatar
Stan Hu committed
317
  - Upgrade Sidekiq to 4.1.2
DJ Mountney's avatar
DJ Mountney committed
318
  - Added /health_check endpoint for checking service status
319
  - Make 'upcoming' filter for milestones work better across projects
320
  - Sanitize repo paths in new project error message
321
  - Bump mail_room to 0.7.0 to fix stuck IDLE connections
322
  - Remove future dates from contribution calendar graph.
323
  - Support e-mail notifications for comments on project snippets
324
  - Fix API leak of notes of unauthorized issues, snippets and merge requests
325
  - Use ActionDispatch Remote IP for Akismet checking
326
  - Fix error when visiting commit builds page before build was updated
Alfredo Sumaran's avatar
Alfredo Sumaran committed
327
  - Add 'l' shortcut to open Label dropdown on issuables and 'i' to create new issue on a project
328
  - Update SVG sanitizer to conform to SVG 1.1
329
  - Speed up push emails with multiple recipients by only generating the email once
Phil Hughes's avatar
Phil Hughes committed
330
  - Updated search UI
Kamil Trzcinski's avatar
Kamil Trzcinski committed
331
  - Added authentication service for Container Registry
332
  - Display informative message when new milestone is created
333
  - Sanitize milestones and labels titles
334
  - Support multi-line tag messages. !3833 (Calin Seciu)
335
  - Force users to reset their password after an admin changes it
336
  - Allow "NEWS" and "CHANGES" as alternative names for CHANGELOG. !3768 (Connor Shea)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
337
  - Added button to toggle whitespaces changes on diff view
338
  - Backport GitHub Enterprise import support from EE
339
  - Create tags using Rugged for performance reasons. !3745
Felipe Artur's avatar
Felipe Artur committed
340
  - Allow guests to set notification level in projects
341
  - API: Expose Issue#user_notes_count. !3126 (Anton Popov)
342
  - Don't show forks button when user can't view forks
343
  - Fix atom feed links and rendering
344
  - Files over 5MB can only be viewed in their raw form, files over 1MB without highlighting !3718
345
  - Add support for supressing text diffs using .gitattributes on the default branch (Matt Oakes)
346
  - Add eager load paths to help prevent dependency load issues in Sidekiq workers. !3724
Jacob Schatz's avatar
Jacob Schatz committed
347
  - Added multiple colors for labels in dropdowns when dups happen.
Sean McGivern's avatar
Sean McGivern committed
348
  - Show commits in the same order as `git log`
349
  - Improve description for the Two-factor Authentication sign-in screen. (Connor Shea)
350
  - API support for the 'since' and 'until' operators on commit requests (Paco Guzman)
351
  - Fix Gravatar hint in user profile when Gravatar is disabled. !3988 (Artem Sidorenko)
352
  - Expire repository exists? and has_visible_content? caches after a push if necessary
353
  - Fix unintentional filtering bug in Issue/MR sorted by milestone due (Takuya Noguchi)
354
  - Fix adding a todo for private group members (Ahmad Sherif)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
355
  - Bump ace-rails-ap gem version from 2.0.1 to 4.0.2 which upgrades Ace Editor from 1.1.2 to 1.2.3
356
  - Total method execution timings are no longer tracked
Andrei Gliga's avatar
Andrei Gliga committed
357
  - Allow Admins to remove the Login with buttons for OAuth services and still be able to import !4034. (Andrei Gliga)
358
  - Add API endpoints for un/subscribing from/to a label. !4051 (Ahmad Sherif)
359
360
  - Hide left sidebar on phone screens to give more space for content
  - Redesign navigation for profile and group pages
361
  - Add counter metrics for rails cache
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
362
  - Import pull requests from GitHub where the source or target branches were removed
363
  - All Grape API helpers are now instrumented
364
  - Improve Issue formatting for the Slack Service (Jeroen van Baarsen)
Ludovic Perrine's avatar
Ludovic Perrine committed
365
  - Fixed advice on invalid permissions on upload path !2948 (Ludovic Perrine)
366
  - Allows MR authors to have the source branch removed when merging the MR. !2801 (Jeroen Jacobs)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
367
  - When creating a .gitignore file a dropdown with templates will be provided
368
  - Shows the issue/MR list search/filter form and corrects the mobile styling for guest users. #17562
369

370
371
372
373
v 8.7.8
  - Fix visibility of snippets when searching.
  - Update omniauth-saml to 1.6.0 !4951

James Lopez's avatar
James Lopez committed
374
375
v 8.7.7
  - Fix import by `Any Git URL` broken if the URL contains a space
376
377
378
  - Prevent unauthorized access to other projects build traces
  - Forbid scripting for wiki files
  - Only show notes through JSON on confidential issues that the user has access to
James Lopez's avatar
James Lopez committed
379

380
381
v 8.7.6
  - Fix links on wiki pages for relative url setups. !4131 (Artem Sidorenko)
Rémy Coutable's avatar
Rémy Coutable committed
382
383
  - Fix import from GitLab.com to a private instance failure. !4181
  - Fix external imports not finding the import data. !4106
384
  - Fix notification delay when changing status of an issue
385
  - Bump Workhorse to 0.7.5 so it can serve raw diffs
James Lopez's avatar
James Lopez committed
386

Timothy Andrew's avatar
Timothy Andrew committed
387
388
v 8.7.5
  - Fix relative links in wiki pages. !4050
Yorick Peterse's avatar
Yorick Peterse committed
389
390
  - Fix always showing build notification message when switching between merge requests !4086
  - Fix an issue when filtering merge requests with more than one label. !3886
391
  - Fix short note for the default scope on build page (Takuya Noguchi)
Timothy Andrew's avatar
Timothy Andrew committed
392

393
v 8.7.4
394
395
396
397
398
399
400
  - Links for Redmine issue references are generated correctly again !4048 (Benedikt Huss)
  - Fix setting trusted proxies !3970
  - Fix BitBucket importer bug when throwing exceptions !3941
  - Use sign out path only if not empty !3989
  - Running rake gitlab:db:drop_tables now drops tables with cascade !4020
  - Running rake gitlab:db:drop_tables uses "IF EXISTS" as a precaution !4100
  - Use a case-insensitive comparison in sanitizing URI schemes
401

402
403
v 8.7.3
  - Emails, Gitlab::Email::Message, Gitlab::Diff, and Premailer::Adapter::Nokogiri are now instrumented
404
  - Merge request widget displays TeamCity build state and code coverage correctly again.
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
405
  - Fix the line code when importing PR review comments from GitHub. !4010
406
  - Wikis are now initialized on legacy projects when checking repositories
407
  - Remove animate.css in favor of a smaller subset of animations. !3937 (Connor Shea)
408

Yorick Peterse's avatar
Yorick Peterse committed
409
v 8.7.2
410
  - The "New Branch" button is now loaded asynchronously
411
  - Fix error 500 when trying to create a wiki page
Yorick Peterse's avatar
Yorick Peterse committed
412
  - Updated spacing between notification label and button
413
  - Label titles in filters are now escaped properly
414
415

v 8.7.1
416
  - Throttle the update of `project.last_activity_at` to 1 minute. !3848
417
418
419
  - Fix .gitlab-ci.yml parsing issue when hidde job is a template without script definition. !3849
  - Fix license detection to detect all license files, not only known licenses. !3878
  - Use the `can?` helper instead of `current_user.can?`. !3882
420
  - Prevent users from deleting Webhooks via API they do not own
421
  - Fix Error 500 due to stale cache when projects are renamed or transferred
422
  - Update width of search box to fix Safari bug. !3900 (Jedidiah)
423
  - Use the `can?` helper instead of `current_user.can?`
424
425

v 8.7.0
426
  - Gitlab::GitAccess and Gitlab::GitAccessWiki are now instrumented
427
  - Fix vulnerability that made it possible to gain access to private labels and milestones
428
  - The number of InfluxDB points stored per UDP packet can now be configured
429
  - Fix error when cross-project label reference used with non-existent project
430
  - Transactions for /internal/allowed now have an "action" tag set
431
  - Method instrumentation now uses Module#prepend instead of aliasing methods
432
  - Repository.clean_old_archives is now instrumented
433
  - Add support for environment variables on a job level in CI configuration file
434
  - SQL query counts are now tracked per transaction
Rémy Coutable's avatar
Rémy Coutable committed
435
436
437
438
  - The Projects::HousekeepingService class has extra instrumentation
  - All service classes (those residing in app/services) are now instrumented
  - Developers can now add custom tags to transactions
  - Loading of an issue's referenced merge requests and related branches is now done asynchronously
439
  - Enable gzip for assets, makes the page size significantly smaller. !3544 / !3632 (Connor Shea)
Robert Speicher's avatar
Robert Speicher committed
440
  - Add support to cherry-pick any commit into any branch in the web interface (Minqi Pan)
Rémy Coutable's avatar
Rémy Coutable committed
441
  - Project switcher uses new dropdown styling
442
  - Load award emoji images separately unless opening the full picker. Saves several hundred KBs of data for most pages. (Connor Shea)
443
  - Do not include award_emojis in issue and merge_request comment_count !3610 (Lucas Charles)
Felipe Artur's avatar
Felipe Artur committed
444
  - Restrict user profiles when public visibility level is restricted.
Rémy Coutable's avatar
Rémy Coutable committed
445
  - Add ability set due date to issues, sort and filter issues by due date (Mehmet Beydogan)
446
  - All images in discussions and wikis now link to their source files !3464 (Connor Shea).
447
  - Return status code 303 after a branch DELETE operation to avoid project deletion (Stan Hu)
448
  - Add setting for customizing the list of trusted proxies !3524
Felipe Artur's avatar
Felipe Artur committed
449
  - Allow projects to be transfered to a lower visibility level group
450
  - Fix `signed_in_ip` being set to 127.0.0.1 when using a reverse proxy !3524
Rémy Coutable's avatar
Rémy Coutable committed
451
  - Improved Markdown rendering performance !3389
452
  - Make shared runners text in box configurable
453
  - Don't attempt to look up an avatar in repo if repo directory does not exist (Stan Hu)
454
  - API: Ability to subscribe and unsubscribe from issues and merge requests (Robert Schilling)
455
  - Expose project badges in project settings
456
  - Make /profile/keys/new redirect to /profile/keys for back-compat. !3717
457
  - Preserve time notes/comments have been updated at when moving issue
Rémy Coutable's avatar
Rémy Coutable committed
458
  - Make HTTP(s) label consistent on clone bar (Stan Hu)
459
  - Add support for `after_script`, requires Runner 1.2 (Kamil Trzciński)
460
  - Expose label description in API (Mariusz Jachimowicz)
461
  - API: Ability to update a group (Robert Schilling)
462
  - API: Ability to move issues (Robert Schilling)
463
  - Fix Error 500 after renaming a project path (Stan Hu)
464
  - Fix a bug whith trailing slash in teamcity_url (Charles May)
465
  - Allow back dating on issues when created or updated through the API
466
  - Allow back dating on issue notes when created through the API
467
468
  - Propose license template when creating a new LICENSE file
  - API: Expose /licenses and /licenses/:key
Alfredo Sumaran's avatar
Alfredo Sumaran committed
469
  - Fix avatar stretching by providing a cropping feature
470
  - API: Expose `subscribed` for issues and merge requests (Robert Schilling)
Patricio Cano's avatar
Patricio Cano committed
471
  - Allow SAML to handle external users based on user's information !3530
Patricio Cano's avatar
Patricio Cano committed
472
  - Allow Omniauth providers to be marked as `external` !3657
473
  - Add endpoints to archive or unarchive a project !3372
474
  - Fix a bug whith trailing slash in bamboo_url
475
  - Add links to CI setup documentation from project settings and builds pages
476
  - Display project members page to all members
477
  - Handle nil descriptions in Slack issue messages (Stan Hu)
478
  - Add automated repository integrity checks (OFF by default)
Robert Schilling's avatar
Robert Schilling committed
479
  - API: Expose open_issues_count, closed_issues_count, open_merge_requests_count for labels (Robert Schilling)
480
  - API: Ability to star and unstar a project (Robert Schilling)
481
  - Add default scope to projects to exclude projects pending deletion
482
  - Allow to close merge requests which source projects(forks) are deleted.
483
  - Ensure empty recipients are rejected in BuildsEmailService
P.S.V.R's avatar
P.S.V.R committed
484
  - Use rugged to change HEAD in Project#change_head (P.S.V.R)
485
  - API: Ability to filter milestones by state `active` and `closed` (Robert Schilling)
486
  - API: Fix milestone filtering by `iid` (Robert Schilling)
487
  - Make before_script and after_script overridable on per-job (Kamil Trzciński)
Robert Schilling's avatar
Robert Schilling committed
488
  - API: Delete notes of issues, snippets, and merge requests (Robert Schilling)
489
  - Implement 'Groups View' as an option for dashboard preferences !3379 (Elias W.)
Felipe Artur's avatar
Felipe Artur committed
490
  - Better errors handling when creating milestones inside groups
491
  - Fix high CPU usage when PostReceive receives refs/merge-requests/<id>
492
  - Hide `Create a group` help block when creating a new project in a group
493
  - Implement 'TODOs View' as an option for dashboard preferences !3379 (Elias W.)
494
  - Allow issues and merge requests to be assigned to the author !2765
Kamil Trzcinski's avatar
Kamil Trzcinski committed
495
  - Make Ci::Commit to group only similar builds and make it stateful (ref, tag)
496
  - Gracefully handle notes on deleted commits in merge requests (Stan Hu)
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
497
  - Decouple membership and notifications
498
  - Fix creation of merge requests for orphaned branches (Stan Hu)
Robert Schilling's avatar
Robert Schilling committed
499
  - API: Ability to retrieve a single tag (Robert Schilling)
500
  - While signing up, don't persist the user password across form redisplays
Rémy Coutable's avatar
Rémy Coutable committed
501
  - Fall back to `In-Reply-To` and `References` headers when sub-addressing is not available (David Padilla)
502
  - Remove "Congratulations!" tweet button on newly-created project. (Connor Shea)
PotHix's avatar
PotHix committed
503
  - Fix admin/projects when using visibility levels on search (PotHix)
504
  - Build status notifications
Phil Hughes's avatar
Phil Hughes committed
505
  - Update email confirmation interface
Robert Schilling's avatar
Robert Schilling committed
506
  - API: Expose user location (Robert Schilling)
507
  - API: Do not leak group existence via return code (Robert Schilling)
Jacob Schatz's avatar
Jacob Schatz committed
508
  - ClosingIssueExtractor regex now also works with colons. e.g. "Fixes: #1234" !3591
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
509
  - Update number of Todos in the sidebar when it's marked as "Done". !3600
Timothy Andrew's avatar
Timothy Andrew committed
510
  - Sanitize branch names created for confidential issues
511
  - API: Expose 'updated_at' for issue, snippet, and merge request notes (Robert Schilling)
512
  - API: User can leave a project through the API when not master or owner. !3613
513
  - Fix repository cache invalidation issue when project is recreated with an empty repo (Stan Hu)
514
  - Fix: Allow empty recipients list for builds emails service when pushed is added (Frank Groeneveld)
Phil Hughes's avatar
Phil Hughes committed
515
  - Improved markdown forms
516
517
518
  - Diff design updates (colors, button styles, etc)
  - Copying and pasting a diff no longer pastes the line numbers or +/-
  - Add null check to formData when updating profile content to fix Firefox bug
Arinde Eniola's avatar
Arinde Eniola committed
519
  - Disable spellcheck and autocorrect for username field in admin page
Robert Schilling's avatar
Robert Schilling committed
520
  - Delete tags using Rugged for performance reasons (Robert Schilling)
Sebastian Klier's avatar
Sebastian Klier committed
521
  - Add Slack notifications when Wiki is edited (Sebastian Klier)
Phil Hughes's avatar
Phil Hughes committed
522
523
  - Diffs load at the correct point when linking from from number
  - Selected diff rows highlight
Valery Sizov's avatar
Valery Sizov committed
524
  - Fix emoji categories in the emoji picker
525
  - API: Properly display annotated tags for GET /projects/:id/repository/tags (Robert Schilling)
James Lopez's avatar
James Lopez committed
526
  - Add encrypted credentials for imported projects and migrate old ones
527
  - Properly format all merge request references with ! rather than # !3740 (Ben Bodenmiller)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
528
  - Author and participants are displayed first on users autocompletion
BaldinoF's avatar
BaldinoF committed
529
  - Show number sign on external issue reference text (Florent Baldino)
Phil Hughes's avatar
Phil Hughes committed
530
  - Updated print style for issues
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
531
  - Use GitHub Issue/PR number as iid to keep references
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
532
  - Import GitHub labels
Alfredo Sumaran's avatar
Alfredo Sumaran committed
533
  - Add option to filter by "Owned projects" on dashboard page
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
534
  - Import GitHub milestones
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
535
  - Execute system web hooks on push to the project
536
  - Allow enable/disable push events for system hooks
537
  - Fix GitHub project's link in the import page when provider has a custom URL
Tomasz Maczukin's avatar
Tomasz Maczukin committed
538
  - Add RAW build trace output and button on build page
Tomasz Maczukin's avatar
Tomasz Maczukin committed
539
  - Add incremental build trace update into CI API
Rémy Coutable's avatar
Rémy Coutable committed
540

541
542
543
544
545
v 8.6.9
  - Prevent unauthorized access to other projects build traces
  - Forbid scripting for wiki files
  - Only show notes through JSON on confidential issues that the user has access to

546
547
548
549
550
551
552
553
554
555
556
557
558
v 8.6.8
  - Prevent privilege escalation via "impersonate" feature
  - Prevent privilege escalation via notes API
  - Prevent privilege escalation via project webhook API
  - Prevent XSS via Git branch and tag names
  - Prevent XSS via custom issue tracker URL
  - Prevent XSS via `window.opener`
  - Prevent XSS via label drop-down
  - Prevent information disclosure via milestone API
  - Prevent information disclosure via snippet API
  - Prevent information disclosure via project labels
  - Prevent information disclosure via new merge request page

559
v 8.6.7
Robert Speicher's avatar
Robert Speicher committed
560
561
  - Fix persistent XSS vulnerability in `commit_person_link` helper
  - Fix persistent XSS vulnerability in Label and Milestone dropdowns
562
563
  - Fix vulnerability that made it possible to enumerate private projects belonging to group

564
v 8.6.6
Rémy Coutable's avatar
Rémy Coutable committed
565
566
567
  - Expire the exists cache before deletion to ensure project dir actually exists (Stan Hu). !3413
  - Fix error on language detection when repository has no HEAD (e.g., master branch) (Jeroen Bobbeldijk). !3654
  - Fix revoking of authorized OAuth applications (Connor Shea). !3690
Jeroen Bobbeldijk's avatar
Jeroen Bobbeldijk committed
568
  - Fix error on language detection when repository has no HEAD (e.g., master branch). !3654 (Jeroen Bobbeldijk)
Phil Hughes's avatar
Phil Hughes committed
569
570
  - Issuable header is consistent between issues and merge requests
  - Improved spacing in issuable header on mobile
571

572
573
574
575
576
577
578
579
v 8.6.5
  - Fix importing from GitHub Enterprise. !3529
  - Perform the language detection after updating merge requests in `GitPushService`, leading to faster visual feedback for the end-user. !3533
  - Check permissions when user attempts to import members from another project. !3535
  - Only update repository language if it is not set to improve performance. !3556
  - Return status code 303 after a branch DELETE operation to avoid project deletion (Stan Hu). !3583
  - Unblock user when active_directory is disabled and it can be found !3550
  - Fix a 2FA authentication spoofing vulnerability.
580

Rémy Coutable's avatar
Rémy Coutable committed
581
582
v 8.6.4
  - Don't attempt to fetch any tags from a forked repo (Stan Hu)
583
  - Redesign the Labels page
Rémy Coutable's avatar
Rémy Coutable committed
584

Rémy Coutable's avatar
Rémy Coutable committed
585
586
v 8.6.3
  - Mentions on confidential issues doesn't create todos for non-members. !3374
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
587
588
  - Destroy related todos when an Issue/MR is deleted. !3376
  - Fix error 500 when target is nil on todo list. !3376
Rémy Coutable's avatar
Rémy Coutable committed
589
590
591
592
  - Fix copying uploads when moving issue to another project. !3382
  - Ensuring Merge Request API returns boolean values for work_in_progress (Abhi Rao). !3432
  - Fix raw/rendered diff producing different results on merge requests. !3450
  - Fix commit comment alignment (Stan Hu). !3466
593
  - Fix Error 500 when searching for a comment in a project snippet. !3468
Rémy Coutable's avatar
Rémy Coutable committed
594
595
596
  - Allow temporary email as notification email. !3477
  - Fix issue with dropdowns not selecting values. !3478
  - Update gitlab-shell version and doc to 2.6.12. gitlab-org/gitlab-ee!280
597

Rémy Coutable's avatar
Rémy Coutable committed
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
v 8.6.2
  - Fix dropdown alignment. !3298
  - Fix issuable sidebar overlaps on tablet. !3299
  - Make dropdowns pixel perfect. !3337
  - Fix order of steps to prevent PostgreSQL errors when running migration. !3355
  - Fix bold text in issuable sidebar. !3358
  - Fix error with anonymous token in applications settings. !3362
  - Fix the milestone 'upcoming' filter. !3364 + !3368
  - Fix comments on confidential issues showing up in activity feed to non-members. !3375
  - Fix `NoMethodError` when visiting CI root path at `/ci`. !3377
  - Add a tooltip to new branch button in issue page. !3380
  - Fix an issue hiding the password form when signed-in with a linked account. !3381
  - Add links to CI setup documentation from project settings and builds pages. !3384
  - Fix an issue with width of project select dropdown. !3386
  - Remove redundant `require`s from Banzai files. !3391
  - Fix error 500 with cancel button on issuable edit form. !3392 + !3417
  - Fix background when editing a highlighted note. !3423
  - Remove tabstop from the WIP toggle links. !3426
  - Ensure private project snippets are not viewable by unauthorized people.
  - Gracefully handle notes on deleted commits in merge requests (Stan Hu). !3402
  - Fixed issue with notification settings not saving. !3452
619

Rémy Coutable's avatar
Rémy Coutable committed
620
621
622
623
624
625
626
627
628
629
630
631
632
633
v 8.6.1
  - Add option to reload the schema before restoring a database backup. !2807
  - Display navigation controls on mobile. !3214
  - Fixed bug where participants would not work correctly on merge requests. !3329
  - Fix sorting issues by votes on the groups issues page results in SQL errors. !3333
  - Restrict notifications for confidential issues. !3334
  - Do not allow to move issue if it has not been persisted. !3340
  - Add a confirmation step before deleting an issuable. !3341
  - Fixes issue with signin button overflowing on mobile. !3342
  - Auto collapses the navigation sidebar when resizing. !3343
  - Fix build dependencies, when the dependency is a string. !3344
  - Shows error messages when trying to create label in dropdown menu. !3345
  - Fixes issue with assign milestone not loading milestone list. !3346
  - Fix an issue causing the Dashboard/Milestones page to be blank. !3348
Rémy Coutable's avatar
Rémy Coutable committed
634
635

v 8.6.0
636
  - Add ability to move issue to another project
James Lopez's avatar
James Lopez committed
637
  - Prevent tokens in the import URL to be showed by the UI
638
  - Fix bug where wrong commit ID was being used in a merge request diff to show old image (Stan Hu)
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
639
  - Add confidential issues
Stan Hu's avatar
Stan Hu committed
640
  - Bump gitlab_git to 9.0.3 (Stan Hu)
641
  - Fix diff image view modes (2-up, swipe, onion skin) not working (Stan Hu)
642
  - Support Golang subpackage fetching (Stan Hu)
Stan Hu's avatar
Stan Hu committed
643
  - Bump Capybara gem to 2.6.2 (Stan Hu)
644
  - New branch button appears on issues where applicable
645
  - Contributions to forked projects are included in calendar
646
  - Improve the formatting for the user page bio (Connor Shea)
647
  - Easily (un)mark merge request as WIP using link
648
  - Use specialized system notes when MR is (un)marked as WIP
649
650
651
  - Removed the default password from the initial admin account created during
    setup. A password can be provided during setup (see installation docs), or
    GitLab will ask the user to create a new one upon first visit.
James Lopez's avatar
James Lopez committed
652
  - Fix issue when pushing to projects ending in .wiki
Rémy Coutable's avatar
Rémy Coutable committed
653
  - Properly display YAML front matter in Markdown
654
  - Add support for wiki with UTF-8 page names (Hiroyuki Sato)
655
  - Fix wiki search results point to raw source (Hiroyuki Sato)
656
  - Don't load all of GitLab in mail_room
Rémy Coutable's avatar
Rémy Coutable committed
657
  - Add information about `image` and `services` field at `job` level in the `.gitlab-ci.yml` documentation (Pat Turner)
658
  - HTTP error pages work independently from location and config (Artem Sidorenko)
659
  - Update `omniauth-saml` to 1.5.0 to allow for custom response attributes to be set
660
  - Memoize @group in Admin::GroupsController (Yatish Mehta)
661
  - Indicate how much an MR diverged from the target branch (Pierre de La Morinerie)
662
  - Added omniauth-auth0 Gem (Daniel Carraro)
663
  - Add label description in tooltip to labels in issue index and sidebar
664
  - Strip leading and trailing spaces in URL validator (evuez)
665
  - Add "last_sign_in_at" and "confirmed_at" to GET /users/* API endpoints for admins (evuez)
666
  - Return empty array instead of 404 when commit has no statuses in commit status API
667
  - Decrease the font size and the padding of the `.anchor` icons used in the README (Roberto Dip)
Sean Lang's avatar
Sean Lang committed
668
  - Rewrite logo to simplify SVG code (Sean Lang)
669
670
  - Allow to use YAML anchors when parsing the `.gitlab-ci.yml` (Pascal Bach)
  - Ignore jobs that start with `.` (hidden jobs)
671
  - Hide builds from project's settings when the feature is disabled
672
  - Allow to pass name of created artifacts archive in `.gitlab-ci.yml`
673
  - Refactor and greatly improve search performance
674
  - Add support for cross-project label references
675
  - Ensure "new SSH key" email do not ends up as dead Sidekiq jobs
676
  - Update documentation to reflect Guest role not being enforced on internal projects
Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
677
  - Allow search for logged out users
678
  - Allow to define on which builds the current one depends on
679
  - Allow user subscription to a label: get notified for issues/merge requests related to that label (Timothy Andrew)
680
  - Fix bug where Bitbucket `closed` issues were imported as `opened` (Iuri de Silvio)
Rubén Dávila's avatar
Rubén Dávila committed
681
  - Don't show Issues/MRs from archived projects in Groups view
682
  - Fix wrong "iid of max iid" in Issuable sidebar for some merged MRs
683
  - Fix empty source_sha on Merge Request when there is no diff (Pierre de La Morinerie)
Alfredo Sumaran's avatar
Alfredo Sumaran committed
684
  - Increase the notes polling timeout over time (Roberto Dip)
685
  - Add shortcut to toggle markdown preview (Florent Baldino)
686
  - Show labels in dashboard and group milestone views
687
  - Fix an issue when the target branch of a MR had been deleted
tiagonbotelho's avatar
tiagonbotelho committed
688
  - Add main language of a project in the list of projects (Tiago Botelho)
689
  - Add #upcoming filter to Milestone filter (Tiago Botelho)
690
  - Add ability to show archived projects on dashboard, explore and group pages
691
  - Remove fork link closes all merge requests opened on source project (Florent Baldino)
692
  - Move group activity to separate page
693
  - Create external users which are excluded of internal and private projects unless access was explicitly granted
Zeger-Jan van de Weg's avatar
Zeger-Jan van de Weg committed
694
  - Continue parameters are checked to ensure redirection goes to the same instance
695
  - User deletion is now done in the background so the request can not time out
Geoffrey Lalonde's avatar
Geoffrey Lalonde committed
696
  - Canceled builds are now ignored in compound build status if marked as `allowed to fail`
Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
697
  - Trigger a todo for mentions on commits page
698
  - Let project owners and admins soft delete issues and merge requests
Rémy Coutable's avatar
Rémy Coutable committed
699

700
701
702
703
v 8.5.13
  - Prevent unauthorized access to other projects build traces
  - Forbid scripting for wiki files

704
705
706
707
708
709
710
711
712
713
714
v 8.5.12
  - Prevent privilege escalation via "impersonate" feature
  - Prevent privilege escalation via notes API
  - Prevent privilege escalation via project webhook API
  - Prevent XSS via Git branch and tag names
  - Prevent XSS via custom issue tracker URL
  - Prevent XSS via `window.opener`
  - Prevent information disclosure via snippet API
  - Prevent information disclosure via project labels
  - Prevent information disclosure via new merge request page

715
716
717
v 8.5.11
  - Fix persistent XSS vulnerability in `commit_person_link` helper

718
719
720
v 8.5.10
  - Fix a 2FA authentication spoofing vulnerability.

Rémy Coutable's avatar
Rémy Coutable committed
721
722
723
v 8.5.9
  - Don't attempt to fetch any tags from a forked repo (Stan Hu).

724
725
726
v 8.5.8
  - Bump Git version requirement to 2.7.4

Douwe Maan's avatar
Douwe Maan committed
727
v 8.5.7
728
  - Bump Git version requirement to 2.7.3
Rémy Coutable's avatar
Rémy Coutable committed
729

Rémy Coutable's avatar
Rémy Coutable committed
730
731
732
v 8.5.6
  - Obtain a lease before querying LDAP

Douglas Barbosa Alexandre's avatar
Douglas Barbosa Alexandre committed
733
v 8.5.5
Rémy Coutable's avatar
Rémy Coutable committed
734
735
736
737
  - Ensure removing a project removes associated Todo entries
  - Prevent a 500 error in Todos when author was removed
  - Fix pagination for filtered dashboard and explore pages
  - Fix "Show all" link behavior
Rémy Coutable's avatar
Rémy Coutable committed
738

739
v 8.5.4
740
741
  - Do not cache requests for badges (including builds badge)

Rémy Coutable's avatar
Rémy Coutable committed
742
743
v 8.5.3
  - Flush repository caches before renaming projects
744
  - Sort starred projects on dashboard based on last activity by default