Read about our upcoming Code of Conduct on this issue

  1. 25 Sep, 2019 1 commit
  2. 04 Sep, 2019 1 commit
  3. 31 Jan, 2019 1 commit
    • Kamil Trzciński's avatar
      Extract GitLab Pages using RubyZip · 5ae3732ed739
      Kamil Trzciński authored
      RubyZip allows us to perform strong validation of
      expanded paths where we do extract file.
      
      We introduce the following additional checks
      to extract routines:
      
      1. None of path components can be symlinked,
      2. We drop privileges support for directories,
      3. Symlink source needs to point within the target directory,
         like `public/`,
      4. The symlink source needs to exist ahead of time.
      5ae3732ed739
  4. 22 Jan, 2019 1 commit
    • Kamil Trzciński's avatar
      Extract GitLab Pages using RubyZip · d0c4bd26bf9c
      Kamil Trzciński authored
      RubyZip allows us to perform strong validation of
      expanded paths where we do extract file.
      
      We introduce the following additional checks
      to extract routines:
      
      1. None of path components can be symlinked,
      2. We drop privileges support for directories,
      3. Symlink source needs to point within the target directory,
         like `public/`,
      4. The symlink source needs to exist ahead of time.
      d0c4bd26bf9c
  5. 17 Jul, 2018 1 commit
  6. 27 Apr, 2018 2 commits
  7. 03 Apr, 2018 1 commit
  8. 30 Mar, 2018 4 commits
  9. 09 Mar, 2018 1 commit
  10. 06 Mar, 2018 4 commits
  11. 28 Feb, 2018 1 commit
  12. 05 Feb, 2018 1 commit
    • Grzegorz Bizon's avatar
      Revert create job service because of load balancing · 8704bc8272cf
      Grzegorz Bizon authored
      Currently we still need to run EnsureStageService within a transaction,
      because when it runs within in a transaction we are going to stick to
      the primary database when using database load balancing. Extracting this
      out of the transaction makes it possible to hit into problems with
      replication lag in pipeline commit status API, which can cause a lot of
      trouble.
      8704bc8272cf
  13. 02 Feb, 2018 1 commit
  14. 24 Jan, 2018 1 commit
  15. 03 Dec, 2017 1 commit
  16. 05 Sep, 2017 4 commits
  17. 31 Aug, 2017 1 commit
    • Sean McGivern's avatar
      `current_application_settings` belongs on `Gitlab::CurrentSettings` · e1c28a485974
      Sean McGivern authored
      The initializers including this were doing so at the top level, so every object
      loaded after them had a `current_application_settings` method. However, if
      someone had rack-attack enabled (which was loaded before these initializers), it
      would try to load the API, and fail, because `Gitlab::CurrentSettings` didn't
      have that method.
      
      To fix this:
      
      1. Don't include `Gitlab::CurrentSettings` at the top level. We do not need
         `Object.new.current_application_settings` to work.
      2. Make `Gitlab::CurrentSettings` explicitly `extend self`, as we already use it
         like that in several places.
      3. Change the initializers to use that new form.
      e1c28a485974
  18. 10 Aug, 2017 1 commit
  19. 31 Jul, 2017 1 commit
    • Z.J. van de Weg's avatar
      Add two more metrics for CI/CD · bd7be05fabe7
      Z.J. van de Weg authored
      As its hard right now to determine what is a good metric and whats not,
      these two are not listed in the docs, nor will they get a CHANGELOG
      entry.
      bd7be05fabe7
  20. 26 Jul, 2017 1 commit
  21. 25 Jul, 2017 1 commit
  22. 28 Jun, 2017 1 commit
  23. 31 Mar, 2017 1 commit
  24. 05 Mar, 2017 1 commit
  25. 23 Feb, 2017 1 commit
  26. 01 Feb, 2017 3 commits
  27. 31 Jan, 2017 2 commits