Changelog

=========

This document records all notable changes to `Pagure <https: pagure.io="">`_.</https:>

5.7.1 (2019-07-12)

------------------

- More CSP headers fixes (Thanks again to Julen Landa Alustiza for them!)

5.7 (2019-07-05)

----------------

- Many fixes to properly support for CSP headers (Many thanks to Julen Landa

  Alustiza for his help with this)

- Fix the blame view

- Allow project-less API token to retrieve issues via the API

- Better integration work on our fork of highlightjs-line-numbers (Julen Landa

  Alustiza)

- Document the git auth backend `pagure` (mrx@mailinator.com)

- Catch ImportError before trying to catch any fedora_messaging exceptions

- pagure markdown extension: encapsulate our markdowns on a div tag (Julen Landa

  Alustiza)

- Add styling for markdown tables (Julen Landa Alustiza)

- Always notify the person who opened the ticket/PR or are assigned to it

- Add a create-branch action to pagure-admin

- Bump jquery to latest version, fixing some CSP errors (Julen Landa Alustiza)

- Fix file view anchor link highlight & scrolling (Julen Landa Alustiza)

- Focus the comment textarea after hitting the reply button (Julen Landa Alustiza)

5.6 (2019-06-04)

----------------

.. warning:: This release contains a security fix for CVE-2019-11556

- Couple of fixes for the mirroring-in feature

- Fix linking to issues or PRs when pre-viewing a comment

- Include a search icon near the filter button on the issues list

- Include a small introduction text to email on loading files

- Move the side-bar of the repo_master into its own template for easier

  overriding by other themes

- Enforce black on all pagure, including tests, docs and all

- Add an option to pagure-admin to delete a project

- Add an option to pagure-admin block-user to list the users blocked

- Ensure "No activity" rows get removed on subsequent updates of the calendar

  heatmap (Frank Dana)

- Send a notification upon editing the initial comment of a PR

- Send notifications on tag creation and tag and branch deletion

- Comment reply button: remove icon title (Frank Dana)

- Fix updating project options when running pagure in python 2

- Fix the test button for webhook notifications

- Fix opening PR on forks on the page listing the PRs

- Add repo_from argument for API create pull request (Lenka Segura)

- Drop commit_flags_uid_key from commit_flags

- Add missing namespace in the link to edit inline comments in PR

- Add support for allowing the maintainers of the target project rebase

- Do not allow rebase via the API if the PR does not allow it

- Improve the install documentation (MR)

- Add CSP headers support and a mechanism to customize them

- Fix triggering a CI run on remote pull-requests

- Add a button to take maintenance of orphaned packages in dist-git

- Fix giving a project to someone who already had it

- Ensure the blame view does not render html

5.5 (2019-04-08)

----------------

- themes/srcfpo: move icons to the theme instead of linking them from other apps

  (Julen Landa Alustiza)

- Add support for !owner to the API listing projects

- Make sure that TemporaryClone.push also pushes tags (Slavek Kabrda)

- Add missing "line" in comments links (Tim Landscheidt)

- Include the target branch of the PR when triggering jenkins

- Provide more information about invalid tokens

- Fix the pagination on the fork page of the dashboard

- Fix opening/viewings PRs from the branch pages on the srcfpo theme

- Allow linking issues to PRs in the initial comment of a PR

- Allow blocking an user on a project

- Add support for username and password based authentication for pagure-ci

- Remove extra "s" character from the starred repos page (Michael Watters)

- Link to bugzilla for rpms, modules and container in the srcfpo theme

- Add a button to select/unselect all the ACLs (Lenka Segura)

- Fix the user in the notification about rebased PR

- pagure/ui/fork: fix pull request closing flash message

- Do not link on the "Star" button if the user is not authenticated

- Replace calls to pygit2.clone_repository by calls to git clone directly

- Support deployments where git hook have a read-only access to the db

- Make fork more performant by using 'git push --mirror' (Slavek Kabrda)

- Move the build ID from the title to the comment of the flag

- Fix the new PR drop-down button

- User the user's default email when rebasing

- Fix a bug that preventing properly cleaning up a project in the DB if we

  failed to create its repositories on disk

- Fix showing branches having unicode characters in their names

- Make the hook mechanism support utf-8 branch names

- Include some shortcuts to the different namespaces in the srcfpo theme

5.4 (2019-03-28)

----------------

- Allow by default the ACL "pull_request_create" on project-less API token

  (Lenka Segura)

- Implement Pagure Git Auth (Patrick Uiterwijk)

- Add a upper limit to sqlalchemy as 1.3.0 breaks our tests

- Add a new API endpoint allowing to update an existing PR

- If the user doesn't have a valid ssh key inform but let them log in

- Fix displaying diffs that contain symlinks (Slavek Kabrda)

- Add missing namespace on the link to see the user's issues when they become

  assignee of a ticket

- Add a button to take/drop a pull-request (assignee field)

- Add a new API endpoint to assign pull-request to someone

- Fix the link to view all the user's projects on the dashboard

- Allow dots and plus signs in project names

- When loading blocking or depending tickets restricts the list of tickets based

  on the user's input

- Fix seeing releases when the reference prodived returned a commit

- Allow div element to have id tags

- Include the PR tags in their JSON representation

- Inform the user when changing the assignee failed because of an ajax error

- Ensure the comment & close button shows up for the author

- Deprecate fedmsg

- Stream the repoSpanner proxy responses (Patrick Uiterwijk)

- Ensure that forking does not run the hook (Patrick Uiterwijk)

5.3 (2019-02-22)

----------------

.. warning:: This release contains a security fix for CVE-2019-762

- Change "created by" to "maintained by" in repo info (Ryan Lerch)

- Fix showing an input box if the minimum score for PR is set to 0

- Fix the output of the merge PR API endpoint when the PR conflicts

- Add some documentation on our magic keywords

- Allow filtering user's PR by time information

- Add the possibility to filter the user's issues by dates

- Add support for the `resolve` keyword among our magic words

- Allow any username to be searched in issues filters (Ryan Lerch)

- Allow using Pagure with python-redis >= 3.0.0 (Neal Gompa)

- Fix Markdown usage to work with Markdown 3.0+ (Neal Gompa)

- Decode the output from the shell commands if they are not already unicode

- Add THEME option docs to configuration documentation (Ryan Lerch)

- Fix updating the date_modified when giving the project to someone

- Don't try mirroring if we failed generating private key

- Change couple of log entries from info to warning

- Cascade deleting flags when tokens are deleted

- Ensure there are admin groups before adding them to the list of groups

- Move the create_session function into pagure.lib.model_base

- Make the button to show/hide the URL to checkout locally a PR more visible

- Fixup documentation about modifyacls (Igor Gnatenko)

- Force highlight.js to use certain highlighting schemes in file view

  (Ryan Lerch)

- Fix the total number of members on the repo info page

- Fix not showing the edit and delete buttons when they won't work

- Add project connector api endpoint (Fabien Boucher)

- Api: project connector endpoint: complete returned data (Fabien Boucher)

- Fix repoSpanner integration (Patrick Uiterwijk)

- Make sure repoSpanner tests run in CentOS CI (Patrick Uiterwijk)

- Only block new branches in hooks (Lubomír Sedlář)

- Add support for fedora-messaging in pagure

- Fix calculation of days until API key expires in the emails (Karsten Hopp)

- Move to container-based testing on jenkins testing the following environment

  - F29 using python3 with dependencies installed as RPMs

  - F29 using python3 with dependencies installed via pip

  - CentOS7 using python2 with dependencies installed as RPMs

- Add project createapitoken endpoint (Fabien Boucher)

- CVE-2019-7628: Do not leak partial API keys. (Randy Barlow)

- Provide full repospanner reponame for aclchecker/repobridge (Slavek Kabrda)

- Allow turning on issue tracking for only some namespaces

- Do not allow `,` in tags

- Ensure we can add/edit/delete tags even when issues are off but PRs aren't

- Fix cancelling a rebase

- Add options to send notifications on all the message bus we support on all

  commits

5.2 (2019-01-07)

----------------

- Add support for the MQTT protocol (jingjing)

- Add support for mirroring in git repositories from outside sources

- Add the possibility to give a group away

- Port pagure to markdown 3.0+ while remaining backward compatible

- Add support to merge a PR when the fork was deleted

- Indicate that the file can be either empty or a binary file in diffs

- Add the API endpoint to create new PR in the API doc

- Add the ability to generate archive from a commit or tag

- Allow searching the content of the comments on an issue tracker

- Allow filtering the issue list by the close status

- Update the version of highlightjs-line-numbers. (Clement Verna)

- Store the user who closed a ticket in the database. (Clement Verna)

- Show related PRs on the issue list if there are any

- Bypass old hooks rather than using non-existing symlinks

- Undo submitting comment via JS if the SSE is down

- Make links act like links in the commit message (Ryan Lerch)

- Add build status to pull requests page (Michael Watters)

- Bump the minimal pygit2 version to 0.26.0 (Pierre-Yves Chibon)

- Make update_pull_ref more robust by making sure fork ref is deleted

  (Slavek Kabrda)

- Provide feedback to the user if PRs are disabled in the default target

  projects

- Add a new API endpoint to update the options set for a project

- Add a new API endpoint to retrieve the options of a project

- Update the quick replies button when going into edit mode

- Hide extra GIT URLs behind a collapseable element (Ryan Lerch)

- Save metadata changes when changing status with dropdown (Ryan Lerch)

- Align markdown block of code and citation with GitHub CSS. (Jun Aruga)

- Change formatting of the issue list to make more readable (Ryan Lerch)

- Rename the fedmsg.py hook into fedmsg_hook.py as otherwise it conflicts

- Allow commenting on a PR when clicking on the merge button

- Include whether the PR passed the threshold or not in the API data

- Change the way votes are recorded on PRs

- Add support for third-party extensions to pagure (this is very much

  work in progress and might/will fluctuate as it is polished - Do Not

  Consider This Stable)

- Enable token authentication on internal endpoints (Slavek Kabrda)

- Fix notifications and refreshing the cached merge status upon updates

- Allow specifying a branch when adding content to git

- Add support for rebasing pull-requests

- Fix viewing patch attached to ticket

- Add link to starred projects in the user menu (Michael Watters)

- Prevent double click from showing two input form

- Fix linking to specific lines in a pull-request

- Do not assume master if the default branch

- Send dedicated notifications when a PR is updated or rebased

- Show the update date/time rather than the creation one on flags

- Allow running 'git gc' explicitly after every object-adding git operation

  (Slavek Kabrda)

- Let any contributor to a project update the PR meta-data

- Rename "Cancel a PR" into "Close a PR"

- Add a Date type to the custom fields (Karsten Hopp)

- Add a new API endpoint to retrieve the flags of a pull-request

- Fix rendering comment added via JS

- Fix API task status endpoint (Slavek Kabrda)

- Make it possible to create hooks that don't have DB entries (Slavek Kabrda)

- Render status of dependent tickets differently on open/close (Akanksha)

- Implement a button to rerun CI tests on a pull request (Slavek Kabrda)

- Support disallowing remote pull requests (Karsten Hopp)

- Change button name to Save instead of Edit while editing pull request

  (anshukira)

- Make sure to also log exceptions in non-debug mode (Patrick Uiterwijk)

- Allow filtering from the milestones page (Akanksha Mishra)

- Fix multimail config with empty auth or disabled tls (Patrick Uiterwijk)

- Add an about page in the themes (Mary Kate Fain)

- Remove "Activate" from project options (jingjing)

- Add avatar_url to output of user/<username> api (Ryan Lerch)</username>

- Fix showing a regular comment on a PR when there are none before

- Fix the UI on the release page when showing the tag message

- Update the chameleon theme (Stasiek Michalski)

- Fix filtering by status PRs retrieved by the API (Lenka Segura)

5.1.4 (2018-10-15)

------------------

- Fix the alembic migration creating the hook_mirror table

- Close the DB session in one place for all hooks

- Add more logging to the pagure_logcom service

- Configure SMTP info for git_multimail (Patrick Uiterwijk)

- Use the PR UID previously read from environment (Patrick Uiterwijk)

5.1.3 (2018-10-11)

------------------

- Don't sync up ssh keys if there are already some

- Do not notify twice when pushing commits to an open PR

- Update git-multimail to the 1.4.0 version (fixes getting it working with py3)

5.1.2 (2018-10-11)

------------------

- Add some documentation about MIRROR_SSHKEYS_FOLDER

- Make the sshkey migration more flexible (if you have not yet upgraded to 5.1)

- Fix the update date information on the pull-request page

- Fix detecting if the user is a committer via a group

- Fix writing user's ssh keys on disk

- tweak colours of the activity graph (Ryan Lerch)

- Allow a specific list of users to create a project ignoring existing repo

  (Patrick Uiterwijk)

- Implement pulling and pushing via repobridge instead of HTTPS

  (Patrick Uiterwijk)

- cache oidc user data (Karsten Hopp)

5.1.1 (2018-10-09)

------------------

- Fix adding and removing ssh keys in the user's profile

5.1 (2018-10-09)

----------------

- Fix rendering issues in chrome (Ryan Lerch)

- Fix the merge button on the PR page when the title is long (Ryan Lerch)

- Hide expired API keys by default but add a button to show them

- Allow linking to the new issue page with a specific template

- Tab order fixed on new issue (Lenka Segura)

- Fix the button to open new pull-request on the branches page

- Fix mail hook getting to mail_to (Patrick Uiterwijk)

- More distinguished Markdown blockquotes (Lenka Segura)

- Correctly exempt default hook from running on non-main (Patrick Uiterwijk)

- Add version information in static file's url to avoid caching in browser

  (Neha Kandpal)

- Update README with details on the new testing script(s) (Jingjing Shao)

- Start implementing HTTP pull/push (Patrick Uiterwijk)

- Many fixes around the documentation and onboarding setup (especially the

  Vagrant and docker dev environments) (Jingjing Shao, Alex Gleason, Lenka

  Segura, Akanksha)

- Fix citing the original comment in a ticket

- Show the comment on issues in JS if the SSE isn't responding

- Fix the From header in notification emails

- Fix loading the group list when adding a group to a project

- Rework how we display loading of the new PR dropdown (Ryan Lerch)

- Display when a PR cannot be merged because of its review score

- Check there is an user associated with the log entry

- Add a note in minimal score to merge in the doc (Fabien Boucher)

- Redirect back to branch list when deleting a branch (Ryan Lerch)

- Rework how ssh keys are stored in the database (Patrick Uiterwijk)

- Allow users to update PR's metadata when the PR is closed

- Fix adding comment on PR via the SSE

- Multiple changes and fixes around the ACL checker (Patrick Uiterwijk)

- Add a spinner when selectize is loading data. (Ryan Lerch)

- Load user async when looking up assignee (Ryan Lerch)

- When a pushed in made to a branch in a PR, update the PR

- Run all hooks in a set, and error out at the end (Patrick Uiterwijk)

- Make hooks raise exceptions instead of sys.exit (Patrick Uiterwijk)

- Fix editing comments on issues and PRs

- Add option to allow any authenticated user to edit meta-data on tickets

- Make the mirroring feature work with older git

- Fix bug in update_milestones (Akanksha)

- Allow admins to ignore existing repositories when creating a project (Patrick

  Uiterwijk)

- Adding 'list-groups' function to pagure-admin (Fabian Arrotin)

- Fix letting the user who opened the ticket close it

- Never set readonly flag if a dynamic auth backend is in use (Patrick Uiterwijk)

- Add a new API endpoint to retrieve the list of files changed in a PR

5.0.1 (2018-09-27)

------------------

.. warning:: This release contains a security fix

- Add to theme the possibility to display site-wide messages (Ryan Lerch)

- Multiple adjustments to the scripts keyhelper and aclchecker (Patrick Uiterwijk)

- Only enforce Signed-Off-By on the main git repo

- Ignore any and all action done by the pagure user when loading JSON into the db

- Fix the last modified date on the PR list

- Updating regex for URLs and SSH urls

- Use gitolite's own mechanism to bypass the update hook

- Ensure the plugin is active when retrieving them

- Switch from GIT_SORT_TIME to GIT_SORT_NONE to preserver 'git log'-like commit

  ordering (Slavek Kabrda)

- Fix pr-dropdown (Ryan Lerch)

- Add hilightjs-line-numbers plugin (Ryan Lerch)

- Fix the reply buttons

- Fix escaping on PR diffs (Ryan Lerch)

- Fix opening/viewing PRs from the branches page

- Fix loading issue template and make the drop-down a little more obvious

- Correctly align edit button for groups in repo settings (Ryan Lerch)

- Fix all-around sidebar heading borders (Ryan Lerch)

- Remove incorrect count label on related PRs (Ryan Lerch)

- Move attachements to sidebar (Ryan Lerch)

- Add reporter and assignee to notification emails headers (Lenka Segura)

- Make sure that ticket changes don't get duplicated (Patrick Uiterwijk)

- Fix the git ssh urls in the templates

- Fix when milestones_keys and milestones get out of sync

- Sign-off the merge commits when the project enforces it

- Add missing alembic migration to create the hook_mirror table

- Don't generate API keys with random.choice (Jeremy Cline)

5.0 (2018-09-24)

----------------

.. warning:: This release contains backward incompatible changes and fixes a CVE

- Pagure supports now python2 and python3 simultaneously (Thanks to Aurélien

  Bompard and Neal Gompa for the testing)

- New UI deployed (thanks to Ryan Lerch)

- New dashboard page as index page when authenticated (Ryan Lerch)

- API listing items (projects, issues, pull-requests are now paginated (

  Karsten Hopp)

  .. warning:: Backward incompatible

- Enable private projects by default (Neal Gompa)

  .. warning:: Backward incompatible

- Change the default and sample configuration to point to localhost-friendly

  resources (Neal Gompa)

  .. warning:: Backward incompatible

- Disable sending FedMsg notifications by default (Neal Gompa)

  .. warning:: Backward incompatible

- Switch default authentication to `local` (Neal Gompa)

  .. warning:: Backward incompatible

- Drop the dependency on python-pygments

- Drop the dependency on flask-multistatic

- Drop the dependency on python-trollius (in favor of python-trololio) (Neal

  Gompa)

- Bump pygit2 requirement to 0.24.0 minimum

  .. warning:: Backward incompatible

- Add support to re-open a pull-request (Karsten Hopp)

- Fix editing a file into a fork containing a namespace

- Allow creating a new API token based on an expired one

- New API endpoint to submit a pull-request

- Add support for making the issue tracker read-only

- Add a new API endpoint allowing to update watch status on a project

- Paginate the project lists on the front pages

- Let the reply button append instead of replacing

- Add a way to list all API tokens and don't restrict the info command (

  in pagure-admin)

- Expand pagure-admin to allow using it to block an user

- Expand pagure-admin to allow adding new groups using it

- Allow viewing commits from a git tag

- Support viewing commits from a specific commit hash

- Add a hook that disables creating new branches by git push (Slavek Kabrda)

- Make API endpoint for creating new git branch have its own ACL

- Support sorting PR's by recent activity (ymdatta)

- Fix installing the API key reminder cron with systemd  integration

- Add reactions to comments (Lubomír Sedlář)

- New API endpoint allowing to retrieve pull-requests based on their UUID

  (Slavek Kabrda)

- Add an option to restrict emails sent to certain domains (Karsten Hopp)

- Integration with repospanner (Patrick Uiterwijk)

- Rework how git hooks work to rely on a single file rather than moving files

  around (Patrick Uiterwijk)

- Add themes for pagure.io, src.fedoraproject.org (Ryan Lerch)

- Add themes for OpenSUSE (hellcp)

- Ensure remote PR are opened from a remote URL (CVE-2018-1002158 - reported by

  Patrick Uiterwijk)

4.0.4 (2018-07-19)

------------------

.. note:: This release fixes CVE-2018-1002155, CVE-2018-1002156,

        CVE-2018-1002157, CVE-2018-1002153

- Ensure the project's description does not contain any javascript (Michael

  Scherer)

- Prevent the project's URL to be anything other than an URL

- Escape any html people may have injected in their author name in commits

  (Michael Scherer)

- Do not serve SVG inline (Michael Scherer)

  - The four items above constitute CVE-2018-1002155

- Catch exception raised by pagure-ci when it fails to find a build on jenkins

- Fix RELATES and FIXES regex to cover projects with a dash in their name

- Support calls from jenkins indicating the build is started

- Ensure we check the required group membership when giving a project away

- Add missing titles to the milestones table in the settings

- Properly inform the user if they are introducing a duplicated tag

- Only select the default template when creating a new ticket

- Fix the subscribe button on the PR page

- Fix updating a remote PR

- Fix showing the 'more' button on the overview page

- Multiple fixes to the pagure-milter

- Fix triggering CI checks on new comments added to a PR

- Fix logging and the SMTPHandler

- Do not notify everyone about private tickets (CVE-2018-1002157)

- Make the settings of a project private (CVE-2018-1002156)

- Ensure the git repo of private projects aren't exposed via https

  (CVE-2018-1002153)

- Do not log activity on private projects

- Drop trollius-redis requirement (Neal Gompa)

4.0.3 (2018-05-14)

------------------

- Backport utility method from the 4.1 code to fix the 4.0.2 release

4.0.2 (2018-05-14)

------------------

.. note:: This release fixes CVE-2018-1002151

- Fix showing the list of issues in a timely fashion (Patrick Uiterwijk)

- Fix stats for commits without author (Lubomír Sedlář)

- Explain how to fetch a pull request locally and some grammar fixes

  (Todd Zullinger)

- Drop the constraint on the requirement on straight.plugin but document it

- Fix the requirement on bcrypt, it's optional

- Make API endpoint for creating new git branch have its own ACL

  fixes CVE-2018-1002151

4.0.1 (2018-04-26)

------------------

- Fix browsing projects in a namespace when logged in and the instance has only

  one contributor for every projects

- Fix commenting on a PR or an issue if the event source server is not

  configured at all (Slavek Kabrda)

4.0 (2018-04-26)

----------------

- Re-architecture the project to allow potentially extending pagure outside of

  its core

- Fix running the tests on newer pygit

- Add a space between the fork and the watch buttons

- Add a global configuration option to turn on or off fedmsg notifications for

  the entire pagure instance

- Set the default username to be 'Pagure' when sending git commit notifications

  by email

- Add project setting to show roadmap by default (Vivek Anand)

- Explain in the doc where the doc is coming from

- Expand and document the tokenization search

- Add document that multiple keys are supported

- Add a way to block non fast-forwardable commits on all branches

- Fix running pagure on docker for development (Clément Verna)

- Make the accordeon in the settings page work correctly

- Allow calling git blame on a commit instead of a branch

- Exclude the .pyc files from all folders

- Fix viewing file if the identifier provider is a commit hash

- Make pagure-ci use python-jenkins to work with newer Jenkins

- Fix the link to the pull-request shown by the default git hook

- If the tag's color is the default text, convert it to the hex value

- Include documentation on how to pull locally a pull-request on the PR page

- Properly retrieve the number of projects and forks users have

- Replace jquery.dotdotdot by jquery.expander

- Update the Preview button to display 'Edit' when previewing

- Fix supporting <link> in markdown as it is supposed to be

- Add missing authentication provider option to documentation (Michael Watters)

- Fix couple of places where fullname is required while it's not

- Let users see and access private tickets they are assigned to

- Fix allowing to add multiple tags with the same color

- Add a new API endpoint allowing to open new pull-requests

- Fix checking if the user is authenticated

- Add the possibility to mark milestones as active or inactive

- Fix making the milestones showing in the correct order on the issue page

- Fix showing the proper URLs in the repo overview

- Include the cached merge status in the JSON representation of pull-requests

- Improve the fedmsg git hook documentation

- Fix display of deleted parent on index page (Lubomír Sedlář)

- Adjust message shown to the user deleting a tag off a project

- Fix redirecting the user when they remove themselves from a project

- Add an option to notify on flags being added to a pull-request

- Add an option to notify on flags being added to a commit

- Document project intra-pagure hyperlinks

- Refresh the PR cache of the parent repo rather than always the current one

- Move the webhook service to be a celery service

- Fix dead-link due to documentation for python-markdown being moved

- Mention #pagure IRC channel in Contributing docs (Peter Oliver)

- Fix editing and deleting comments added by the EV server to PRs

- Include a count of the number of tickets shown vs recorded for each milestone

- Do not try to get the avatar if the author has no email

- Fix HTML on settings page

- Migrate the logcom service to be celery based and triggered

- Link directly to API key settings in error message about expired API key

  (Peter Oliver)

- Drop the constraint on binaryornot

- Make fork page header link consistent (Lubomír Sedlář)

- Fix the rtd hook and port it to the v2 API (Clément Verna, Pierre-Yves Chibon)

- Deduplicate list of contributors to a project (Lubomír Sedlář)

- Remove repo from gitolite cache when it gets deleted (Slavek Kabrda)

- Make the hooks use the new architecture (Clément Verna)

- Switch to comments on PR page when url fragment is reset (Lubomír Sedlář)

- Handle implicit issue link at start of line (Adam Williamson)

- Don't treat @ in the middle of words as a mention (Adam Williamson)

- Improve the CI settings docs (Clément Verna)

- Ensure the tasks has finished before checking its results

- Fix oidc logout with admin_session_timedout (Slavek Kabrda)

- Make images be lazy loaded via javascript

- Adjust activity heatmap and logs for timezone (Adam Williamson)

- Use timezone not offset for user activity, fix heat map (Adam Williamson)

- JS clean up (Lubomír Sedlář)

- Fix UnicodeEncode on entering non-ascii password (Farhaan Bukhsh)

- Add Tests and exception for non-unicode password (Farhaan Bukhsh)

- Forbid adding tags with a slash in their name to a project

- Migrate the loadjson service to be celery-based

- Specify which service is logging the action for easier debugging/reading of

  the logs

- Merge the fedmsg notifications on commit logic into the default hook

- Merge pagure-ci into the pagure's celery-based services

- When creating a new PR, allow updating the branch from

- Allow pull changes from a different repo than the parent one

- Add a new internal endpoint to get the family of a project

- Expand the API endpoint listing tags to include the hash if asked t

- List the tags of the project in the list of commits

- Fix sending notifications in the default hook

- Make it possible to use custom PR/commit flags based on instance configuration

  (Slavek Kabrda)

- Show summary of flags on page with commits list (Slavek Kabrda)

- Improve the info message when trying to setup an user with a known email

- Make badges with flag counts in commits list to links to commit details

  (Slavek Kabrda)

- Enable sending messages to stomp-compliant brokers (Slavek Kabrda)

- Update required pygit2 version (Clément Verna)

- Do not crash when getting the branches ready for PR on a fork with no parent

- Adjust tests for newer flask

- Make trigger CI build depends on project name (Clément Verna)

- Ensure the DOCS_FOLDER and TICKETS_FOLDER really are optional

- Move the `Add Milestone` button near the top and fix the layout

- Add a button to delete empty line when adding new tags

- Change submit button labels for issues and PRs (Akshay Gaikwad)

- Add changelog.rst (Akshay Gaikwad)

- Overflow heatmap automatically (Paul W. Frields)

- Large unit-tests improvement both in quality and speed (Aurélien Bompard)

- Initial support for commit CI trigger (Clément Verna)

- Added signed-off-by during web ui commit (yadneshk)

- Replace py-bcrypt by python2-bcrypt (Clément Verna)

- Fix the user's requests page

- Establish an order for readme files (Karsten Hopp)

- Include the filename when showing the diff of remote PRs

- Specify the parent repo, even when creating a remote PR

- Always use md5 to get ssh key information (Patrick Uiterwijk)

- Support showing comment submitted by ajax when the SSE is down/not set

- Add the possibility to link issues to pull-requests (in the UI)

- Rely on the list of branches rather than the ``.empty`` attribute to find out

  if a git repo is empty or not

- Add the possibility to split the tasks into multiple queues

- Fix getting the patch of a PR that no longer has a project from

- Do not update the CHECKSUMS file if the file was already uploaded

- Show the fork button on forks

- Make the web-hook field be a textarea and improve the documentation about

  web-hook

- Fix supporting branches containing multiple dots

- Do not convert to markdown commit messages in notifications

- Port pagure to use the compile-1 script from upstream gitolite (if

  configured to do so) (Slavek Kabrda)

- Add preview when editing a comment (Rahul Bajaj) and the initial comment

- Ensure that deployment keys are managed correctly (Michael Watters)

- Improve human-readable date/time display in web UI (Adam Williamson)

- Make sure we rollback session on task failures (Slavek Kabrda)

- Fix new commit notification mails with non-ASCII (#1814) (Adam Williamson)

- Don't create gitolite.conf entries for docs and tickets when they're disabled (Slavek Kabrda)

- Move source git urls above contibutors list (yadneshk)

- Fix private repo to be accessed by ACLs other than admin (Farhaan Bukhsh)

- Change the lock name based on the git repo touched (Pierre-Yves Chibon)

- Adjust the spec file, remove no longer needed lines and fix requirements (Pierre-Yves Chibon)

- Add example worker systemd service file (Pierre-Yves Chibon)

- Adjust the wsgi file for the new arch (Pierre-Yves Chibon)

- Fix turning the read-only boolean on a fork (Pierre-Yves Chibon)

- Support blaming a file is the identifier is a tag (Pierre-Yves Chibon)

- Ensure the git hooks are always executable in the rpm (Pierre-Yves Chibon)

- Do not syntax highlight 'huge' files (Patrick Uiterwijk)

- Fix exceptions caused by missing merge object (Michael Watters)

- Fix linking to a PR that was opened from a main project to a fork (Pierre-Yves

  Chibon)

- Add support for repository templates for sources and forks (Pierre-Yves

  Chibon)

- Enable usage of flask-session extension (Slavek Kabrda)

- Add a configuration key allowing to send fedmsg notifications on all commits

  (Pierre-Yves Chibon)

- Allow deleting branch when PR is merged (Lubomír Sedlář)

3.13.2 (2017-12-21)

-------------------

- Fix ordering issues by author using an alias so the User doesn't collide

3.13.1 (2017-12-19)

-------------------

- Add an alembic migration removing a constraint on the DB that not only no

  longer needed but even blocking regular use now

3.13 (2017-12-18)

-----------------

- Fix the alembic migration adjusting the pull_requests table

- Fix how is created the db in the docker development environment (Clement

  Verna)

- Ensure optional dependencies remain optional

- Ensure groups cannot be created when it is not allowed

- When listing issues, include the project as well in the user's issue API

  endpoint

- Sort forks by date of creation (descending) (Neha Kandpal)

- Ensure the pagination arguments are returned when a page is specified

- Make the milestone clickable on the issue page

- Make the celery tasks update their status so we know when they are running (vs

  pending)

3.12 (2017-12-08)

-----------------

- Adjust the API endpoint listing project to not return a 404 when not projects

  are found (Vivek Anand)

- Remove --autoreload from the docker dev deployment (Vivek Anand)

- Fix ordering issues (Patrick Uiterwijk)

- Do not log actions pertaining to private issues, PRs or projects

- Fix flagging a PR when no uid is specified

- Fix the doc about custom gitolite config

- Fix displaying the filename on the side and linking to file for remote PRs

- Add irc info in Readme (Vivek Anand)

- Make pagure compatible with newer python chardet

- Check that the identifier isn't the hash of a git tree in view_file

- Fix if the identifier provided is one of a blob instead of a commit in

  view_commit

- Include the status when flagging a PR via jenkins

- Enable OpenID Connect authentication (Slavek Kabrda)

- Use the updated timestamp in the pull-request list

- Add migration to fix the project_from_id foreign key in pull_requests

- Let the SSE server to send the notifications so they can be displayed live

- Improve the createdb script to support stamping the database in the initial

  run

- Specify a different connection and read timeout in pagure-ci

- Small CSS fix making the (un)subscribe show up on the PR page

3.11.2 (2017-11-29)

-------------------

- Fix giving a project if no user is specified

- Don't show issue stats when issues are off

3.11.1 (2017-11-28)

-------------------

- Fix showing the issue list

- Make clear in the project's settings that tags are also for PRs (Clement

  Verna)

- Remove unused jdenticon js library (Shengjing Zhu)

3.11 (2017-11-27)

-----------------

- Print out the URL to existing PR(s) or to create one on push

- Reword the repository access warning (Matt Prahl)

- Add pagure-admin admin-token update to update the expiration date

- Fix the api_view_user_activity_stats to return the expected data (post flask

  0.11)

- Add small icon showing if issues are blocked or blocking in the issue list

- Replace all print statements with print function calls (Vadim Rutkovski)

- Add a default_priority field to projects

- Bail on merge a PR that is already closed

- Add a graph of the history of the open issues on the project

- Make the pagure hook act as the person doing the push

- Clean spec file to drop deprecated lines and macros (Igor Gnatenko)

- Include selectize in the settings page to fix the autocomplete in the give

  project action

- Do not display the close_status if there isn't one

- Do not show the `Fork and edit` button all the time

- Allow project maintainer to set metadata when creating a new issue (expand the

  API as well)

- Add a timeout when trying to query jenkins

- Show the reply button even if the PR/issue is closed.

- Add a diff view for PR

- Improve the `My star` page

- Introduce repo statistics

- When a project enforce signed-off-by, clearly say so on the new PR page and

  properly block the PR from being created

- Adjust button title on the 'Fork and Edit' action

- Fix typos in the code (chocos10)

- When editing an issue, act as the person who pushed the change

- Commit using the user's fullname if there is one, otherwise its username

- Expand the group info API endpoint

- Sorting on Opened, Modified, Closed, Priority, Reporter, Assignee cols (Mohan

  Boddu and Matt Prahl)

- Fix the Vagrant setup (Ryan Lerch)

- Fix typo in the example pagure.wsgi file (Vivek Anand)

- Add API endpoints for listing pull requests for a user (Ryan Lerch)

- Ask for the post-commit hook to be run when editing files via the UI

- Fix the milter for email gpg signed

- Allow filtering the user's project by access level

- Add a modal at the bottom of the issues list to add milestones

- Add a field to store the order of the milestones

- Hide the ``+`` button on the index page when it is disabled in the UI

- Improve mimetype detection (Shengjing Zhu and Clement Verna)

- Allow assignee to drop their assignment

- Remove duplicate [Pagure] from mail subjects (Stefan Bühler)

- Fix undefined 'path' in blame.html template (Stefan Bühler)

- Warn users when a project does not support direct push

- Update gitolite's config for the project when set to PR only

- Do not report the branch differing master if PRs have been turned off

- Add a button and an API endpoint to subscribe to PR's notifications

- Fix showing the file names in PR (pre)view

- Fix number of typos in the documentation (René Genz)

- Improve the documentation about documentation hosting in pagure (René Genz)

- Allow priorities and milestones to be 0 or -1

- Return the flag UID when adding or updating a flag on a PR not in fedmsg

- Add flags on commits

- Add documentation about flags on commits and PRs

- Add status fields to flags

- Make flag's UID be unique to the commit/PR being flagged

- Add API endpoint to retrieve all issues related to an user across all repos

- Fix the new PR and delete buttons for branch name with + in them

- When merging a PR, call the post-update hook on the target repo

- Add tags to pull-request

- Fix documentation for fork API endpoint (ishcherb)

- Send fedmsg messages when deleting a project (Shaily)

3.10.1 (2017-10-13)

-------------------

- Fix providing access to some of the internal API endpoints by javascript

3.10 (2017-10-13)

-----------------

- Show the branches' head in the commit list

- Log which IP is being denied access to the internal endpoints (makes debugging

  easier)

- Link to pagure's own markdown documentation and warn that remote images are

  not supported

- Document how to run a single test file or a single test in a file

- Fix trying to decode when the encoding is None

- Include an url_path field in the JSON representation of a project

- Generalize the description of the ACLs (since we know have project-less API

  tokens)

- Drop ``--autoreload`` from the .service files as celery dropped support for it

  and it never really worked (Vivek Anand)

3.9 (2017-10-11)

----------------

- Fix the editing issue when the user does not actually edit anything

- Fix the internal API endpoint: get branches of commit to support namespace

- Consolidate the code in our custom markdown processor (fixes linking to a

  commit on a namespaced project)

- Fix deleting a project by also removing it from the gitolite config

- Warn if the user is about to just recompile the gitolite config via

  pagure-admin (Patrick Uiterwijk)

- Update .git/config example in doc/usage/pull_requests.rst (sclark)

- Include the PRs opened by the user on the 'My pull-requests' page

- Add to pagure-admin the actions: get-watch and update-watch

- Add to pagure-admin the action: read-only

- Add the user's fullname (if there is one) as title when they comment

- Fix the title of the percentage when hovering over the red bar in issues

- Make the box to edit comments bigger

- Document in the usage section where to find the API documentation

- Provide the sha256 and sha512 of the releases in a CHECKSUMS file

- Remove clear buttons (Till Maas)

3.8 (2017-09-29)

----------------

- Fix API documentation for git/branch (Matt Prahl)

- Fix giving a project to someone who already has access (Matth Prahl)

- Add some border to the tables created in README files

- Ask the user to confirm merging a pull-request

- Fix processing status and close_status updates in the SSE

- Fix the URL to the issue used by the SSE JS on tags

- Increase the logging in the milter to help figuring out issues in the future

- Fix the In-Reply-To header when sending notifications

- Fix showing the delete project button

- Fix search issues with a unicode character

- Catch exception raised when accessing the head of the repo

- Fix deleting a project when some of the folder are not used

- Allow viewing a PR when its origin (fork or branch) is gone

- Fix linking to issue or PR in namespaced projects via #<id></id>

- Make it more obvious that the namespace and the project are different links

- Tell fedmsg to send things with pagure certificates (Patrick Uiterwijk)

- Fix loading ticket templates on namespaced project and extracting their names

- Add a banner on the overview page when the ACLs are being refreshed on the

  backend (and thus ssh access may not be entirely functional) (Vivek Anand)

- Update the documentation on how to create pull requests (Clement Verna)

- Add button to refresh external pull requests (Patrick Uiterwijk)

- Add the possibility to get the group members when asking the project info

- Make the PROJECT_NAME_REGEX used in form be configurable

- Adjust the milter to support replying with any email addresses associated

- Allow pagure admin to give a project

3.7.1 (2017-09-05)

------------------

- Fix the UPGRADING documentation

- Add the API endpoint to edit multiple custom fields to the doc (Clement

  Verna)

3.7 (2017-09-05)

----------------

- Update link to markdown documentation, fix typo on the way (Till Hofmann)

- Add feature allowing to prevent project creation in the UI only

- Remove the front whitespace from the commit markdown regex (Clement Verna)