v0.15.3

Thanks to all contributors

@6543, @anbraten

Changelog

• SECURITY
  • Update github.com/containerd/containerd (#978) (#980) CVE-2022-23648
• BUGFIXES
  • Return to page after clikcing login at navbar (#975) (#976)

v0.15.2

Thanks to all contributors

@anbraten, @IDerr and @fracai

Changelog

• BUGFIXES
  • Fix uppercase from_secrets (#842) (#925)
  • Fix key/val format for dind env vars (#889) (#890)
  • Update helm chart releasing (#882) (#888)
• DOCUMENTATION
  • Fix run_on references with runs_on in docs (#965)

v0.15.1

Thanks for the security reporting 👍🏾

This release includes a fix for a security issue reported by @mscherer one of our community members. Please update to the latest stable v0.15.1 or next release. More details regarding the security issue can be found in #879.

Changelog

• SECURITY
  • Escape html / xml in log view (#879) (#880) CVE-2022-29947
• FEATURES
  • Build multiarch images for server (#821) (#822)
• BUGFIXES
  • Branch list enhancements (#808) (#809)
  • Get Netrc machine from clone url (#800) (#803)

v0.15.0

Big thanks to all contributors who did make this release possible

@6543, @9p4, @BracketJohn, @KN4CK3R, @LamaAni, @Ta180m, @anbraten, @belak, @catdevnull, @cognifloyd, @ctbur, @davidak, @fnetX, @fpiesche, @gjabell, @isuruf, @jdoubleu, @jolheiser, @kevinanew, @ktprograms, @lukashass, @luzpaz, @marians, @matsuyoshi30, @mfulz, @mscherer, @nupplaphil, @qwerty287, @sam-tang-sw, @seabass-labrax, @ticoombs, @valentinleistner, @zloidemon

Migration Guide for v0.14.4 to v0.15.0

Please be aware, this release break with old stuff!!!
-> https://woodpecker-ci.org/docs/migrations#0150

Changelog

• BREAKING
  • Change paths to use woodpecker instead of drone (#494)
  • Move plugin config to root.pipeline.[step].settings (#464)
  • Replace debug with log-level flag (#440)
  • Change prometheus metrics from drone_* to woodpecker_* (#439)
  • Replace DRONE_ with CI_ variables in pipeline steps (#427)
  • Enable pull_request hook by default on repository activation (#420)
  • Remote Gitea drop basic auth support (#365)
  • Change pipeline config path resolution (#299)
  • Remove push, tag and deployment webhook filters (#281)
  • Clean up config environment variables for server and agent (#218)
• SECURITY
  • Add linter bidichk to prevent malicious utf8 chars (#516)
• FEATURES
  • Show changed files of pipeline in UI (#650)
  • Show yml config of pipeline in UI (#649)
  • Multiarch build for cli and agent docker images (#634), (#622)
  • Get secrets in settings (#604)
  • Add multi-pipeline support to exec & lint (#568)
  • Add repo branches endpoint (#481)
  • Add repo permission endpoint (#436)
  • Add web-config endpoint (#433)
  • Replace www-path with www-proxy option for development (#248)
• BUGFIXES
  • Make gRPC error "too many keepalive pings" only show up in trace logs (#787)
  • WOODPECKER_ENVIRONMENT: ignore items only containing a key and no value (#781)
  • Fix pipeline timestamps (#730)
  • Remove "panic()" as much as possible from code (#682)
  • Send decline events back to UI (#680)
  • Notice all changed files of all related commits for gitea push webhooks (#675)
  • Use global branch filter only on events containing branch info (#659)
  • API GetRepos() return empty list if no active repos exist (#658)
  • Skip nested GitLab repositories during sync (#656), (#652)
  • Build proc tree function should not depend on sorted procs list (#647)
  • Fix sqlite migration on column drop of abnormal schemas (#629)
  • Fix gRPC incomapatability in helm chart (#627)
  • Fix new pipeline not published to UI if protected repo mode enabled (#619)
  • Dont panic, report error back (#582)
  • Improve status updates (#561)
  • Let normal repo admins change timeout to lower values (#543)
  • Fix registry delete (#532)
  • Fix overflowing commit messages (#528)
  • Fix passing of netrc credentials to clone step (#492)
  • Fix various typos (#416)
  • Append trailing slash to default GH API URL (#411)
  • Fix filter pipeline config files (#279)
• ENHANCEMENTS
  • Return better error if repo was deleted/renamed (#780)
  • Add support to set default clone image via environment variable (#769)
  • Add flag to always authenticate when cloning public repositories from locked down / private only forges (#760)
  • UI: show date time on hover over time items (#756)
  • Add repo-link to badge markdown in UI (#753)
  • Allow specifying dind container in values (#750)
  • Add page to view all projects of a user / group (#741)
  • Let non required migration tasks fail and continue (#729)
  • Improve pipeline compiler (#699)
  • Support ChangedFiles for Github & Gitlab PRs and pushes and Gitea pushes (#697)
  • Remove unused flags / options (#693)
  • Automatically determine platform of agent (#690)
  • Build ref link point to commit not compare if only one commit was pushed (#673)
  • Hide multi line secrets from log (#671)
  • Do not exclude repo owner from gated rule (#641)
  • Add field for image list in Secrets Repo Settings (Web UI) (#638)
  • Use Woodpecker theme colors on Safari Tab Bar / Header Bar (#632)
  • Add "woodpeckerci/plugin-docker-buildx" to privileged plugins (#623)
  • Use gitlab generic webhooks instead of drone-ci-service (#620)
  • Calculate build number on creation (#615)
  • Hide gin routes logging on non-debug starts (#603)
  • Let remove be a remove (#593)
  • Add flag to set oauth redirect host in dev mode (#586)
  • Add log-level option to cli (#584)
  • Improve favicons (#576)
  • Show icon and index of a pull request in pipelines triggered by pull requests (#575)
  • Improve secrets tab (#574)
  • Use monospace font for build logs (#527)
  • Show environ in every BuildProc (#526)
  • Drop error only on purpose or else report back or log (#514)
  • Migrate database backend to Xorm (#474)
  • Add backend selection for agent (#463)
  • Switch default git plugin (#449)
  • Add log level API (#444)
  • Move entirely to zerolog (#426)
  • Pass context.Context down (#371)
  • Extend Logging & Report to WebHook Caller back if pulls are disabled (#369)
  • If config is no file assume its a folder (#354)
  • Rename cmd agent and server folders and binaries (#330)
  • Release Helm charts (#302)
  • Add flag for specific grpc server addr (#295)
  • Add option to charts, to pass in topology pod constraints (#262)
  • Use server-host as source for public links and warn if it is set to localhost (#251)
  • Rewrite of UI (#245)
• REFACTOR
  • Remove github.com/kr/pretty in favor of assert.EqualValues() (#564)
  • Simplify web router code (#541)
  • Server obtain remote from glob config not from context (#540)
  • Serve index.html directly without template (#539)
  • Add linter revive, unused, ineffassign, varcheck, structcheck, staticcheck, whitespace, misspell (#550), (#551), (#554), (#538), (#537), (#535), (#531), (#530)
  • Rename struct field and add new types into server/model's (#523)
  • Update database in one transaction on syncing user repositorys (#513)
  • Format code with 'simplify' flag and check via CI (#509)
  • Use Goblin Assert as intended (#501)
  • Embedding libcompose types for yaml parsing (#495)
  • Use std methode to get SystemCertPool (#488)
  • Upgrade urfave/cli to v2 (#483)
  • Remove some wrapper and make code more redable (#478)
  • More logging and refactor (#457)
  • Simplify routes (#437)
  • Move api-routes to separate file (#434)
  • Rename drone-go to woodpecker-go (#390)
  • Remove ghodss/yaml (#384)
  • Move model/ to server/model/ (#366)
  • Use moby definitions for docker pipeline backend (#364)
  • Rewrite Gitlab Remote (#358)
  • Update Generated Proto Code (#351)
  • Remove legacy/unused code + misc cleanups (#331)
  • CLI use version from version/version.go (#329)
  • Move cli/drone/ to cli/ (#329)
  • Cleanup Code (#348)
  • Move cncd/pipeline/pipeline/ to pipeline/ (#347)
  • Move cncd/{logging,pubsub,queue}/ to server/{logging,pubsub,queue}/ (#346)
  • Move remote/ to server/remote/ (#344)
  • Move plugins/ to server/plugins/ (#343)
  • Move store/ to server/store/ (#341)
  • Move router/ to server/router/ (#339)
  • Create agent/ package for backend agnostic logic (#338)
  • Reorganize into server/{api,grpc,shared} packages (#337)
• TESTING
  • Add tests framework for storage migration (#630)
  • Add more golangci-lint linters & sort them (#499) (#502)
  • Compile on pull too (#287)
• DOCUMENTATION
  • Add note about Gitlab & Gitea internal connections to docs (#711)
  • Add registries docs (#679)
  • Add documentation of all agent configuration options (#667)
  • Add repo to when block (#642)
  • Add development docs (#610)
  • Clarify Docs on Docker for new users in intro (#606)
  • Update Documentation (fix diffs and add settings) (#569)
  • Add notice of supported YAML versions in docs (#556)
  • Update Agent and Pipeline syntax documentation (#506)
  • Update docs about selecting agent based on platform (#470)
  • Add plugin marketplace (for official plugins) (#451)
  • Add search to docs (#448)
  • Add image migration docs (#406)
  • Add security policy (#396)
  • Explain open registration setting (#361)
  • Add json schema and cli lint command (#342)
  • Improve docs deployment (#333)
  • Improve plugin docs (#313)
  • Add Support section to README (#310)
  • Community Guide (#296)
  • Migrate docs framework to Docusaurus (#282)
  • Use woodpecker env variable instead of drone in docker-compose (#264)
• MISC
  • Add support for building in docker (#759)
  • Compile for more platforms on release (#703)
  • Build agent for multiple platforms (arm, arm64, amd64, linux, windows, darwin) (#408)
  • Release deb, rpm bundles (#405)
  • Release cli images (#404)
  • Publish alpine container (#398)
  • Migrate go-docker to docker/docker (#363)
  • Use go's vendoring (#284)

v0.15.0-rc2

Big thanks to all contributors who did make this release possible

@6543, @BracketJohn, @Ta180m, @anbraten, @belak, @catdevnull, @cognifloyd, @ctbur, @davidak, @fnetX, @fpiesche, @gjabell, @isuruf, @jdoubleu, @jolheiser, @kevinanew, @ktprograms, @lukashass, @luzpaz, @marians, @matsuyoshi30, @mfulz, @mscherer, @nupplaphil, @sam-tang-sw, @seabass-labrax, @ticoombs, @zloidemon

Changelog

• BUGFIXES
  • Fix pipeline timestamps (#730)
  • Remove "panic()" as much as possible from code (#682)
• ENHANCEMENTS
  • Let non required migration tasks fail and continue (#729)
  • Improve pipeline compiler (#699)
  • Support ChangedFiles for Github & Gitlab PRs and Gitea pushes (#697)
  • Remove unused flags / options (#693)
  • Automatically determine platform of agent (#690)
• DOCUMENTATION
  • Minor updates to docs (#712)
  • Add note about Gitlab & Gitea internal connections to docs (#711)
• MISC
  • Update deps (#724)
  • Compile for more platforms on release (#703)

v0.14.4

• BUGFIXES
  • Docker Images use golang image for ca-certificates (#608)

v0.15.0-rc1

Big thanks to all contributors who did make this release possible

@6543, @BracketJohn, @anbraten, @catdevnull, @cognifloyd, @ctbur, @davidak, @fnetX, @fpiesche, @gjabell, @isuruf, @jdoubleu, @jolheiser, @kevinanew, @ktprograms, @lukashass, @luzpaz, @marians, @matsuyoshi30, @mfulz, @mscherer, @nupplaphil, @sam-tang-sw, @seabass-labrax, @ticoombs, @zloidemon

Changelog

• BREAKING
  • Change paths to use woodpecker instead of drone (#494)
  • Move plugin config to root.pipeline.[step].settings (#464)
  • Replace debug with log-level flag (#440)
  • Change prometheus metrics from drone_* to woodpecker_* (#439)
  • Replace DRONE_ with CI_ variables in pipeline steps (#427)
  • Enable pull_request hook by default on repository activation (#420)
  • Remote Gitea drop basic auth support (#365)
  • Change pipeline config path resolution (#299)
  • Remove push, tag and deployment webhook filters (#281)
  • Clean up config environment variables for server and agent (#218)
• FEATURES
  • Show changed files of pipeline in UI (#650)
  • Show yml config of pipeline in UI (#649)
  • Multiarch build for cli and agent docker images (#634), (#622)
  • Get secrets in settings (#604)
  • Add multi-pipeline support to exec & lint (#568)
  • Add repo branches endpoint (#481)
  • Add repo permission endpoint (#436)
  • Add web-config endpoint (#433)
  • Replace www-path with www-proxy option for development (#248)
• SECURITY
  • Add linter bidichk to prevent malicious utf8 chars (#516)
• BUGFIXES
  • Remove "panic()" as much as possible from code (#682)
  • Send decline events back to UI (#680)
  • Notice all changed files of all related commits for gitea push webhooks (#675)
  • Use global branch filter only on events containing branch info (#659)
  • API GetRepos() return empty list if no active repos exist (#658)
  • Skip nested GitLab repositories during sync (#656), (#652)
  • Build proc tree function should not depend on sorted procs list (#647)
  • Fix sqlite migration on column drop of abnormal schemas (#629)
  • Fix gRPC incomapatability in helm chart (#627)
  • Fix new pipeline not published to UI if protected repo mode enabled (#619)
  • Dont panic, report error back (#582)
  • Improve status updates (#561)
  • Let normal repo admins change timeout to lower values (#543)
  • Fix registry delete (#532)
  • Fix overflowing commit messages (#528)
  • Fix passing of netrc credentials to clone step (#492)
  • Fix various typos (#416)
  • Append trailing slash to default GH API URL (#411)
  • Fix filter pipeline config files (#279)
• ENHANCEMENTS
  • Build ref link point to commit not compare if only one commit was pushed (#673)
  • Hide multi line secrets from log (#671)
  • Do not exclude repo owner from gated rule (#641)
  • Add field for image list in Secrets Repo Settings (Web UI) (#638)
  • Use Woodpecker theme colors on Safari Tab Bar / Header Bar (#632)
  • Add "woodpeckerci/plugin-docker-buildx" to privileged plugins (#623)
  • Use gitlab generic webhooks instead of drone-ci-service (#620)
  • Calculate build number on creation (#615)
  • Hide gin routes logging on non-debug starts (#603)
  • Let remove be a remove (#593)
  • Add flag to set oauth redirect host in dev mode (#586)
  • Add log-level option to cli (#584)
  • Improve favicons (#576)
  • Show icon and index of a pull request in pipelines triggered by pull requests (#575)
  • Improve secrets tab (#574)
  • Use monospace font for build logs (#527)
  • Show environ in every BuildProc (#526)
  • Drop error only on purpose or else report back or log (#514)
  • Migrate database backend to Xorm (#474)
  • Add backend selection for agent (#463)
  • Switch default git plugin (#449)
  • Add log level API (#444)
  • Move entirely to zerolog (#426)
  • Pass context.Context down (#371)
  • Extend Logging & Report to WebHook Caller back if pulls are disabled (#369)
  • If config is no file assume its a folder (#354)
  • Rename cmd agent and server folders and binaries (#330)
  • Release Helm charts (#302)
  • Add flag for specific grpc server addr (#295)
  • Add option to charts, to pass in topology pod constraints (#262)
  • Use server-host as source for public links and warn if it is set to localhost (#251)
  • Rewrite of UI (#245)
• REFACTOR
  • Remove github.com/kr/pretty in favor of assert.EqualValues() (#564)
  • Simplify web router code (#541)
  • Server obtain remote from glob config not from context (#540)
  • Serve index.html directly without template (#539)
  • Add linter revive, unused, ineffassign, varcheck, structcheck, staticcheck, whitespace, misspell (#550), (#551), (#554), (#538), (#537), (#535), (#531), (#530)
  • Rename struct field and add new types into server/model's (#523)
  • Update database in one transaction on syncing user repositorys (#513)
  • Format code with 'simplify' flag and check via CI (#509)
  • Use Goblin Assert as intended (#501)
  • Embedding libcompose types for yaml parsing (#495)
  • Use std methode to get SystemCertPool (#488)
  • Upgrade urfave/cli to v2 (#483)
  • Remove some wrapper and make code more redable (#478)
  • More logging and refactor (#457)
  • Simplify routes (#437)
  • Move api-routes to separate file (#434)
  • Rename drone-go to woodpecker-go (#390)
  • Remove ghodss/yaml (#384)
  • Move model/ to server/model/ (#366)
  • Use moby definitions for docker pipeline backend (#364)
  • Rewrite Gitlab Remote (#358)
  • Update Generated Proto Code (#351)
  • Remove legacy/unused code + misc cleanups (#331)
  • CLI use version from version/version.go (#329)
  • Move cli/drone/ to cli/ (#329)
  • Cleanup Code (#348)
  • Move cncd/pipeline/pipeline/ to pipeline/ (#347)
  • Move cncd/{logging,pubsub,queue}/ to server/{logging,pubsub,queue}/ (#346)
  • Move remote/ to server/remote/ (#344)
  • Move plugins/ to server/plugins/ (#343)
  • Move store/ to server/store/ (#341)
  • Move router/ to server/router/ (#339)
  • Create agent/ package for backend agnostic logic (#338)
  • Reorganize into server/{api,grpc,shared} packages (#337)
• TESTING
  • Add tests framework for storage migration (#630)
  • Add golangci-lint (#502)
  • Add more golangci-lint linters & sort them (#499)
  • Add TestPipelineName to procBuilder_test.go (#461)
  • Improve CI tests (#353)
  • Compile on pull too (#287)
• DOCUMENTATION
  • Add registries docs (#679)
  • Add documentation of all agent configuration options (#667)
  • Add WoodpeckerCI tag to README (#663)
  • Add repo to when block (#642)
  • Add development docs (#610)
  • Clarify Docs on Docker for new users in intro (#606)
  • Update proxy docs (#573)
  • Update Documentation (fix diffs and add settings) (#569)
  • Update README (#560)
  • Add notice of supported YAML versions in docs (#556)
  • Update docs dependencies (#553)
  • Update Agent and Pipeline syntax documentation (#506)
  • Update docs about selecting agent based on platform (#470)
  • Add plugin marketplace (for official plugins) (#451)
  • Improve docs (#450)
  • Add search to docs (#448)
  • Update links to woodpecker-ci.org (#445)
  • Add image migration docs (#406)
  • Add security policy (#396)
  • Add Migrations to header (#386)
  • Delete Gerrit placeholder (#372)
  • Explain open registration setting (#361)
  • Simplify docker-compose samples (#356)
  • Add json schema and cli lint command (#342)
  • Improve docs deployment (#333)
  • Improve plugin docs (#313)
  • Add Support section to README (#310)
  • Improve administration docs (#307)
  • Issue templates (#298)
  • Community Guide (#296)
  • Migrate docs framework to Docusaurus (#282)
  • Use woodpecker env variable instead of drone in docker-compose (#264)
• MISC
  • github.com/xanzy/go-gitlab v0.51.1 -> v0.52.2 (#599)
  • Update gogs client (#487)
  • Update Dependencies (#486)
  • Zerolint (#441)
  • Build agent for multiple platforms (arm, arm64, amd64, linux, windows, darwin) (#408)
  • Release deb, rpm bundles (#405)
  • Release cli images (#404)
  • Improve release (#400)
  • Publish alpine container (#398)
  • Upgrade github client (#381)
  • Migrate go-docker to docker/docker (#363)
  • Use go's vendoring (#284)
  • code.gitea.io/sdk/gitea v0.14.1 -> v0.15.0 (#263)

v0.14.3

• BUGFIXES
  • Add flag for not fetching permissions (FlatPermissions) (#491)
  • Gitea use default branch (#480) (#482)
  • Fix repo access (#476) (#477)
• ENHANCEMENTS
  • Use go embed for web files and remove httptreemux (#382) (#489)

v0.14.2

• BUGFIXES
  • Fix sanitziePath (#326) (aa4fa9a)
  • Fix json tag for Pos at struct Line (#422) (#424)
  • Fix channel buffer used with signal.Notify (#421) (#423)
• ENHANCEMENTS
  • Support recursive glob for path conditions (#327) (#412)
• TESTING
  • Add TestPipelineName to procBuilder_test.go (#461) (#455)

Big thanks to all contributors who did make this release possible

• @6543
• @alexef
• @anbraten
• @ctbur
• @matsuyoshi30

v0.14.1

• SECURITY
  • Migrate jwt token lib (#332)
• BUGFIXES
  • Increase allowed length for user token in db (#328)
  • Fix cli matrix filter (#311)
  • Fix ignore pushes to tags for gitea (#289)
  • Fix use custom config path to sanitize build names (#280)

Big thanks to all contributors who did make this release possible

• @6543
• @anbraten
• @sam-tang-sw
• @zloidemon