4243 Commits
Author SHA1 Message Date
Vivek Kumar ee300c8649 fix: [CODE-6291]: reclassify undefined-ref and client-cancelled errors instead of returning 500 (#5330)
* 8be3e5 fix: [CODE-6291]: reclassify undefined-ref and client-cancelled errors instead of returning 500
2026-09-24 17:58:33 +00:00
Marko Gaćeša dd57d0d6c0 feat: [CODE-6391]: autodelete PR source branch for MQ (#5351)
* 01a249 autodelete PR source branch for MQ and automerge
2026-09-24 12:36:17 +00:00
Darko Draskovic c0d6fe0d99 feat: [CODE-5656]: expose repo tag filter in listRepos swagger (#5348)
* 7332d0 feat: [CODE-5656]: expose repo tag filter in listRepos swagger
2026-09-22 14:13:41 +00:00
Darko Draskovic 912a1f3678 feat: [CODE-4850]: audit push rule bypasses in pre-receive hook (#5342)
* 205277 feat: [CODE-4850]: audit push rule bypasses in pre-receive hook
2026-09-21 16:38:25 +00:00
Marko Gaćeša 9f14e368fc feat: [CODE-6354]: make sharedrepo create git packs (#5347)
* 11c1bf make sharedrepo create git packs
2026-09-21 15:12:49 +00:00
Enver Biševac 093d1ba060 fix: [CODE-5125]: fix bad revision error in list commits (#5344)
* 5061ad fix bad revision error in list commits
2026-09-18 21:35:18 +00:00
Enver Biševac 050a93791a fix: [CODE-6295]: fix Persistent XSS via Code Repository Raw-File Serving (#5340)
* 6eaf01 fix Persistent XSS via Code Repository Raw-File Serving
2026-09-17 20:29:45 +00:00
Marko Gaćeša a02bf098b7 feat: [CODE-6335]: change MQ webhook payload (#5339)
* ec70ff change MQ webhook payload
2026-09-16 13:23:12 +00:00
Darko Draskovic 2383b0b8da feat: [CODE-4807]: Add push rule creation to repo and proj settings page (#5337)
* 8edae5 feat: [CODE-6097]: add push rule creation option in protection rules UI

* 8d96f4 feat: [CODE-4807]: Add push rule creation to repo and proj settings page
2026-09-10 12:27:05 +00:00
Marko Gaćeša b44c76dc6b fix: [CODE-6021]: hardening for server side request forgery (#5338)
* 3b4cda hardening for server side request forgery
2026-09-09 16:49:33 +00:00
Darko Draskovic 8927dd9f92 feat: [CODE-5312]: propagate push rule violations to the API layer (#5333)
* a8b133 Compact comments

* 62ad7e Add util tests

* b826f8 Replace the hardcoded allowBypass := true

* 3fa9f8 feat: [CODE-5312]: propagate push rule violations to the API layer
2026-09-09 10:14:07 +00:00
Vivek Kumar 3a5470b311 fix: [CODE-5601]: cancel auto-merge when new commits are pushed to a pull request (#5331)
* d4da38 Merge remote-tracking branch 'origin/fix/CODE-5601-cancel-automerge-on-push' into fix/CODE-5601-cancel-automerge-on-push

* a824cc techdebt: [CODE-5601]: drop redundant auto-merge-disabled SSE publish

* 4abb4e Merge remote-tracking branch 'origin/main' into fix/CODE-5601-cancel-automerge-on-push

* 37138b Merge remote-tracking branch 'origin/fix/CODE-5601-cancel-automerge-on-push' into fix/CODE-5601-cancel-automerge-on-push

* c1c6b1 chore: [CODE-5601]: regenerate wire_gen.go after merging main

* cdae8b Merge remote-tracking branch 'origin/main' into fix/CODE-5601-cancel-automerge-on-push

* 1a1506 Merge remote-tracking branch 'origin/main' into fix/CODE-5601-cancel-automerge-on-push

* 1c97c6 fix: [CODE-5601]: cancel auto-merge when new commits are pushed to a pull request
2026-09-09 08:57:23 +00:00
Enver Biševac 3da21b9717 feat: [CODE-5494]: add custom errors for limited storage (#5332)
* 6d0287 update comments to use space

* 1ce37b drop additionalKiB param

* 8a70c5 add nolint for gosec

* 9325b7 test: [CODE-5494]: assert the fail-open storage check actually logs

* 7b4dd8 test: [CODE-5494]: cover storage-quota error translation and restore blocking

* 1a0413 fix: [CODE-5494]: don't swallow non-quota storage measurement errors

* 4094cf block repo creation, fork, imports when storage is overlimit

* 15582e add sentinel errors for limited storage
2026-09-08 10:18:54 +00:00
Enver Biševac aba5bf25b8 feat: [CODE-6304]: upgrade crypto dep, update sec target in Makefile (#5336)
* 8b2337 upgrade crypto dep, update sec target in Makefile
2026-09-04 23:28:33 +00:00
Abhinav Singh b6bcfd03f6 feat: [CODE-6111]: add linked provider registry (#5334)
* 97d350 feat: [CODE-6113]: add Bitbucket linked PR handler (#5335)

* 25eeb3 feat: [CODE-6111]: add linked provider registry
2026-09-04 07:27:33 +00:00
Marko Gaćeša 083b0c95c9 chore: [CODE-5173]: update gitness swagger (#5328)
* 0bbfec update gitness swagger
2026-09-01 09:53:43 +00:00
Abhinav Singh 2121eeb07a feat: [CODE-6246]: add harness provider for repo import (#5326)
* 5c67f8 fix: [CODE-6246]: fix lll lint violation in harness import test

* 4301fc fix: [CODE-6246]: use go-scm harness driver for repo import metadata

* 633f59 refactor: [CODE-6246]: trim verbose comments in harness provider

* 5f7a00 fix: [CODE-6246]: persist detected default branch after repo import sync

* 00fd6a fix: [CODE-6246]: default harness provider host to git.harness.io, support any repo scope

* 179f5e fix: [CODE-6246]: import harness provider via git clone, always private

* 5d05f3 feat: [CODE-6246]: add harness provider for repo import
2026-09-01 02:03:13 +00:00
Enver Biševac 28fc80c70c fix: [CODE-5571]: linked repo description is not updatable (#5325)
* a9d440 linked repo description is not updatable
2026-09-01 01:09:05 +00:00
Enver Biševac 4a3de3f3a1 feat: [code-5494]: implementation of quota enforcement (#5307)
* c6c836 extend ResourceLimiter interface

* fbef68 requested changes

* 3ebd72 address review: enforce total storage quota against root space

* d56845 implementation of quota enforcment
2026-09-01 00:16:02 +00:00
Marko Gaćeša 7994843d9b feat: [CODE-5741]: autodelete failed repository imports (#5324)
* 5e49d9 autodelete failed repository imports
2026-08-31 11:38:33 +00:00
Atefeh Mohseni Ejiyeh d37bf50c45 fix: [CODE-6242] return principalInfo instead of just id for bypassed_by field in checks (#5321)
* d8d871 return bypaased_by in checks as principal info
2026-08-28 23:11:16 +00:00
Marko Gaćeša 475f24b390 fix: [CODE-6243]: fix rebase merge commit message (#5322)
* c0e69d fix rebase merge commit message
2026-08-28 09:34:57 +00:00
Marko Gaćeša f39c6cfbfc feat: [CODE-5173]: search response include per repo results (#5320)
* 31c028 search response include per repo results
2026-08-27 11:03:49 +00:00
Vivek Kumar 11a6882624 fix: [CODE-6016]: improve error message for missing users in rule bypass/reviewer list (#5319)
* ebed3f fix: [CODE-6016]: correct copyright header year in rules validator test

* 911d68 fix: [CODE-6016]: improve error message for missing users in rule bypass/reviewer list
2026-08-27 10:34:16 +00:00
Marko Gaćeša 62f02ec6ff fix: [CODE-6226]: trigger branch update event after MQ FF (#5317)
* 8794a4 trigger branch update event after MQ FF
2026-08-26 11:16:00 +00:00
mengzhe gan 1c89ce3d79 Fix typos in documentation (#3715)
## What changed

Fixed two typos in documentation:

- `scripts/license/README.md`: `Backfil` → `Backfill` (the next line
already spells "backfill" correctly)
- `README.md`: `The token can then be send` → `be sent`

## How verified

Diff inspection — documentation only, no code changes.
2026-08-25 22:01:37 -07:00
questfever afdb8d9206 refactor: use WaitGroup.Go to simplify code (#3712)
Use sync.WaitGroup.Go (Go 1.25) to replace the manual Add/Done pattern,
reducing boilerplate and eliminating mismatched counter bugs.

More info can see: https://github.com/golang/go/issues/63796

Signed-off-by: questfever <questfever@outlook.com>
2026-08-25 21:54:06 -07:00
Immanuel Tikhonov a2f5fcbfe8 fix: handle wildcard CODEOWNERS file matches (#3688)
Small CODEOWNERS matcher fix.

Patterns like `a.*` and `a.**` should match the file `a.` too. Before
this, the matcher only hit the child-path form, so `a.` slipped through.
tiny papercut, but kinda confusing ngl.

Repro before the fix:

```text
match("a.*", "a.") = false but wanted true
match("a.**", "a.") = false but wanted true
```

Fix is to check the normalized file pattern first, then fall through to
the existing descendant match logic.

Verified with:

```bash
go test ./app/services/codeowners -count=1
```

I looked for related CODEOWNERS/doublestar issues and PRs, didn't find a
matching one.
2026-08-25 21:53:02 -07:00
Atefeh Mohseni Ejiyeh ad5c8768ce fix: [CODE-6213] include check payload data in checkreq svc (#5314) 2026-08-21 19:20:11 +00:00
Enver Biševac 4d4b24c09c fix: [code-6138]: fix Dockerfile.uiv2 - bump golang version (#5313)
* ad3aea Edit Dockerfile.uiv2
2026-08-21 17:50:01 +00:00
Marko Gaćeša 2411ef2783 fix: [CODE-5741]: handle import failure (#5312)
* 981960 handle import failure
2026-08-21 09:31:27 +00:00
Darko Draskovic 65456abc3c fix: [CODE-6190]: Fix label unassign unconditional behavior (#5311)
* 063d05 Add unit tests

* 84b649 Fix label unassign unconditional behavior
2026-08-20 13:38:12 +00:00
Enver Biševac 8598dd4fc3 fix: [code-6138]: automatic CVE remediation from scan (#5310)
* 4c8088 fix: automatic CVE remediation from scan
2026-08-20 11:48:35 +00:00
Marko Gaćeša 97c3715a6f feat: [CODE-6146]: tweak pr merge lock (#5309)
* 885603 tweak pr merge lock
2026-08-19 14:27:01 +00:00
Enver Biševac bae76235e6 fix: [code-6138]: upgrade golang version (patch) (#5308)
* 2328b4 upgrade golang version (patch)
2026-08-19 12:32:49 +00:00
Enver Biševac 403f0757d0 fix: [code-5783]: automatic CVE remediation from scan (#5306)
* 90b295 fix: automatic CVE remediation from scan
2026-08-17 10:52:50 +00:00
Marko Gaćeša 828c7abf3a feat: [CODE-6146]: use branch scope locking for PR merge (#5305)
* b27c95 use branch scope locking for PR merge
2026-08-14 13:57:22 +00:00
Atefeh Mohseni Ejiyeh 9fd9598daa fix: [CODE-5796] Restrict bypassed_by on the status check report API to service principals (#5304) 2026-08-13 20:42:39 +00:00
Vivek Kumar 8fd4384d4d fix: [CODE-5466]: sandbox user content responses to stop stored XSS via SVG (#5303)
* e35d6b chore: [CODE-5466]: wrap long test fixture line to satisfy lll

* 1914c6 fix: [CODE-5466]: sandbox user content responses to stop stored XSS via SVG
2026-08-13 17:58:35 +00:00
Darko Draskovic bd1b915c50 fix: [CODE-5405]: Notify codeowner usergroups on PR state change (#5275)
* f83eeb Add unit tests

* abe16b Merge remote-tracking branch 'origin' into dd/notify-codeowner-usergroups

* e334f7 Notify codeowner usergroups on PR state change
2026-08-13 16:32:13 +00:00
Abhinav Singh 4d6ccfb8e9 feat: [CODE-6116]: make deleted-repo cleanup job schedule and duration configurable (#5302)
* 63bbc0 Edit charts/gitness/values.yaml

* 7adaff feat: [CODE-6116]: make deleted-repo cleanup job schedule and duration configurable
2026-08-12 21:52:22 +00:00
Atefeh Mohseni Ejiyeh 2409992fa0 feat: [CODE-6109] allow externally owned required status checks (#5300) 2026-08-12 16:54:04 +00:00
Enver Biševac 24d9f3ba83 fix: [seceng-10474]: fix git-archive argument injection (#5298)
* c3a7bd fix git-archive argument injection
2026-08-10 17:38:50 +00:00
Marko Gaćeša 8122676af4 feat: [CODE-6098]: allow merge API dry run rules API calls for PRs in MQ (#5297)
* 229ff1 allow merge API dry run rules for PRs in MQ
2026-08-10 15:31:55 +00:00
Marko Gaćeša 6dc2aa7a6c feat: [CODE-6098]: return chosen merge method for a PR in MQ (#5296)
* e741dc return chosen merge method for a PR in MQ
2026-08-10 13:37:46 +00:00
Marko Gaćeša dcc846f20b feat: [CODE-5772]: remove deprecated search api (#5295)
* 93981b remove deprecated search api
2026-08-10 09:49:45 +00:00
Marko Gaćeša 300117a58c feat: [CODE-6065]: block merging PRs to a branch with PR in MQ (#5294)
* ca35d2 block merging PRs to a branch with PR in MQ
2026-08-06 14:56:54 +00:00
Marko Gaćeša a64800ce6f feat: [CODE-6081]: include MQ info in list branches API (#5293)
* 003d14 include MQ info in list branches API
2026-08-06 11:19:40 +00:00
Marko Gaćeša bfc3e755e8 feat: [CODE-6065]: allow mq bypassing (#5292)
* 3574ca allow mq bypassing
2026-08-05 15:10:35 +00:00
Darko Draskovic 758df8552a feat: [CODE-5787]: Update root space id and identifier on repo/space move to another space (#5284)
* 235b2d Remove redundant comments

* 9789bc Merge remote-tracking branch 'origin' into dd/move-repo-id-identifier

* 1c139f Only propagate root identifier update if root identifier changed

* e024a4 Remove update of root id and root uid from all Update methods in the store layer

* 564ff9 Add space move tests

* 487058 Fix tests

* ec5d0d Set new root space id and identifier on repo/space move to another space
2026-08-03 17:39:34 +00:00