Vivek Kumar
ee300c8649
fix: [CODE-6291]: reclassify undefined-ref and client-cancelled errors instead of returning 500 ( #5330 )
...
* 8be3e5 fix: [CODE-6291]: reclassify undefined-ref and client-cancelled errors instead of returning 500
2026-09-24 17:58:33 +00:00
Marko Gaćeša
dd57d0d6c0
feat: [CODE-6391]: autodelete PR source branch for MQ ( #5351 )
...
* 01a249 autodelete PR source branch for MQ and automerge
2026-09-24 12:36:17 +00:00
Darko Draskovic
c0d6fe0d99
feat: [CODE-5656]: expose repo tag filter in listRepos swagger ( #5348 )
...
* 7332d0 feat: [CODE-5656]: expose repo tag filter in listRepos swagger
2026-09-22 14:13:41 +00:00
Darko Draskovic
912a1f3678
feat: [CODE-4850]: audit push rule bypasses in pre-receive hook ( #5342 )
...
* 205277 feat: [CODE-4850]: audit push rule bypasses in pre-receive hook
2026-09-21 16:38:25 +00:00
Marko Gaćeša
9f14e368fc
feat: [CODE-6354]: make sharedrepo create git packs ( #5347 )
...
* 11c1bf make sharedrepo create git packs
2026-09-21 15:12:49 +00:00
Enver Biševac
093d1ba060
fix: [CODE-5125]: fix bad revision error in list commits ( #5344 )
...
* 5061ad fix bad revision error in list commits
2026-09-18 21:35:18 +00:00
Enver Biševac
050a93791a
fix: [CODE-6295]: fix Persistent XSS via Code Repository Raw-File Serving ( #5340 )
...
* 6eaf01 fix Persistent XSS via Code Repository Raw-File Serving
2026-09-17 20:29:45 +00:00
Marko Gaćeša
a02bf098b7
feat: [CODE-6335]: change MQ webhook payload ( #5339 )
...
* ec70ff change MQ webhook payload
2026-09-16 13:23:12 +00:00
Darko Draskovic
2383b0b8da
feat: [CODE-4807]: Add push rule creation to repo and proj settings page ( #5337 )
...
* 8edae5 feat: [CODE-6097]: add push rule creation option in protection rules UI
* 8d96f4 feat: [CODE-4807]: Add push rule creation to repo and proj settings page
2026-09-10 12:27:05 +00:00
Marko Gaćeša
b44c76dc6b
fix: [CODE-6021]: hardening for server side request forgery ( #5338 )
...
* 3b4cda hardening for server side request forgery
2026-09-09 16:49:33 +00:00
Darko Draskovic
8927dd9f92
feat: [CODE-5312]: propagate push rule violations to the API layer ( #5333 )
...
* a8b133 Compact comments
* 62ad7e Add util tests
* b826f8 Replace the hardcoded allowBypass := true
* 3fa9f8 feat: [CODE-5312]: propagate push rule violations to the API layer
2026-09-09 10:14:07 +00:00
Vivek Kumar
3a5470b311
fix: [CODE-5601]: cancel auto-merge when new commits are pushed to a pull request ( #5331 )
...
* d4da38 Merge remote-tracking branch 'origin/fix/CODE-5601-cancel-automerge-on-push' into fix/CODE-5601-cancel-automerge-on-push
* a824cc techdebt: [CODE-5601]: drop redundant auto-merge-disabled SSE publish
* 4abb4e Merge remote-tracking branch 'origin/main' into fix/CODE-5601-cancel-automerge-on-push
* 37138b Merge remote-tracking branch 'origin/fix/CODE-5601-cancel-automerge-on-push' into fix/CODE-5601-cancel-automerge-on-push
* c1c6b1 chore: [CODE-5601]: regenerate wire_gen.go after merging main
* cdae8b Merge remote-tracking branch 'origin/main' into fix/CODE-5601-cancel-automerge-on-push
* 1a1506 Merge remote-tracking branch 'origin/main' into fix/CODE-5601-cancel-automerge-on-push
* 1c97c6 fix: [CODE-5601]: cancel auto-merge when new commits are pushed to a pull request
2026-09-09 08:57:23 +00:00
Enver Biševac
3da21b9717
feat: [CODE-5494]: add custom errors for limited storage ( #5332 )
...
* 6d0287 update comments to use space
* 1ce37b drop additionalKiB param
* 8a70c5 add nolint for gosec
* 9325b7 test: [CODE-5494]: assert the fail-open storage check actually logs
* 7b4dd8 test: [CODE-5494]: cover storage-quota error translation and restore blocking
* 1a0413 fix: [CODE-5494]: don't swallow non-quota storage measurement errors
* 4094cf block repo creation, fork, imports when storage is overlimit
* 15582e add sentinel errors for limited storage
2026-09-08 10:18:54 +00:00
Enver Biševac
aba5bf25b8
feat: [CODE-6304]: upgrade crypto dep, update sec target in Makefile ( #5336 )
...
* 8b2337 upgrade crypto dep, update sec target in Makefile
2026-09-04 23:28:33 +00:00
Abhinav Singh
b6bcfd03f6
feat: [CODE-6111]: add linked provider registry ( #5334 )
...
* 97d350 feat: [CODE-6113]: add Bitbucket linked PR handler (#5335 )
* 25eeb3 feat: [CODE-6111]: add linked provider registry
2026-09-04 07:27:33 +00:00
Marko Gaćeša
083b0c95c9
chore: [CODE-5173]: update gitness swagger ( #5328 )
...
* 0bbfec update gitness swagger
2026-09-01 09:53:43 +00:00
Abhinav Singh
2121eeb07a
feat: [CODE-6246]: add harness provider for repo import ( #5326 )
...
* 5c67f8 fix: [CODE-6246]: fix lll lint violation in harness import test
* 4301fc fix: [CODE-6246]: use go-scm harness driver for repo import metadata
* 633f59 refactor: [CODE-6246]: trim verbose comments in harness provider
* 5f7a00 fix: [CODE-6246]: persist detected default branch after repo import sync
* 00fd6a fix: [CODE-6246]: default harness provider host to git.harness.io, support any repo scope
* 179f5e fix: [CODE-6246]: import harness provider via git clone, always private
* 5d05f3 feat: [CODE-6246]: add harness provider for repo import
2026-09-01 02:03:13 +00:00
Enver Biševac
28fc80c70c
fix: [CODE-5571]: linked repo description is not updatable ( #5325 )
...
* a9d440 linked repo description is not updatable
2026-09-01 01:09:05 +00:00
Enver Biševac
4a3de3f3a1
feat: [code-5494]: implementation of quota enforcement ( #5307 )
...
* c6c836 extend ResourceLimiter interface
* fbef68 requested changes
* 3ebd72 address review: enforce total storage quota against root space
* d56845 implementation of quota enforcment
2026-09-01 00:16:02 +00:00
Marko Gaćeša
7994843d9b
feat: [CODE-5741]: autodelete failed repository imports ( #5324 )
...
* 5e49d9 autodelete failed repository imports
2026-08-31 11:38:33 +00:00
Atefeh Mohseni Ejiyeh
d37bf50c45
fix: [CODE-6242] return principalInfo instead of just id for bypassed_by field in checks ( #5321 )
...
* d8d871 return bypaased_by in checks as principal info
2026-08-28 23:11:16 +00:00
Marko Gaćeša
475f24b390
fix: [CODE-6243]: fix rebase merge commit message ( #5322 )
...
* c0e69d fix rebase merge commit message
2026-08-28 09:34:57 +00:00
Marko Gaćeša
f39c6cfbfc
feat: [CODE-5173]: search response include per repo results ( #5320 )
...
* 31c028 search response include per repo results
2026-08-27 11:03:49 +00:00
Vivek Kumar
11a6882624
fix: [CODE-6016]: improve error message for missing users in rule bypass/reviewer list ( #5319 )
...
* ebed3f fix: [CODE-6016]: correct copyright header year in rules validator test
* 911d68 fix: [CODE-6016]: improve error message for missing users in rule bypass/reviewer list
2026-08-27 10:34:16 +00:00
Marko Gaćeša
62f02ec6ff
fix: [CODE-6226]: trigger branch update event after MQ FF ( #5317 )
...
* 8794a4 trigger branch update event after MQ FF
2026-08-26 11:16:00 +00:00
mengzhe gan
1c89ce3d79
Fix typos in documentation ( #3715 )
...
## What changed
Fixed two typos in documentation:
- `scripts/license/README.md`: `Backfil` → `Backfill` (the next line
already spells "backfill" correctly)
- `README.md`: `The token can then be send` → `be sent`
## How verified
Diff inspection — documentation only, no code changes.
2026-08-25 22:01:37 -07:00
questfever
afdb8d9206
refactor: use WaitGroup.Go to simplify code ( #3712 )
...
Use sync.WaitGroup.Go (Go 1.25) to replace the manual Add/Done pattern,
reducing boilerplate and eliminating mismatched counter bugs.
More info can see: https://github.com/golang/go/issues/63796
Signed-off-by: questfever <questfever@outlook.com >
2026-08-25 21:54:06 -07:00
Immanuel Tikhonov
a2f5fcbfe8
fix: handle wildcard CODEOWNERS file matches ( #3688 )
...
Small CODEOWNERS matcher fix.
Patterns like `a.*` and `a.**` should match the file `a.` too. Before
this, the matcher only hit the child-path form, so `a.` slipped through.
tiny papercut, but kinda confusing ngl.
Repro before the fix:
```text
match("a.*", "a.") = false but wanted true
match("a.**", "a.") = false but wanted true
```
Fix is to check the normalized file pattern first, then fall through to
the existing descendant match logic.
Verified with:
```bash
go test ./app/services/codeowners -count=1
```
I looked for related CODEOWNERS/doublestar issues and PRs, didn't find a
matching one.
2026-08-25 21:53:02 -07:00
Atefeh Mohseni Ejiyeh
ad5c8768ce
fix: [CODE-6213] include check payload data in checkreq svc ( #5314 )
2026-08-21 19:20:11 +00:00
Enver Biševac
4d4b24c09c
fix: [code-6138]: fix Dockerfile.uiv2 - bump golang version ( #5313 )
...
* ad3aea Edit Dockerfile.uiv2
2026-08-21 17:50:01 +00:00
Marko Gaćeša
2411ef2783
fix: [CODE-5741]: handle import failure ( #5312 )
...
* 981960 handle import failure
2026-08-21 09:31:27 +00:00
Darko Draskovic
65456abc3c
fix: [CODE-6190]: Fix label unassign unconditional behavior ( #5311 )
...
* 063d05 Add unit tests
* 84b649 Fix label unassign unconditional behavior
2026-08-20 13:38:12 +00:00
Enver Biševac
8598dd4fc3
fix: [code-6138]: automatic CVE remediation from scan ( #5310 )
...
* 4c8088 fix: automatic CVE remediation from scan
2026-08-20 11:48:35 +00:00
Marko Gaćeša
97c3715a6f
feat: [CODE-6146]: tweak pr merge lock ( #5309 )
...
* 885603 tweak pr merge lock
2026-08-19 14:27:01 +00:00
Enver Biševac
bae76235e6
fix: [code-6138]: upgrade golang version (patch) ( #5308 )
...
* 2328b4 upgrade golang version (patch)
2026-08-19 12:32:49 +00:00
Enver Biševac
403f0757d0
fix: [code-5783]: automatic CVE remediation from scan ( #5306 )
...
* 90b295 fix: automatic CVE remediation from scan
2026-08-17 10:52:50 +00:00
Marko Gaćeša
828c7abf3a
feat: [CODE-6146]: use branch scope locking for PR merge ( #5305 )
...
* b27c95 use branch scope locking for PR merge
2026-08-14 13:57:22 +00:00
Atefeh Mohseni Ejiyeh
9fd9598daa
fix: [CODE-5796] Restrict bypassed_by on the status check report API to service principals ( #5304 )
2026-08-13 20:42:39 +00:00
Vivek Kumar
8fd4384d4d
fix: [CODE-5466]: sandbox user content responses to stop stored XSS via SVG ( #5303 )
...
* e35d6b chore: [CODE-5466]: wrap long test fixture line to satisfy lll
* 1914c6 fix: [CODE-5466]: sandbox user content responses to stop stored XSS via SVG
2026-08-13 17:58:35 +00:00
Darko Draskovic
bd1b915c50
fix: [CODE-5405]: Notify codeowner usergroups on PR state change ( #5275 )
...
* f83eeb Add unit tests
* abe16b Merge remote-tracking branch 'origin' into dd/notify-codeowner-usergroups
* e334f7 Notify codeowner usergroups on PR state change
2026-08-13 16:32:13 +00:00
Abhinav Singh
4d6ccfb8e9
feat: [CODE-6116]: make deleted-repo cleanup job schedule and duration configurable ( #5302 )
...
* 63bbc0 Edit charts/gitness/values.yaml
* 7adaff feat: [CODE-6116]: make deleted-repo cleanup job schedule and duration configurable
2026-08-12 21:52:22 +00:00
Atefeh Mohseni Ejiyeh
2409992fa0
feat: [CODE-6109] allow externally owned required status checks ( #5300 )
2026-08-12 16:54:04 +00:00
Enver Biševac
24d9f3ba83
fix: [seceng-10474]: fix git-archive argument injection ( #5298 )
...
* c3a7bd fix git-archive argument injection
2026-08-10 17:38:50 +00:00
Marko Gaćeša
8122676af4
feat: [CODE-6098]: allow merge API dry run rules API calls for PRs in MQ ( #5297 )
...
* 229ff1 allow merge API dry run rules for PRs in MQ
2026-08-10 15:31:55 +00:00
Marko Gaćeša
6dc2aa7a6c
feat: [CODE-6098]: return chosen merge method for a PR in MQ ( #5296 )
...
* e741dc return chosen merge method for a PR in MQ
2026-08-10 13:37:46 +00:00
Marko Gaćeša
dcc846f20b
feat: [CODE-5772]: remove deprecated search api ( #5295 )
...
* 93981b remove deprecated search api
2026-08-10 09:49:45 +00:00
Marko Gaćeša
300117a58c
feat: [CODE-6065]: block merging PRs to a branch with PR in MQ ( #5294 )
...
* ca35d2 block merging PRs to a branch with PR in MQ
2026-08-06 14:56:54 +00:00
Marko Gaćeša
a64800ce6f
feat: [CODE-6081]: include MQ info in list branches API ( #5293 )
...
* 003d14 include MQ info in list branches API
2026-08-06 11:19:40 +00:00
Marko Gaćeša
bfc3e755e8
feat: [CODE-6065]: allow mq bypassing ( #5292 )
...
* 3574ca allow mq bypassing
2026-08-05 15:10:35 +00:00
Darko Draskovic
758df8552a
feat: [CODE-5787]: Update root space id and identifier on repo/space move to another space ( #5284 )
...
* 235b2d Remove redundant comments
* 9789bc Merge remote-tracking branch 'origin' into dd/move-repo-id-identifier
* 1c139f Only propagate root identifier update if root identifier changed
* e024a4 Remove update of root id and root uid from all Update methods in the store layer
* 564ff9 Add space move tests
* 487058 Fix tests
* ec5d0d Set new root space id and identifier on repo/space move to another space
2026-08-03 17:39:34 +00:00