Gitea 1.13.7 is released

We are proud to present the release of Gitea version 1.13.7.

We highly encourage users to update to this version for some very important bug-fixes.

We have merged 8 pull requests to release this version.

We would like to give a special thanks to Kevin Chung and a-codingkiwi for both independently reporting a security issue that was patched in this release. Thanks to bluemonday and @zeripath for fixing #15294, Thanks to @zeripath for another one in #15160

You can download one of our pre-built binaries from our downloads page - make sure to select the correct platform! For further details on how to install, follow our installation guide.

We would also like to thank all of our supporters on Open Collective who are helping to sustain us financially.

Have you heard? We now have a swag shop! :shirt: 🍵

Changelog

1.13.7 - 2021-04-09

• SECURITY
  • Update to bluemonday-1.0.6 (#15294) (#15298)
  • Clusterfuzz found another way (#15160) (#15169)
• API
  • Fix wrong user returned in API (#15139) (#15150)
• BUGFIXES
  • Add 'fonts' into 'KnownPublicEntries' (#15188) (#15317)
  • Speed up enry.IsVendor (#15213) (#15246)
  • Response 404 for diff/patch of a commit that not exist (#15221) (#15238)
  • Prevent NPE in CommentMustAsDiff if no hunk header (#15199) (#15201)
• MISC
  • Add size to Save function (#15264) (#15271)