All Versions
662
Latest Version
Avg Release Cycle
13 days
Latest Release
1847 days ago

Changelog History
Page 24

  • v13.0.10 Changes

    July 09, 2020

    🛠 Fixed (1 change)

    • 🛠 Fix gitlab:*:check Rake tasks. !35944

  • v13.0.9 Changes

    July 06, 2020
    • No changes.

  • v13.0.8 Changes

    July 01, 2020

    🔒 Security (18 changes)

    • ⚡️ Update xterm js dependency to latest stable 3.x version.
    • Do not show activity for users with private profiles.
    • 🛠 Fix stored XSS in markdown renderer.
    • ⬆️ Upgrade swagger-ui to solve XSS issues.
    • 🛠 Fix group deploy token API authorizations.
    • 🔀 Check access when sending TODOs related to merge requests.
    • 🔄 Change from hybrid to JSON cookies serializer.
    • Prevent XSS in group name validations.
    • Disable caching for wiki attachments.
    • Disable Github Importer API by settings.
    • 🛠 Fix null byte error in upload path.
    • ⚡️ Update permissions for time tracking endpoints.
    • ➕ Add snippet repository validation after bundle import.
    • ⚡️ Update Kaminari gem.
    • 🛠 Fix note author name rendering.
    • Sanitize bitbucket repo urls to mitigate XSS.
    • Stored XSS on the Error Tracking page.
    • 🛠 Fix security issue when rendering issuable.

  • v13.0.7 Changes

    June 25, 2020

    🛠 Fixed (7 changes)

    • Group authorization refresh to consider shared groups. !31204
    • 🛠 Fix Value Stream Analytics summary when using non-english locale. !33717
    • 🛠 Fix bug with variable substitution in alerts. !33772
    • Fix relative URL root in wiki_base_path. !33841
    • 👷 Adjust wrong column reference for ResetMergeStatus (background job). !33899
    • ⚡️ Updated Auto DevOps with a fix to delete PostgreSQL PVC on environment cleanup. !34657
    • 🌲 Load user before logging git http-requests. !34923

    ➕ Added (2 changes)

    • Provide __range variable for Prometheus queries. !33521
    • Periodically recompute project authorizations. !34071

  • v13.0.6 Changes

    June 10, 2020
    • No changes.

  • v13.0.5

    June 04, 2020

  • v13.0.4 Changes

    June 03, 2020

    🔒 Security (1 change)

    • Prevent fetching repository code with unauthorized ci token.

  • v13.0.3 Changes

    May 29, 2020

    🛠 Fixed (8 changes, 1 of them is from the community)

    • 🛠 Fixed redirection to project snippets. !32530
    • 🛠 Fix Geo replication for design thumbnails. !32703
    • 🛠 Fix 404s downloading build artifacts. !32741
    • 🛠 Fix Auto DevOps manual rollout jobs not being allowed to fail. !32865
    • ⚡️ Update deprecated routes in irker integration. !32923 (Marc Jeanmougin)
    • 🔄 Change format of variables parameter in Prometheus proxy API for metrics dashboard. !33062
    • 🛠 Fix issue and MR API performance regression when Markdown cache is stale. !33235
    • 🛠 Fix close issue when user created the issue. !33294

  • v13.0.2

    May 28, 2020

  • v13.0.1 Changes

    May 27, 2020

    🔒 Security (12 changes)

    • ➕ Add an extra validation to Static Site Editor payload.
    • Hide EKS secret key in admin integrations settings.
    • ➕ Added data integrity check before updating a deploy key.
    • Display only verified emails on notifications and profile page.
    • Require confirmed email address for GitLab OAuth authentication.
    • Kubernetes cluster details page no longer exposes Service Token.
    • 🛠 Fix confirming unverified emails with soft email confirmation flow enabled.
    • Disallow user to control PUT request using mermaid markdown in issue description.
    • Check forked project permissions before allowing fork.
    • 📇 Limit memory footprint of a command that generates ZIP artifacts metadata.
    • 🛠 Fix file enuming using Group Import.
    • Prevent XSS in the monitoring dashboard.