without substantial changes to our git log; to see the highlights of what has
been added to each release, please refer to the [blog](https://blog.gitea.io).
-## [1.6.0-rc2](https://github.com/go-gitea/gitea/releases/tag/v1.6.0-rc2) - 2018-11-04
-* SECURITY
- * Add CSRF checking to reqToken and add reqToken to admin API routes (#5272) (#5250)
-* FEATURE
- * Add comment replies (#5147) (#5104)
-* BUGFIXES
- * Fix wrong api request url for instances running in subfolders (#5261) (#5247)
- * Accept web-command cli flags if web-command is commited (#5245) (#5200)
- * Reduce join star, repo_topic, topic tables on repo search, to resolve extra columns problem on MSSQL (#5136) (#5229)
- * Fix data race on migrate repository (#5224) (#5230)
- * Add secret to all webhook's payload where it has been missing (#5208) (#5199)
- * Fix sqlite and MSSQL lock (#5210) (#5223) (#5214) (#5218) (#5176) (#5179)
- * Fix race on updatesize (#5190) (#5215)
- * Fix filtering issues by tags on main screen issues (#5219) (#3824)
- * Fix SQL quoting (#5137) (#5117)
- * Fix regex to support optional end line of old section in diff hunk (#5097) (#5096)
-
-## [1.6.0-rc1](https://github.com/go-gitea/gitea/releases/tag/v1.6.0-rc1) - 2018-10-17
+## [1.6.0](https://github.com/go-gitea/gitea/releases/tag/v1.6.0) - 2018-11-22
* BREAKING
* Respect email privacy option in user search via API (#4512)
* Simply remove tidb and deps (#3993)
* Swagger.v1.json template (#3572)
+* SECURITY
+ * Add CSRF checking to reqToken and add reqToken to admin API routes (#5272) (#5250)
+ * Improve URL validation for external wiki and external issues (#4710)
+ * Make cookies HttpOnly and obey COOKIE_SECURE flag (#4706)
+ * Don't disclose emails of all users when sending out emails (#4664)
+ * Check that repositories can only be migrated to own user or organizations (#4366)
* FEATURE
+ * Add comment replies (#5147) (#5104)
* Pull request review/approval and comment on code (#3748)
* Added dependencies for issues (#2196) (#2531)
* Add the ability to have built in themes in Gitea and provide dark theme arc-green (#4198)
* Add push webhook support for mirrored repositories (#4127)
* Add csv file render support defaultly (#4105)
* Add Recaptcha functionality to Gitea (#4044)
+* ENHANCEMENT
+ * Fix milestones sorted wrongly (#4987)
+ * Allow api to create tags for releases if they don't exist (#4890)
+ * Fix #4877 to follow the OpenID Connect Audiences spec (#4878)
+ * Enforce token on api routes [fixed critical security issue #4357] (#4840)
+ * Update legacy branch and tag URLs in dashboard to new format (#4812)
+ * Slack webhook channel name cannot be empty or just contain an hashtag (#4786)
+ * Add whitespace handling to PR-comparsion (#4683)
+ * Make reverse proxy auth optional (#4643)
+ * MySQL TLS (#4642)
+ * Make sure to set PR split view when creating/previewing a pull request (#4617)
+ * Log user in after a successful sign up (#4615)
+ * Fix typo IsPullReuqestBroken -> IsPullRequestBroken (#4578)
+ * Allow admin toggle forcing a password change for newly created users (#4563)
+ * Update jQuery to v1.12.4 (#4551)
+ * Env var GITEA_PUSHER_EMAIL (#4516)
+ * Feat(repo): support search repository by topic name (#4505)
+ * Small improvements to dependency UI (#4503)
+ * Make max commits in graph configurable (#4498)
+ * Add valid for lfs oid (#4461)
+ * Add shortcut to save wiki page (#4452)
+ * Allow administrator to create repository for any organization (#4368)
+ * Fix repository last updated time update when delete a user who watched the repo (#4363)
+ * Switch plaintext scratch tokens to use hash instead (#4331)
+ * Increase default TOTP secret size to 320 bits (#4287)
+ * Keep preseeded database password (#4284)
+ * Implemented hover text showing user FullName (#4261)
+ * Add ability to delete a token (#4235)
+ * Fix typos in i18n variable names. (#4080)
+ * Api: repos/search: add parameters to control the sort order (#3964)
+ * Add missing path in the Docker app.ini template (#2181)
+ * Add file name and branch to page title (#4902)
+ * Offline use of google fonts (#4872)
+ * Add missing History link to directory listings v2 (#4829)
+ * Locale for Edit and Remove due date issue (#4802)
+ * Disable 'May Import Local Repository' when is disabled by setting (Is… (#4780)
+ * API /admin/users/{username} missing parameter (#4775)
+ * Display error when adding a user to a team twice (#4746)
+ * Remove UsePrivilegeSeparation from the Docker sshd_config, see #2876 (#4722)
+ * Focus title input when clicking helper link (#4696)
+ * Add vendor to user reserved words and format words list according alphabet (#4685)
+ * Add gitea/issues link to 500 page (#4654)
+ * Hide home button when landing page is not set to home (#4651)
+ * Remove link to GitHub issues in 404 template (#4639)
+ * Cmd/serve: pprof cpu and memory profile dumps to disk (#4560)
+ * Add flash message after an account has been successfully activated (#4510)
+ * Prevent html entity escaping on delete branch (#4471)
+ * Locale for button Edit on protected branch (#4442)
+ * Update notification icon (#4343)
+ * Added front-end topics validation (#4316)
+ * Don't display buttons if there are no system notifications (#4280)
+ * Issue due date api (#3890)
* BUGFIXES
+ * dont' send assign webhooks when creating issue (#5365)
+ * Fix create team, update team missing units (#5188)
+ * Fix file edit change preview functionality (#5300)
+ * *ix bug when users have serval teams with different units on different repositories (#5307)
+ * Fix U2F if gitea is configured in subpath (#5302)
+ * Fix markdown image with link (#4675)
+ * Remove maxlines option for file logger (#5282)
+ * Fix wrong api request url for instances running in subfolders (#5261) (#5247)
+ * Accept web-command cli flags if web-command is commited (#5245) (#5200)
+ * Reduce join star, repo_topic, topic tables on repo search, to resolve extra columns problem on MSSQL (#5136) (#5229)
+ * Fix data race on migrate repository (#5224) (#5230)
+ * Add secret to all webhook's payload where it has been missing (#5208) (#5199)
+ * Fix sqlite and MSSQL lock (#5210) (#5223) (#5214) (#5218) (#5176) (#5179)
+ * Fix race on updatesize (#5190) (#5215)
+ * Fix filtering issues by tags on main screen issues (#5219) (#3824)
+ * Fix SQL quoting (#5137) (#5117)
+ * Fix regex to support optional end line of old section in diff hunk (#5097) (#5096)
* Fix release creation via API (#5076)
* Remove links from topics in edit mode (#5026)
* Fix missing AppSubUrl in few more templates (fixup) (#5021)
* Fix(topics): don't redirect to explore page. (#4938)
* Fix bug forget to remove Stopwatch when remove repository (#4928)
* Fix bug when repo remained bare if multiple branches pushed in single push (#4923)
- * Fix: Let's Encrypt configuration settings (#4911)
* Fix: Crippled diff (#4726) (#4900)
* Fix trimming of markup section names (#4863)
* Issues api allow pulls and fix #4832 (#4852)
* Dep upgrade mysql lib (#4161)
* Fix some issues with special chars in branch names (#3767)
* Responsive design fixes (#4508)
-* ENHANCEMENT
- * Fix milestones sorted wrongly (#4987)
- * Allow api to create tags for releases if they don't exist (#4890)
- * Fix #4877 to follow the OpenID Connect Audiences spec (#4878)
- * Enforce token on api routes [fixed critical security issue #4357] (#4840)
- * Update legacy branch and tag URLs in dashboard to new format (#4812)
- * Slack webhook channel name cannot be empty or just contain an hashtag (#4786)
- * Add whitespace handling to PR-comparsion (#4683)
- * Make reverse proxy auth optional (#4643)
- * MySQL TLS (#4642)
- * Make sure to set PR split view when creating/previewing a pull request (#4617)
- * Log user in after a successful sign up (#4615)
- * Fix typo IsPullReuqestBroken -> IsPullRequestBroken (#4578)
- * Allow admin toggle forcing a password change for newly created users (#4563)
- * Update jQuery to v1.12.4 (#4551)
- * Env var GITEA_PUSHER_EMAIL (#4516)
- * Feat(repo): support search repository by topic name (#4505)
- * Small improvements to dependency UI (#4503)
- * Make max commits in graph configurable (#4498)
- * Add valid for lfs oid (#4461)
- * Add shortcut to save wiki page (#4452)
- * Allow administrator to create repository for any organization (#4368)
- * Fix repository last updated time update when delete a user who watched the repo (#4363)
- * Switch plaintext scratch tokens to use hash instead (#4331)
- * Increase default TOTP secret size to 320 bits (#4287)
- * Keep preseeded database password (#4284)
- * Implemented hover text showing user FullName (#4261)
- * Add ability to delete a token (#4235)
- * Fix typos in i18n variable names. (#4080)
- * Api: repos/search: add parameters to control the sort order (#3964)
- * Add missing path in the Docker app.ini template (#2181)
- * Add file name and branch to page title (#4902)
- * Offline use of google fonts (#4872)
- * Add missing History link to directory listings v2 (#4829)
- * Locale for Edit and Remove due date issue (#4802)
- * Disable 'May Import Local Repository' when is disabled by setting (Is… (#4780)
- * API /admin/users/{username} missing parameter (#4775)
- * Display error when adding a user to a team twice (#4746)
- * Remove UsePrivilegeSeparation from the Docker sshd_config, see #2876 (#4722)
- * Focus title input when clicking helper link (#4696)
- * Add vendor to user reserved words and format words list according alphabet (#4685)
- * Add gitea/issues link to 500 page (#4654)
- * Hide home button when landing page is not set to home (#4651)
- * Remove link to GitHub issues in 404 template (#4639)
- * Cmd/serve: pprof cpu and memory profile dumps to disk (#4560)
- * Add flash message after an account has been successfully activated (#4510)
- * Prevent html entity escaping on delete branch (#4471)
- * Locale for button Edit on protected branch (#4442)
- * Update notification icon (#4343)
- * Added front-end topics validation (#4316)
- * Don't display buttons if there are no system notifications (#4280)
- * Issue due date api (#3890)
-* SECURITY
- * Improve URL validation for external wiki and external issues (#4710)
- * Make cookies HttpOnly and obey COOKIE_SECURE flag (#4706)
- * Don't disclose emails of all users when sending out emails (#4664)
- * Check that repositories can only be migrated to own user or organizations (#4366)
* TRANSLATION
* Fix punctuation in English translation (#4958)
* Fix translation (#4355)