You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

go.mod 13KB

Move macaron to chi (#14293) Use [chi](https://github.com/go-chi/chi) instead of the forked [macaron](https://gitea.com/macaron/macaron). Since macaron and chi have conflicts with session share, this big PR becomes a have-to thing. According my previous idea, we can replace macaron step by step but I'm wrong. :( Below is a list of big changes on this PR. - [x] Define `context.ResponseWriter` interface with an implementation `context.Response`. - [x] Use chi instead of macaron, and also a customize `Route` to wrap chi so that the router usage is similar as before. - [x] Create different routers for `web`, `api`, `internal` and `install` so that the codes will be more clear and no magic . - [x] Use https://github.com/unrolled/render instead of macaron's internal render - [x] Use https://github.com/NYTimes/gziphandler instead of https://gitea.com/macaron/gzip - [x] Use https://gitea.com/go-chi/session which is a modified version of https://gitea.com/macaron/session and removed `nodb` support since it will not be maintained. **BREAK** - [x] Use https://gitea.com/go-chi/captcha which is a modified version of https://gitea.com/macaron/captcha - [x] Use https://gitea.com/go-chi/cache which is a modified version of https://gitea.com/macaron/cache - [x] Use https://gitea.com/go-chi/binding which is a modified version of https://gitea.com/macaron/binding - [x] Use https://github.com/go-chi/cors instead of https://gitea.com/macaron/cors - [x] Dropped https://gitea.com/macaron/i18n and make a new one in `code.gitea.io/gitea/modules/translation` - [x] Move validation form structs from `code.gitea.io/gitea/modules/auth` to `code.gitea.io/gitea/modules/forms` to avoid dependency cycle. - [x] Removed macaron log service because it's not need any more. **BREAK** - [x] All form structs have to be get by `web.GetForm(ctx)` in the route function but not as a function parameter on routes definition. - [x] Move Git HTTP protocol implementation to use routers directly. - [x] Fix the problem that chi routes don't support trailing slash but macaron did. - [x] `/api/v1/swagger` now will be redirect to `/api/swagger` but not render directly so that `APIContext` will not create a html render. Notices: - Chi router don't support request with trailing slash - Integration test `TestUserHeatmap` maybe mysql version related. It's failed on my macOS(mysql 5.7.29 installed via brew) but succeed on CI. Co-authored-by: 6543 <6543@obermui.de>
3 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
User keypairs and HTTP signatures for ActivityPub federation using go-ap (#19133) * go.mod: add go-fed/{httpsig,activity/pub,activity/streams} dependency go get github.com/go-fed/activity/streams@master go get github.com/go-fed/activity/pub@master go get github.com/go-fed/httpsig@master * activitypub: implement /api/v1/activitypub/user/{username} (#14186) Return informations regarding a Person (as defined in ActivityStreams https://www.w3.org/TR/activitystreams-vocabulary/#dfn-person). Refs: https://github.com/go-gitea/gitea/issues/14186 Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: add the public key to Person (#14186) Refs: https://github.com/go-gitea/gitea/issues/14186 Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: go-fed conformant Clock instance Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: signing http client Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: implement the ReqSignature middleware Signed-off-by: Loïc Dachary <loic@dachary.org> * activitypub: hack_16834 Signed-off-by: Loïc Dachary <loic@dachary.org> * Fix CI checks-backend errors with go mod tidy Signed-off-by: Anthony Wang <ta180m@pm.me> * Change 2021 to 2022, properly format package imports Signed-off-by: Anthony Wang <ta180m@pm.me> * Run make fmt and make generate-swagger Signed-off-by: Anthony Wang <ta180m@pm.me> * Use Gitea JSON library, add assert for pkp Signed-off-by: Anthony Wang <ta180m@pm.me> * Run make fmt again, fix err var redeclaration Signed-off-by: Anthony Wang <ta180m@pm.me> * Remove LogSQL from ActivityPub person test Signed-off-by: Anthony Wang <ta180m@pm.me> * Assert if json.Unmarshal succeeds Signed-off-by: Anthony Wang <ta180m@pm.me> * Cleanup, handle invalid usernames for ActivityPub person GET request Signed-off-by: Anthony Wang <ta180m@pm.me> * Rename hack_16834 to user_settings Signed-off-by: Anthony Wang <ta180m@pm.me> * Use the httplib module instead of http for GET requests * Clean up whitespace with make fmt * Use time.RFC1123 and make the http.Client proxy-aware * Check if digest algo is supported in setting module * Clean up some variable declarations * Remove unneeded copy * Use system timezone instead of setting.DefaultUILocation * Use named constant for httpsigExpirationTime * Make pubKey IRI #main-key instead of /#main-key * Move /#main-key to #main-key in tests * Implemented Webfinger endpoint. * Add visible check. * Add user profile as alias. * Add actor IRI and remote interaction URL to WebFinger response * fmt * Fix lint errors * Use go-ap instead of go-fed * Run go mod tidy to fix missing modules in go.mod and go.sum * make fmt * Convert remaining code to go-ap * Clean up go.sum * Fix JSON unmarshall error * Fix CI errors by adding @context to Person() and making sure types match * Correctly decode JSON in api_activitypub_person_test.go * Force CI rerun * Fix TestActivityPubPersonInbox segfault * Fix lint error * Use @mariusor's suggestions for idiomatic go-ap usage * Correctly add inbox/outbox IRIs to person * Code cleanup * Remove another LogSQL from ActivityPub person test * Move httpsig algos slice to an init() function * Add actor IRI and remote interaction URL to WebFinger response * Update TestWebFinger to check for ActivityPub IRI in aliases * make fmt * Force CI rerun * WebFinger: Add CORS header and fix Href -> Template for remote interactions The CORS header is needed due to https://datatracker.ietf.org/doc/html/rfc7033#section-5 and fixes some Peertube <-> Gitea federation issues * make lint-backend * Make sure Person endpoint has Content-Type application/activity+json and includes PreferredUsername, URL, and Icon Setting the correct Content-Type is essential for federating with Mastodon * Use UTC instead of GMT * Rename pkey to pubKey * Make sure HTTP request Date in GMT * make fmt * dont drop err * Make sure API responses always refer to username in original case Copied from what I wrote on #19133 discussion: Handling username case is a very tricky issue and I've already encountered a Mastodon <-> Gitea federation bug due to Gitea considering Ta180m and ta180m to be the same user while Mastodon thinks they are two different users. I think the best way forward is for Gitea to only use the original case version of the username for federation so other AP software don't get confused. * Move httpsig algs constant slice to modules/setting/federation.go * Add new federation settings to app.example.ini and config-cheat-sheet * Return if marshalling error * Make sure Person IRIs are generated correctly This commit ensures that if the setting.AppURL is something like "http://127.0.0.1:42567" (like in the integration tests), a trailing slash will be added after that URL. * If httpsig verification fails, fix Host header and try again This fixes a very rare bug when Gitea and another AP server (confirmed to happen with Mastodon) are running on the same machine, Gitea fails to verify incoming HTTP signatures. This is because the other AP server creates the sig with the public Gitea domain as the Host. However, when Gitea receives the request, the Host header is instead localhost, so the signature verification fails. Manually changing the host header to the correct value and trying the veification again fixes the bug. * Revert "If httpsig verification fails, fix Host header and try again" This reverts commit f53e46c721a037c55facb9200106a6b491bf834c. The bug was actually caused by nginx messing up the Host header when reverse-proxying since I didn't have the line `proxy_set_header Host $host;` in my nginx config for Gitea. * Go back to using ap.IRI to generate inbox and outbox IRIs * use const for key values * Update routers/web/webfinger.go * Use ctx.JSON in Person response to make code cleaner * Revert "Use ctx.JSON in Person response to make code cleaner" This doesn't work because the ctx.JSON() function already sends the response out and it's too late to edit the headers. This reverts commit 95aad988975be3393c76094864ed6ba962157e0c. * Use activitypub.ActivityStreamsContentType for Person response Content Type * Limit maximum ActivityPub request and response sizes to a configurable setting * Move setting key constants to models/user/setting_keys.go * Fix failing ActivityPubPerson integration test by checking the correct field for username * Add a warning about changing settings that can break federation * Add better comments * Don't multiply Federation.MaxSize by 1<<20 twice * Add more better comments * Fix failing ActivityPubMissingPerson test We now use ctx.ContextUser so the message printed out when a user does not exist is slightly different * make generate-swagger For some reason I didn't realize that /templates/swagger/v1_json.tmpl was machine-generated by make generate-swagger... I've been editing it by hand for three months! 🤦 * Move getting the RFC 2616 time to a separate function * More code cleanup * Update go-ap to fix empty liked collection and removed unneeded HTTP headers * go mod tidy * Add ed25519 to httpsig algorithms * Use go-ap/jsonld to add @context and marshal JSON * Change Gitea user agent from the default to Gitea/Version * Use ctx.ServerError and remove all remote interaction code from webfinger.go
1 year ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
bump go deps (#19021) * update gitea.com/go-chi/binding * update gitea.com/go-chi/cache * update github.com/42wim/sshsig * update github.com/PuerkitoBio/goquery * update github.com/blevesearch/bleve/v2 * update github.com/caddyserver/certmagic * update github.com/denisenkom/go-mssqldb * update github.com/duo-labs/webauthn * update github.com/dustin/go-humanize * update github.com/editorconfig/editorconfig-core-go/v2 * update github.com/ethantkoenig/rupture * update github.com/go-chi/chi/v5 * update github.com/go-git/go-git/v5 * update github.com/go-ldap/ldap/v3 * update github.com/go-redis/redis/v8 * update github.com/go-swagger/go-swagger * update github.com/gogs/chardet * update github.com/golang-jwt/jwt/v4 * update github.com/hashicorp/go-version * update github.com/jaytaylor/html2text * update github.com/klauspost/compress * update github.com/lib/pq * update github.com/markbates/goth * update github.com/mattn/go-sqlite3 * update github.com/mholt/archiver/v3 * update github.com/microcosm-cc/bluemonday * update github.com/minio/minio-go/v7 * update github.com/msteinert/pam * update github.com/niklasfasching/go-org * update github.com/olivere/elastic/v7 * update github.com/prometheus/client_golang * update github.com/quasoft/websspi * update github.com/stretchr/testify * update github.com/unknwon/i18n * update github.com/unrolled/render * update github.com/xanzy/go-gitlab * update github.com/yuin/goldmark * update github.com/yuin/goldmark-highlighting * update github.com/yuin/goldmark-meta * post make vendor Signed-off-by: Andrew Thornton <art27@cantab.net> * add make vendor back into update_dependencies.sh Signed-off-by: Andrew Thornton <art27@cantab.net> * Update update_dependencies.sh * Update contrib/update_dependencies.sh Co-authored-by: zeripath <art27@cantab.net> * update mvdan.cc/xurls/v2 Co-authored-by: Andrew Thornton <art27@cantab.net> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2 years ago
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284
  1. module code.gitea.io/gitea
  2. go 1.18
  3. require (
  4. code.gitea.io/gitea-vet v0.2.2
  5. code.gitea.io/sdk/gitea v0.15.1
  6. codeberg.org/gusted/mcaptcha v0.0.0-20220723083913-4f3072e1d570
  7. gitea.com/go-chi/binding v0.0.0-20221013104517-b29891619681
  8. gitea.com/go-chi/cache v0.2.0
  9. gitea.com/go-chi/captcha v0.0.0-20211013065431-70641c1a35d5
  10. gitea.com/go-chi/session v0.0.0-20221220005550-e056dc379164
  11. gitea.com/lunny/dingtalk_webhook v0.0.0-20171025031554-e3534c89ef96
  12. gitea.com/lunny/levelqueue v0.4.2-0.20220729054728-f020868cc2f7
  13. github.com/42wim/sshsig v0.0.0-20211121163825-841cf5bbc121
  14. github.com/NYTimes/gziphandler v1.1.1
  15. github.com/PuerkitoBio/goquery v1.8.0
  16. github.com/alecthomas/chroma/v2 v2.4.0
  17. github.com/blevesearch/bleve/v2 v2.3.6
  18. github.com/buildkite/terminal-to-html/v3 v3.7.0
  19. github.com/caddyserver/certmagic v0.17.2
  20. github.com/chi-middleware/proxy v1.1.1
  21. github.com/denisenkom/go-mssqldb v0.12.2
  22. github.com/dimiro1/reply v0.0.0-20200315094148-d0136a4c9e21
  23. github.com/djherbis/buffer v1.2.0
  24. github.com/djherbis/nio/v3 v3.0.1
  25. github.com/dustin/go-humanize v1.0.0
  26. github.com/editorconfig/editorconfig-core-go/v2 v2.5.1
  27. github.com/emersion/go-imap v1.2.1
  28. github.com/emirpasic/gods v1.18.1
  29. github.com/ethantkoenig/rupture v1.0.1
  30. github.com/felixge/fgprof v0.9.3
  31. github.com/fsnotify/fsnotify v1.6.0
  32. github.com/gliderlabs/ssh v0.3.5
  33. github.com/go-ap/activitypub v0.0.0-20221209114049-1ceafda50f9f
  34. github.com/go-ap/jsonld v0.0.0-20221030091449-f2a191312c73
  35. github.com/go-chi/chi/v5 v5.0.8
  36. github.com/go-chi/cors v1.2.1
  37. github.com/go-enry/go-enry/v2 v2.8.3
  38. github.com/go-fed/httpsig v1.1.1-0.20201223112313-55836744818e
  39. github.com/go-git/go-billy/v5 v5.4.0
  40. github.com/go-git/go-git/v5 v5.5.2
  41. github.com/go-ldap/ldap/v3 v3.4.4
  42. github.com/go-redis/redis/v8 v8.11.5
  43. github.com/go-sql-driver/mysql v1.7.0
  44. github.com/go-swagger/go-swagger v0.30.3
  45. github.com/go-testfixtures/testfixtures/v3 v3.8.1
  46. github.com/go-webauthn/webauthn v0.6.0
  47. github.com/gobwas/glob v0.2.3
  48. github.com/gogs/chardet v0.0.0-20211120154057-b7413eaefb8f
  49. github.com/gogs/cron v0.0.0-20171120032916-9f6c956d3e14
  50. github.com/gogs/go-gogs-client v0.0.0-20210131175652-1d7215cd8d85
  51. github.com/golang-jwt/jwt/v4 v4.4.3
  52. github.com/google/go-github/v45 v45.2.0
  53. github.com/google/pprof v0.0.0-20230111200839-76d1ae5aea2b
  54. github.com/google/uuid v1.3.0
  55. github.com/gorilla/feeds v1.1.1
  56. github.com/gorilla/sessions v1.2.1
  57. github.com/hashicorp/go-version v1.6.0
  58. github.com/hashicorp/golang-lru v0.6.0
  59. github.com/huandu/xstrings v1.4.0
  60. github.com/jaytaylor/html2text v0.0.0-20211105163654-bc68cce691ba
  61. github.com/jhillyerd/enmime v0.10.1
  62. github.com/json-iterator/go v1.1.12
  63. github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
  64. github.com/keybase/go-crypto v0.0.0-20200123153347-de78d2cb44f4
  65. github.com/klauspost/compress v1.15.14
  66. github.com/klauspost/cpuid/v2 v2.2.3
  67. github.com/lib/pq v1.10.7
  68. github.com/markbates/goth v1.76.0
  69. github.com/mattn/go-isatty v0.0.17
  70. github.com/mattn/go-sqlite3 v1.14.16
  71. github.com/mholt/archiver/v3 v3.5.1
  72. github.com/microcosm-cc/bluemonday v1.0.21
  73. github.com/minio/minio-go/v7 v7.0.46
  74. github.com/msteinert/pam v1.1.0
  75. github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646
  76. github.com/niklasfasching/go-org v1.6.5
  77. github.com/oliamb/cutter v0.2.2
  78. github.com/olivere/elastic/v7 v7.0.32
  79. github.com/pkg/errors v0.9.1
  80. github.com/pquerna/otp v1.4.0
  81. github.com/prometheus/client_golang v1.14.0
  82. github.com/quasoft/websspi v1.1.2
  83. github.com/santhosh-tekuri/jsonschema/v5 v5.1.1
  84. github.com/sergi/go-diff v1.2.0
  85. github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546
  86. github.com/stretchr/testify v1.8.1
  87. github.com/syndtr/goleveldb v1.0.0
  88. github.com/tstranex/u2f v1.0.0
  89. github.com/unrolled/render v1.5.0
  90. github.com/urfave/cli v1.22.10
  91. github.com/xanzy/go-gitlab v0.78.0
  92. github.com/xeipuuv/gojsonschema v1.2.0
  93. github.com/yohcop/openid-go v1.0.0
  94. github.com/yuin/goldmark v1.5.3
  95. github.com/yuin/goldmark-highlighting/v2 v2.0.0-20220924101305-151362477c87
  96. github.com/yuin/goldmark-meta v1.1.0
  97. go.jolheiser.com/hcaptcha v0.0.4
  98. go.jolheiser.com/pwn v0.0.3
  99. golang.org/x/crypto v0.4.0
  100. golang.org/x/net v0.4.0
  101. golang.org/x/oauth2 v0.3.0
  102. golang.org/x/sys v0.3.0
  103. golang.org/x/text v0.5.0
  104. golang.org/x/tools v0.1.12
  105. gopkg.in/gomail.v2 v2.0.0-20160411212932-81ebce5c23df
  106. gopkg.in/ini.v1 v1.67.0
  107. gopkg.in/yaml.v3 v3.0.1
  108. mvdan.cc/xurls/v2 v2.4.0
  109. strk.kbt.io/projects/go/libravatar v0.0.0-20191008002943-06d1c002b251
  110. xorm.io/builder v0.3.12
  111. xorm.io/xorm v1.3.3-0.20221209153726-f1bfc5ce9830
  112. )
  113. require (
  114. cloud.google.com/go/compute v1.7.0 // indirect
  115. git.sr.ht/~mariusor/go-xsd-duration v0.0.0-20220703122237-02e73435a078 // indirect
  116. github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
  117. github.com/Masterminds/goutils v1.1.1 // indirect
  118. github.com/Masterminds/semver/v3 v3.1.1 // indirect
  119. github.com/Masterminds/sprig/v3 v3.2.2 // indirect
  120. github.com/Microsoft/go-winio v0.6.0 // indirect
  121. github.com/ProtonMail/go-crypto v0.0.0-20230109192245-7efeeb08f296 // indirect
  122. github.com/RoaringBitmap/roaring v1.2.1 // indirect
  123. github.com/acomagu/bufpipe v1.0.3 // indirect
  124. github.com/andybalholm/brotli v1.0.4 // indirect
  125. github.com/andybalholm/cascadia v1.3.1 // indirect
  126. github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be // indirect
  127. github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
  128. github.com/aymerick/douceur v0.2.0 // indirect
  129. github.com/beorn7/perks v1.0.1 // indirect
  130. github.com/bits-and-blooms/bitset v1.3.3 // indirect
  131. github.com/blevesearch/bleve_index_api v1.0.5 // indirect
  132. github.com/blevesearch/geo v0.1.16 // indirect
  133. github.com/blevesearch/go-porterstemmer v1.0.3 // indirect
  134. github.com/blevesearch/gtreap v0.1.1 // indirect
  135. github.com/blevesearch/mmap-go v1.0.4 // indirect
  136. github.com/blevesearch/scorch_segment_api/v2 v2.1.4 // indirect
  137. github.com/blevesearch/segment v0.9.1 // indirect
  138. github.com/blevesearch/snowballstem v0.9.0 // indirect
  139. github.com/blevesearch/upsidedown_store_api v1.0.2 // indirect
  140. github.com/blevesearch/vellum v1.0.9 // indirect
  141. github.com/blevesearch/zapx/v11 v11.3.7 // indirect
  142. github.com/blevesearch/zapx/v12 v12.3.7 // indirect
  143. github.com/blevesearch/zapx/v13 v13.3.7 // indirect
  144. github.com/blevesearch/zapx/v14 v14.3.7 // indirect
  145. github.com/blevesearch/zapx/v15 v15.3.8 // indirect
  146. github.com/boombuler/barcode v1.0.1 // indirect
  147. github.com/bradfitz/gomemcache v0.0.0-20190913173617-a41fca850d0b // indirect
  148. github.com/cention-sany/utf7 v0.0.0-20170124080048-26cad61bd60a // indirect
  149. github.com/cespare/xxhash/v2 v2.1.2 // indirect
  150. github.com/cloudflare/circl v1.2.0 // indirect
  151. github.com/couchbase/go-couchbase v0.0.0-20210224140812-5740cd35f448 // indirect
  152. github.com/couchbase/gomemcached v0.1.2 // indirect
  153. github.com/couchbase/goutils v0.0.0-20210118111533-e33d3ffb5401 // indirect
  154. github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
  155. github.com/davecgh/go-spew v1.1.1 // indirect
  156. github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
  157. github.com/dlclark/regexp2 v1.7.0 // indirect
  158. github.com/dsnet/compress v0.0.2-0.20210315054119-f66993602bf5 // indirect
  159. github.com/emersion/go-sasl v0.0.0-20200509203442-7bfe0ed36a21 // indirect
  160. github.com/felixge/httpsnoop v1.0.3 // indirect
  161. github.com/fxamacker/cbor/v2 v2.4.0 // indirect
  162. github.com/go-ap/errors v0.0.0-20221205040414-01c1adfc98ea // indirect
  163. github.com/go-asn1-ber/asn1-ber v1.5.4 // indirect
  164. github.com/go-enry/go-oniguruma v1.2.1 // indirect
  165. github.com/go-git/gcfg v1.5.0 // indirect
  166. github.com/go-openapi/analysis v0.21.4 // indirect
  167. github.com/go-openapi/errors v0.20.3 // indirect
  168. github.com/go-openapi/inflect v0.19.0 // indirect
  169. github.com/go-openapi/jsonpointer v0.19.5 // indirect
  170. github.com/go-openapi/jsonreference v0.20.0 // indirect
  171. github.com/go-openapi/loads v0.21.2 // indirect
  172. github.com/go-openapi/runtime v0.24.1 // indirect
  173. github.com/go-openapi/spec v0.20.7 // indirect
  174. github.com/go-openapi/strfmt v0.21.3 // indirect
  175. github.com/go-openapi/swag v0.22.3 // indirect
  176. github.com/go-openapi/validate v0.22.0 // indirect
  177. github.com/go-webauthn/revoke v0.1.6 // indirect
  178. github.com/goccy/go-json v0.10.0 // indirect
  179. github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9 // indirect
  180. github.com/golang-sql/sqlexp v0.1.0 // indirect
  181. github.com/golang/geo v0.0.0-20210211234256-740aa86cb551 // indirect
  182. github.com/golang/protobuf v1.5.2 // indirect
  183. github.com/golang/snappy v0.0.4 // indirect
  184. github.com/google/go-querystring v1.1.0 // indirect
  185. github.com/google/go-tpm v0.3.3 // indirect
  186. github.com/gorilla/css v1.0.0 // indirect
  187. github.com/gorilla/handlers v1.5.1 // indirect
  188. github.com/gorilla/mux v1.8.0 // indirect
  189. github.com/gorilla/securecookie v1.1.1 // indirect
  190. github.com/hashicorp/errwrap v1.0.0 // indirect
  191. github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
  192. github.com/hashicorp/go-multierror v1.1.1 // indirect
  193. github.com/hashicorp/go-retryablehttp v0.7.2 // indirect
  194. github.com/hashicorp/hcl v1.0.0 // indirect
  195. github.com/imdario/mergo v0.3.13 // indirect
  196. github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
  197. github.com/jessevdk/go-flags v1.5.0 // indirect
  198. github.com/josharian/intern v1.0.0 // indirect
  199. github.com/kevinburke/ssh_config v1.2.0 // indirect
  200. github.com/klauspost/pgzip v1.2.5 // indirect
  201. github.com/kr/pretty v0.3.0 // indirect
  202. github.com/kr/text v0.2.0 // indirect
  203. github.com/libdns/libdns v0.2.1 // indirect
  204. github.com/magiconair/properties v1.8.6 // indirect
  205. github.com/mailru/easyjson v0.7.7 // indirect
  206. github.com/markbates/going v1.0.0 // indirect
  207. github.com/mattn/go-runewidth v0.0.14 // indirect
  208. github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
  209. github.com/mholt/acmez v1.0.4 // indirect
  210. github.com/miekg/dns v1.1.50 // indirect
  211. github.com/minio/md5-simd v1.1.2 // indirect
  212. github.com/minio/sha256-simd v1.0.0 // indirect
  213. github.com/mitchellh/copystructure v1.2.0 // indirect
  214. github.com/mitchellh/mapstructure v1.5.0 // indirect
  215. github.com/mitchellh/reflectwalk v1.0.2 // indirect
  216. github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
  217. github.com/modern-go/reflect2 v1.0.2 // indirect
  218. github.com/mrjones/oauth v0.0.0-20190623134757-126b35219450 // indirect
  219. github.com/mschoch/smat v0.2.0 // indirect
  220. github.com/nwaples/rardecode v1.1.3 // indirect
  221. github.com/oklog/ulid v1.3.1 // indirect
  222. github.com/olekukonko/tablewriter v0.0.5 // indirect
  223. github.com/pelletier/go-toml v1.9.5 // indirect
  224. github.com/pelletier/go-toml/v2 v2.0.1 // indirect
  225. github.com/pierrec/lz4/v4 v4.1.17 // indirect
  226. github.com/pjbgf/sha1cd v0.2.3 // indirect
  227. github.com/pmezard/go-difflib v1.0.0 // indirect
  228. github.com/prometheus/client_model v0.3.0 // indirect
  229. github.com/prometheus/common v0.37.0 // indirect
  230. github.com/prometheus/procfs v0.8.0 // indirect
  231. github.com/rivo/uniseg v0.4.3 // indirect
  232. github.com/rogpeppe/go-internal v1.9.0 // indirect
  233. github.com/rs/xid v1.4.0 // indirect
  234. github.com/russross/blackfriday/v2 v2.1.0 // indirect
  235. github.com/shopspring/decimal v1.2.0 // indirect
  236. github.com/shurcooL/httpfs v0.0.0-20190707220628-8d4bc4ba7749 // indirect
  237. github.com/sirupsen/logrus v1.9.0 // indirect
  238. github.com/skeema/knownhosts v1.1.0 // indirect
  239. github.com/spf13/afero v1.8.2 // indirect
  240. github.com/spf13/cast v1.5.0 // indirect
  241. github.com/spf13/jwalterweatherman v1.1.0 // indirect
  242. github.com/spf13/pflag v1.0.5 // indirect
  243. github.com/spf13/viper v1.12.0 // indirect
  244. github.com/ssor/bom v0.0.0-20170718123548-6386211fdfcf // indirect
  245. github.com/subosito/gotenv v1.3.0 // indirect
  246. github.com/toqueteos/webbrowser v1.2.0 // indirect
  247. github.com/ulikunitz/xz v0.5.11 // indirect
  248. github.com/unknwon/com v1.0.1 // indirect
  249. github.com/valyala/fastjson v1.6.4 // indirect
  250. github.com/x448/float16 v0.8.4 // indirect
  251. github.com/xanzy/ssh-agent v0.3.3 // indirect
  252. github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
  253. github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
  254. github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8 // indirect
  255. go.etcd.io/bbolt v1.3.6 // indirect
  256. go.mongodb.org/mongo-driver v1.10.1 // indirect
  257. go.uber.org/atomic v1.10.0 // indirect
  258. go.uber.org/multierr v1.9.0 // indirect
  259. go.uber.org/zap v1.24.0 // indirect
  260. golang.org/x/mod v0.7.0 // indirect
  261. golang.org/x/time v0.3.0 // indirect
  262. google.golang.org/appengine v1.6.7 // indirect
  263. google.golang.org/protobuf v1.28.1 // indirect
  264. gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
  265. gopkg.in/warnings.v0 v0.1.2 // indirect
  266. gopkg.in/yaml.v2 v2.4.0 // indirect
  267. )
  268. replace github.com/hashicorp/go-version => github.com/6543/go-version v1.3.1
  269. replace github.com/shurcooL/vfsgen => github.com/lunny/vfsgen v0.0.0-20220105142115-2c99e1ffdfa0
  270. replace github.com/blevesearch/zapx/v15 v15.3.6 => github.com/zeripath/zapx/v15 v15.3.6-alignment-fix
  271. exclude github.com/gofrs/uuid v3.2.0+incompatible
  272. exclude github.com/gofrs/uuid v4.0.0+incompatible
  273. exclude github.com/goccy/go-json v0.4.11
  274. exclude github.com/satori/go.uuid v1.2.0