v1.17.0-rc1

* BREAKING
  * Require go1.18 for Gitea 1.17 (go-gitea#19918)
  * Make AppDataPath absolute against the AppWorkPath if it is not (go-gitea#19815)
  * Nuke the incorrect permission report on /api/v1/notifications (go-gitea#19761)
  * Refactor git module, make Gitea use internal git config (go-gitea#19732)
  * Remove `RequireHighlightJS` field, update plantuml example. (go-gitea#19615)
  * Increase minimal required git version to 2.0 (go-gitea#19577)
  * Add a directory prefix `gitea-src-VERSION` to release-tar-file (go-gitea#19396)
  * Use "main" as default branch name (go-gitea#19354)
  * Make cron task no notice on success (go-gitea#19221)
  * Add pam account authorization check (go-gitea#19040)
  * Show messages for users if the ROOT_URL is wrong, show JavaScript errors (go-gitea#18971)
  * Refactor mirror code & fix StartToMirror (go-gitea#18904)
  * Remove deprecated SSH ciphers from default (go-gitea#18697)
  * Add the possibility to allow the user to have a favicon which differs from the main logo (go-gitea#18542)
  * Update reserved usernames list (go-gitea#18438)
  * Support custom ACME provider (go-gitea#18340)
  * Change initial TrustModel to committer (go-gitea#18335)
  * Update HTTP status codes (go-gitea#18063)
  * Upgrade Alpine from 3.13 to 3.15 (go-gitea#18050)
  * Restrict email address validation (go-gitea#17688)
  * Refactor Router Logger (go-gitea#17308)
* SECURITY
  * Remove deprecated SSH ciphers from default (go-gitea#18697)
* FEDERATION
  * Return statistic information for nodeinfo (go-gitea#19561)
  * Add Webfinger endpoint (go-gitea#19462)
  * Store the foreign ID of issues during migration (go-gitea#18446)
* FEATURES
  * Automatically render wiki TOC (go-gitea#19873)
  * Adding button to link accounts from user settings (go-gitea#19792)
  * Allow set default merge style while creating repo (go-gitea#19751)
  * Auto merge pull requests when all checks succeeded (go-gitea#9307 & go-gitea#19648)
  * Improve reviewing PR UX (go-gitea#19612)
  * Add support for rendering console output with colors (go-gitea#19497)
  * Add Helm Chart registry (go-gitea#19406)
  * Add Goroutine stack inspector to admin/monitor (go-gitea#19207)
  * RSS/Atom support for Orgs & Repos (go-gitea#17714 & go-gitea#19055)
  * Add button for issue deletion (go-gitea#19032)
  * Allow to mark files in a PR as viewed (go-gitea#19007)
  * Add Index to comment for migrations and mirroring (go-gitea#18806)
  * Add health check endpoint (go-gitea#18465)
  * Add packagist webhook (go-gitea#18224)
  * Add "Allow edits from maintainer" feature (go-gitea#18002)
  * Add apply-patch, basic revert and cherry-pick functionality (go-gitea#17902)
  * Add Package Registry (go-gitea#16510)
  * Add LDAP group sync to Teams (go-gitea#16299)
  * Pause queues (go-gitea#15928)
  * Added auto-save whitespace behavior if it changed manually (go-gitea#15566)
  * Find files in repo (go-gitea#15028)
  * Provide configuration to allow camo-media proxying (go-gitea#12802)
* API
  * Add endpoint to serve blob or LFS file content (go-gitea#19689)
  * Add endpoint to check if team has repo access (go-gitea#19540)
  * More commit info (go-gitea#19252)
  * Allow to create file on empty repo (go-gitea#19224)
  * Allow removing issues (go-gitea#18879)
  * Add endpoint to query collaborators permission for a repository (go-gitea#18761)
  * Return primary language and repository language stats API URL (go-gitea#18396)
  * Implement http signatures support for the API (go-gitea#17565)
* ENHANCEMENTS
  * Add dbconsistency checks for Stopwatches (go-gitea#20010)
  * Add fetch.writeCommitGraph to gitconfig (go-gitea#20006)
  * Add fgprof pprof profiler (go-gitea#20005)
  * Move agit dependency (go-gitea#19998)
  * Empty log queue on flush and close (go-gitea#19994)
  * Remove tab/TabName usage where it's not needed (go-gitea#19973)
  * Improve file header on mobile (go-gitea#19945)
  * Move issues related files into models/issues (go-gitea#19931)
  * Add breaking email restrictions checker in doctor (go-gitea#19903)
  * Improve UX on modal for deleting an access token (go-gitea#19894)
  * Add alt text to logo (go-gitea#19892)
  * Move some code into models/git (go-gitea#19879)
  * Remove customized (unmaintained) dropdown, improve aria a11y for dropdown (go-gitea#19861)
  * Make user profile image show full image on mobile (go-gitea#19840)
  * Replace blue button and label classes with primary (go-gitea#19763)
  * Remove fomantic progress module (go-gitea#19760)
  * Allows repo search to match against "owner/repo" pattern strings (go-gitea#19754)
  * Move org functions (go-gitea#19753)
  * Move almost all functions' parameter db.Engine to context.Context (go-gitea#19748)
  * Show source/target branches on PR's list (go-gitea#19747)
  * Use http.StatusTemporaryRedirect(307) when serve avatar directly (go-gitea#19739)
  * Add doctor orphan check for orphaned pull requests without an existing base repo  (go-gitea#19731)
  * Make Ctrl+Enter (quick submit) work for issue comment and wiki editor (go-gitea#19729)
  * Update go-chi/cache to utilize Ping() (go-gitea#19719)
  * Improve commit list/view on mobile (go-gitea#19712)
  * Move some repository related code into sub package (go-gitea#19711)
  * Use a better OlderThan for DeleteInactiveUsers (go-gitea#19693)
  * Introduce eslint-plugin-jquery (go-gitea#19690)
  * Tidy up `<head>` template (go-gitea#19678)
  * Calculate filename hash only once (go-gitea#19654)
  * Simplify `IsVendor` (go-gitea#19626)
  * Add "Reference" section to Issue view sidebar (go-gitea#19609)
  * Only set CanColorStdout / CanColorStderr to true if the stdout/stderr is a terminal (go-gitea#19581)
  * Use for a repo action one database transaction (go-gitea#19576)
  * Simplify loops to copy (go-gitea#19569)
  * Added X-Mailer header to outgoing emails (go-gitea#19562)
  * use middleware to open gitRepo (go-gitea#19559)
  * Mute link in diff header (go-gitea#19556)
  * Improve UI on mobile (go-gitea#19546)
  * Fix Pull Request comment filename word breaks (go-gitea#19535)
  * Permalink files In PR diff (go-gitea#19534)
  * PullService lock via pullID (go-gitea#19520)
  * Make repository file list useable on mobile (go-gitea#19515)
  * more context for models  (go-gitea#19511)
  * Allow package dump skipping (go-gitea#19506)
  * Refactor readme file renderer (go-gitea#19502)
  * By default force vertical tabs on mobile (go-gitea#19486)
  * Github style following followers (#19482)
  * Improve action table indices (go-gitea#19472)
  * Use horizontal tabs for repo header on mobile (go-gitea#19468)
  * pass gitRepo down since its used for main repo and wiki (go-gitea#19461)
  * Admin should not delete himself (go-gitea#19423)
  * Use queue instead of memory queue in webhook send service (go-gitea#19390)
  * Simplify the code to get issue count (go-gitea#19380)
  * Add commit status popup to issuelist (go-gitea#19375)
  * Add RSS Feed buttons to Repo, User and Org pages (go-gitea#19370)
  * Add logic to switch between source/rendered on Markdown (go-gitea#19356)
  * Move some helper files out of models (go-gitea#19355)
  * Move access and repo permission to models/perm/access (go-gitea#19350)
  * Disallow selecting the text of buttons (go-gitea#19330)
  * Allow custom redirect for landing page (go-gitea#19324)
  * Repository level enable package or disable (go-gitea#19323)
  * Remove dependent on session auth for api/v1 routers (go-gitea#19321)
  * Never use /api/v1 from Gitea UI Pages (go-gitea#19318)
  * Remove legacy unmaintained packages, refactor to support change default locale (go-gitea#19308)
  * Move milestone to models/issues/ (go-gitea#19278)
  * Configure OpenSSH log level via Environment in Docker (go-gitea#19274)
  * Move reaction to models/issues/ (go-gitea#19264)
  * Make git.OpenRepository accept Context (go-gitea#19260)
  * Move some issue methods as functions (go-gitea#19255)
  * Show last cron messages on monitor page (go-gitea#19223)
  * New cron task: delete old system notices (go-gitea#19219)
  * Add Redis Sentinel Authentication Support (go-gitea#19213)
  * Add auto logging of goroutine pid label (go-gitea#19212)
  * Set OpenGraph title to DisplayName in profile pages  (go-gitea#19206)
  * Add pprof labels in processes and for lifecycles (go-gitea#19202)
  * Let web and API routes have different auth methods group (go-gitea#19168)
  * Move init repository related functions to modules (go-gitea#19159)
  * Feeds: render markdown to html (go-gitea#19058)
  * Allow users to self-request a PR review (go-gitea#19030)
  * Allow render HTML with css/js external links (go-gitea#19017)
  * Fix script compatiable with OpenWrt (go-gitea#19000)
  * Support ignore all santize for external renderer (go-gitea#18984)
  * Add note to GPG key response if user has no keys (go-gitea#18961)
  * Improve Stopwatch behavior (go-gitea#18930)
  * Improve mirror iterator (go-gitea#18928)
  * Uncapitalize errors (go-gitea#18915)
  * Prevent Stats Indexer reporting error if repo dir missing (go-gitea#18870)
  * Refactor SecToTime() function (go-gitea#18863)
  * Replace deprecated String.prototype.substr() with String.prototype.slice() (go-gitea#18796)
  * Move deletebeans into models/db (go-gitea#18781)
  * Fix display time of milestones (go-gitea#18753)
  * Add config option to disable "Update branch by rebase" (go-gitea#18745)
  * Display template path of current page in dev mode (go-gitea#18717)
  * Add number in queue status to monitor page (go-gitea#18712)
  * Change git.cmd to RunWithContext (go-gitea#18693)
  * Refactor i18n, use Locale to provide i18n/translation related functions (go-gitea#18648)
  * Delete old git.NewCommand() and use it as git.NewCommandContext() (go-gitea#18552)
  * Move organization related structs into sub package (go-gitea#18518)
  * Warn at startup if the provided `SCRIPT_TYPE` is not on the PATH (go-gitea#18467)
  * Use `CryptoRandomBytes` instead of `CryptoRandomString` (go-gitea#18439)
  * Use explicit jQuery import, remove unused eslint globals (go-gitea#18435)
  * Allow to filter repositories by language in explore, user and organization repositories lists (go-gitea#18430)
  * Use base32 for 2FA scratch token (go-gitea#18384)
  * Unexport var git.GlobalCommandArgs (go-gitea#18376)
  * Don't underline commit status icon on hover (go-gitea#18372)
  * Always use git command but not os.Command (go-gitea#18363)
  * Switch to non-deprecation setting (go-gitea#18358)
  * Set the LastModified header for raw files (go-gitea#18356)
  * Refactor jwt.StandardClaims to RegisteredClaims (go-gitea#18344)
  * Enable deprecation error for v1.17.0 (go-gitea#18341)
  * Refactor httplib (go-gitea#18338)
  * Limit max-height of CodeMirror editors for issue comment and wiki (go-gitea#18271)
  * Validate migration files (go-gitea#18203)
  * Format with gofumpt (go-gitea#18184)
  * Allow custom default merge message with .gitea/default_merge_message/<merge_style>_TEMPLATE.md (go-gitea#18177)
  * Prettify number of issues (go-gitea#17760)
  * Add a "admin user generate-access-token" subcommand (go-gitea#17722)
  * Move project files into models/project sub package (go-gitea#17704)
  * Custom regexp external issues (go-gitea#17624)
  * Add smtp password to install page (go-gitea#17564)
  * Add config options to hide issue events (go-gitea#17414)
  * Prevent double click new issue/pull/comment button (go-gitea#16157)
  * Show issue assignee on project board (go-gitea#15232)
* BUGFIXES
  * Alter hook_task TEXT fields to LONGTEXT (go-gitea#20038) (go-gitea#20041)
  * Respond with a 401 on git push when password isn't changed yet (go-gitea#20026) (go-gitea#20027)
  * Return 404 when tag is broken (go-gitea#20017) (go-gitea#20024)
  * Write Commit-Graphs in RepositoryDumper (go-gitea#20004)
  * Use DisplayName() instead of FullName in Oauth Provider (go-gitea#19991)
  * Don't buffer doctor logger (go-gitea#19982)
  * Always try to fetch repo for mirrors (go-gitea#19975)
  * Uppercase first languages letters (go-gitea#19965)
  * Fix cli command restore-repo: "units" should be parsed as StringSlice (go-gitea#19953)
  * Ensure minimum mirror interval is reported on settings page (go-gitea#19895)
  * Exclude Archived repos from Dashboard Milestones (go-gitea#19882)
  * gitconfig: set safe.directory = * (go-gitea#19870)
  * Prevent NPE on update mirror settings (go-gitea#19864)
  * Only return valid stopwatches to the EventSource (go-gitea#19863)
  * Prevent NPE whilst migrating if there is a team request review (go-gitea#19855)
  * Fix inconsistency in doctor output (go-gitea#19836)
  * Fix release tag for webhook (go-gitea#19830)
  * Add title attribute to dependencies in sidebar (go-gitea#19807)
  * Estimate Action Count in Statistics (go-gitea#19775)
  * Do not update user stars numbers unless fix is specified (go-gitea#19750)
  * Improved ref comment link when origin is body/title (go-gitea#19741)
  * Fix nodeinfo caching and prevent NPE if cache non-existent (go-gitea#19721)
  * Fix duplicate entry error when add team member (go-gitea#19702)
  * Fix sending empty notifications (go-gitea#19589)
  * Update image URL for Discord webhook (go-gitea#19536)
  * Don't let repo clone URL overflow (go-gitea#19517)
  * Allow commit status popup on /pulls page (go-gitea#19507)
  * Fix two UI bugs: JS error in imagediff.js, 500 error in diff/compare.tmpl (go-gitea#19494)
  * Fix logging of Transfer API (go-gitea#19456)
  * Fix panic in teams API when requesting members (go-gitea#19360)
  * Refactor CSRF protection modules, make sure CSRF tokens can be up-to-date. (go-gitea#19337)
  * An attempt to sync a non-mirror repo must give 400 (Bad Request) (go-gitea#19300)
  * Move checks for pulls before merge into own function (go-gitea#19271)
  * Fix `contrib/upgrade.sh` (go-gitea#19222)
  * Set the default branch for repositories generated from templates (go-gitea#19136)
  * Fix EasyMDE error when input Enter (go-gitea#19004)
  * Don't clean up hardcoded `tmp` (go-gitea#18983)
  * Delete related notifications on issue deletion too (go-gitea#18953)
  * Fix trace log to show value instead of pointers (go-gitea#18926)
  * Fix behavior or checkbox submission. (go-gitea#18851)
  * Add `ContextUser` (go-gitea#18798)
  * Fix some mirror bugs (go-gitea#18649)
  * Quote MAKE to prevent path expansion with space error (go-gitea#18622)
  * Preserve users if restoring a repository on the same Gitea instance (go-gitea#18604)
  * Fix non-ASCII search on database  (go-gitea#18437)
  * Automatically pause queue if index service is unavailable (go-gitea#15066)
* TESTING
  * Allow postgres integration tests to run over unix pipe (go-gitea#19875)
  * Prevent intermittent NPE in queue tests (go-gitea#19301)
  * Add test for importing pull requests in gitea uploader for migrations (go-gitea#18752)
  * Remove redundant comparison in repo dump/restore (go-gitea#18660)
  * More repo dump/restore tests, including pull requests  (go-gitea#18621)
  * Add test coverage for original author conversion during migrations (go-gitea#18506)
* TRANSLATION
  * Update issue_no_dependencies description (go-gitea#19112)
  * Refactor webhooks i18n (go-gitea#18380)
* BUILD
  * Use alpine 3.16 (go-gitea#19797)
  * Require node 14.0 (go-gitea#19451)
* DOCS
  * Update documents (git/fomantic/db, etc) (go-gitea#19868)
  * Update the ROOT documentation and error messages (go-gitea#19832)
  * Update document to use FHS `/usr/local/bin/gitea` instead of `/app/...` for Docker (go-gitea#19794)
  * Update documentation to disable duration settings with -1 instead of 0 (go-gitea#19647)
  * Add warning to set SENDMAIL_ARGS to --  (go-gitea#19102)
  * Update nginx reverse proxy docs (go-gitea#18922)
  * Add example to render html files (go-gitea#18736)
  * Make SSH passtrough documentation better (go-gitea#18687)
  * Changelog 1.16.0 & 1.15.11 (go-gitea#18468 & go-gitea#18455)  (go-gitea#18470)
  * Update the SSH passthrough documentation (go-gitea#18366)
  * Add `contrib/upgrade.sh` (go-gitea#18286)
* MISC
  * Fix aria for logo (go-gitea#19955)
  * In code search, get code unit accessible repos in one (main) query (go-gitea#19764)
  * Enable packages by default again (go-gitea#19746)
  * Add tooltip to pending PR comments (go-gitea#19662)
  * Improve sync performance for pull-mirrors (go-gitea#19125)
  * Improve dashboard's repo list performance (go-gitea#18963)
  * Avoid database lookups for `DescriptionHTML` (go-gitea#18924)
  * Remove CodeMirror dependencies (go-gitea#18911)
  * Disable unnecessary mirroring elements (go-gitea#18527)
  * Disable unnecessary OpenID/OAuth2 elements (go-gitea#18491)
  * Disable unnecessary GitHooks elements (go-gitea#18485)
  * Change some logging levels (go-gitea#18421)
  * Prevent showing webauthn error for every time visiting `/user/settings/security` (go-gitea#18385)
  * Use correct translation key for errors (go-gitea#18342)

start work on v1.18.0

* ENHANCEMENTS

  * Add doctor check/fix for bogus action rows (go-gitea#19656) (go-gitea#19669)
  * Make .cs highlighting legible on dark themes. (go-gitea#19604) (go-gitea#19605)
* BUGFIXES
  * Fix oauth setting list bug (go-gitea#19681)
  * Delete user related oauth stuff on user deletion too (go-gitea#19677) (go-gitea#19680)
  * Fix new release from tags list UI (go-gitea#19670) (go-gitea#19673)
  * Prevent NPE when checking repo units if the user is nil (go-gitea#19625) (go-gitea#19630)
  * GetFeeds must always discard actions with dangling repo_id (go-gitea#19598) (go-gitea#19629)
  * Call MultipartForm.RemoveAll when request finishes (go-gitea#19606) (go-gitea#19607)
  * Avoid MoreThanOne error when creating a branch whose name conflicts with other ref names (go-gitea#19557) (go-gitea#19591)
  * Fix sending empty notifications (go-gitea#19589) (go-gitea#19590)
  * Ignore DNS error when doing migration allow/block check (go-gitea#19566) (go-gitea#19567)
  * Fix issue overview for teams (go-gitea#19652) (go-gitea#19653)

* SECURITY

  * Escape git fetch remote (go-gitea#19487) (go-gitea#19490)
* BUGFIXES
  * Don't overwrite err with nil (go-gitea#19572) (go-gitea#19574)
  * On Migrations, only write commit-graph if wiki clone was successful (go-gitea#19563) (go-gitea#19568)
  * Respect DefaultUserIsRestricted system default when creating new user (go-gitea#19310) (go-gitea#19560)
  * Don't error when branch's commit doesn't exist (go-gitea#19547) (go-gitea#19548)
  * Support `hostname:port` to pass host matcher's check (go-gitea#19543) (go-gitea#19544)
  * Prevent intermittent race in attribute reader close (go-gitea#19537) (go-gitea#19539)
  * Fix 64-bit atomic operations on 32-bit machines (go-gitea#19531) (go-gitea#19532)
  * Prevent dangling archiver goroutine (go-gitea#19516) (go-gitea#19526)
  * Fix migrate release from github (go-gitea#19510) (go-gitea#19523)
  * When view _Siderbar or _Footer, just display once (go-gitea#19501) (go-gitea#19522)
  * Fix blame page select range error and some typos (go-gitea#19503)
  * Fix name of doctor fix "authorized-keys" in hints (go-gitea#19464) (go-gitea#19484)
  * User specific repoID or xorm builder conditions for issue search (go-gitea#19475) (go-gitea#19476)
  * Prevent dangling cat-file calls (goroutine alternative) (go-gitea#19454) (go-gitea#19466)
  * RepoAssignment ensure to close before overwrite (go-gitea#19449) (go-gitea#19460)
  * Set correct PR status on 3way on conflict checking (go-gitea#19457) (go-gitea#19458)
  * Mark TemplateLoading error as "UnprocessableEntity" (go-gitea#19445) (go-gitea#19446)

v1.16.6

* ENHANCEMENTS
 * Only request write when necessary (go-gitea#18657) (go-gitea#19422)
 * Disable service worker by default (go-gitea#18914) (go-gitea#19342)
* BUGFIXES
  * When dumping trim the standard suffices instead of a random suffix (go-gitea#19440) (go-gitea#19447)
  * Fix DELETE request for non-existent public key (go-gitea#19443) (go-gitea#19444)
  * Don't panic on ErrEmailInvalid (go-gitea#19441) (go-gitea#19442)
  * Add uploadpack.allowAnySHA1InWant to allow --filter=blob:none with older git clients (go-gitea#19430) (go-gitea#19438)
  * Warn on SSH connection for incorrect configuration (go-gitea#19317) (go-gitea#19437)
  * Search Issues via API, dont show 500 if filter result in empty list (go-gitea#19244) (go-gitea#19436)
  * When updating mirror repo intervals by API reschedule next update too (go-gitea#19429) (go-gitea#19433)
  * Fix nil error when some pages are rendered outside request context (go-gitea#19427) (go-gitea#19428)
  * Fix double blob-hunk on diff page (go-gitea#19404) (go-gitea#19405)
  * Don't allow merging PR's which are being conflict checked (go-gitea#19357) (go-gitea#19358)
  * Fix middleware function's placements (go-gitea#19377) (go-gitea#19378)
  * Fix invalid CSRF token bug, make sure CSRF tokens can be up-to-date (go-gitea#19338)
  * Restore user autoregistration with email addresses (go-gitea#19261) (go-gitea#19312)
  * Move checks for pulls before merge into own function (go-gitea#19271) (go-gitea#19277)
  * Granular webhook events in editHook (go-gitea#19251) (go-gitea#19257)
  * Only send webhook events to active system webhooks and only deliver to active hooks (go-gitea#19234) (go-gitea#19248)
  * Use full output of git show-ref --tags to get tags for PushUpdateAddTag (go-gitea#19235) (go-gitea#19236)
  * Touch mirrors on even on fail to update (go-gitea#19217) (go-gitea#19233)
  * Hide sensitive content on admin panel progress monitor (go-gitea#19218 & go-gitea#19226) (go-gitea#19231)
  * Fix clone url JS error for the empty repo page (go-gitea#19209)
  * Bump goldmark to v1.4.11 (go-gitea#19201) (go-gitea#19203)
* TESTING
  * Prevent intermittent failures in RepoIndexerTest (go-gitea#19225 go-gitea#19229) (go-gitea#19228)
* BUILD
  * Revert the minimal golang version requirement from 1.17 to 1.16 and add a warning in Makefile (go-gitea#19319)
* MISC
  * Performance improvement for add team user when org has more than 1000 repositories (go-gitea#19227) (go-gitea#19289)
  * Check go and nodejs version by go.mod and package.json (go-gitea#19197) (go-gitea#19254)

* BREAKING

  * Bump to build with go1.18 (go-gitea#19120 et al) (go-gitea#19127)
* SECURITY
  * Prevent redirect to Host (2) (go-gitea#19175) (go-gitea#19186)
  * Try to prevent autolinking of displaynames by email readers (go-gitea#19169) (go-gitea#19183)
  * Clean paths when looking in Storage (go-gitea#19124) (go-gitea#19179)
  * Do not send notification emails to inactive users (go-gitea#19131) (go-gitea#19139)
  * Do not send activation email if manual confirm is set (go-gitea#19119) (go-gitea#19122)
* ENHANCEMENTS
  * Use the new/choose link for New Issue on project page (go-gitea#19172) (go-gitea#19176)
* BUGFIXES
  * Fix showing issues in your repositories (go-gitea#18916) (go-gitea#19191)
  * Fix compare link in active feeds for new branch (go-gitea#19149) (go-gitea#19185)
  * Redirect .wiki/* ui link to /wiki (go-gitea#18831) (go-gitea#19184)
  * Ensure deploy keys with write access can push (go-gitea#19010) (go-gitea#19182)
  * Ensure that setting.LocalURL always has a trailing slash (go-gitea#19171) (go-gitea#19177)
  * Cleanup protected branches when deleting users & teams (go-gitea#19158) (go-gitea#19174)
  * Use IterateBufferSize whilst querying repositories during adoption check (go-gitea#19140) (go-gitea#19160)
  * Fix NPE /repos/issues/search when not signed in (go-gitea#19154) (go-gitea#19155)
  * Use custom favicon when viewing static files if it exists (go-gitea#19130) (go-gitea#19152)
  * Fix the editor height in review box (go-gitea#19003) (go-gitea#19147)
  * Ensure isSSH is set whenever DISABLE_HTTP_GIT is set (go-gitea#19028) (go-gitea#19146)
  * Fix wrong scopes caused by empty scope input (go-gitea#19029) (go-gitea#19145)
  * Make migrations SKIP_TLS_VERIFY apply to git too (go-gitea#19132) (go-gitea#19141)
  * Handle email address not exist (go-gitea#19089) (go-gitea#19121)
* MISC
  * Update json-iterator to allow compilation with go1.18 (go-gitea#18644) (go-gitea#19100)
  * Update golang.org/x/crypto (go-gitea#19097) (go-gitea#19098)

v1.16.4

* SECURITY
  * Restrict email address validation (go-gitea#17688) (go-gitea#19085)
  * Fix lfs bug (go-gitea#19072) (go-gitea#19080)
* ENHANCEMENTS
  * Improve SyncMirrors logging (go-gitea#19045) (go-gitea#19050)
* BUGFIXES
  * Refactor mirror code & fix `StartToMirror` (go-gitea#18904) (go-gitea#19075)
  * Update the webauthn_credential_id_sequence in Postgres (go-gitea#19048) (go-gitea#19060)
  * Prevent 500 when there is an error during new auth source post (go-gitea#19041) (go-gitea#19059)
  * If rendering has failed due to a net.OpError stop rendering (attempt 2) (go-gitea#19049) (go-gitea#19056)
  * Fix flag validation (go-gitea#19046) (go-gitea#19051)
  * Add pam account authorization check (go-gitea#19040) (go-gitea#19047)
  * Ignore missing comment for user notifications (go-gitea#18954) (go-gitea#19043)
  * Set `rel="nofollow noindex"` on new issue links (go-gitea#19023) (go-gitea#19042)
  * Upgrading binding package (go-gitea#19034) (go-gitea#19035)
  * Don't show context cancelled errors in attribute reader (go-gitea#19006) (go-gitea#19027)
  * Fix update hint bug (go-gitea#18996) (go-gitea#19002)
* MISC
  *  Fix potential assignee query for repo (go-gitea#18994) (go-gitea#18999)

* SECURITY

 * Git backend ignore replace objects (go-gitea#18979) (go-gitea#18980)
* ENHANCEMENTS
  * Adjust error for already locked db and prevent level db lock on malformed connstr (go-gitea#18923) (go-gitea#18938)
* BUGFIXES
  * Set max text height to prevent overflow (go-gitea#18862) (go-gitea#18977)
  * Fix newAttachmentPaths deletion for DeleteRepository() (go-gitea#18973) (go-gitea#18974)
  * Accounts with WebAuthn only (no TOTP) now exist ... fix code to handle that case (go-gitea#18897) (go-gitea#18964)
  * Send 404 on `/{org}.gpg` (go-gitea#18959) (go-gitea#18962)
  * Fix admin user list pagination (go-gitea#18957) (go-gitea#18960)
  * Fix lfs management setting (go-gitea#18947) (go-gitea#18946)
  * Fix login with email panic when email is not exist (go-gitea#18942)
  * Update go-org to v1.6.1 (go-gitea#18932) (go-gitea#18933)
  * Fix `<strong>` html in translation (go-gitea#18929) (go-gitea#18931)
  * Fix page and missing return on unadopted repos API (go-gitea#18848) (go-gitea#18927)
  * Allow adminstrator teams members to see other teams (go-gitea#18918) (go-gitea#18919)
  * Don't treat BOM escape sequence as hidden character. (go-gitea#18909) (go-gitea#18910)
  * Correctly link URLs to users/repos with dashes, dots or underscores (… (go-gitea#18908)
  * Fix redirect when using lowercase repo name (go-gitea#18775) (go-gitea#18902)
  * Fix migration v210 (go-gitea#18893) (go-gitea#18892)
  * Fix team management UI (go-gitea#18887) (18886)
  * BeforeSourcePath should point to base commit (go-gitea#18880) (go-gitea#18799)
* TRANSLATION
  * Backport locales from master (go-gitea#18944)
* MISC
  * Don't update email for organisation (go-gitea#18905) (go-gitea#18906)

v1.16.2

* ENHANCEMENTS
  * Show fullname on issue edits and gpg/ssh signing info (go-gitea#18828)
  * Immediately Hammer if second kill is sent (go-gitea#18823) (go-gitea#18826)
  * Allow mermaid render error to wrap (go-gitea#18791)
* BUGFIXES
  * Fix ldap user sync missed email in email_address table (go-gitea#18786) (go-gitea#18876)
  * Update assignees check to include any writing team and change org sidebar (go-gitea#18680) (go-gitea#18873)
  * Don't report signal: killed errors in serviceRPC (go-gitea#18850) (go-gitea#18865)
  * Fix bug where certain LDAP settings were reverted (go-gitea#18859)
  * Update go-org to 1.6.0 (go-gitea#18824) (go-gitea#18839)
  * Fix login with email for ldap users (go-gitea#18800) (go-gitea#18836)
  * Fix bug for get user by email (go-gitea#18834)
  * Fix panic in EscapeReader (go-gitea#18820) (go-gitea#18821)
  * Fix ldap loginname (go-gitea#18789) (go-gitea#18804)
  * Remove redundant call to UpdateRepoStats during migration (go-gitea#18591) (go-gitea#18794)
  * In disk_channel queues synchronously push to disk on shutdown (go-gitea#18415) (go-gitea#18788)
  * Fix template bug of LFS lock (go-gitea#18784) (go-gitea#18787)
  * Attempt to fix the webauthn migration again - part 3 (go-gitea#18770) (go-gitea#18771)
  * Send mail to issue/pr assignee/reviewer also when OnMention is set (go-gitea#18707) (go-gitea#18765)
  * Fix a broken link in commits_list_small.tmpl (go-gitea#18763) (go-gitea#18764)
  * Increase the size of the webauthn_credential credential_id field (go-gitea#18739) (go-gitea#18756)
  * Prevent dangling GetAttribute calls (go-gitea#18754) (go-gitea#18755)
  * Fix isempty detection of git repository (go-gitea#18746) (go-gitea#18750)
  * Fix source code line highlighting on external tracker (go-gitea#18729) (go-gitea#18740)
  * Prevent double encoding of branch names in delete branch (go-gitea#18714) (go-gitea#18738)
  * Always set PullRequestWorkInProgressPrefixes in PrepareViewPullInfo (go-gitea#18713) (go-gitea#18737)
  * Fix forked repositories missed tags (go-gitea#18719) (go-gitea#18735)
  * Fix release typo (go-gitea#18728) (go-gitea#18731)
  * Separate the details links of commit-statuses in headers (go-gitea#18661) (go-gitea#18730)
  * Update object repo with the migrated repository (go-gitea#18684) (go-gitea#18726)
  * Fix bug for version update hint (go-gitea#18701) (go-gitea#18705)
  * Fix issue with docker-rootless shimming script (go-gitea#18690) (go-gitea#18699)
  * Let `MinUnitAccessMode` return correct perm (go-gitea#18675) (go-gitea#18689)
  * Prevent security failure due to bad APP_ID (go-gitea#18678) (go-gitea#18682)
  * Restart zero worker if there is still work to do (go-gitea#18658) (go-gitea#18672)
  * If rendering has failed due to a net.OpError stop rendering (go-gitea#18642) (go-gitea#18645)
* TESTING
  * Ensure git tag tests and others create test repos in tmpdir (go-gitea#18447) (go-gitea#18767)
* BUILD
  * Reduce CI go module downloads, add make targets (go-gitea#18708, go-gitea#18475, go-gitea#18443) (go-gitea#18741)
* MISC
  * Put buttons back in org dashboard (go-gitea#18817) (go-gitea#18825)
  * Various Mermaid improvements (go-gitea#18776) (go-gitea#18780)
  * C preprocessor colors improvement (go-gitea#18671) (go-gitea#18696)
  * Fix the missing i18n key for update checker (go-gitea#18646) (go-gitea#18665)

 ## [1.16.1](https://github.com/go-gitea/gitea/releases/tag/v1.16.1) …

…- 2022-02-06

* SECURITY
  * Update JS dependencies, fix lint (go-gitea#18389) (go-gitea#18540)
* ENHANCEMENTS
  * Add dropdown icon to label set template dropdown (go-gitea#18564) (go-gitea#18571)
* BUGFIXES
  * Comments on migrated issues/prs must link to the comment ID (go-gitea#18630) (go-gitea#18637)
  * Stop logging an error when notes are not found (go-gitea#18626) (go-gitea#18635)
  * Ensure that blob-excerpt links work for wiki (go-gitea#18587) (go-gitea#18624)
  * Only attempt to flush queue if the underlying worker pool is not finished (go-gitea#18593) (go-gitea#18620)
  * Ensure commit-statuses box is sized correctly in headers (go-gitea#18538) (go-gitea#18606)
  * Prevent merge messages from being sorted to the top of email chains (go-gitea#18566) (go-gitea#18588)
  * Prevent panic on prohibited user login with oauth2 (go-gitea#18562) (go-gitea#18563)
  * Collaborator trust model should trust collaborators (go-gitea#18539) (go-gitea#18557)
  * Detect conflicts with 3way merge (go-gitea#18536) (go-gitea#18537)
  * In docker rootless use $GITEA_APP_INI if provided (go-gitea#18524) (go-gitea#18535)
  * Add `GetUserTeams` (go-gitea#18499) (go-gitea#18531)
  * Fix review excerpt (go-gitea#18502) (go-gitea#18530)
  * Fix for AvatarURL database type (go-gitea#18487) (go-gitea#18529)
  * Use `ImagedProvider` for gplus oauth2 provider (go-gitea#18504) (go-gitea#18505)
  * Fix OAuth Source Edit Page (go-gitea#18495) (go-gitea#18503)
  * Use "read" value for General Access (go-gitea#18496) (go-gitea#18500)
  * Prevent NPE on partial match of compare URL and allow short SHA1 compare URLs (go-gitea#18472) (go-gitea#18473)
* BUILD
  * Make docker gitea/gitea:v1.16-dev etc refer to the latest build on that branch (go-gitea#18551) (go-gitea#18569)
* DOCS
  * Update 1.16.0 changelog to set go-gitea#17846 as breaking (go-gitea#18533) (go-gitea#18534)