CHANGELOG.org

 1#+title: gitbay changelog
 2
 3Versioning follows semver from v0.1.0. Database migrations run
 4automatically on daemon start; upgrade notes appear per release when
 5anything beyond "replace the binary and restart" is needed.
 6
 7* v0.2.0 — 2026-08-24
 8
 9- Deploy keys: repo-bound CI keys (=repo deploy-key=), ro/rw, rename- and
10  transfer-proof.
11- Commit statuses (=status set/list=), combined state on MR pages, and a
12  =require-checks= merge gate.
13- Email notifications for issue and MR activity (participants with
14  verified addresses; never the actor).
15- Inline review threads on MR diffs (=mr diff-comment/threads/resolve=),
16  stale on force-push, =require-resolved= merge gate.
17- Required approvals with CODEOWNERS (=require-approvals=; latest review
18  wins, author excluded) and a =require-resolved= gate; merge gate order
19  is checks → approvals → CODEOWNERS → resolved threads → signatures.
20- Web design revamp: token-based stylesheet (light+dark), wordmark and
21  favicon, aligned layout grid, card-based listings, designed 404,
22  mobile pass.
23- Cross-references and mentions: =#N=, =!N=, =owner/name#N=, =@user=
24  autolink in issue/MR text, viewer-aware for private repos.
25- Archived repositories (read-only with badge) and repo topics.
26- Blame view with signature-aware attribution and 1000-line pages.
27- Repository search (name/description/topic) and per-repo code search
28  (=repo grep=, web search tab); blob line anchors.
29- Homepage: dashboard for logged-in users (pinned repos via =repo pin=,
30  open MRs and issues involving you), landing page for visitors, full
31  public listing at =/explore=; MR diffs collapsed by default.
32- Milestones (=milestone create/list/close=, =issue/mr milestone=) with
33  web progress; issue templates from =.gitbay/issue-template*.md=
34  (CLI =$EDITOR= prefill and web form).
35- Issue actions from commit messages landing on the default branch:
36  =closes/fixes/resolves #N= closes, bare =#N= leaves a reference
37  comment; once per issue+commit.
38- Vanity Go imports: =[go_import]= config serves go-import meta tags, so
39  =go install gitbay.org/gitbay/cmd/...@latest= works.
40- Release script: =deploy/release.sh <tag>= builds reproducible
41  linux/amd64, linux/arm64, and darwin/arm64 binaries with SHA256SUMS.
42- Repository maintenance: =admin gc= (repack/prune, per-repo sizes),
43  =admin stats= (counts + disk usage), weekly =gitbay-gc.timer=.
44- Releases: tag-anchored notes and binary assets (=release= commands,
45  assets over SSH stdin/stdout, web releases tab with downloads).
46- GitHub history import: =repo import-issues= brings issues and PRs
47  (as merged/closed MRs) with comments, labels, and state, attributed
48  inline and resumable.
49- Push and pull mirroring (=repo mirror=): background sync, read-only
50  pull mirrors, per-mirror status; credentials server-side, SSRF-guarded.
51- Web signup at =/register= for open and invite instances.
52- Audit log (=audit=, =gitbayd admin audit=): every mutating command
53  with source key fingerprint, registrations, force-pushes, auth
54  failures. Hardening: per-IP auth-failure throttling
55  (=ssh_auth_rate=), =max_pack_bytes= enforced, =admin user
56  disable/enable=.
57- Account migration: =gitbay migrate --from <host>= (bundle
58  export/replay + client-side git mirror); =gitbay auth export= as a
59  user-level backup.
60- Editable issues and MRs (=issue edit=, =mr edit=, web forms).
61- Commit references appear as system messages with linked shas.
62- Design: top nav, repo listing rows (topics, license, last updated),
63  file table headers, README relative-link resolution, branch
64  dropdown, web pinning, org owner picker, label filters, linked
65  usernames and commit parents, =/privacy= page, blue accent.
66
67Upgrade notes: migrations 0006–0019 apply on start. No config changes
68required; =[go_import]=, =[mirrors]=, =web.privacy_notice=, and
69=web.mode = "accounts"= are opt-in.
70
71* v0.1.0 — 2026-08-24
72
73First tagged release: the complete CLI-first forge. SSH control plane
74(bare-OpenSSH usable), git over SSH/HTTPS/git-daemon, repos, issues,
75merge requests (ff/merge/squash/rebase with signature policy), OpenPGP
76and SSHSIG verification with retroactive re-verification, orgs, repo
77import, web UI (view-only or accounts mode), registration with invites
78and SMTP, HTTPS/JSON API with SSH-minted tokens, webhooks, backups,
79ACME TLS, systemd deployment.