| title | description | tags | ||||
|---|---|---|---|---|---|---|
Changelog |
Tracks changes and bug fixes between different versions of Bonobo Git Server for Windows |
|
17 April 2019
This is an important security release which addresses two vulnerabilities, and users should upgrade immediately, particularly if they permit anonymous or low-trust users access to any repository.
AD users who have been avoiding 6.2.2 or later versions because of problems introduced in that release should be safe to upgrade to this version, which removes that particular troublesome feature.
We are grateful to the team at flab.cesnet.cz for the responsible disclosure of the vulnerabilities addressed by this release.
- Sanitise service name in calls to Git services (CVE-2019-11217)
- Prevent non-admin users maninpulating role membership (CVE-2019-11218)
13 November 2017 (unreleased)
- Removed #710 feature introduced in 6.2.2 as it has proved unreliable
- Added IE-Edge meta tag #740 @CatStarwind
5 September 2017
- Allow named users to browse anonymous repos for which they don't have explicit permission #708
- Allow custom CSS files #705
- Fix regression in 6.2.2 for certain domain configurations #731/#733
- Update compiler used for pages #702
28 August 2017
- Allow anonymous users to browse repos without credentials where permitted #710 / @jeffgaroutte
- Don't unescape Git passwords/usernames unnecessarily #704
- Improvements to AD domain handling #706
- Enable README display for all folders #713
- Turkish translation improvements #722
22 May 2017
This is identical to 6.2.0, but with corrected version numbering in the appveyor build.
15 May 2017
- Broader search for AD domain #683
- Reintroduce ActiveDirectoryDefaultDomain configuration item (helps #683)
- Revert Jwt library to v4.x to repair ADFS login #681
- Reintroduce ActiveDirectoryDefaultDomain configuration item #685
- Permissions for unknown Windows users are set more sensibly when using internal membership #687
- pt-BR translation improvements #678
- All logging now moved to new app_data\logs files
12 April 2017
- Enhanced logging - daily rotating log files written to App_Data\Logs, log level controllable in Web.Config
- Fix problem with Git authentication with using the Windows Auth + EF Membership approach #668
- Don't throw exception if GitAuth token doesn't contain colon #664
- Improved French translation #670
- Updated libgit2sharp #650
- Updated CommonMark #651
29 March 2017
- This version adds column to several tables in the database. This makes it incompatible with previous versions of Bonobo. Please ensure that you have a backup of your App_Data folder before you update.
- A new global option allows a repository to be created by pushing at a non-existent repo name #504
- Repositories do not need to have an explicit repository administator #505
- Allow push for anonymous user can now be set on a per repo basis
- Repository details screen now has copy-to-clipboard buttons for Git URLs #453
- 'Rescan' button on Repository index screen allows new file-system repos to be discovered without restarting application #454
- *.ts and *.json formatting support for file display #455
- New diagnostic page at /home/diagnostics to help with support
- Claims names are now more consistent with typical ADFS usage #488
- Added following environment variables:
AUTH_USER_TEAMS,AUTH_USER_ROLES, andAUTH_USER_DISPLAYNAME. See the FAQ for more information. #495 - The linkify option for commit messages can now be set on a per repo basis
- Verifies that username, repository and team names are unique as you type them
- Verifies as you type regex entered for linkification
- Added icons to repository listing indicating anonymous push/pull status
- NullReferenceException in EFRepositoryPermissionService HasPermission #441
- Inconsistent repo name case-sensitivity (now consistently case-insensitve) #443
- Correct error reported to Git clients for access to non-existent repo #447
- Bonobo can start enough to allow access to settings if git directory is mis-configured #451
- Bonobo doesn't run on systems with particular machine.config RoleManager settings #486
- The repository logo was not visible in all views
- Fixed inability to browse folders in branches other then master #541
- Addition of automated test framework for testing web application
- Rework of repository permissions Code #492
- Abort startup if
BinaryGUID=Falseis not set in Sqlite connections. - Improved exception handling in GitController #444
- Upgrade all web.config files to MVC5 #457
- Password salt now randomly generated at password update #462
- Resharper settings provided so that Resharper suggested style matches project #465
- UserModel and User entity class name properties made more consistent #470
- Far fewer catch-all claueses silently swallowing exceptions
- Updated jQuery and associated js code to 1.12.4 #586
17 March 2016
This is an important security release adding a CSRF protection to POST actions in the app. Also, it fixes a token validation on password reset function and adds the CSRF protection there as well.
- add form antiforgery protection - Will Dean
12 January 2016
- add Sqlite.Interop.dll to the project so it is part of the release
11 January 2016
- display general and personal repository URL as links - padremortius
- add Danish translation - larshg
- add Italian translation - Andrea Capigiri
- improve Japanese translation - mattn
- improve Chinese translation - StarryLibra
- improve French translation - latop2604
- Active Directory updates - Matt Bodily
- use nested groups for permissions
- allow logging in without specifying the AD domain (should use the default for all AD look-ups if one is not specified)
- update so username at login is not case sensitive when retrieving roles
- External links functionality - kabongsteve
- increase repository logo quality by using PNG - mischalandwehr
- exporting correct user environment variable for AD - BIPrc
- removing confidence requirement for file type - larshg
- fixed subfolder application redirection to root - Alex Moran
- fix error when changing URL - Alex Moran
- prevent repository buttons breaking - mischalandwehr
- fix multiple tags support - kabongsteve
- install SQLite from nuget - padremortius
- start using MediaTypeMap - padremortius
- improve .gitignore - n.kochnev
5 November 2015
- add go to repository after creation - erdemyavuzyildiz
- ADRepository username handling - larshg
- cookie authentication issue fix - bogusz
- don't strip domain in AD membership service - larshg
- fix teams and AD - larshg
- fix team deletation - BurhanEyimaya
22 October 2015
This is a major release as Ollienator simplified and consolidated authorization and also added new providers, but your current web.config could be out of date and might need an update. Check out the new docs and update your web.config accordingly.
- major rework of authentication and authorization - ollienator
- simplification of Active Directory integration (no need to run 2 servers) - ollienator
- authentication through OWIN and ADFS - ollienator
- updated nuget packages and libgit2sharp - amonomen
- client based culture and brazil translation - darioajr
- msysgit update 1.9.5 - larshg
- remove origin branch after cloning - latop2604
- allow relative repository path - lhko
- better error handling - matt-17
- improved detection of windows-1252 encoding - larshg
- fix typo errors - isaksson
- using UI date time format - crowar
- fix compile error:x64/SQLite.Interop.dll not found - myh
11 Jun 2015
- can run on Azure Website
- email check supports new long tld - restartz
- authenticated user name available on push - kholme2
- add logo to repository - sansys
- remove default port from repository view - ivanstus
- add file info (line count, size) - lkho
- fix incorrect encoding in blob preview - colinniu
- improved project infrastructure - robbforce
- fix bug with edit/view non-domain users with enabled domain integration - padremortius
- fix problem with not possible edit/delete account with domain authorization - padremortius
- fix errors in highlight.js - padremortius
- fix git clone depth 1 - silvanperego
2 Apr 2015
- new commit message format - alexkuznetsov
- french translation - glacasa
- show personalised URL - sansys
- added support for grouping repositories - lennardf1989
- minimize group - sansys
- link to commited changes - spoiledtechie
- fixed history and blame page - igoryk-zp
- fixed back link - igoryk-zp
- fixed russian translation - sansys
19 Feb 2015
- Remember me checkbox - whosa
- zh-HK, zh-CHT translation and improved encoding - lkho
- Improved commit layout - whosa
- Repository allows dot and underscore in the name - mbedded
- Convert tabs into spaces in blob and commit view - jafp
- Enable password reset - kengibous
- Add tags to commit view - heringeidaniel
- Fix #207 Remove the home variable from process info before adding it
- Rescuing from IdentityNotMap Exception for Windows Authentication - jshepler
- Fix to allow email addresses as users names, Issue #163 #158 - kengibous
- zh-TW improved - tooto
14 Dec 2014
- Display readme.md in repository browser - kengibous
- Fix broken download link for files - latop2604
11 Dec 2014
- Support for large files and large repos - kfarnung
- Displaying markdown in repo browser - kengibous
- Disabling post commit auditing as it causes problems with certain clients - stanshillis
2 Dec 2014
- Made commit details parsing more robust for ReceivePackHook - kfarnung
30 Nov 2014
- Post commit hook - stanshillis
- Commit auditing (username recording) - stashillis
- Keep selected branch on all pages - stanshillis
- Polish translation - Bartlomiej Kaminski
- History view for files - Igor Nakonechnyi
- Assembly version displayed in footer - Kyle Engibous
- Display avatar in commits page - Igor Nakonechnyi
- Blame for file - Igor Nakonechnyi
- Disallow special characters for repository name - Matthias
22 Aug 2014
- Clone button for repositories in web management UI - latop2604
- Support for custom title, logo, additional footer message - OttoNull
- Add Active Directory group / Team synchronization - Louis-Charles Levasseur
- Add audit logging of login success or failure - dnadle
- Add missing french translation keys - latop2604
- Add backwards compatible upgrade of method to store hashed passwords - embix
- Fix crash when repo contain GitLink node - latop2604
- Added generic message, if commit message is null or empty - SeitzDev
- Fix #133 JSON body displayed when going back in repository view
19 May 2014
- Repository browser performance improvement
- Asynchronnous load of commit messages in browser
- Better English localization
- Improved deployment process
- Nuget cleanup
- Fixed #102 Create Team button is missing for Windows Authentication mode
- Fixed #104 Missing highlight.pack.js
- Fixed #117 Split commit messages
27 March 2014
- zh-TW Traditional Chinese Translation added - doggy8088
- Fix German Localization - AliveDevil
- Fixed dissapearing menu
- Fixed CSS Virtual Path (#99 and #100) - kfarnung
18 March 2014
- Major redesign
- Diff view for files
- Short SHA in commit view
- Changed lines added to commits
- Fix #93 Browsing cshtml extensions
- Fix #94 Wrong date display for different locale
3 March 2014
- RAW file display
- Scanning for existing repositories
- Select a default language in settings section
- Efficient working with streams
- Swedish localization - JLedel
- Russian localization - grigoryev
- Spanish localization - AHTA
- Download repository as ZIP - Rémy de Sérésin
- Fixed a problem viewing files with '+' or '&' in the path
- Fixed a problem viewing branches and tags with '/' in the name
- Fixed missing label for team members when creating team
- Tweaked English strings
30 August 2013
- Displaying current username in Windows Authentication mode
- Fixed the problem with repository view for normal users in Windows Authentication mode
25 August 2013
- Windows Authentication Support
- Spanish Translation
- Usernames are normalized to invariant lowercase.
- Fix text in Chinese translation
- Converts all the usernames to lowercase.
- Keep that in mind while logging
- Only ASCII chars are supported even for existing usernames, if you have other characters in your username it is recommended to create a new user.
30 June 2013
- Gitsharp removed
- Switched to libgit2
- Tag support added
- Improved repository browser - blog support and faster navigation
- Enable repository browser view of ASP.NET special folders
- Enable repository browser view of any extension
- Fix a crash issue if there is not master branch - Yubo Xie
- Fix a crash if user browses an empty repository - Yubo Xie
- Fixing incorrect hint place - TheBlueSky
30 May 2013
- Replaced multiselects with the checkbox lists - Mark N
- Turkish translation - zafer06
- One URL for secure and anonymous access - Aimeast
- Default settings file is created automatically when not exists - Aimeast
- Default database is created automatically when not exists - Aimeast
- EF 5.0 code first introduction - Aimeast
- Switched to ASP.NET MVC 4 and .NET 4.5
- Nuget packages used for external dependencies
- Allow to pass username and password from URL
- Removed git.aspx from URL
- Settings must be set before the first use
- Git logo added
- Changing password for normal user
- Display large binary files
- Hashing password with proper encoding - Aimeast
- Max allowed content length set to 4MB
- Page width set to 980px - Aimeast
- Fixed integration with TeamCity - micchickenburger
- Password is not compatible with the previous version due to encoding change.
- For fixing this issue please use sqlite administrator, open the database file located in App_Data and change your record in the table User and set the field Password to 0CC52C6751CC92916C138D8D714F003486BF8516933815DFC11D6C3E36894BFA044F97651E1F3EEBA26CDA928FB32DE0869F6ACFB787D5A33DACBA76D34473A3 which means admin.
- You can run this sql statement
UPDATE User SET Password = '0CC52C6751CC92916C138D8D714F003486BF8516933815DFC11D6C3E36894BFA044F97651E1F3EEBA26CDA928FB32DE0869F6ACFB787D5A33DACBA76D34473A3' WHERE Username = 'YOUR USERNAME'
- Database name changed from Bonobo.Git.Server.Release.db to Bonobo.Git.Server.db
- Go to App_Data folder and rename the file
- Windows Server 2003 is not supported because of the ASP.NET MVC 4.5 and .NET 4.5 versions
- IIS 7+ and .NET 4.5 and ASP.NET MVC 4.5 is required to run Bonobo Git Server
9 October 2011
- Administrator can create new user accounts
- Settings
- Disable anonymous user registration (by default user registration is disabled and only administrator can create new users)
- Disable creation repository by users (by default only administrator can create new repositories)
- Confirmation for Team, User and Repository removals
- Security hole with delete on GET removed
- Download link for text based files in repository browser
- Chinese translation added
- Japanese translation added
- Reasonable states returned to git client if authentication failed or if repository does not exists
- Fixed issue with UserConfiguration (config.xml) was invalid after overwriting with custom values
- MaxRequestLength extended to 100MB for large file upload
- RequestLimit for IIS 7 extended to 100MB for large file upload
- Fixed redirecting from Create actions
- Fixed URL redirecting after Create and Delete actions
- Favicon application error fixed
- Fixed FormsAuthentication redirect call after basic authentication returns 401(and fire up runtime exception)
- Fixed repository delete with read only files