Gitblit 1.6.1 发布，此版本现已提供下载，值得关注的更新内容如下：

* 依赖更新
* 大量 bug 修复
* GITBLIT_HOME 环境变量支持

注意

下一个重大版本 (v1.7.0) 将会专注于：

* ticket 75: making projects more useful including the concept of project ownership

此改进将会要求一个 NON-BACKWARDS-COMPATIBLE ，从 RpeositoryModel 到 UserModel 的库迁移

* ticket 55: facilitating usage of tickets & git-flow in the web ui

Gitbilit 1.6.1 详细改进列表：

安全更新

• Sanitize page parameters, form fields, and markup for XSS vulnerabilities (issue 496, ticket 164)

• Fix flash security risk (issue 498, ticket 165)

• Fix XRF vulnerability (issue 500, ticket 166)

• Prohibit new forks from inadvertently disclosing view-restricted contents (issue 495, ticket 167)

• Restrict Gitblit's cookie to the context path (issue 507, ticket 187)

bug 修复

• Fix NPE when two repository names differ only in case (pull request #204, ticket 108)

• Fix API documentation links (issue 449, ticket 111)

• Fix internal error when specifying a blob url without a path (ticket 113)

• Fix milestone queries for hyphentated names (ticket 115)

• Fix duplicate repositories on dashboards (issue 454, ticket 117)

• Fix lower-case project names in RepositoryNamePanel (issue 509, ticket 118)

• Fix ticket notifications not sent when author doesn't have an email address (issue 423, ticket 132)

• Fix regression in create-ticket-on-push & clarify reported explanation (ticket 135)

• Fix redirects after ajax form submissions with Tomcat (issue 455, ticket 136)

• Fix potential NPE in Raw servlet (ticket 137)

• Fix Raw link path generation that does not respect web.forwardSlashCharacter (ticket 139)

• Do not log query parameter passwords when Redmine authentication fails (pull request #215, ticket 466)

• Fix NPE in RepositoryNamePanel for anonymous admins (issue 490, ticket 147)

• Fix repo creation with initial commit when the creator does not have an email address (issue 458, ticket 149)

• Fix Edit Repository page missing owners from owners list (issue 480, ticket 150)

• Fix NPEs when handling tickets with non-existent milestones (ticket 152)

• Quote all Lucene query args that have non-alphanumberic characters (issue 483, issue 469, ticket 153)

• Fix 0-length files from raw servlet when file does not exist (issue 489, ticket 154)

• Fix raw servlet failures with long project names (issue 478, ticket 163)

• New ticket responsible selections are missing users with RW access (issue 476, ticket 170)

• Fix NPE in TicketListPanel due to missing repository (issue 451, ticket 171)

• Fix MigrateTickets failure for view-restricted repositories (issue 475, ticket 173)

• Fix repository deletion bug where the Lucene ticket index was not purged (issue 468, ticket 174)

• Fix Jenkins post-receive script repository url (pull request #219, ticket 175)

• Fix potential NPE in retrieving a ticket comment (issue 503, ticket 179)

• Fix bug in migrating tickets to the BranchTicketService (issue 474, ticket 183)

• Fix failure to clear/delete a ticket topic and description (issue 505, ticket 188)

• Fix cropped ticket status indicators (ticket 197)

• Fix bug in raw servlet extracting repository out of the path (pull request #222, ticket 203)

• Improve relative path determiniation using Java 7 Paths (issue 511, ticket 204)

改进

• Remove git.streamFileThreshold setting and documentation (ticket 119)

• Update Korean translation (pull request #206, ticket 120)

• Add additional documentation for web.canonicalUrl (pull request #205, issue 453, ticket 121)

• Remove Wicket references from non-Wicket packages (ticket 129)

• LDAP user accounts now clear email address when unset in LDAP (issue 456, ticket 134)

• Update French translation (pull request #210, ticket 140)

• Update authentication documentation (pull request #213, ticket 142)

• Pretty print Perl modules (pull request #216, ticket 144)

• Pretty print C/C++ headers (pull request #207, ticket 145)

• Do not stamp raw servlet responses with cache-control headers (issue 489, ticket 148)

• Treat UTF-9 and UTF-18 (both fake encodings) as UTF-8 (issue 486, ticket 151)

• Allow Lucene indexing period to be configurable (ticket 161)

• Do not display stacktraces for bad requests in servlets (issue 497, ticket 169)

• Preserve branch ref in commits, tree, and docs navbar links (issue 501, ticket 176)

• Disable Edit User Page permission checkboxes if admin/fork/create permission is inherited (issue 196, ticket 177)

• Explicitly declare page subclasses that reference commits (issue 503, ticket 180)

• Explicitly attempt to register BouncyCastle as a JCE provider (ticket 194)

• Treat .ico and .jpeg files as images (pull request #221, ticket 202)

组件

• Add support for GITBLIT_HOME as a -D system property (pull request #212, ticket 141, ticket 185)

• Add support for GITBLIT_HOME as an environment variable (ticket 193)

• Add install script for Fedora (pull request #207, ticket 146)

• Add NO CHANGE REQUIRED ticket status (ticket 182)

依赖改进

• JGit 3.5.1

• Jetty 9.2.3

• SSHD 0.12.0

Gitblit 是一个纯 Java 库用来管理、查看和处理 Git 资料库。相当于 Git 的 Java 管理工具。

新闻来源：Gitblit 1.6.1 发布，Java 的 Git 管理工具