Gitea - Package Updates

Package Updates

[1.38.3]

Update gitea to 1.26.3
Full Changelog
fix(actions)!: require merged MR to bypass fork MR approval gate (#38010) (#38041)
fix(hostmatcher): patch incorrect private list (#38170) (#38173)
fix: Various security fixes (#38103) (#38151)
fix: allow git clone of private repos with anonymous code access (#38074) (#38146)
fix(hostmatcher): block reserved IP ranges from external/private filters (#38039) (#38059)
feat(api): add Link header in ListForks (#38052) (#38063)
fix: Fix the panic when ssh remote lfs endpoint parsing failure (#38026) (#38158)
fix(api): nil pointer panic when filtering tracked times by a non-existent user (#38112) (#38115)
fix(releases): generate notes for initial tag (#37697) (#37986)
fix: Fix issue target branch selection for non-collaborators (#36916) (#38164)

Package Updates

[1.38.4]

Update gitea to 1.26.4
Full Changelog
fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) (#38183)
fix: walk git log context error handling (#38182) (#38185)

Package Updates

[1.39.0]

Update gitea to 1.27.0
Full Changelog
Feat(actions)!: improve support for reusable workflows (#37478)
Use Content-Security-Policy: script nonce (#37232)
Feat(actions): add workflow status badge modal (#38196)
Feat(actions): support owner-level and global scoped workflows (#38154)
Feat(repo): split repository creation limit into user and org scopes (#37872)
Feat(actions): add job summaries (GITHUB_STEP_SUMMARY) (#37500)
Allow multiple projects per issue and pull requests (#36784)
Fix(util): reject invalid characters between time-estimate units (#38416) (#38423)
Fix(workflows): branch protection status checks fail when workflow uses on: paths filter (#38237) (#38302)
Fix(actions): allow Actions bot to push to protected branches (#38284) (#38293)

Package Updates

[1.39.1]

Update gitea to 1.27.1
Full Changelog
fix(oauth2): enforce mandatory 2FA policy on OAuth2 authorize/grant endpoints (#38591) (#38606)
fix(api): align Swagger schemas for UserSettings and TopicListResponse (#38590) (#38592)
enhance: improve diff contrast in light and dark themes (#37477) (#38574)
fix: skip OIDC end-session after password login for OAuth2 users (#38439) (#38666)
fix: make Actions log parser support multiple line message encoding (#38659) (#38664)
fix(actions): use base branch ref for pull_request_target context (#38636) (#38657)
fix(actions): skip already-approved runs in ApproveRuns (#38653) (#38654)
fix: orgmode render include path (#38642) (#38645)
fix(actions): cancel tasks immediately when the runner stopped reporting (#38616) (#38644)
fix(issues): fix label bulk-load key and reduce log noise in LoadLabel (#38632) (#38643)

Package Updates

[1.40.0]

Package Updates

[1.40.1]

Update gitea to 1.27.2
Full Changelog
Fix: update collaborator access mode and httpsign (#38894, #38862) (#38895)
Refactor: external render (#38885) (#38898)
Fix(actions): resolve pull_request_target reusable workflows at the base commit (#38886) (#38897)
Refactor: markup render (#38864) (#38869)
Fix(auth): set WebAuthn user verification per request (#38805) (#38810)
enhance: add missing npm package metadata properties (#38826) (#38831)
fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899) (#38908)
fix(lfs): accept successful transfer responses (#38866) (#38875)
fix(storage): fix Azure Blob dump failing with file does not exist (#38814) (#38828)
fix(migrations): use all configured GitHub tokens (#38841) (#38846)

Package Updates

[1.40.2]

Update gitea to 1.27.3
Full Changelog
fix(packages): restrict/limited/token-scope access (#39041, #39043, #39044, #39047, #39046) (#39058)
fix(actions): enforce fork pull request trust boundaries (#39005) (#39018)
fix(git): restrict hook permissions (#39008) (#39016)
fix: avoid enumerating every public repository in issue search (#38992) (#39000)
enhance: add permalinks to pull request reviews (#38849) (#39036)
fix(actions): keep step-level continue-on-error expressions unevaluated (#39141) (#39148)
fix(pull): keep the merged state in sync with git (#39062) (#39118)
fix: resolve YAML anchors and aliases in Actions workflows (#38984) (#38996)
fix(indexer): correct bleve indexer token filters (#38853) (#38951)
fix(ui): respect FEED_PAGING_NUM on the dashboard feed (#38935) (#38936)

Cloudron Forum