8 Releases 8 Tags

RSS Feed

• 1.27.1 6b535de9c9

  Compare

  Release 1.27.1 Stable

  demus released this 2026-07-28 00:18:58 +02:00 | 0 commits to main since this release

  v1.27.1

  SECURITY

  • fix(oauth2): enforce mandatory 2FA policy on OAuth2 authorize/grant endpoints (https://github.com/go-gitea/gitea/pull/38591) (https://github.com/go-gitea/gitea/pull/38606)

  API

  • fix(api): align Swagger schemas for UserSettings and TopicListResponse (https://github.com/go-gitea/gitea/pull/38590) (https://github.com/go-gitea/gitea/pull/38592)

  ENHANCEMENTS

  • enhance: improve diff contrast in light and dark themes (https://github.com/go-gitea/gitea/pull/37477) (https://github.com/go-gitea/gitea/pull/38574)

  BUGFIXES

  • fix: skip OIDC end-session after password login for OAuth2 users (https://github.com/go-gitea/gitea/pull/38439) (https://github.com/go-gitea/gitea/pull/38666)
  • fix: make Actions log parser support multiple line message encoding (https://github.com/go-gitea/gitea/pull/38659) (https://github.com/go-gitea/gitea/pull/38664)
  • fix(actions): use base branch ref for pull_request_target context (https://github.com/go-gitea/gitea/pull/38636) (https://github.com/go-gitea/gitea/pull/38657)
  • fix(actions): skip already-approved runs in ApproveRuns (https://github.com/go-gitea/gitea/pull/38653) (https://github.com/go-gitea/gitea/pull/38654)
  • fix: orgmode render include path (https://github.com/go-gitea/gitea/pull/38642) (https://github.com/go-gitea/gitea/pull/38645)
  • fix(actions): cancel tasks immediately when the runner stopped reporting (https://github.com/go-gitea/gitea/pull/38616) (https://github.com/go-gitea/gitea/pull/38644)
  • fix(issues): fix label bulk-load key and reduce log noise in LoadLabel (https://github.com/go-gitea/gitea/pull/38632) (https://github.com/go-gitea/gitea/pull/38643)
  • fix(actions): improve runner list status sorting, labels and task job links (https://github.com/go-gitea/gitea/pull/38586) (https://github.com/go-gitea/gitea/pull/38633)
  • fix(actions): correctness and hardening fixes (https://github.com/go-gitea/gitea/pull/38518) (https://github.com/go-gitea/gitea/pull/38631)
  • fix(repo): prevent double-write redirect collisions on dependency errors, fix ui (https://github.com/go-gitea/gitea/pull/38627) (https://github.com/go-gitea/gitea/pull/38628)
  • fix: delete repo-scoped rows of seven more tables when deleting a repository (https://github.com/go-gitea/gitea/pull/38534) (https://github.com/go-gitea/gitea/pull/38618)
  • fix(webhook): remove slack channel name check (https://github.com/go-gitea/gitea/pull/38608) (https://github.com/go-gitea/gitea/pull/38612)
  • fix: download dropdown menu clipped on the branches page (https://github.com/go-gitea/gitea/pull/38604) (https://github.com/go-gitea/gitea/pull/38609)
  • fix(project): prevent database mutations on invalid MoveIssues payload (https://github.com/go-gitea/gitea/pull/38600) (https://github.com/go-gitea/gitea/pull/38602)
  • fix(actions): make SingleWorkflow.Marshal round-trip multi-line run blocks (stop silent job stranding) (https://github.com/go-gitea/gitea/pull/38520) (https://github.com/go-gitea/gitea/pull/38599)
  • fix(file-tree): handle submodule links and missing view container (https://github.com/go-gitea/gitea/pull/38033) (https://github.com/go-gitea/gitea/pull/38589)
  • fix(actions): fail unexpandable reusable workflow callers and decouple the job emitter's cross-run processing (https://github.com/go-gitea/gitea/pull/38565) (https://github.com/go-gitea/gitea/pull/38587)
  • fix: keep serving valid ACME cert when renewal fails at startup (https://github.com/go-gitea/gitea/pull/38554) (https://github.com/go-gitea/gitea/pull/38583)
  • fix: branch protection user list (https://github.com/go-gitea/gitea/pull/38570) (https://github.com/go-gitea/gitea/pull/38584)
  • fix(pulls): respect diff.orderFile in diff file tree (https://github.com/go-gitea/gitea/pull/38566) (https://github.com/go-gitea/gitea/pull/38578)
  • fix(issue): make issue action (issue list batch operation) elements have correct attributes (https://github.com/go-gitea/gitea/pull/38575) (https://github.com/go-gitea/gitea/pull/38580)
  • fix(actions): support matrix when evaluating workflow if expression (https://github.com/go-gitea/gitea/pull/38474) (https://github.com/go-gitea/gitea/pull/38557)
  • fix(actions): align status icon span for Safari rendering (https://github.com/go-gitea/gitea/pull/38558) (https://github.com/go-gitea/gitea/pull/38562)
  • fix: revert git clone http redirection forbidden (https://github.com/go-gitea/gitea/pull/38530) (https://github.com/go-gitea/gitea/pull/38545)
  • fix: clean up orphaned user-keyed tables in deleteUser (https://github.com/go-gitea/gitea/pull/38511) (https://github.com/go-gitea/gitea/pull/38514)
  • fix(actions): coerce workflow_dispatch boolean inputs to native types (https://github.com/go-gitea/gitea/pull/38472) (https://github.com/go-gitea/gitea/pull/38521)
  • fix: make the merge box button red if some checks fail (https://github.com/go-gitea/gitea/pull/38508) (https://github.com/go-gitea/gitea/pull/38516)
  • fix(pull): sign the commit when updating a branch by merge (https://github.com/go-gitea/gitea/pull/38441) (https://github.com/go-gitea/gitea/pull/38499)
  • fix: make commit message merge correctly (https://github.com/go-gitea/gitea/pull/38490) (https://github.com/go-gitea/gitea/pull/38502)
  • fix(actions): explain why a blocked or waiting job has not started (https://github.com/go-gitea/gitea/pull/38476) (https://github.com/go-gitea/gitea/pull/38498)
  • fix(actions): make cancelled() work in job if evaluation (https://github.com/go-gitea/gitea/pull/38495) (https://github.com/go-gitea/gitea/pull/38497)
  • fix(actions): show retention info on hover for expired artifacts (https://github.com/go-gitea/gitea/pull/38477) (https://github.com/go-gitea/gitea/pull/38493)
  • fix(actions): group reusable-workflow matrix legs in the workflow graph (https://github.com/go-gitea/gitea/pull/38475) (https://github.com/go-gitea/gitea/pull/38492)
  • fix: full file highlighting for git diff with CR char (https://github.com/go-gitea/gitea/pull/38484) (https://github.com/go-gitea/gitea/pull/38491)
  • fix(packages): serve noarch Alpine index for any requested architecture (https://github.com/go-gitea/gitea/pull/38479) (https://github.com/go-gitea/gitea/pull/38486)
  • fix: 500 error when updating user visibility (https://github.com/go-gitea/gitea/pull/38480) (https://github.com/go-gitea/gitea/pull/38483)
  • fix(actions): make job list item fully clickable (https://github.com/go-gitea/gitea/pull/38462) (https://github.com/go-gitea/gitea/pull/38471)
  • fix: mail template for push event (https://github.com/go-gitea/gitea/pull/38467) (https://github.com/go-gitea/gitea/pull/38468)
  • fix: make "test push webhook" always work (https://github.com/go-gitea/gitea/pull/38425) (https://github.com/go-gitea/gitea/pull/38455)
  • fix(actions): prevent bulk actions from affecting all runners (https://github.com/go-gitea/gitea/pull/38453) (https://github.com/go-gitea/gitea/pull/38457)
  • fix(org): align follow button and wrap description (https://github.com/go-gitea/gitea/pull/38448) (https://github.com/go-gitea/gitea/pull/38454)
  • fix(actions): populate github.event for scheduled runs (https://github.com/go-gitea/gitea/pull/38446) (https://github.com/go-gitea/gitea/pull/38452)

  MISC

  • refactor: git patch apply (https://github.com/go-gitea/gitea/pull/38637) (https://github.com/go-gitea/gitea/pull/38638)

  v1.27.0

  BREAKING

  • Feat(actions)!: improve support for reusable workflows (https://github.com/go-gitea/gitea/pull/37478)
  • Use Content-Security-Policy: script nonce (https://github.com/go-gitea/gitea/pull/37232)

  SECURITY

  • Fix: various security fixes (https://github.com/go-gitea/gitea/pull/38406) (https://github.com/go-gitea/gitea/pull/38426)
  • Fix(security): harden access checks and migration validation (https://github.com/go-gitea/gitea/pull/38324) (https://github.com/go-gitea/gitea/pull/38400)
  • Fix: enforce public-only token scope and harden push options / locale parsing (https://github.com/go-gitea/gitea/pull/38323) (https://github.com/go-gitea/gitea/pull/38399)
  • Fix(pull): re-evaluate review official flag on target branch change (https://github.com/go-gitea/gitea/pull/38319) (https://github.com/go-gitea/gitea/pull/38402)
  • Fix(api): stop leaking private repo metadata after access revocation (https://github.com/go-gitea/gitea/pull/38321) (https://github.com/go-gitea/gitea/pull/38390)
  • Fix(lfs): require proof of possession for cross-repo objects (https://github.com/go-gitea/gitea/pull/38322) (https://github.com/go-gitea/gitea/pull/38389)
  • Fix(mirror): disable HTTP redirects on pull mirror sync (https://github.com/go-gitea/gitea/pull/38320) (https://github.com/go-gitea/gitea/pull/38367)
  • Fix: golang html template url escaping (https://github.com/go-gitea/gitea/pull/38363) (https://github.com/go-gitea/gitea/pull/38369)
  • Fix(release): validate web attachment renames against allowed types (https://github.com/go-gitea/gitea/pull/38314) (https://github.com/go-gitea/gitea/pull/38328)
  • Fix(release): gate draft release attachments on web download endpoints (https://github.com/go-gitea/gitea/pull/38318) (https://github.com/go-gitea/gitea/pull/38325)
  • Fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] (https://github.com/go-gitea/gitea/pull/37786)
  • Fix(oauth): restrict introspection to the token's client (https://github.com/go-gitea/gitea/pull/38042)
  • Fix(api): don't expose private org membership via public_members (https://github.com/go-gitea/gitea/pull/38145)
  • Fix(actions): deny fork-PR cross-repo access via collaborative owner (https://github.com/go-gitea/gitea/pull/38214)
  • Fix(migrations): prevent path traversal in repository restore (https://github.com/go-gitea/gitea/pull/38215)

  FEATURES

  • Feat(actions): add workflow status badge modal (https://github.com/go-gitea/gitea/pull/38196)
  • Feat(actions): support owner-level and global scoped workflows (https://github.com/go-gitea/gitea/pull/38154)
  • Feat(api): support ref suffixes in compare (https://github.com/go-gitea/gitea/pull/38148)
  • Feat(actions): implement jobs.<job_id>.continue-on-error (https://github.com/go-gitea/gitea/pull/38100)
  • Feat(actions): show run status on browser tab favicon (https://github.com/go-gitea/gitea/pull/38071)
  • Feat(api): add token introspection and self-deletion endpoint (https://github.com/go-gitea/gitea/pull/37995)
  • Feat(api): add q parameter to list branches API for server-side filtering (https://github.com/go-gitea/gitea/pull/37982)
  • Feat(repo): split repository creation limit into user and org scopes (https://github.com/go-gitea/gitea/pull/37872)
  • Feat(actions): bulk delete, disable and enable runners in admin UI (https://github.com/go-gitea/gitea/pull/37869)
  • Feat(actions): List workflows that were executed once but got removed from the default branch (https://github.com/go-gitea/gitea/pull/37835)
  • Feat(org): add team visibility so org members can discover teams (https://github.com/go-gitea/gitea/pull/37680)
  • Feat: add raw diff/patch endpoint for repository comparisons (https://github.com/go-gitea/gitea/pull/37632)
  • Feat: Add avatar stacks (https://github.com/go-gitea/gitea/pull/37594)
  • Feat(actions): add job summaries (GITHUB_STEP_SUMMARY) (https://github.com/go-gitea/gitea/pull/37500)
  • Feat(web): Add Jupyter Notebook (.ipynb) Rendering Support (https://github.com/go-gitea/gitea/pull/37433)
  • Support for Custom URI Schemes in OAuth2 Redirect URIs (https://github.com/go-gitea/gitea/pull/37356)
  • Feat(orgs): Add search bar for organization members tab page (https://github.com/go-gitea/gitea/pull/37347)
  • Feat(api): Add assignees APIs (https://github.com/go-gitea/gitea/pull/37330)
  • Feat(api): Add GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs (https://github.com/go-gitea/gitea/pull/37196)
  • Serve OpenAPI 3.0 spec at /openapi.v1.json (https://github.com/go-gitea/gitea/pull/37038)
  • Add project column picker to issue and pull request sidebar (https://github.com/go-gitea/gitea/pull/37037)
  • Allow multiple projects per issue and pull requests (https://github.com/go-gitea/gitea/pull/36784)
  • Feat(ui): add "follow rename" to file commit history list (https://github.com/go-gitea/gitea/pull/34994)
  • Feat(ssh): auto generate additional ssh keys (https://github.com/go-gitea/gitea/pull/33974)

  ENHANCEMENTS

  • Enhance(actions): only create filtered-out workflow commit status for required contexts (https://github.com/go-gitea/gitea/pull/38371) (https://github.com/go-gitea/gitea/pull/38385)
  • Enhance: allow builtin default git config options to be overridden (https://github.com/go-gitea/gitea/pull/38172)
  • Enhance: allow MathML core elements (https://github.com/go-gitea/gitea/pull/38034)
  • Enhance(markup): improve issue title rendering (https://github.com/go-gitea/gitea/pull/37908)
  • Enhance(actions): set descriptive browser tab title on run view (https://github.com/go-gitea/gitea/pull/37870)
  • Enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 (https://github.com/go-gitea/gitea/pull/37866)
  • Enhance(actions): show workflow name from YAML instead of filename (https://github.com/go-gitea/gitea/pull/37833)
  • Feat(actions): add before/after to PR synchronize event payload (https://github.com/go-gitea/gitea/pull/37827)
  • Enhance(actions): add branch filters to run list (https://github.com/go-gitea/gitea/pull/37826)
  • Enhance(actions): Make Summary UI more beautiful with more infos (https://github.com/go-gitea/gitea/pull/37824)
  • Feat: add copy button to action step header, improve other copy buttons (https://github.com/go-gitea/gitea/pull/37744)
  • Fix(icon): use repo-forked icon to display forks count (https://github.com/go-gitea/gitea/pull/37731)
  • Feat(api): add sort and order query parameters to job list endpoints (https://github.com/go-gitea/gitea/pull/37672)
  • Feat(api): add last_sync to repository API (https://github.com/go-gitea/gitea/pull/37566)
  • Enhance: Adjust Workflow Graph styling (https://github.com/go-gitea/gitea/pull/37497)
  • Improve code editor text selection and clean up lint enablement (https://github.com/go-gitea/gitea/pull/37474)
  • Add mirror auth updates to repo edit API and settings (https://github.com/go-gitea/gitea/pull/37468)
  • Replace olivere/elastic with REST API client, add OpenSearch support (https://github.com/go-gitea/gitea/pull/37411)
  • Feat: Add default PR branch update style setting (https://github.com/go-gitea/gitea/pull/37410)
  • Fix inconsistent disabled styling on logged-out repo header buttons (https://github.com/go-gitea/gitea/pull/37406)
  • Allow fast-forward-only merge when signed commits are required (https://github.com/go-gitea/gitea/pull/37335)
  • Enhance styling in actions page (https://github.com/go-gitea/gitea/pull/37323)
  • Fix: improve actions status icons and texts (https://github.com/go-gitea/gitea/pull/37206)
  • Make Markdown fenced code block work with more syntaxes (https://github.com/go-gitea/gitea/pull/37154)
  • Fix: Sort action run jobs by JobID and Name with matrix examples (https://github.com/go-gitea/gitea/pull/37046)
  • Add API endpoint to reply to pull request review comments (https://github.com/go-gitea/gitea/pull/36683)

  PERFORMANCE

  • Perf(actions): debounce runner heartbeat writes and throttle task picks (https://github.com/go-gitea/gitea/pull/38281) (https://github.com/go-gitea/gitea/pull/38368)
  • Perf(web): sort the action_run query by a repo-scoped index when possible (https://github.com/go-gitea/gitea/pull/38155)
  • Perf: Various performance regression fixes (https://github.com/go-gitea/gitea/pull/38078)
  • Perf: extend action c_u index to include created_unix for faster dashboard feeds (https://github.com/go-gitea/gitea/pull/38076)
  • Batch-load related data in actions run, job, and task API endpoints (https://github.com/go-gitea/gitea/pull/37032)

  BUGFIXES

  • Fix(util): reject invalid characters between time-estimate units (https://github.com/go-gitea/gitea/pull/38416) (https://github.com/go-gitea/gitea/pull/38423)
  • Fix: represent a deleted assignee team as a Ghost team (https://github.com/go-gitea/gitea/pull/38413) (https://github.com/go-gitea/gitea/pull/38419)
  • Fix(turnstile): route CAPTCHA verification through the configured proxy (https://github.com/go-gitea/gitea/pull/38412) (https://github.com/go-gitea/gitea/pull/38420)
  • Fix: refresh pull request merge box when the commit status is pending (https://github.com/go-gitea/gitea/pull/38410) (https://github.com/go-gitea/gitea/pull/38411)
  • Fix: actions task state concurrent update (https://github.com/go-gitea/gitea/pull/38405) (https://github.com/go-gitea/gitea/pull/38409)
  • Fix(actions): keep workflow run trailing on one row with long branch names (https://github.com/go-gitea/gitea/pull/38382) (https://github.com/go-gitea/gitea/pull/38403)
  • Fix(web): use locale-aware date formatting for contribution calendar tooltips (https://github.com/go-gitea/gitea/pull/38398) (https://github.com/go-gitea/gitea/pull/38401)
  • Fix: co-author detection (https://github.com/go-gitea/gitea/pull/38392) (https://github.com/go-gitea/gitea/pull/38397)
  • Fix: incorrect co-author detection on commit page (https://github.com/go-gitea/gitea/pull/38386) (https://github.com/go-gitea/gitea/pull/38387)
  • Fix(ui): restore commits table column widths (https://github.com/go-gitea/gitea/pull/38379) (https://github.com/go-gitea/gitea/pull/38383)
  • Fix: minio init check (https://github.com/go-gitea/gitea/pull/38355) (https://github.com/go-gitea/gitea/pull/38361)
  • Fix: org project view assignee list (https://github.com/go-gitea/gitea/pull/38357) (https://github.com/go-gitea/gitea/pull/38360)
  • Fix(actions): release claimed task if context is cancelled during FetchTask (https://github.com/go-gitea/gitea/pull/38343) (https://github.com/go-gitea/gitea/pull/38347)
  • Fix(actions): make runner list pagination order deterministic (https://github.com/go-gitea/gitea/pull/38313) (https://github.com/go-gitea/gitea/pull/38327)
  • Fix: Improve since/until when counting commits for X-Total-Count (https://github.com/go-gitea/gitea/pull/38243) (https://github.com/go-gitea/gitea/pull/38304)
  • Fix(actions): prevent chevron overlap with log text when timestamps are enabled (https://github.com/go-gitea/gitea/pull/38227) (https://github.com/go-gitea/gitea/pull/38307)
  • Fix(workflows): branch protection status checks fail when workflow uses on: paths filter (https://github.com/go-gitea/gitea/pull/38237) (https://github.com/go-gitea/gitea/pull/38302)
  • Fix(oauth2): persist linkAccountData during auto-link 2FA flow (https://github.com/go-gitea/gitea/pull/38274) (https://github.com/go-gitea/gitea/pull/38295)
  • Fix(actions): allow Actions bot to push to protected branches (https://github.com/go-gitea/gitea/pull/38284) (https://github.com/go-gitea/gitea/pull/38293)
  • Fix(actions): include all aggregable run statuses in status filter (https://github.com/go-gitea/gitea/pull/38280) (https://github.com/go-gitea/gitea/pull/38287)
  • Fix(archiver): use serializable repo-archive queue payload (https://github.com/go-gitea/gitea/pull/38273) (https://github.com/go-gitea/gitea/pull/38283)
  • Fix: update npm dependencies, fix misc issues (https://github.com/go-gitea/gitea/pull/38257)
  • Fix(api): respect since/until when counting commits for X-Total-Count (https://github.com/go-gitea/gitea/pull/38204)
  • Fix: codemirror regressions (https://github.com/go-gitea/gitea/pull/38248)
  • Fix(api): support HEAD requests on all API GET endpoints (https://github.com/go-gitea/gitea/pull/38245)
  • Fix(actions): Cleanup workflow status badge code (https://github.com/go-gitea/gitea/pull/38241)
  • Fix(web): Correctly align the "disabled" label on larger workflow names (https://github.com/go-gitea/gitea/pull/38240)
  • Fix(actions): don't swallow HTML entities into linkified URLs (https://github.com/go-gitea/gitea/pull/38239)
  • Fix(packages): accept npm "repository" and "bin" in string form (https://github.com/go-gitea/gitea/pull/38236)
  • Fix(actions): fix 500 error when canceling a canceling task (https://github.com/go-gitea/gitea/pull/38223)
  • Fix(deps): update module golang.org/x/image to v0.43.0 [security] (https://github.com/go-gitea/gitea/pull/38219)
  • Fix(mssql): convert legacy DATETIME columns to DATETIME2 (https://github.com/go-gitea/gitea/pull/38216)
  • Fix(api): deny private org member enumeration via /members (https://github.com/go-gitea/gitea/pull/38213)
  • Fix(actions): ensure all waiting jobs get runners in large workflows (https://github.com/go-gitea/gitea/pull/38200)
  • Fix(deps): update go dependencies (https://github.com/go-gitea/gitea/pull/38194)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/38193)
  • Fix(cli): default must-change-password to false for bot users (https://github.com/go-gitea/gitea/pull/38175)
  • Fix(actions): show run index in run view and fix summary graph height (https://github.com/go-gitea/gitea/pull/38165)
  • Fix: csp (https://github.com/go-gitea/gitea/pull/38162)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/38123)
  • Fix(mssql): expand legacy issue and comment long-text columns (https://github.com/go-gitea/gitea/pull/38120)
  • Fix(packages): validate debian distribution and component names (https://github.com/go-gitea/gitea/pull/38116)
  • Fix(packages): validate module version in goproxy ParsePackage (https://github.com/go-gitea/gitea/pull/38104)
  • Fix(deps): update dependency esbuild to v0.28.1 [security] (https://github.com/go-gitea/gitea/pull/38097)
  • Fix: git push hook post receive (https://github.com/go-gitea/gitea/pull/38089)
  • Fix(ui): prevent commit status popup overflowing its row (https://github.com/go-gitea/gitea/pull/38081)
  • Fix: validate gem name in rubygems parseMetadataFile (https://github.com/go-gitea/gitea/pull/38061)
  • Fix: commit display name (https://github.com/go-gitea/gitea/pull/38057)
  • Fix: csp regressions (https://github.com/go-gitea/gitea/pull/38047)
  • Fix: api error message (https://github.com/go-gitea/gitea/pull/38031)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/38029)
  • Fix: pgsql lint (https://github.com/go-gitea/gitea/pull/38022)
  • Fix(indexer): fix assignee filters in issue search (https://github.com/go-gitea/gitea/pull/38021)
  • Fix: various dropdown problems (https://github.com/go-gitea/gitea/pull/38020)
  • Fix: refactor git error handling and make archive streaming handle non-existing commit id (https://github.com/go-gitea/gitea/pull/38007)
  • Fix: raise git required version to 2.13 (https://github.com/go-gitea/gitea/pull/37996)
  • Fix: remove "no-transfrom" from the cache-control header (https://github.com/go-gitea/gitea/pull/37985)
  • Fix(deps): update module github.com/google/go-github/v87 to v88 (https://github.com/go-gitea/gitea/pull/37971)
  • Fix: use committer time where ever possible as default (https://github.com/go-gitea/gitea/pull/37969)
  • Fix(deps): update npm dependencies, remove nolyfill (https://github.com/go-gitea/gitea/pull/37968)
  • Fix(deps): update go dependencies (https://github.com/go-gitea/gitea/pull/37967)
  • Fix(pull): preserve squash message trailers and additional commit messages (https://github.com/go-gitea/gitea/pull/37954)
  • Fix(deps): update module golang.org/x/image to v0.41.0 [security] (https://github.com/go-gitea/gitea/pull/37904)
  • Fix: support ##[command] log prefix in action run UI (https://github.com/go-gitea/gitea/pull/37882)
  • Fix(deps): update module github.com/google/go-github/v86 to v87 (https://github.com/go-gitea/gitea/pull/37845)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/37844)
  • Fix(deps): update go dependencies (https://github.com/go-gitea/gitea/pull/37841)
  • Fix(frontend): resolve Vite assets by manifest source path (https://github.com/go-gitea/gitea/pull/37836)
  • Fix(locales): Replace hardcoded strings (https://github.com/go-gitea/gitea/pull/37788)
  • Fix(packages): render markdown links relative to linked repo (https://github.com/go-gitea/gitea/pull/37676)
  • Fix: persist mirror repository metadata (https://github.com/go-gitea/gitea/pull/37519)
  • Fix cmd tests by mocking builtin paths (https://github.com/go-gitea/gitea/pull/37369)
  • Add form-fetch-action to some forms, fix "fetch action" resp bug (https://github.com/go-gitea/gitea/pull/37305)
  • Feat: execute post run cleanup when workflow is cancelled (https://github.com/go-gitea/gitea/pull/37275)
  • Fix relative-time error and improve global error handler (https://github.com/go-gitea/gitea/pull/37241)
  • Refactor flash message and remove SanitizeHTML template func (https://github.com/go-gitea/gitea/pull/37179)

  TESTING

  • Test(e2e): fix race in pdf file render test (https://github.com/go-gitea/gitea/pull/38380) (https://github.com/go-gitea/gitea/pull/38381)
  • Test: compare key file contents instead of FileInfo in TestInitKeys (https://github.com/go-gitea/gitea/pull/38330) (https://github.com/go-gitea/gitea/pull/38331)
  • Test: speed up two tests (https://github.com/go-gitea/gitea/pull/37905)
  • Test: Fix random failure test (https://github.com/go-gitea/gitea/pull/37887)
  • Test: fix flaky issue-comment close test (https://github.com/go-gitea/gitea/pull/37880)
  • Test: enable WAL for sqlite integration tests (https://github.com/go-gitea/gitea/pull/37861)
  • Test: fix flaky TestResourceIndex and reduce its runtime (https://github.com/go-gitea/gitea/pull/37847)
  • Test: run TestAPIRepoMigrate offline via a local clone source (https://github.com/go-gitea/gitea/pull/37817)
  • Ci: shard tests and reduce redundant work (https://github.com/go-gitea/gitea/pull/37618)
  • Test(e2e): run playwright via container (https://github.com/go-gitea/gitea/pull/37300)
  • Remove external service dependencies in migration tests (https://github.com/go-gitea/gitea/pull/36866)

  DOCS

  • Docs: update changelog for 1.26.3 & 1.26.4 (https://github.com/go-gitea/gitea/pull/38178)
  • Docs: fix duplicated word in foreachref doc comment (https://github.com/go-gitea/gitea/pull/38161)
  • Docs: Clarify criteria for becoming a merger (https://github.com/go-gitea/gitea/pull/38113)
  • Docs: Publish TOC Election Result 2026 (https://github.com/go-gitea/gitea/pull/38111)
  • Docs: mark openapi3 as autogenerated in attributes (https://github.com/go-gitea/gitea/pull/37963)
  • Docs: add development setup guide (https://github.com/go-gitea/gitea/pull/37960)

  MISC

  • Revert(sign): restore gpg (https://github.com/go-gitea/gitea/pull/38251)
  • Refactor: replace legacy delete-button with link-action (https://github.com/go-gitea/gitea/pull/38143)
  • Refactor(actions): read runner capabilities from proto field (https://github.com/go-gitea/gitea/pull/38068)
  • Refactor(api): clarify APIError message usage and fix legacy lint error (https://github.com/go-gitea/gitea/pull/38012)
  • Refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (https://github.com/go-gitea/gitea/pull/37977)
  • Fix(deps): update go dependencies (https://github.com/go-gitea/gitea/pull/37851)
  • Ci: Fix sync PR labels from the conventional-commit title (https://github.com/go-gitea/gitea/pull/37784) (https://github.com/go-gitea/gitea/pull/37825)
  • Ci: tweak files-changed, add free-disk-space (https://github.com/go-gitea/gitea/pull/37819)
  • Fix(deps): update module golang.org/x/crypto to v0.52.0 [security] (https://github.com/go-gitea/gitea/pull/37806)
  • Test(e2e): add comment, release, star, PR and fork tests (https://github.com/go-gitea/gitea/pull/37800)
  • Chore: simplify issue and pull request templates (https://github.com/go-gitea/gitea/pull/37799)
  • Chore: Update giteabot to fix failure when backport (https://github.com/go-gitea/gitea/pull/37789)
  • Fix(api): handle partial failures in push mirror synchronization gracefully (https://github.com/go-gitea/gitea/pull/37782)
  • Fix(deps): update module gitlab.com/gitlab-org/api/client-go/v2 to v2.26.0 (https://github.com/go-gitea/gitea/pull/37771)
  • Ci: split giteabot workflow (https://github.com/go-gitea/gitea/pull/37770)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/37768)
  • Refactor(waitgroup): replace Add/Done goroutines with WaitGroup.Go (https://github.com/go-gitea/gitea/pull/37764)
  • Fix(deps): update module google.golang.org/grpc to v1.81.1 (https://github.com/go-gitea/gitea/pull/37762)
  • Ci: fix cache-related issues (https://github.com/go-gitea/gitea/pull/37761)
  • Chore: fix tests (https://github.com/go-gitea/gitea/pull/37760)
  • Fix(deps): update module github.com/google/go-github/v85 to v86 (https://github.com/go-gitea/gitea/pull/37754)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/37753)
  • Fix(deps): update go dependencies (https://github.com/go-gitea/gitea/pull/37752)
  • Chore(deps): update action dependencies (https://github.com/go-gitea/gitea/pull/37751)
  • Fix(markup): wrap indented code blocks for the code-copy button (https://github.com/go-gitea/gitea/pull/37748)
  • Chore(db): introduce db.Session and db.EngineMigration interfaces (https://github.com/go-gitea/gitea/pull/37746)
  • Feat(web): also display PR counts in repo list (https://github.com/go-gitea/gitea/pull/37739)
  • Refactor(glob): use strings.Builder for regexp compilation (https://github.com/go-gitea/gitea/pull/37730)
  • Chore(doctor): remove four obsolete doctor check implementations (https://github.com/go-gitea/gitea/pull/37728)
  • Refactor(org): simplify owner-team org repo creation logic (https://github.com/go-gitea/gitea/pull/37727)
  • Refactor: move workflowpattern into modules/actions (https://github.com/go-gitea/gitea/pull/37717)
  • Chore: clean up tests (https://github.com/go-gitea/gitea/pull/37715)
  • Style: misc UI fixes (https://github.com/go-gitea/gitea/pull/37691)
  • Ci: add shellcheck linter (https://github.com/go-gitea/gitea/pull/37682)
  • Fix: catch and fix more lint problems (https://github.com/go-gitea/gitea/pull/37674)
  • Fix(deps): update dependency mermaid to v11.15.0 [security], add e2e test (https://github.com/go-gitea/gitea/pull/37662)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/37647)
  • Ci(renovate): update Go import paths on major bumps (https://github.com/go-gitea/gitea/pull/37641)
  • Fix(deps): update go dependencies (major) (https://github.com/go-gitea/gitea/pull/37639)
  • Chore(deps): update action dependencies (major) (https://github.com/go-gitea/gitea/pull/37638)
  • Fix(deps): update module code.gitea.io/sdk/gitea to v0.25.0 (https://github.com/go-gitea/gitea/pull/37637)
  • Fix(deps): update npm dependencies (https://github.com/go-gitea/gitea/pull/37636)
  • Refactor(log): replace log.Critical with log.Error (https://github.com/go-gitea/gitea/pull/37624)
  • Build(deps): bump fast-uri from 3.1.0 to 3.1.2 (https://github.com/go-gitea/gitea/pull/37616)
  • Feat(oauth): Support AWS Cognito OAuth2 provider (https://github.com/go-gitea/gitea/pull/37607)
  • Chore(deps): update action dependencies (https://github.com/go-gitea/gitea/pull/37603)
  • Ci: allow chore type in PR title lint (https://github.com/go-gitea/gitea/pull/37575)
  • Refactor: only reset a database table when the table's data was changed (https://github.com/go-gitea/gitea/pull/37573)
  • Ci: increase renovate frequency and fix RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS (https://github.com/go-gitea/gitea/pull/37565)
  • Refactor: use modernc sqlite driver as default (https://github.com/go-gitea/gitea/pull/37562)
  • Docs: fix 4 typos in CHANGELOG.md (https://github.com/go-gitea/gitea/pull/37549)
  • Fix(deps): update go dependencies (https://github.com/go-gitea/gitea/pull/37541)
  • Chore(deps): update action dependencies (https://github.com/go-gitea/gitea/pull/37540)
  • Refactor pull request view (6) (https://github.com/go-gitea/gitea/pull/37522)
  • Fix: redirect early CLI console logger to stderr (https://github.com/go-gitea/gitea/pull/37507)
  • Refactor "flex-list" to "flex-divided-list" (https://github.com/go-gitea/gitea/pull/37505)
  • Refactor compare diff/pull page (1) (https://github.com/go-gitea/gitea/pull/37481)
  • Refactor pull request view (4) (https://github.com/go-gitea/gitea/pull/37451)
  • Update 1.26.1 changelog in main (https://github.com/go-gitea/gitea/pull/37442)
  • Refactor: use named Permission field in Repository struct instead of anonymous embedding (https://github.com/go-gitea/gitea/pull/37441)
  • Refactor: serve site manifest via /assets/site-manifest.json endpoint (https://github.com/go-gitea/gitea/pull/37405)
  • Remove IsValidExternalURL/IsAPIURL and use IsValidURL at call sites (https://github.com/go-gitea/gitea/pull/37364)
  • Update Block a user form (https://github.com/go-gitea/gitea/pull/37359)
  • Move review request functions to a standalone file (https://github.com/go-gitea/gitea/pull/37358)
  • Feat(security): set X-Content-Type-Options: nosniff by default (https://github.com/go-gitea/gitea/pull/37354)
  • Enable strict TypeScript, add errorMessage helper (https://github.com/go-gitea/gitea/pull/37292)
  • Refactor frontend tw-justify-between layouts to flex-left-right (https://github.com/go-gitea/gitea/pull/37291)
  • Update Nix flake (https://github.com/go-gitea/gitea/pull/37284)
  • Fix Repository transferring page (https://github.com/go-gitea/gitea/pull/37277)
  • Remove SubmitEvent polyfill (https://github.com/go-gitea/gitea/pull/37276)
  • Remove dead code identified by deadcode tool (https://github.com/go-gitea/gitea/pull/37271)
  • Upgrade go-git to v5.18.0 (https://github.com/go-gitea/gitea/pull/37268)
  • Don't add useless labels which will bother changelog generation (https://github.com/go-gitea/gitea/pull/37267)
  • Move heatmap to first-party code (https://github.com/go-gitea/gitea/pull/37262)
  • Tests/integration: simplify code (https://github.com/go-gitea/gitea/pull/37249)
  • Add pagination and search box to org teams list (https://github.com/go-gitea/gitea/pull/37245)
  • Remove error returns from crypto random helpers and callers (https://github.com/go-gitea/gitea/pull/37240)
  • Add ExternalIDClaim option for OAuth2 OIDC auth source (https://github.com/go-gitea/gitea/pull/37229)
  • Refactor: simplify ParseCatFileTreeLine and catBatchParseTreeEntries (https://github.com/go-gitea/gitea/pull/37210)
  • Refactor "htmx" to "fetch action" (https://github.com/go-gitea/gitea/pull/37208)
  • Update go js py dependencies (https://github.com/go-gitea/gitea/pull/37204)
  • Add comment for the design of "user activity time" (https://github.com/go-gitea/gitea/pull/37195)
  • Remove outdated RunUser logic (https://github.com/go-gitea/gitea/pull/37180)
  • Models/fixtures: add "DO NOT add more test data" comment to all yml fixture files (https://github.com/go-gitea/gitea/pull/37150)
  • Update javascript dependencies (https://github.com/go-gitea/gitea/pull/37142)
  • Update go dependencies (https://github.com/go-gitea/gitea/pull/37141)
  • Frontport changelog of v1.26.0-rc0 (https://github.com/go-gitea/gitea/pull/37138)
  • Introduce ActionRunAttempt to represent each execution of a run (https://github.com/go-gitea/gitea/pull/37119)
  • Workflow Artifact Info Hover (https://github.com/go-gitea/gitea/pull/37100)
  • Extend issue context popup beyond markdown content (https://github.com/go-gitea/gitea/pull/36908)
  • Add bulk repository deletion for organizations (https://github.com/go-gitea/gitea/pull/36763)
  • Feat: Add bypass allowlist for branch protection (https://github.com/go-gitea/gitea/pull/36514)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)