diff --git a/.release-notes-assistant.yaml b/.release-notes-assistant.yaml index fe65dc3241..93b0e3d0b2 100644 --- a/.release-notes-assistant.yaml +++ b/.release-notes-assistant.yaml @@ -8,6 +8,7 @@ tag-from-version: 'v%[1]d.%[2]d.%[3]d' supported-release-count: 3 branch-known: - 'v11.0/forgejo' + - 'v15.0/forgejo' cleanup-line: 'sed -Ee "s/^(feat|fix):\s*//g" -e "s/^\[WIP\] //" -e "s/^WIP: //" -e "s;\[(UI|BUG|FEAT|v.*?/forgejo)\]\s*;;g"' render-header: | diff --git a/release-notes-published/15.0.0.md b/release-notes-published/15.0.0.md index 48cdce8528..58859791b0 100644 --- a/release-notes-published/15.0.0.md +++ b/release-notes-published/15.0.0.md @@ -1 +1,597 @@ -placeholder +A [companion blog post](https://forgejo.org/2026-04-release-v15-0/) provides additional context on this major release. + + + +## Release notes + +- Security features + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10059): use `keying` for webhook secrets +- Breaking features + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11468): remove admin-level permissions from repo-specific & public-only access tokens + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11736): The template generation (`POST /repos/{template_owner}/{template_repo}/generate`) and repository deletion (`DELETE /repos/{username}/{reponame}`) APIs have been updated to require the same permission scope as creating a new repository. Either `write:user` or `write:organization` is required, depending on the owner of the repository being created or deleted. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11457): Accessing the `/repositories/{id}` API with a public-only access token did not restrict read access to only public repositories, which is now prevented. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11457): Accessing the `/repos/{owner}/{repo}/issues/{index}/dependencies` and `/repos/{owner}/{repo}/issues/{index}/blocks` APIs with a public-only access token had access to modification operations against private repositories in the *form* component of the API (not the URL component), which is now prevented. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11457): Accessing the `/repos/{owner}/{repo}/issues/{index}/dependencies` and `/repos/{owner}/{repo}/issues/{index}/blocks` APIs with a public-only access token could view dependencies or blocking issues from private repositories, which is now prevented. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11457): Accessing the `/repos/{owner}/{repo}/issues/{index}/timeline` API with a public-only access token could view comment cross-references from private repositories, which is now prevented. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11457): Accessing the `/teams/{id}/repos/{org}/{repo}` API with a public-only access token could view private repositories assigned to a team, which is now prevented. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11457): Access the watched repos and starred repos of a your own user through /user/subscriptions and /user/starred APIs with a public-only access token could view private repositories, which is now prevented. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11458): implement repo-specific access tokens in relevant search & list APIs. **Breaking**: the following APIs could previously return private repositories when using a public-only access token, but can no longer do so: `/user/repos`, `/users/{username}/repos`, `/orgs/{org}/repos`, and `/teams/{id}/repos`. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11437): implement repo-specific access tokens broadly for universal API permission checks. **Breaking:** API access with a public-only access token would previously return a `403 Forbidden` error when attempting to access a private repository where the repository is on the API path. As part of incorporating the public-only logic into the centralized permission check, these APIs will now return `404 Not Found` instead, consistent with how most permission checks are implemented in order to reduce the risk of data probing through error messages. +- Breaking bug fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11096): fix(ui)!: Remove the instance configuration option `repository.pull-request.ADD_CO_COMMITTER_TRAILERS` (was enabled by default). It was responsible for addition of unexpected trailers to commit messages in squash merges. These trailers were `Co-authored-by: ` and `Co-committed-by: `. Both used the pull request author as value, who is also assigned as the author of the squash merge commit, which they were just repeating. Furthermore, `Co-committed-by: ` is an uncommon commit trailer, and there is only one committer for a commit. The trailers were being added by Forgejo while performing the merge, bypassing user input in the UI and weren't shown in it. See further description and more examples in [#11097](https://codeberg.org/forgejo/forgejo/issues/11097). +- Breaking changes without a feature or bug label + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11098): In Forgejo v8.0.0, the default location for the config file was changed from `/etc/gitea/app.ini` to `/var/lib/gitea/custom/conf/app.ini`. Backward compatibility logic and startup warnings were added to container setup and entrypoint scripts. Now they are removed. This change only affects those using container deployments with rootless images. If you have the config file stored in a volume bound to container's /etc/gitea, move it to the new location or override the environment variable `GITEA_APP_INI`. An unused volume `/etc/gitea` can be safely removed from the container after moving the config or if the deployment never used versions prior to v8.0.0. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11720) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12137)): chore(Dockerfile.rootless): update shadowed env variables + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10645): Make cookie names brand independent.
Attention: All users need to re-login, if you haven't manually set a cookie name in the settings. This can be prevented by changing the [remember me cookie](https://forgejo.org/docs/latest/admin/config-cheat-sheet/#security-security:~:text=COOKIE_REMEMBER_NAME) back to `gitea_incredible` +- User Interface features + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11516): add form-based runner management + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10932): feat(perf): remove unused size url parameter for local avatars + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11080): feat(ui): responsive releases list + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11604): feat(ui): display repositories accessible by repo-specific access tokens + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11375) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11950)): enh: add suggestion to document reason for repository archival + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11770): show workflow name for scheduled runs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11659): ui: move "New access token" to a separate UI page + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11439): feat(markup-renderer): match on compound filename extensions + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11677): feat(ui): use better contrast color for required field indicator + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11340): feat(ui): enable text auto-spacing + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11472): feat(ui): improve visibility of counters inside of switch items + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11466): Add shortcut to link markdown action + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11127): feat(ui): convert org members list to grid + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11196): feat(ui): consistently use AppVerNoMetadata in footer + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10702): improve label filtering exclusion + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10873): dedicated icon for CITATION file + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10559): feat(ui): replace Monaco with CodeMirror + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10530): fix(ui): improve rendering of commit links + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10022): Retrieve default merge commit message for pull requests + - [PR](https://codeberg.org/forgejo/forgejo/pulls/9261): show cancel button for actions run until all jobs are finished + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10488): show update time when sorting by recently updated +- User Interface bug fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11607): fix(ui): allow label descriptions to wrap in dropdown + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11365): edit raw instead of rendered Git notes when editing notes on commit pages + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11365): make editing Git notes from single-commit PR page actually work + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11365): add cancel button to Git note adding and editing + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11315): fix(ui): add active background color for menu items in tippy tooltips + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11423): fix(ui): update sort dropdown structure for consistency across templates + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11190): fix(#11189): normalize issue title case when matching prefixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11259): fix(ui): improve alignment of icons in navbar + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11231): fix(ui): make relative time consistent with other text when selected + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11343): fix(ui): improve a few English strings + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11274): fix(ui): apply navbar min-height correctly, fix jitter on mobile + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11262): fix(ui): fix gap consistency between navbar items on mobile + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11469): fix(ui): use overflow:auto to avoid scrollbars when they are not needed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11461): fix(ui): fix dashboard some style issues + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11057): fix(ui): center-align emojis to neighbouring text +- Localization + - Updates from Codeberg Translate: [#10417](https://codeberg.org/forgejo/forgejo/pulls/10417), [#10599](https://codeberg.org/forgejo/forgejo/pulls/10599), [#10660](https://codeberg.org/forgejo/forgejo/pulls/10660), [#10978](https://codeberg.org/forgejo/forgejo/pulls/10978), [#11344](https://codeberg.org/forgejo/forgejo/pulls/11344), [#11460](https://codeberg.org/forgejo/forgejo/pulls/11460), [#12129](https://codeberg.org/forgejo/forgejo/pulls/12129) (backport of [#11810](https://codeberg.org/forgejo/forgejo/pulls/11810), [#11963](https://codeberg.org/forgejo/forgejo/pulls/11963)) +- Features + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10617): Auto-link container images to repository + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11687): expose attempt number of ActionRunJob in HTTP API + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11584): add more filters to actions run and tasks api + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10941): detailed permission denied message on push + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11013): filter action runs by Git reference + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11846) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12031)): Improve repo file list table semantics for screen readers + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11851) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11986)): feat: support `timezone` in scheduled workflows + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11895) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11970)): Add aria-label="Copy" to copy button + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11887) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11969)): Add aria-current="page" to active navbar items + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11676): allow runners to request a particular job + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11589): add wiki git info to API + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10677): add HTTP API endpoint for runner registration + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11489): Add `HEAD` support for debian repo files (#11488) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10573): refactor: update Actions Runner admin API endpoint URLs to be consistent w/ other levels + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11671): make it possible to search runners by UUID + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11670): add visible flag to HTTP API endpoints that return runners + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10627): support jobs..secrets with reusable workflow expansion + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10563): increase default limit of dispatch inputs to 100 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11059): enable SQLite WAL by default + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10614): support workflow inputs on expanded reusable workflows + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10388): allow to add pam source from command line + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10578): support workflow outputs on expanded reusable workflows + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11504): read, create, & delete repo-specific access tokens via API + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11216): link CI job to its defining workflow file + - [PR](https://codeberg.org/forgejo/forgejo/pulls/9962): Implement Ephemeral runners + - [PR](https://codeberg.org/forgejo/forgejo/pulls/5384): [allow forgejo to run as a pwa standalone application & override of the webapp manifest.json via the a custom file in `public/manifest.json`](https://codeberg.org/forgejo/forgejo/pulls/5384) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10647): support reusable workflow expansion when `with` or `strategy.matrix` contains ${{ needs... }} + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10602): provide multiple tasks to Runner in one FetchTask when requested + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10642): add Forgejo server version to runner context +- Bug fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11715): improve OAuth2 experience + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11401): allow Actions runner to recover tasks lost during fetching from intermittent errors + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11932) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12033)): Preserve focus on star/unstar & watch/unwatch buttons after click + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11909) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11984)): fix: store pull mirror creds encrypted with keying + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11878) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11967)): Add aria-labels to ensure watch and star buttons always have a text label + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11858) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11966)): Make label dropdown menu items with .tw-hidden unselectable + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11860) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11922)): Fix @mention combobox semantics for screen reader accessibility + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11881) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11906)): fix: unique key violation in first-time concurrent debian package uploads to a user + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11821) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11830)): fix: out of synchronization error after interrupting a PR merge by user-agent disconnect + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11292): improve SQLite "database is locked" errors by increasing default `SQLITE_TIMEOUT` (take 2) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11735): i18n: hardcoded strings in repository activity graphs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11052): normalize secrets consistently, display accurate help + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11699): The DB entries about users following an organization and users blocked by an organization were not deleted when an organization was deleted. Orphaned entries can be cleaned up by running `forgejo doctor check --run check-db-consistency --fix`. + - [PR](https://codeberg.org/forgejo/forgejo/pulls/9906): fix(ui): Honor org/user project in new issue (#8489) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10008): ensure actions logs are transferred when a task is done + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10954): fix(packages): return bad request on malformed upload input + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11240): correct Reviewed-on URL in merge message for subpath deployments + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11153): ruby package versions: only skip explicit >= 0 and leave pessimistic version locking intact + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11109): fix searching issues by org labels via api + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10691): fix(i18n): remove unneeded special cases for relative time + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10528): fix(#10155): don't display pending reviews as participants +- User Interface changes without a feature or bug label + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10768): chore(ui): cleanup PR checks area + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10524): fix(ui): avatar for dismissed review is stretched if not square +- Other changes without a feature or bug label + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11822) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11829)): fix(api): package name in route not properly unescaped + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11650): chore: deprecate HTTP API endpoints for obtaining the runner registration token + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11232): chore: remove deprecated auth methods from API docs +- Included for completeness but not user-facing (chores, etc.) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12134) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12136)): chore: fix TestMirrorPull on older git (2.34.1) installation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12131) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12132)): chore: fix cookie name comments in example ini + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12113) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12130)): fix: improve runner list and details view + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12114): fix(ui): a few small runners UI fixes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11733): prevent container registry headers from leaking into other registries + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11337): fix(e2e): use empty user for overflow menu test + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11324): Update module code.forgejo.org/go-chi/session to v1.0.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10727): the error message of a failed migration because of a wrong token is confusing + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12009) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12112)): i18n(mailer): Fix special usage of .Locale in admin_new_user + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10898): chore(ui): remove obsolete var --color-nav-text + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12094): Revert "Improve repo file list table semantics for screen readers (#12031)" + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12046) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12077)): fix: prevent jobs with unknown needs from running + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12059) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12063)): fix: display runner version on details page + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12058) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12060)): Revert "fix: add challenge for HTTP Basic Authentication to container registry" + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11678): add challenge for HTTP Basic Authentication to container registry + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12021) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12044)): fix: incorrect identification of outdated run attempts + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11750): set attempt number of action run jobs eagerly + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12023) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12040)): fix(doctor): remove broken mergebase check + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12030) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12038)): fix: prevent actions workflows from generating OIDC tokens if not authorized in workflow + - [PR](https://codeberg.org/forgejo/forgejo/pulls/12029): Update dependency go to v1.26.2 (v15.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11997) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11998)): test: fix intermittent test failure in TestPackageDebianConcurrent + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11992) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11996)): chore(deps): bump xorm to v1.3.9-forgejo.10 (#11992) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11945) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11987)): fix: missing syntax dialog rounded corners + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11999) ([backported](https://codeberg.org/forgejo/forgejo/pulls/12000)): refactor: reduce code duplication when accessing `DefaultMaxInSize` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11988) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11995)): perf: bulk load resolvers & reactions on pull request comments + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11956) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11964)): fix: superfluous increment of ActionTask attempt breaks job view + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11949): : chore: add modernizer linter + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11296): PAM: portable error reporting + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11948): Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.11.4 (v15.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11927) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11933)): fix: allow repository deletion when referenced by a repo-specific access token + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11843) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11931)): fix: allow modals to be submitted multiple times + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11872) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11907)): ci: prevent usage of live application models & services in migrations + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11432): Move Container API processing logic to service + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11900): Update github.com/go-git/go-git/v5 (indirect) to v5.17.1 [SECURITY] (v15.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11886): Update dependency happy-dom to v20.8.9 [SECURITY] (v15.0/forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11874) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11877)): feat: use `--token-url` in runner setup instructions + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11696): feat(ui): create repo-specific access tokens + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11839): Update dependency happy-dom to v20.8.8 [SECURITY] (v15.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11776) ([backported](https://codeberg.org/forgejo/forgejo/pulls/11833)): fix: duplicate key violates unique constraint in concurrent debian package uploads + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11801): ci: update tests to run debian trixie, remove manual installation from `testing` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11825): Update module golang.org/x/image to v0.38.0 [SECURITY] (v15.0/forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11805): Update Node.js to v24.14.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11806): Update module code.forgejo.org/forgejo/actions-proto to v0.7.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11804): Update module code.forgejo.org/forgejo/runner/v12 to v12.7.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11789): chore: link to AI Agreement in PR template + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11732): allow renaming and replacing secrets + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11781): Update renovate Docker tag to v43.86.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11772): Update module github.com/jackc/pgx/v5 to v5.9.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11717): document more status codes in the API + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11217): build: polish linter error vs. dead code reporting + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11751): Update module github.com/yuin/goldmark to v1.7.17 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10541): add manage_credentials to user disable features + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11745): Update Node.js to v24.14.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11743): Update module golang.org/x/tools/cmd/deadcode to v0.43.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11741): Update module golang.org/x/oauth2 to v0.36.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11674): Update module github.com/go-webauthn/webauthn to v0.16.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11744): Update module mvdan.cc/xurls/v2 to v2.6.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11632): Update module github.com/google/go-licenses to v2 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11740): Update module golang.org/x/net to v0.52.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11264): Update dependency clippie to v4.1.10 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11738): Update module github.com/ProtonMail/go-crypto to v1.4.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11739): Update module golang.org/x/image to v0.37.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11691): remove template file from generated repo + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11713): Update module github.com/urfave/cli/v3 to v3.7.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11729): perf: remove redundant & incorrect filters on 'SearchRepoOptions.OwnerID' + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11728): Update module golang.org/x/crypto to v0.49.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11718): use CSS class to indicate that runner name is required + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11709): Update module github.com/ProtonMail/go-crypto to v1.4.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11700): Update module github.com/pquerna/otp to v1.5.0 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11719): fix(ui): cleanup css deadcode related to stackable menus + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11707): Update module fillmore-labs.com/errortype to v0.0.11 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11708): Update module github.com/mattn/go-sqlite3 to v1.14.37 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11690): scope-specific headings for list of recent tasks + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11616): remove second challenge from WWW-Authenticate header + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11686): test: attempt to fix flaky TestBleveDeleteIssue + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11053): build: move backend-checks CI checks to Makefile: `make pr-go` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11507): Replace reference to Monaco with CodeMirror in app.example.ini + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11295): fix(proxyprotocol): remove trailing null byte for local connection + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10525): expand reusable workflow calls into their inner jobs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11692): Update renovate Docker tag to v43.76.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11697): Update dependency @google/model-viewer to v4.2.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11695): Update module github.com/go-swagger/go-swagger/cmd/swagger to v0.33.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11693): Update CodeMirror (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11683): fix(i18n): reuse string for repository access, fix capitalization consistency + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11675): fix(ui): improve consistency in new runner management pages + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11682): incorrect DB error handling in 'POST /users/{username}/tokens' + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11585): fix(issue-search): delete issue from indexer on DeleteIssue + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11672): Update dependency @codemirror/view to v6.39.17 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11335): skip repo avatar upload when no file is selected + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11478): RPM registry addrepo instructions + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11525): chore: add more diagnostic output to dbfs Stat error + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11280): ci: ensure correct node version + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11542): chore: skip sha256 repo for older git versions + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11176): ensure consistent sort order in TestFeed fixture + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11007): fix NewMockWebServer(): Headers never reached the http client + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10798): migrations/github: avoid getting the first issues page twice + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10846): migrations/github: Wait & retry when primary rate limit is hit + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11038): detect renames when using diff-tree + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10883): ci: tie go cache to go version and add `Makefile` to key hash + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10893): retry ActionRun updates when optimistic-concurrency-control indicates record changed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10481): add OIDC workload identity federation support + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11662): Update data.forgejo.org/oci/golang Docker tag to v1.26 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11660): Update data.forgejo.org/forgejo/forgejo Docker tag to v11.0.11 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11663): Update dependency mermaid to v11.13.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11657): refactor: replace WithAvailable with WithVisible when fetching runners + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11653): create repo-specific access token unexpected behaviour with `"repositories": []` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11627): Update linters (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11320): Update dependency go to v1.26 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11334): fix(models): deduplicate project sorting values and add unique constraints + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11644): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.8 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11639): Update module code.forgejo.org/forgejo/runner/v12 to v12.7.2 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11638): Update dependency katex to v0.16.38 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11630): Update https://code.forgejo.org/forgejo/upload-artifact action to v5 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11631): Update https://data.forgejo.org/forgejo/upload-artifact action to v5 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11629): Update dependency wrap-ansi to v10 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11605): Update dependency asciinema-player to v3.15.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11624): chore(deps): bump xorm to v1.3.9-forgejo.8 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11342): chore(refactor): split AddRepository and AddTeamMember to return the inserted value + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11621): Update dependency globals to v17.4.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11588): webhook/discord: omit empty embeds.footer from the payload for Spacebar compatibility + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11601): refactor: replace ActionRunnerToken.OwnerID & RepoID with optional.Option[int64] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11593): ci: detect and prevent empty `case` statements in Go code + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11599): Update dependency katex to v0.16.37 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11595): refactor: rename AccessTokenError to AccessTokenErrorResponse + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11442): enforce package quota against package owner, not uploader + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11144): chore: add comment for ap migration + - [PR](https://codeberg.org/forgejo/forgejo/pulls/9254): feat(activitypub): use structure @PreferredUsername@host.tld:port for actors + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11568): Update module github.com/minio/minio-go/v7 to v7.0.99 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11576): Update dependency katex to v0.16.35 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11558): Update dependency webpack to v5.105.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11587): chore: cleanup Makefile + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11583): chore(release-notes): Forgejo v14.0.3 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11582): chore(release-notes): Forgejo v11.0.11 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11553): chore: support `Option[T]` as a type on database schema structs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11564): Update module github.com/go-enry/go-enry/v2 to v2.9.5 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11559): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.7 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11562): Update module code.forgejo.org/forgejo/runner/v12 to v12.7.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11481): chore(treewide): rename SafeHTML to TrustHTML + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11563): Update module github.com/blevesearch/bleve/v2 to v2.5.7 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11368): feat(api): more verbose error messages and swagger comments for posting issue comments + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11486): Update code.forgejo.org/forgejo-contrib/go-libravatar digest to add494e (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11545): Update dependency tailwindcss to v3.4.19 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11538): chore(deps): upgrade xorm to v1.3.9-forgejo.7 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11549): Update dependency uint8-to-base64 to v0.2.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11543): Update dependency forgejo/release-notes-assistant to v1.6.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11470): fix(tests): do not leak global repository unit defaults + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11523): Update dependency minimatch to v10.2.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11521): Update dependency go to v1.25.8 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11520): Update dependency katex to v0.16.33 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11519): Update dependency dayjs to v1.11.19 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11517): Update CodeMirror (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/9873): Handle error types consistently + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11450): Update module github.com/markbates/goth to v1.82.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11385): Update dependency mermaid to v11.12.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11508): Update dependency svgo to v4.0.1 [SECURITY] (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11388): Update dependency minimatch to v10.2.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11376): Update dependency forgejo/release-notes-assistant to v1.6.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11384): Replace Node.js with data.forgejo.org/oci/node 24-trixie (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11441): Update dependency minimatch to v10.2.3 [SECURITY] (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11359): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.6 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11406): Revert "Replace Node.js with data.forgejo.org/oci/node 24-trixie (forgejo) (#11384)" + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11392): chore(renovate): prepare for operator + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11363): Update module code.forgejo.org/forgejo/runner/v12 to v12.7.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11243): chore(renovate): disable major updates on stable branches by default + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11293): Update dependency sortablejs to v1.15.7 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11233): Update module github.com/mattn/go-sqlite3 to v1.14.34 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11350): chore: remove field ephemeral from runner registration response + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11218): refactor: replace `Value()` from Option[T] with `Get()` & `ValueOrZeroValue()` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11222): Update module code.forgejo.org/forgejo/runner/v12 to v12.6.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11319): Update dependency postcss-loader to v8.2.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11226): Update module golang.org/x/image to v0.36.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11241): feat(ui): support C3 language highlighting in file editor + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11210): Update dependency postcss-nesting to v14 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11201): Update dependency @codemirror/commands to v6.10.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11237): Update module golang.org/x/net to v0.50.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11333): fix(i18n): unhardcode label exclusion tooltips + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11235): chore(lint): enable nilnil + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11325): i18n(*): migrate 92 strings to json + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11093): correct malformed CreateTeamOption example + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11225): Update module golang.org/x/crypto to v0.48.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10979): i18n(*): migrate ini section [packages] to json + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11345): chore(i18n): deduplicate common packages related strings + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11277): Chore modules/session/virtual: gc _old_uid hack + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11236): Update Node.js to v24.13.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11156): feat(ui): support additional job status selection in dropdown menu on Actions tab + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11284): Update dependency webpack to v5.105.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11251): Update dependency @codemirror/view to v6.39.14 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11326): UserTypeRemoteUser is an eligible organization member + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11223): Update module github.com/klauspost/compress to v1.18.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11199): Update renovate to v43 (forgejo) (major) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11318): Update dependency asciinema-player to v3.14.15 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11142): ci: introduce `semgrep` to prevent using `xorm.Sync()` incorrectly in new migrations + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11169): Update dependency forgejo/release-notes-assistant to v1.5.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11197): chore(ui): add integration tests for footer tmpl logic + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11143): show note that user has no SSH keys + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11171): reflect allowed username change in profile setting + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11136): Update dependency @codemirror/view to v6.39.12 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11170): Update module github.com/go-chi/chi/v5 to v5.2.5 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11184): newly expanded dynamic matrix jobs can become stuck in a 'blocked' state + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11067): Refactor jwtx/signingkey: Add JWT() method for convenience/clarity + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11183): Update dependency webpack to v5.105.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11149): Update dependency go to v1.25.7 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11104): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10552): feat(issue-search): support filtering for issues with multiple assignees + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11448): Update linters (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11493): Update dependency @vitest/eslint-plugin to v1.6.9 (forgejo) - autoclosed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11492): Update github.com/cloudflare/circl (indirect) to v1.6.3 [SECURITY] (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11485): chore: update license test + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11490): chore(renovate): update config + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11158): chore: update licenses and gitignores [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10311): refactor: use signal.NotifyContext over custom implementation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11477): Update module github.com/valyala/fastjson to v1.6.10 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11476): ci: add `semgrep` detection for API code ignoring repo-specific access tokens + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11374): Update dependency swagger-ui-dist to v5.31.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11462): Revert "fix: ensure actions logs are transferred when a task is done (#10008)" + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11447): Update module golang.org/x/net to v0.51.0 [SECURITY] (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11451): Update module github.com/SaveTheRbtz/zstd-seekable-format-go/pkg to v0.8.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11463): Update module code.superseriousbusiness.org/exif-terminator to v0.11.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11175): Add Trace logging for JWT session + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11449): Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.10.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11434): core infrastructure for repository-specific access tokens + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11452): implement repo-specific access tokens in git operations + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11110): Update dependency css-loader to v7.1.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11121): Update vitest monorepo to v4.0.18 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11062): Update module github.com/meilisearch/meilisearch-go to v0.36.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11103): Update https://data.forgejo.org/actions/cache action to v5.0.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10915): web/auth: signup polish + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10937): Update module github.com/urfave/cli/v3 to v3.6.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11090): Update module github.com/golang-jwt/jwt/v5 to v5.3.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11077): Update renovate to v42.93.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10753): fix typos throughout the codebase + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10922): Update dependency @github/text-expander-element to v2.9.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11066): Polish jwtx/signingkey: Avoid log.Fatal() + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11092): chore(release-notes): Forgejo v14.0.2 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10936): Update module github.com/alecthomas/chroma/v2 to v2.23.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11095): "revert Update module github.com/urfave/cli/v3 to v3.6.2 (forgejo) (#10937)" + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11147): Update dependency globals to v17.3.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11061): Update dependency globals to v17.1.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11111): Update dependency globals to v17.2.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11105): Update module github.com/go-enry/go-enry/v2 to v2.9.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11088): Update module code.forgejo.org/forgejo/runner/v12 to v12.6.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11047): Lock file maintenance (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10975): ci: use newer forgejo for release simulation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10356): "disable router log" indicator on configuration summary page + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10847): Improve issue templates for new workflow + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11019): chore(ui): change /devtest to /-/demo + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10919): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10976): ci: add name to step + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10987): optimization: use fs.ReadFile + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11035): Fix test cases where require.ErrorContains() is intended, but require.Errorf() is used + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10890): Update https://data.forgejo.org/actions/cache action to v5.0.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11045): Update module github.com/redis/go-redis/v9 to v9.17.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10977): "revert Update https://data.forgejo.org/forgejo/forgejo-build-publish action to v5.5.0" + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10999): Update module code.forgejo.org/forgejo/runner/v12 to v12.6.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10889): Update dependency postcss-html to v1.8.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10880): delete dead code in WatchIfAuto and general model documentation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10972): Update https://data.forgejo.org/forgejo/forgejo-build-publish action to v5.5.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10966): fix typo: say good bye to the singing key + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10897): escape HTML tags in inline code blocks in description + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11004): fix(locale): tooltip for "Owner" role should not imply unique owner + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10934): Update dependency mini-css-extract-plugin to v2.10.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11015): Update module code.forgejo.org/forgejo/runner/v12 to v12.6.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10935): Update https://data.forgejo.org/infrastructure/issue-action action to v1.5.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11022): fix case-insensitive when using bleve + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11014): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10980): Update https://data.forgejo.org/forgejo/forgejo-build-publish action to v5.5.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11005): Replace code.forgejo.org/forgejo/forgejo Docker tag with data.forgejo.org/forgejo/forgejo (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10967): polish oauth: Do not pass the full signing key to template + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11037): Polish modules/storage test use of require.Errorf() + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10911): Update module code.forgejo.org/forgejo/runner/v12 to v12.5.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10891): Update module github.com/klauspost/compress to v1.18.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10854): recreate-tables doesn't work on PostgreSQL with multiple Forgejo schemas + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10799): Update module code.forgejo.org/forgejo/runner/v12 to v12.5.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10850): Update dependency go to v1.25.6 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10802): Update module golang.org/x/net to v0.49.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10828): pin github.com/urfave/cli to v3.5.0 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10837): [skip ci] chore(release): delete 10037 and 9840 release notes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10894): chore(release-notes): Forgejo v11.0.10 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10841): Update module github.com/go-chi/chi/v5 to v5.2.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10842): Update module github.com/minio/minio-go/v7 to v7.0.98 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10875): Update dependency @citation-js/plugin-software-formats to v0.6.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10832): chore(release-notes): Forgejo v14.0.0 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10865): Update dependency forgejo/release-notes-assistant to v1.5.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10896): chore(release-notes): Forgejo v13.0.5 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10892): Update CodeMirror (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10673): chore: update gof3/v3 v3.11.15 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10682): actions variable and secret names validation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10790): chore: Teach Makefile to handle node pre-release versions + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10867): ci: use rna binary instead of source + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10821): config: Lower default `[database].MAX_OPEN_CONNS` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10759): Update dependency asciinema-player to v3.14.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10895): chore(release-notes): Forgejo v14.0.1 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10866): [skip ci] fix(release): move reverted v14.0.0 feature line to Included for completeness + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10815): make lastcommit available for non-signed-in users + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10822): Update Node.js to v24.13.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10761): Update https://data.forgejo.org/actions/setup-forgejo action to v3.1.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10728): chore(release-notes): Forgejo v11.0.9 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10775): Update dependency globals to v17 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10756): add foreign keys to the `action_runner_token` table + - [PR](https://codeberg.org/forgejo/forgejo/pulls/9380): swagger: Add header annotations for accurate API documentation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10731): chore(renovate): use `forgejo-releases` datasource + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10700): Update module github.com/yuin/goldmark to v1.7.14 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10795): Update module code.forgejo.org/forgejo/runner/v12 to v12.5.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10701): Update CodeMirror (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10780): chore: correct spelling error in cleanup-commit-status CLI docs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10749): Update dependency forgejo/release-notes-assistant to v1.5.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10755): feat(build): teach lint-locale-usage about ObjectVerification.Reason + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10738): Update module code.forgejo.org/forgejo/runner/v12 to v12.5.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10762): Update module github.com/alecthomas/chroma/v2 to v2.22.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10726): disable actions endpoints of repository if actions are disabled + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10716): chore: add @0xllx0 to federation codeowners + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10737): Update dependency forgejo/release-notes-assistant to v1.4.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10740): Update module golang.org/x/sys to v0.40.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10696): retain Forgejo Action's commit_status entries with distinct descriptions + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10713): prevent intermittent test failures caused by uncancellable tasks + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10715): Fix error messages in pull.go + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10758): Update dependency @codemirror/view to v6.39.9 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10730): chore(release-notes): Forgejo v13.0.4 [skip ci] + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10699): Update dependency @lezer/highlight to v1.2.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10707): [skip ci] chore: Update pull request template regarding the release notes + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10724): Update module github.com/go-enry/go-enry/v2 to v2.9.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10619): Update https://data.forgejo.org/actions/setup-forgejo action to v3.0.7 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10709): Update module github.com/yuin/goldmark to v1.7.16 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10752): chore: run renovate on v14 branch, remove v13 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10706): chore: add famfo to CODEOWNERS for federation code + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10785): Lock file maintenance (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10658): dynamic Action jobs can stall by marking themselves blocked + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10665): simultaneously experiencing a PreExecutionError and unblocking a different job causes error blocking job emitter queue + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10632): build-release workflow stops its own end-to-end checks when run concurrently + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10666): re-running an expanded reusable workflow causes duplicate "attempt 1" job + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10588): ListTrackedTimes API has no defined record ordering + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10661): i18n(next): convert indention style to tabs: en, editorconfig + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10591): test: remove diagnostic output in 'copy to experimental' + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10623): Lock file maintenance (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10579): Update module github.com/go-openapi/spec to v0.22.3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10668): Update module github.com/mattn/go-sqlite3 to v1.14.33 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10610): Update module code.forgejo.org/forgejo/actions-proto to v0.6.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10596): Update module github.com/jackc/pgx/v5 to v5.8.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10655): Update module code.forgejo.org/forgejo/runner/v12 to v12.4.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10583): experimental releases are not being copied to forgejo-experimental + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10678): don't duplicate commit status records on workflows with empty name + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10638): chore(release-notes): teach release-notes-assistant that v11.0 is LTS + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10587): test: fix intermittent PostgreSQL failure in TestAdminViewRepos + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10581): chore(ui): remove obsolete code from button-legacy.css + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10683): Update dependency forgejo/release-notes-assistant to v1.4.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10662): chore(cleanup): move all test blank imports in a single package + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10692): chore: download git-man over TLS + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10586): use RUNNER_TEMP in build-release.yml + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10608): Lock file maintenance (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10667): Update dependency esbuild-loader to v4.4.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10626): improve Discord webhook message formatting + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10656): in-progress job icon doesn't rotate on repo's action list + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10535): Update module code.forgejo.org/forgejo/runner/v12 to v12.3.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10492): Update dependency webpack to v5.104.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10479): Update module github.com/alecthomas/chroma/v2 to v2.21.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10482): chore: 14.0 is now stable + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10549): chore(search): minor code cleanup + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10505): Update go-openapi packages (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10575): Update module code.forgejo.org/forgejo/runner/v12 to v12.3.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10545): Update dependency esbuild-loader to v4.4.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10491): Update dependency asciinema-player to v3.13.5 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10450): chore: revise runner REST API endpoints + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10538): Update dependency webpack to v5.104.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10550): port(gitea): Fix password leak in log messages (go-gitea/gitea!35584) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10537): refactor: split `ActionJobStepList` out of `RepoActionView` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10539): chore(test): separate and move around i18n testing + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10551): chore: document, test pagination of `/runners` API endpoint + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10518): Update https://data.forgejo.org/actions/checkout action to v6 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10490): test: increase test coverage of runner management + - [PR](https://codeberg.org/forgejo/forgejo/pulls/8643): linking sha1 hashes with trailing punctuation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10519): Lock file maintenance (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10517): Update https://data.forgejo.org/actions/cache action to v5 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11409): Update renovate Docker tag to v43.31.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11321): Update x/tools to v0.42.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11322): Update dependency eslint-plugin-unicorn to v63 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11302): Update renovate to v43.15.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11265): Update dependency vue to v3.5.28 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11213): Update dependency vite-string-plugin to v2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11207): Update dependency eslint-plugin-regexp to v3 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11202): Update linters (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11203): Update x/tools to v0.41.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11129): Update renovate to v42.95.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11162): More jwtx refactoring: GetSigningMethod(), fix open mode, split loadOrCreateAsymmetricKey() + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11118): Update dependency @stylistic/stylelint-plugin to v4.0.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11119): Update dependency @vitest/eslint-plugin to v1.6.6 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11120): Update module github.com/editorconfig-checker/editorconfig-checker/v3/cmd/editorconfig-checker to v3.6.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10659): i18n(next): convert indention to tabs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11044): Update renovate to v42.92.10 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10998): Update dependency vue to v3.5.27 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10918): Update renovate to v42.84.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10912): Update module github.com/urfave/cli/v3 to v3.6.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10784): Update renovate to v42.78.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10698): Update renovate to v42.71.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10618): Update renovate to v42.66.11 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10607): Update dependency @vitest/eslint-plugin to v1.6.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10605): Update renovate to v42.66.9 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10606): Update dependency typescript-eslint to v8.50.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10547): Update dependency stylelint-value-no-unknown-custom-properties to v6.1.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10546): Update dependency @vitest/eslint-plugin to v1.5.4 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10504): Update dependency vue to v3.5.26 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10514): Update renovate to v42.64.1 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10507): Update vitest monorepo to v4.0.16 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10511): Update x/tools to v0.40.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10510): Update module github.com/PuerkitoBio/goquery to v1.11.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10509): Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.7.2 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10508): Update dependency markdownlint-cli to v0.47.0 (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10506): Update linters (forgejo) + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10503): Update dependency @vitejs/plugin-vue to v6.0.3 (forgejo) +- Already announced in the release notes of an older stable release + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: PKCE challenges to Forgejo's OAuth identity provider were not validated when using the `S256` algorithm + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: Forgejo supports using an OAuth Bearer token with HTTP basic authentication, rather than Bearer token authentication, but did not properly apply the limited scopes of the OAuth grant + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: missing permission checks in attachment-related web endpoints allowed modifying attachments that a user did not own + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: email notifications for new releases could be sent to users that no longer access to the repository, or to inactive users + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: missing permission checks in user/org-owned projects would allow modifications of the open/closed state to be made to projects via insecure direct object references + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: missing permission checks in a web endpoint allowed cancellation of the automerge of a PR + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11513): - fix: prevent additional path-traversals in post-login redirect parameters that allowed for arbitrary redirects + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10719): hide user profile anonymous options on public repo APIs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10719): incorrect whitespace handling on pre&post receive hooks + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10719): reduce memory usage while processing large attachment uploads + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10719): load reviewer for pull review dismiss action notifier + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10719): use correct GPG key for export + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11393): extend basic auth to /v2, always include WWW-Authenticate header + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11282): prevent panic when importing issues from GitLab + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11282): prevent panic when importing releases with more than 4 release assets from GitLab + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11282): correct re-mapping of merge-request numbers mentioned in GitLab comments + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11642): don't trip deleting attachment with missing permission error + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11145): don't abandon Action jobs waiting for approval + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10812): drop sqlite shared cache + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11134): cancel runs pending approval when a PR is closed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10568): migration: update existing foreign key migrations to automatically fix inconsistencies + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11623): comment attachment API is more restrictive than the web UI + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11614): Make overflow-menu Web Component scroll / overflow with JS off + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11547): modals on small viewport height + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11381): fix(ui): hardcode sort options in search syntax hint, improve look + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11287): fix(ui): prevent label overflow in PR CI checks on mobile + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11341): fix(ui/mde): inputs in table/link insertion modals + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11179): improve SQLite "database is locked" errors by increasing default `SQLITE_TIMEOUT` + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11246): cleanup of multi-platform container images + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10925): fix(api): default new release 'title' field to label name, if not provided + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10969): fix(ui): tippy menu styles too broad, affecting switch in PR review + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10945): remove infinite loop in UpdateRunJobWithoutNotification when run in transaction + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11073): allow test delivery for webhooks not enabled for push events + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10948): don't clobber authorized_keys file during installation + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10939): fix(ui): improve force-push layout alignment + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10964): fix(ui): add missing translation for code search when keyword is empty string + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10888): use ALTER TABLE in SQLite DropTableColumns(), allowing unexpected database sources to work better in migrations + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10899): don't return AdditionalTasks from FetchTask if there is no Task + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10914): strip newlines on og image rendering + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11164): when expanding a dynamic matrix, original 'needs' access was lost + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10933): use an absolute URL for compare links in atom feed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/11063): empty dynamic matrix can leave action run hanging incomplete + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10882): Fix not decreasing watch count when blocking user + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10827): proper styling for global time tracker popup + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10814): fix(ui): show switch default branch button in branch list only for repo admins + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10863): make concurrency group job cancellation effect runs that are failed + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10851): use `strict-origin` as referrer policy + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10648): fix(ui): actions list layout breakage with long content + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10686): add `forgejo doctor cleanup-commit-status` command to recover from #10671 + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10747): correctly compute required commit status + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10744): fix 500 error on large .gitmodules + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10484): display orphan branches separately in commit graph + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10652): fix(ui): pull request merge menu item clipping the auto merge tip + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10594): allow Actions trust management on conflicted PRs + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10572): fix(ui): process dynamically added content via htmx + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10556): fix(ui): don't stretch activity top author image + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10486): ignore private .profile repo on user profile page + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10521): fix(ui): add missing space before 'Commit' back + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10520): Prevent form submission by buttons in UGC markdown + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10394): always search for issue posters by user and full name + - [PR](https://codeberg.org/forgejo/forgejo/pulls/10489): align due date icon in issue list + - [PR](https://codeberg.org/forgejo/forgejo/pulls/8244): add dynamic aria-label to monospace button in markdown editor +