Gusted 0c11e9a43a feat: use keying for task secrets (#9923) ... - Follow up of forgejo/forgejo!5041, forgejo/forgejo!6074, forgejo/forgejo!8692 - The `task` table contains three secrets: clone address (with credentials), auth password and auth token. These secrets are stored for migrating repositories (also the only usage of this table, although it allows for more usages). - Use `keying` to safely store these secrets and bound them to the table, column, row id and JSON field name. - The migration isn't spectacular but does closely follow what we learned in the previous two migrations: use a transaction and delete records when you can't decrypt them. We also learned about `db.Iterate` not being happy when updating records but it has since been fixed. Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9923 Reviewed-by: Mathieu Fenniak <mfenniak@noreply.codeberg.org> Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org> Co-authored-by: Gusted <postmaster@gusted.xyz> Co-committed-by: Gusted <postmaster@gusted.xyz>		2025-11-03 13:42:32 +01:00
..
actions	don't execute workflows when event parsing fails; create a pre-execution error instead	2025-10-04 18:47:57 -06:00
agit	fix: correctly mark reviews as stale for AGit PRs (#8450)	2025-07-09 07:38:00 +02:00
asymkey	feat: consider WebAuthn & SSH for instance signing (#7693)	2025-04-29 10:34:07 +00:00
attachment	fix: allow instance API URLs in release assets (#7644)	2025-06-09 10:01:59 +02:00
auth	feat: replace cross origin protection (#9830)	2025-10-29 22:43:22 +01:00
automerge	fix: check PR reference on base repository (#8431)	2025-07-06 14:23:47 +02:00
context	fix: prevent deadlocks updating repo.num_action_runs/num_closed_action_runs (#9927)	2025-11-02 22:24:56 +01:00
contexttest	Replace the 'relative-time' element scripting with custom, translatable rewrite (#6154)	2025-05-03 14:11:01 +00:00
convert	fix: reduce deadlocks merging PRs by using caching for repo issue count stats (#9922)	2025-10-31 23:50:05 +01:00
cron	fix: LFS GC is never running because of a bug in the parsing of the INI file (#9202)	2025-09-09 22:32:49 +02:00
doctor	chore: rename 'migrations' to 'gitea_migrations'	2025-10-14 14:40:49 -06:00
externalaccount	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
f3	Update module code.forgejo.org/f3/gof3/v3 to v3.11.0 (forgejo) (#8056)	2025-06-03 14:24:57 +02:00
federation	Sent user activities to distant federated server (#8792)	2025-08-06 16:16:13 +02:00
feed	fix: very long commit messages cause pushed commits to fail to display on the action feed on MySQL (#9098)	2025-08-30 22:23:43 +02:00
forgejo	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
forms	feat: Add support for administrators to set email visibility on user accounts (#9668)	2025-10-15 03:21:15 +02:00
gitdiff	feat: improve getting shortstat (#9587)	2025-10-10 14:15:38 +02:00
indexer	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
issue	fix: reduce deadlocks merging PRs w/ async milestone stat recalcs (#9916)	2025-10-31 15:53:45 +01:00
lfs	fix: return on error if an LFS token cannot be parsed	2025-10-25 10:41:49 -06:00
mailer	feat(email): reference the commit closing the issue (#9522)	2025-10-05 05:56:45 +02:00
markup	chore: remove branding from context imports (#9628)	2025-10-11 01:52:51 +02:00
migrations	fix: Use mock server for TestBreakConditions (#9948)	2025-11-03 09:33:51 +01:00
mirror	feat: add configuration to only push mirror selected branches (#7823)	2025-07-12 00:39:35 +02:00
moderation	feat: add configurable timeout for automatically removing resolved reports (#7940)	2025-07-28 14:52:13 +02:00
notify	feat: implement "concurrency" block in Forgejo Actions at the workflow level (#9434)	2025-10-03 18:43:02 +02:00
org	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
packages	fix: ensure deleted Debian package does not remain referenced in the apt repository files (#9386)	2025-10-01 03:11:03 +02:00
pull	fix: pull request review comment position (#9914)	2025-10-31 16:17:23 +01:00
redirect	chore: add repo redirect unit test	2025-08-30 09:37:38 +02:00
release	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00
remote	chore: tune down remote user promotion debug message shown as error (#7687)	2025-04-27 20:50:48 +00:00
repository	fix: prevent .forgejo/template from being out-of-repo content	2025-10-25 10:41:49 -06:00
secrets	feat: migrate action secrets to keying to store them more securely (#8692)	2025-07-29 01:03:36 +02:00
shared/automerge	fix: suppress false-positive error log when PR is already in the automerge queue (#9784)	2025-10-21 08:19:33 +02:00
stats	fix: reduce deadlocks merging PRs w/ async milestone stat recalcs (#9916)	2025-10-31 15:53:45 +01:00
task	feat: use keying for task secrets (#9923)	2025-11-03 13:42:32 +01:00
uinotification	chore: branding import path (#7337)	2025-03-27 19:40:14 +00:00
user	feat: Add admin individual user email management endpoints (#9594)	2025-10-28 15:52:37 +01:00
webhook	chore: remove branding from context imports (#9628)	2025-10-11 01:52:51 +02:00
wiki	chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents (#7994)	2025-05-29 17:34:29 +02:00