AverageMarcus/cluster.fun
1
0
Fork 0
Code Issues 1 Pull Requests 3 Releases Activity

Update gitea/gitea Docker tag to v1.26.2 #709

Merged
AverageMarcus merged 1 commits from renovate/gitea-gitea-1.x into master 2026-05-21 14:56:05 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate commented 2026-05-21 03:09:52 +00:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
gitea/gitea patch 1.26.1 → 1.26.2

Release Notes

go-gitea/gitea (gitea/gitea)

v1.26.2

Compare Source

  • SECURITY

    • fix(permissions): Fix reading permission (#​37769)
    • fix(actions): make artifact signature payloads unambiguous (#​37707)
    • fix: Unify public-only token filtering in API queries and repo access checks (#​37118)
    • fix: Add missed token scope checking (#​37735)
    • fix(oauth): bind token exchanges to the original client request (#​37704)
    • fix(oauth): strengthen PKCE validation and refresh token replay protection (#​37706)
    • fix(web): enforce token scopes on raw, media, and attachment downloads (#​37698)
    • fix(security): enforce wiki git writes and LFS token access at request time (#​37695)
    • feat(api): encrypt AWS creds (#​37679)
    • fix(deps): update dependency mermaid to v11.15.0 [security], add e2e test
    • fix(packages): Add label for private and internal package and fix composor package source permission check (#​37610)
    • fix(git): Fix smart http request scope bug (#​37583)
    • Fix basic auth bug (#​37503)
    • Fix allow maintainer edit permission check (#​37479) (#​37484)
    • Fix URL sanitization to handle schemeless credentials (#​37440) (#​37471)
    • Fix attachment Content-Security-Policy (#​37455) (#​37464)
    • chore(deps): bump go-git/go-git/v5 to 5.19.0 (#​37608)

  • BUGFIXES

    • fix(pull): handle empty pull request files view to allow reviews (#​37783)
    • fix(markup): make RenderString never fail (#​37779)
    • fix: add natural sort to sortTreeViewNodes (#​37772)
    • fix: package creation unique conflict (#​37774)
    • fix!: add DEFAULT_TITLE_SOURCE setting for pull request title default behavior (#​37465)
    • fix: Allow direct commits for unprotected files with push restrictions (#​37657)
    • fix(actions): wrong assumption that run id always >= job id (#​37737)
    • fix(auth): set User-Agent on avatar fetch and sync avatar on link-account register (#​37564) (#​37588)
    • fix(actions): deadlock between PrepareRunAndInsert and UpdateTaskByState (#​37692)
    • fix(repo): /generate must sync the branch table for the new repo (#​37693)
    • build: Fix snap build (1.26)
    • fix(actions): run TransferLogs on UpdateLog{Rows:[], NoMore:true} (#​37631)
    • fix show correct mergebase
    • fix: make clone URL respect public URL detection setting (#​37615)
    • fix: "run as root" check (#​37622)
    • chore(deps): update dependency go to v1.26.3 (#​37601)
    • Compare dropdown fails when selecting branch with no common merge-base (#​37470)
    • fix: treat email addresses case-insensitively (#​37600)
    • fix(actions): fix blank lines after ::endgroup:: (#​37597)
    • fix(actions): report individual step status in workflow job API response (#​37592)
    • fix: Invalid UTF-8 commit messages in JSON API responses (#​37542)
    • fix: use consistent GetUser family functions (#​37553)
    • fix(api): return 409 message instead of empty JSON for wrong commit id (#​37572)
    • fix(actions): prevent panic when workflow contains null jobs (#​37570)
    • Make ServeSetHeaders default to download attachment if filename exists (#​37552) (#​37555)
    • Fix(actions): validate workflow param to prevent 500 error (#​37546) (#​37554)
    • Don't unblock run-level-concurrency-blocked runs in the resolver (#​37461) (#​37538)
    • Fix(packages): use file names for generic web downloads (#​37514) (#​37520)
    • Fix merge autodetect can't close other PRs but only the last one when multiple PRs are pushed at once (#​37512) (#​37516)
    • Fix update branch protection order (#​37508) (#​37513)
    • Fix mCaptcha broken after Vite migration (#​37492) (#​37509)
    • Fix review submission from single-commit PR view (#​37475) (#​37485)
    • Fix scheduled action panic with null event payload (#​37459) (#​37466)
    • Make GetPossibleUserByID can handle deleted user (#​37430) (#​37431)
    • Remove excessive quote from terraform instructions (#​37424) (#​37426)
    • Fix color regressions, add priority color (#​37417) (#​37421)

  • MISC

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gitea/gitea](https://github.com/go-gitea/gitea) | patch | `1.26.1` → `1.26.2` | --- ### Release Notes <details> <summary>go-gitea/gitea (gitea/gitea)</summary> ### [`v1.26.2`](https://github.com/go-gitea/gitea/blob/HEAD/CHANGELOG.md#1262---2026-05-20) [Compare Source](https://github.com/go-gitea/gitea/compare/v1.26.1...v1.26.2) - SECURITY - fix(permissions): Fix reading permission ([#&#8203;37769](https://github.com/go-gitea/gitea/issues/37769)) - fix(actions): make artifact signature payloads unambiguous ([#&#8203;37707](https://github.com/go-gitea/gitea/issues/37707)) - fix: Unify public-only token filtering in API queries and repo access checks ([#&#8203;37118](https://github.com/go-gitea/gitea/issues/37118)) - fix: Add missed token scope checking ([#&#8203;37735](https://github.com/go-gitea/gitea/issues/37735)) - fix(oauth): bind token exchanges to the original client request ([#&#8203;37704](https://github.com/go-gitea/gitea/issues/37704)) - fix(oauth): strengthen PKCE validation and refresh token replay protection ([#&#8203;37706](https://github.com/go-gitea/gitea/issues/37706)) - fix(web): enforce token scopes on raw, media, and attachment downloads ([#&#8203;37698](https://github.com/go-gitea/gitea/issues/37698)) - fix(security): enforce wiki git writes and LFS token access at request time ([#&#8203;37695](https://github.com/go-gitea/gitea/issues/37695)) - feat(api): encrypt AWS creds ([#&#8203;37679](https://github.com/go-gitea/gitea/issues/37679)) - fix(deps): update dependency mermaid to v11.15.0 \[security], add e2e test - fix(packages): Add label for private and internal package and fix composor package source permission check ([#&#8203;37610](https://github.com/go-gitea/gitea/issues/37610)) - fix(git): Fix smart http request scope bug ([#&#8203;37583](https://github.com/go-gitea/gitea/issues/37583)) - Fix basic auth bug ([#&#8203;37503](https://github.com/go-gitea/gitea/issues/37503)) - Fix allow maintainer edit permission check ([#&#8203;37479](https://github.com/go-gitea/gitea/issues/37479)) ([#&#8203;37484](https://github.com/go-gitea/gitea/issues/37484)) - Fix URL sanitization to handle schemeless credentials ([#&#8203;37440](https://github.com/go-gitea/gitea/issues/37440)) ([#&#8203;37471](https://github.com/go-gitea/gitea/issues/37471)) - Fix attachment Content-Security-Policy ([#&#8203;37455](https://github.com/go-gitea/gitea/issues/37455)) ([#&#8203;37464](https://github.com/go-gitea/gitea/issues/37464)) - chore(deps): bump go-git/go-git/v5 to 5.19.0 ([#&#8203;37608](https://github.com/go-gitea/gitea/issues/37608)) - BUGFIXES - fix(pull): handle empty pull request files view to allow reviews ([#&#8203;37783](https://github.com/go-gitea/gitea/issues/37783)) - fix(markup): make RenderString never fail ([#&#8203;37779](https://github.com/go-gitea/gitea/issues/37779)) - fix: add natural sort to sortTreeViewNodes ([#&#8203;37772](https://github.com/go-gitea/gitea/issues/37772)) - fix: package creation unique conflict ([#&#8203;37774](https://github.com/go-gitea/gitea/issues/37774)) - fix!: add DEFAULT\_TITLE\_SOURCE setting for pull request title default behavior ([#&#8203;37465](https://github.com/go-gitea/gitea/issues/37465)) - fix: Allow direct commits for unprotected files with push restrictions ([#&#8203;37657](https://github.com/go-gitea/gitea/issues/37657)) - fix(actions): wrong assumption that run id always >= job id ([#&#8203;37737](https://github.com/go-gitea/gitea/issues/37737)) - fix(auth): set User-Agent on avatar fetch and sync avatar on link-account register ([#&#8203;37564](https://github.com/go-gitea/gitea/issues/37564)) ([#&#8203;37588](https://github.com/go-gitea/gitea/issues/37588)) - fix(actions): deadlock between PrepareRunAndInsert and UpdateTaskByState ([#&#8203;37692](https://github.com/go-gitea/gitea/issues/37692)) - fix(repo): /generate must sync the branch table for the new repo ([#&#8203;37693](https://github.com/go-gitea/gitea/issues/37693)) - build: Fix snap build (1.26) - fix(actions): run TransferLogs on UpdateLog{Rows:\[], NoMore:true} ([#&#8203;37631](https://github.com/go-gitea/gitea/issues/37631)) - fix show correct mergebase - fix: make clone URL respect public URL detection setting ([#&#8203;37615](https://github.com/go-gitea/gitea/issues/37615)) - fix: "run as root" check ([#&#8203;37622](https://github.com/go-gitea/gitea/issues/37622)) - chore(deps): update dependency go to v1.26.3 ([#&#8203;37601](https://github.com/go-gitea/gitea/issues/37601)) - Compare dropdown fails when selecting branch with no common merge-base ([#&#8203;37470](https://github.com/go-gitea/gitea/issues/37470)) - fix: treat email addresses case-insensitively ([#&#8203;37600](https://github.com/go-gitea/gitea/issues/37600)) - fix(actions): fix blank lines after ::endgroup:: ([#&#8203;37597](https://github.com/go-gitea/gitea/issues/37597)) - fix(actions): report individual step status in workflow job API response ([#&#8203;37592](https://github.com/go-gitea/gitea/issues/37592)) - fix: Invalid UTF-8 commit messages in JSON API responses ([#&#8203;37542](https://github.com/go-gitea/gitea/issues/37542)) - fix: use consistent GetUser family functions ([#&#8203;37553](https://github.com/go-gitea/gitea/issues/37553)) - fix(api): return 409 message instead of empty JSON for wrong commit id ([#&#8203;37572](https://github.com/go-gitea/gitea/issues/37572)) - fix(actions): prevent panic when workflow contains null jobs ([#&#8203;37570](https://github.com/go-gitea/gitea/issues/37570)) - Make ServeSetHeaders default to download attachment if filename exists ([#&#8203;37552](https://github.com/go-gitea/gitea/issues/37552)) ([#&#8203;37555](https://github.com/go-gitea/gitea/issues/37555)) - Fix(actions): validate workflow param to prevent 500 error ([#&#8203;37546](https://github.com/go-gitea/gitea/issues/37546)) ([#&#8203;37554](https://github.com/go-gitea/gitea/issues/37554)) - Don't unblock run-level-concurrency-blocked runs in the resolver ([#&#8203;37461](https://github.com/go-gitea/gitea/issues/37461)) ([#&#8203;37538](https://github.com/go-gitea/gitea/issues/37538)) - Fix(packages): use file names for generic web downloads ([#&#8203;37514](https://github.com/go-gitea/gitea/issues/37514)) ([#&#8203;37520](https://github.com/go-gitea/gitea/issues/37520)) - Fix merge autodetect can't close other PRs but only the last one when multiple PRs are pushed at once ([#&#8203;37512](https://github.com/go-gitea/gitea/issues/37512)) ([#&#8203;37516](https://github.com/go-gitea/gitea/issues/37516)) - Fix update branch protection order ([#&#8203;37508](https://github.com/go-gitea/gitea/issues/37508)) ([#&#8203;37513](https://github.com/go-gitea/gitea/issues/37513)) - Fix mCaptcha broken after Vite migration ([#&#8203;37492](https://github.com/go-gitea/gitea/issues/37492)) ([#&#8203;37509](https://github.com/go-gitea/gitea/issues/37509)) - Fix review submission from single-commit PR view ([#&#8203;37475](https://github.com/go-gitea/gitea/issues/37475)) ([#&#8203;37485](https://github.com/go-gitea/gitea/issues/37485)) - Fix scheduled action panic with null event payload ([#&#8203;37459](https://github.com/go-gitea/gitea/issues/37459)) ([#&#8203;37466](https://github.com/go-gitea/gitea/issues/37466)) - Make GetPossibleUserByID can handle deleted user ([#&#8203;37430](https://github.com/go-gitea/gitea/issues/37430)) ([#&#8203;37431](https://github.com/go-gitea/gitea/issues/37431)) - Remove excessive quote from terraform instructions ([#&#8203;37424](https://github.com/go-gitea/gitea/issues/37424)) ([#&#8203;37426](https://github.com/go-gitea/gitea/issues/37426)) - Fix color regressions, add `priority` color ([#&#8203;37417](https://github.com/go-gitea/gitea/issues/37417)) ([#&#8203;37421](https://github.com/go-gitea/gitea/issues/37421)) - MISC - Add CurrentURL template variable back ([#&#8203;37444](https://github.com/go-gitea/gitea/issues/37444)) ([#&#8203;37449](https://github.com/go-gitea/gitea/issues/37449)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE5MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate added 1 commit 2026-05-21 03:09:53 +00:00
Update gitea/gitea Docker tag to v1.26.2 3bef85f5a6
AverageMarcus merged commit 5e9efc3a3b into master 2026-05-21 14:56:05 +00:00
AverageMarcus deleted branch renovate/gitea-gitea-1.x 2026-05-21 14:56:05 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate (Renovate Bot) AverageMarcus (Marcus Noble)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#709