Update gitea/gitea Docker tag to v28.3.0 #832

2026-11-02T03:04:44Z

renovate commented

2026-11-02 03:04:44 +00:00

This PR contains the following updates:

Package	Update	Change
gitea/gitea	minor	`28.2.0` → `28.3.0`

Release Notes

go-gitea/gitea (gitea/gitea)

`v28.3.0`

Compare Source

[28.3.0] - 2026-11-01

Enhancements

Improve hover border of colored button groups (#39861) (#39899)
(webhook) Mention release assets in notifications (#39631) (#39912)
(project) Filter project milestones by linked issues (#39958) (#39984)

Performance

(actions) Cache successful runner token verification (#39934) (#39959)
(actions) Is_reusable_caller index makes SQLite read nearly every job row (#40055) (#40064)
Speed up the issue and pull request dashboards and fix table indices (#40001) (#40096)
Speed up repository issue and pull request lists (#40114) (#40132)
(pull) Load the repository once for all commit statuses (#39930) (#40135)

Bug Fixes

(pulls) Tolerate invalid stored review commit_id (#39849) (#39857)
(api) Skip label lookup in ListIssues when no labels filter given (#39890) (#39893)
Prevent system users from watching a repository (#39886) (#39895)
Off-by-one errors in code comment patches (#39887) (#39904)
Use clear error message when failed to parse git version (#39898) (#39903)
(packages) Reject newline-bearing rubygems dependency metadata (#39782) (#39900)
Enforce public-only token scope on more routes (#39690) (#39853)
(api) Return 4xx for invalid fork repository names (#39909) (#39919)
(lfs) Send the default branch as ref in batch download requests (#39891) (#39920)
(api) Keep milestone due date when it is omitted in edit request (#39869) (#39921)
(oauth2) Decode form-encoded client credentials in HTTP Basic auth (#39926) (#39931)
(issues) Keep one row per issue when sorting by exclusive label order (#39364) (#39928)
(api) Check unit read permission in issue sub-resource endpoints (#39885) (#39938)
(migrations) Use cursor pagination for GitHub issue migration too (#39888) (#39941)
(feed) Hide release notes in tags feed without releases access (#39944) (#39949)
(api) Adding issue labels by name attaches both the repo and the org label (#39873) (#39951)
(actions) Bound requested artifact retention (#39894) (#39946)
(actions) Drop untrusted Content-Encoding from v1 artifact uploads (#39855) (#39996)
Get valid UTF-8 for diff_hunk and composer readme (#39932) (#40000)
(diff) Load both blobs of renamed files for diff rendering (#39969) (#39992)
(migrations) Update gitea sdk to fix nil pointer panic (#39999)
Fix OneDev migration with OneDev 16.8 and newer (#40017) (#40026)
(git) Default to the gc maintenance strategy (#40022) (#40029)
Replace null char with space for issue/comment content (#40014) (#40034)
(issue) Prevent redirect to external tracker when built-in tracker is enabled (#39997) (#40031)
(markup) Keep commit title emoji inside links (#39986) (#40032)
(repo) Use the viewed ref's editorconfig in file view, blame and editor (#39973) (#40019)
(deps) Update module golang.org/x/net to v0.62.0 [security] (#40050) (#40051)
Size mermaid iframe by the diagram's aspect ratio (#40046) (#40052)
(feed) Require code read access for the repo home branch feed (#39964) (#40067)
Add missing access checks and size limits (#39942) (#40085)
(user) Answer the follow of a bot user with the profile card (#39980) (#40086)
(repo) Honor ALLOW_FORK_INTO_SAME_OWNER for organizations (#40025) (#40094)
(ui) Ignore code line anchors below 1, show JS errors in vite dev mode (#39432) (#40087)
(pull) Refuse review comments on locked pull requests (#39960) (#40084)
(api) Answer 409 when repository files already exist on disk (#40095) (#40098)
(mail) Preserve outer spacing in notification emails (#40104) (#40111)
(actions) Run review-triggered workflows on the pull request head (#40099) (#40117)
(pull) Respect max approvers in default merge message (#40118) (#40119)
(actions) Don't pick up jobs of repos with Actions disabled (#40106) (#40122)
Harden context user access scope (#39945) (#40115)
(projects) Hide linked pull requests the viewer cannot read (#40016) (#40134)
(pull) Keep review body in sync when its comment is edited (#40058) (#40133)
(auth) Only auto-link the account the external identity points to (#40121) (#40137)
List bot users in gitea admin user list and admin users API (#40060) (#40147)
(repo) Don't get stuck generating contributor stats (#40125) (#40156)

Documentation

Clarify that the team packages permission covers all org packages (#39953) (#39956)

Miscellaneous

(e2e) Enable async clipboard testing pref in Firefox (#39838) (#39927)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gitea/gitea](https://github.com/go-gitea/gitea) | minor | `28.2.0` → `28.3.0` | --- ### Release Notes <details> <summary>go-gitea/gitea (gitea/gitea)</summary> ### [`v28.3.0`](https://github.com/go-gitea/gitea/releases/tag/v28.3.0) [Compare Source](https://github.com/go-gitea/gitea/compare/v28.2.0...v28.3.0) #### \[28.3.0] - 2026-11-01 ##### Enhancements - Improve hover border of colored button groups ([#39861](https://github.com/go-gitea/gitea/issues/39861)) ([#39899](https://github.com/go-gitea/gitea/issues/39899)) - *(webhook)* Mention release assets in notifications ([#39631](https://github.com/go-gitea/gitea/issues/39631)) ([#39912](https://github.com/go-gitea/gitea/issues/39912)) - *(project)* Filter project milestones by linked issues ([#39958](https://github.com/go-gitea/gitea/issues/39958)) ([#39984](https://github.com/go-gitea/gitea/issues/39984)) ##### Performance - *(actions)* Cache successful runner token verification ([#39934](https://github.com/go-gitea/gitea/issues/39934)) ([#39959](https://github.com/go-gitea/gitea/issues/39959)) - *(actions)* Is_reusable_caller index makes SQLite read nearly every job row ([#40055](https://github.com/go-gitea/gitea/issues/40055)) ([#40064](https://github.com/go-gitea/gitea/issues/40064)) - Speed up the issue and pull request dashboards and fix table indices ([#40001](https://github.com/go-gitea/gitea/issues/40001)) ([#40096](https://github.com/go-gitea/gitea/issues/40096)) - Speed up repository issue and pull request lists ([#40114](https://github.com/go-gitea/gitea/issues/40114)) ([#40132](https://github.com/go-gitea/gitea/issues/40132)) - *(pull)* Load the repository once for all commit statuses ([#39930](https://github.com/go-gitea/gitea/issues/39930)) ([#40135](https://github.com/go-gitea/gitea/issues/40135)) ##### Bug Fixes - *(pulls)* Tolerate invalid stored review commit_id ([#39849](https://github.com/go-gitea/gitea/issues/39849)) ([#39857](https://github.com/go-gitea/gitea/issues/39857)) - *(api)* Skip label lookup in ListIssues when no labels filter given ([#39890](https://github.com/go-gitea/gitea/issues/39890)) ([#39893](https://github.com/go-gitea/gitea/issues/39893)) - Prevent system users from watching a repository ([#39886](https://github.com/go-gitea/gitea/issues/39886)) ([#39895](https://github.com/go-gitea/gitea/issues/39895)) - Off-by-one errors in code comment patches ([#39887](https://github.com/go-gitea/gitea/issues/39887)) ([#39904](https://github.com/go-gitea/gitea/issues/39904)) - Use clear error message when failed to parse git version ([#39898](https://github.com/go-gitea/gitea/issues/39898)) ([#39903](https://github.com/go-gitea/gitea/issues/39903)) - *(packages)* Reject newline-bearing rubygems dependency metadata ([#39782](https://github.com/go-gitea/gitea/issues/39782)) ([#39900](https://github.com/go-gitea/gitea/issues/39900)) - Enforce public-only token scope on more routes ([#39690](https://github.com/go-gitea/gitea/issues/39690)) ([#39853](https://github.com/go-gitea/gitea/issues/39853)) - *(api)* Return 4xx for invalid fork repository names ([#39909](https://github.com/go-gitea/gitea/issues/39909)) ([#39919](https://github.com/go-gitea/gitea/issues/39919)) - *(lfs)* Send the default branch as ref in batch download requests ([#39891](https://github.com/go-gitea/gitea/issues/39891)) ([#39920](https://github.com/go-gitea/gitea/issues/39920)) - *(api)* Keep milestone due date when it is omitted in edit request ([#39869](https://github.com/go-gitea/gitea/issues/39869)) ([#39921](https://github.com/go-gitea/gitea/issues/39921)) - *(oauth2)* Decode form-encoded client credentials in HTTP Basic auth ([#39926](https://github.com/go-gitea/gitea/issues/39926)) ([#39931](https://github.com/go-gitea/gitea/issues/39931)) - *(issues)* Keep one row per issue when sorting by exclusive label order ([#39364](https://github.com/go-gitea/gitea/issues/39364)) ([#39928](https://github.com/go-gitea/gitea/issues/39928)) - *(api)* Check unit read permission in issue sub-resource endpoints ([#39885](https://github.com/go-gitea/gitea/issues/39885)) ([#39938](https://github.com/go-gitea/gitea/issues/39938)) - *(migrations)* Use cursor pagination for GitHub issue migration too ([#39888](https://github.com/go-gitea/gitea/issues/39888)) ([#39941](https://github.com/go-gitea/gitea/issues/39941)) - *(feed)* Hide release notes in tags feed without releases access ([#39944](https://github.com/go-gitea/gitea/issues/39944)) ([#39949](https://github.com/go-gitea/gitea/issues/39949)) - *(api)* Adding issue labels by name attaches both the repo and the org label ([#39873](https://github.com/go-gitea/gitea/issues/39873)) ([#39951](https://github.com/go-gitea/gitea/issues/39951)) - *(actions)* Bound requested artifact retention ([#39894](https://github.com/go-gitea/gitea/issues/39894)) ([#39946](https://github.com/go-gitea/gitea/issues/39946)) - *(actions)* Drop untrusted Content-Encoding from v1 artifact uploads ([#39855](https://github.com/go-gitea/gitea/issues/39855)) ([#39996](https://github.com/go-gitea/gitea/issues/39996)) - Get valid UTF-8 for diff_hunk and composer readme ([#39932](https://github.com/go-gitea/gitea/issues/39932)) ([#40000](https://github.com/go-gitea/gitea/issues/40000)) - *(diff)* Load both blobs of renamed files for diff rendering ([#39969](https://github.com/go-gitea/gitea/issues/39969)) ([#39992](https://github.com/go-gitea/gitea/issues/39992)) - *(migrations)* Update gitea sdk to fix nil pointer panic ([#39999](https://github.com/go-gitea/gitea/issues/39999)) - Fix OneDev migration with OneDev 16.8 and newer ([#40017](https://github.com/go-gitea/gitea/issues/40017)) ([#40026](https://github.com/go-gitea/gitea/issues/40026)) - *(git)* Default to the gc maintenance strategy ([#40022](https://github.com/go-gitea/gitea/issues/40022)) ([#40029](https://github.com/go-gitea/gitea/issues/40029)) - Replace null char with space for issue/comment content ([#40014](https://github.com/go-gitea/gitea/issues/40014)) ([#40034](https://github.com/go-gitea/gitea/issues/40034)) - *(issue)* Prevent redirect to external tracker when built-in tracker is enabled ([#39997](https://github.com/go-gitea/gitea/issues/39997)) ([#40031](https://github.com/go-gitea/gitea/issues/40031)) - *(markup)* Keep commit title emoji inside links ([#39986](https://github.com/go-gitea/gitea/issues/39986)) ([#40032](https://github.com/go-gitea/gitea/issues/40032)) - *(repo)* Use the viewed ref's editorconfig in file view, blame and editor ([#39973](https://github.com/go-gitea/gitea/issues/39973)) ([#40019](https://github.com/go-gitea/gitea/issues/40019)) - *(deps)* Update module golang.org/x/net to v0.62.0 \[security] ([#40050](https://github.com/go-gitea/gitea/issues/40050)) ([#40051](https://github.com/go-gitea/gitea/issues/40051)) - Size mermaid iframe by the diagram's aspect ratio ([#40046](https://github.com/go-gitea/gitea/issues/40046)) ([#40052](https://github.com/go-gitea/gitea/issues/40052)) - *(feed)* Require code read access for the repo home branch feed ([#39964](https://github.com/go-gitea/gitea/issues/39964)) ([#40067](https://github.com/go-gitea/gitea/issues/40067)) - Add missing access checks and size limits ([#39942](https://github.com/go-gitea/gitea/issues/39942)) ([#40085](https://github.com/go-gitea/gitea/issues/40085)) - *(user)* Answer the follow of a bot user with the profile card ([#39980](https://github.com/go-gitea/gitea/issues/39980)) ([#40086](https://github.com/go-gitea/gitea/issues/40086)) - *(repo)* Honor ALLOW_FORK_INTO_SAME_OWNER for organizations ([#40025](https://github.com/go-gitea/gitea/issues/40025)) ([#40094](https://github.com/go-gitea/gitea/issues/40094)) - *(ui)* Ignore code line anchors below 1, show JS errors in vite dev mode ([#39432](https://github.com/go-gitea/gitea/issues/39432)) ([#40087](https://github.com/go-gitea/gitea/issues/40087)) - *(pull)* Refuse review comments on locked pull requests ([#39960](https://github.com/go-gitea/gitea/issues/39960)) ([#40084](https://github.com/go-gitea/gitea/issues/40084)) - *(api)* Answer 409 when repository files already exist on disk ([#40095](https://github.com/go-gitea/gitea/issues/40095)) ([#40098](https://github.com/go-gitea/gitea/issues/40098)) - *(mail)* Preserve outer spacing in notification emails ([#40104](https://github.com/go-gitea/gitea/issues/40104)) ([#40111](https://github.com/go-gitea/gitea/issues/40111)) - *(actions)* Run review-triggered workflows on the pull request head ([#40099](https://github.com/go-gitea/gitea/issues/40099)) ([#40117](https://github.com/go-gitea/gitea/issues/40117)) - *(pull)* Respect max approvers in default merge message ([#40118](https://github.com/go-gitea/gitea/issues/40118)) ([#40119](https://github.com/go-gitea/gitea/issues/40119)) - *(actions)* Don't pick up jobs of repos with Actions disabled ([#40106](https://github.com/go-gitea/gitea/issues/40106)) ([#40122](https://github.com/go-gitea/gitea/issues/40122)) - Harden context user access scope ([#39945](https://github.com/go-gitea/gitea/issues/39945)) ([#40115](https://github.com/go-gitea/gitea/issues/40115)) - *(projects)* Hide linked pull requests the viewer cannot read ([#40016](https://github.com/go-gitea/gitea/issues/40016)) ([#40134](https://github.com/go-gitea/gitea/issues/40134)) - *(pull)* Keep review body in sync when its comment is edited ([#40058](https://github.com/go-gitea/gitea/issues/40058)) ([#40133](https://github.com/go-gitea/gitea/issues/40133)) - *(auth)* Only auto-link the account the external identity points to ([#40121](https://github.com/go-gitea/gitea/issues/40121)) ([#40137](https://github.com/go-gitea/gitea/issues/40137)) - List bot users in `gitea admin user list` and admin users API ([#40060](https://github.com/go-gitea/gitea/issues/40060)) ([#40147](https://github.com/go-gitea/gitea/issues/40147)) - *(repo)* Don't get stuck generating contributor stats ([#40125](https://github.com/go-gitea/gitea/issues/40125)) ([#40156](https://github.com/go-gitea/gitea/issues/40156)) ##### Documentation - Clarify that the team packages permission covers all org packages ([#39953](https://github.com/go-gitea/gitea/issues/39953)) ([#39956](https://github.com/go-gitea/gitea/issues/39956)) ##### Miscellaneous - *(e2e)* Enable async clipboard testing pref in Firefox ([#39838](https://github.com/go-gitea/gitea/issues/39838)) ([#39927](https://github.com/go-gitea/gitea/issues/39927)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate added 1 commit 2026-11-03 03:13:40 +00:00

Update gitea/gitea Docker tag to v28.3.0 b33aadf4b1

renovate force-pushed renovate/gitea-gitea-28.x from 8f69e7a87c to b33aadf4b1

2026-11-03 03:13:40 +00:00

Compare

AverageMarcus merged commit a9e3a4556c into master

2026-11-03 07:53:29 +00:00

AverageMarcus deleted branch renovate/gitea-gitea-28.x

2026-11-03 07:53:29 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#832