This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [gitea/gitea](https://github.com/go-gitea/gitea) | patch | `1.27.0` → `1.27.1` |
---
### Release Notes
<details>
<summary>go-gitea/gitea (gitea/gitea)</summary>
### [`v1.27.1`](https://github.com/go-gitea/gitea/blob/HEAD/CHANGELOG.md#1271---2026-07-27)
[Compare Source](https://github.com/go-gitea/gitea/compare/v1.27.0...v1.27.1)
- SECURITY
- fix(oauth2): enforce mandatory 2FA policy on OAuth2 authorize/grant endpoints ([#​38591](https://github.com/go-gitea/gitea/issues/38591)) ([#​38606](https://github.com/go-gitea/gitea/issues/38606))
- API
- fix(api): align Swagger schemas for UserSettings and TopicListResponse ([#​38590](https://github.com/go-gitea/gitea/issues/38590)) ([#​38592](https://github.com/go-gitea/gitea/issues/38592))
- ENHANCEMENTS
- enhance: improve diff contrast in light and dark themes ([#​37477](https://github.com/go-gitea/gitea/issues/37477)) ([#​38574](https://github.com/go-gitea/gitea/issues/38574))
- BUGFIXES
- fix: skip OIDC end-session after password login for OAuth2 users ([#​38439](https://github.com/go-gitea/gitea/issues/38439)) ([#​38666](https://github.com/go-gitea/gitea/issues/38666))
- fix: make Actions log parser support multiple line message encoding ([#​38659](https://github.com/go-gitea/gitea/issues/38659)) ([#​38664](https://github.com/go-gitea/gitea/issues/38664))
- fix(actions): use base branch ref for pull\_request\_target context ([#​38636](https://github.com/go-gitea/gitea/issues/38636)) ([#​38657](https://github.com/go-gitea/gitea/issues/38657))
- fix(actions): skip already-approved runs in `ApproveRuns` ([#​38653](https://github.com/go-gitea/gitea/issues/38653)) ([#​38654](https://github.com/go-gitea/gitea/issues/38654))
- fix: orgmode render include path ([#​38642](https://github.com/go-gitea/gitea/issues/38642)) ([#​38645](https://github.com/go-gitea/gitea/issues/38645))
- fix(actions): cancel tasks immediately when the runner stopped reporting ([#​38616](https://github.com/go-gitea/gitea/issues/38616)) ([#​38644](https://github.com/go-gitea/gitea/issues/38644))
- fix(issues): fix label bulk-load key and reduce log noise in LoadLabel ([#​38632](https://github.com/go-gitea/gitea/issues/38632)) ([#​38643](https://github.com/go-gitea/gitea/issues/38643))
- fix(actions): improve runner list status sorting, labels and task job links ([#​38586](https://github.com/go-gitea/gitea/issues/38586)) ([#​38633](https://github.com/go-gitea/gitea/issues/38633))
- fix(actions): correctness and hardening fixes ([#​38518](https://github.com/go-gitea/gitea/issues/38518)) ([#​38631](https://github.com/go-gitea/gitea/issues/38631))
- fix(repo): prevent double-write redirect collisions on dependency errors, fix ui ([#​38627](https://github.com/go-gitea/gitea/issues/38627)) ([#​38628](https://github.com/go-gitea/gitea/issues/38628))
- fix: delete repo-scoped rows of seven more tables when deleting a repository ([#​38534](https://github.com/go-gitea/gitea/issues/38534)) ([#​38618](https://github.com/go-gitea/gitea/issues/38618))
- fix(webhook): remove slack channel name check ([#​38608](https://github.com/go-gitea/gitea/issues/38608)) ([#​38612](https://github.com/go-gitea/gitea/issues/38612))
- fix: download dropdown menu clipped on the branches page ([#​38604](https://github.com/go-gitea/gitea/issues/38604)) ([#​38609](https://github.com/go-gitea/gitea/issues/38609))
- fix(project): prevent database mutations on invalid MoveIssues payload ([#​38600](https://github.com/go-gitea/gitea/issues/38600)) ([#​38602](https://github.com/go-gitea/gitea/issues/38602))
- fix(actions): make SingleWorkflow\.Marshal round-trip multi-line run blocks (stop silent job stranding) ([#​38520](https://github.com/go-gitea/gitea/issues/38520)) ([#​38599](https://github.com/go-gitea/gitea/issues/38599))
- fix(file-tree): handle submodule links and missing view container ([#​38033](https://github.com/go-gitea/gitea/issues/38033)) ([#​38589](https://github.com/go-gitea/gitea/issues/38589))
- fix(actions): fail unexpandable reusable workflow callers and decouple the job emitter's cross-run processing ([#​38565](https://github.com/go-gitea/gitea/issues/38565)) ([#​38587](https://github.com/go-gitea/gitea/issues/38587))
- fix: keep serving valid ACME cert when renewal fails at startup ([#​38554](https://github.com/go-gitea/gitea/issues/38554)) ([#​38583](https://github.com/go-gitea/gitea/issues/38583))
- fix: branch protection user list ([#​38570](https://github.com/go-gitea/gitea/issues/38570)) ([#​38584](https://github.com/go-gitea/gitea/issues/38584))
- fix(pulls): respect diff.orderFile in diff file tree ([#​38566](https://github.com/go-gitea/gitea/issues/38566)) ([#​38578](https://github.com/go-gitea/gitea/issues/38578))
- fix(issue): make issue action (issue list batch operation) elements have correct attributes ([#​38575](https://github.com/go-gitea/gitea/issues/38575)) ([#​38580](https://github.com/go-gitea/gitea/issues/38580))
- fix(actions): support `matrix` when evaluating workflow `if` expression ([#​38474](https://github.com/go-gitea/gitea/issues/38474)) ([#​38557](https://github.com/go-gitea/gitea/issues/38557))
- fix(actions): align status icon span for Safari rendering ([#​38558](https://github.com/go-gitea/gitea/issues/38558)) ([#​38562](https://github.com/go-gitea/gitea/issues/38562))
- fix: revert git clone http redirection forbidden ([#​38530](https://github.com/go-gitea/gitea/issues/38530)) ([#​38545](https://github.com/go-gitea/gitea/issues/38545))
- fix: clean up orphaned user-keyed tables in deleteUser ([#​38511](https://github.com/go-gitea/gitea/issues/38511)) ([#​38514](https://github.com/go-gitea/gitea/issues/38514))
- fix(actions): coerce workflow\_dispatch boolean inputs to native types ([#​38472](https://github.com/go-gitea/gitea/issues/38472)) ([#​38521](https://github.com/go-gitea/gitea/issues/38521))
- fix: make the merge box button red if some checks fail ([#​38508](https://github.com/go-gitea/gitea/issues/38508)) ([#​38516](https://github.com/go-gitea/gitea/issues/38516))
- fix(pull): sign the commit when updating a branch by merge ([#​38441](https://github.com/go-gitea/gitea/issues/38441)) ([#​38499](https://github.com/go-gitea/gitea/issues/38499))
- fix: make commit message merge correctly ([#​38490](https://github.com/go-gitea/gitea/issues/38490)) ([#​38502](https://github.com/go-gitea/gitea/issues/38502))
- fix(actions): explain why a blocked or waiting job has not started ([#​38476](https://github.com/go-gitea/gitea/issues/38476)) ([#​38498](https://github.com/go-gitea/gitea/issues/38498))
- fix(actions): make `cancelled()` work in job `if` evaluation ([#​38495](https://github.com/go-gitea/gitea/issues/38495)) ([#​38497](https://github.com/go-gitea/gitea/issues/38497))
- fix(actions): show retention info on hover for expired artifacts ([#​38477](https://github.com/go-gitea/gitea/issues/38477)) ([#​38493](https://github.com/go-gitea/gitea/issues/38493))
- fix(actions): group reusable-workflow matrix legs in the workflow graph ([#​38475](https://github.com/go-gitea/gitea/issues/38475)) ([#​38492](https://github.com/go-gitea/gitea/issues/38492))
- fix: full file highlighting for git diff with CR char ([#​38484](https://github.com/go-gitea/gitea/issues/38484)) ([#​38491](https://github.com/go-gitea/gitea/issues/38491))
- fix(packages): serve noarch Alpine index for any requested architecture ([#​38479](https://github.com/go-gitea/gitea/issues/38479)) ([#​38486](https://github.com/go-gitea/gitea/issues/38486))
- fix: 500 error when updating user visibility ([#​38480](https://github.com/go-gitea/gitea/issues/38480)) ([#​38483](https://github.com/go-gitea/gitea/issues/38483))
- fix(actions): make job list item fully clickable ([#​38462](https://github.com/go-gitea/gitea/issues/38462)) ([#​38471](https://github.com/go-gitea/gitea/issues/38471))
- fix: mail template for push event ([#​38467](https://github.com/go-gitea/gitea/issues/38467)) ([#​38468](https://github.com/go-gitea/gitea/issues/38468))
- fix: make "test push webhook" always work ([#​38425](https://github.com/go-gitea/gitea/issues/38425)) ([#​38455](https://github.com/go-gitea/gitea/issues/38455))
- fix(actions): prevent bulk actions from affecting all runners ([#​38453](https://github.com/go-gitea/gitea/issues/38453)) ([#​38457](https://github.com/go-gitea/gitea/issues/38457))
- fix(org): align follow button and wrap description ([#​38448](https://github.com/go-gitea/gitea/issues/38448)) ([#​38454](https://github.com/go-gitea/gitea/issues/38454))
- fix(actions): populate `github.event` for scheduled runs ([#​38446](https://github.com/go-gitea/gitea/issues/38446)) ([#​38452](https://github.com/go-gitea/gitea/issues/38452))
- MISC
- refactor: git patch apply ([#​38637](https://github.com/go-gitea/gitea/issues/38637)) ([#​38638](https://github.com/go-gitea/gitea/issues/38638))
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODUuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjQuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
1.27.0→1.27.1Release Notes
go-gitea/gitea (gitea/gitea)
v1.27.1Compare Source
SECURITY
API
ENHANCEMENTS
BUGFIXES
ApproveRuns(#38653) (#38654)matrixwhen evaluating workflowifexpression (#38474) (#38557)cancelled()work in jobifevaluation (#38495) (#38497)github.eventfor scheduled runs (#38446) (#38452)MISC
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.