Update gitea/gitea Docker tag to v1.27.0 #41

2026-07-14T00:01:33Z

renovate-bot commented

2026-07-14 00:01:33 +00:00

This PR contains the following updates:

Package	Update	Change
gitea/gitea	minor	`1.26.4` → `1.27.0`

Release Notes

go-gitea/gitea (gitea/gitea)

`v1.27.0`

Compare Source

BREAKING
- Feat(actions)!: improve support for reusable workflows (#37478)
- Use Content-Security-Policy: script nonce (#37232)
SECURITY
- Fix: various security fixes (#38406) (#38426)
- Fix(security): harden access checks and migration validation (#38324) (#38400)
- Fix: enforce public-only token scope and harden push options / locale parsing (#38323) (#38399)
- Fix(pull): re-evaluate review official flag on target branch change (#38319) (#38402)
- Fix(api): stop leaking private repo metadata after access revocation (#38321) (#38390)
- Fix(lfs): require proof of possession for cross-repo objects (#38322) (#38389)
- Fix(mirror): disable HTTP redirects on pull mirror sync (#38320) (#38367)
- Fix: golang html template url escaping (#38363) (#38369)
- Fix(release): validate web attachment renames against allowed types (#38314) (#38328)
- Fix(release): gate draft release attachments on web download endpoints (#38318) (#38325)
- Fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] (#37786)
- Fix(oauth): restrict introspection to the token's client (#38042)
- Fix(api): don't expose private org membership via public_members (#38145)
- Fix(actions): deny fork-PR cross-repo access via collaborative owner (#38214)
- Fix(migrations): prevent path traversal in repository restore (#38215)
FEATURES
- Feat(actions): add workflow status badge modal (#38196)
- Feat(actions): support owner-level and global scoped workflows (#38154)
- Feat(api): support ref suffixes in compare (#38148)
- Feat(actions): implement jobs.<job_id>.continue-on-error (#38100)
- Feat(actions): show run status on browser tab favicon (#38071)
- Feat(api): add token introspection and self-deletion endpoint (#37995)
- Feat(api): add q parameter to list branches API for server-side filtering (#37982)
- Feat(repo): split repository creation limit into user and org scopes (#37872)
- Feat(actions): bulk delete, disable and enable runners in admin UI (#37869)
- Feat(actions): List workflows that were executed once but got removed from the default branch (#37835)
- Feat(org): add team visibility so org members can discover teams (#37680)
- Feat: add raw diff/patch endpoint for repository comparisons (#37632)
- Feat: Add avatar stacks (#37594)
- Feat(actions): add job summaries (GITHUB_STEP_SUMMARY) (#37500)
- Feat(web): Add Jupyter Notebook (.ipynb) Rendering Support (#37433)
- Support for Custom URI Schemes in OAuth2 Redirect URIs (#37356)
- Feat(orgs): Add search bar for organization members tab page (#37347)
- Feat(api): Add assignees APIs (#37330)
- Feat(api): Add GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs (#37196)
- Serve OpenAPI 3.0 spec at /openapi.v1.json (#37038)
- Add project column picker to issue and pull request sidebar (#37037)
- Allow multiple projects per issue and pull requests (#36784)
- Feat(ui): add "follow rename" to file commit history list (#34994)
- Feat(ssh): auto generate additional ssh keys (#33974)
ENHANCEMENTS
- Enhance(actions): only create filtered-out workflow commit status for required contexts (#38371) (#38385)
- Enhance: allow builtin default git config options to be overridden (#38172)
- Enhance: allow MathML core elements (#38034)
- Enhance(markup): improve issue title rendering (#37908)
- Enhance(actions): set descriptive browser tab title on run view (#37870)
- Enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 (#37866)
- Enhance(actions): show workflow name from YAML instead of filename (#37833)
- Feat(actions): add before/after to PR synchronize event payload (#37827)
- Enhance(actions): add branch filters to run list (#37826)
- Enhance(actions): Make Summary UI more beautiful with more infos (#37824)
- Feat: add copy button to action step header, improve other copy buttons (#37744)
- Fix(icon): use repo-forked icon to display forks count (#37731)
- Feat(api): add sort and order query parameters to job list endpoints (#37672)
- Feat(api): add last_sync to repository API (#37566)
- Enhance: Adjust Workflow Graph styling (#37497)
- Improve code editor text selection and clean up lint enablement (#37474)
- Add mirror auth updates to repo edit API and settings (#37468)
- Replace olivere/elastic with REST API client, add OpenSearch support (#37411)
- Feat: Add default PR branch update style setting (#37410)
- Fix inconsistent disabled styling on logged-out repo header buttons (#37406)
- Allow fast-forward-only merge when signed commits are required (#37335)
- Enhance styling in actions page (#37323)
- Fix: improve actions status icons and texts (#37206)
- Make Markdown fenced code block work with more syntaxes (#37154)
- Fix: Sort action run jobs by JobID and Name with matrix examples (#37046)
- Add API endpoint to reply to pull request review comments (#36683)
PERFORMANCE
- Perf(actions): debounce runner heartbeat writes and throttle task picks (#38281) (#38368)
- Perf(web): sort the action_run query by a repo-scoped index when possible (#38155)
- Perf: Various performance regression fixes (#38078)
- Perf: extend action c_u index to include created_unix for faster dashboard feeds (#38076)
- Batch-load related data in actions run, job, and task API endpoints (#37032)
BUGFIXES
- Fix(util): reject invalid characters between time-estimate units (#38416) (#38423)
- Fix: represent a deleted assignee team as a Ghost team (#38413) (#38419)
- Fix(turnstile): route CAPTCHA verification through the configured proxy (#38412) (#38420)
- Fix: refresh pull request merge box when the commit status is pending (#38410) (#38411)
- Fix: actions task state concurrent update (#38405) (#38409)
- Fix(actions): keep workflow run trailing on one row with long branch names (#38382) (#38403)
- Fix(web): use locale-aware date formatting for contribution calendar tooltips (#38398) (#38401)
- Fix: co-author detection (#38392) (#38397)
- Fix: incorrect co-author detection on commit page (#38386) (#38387)
- Fix(ui): restore commits table column widths (#38379) (#38383)
- Fix: minio init check (#38355) (#38361)
- Fix: org project view assignee list (#38357) (#38360)
- Fix(actions): release claimed task if context is cancelled during FetchTask (#38343) (#38347)
- Fix(actions): make runner list pagination order deterministic (#38313) (#38327)
- Fix: Improve since/until when counting commits for X-Total-Count (#38243) (#38304)
- Fix(actions): prevent chevron overlap with log text when timestamps are enabled (#38227) (#38307)
- Fix(workflows): branch protection status checks fail when workflow uses on: paths filter (#38237) (#38302)
- Fix(oauth2): persist linkAccountData during auto-link 2FA flow (#38274) (#38295)
- Fix(actions): allow Actions bot to push to protected branches (#38284) (#38293)
- Fix(actions): include all aggregable run statuses in status filter (#38280) (#38287)
- Fix(archiver): use serializable repo-archive queue payload (#38273) (#38283)
- Fix: update npm dependencies, fix misc issues (#38257)
- Fix(api): respect since/until when counting commits for X-Total-Count (#38204)
- Fix: codemirror regressions (#38248)
- Fix(api): support HEAD requests on all API GET endpoints (#38245)
- Fix(actions): Cleanup workflow status badge code (#38241)
- Fix(web): Correctly align the "disabled" label on larger workflow names (#38240)
- Fix(actions): don't swallow HTML entities into linkified URLs (#38239)
- Fix(packages): accept npm "repository" and "bin" in string form (#38236)
- Fix(actions): fix 500 error when canceling a canceling task (#38223)
- Fix(deps): update module golang.org/x/image to v0.43.0 [security] (#38219)
- Fix(mssql): convert legacy DATETIME columns to DATETIME2 (#38216)
- Fix(api): deny private org member enumeration via /members (#38213)
- Fix(actions): ensure all waiting jobs get runners in large workflows (#38200)
- Fix(deps): update go dependencies (#38194)
- Fix(deps): update npm dependencies (#38193)
- Fix(cli): default must-change-password to false for bot users (#38175)
- Fix(actions): show run index in run view and fix summary graph height (#38165)
- Fix: csp (#38162)
- Fix(deps): update npm dependencies (#38123)
- Fix(mssql): expand legacy issue and comment long-text columns (#38120)
- Fix(packages): validate debian distribution and component names (#38116)
- Fix(packages): validate module version in goproxy ParsePackage (#38104)
- Fix(deps): update dependency esbuild to v0.28.1 [security] (#38097)
- Fix: git push hook post receive (#38089)
- Fix(ui): prevent commit status popup overflowing its row (#38081)
- Fix: validate gem name in rubygems parseMetadataFile (#38061)
- Fix: commit display name (#38057)
- Fix: csp regressions (#38047)
- Fix: api error message (#38031)
- Fix(deps): update npm dependencies (#38029)
- Fix: pgsql lint (#38022)
- Fix(indexer): fix assignee filters in issue search (#38021)
- Fix: various dropdown problems (#38020)
- Fix: refactor git error handling and make archive streaming handle non-existing commit id (#38007)
- Fix: raise git required version to 2.13 (#37996)
- Fix: remove "no-transfrom" from the cache-control header (#37985)
- Fix(deps): update module github.com/google/go-github/v87 to v88 (#37971)
- Fix: use committer time where ever possible as default (#37969)
- Fix(deps): update npm dependencies, remove nolyfill (#37968)
- Fix(deps): update go dependencies (#37967)
- Fix(pull): preserve squash message trailers and additional commit messages (#37954)
- Fix(deps): update module golang.org/x/image to v0.41.0 [security] (#37904)
- Fix: support ##[command] log prefix in action run UI (#37882)
- Fix(deps): update module github.com/google/go-github/v86 to v87 (#37845)
- Fix(deps): update npm dependencies (#37844)
- Fix(deps): update go dependencies (#37841)
- Fix(frontend): resolve Vite assets by manifest source path (#37836)
- Fix(locales): Replace hardcoded strings (#37788)
- Fix(packages): render markdown links relative to linked repo (#37676)
- Fix: persist mirror repository metadata (#37519)
- Fix cmd tests by mocking builtin paths (#37369)
- Add form-fetch-action to some forms, fix "fetch action" resp bug (#37305)
- Feat: execute post run cleanup when workflow is cancelled (#37275)
- Fix relative-time error and improve global error handler (#37241)
- Refactor flash message and remove SanitizeHTML template func (#37179)
TESTING
- Test(e2e): fix race in pdf file render test (#38380) (#38381)
- Test: compare key file contents instead of FileInfo in TestInitKeys (#38330) (#38331)
- Test: speed up two tests (#37905)
- Test: Fix random failure test (#37887)
- Test: fix flaky issue-comment close test (#37880)
- Test: enable WAL for sqlite integration tests (#37861)
- Test: fix flaky TestResourceIndex and reduce its runtime (#37847)
- Test: run TestAPIRepoMigrate offline via a local clone source (#37817)
- Ci: shard tests and reduce redundant work (#37618)
- Test(e2e): run playwright via container (#37300)
- Remove external service dependencies in migration tests (#36866)
BUILD
- Fix(actions): authenticate snapcraft before nightly remote build (#38252)
- Ci: cap Elasticsearch heap in db-tests (#37816)
- Build(snap): publish nightly version to snapcraft via actions (#37814)
- Ci: split pgsql shards into plain jobs, dedupe setup actions (#37802)
- Ci: narrow files-changed frontend filter (#37749)
- Ci: add zizmor to lint-actions (#37720)
- Chore: clean up "contrib" dir (#37690)
- Fix: snap build (main branch) (#37685)
- Ci: Also lint json5 files (#37659)
- Feat(editor): broaden language detection in web code editor (#37619)
- Build: update pnpm to v11 (#37591)
- Refactor(deps): migrate from nektos/act fork to gitea/runner (#37557)
- Refactor: lint bare fill/stroke colors, add vars for git graph color series (#37543)
- Update go js py dependencies (#37525)
- Ci: lint PR titles with commitlint (#37498)
- Chore: upgrade Go version in devcontainer image to 1.26 (#37374)
- Update GitHub Actions to latest major versions (#37313)
- Update go js dependencies (#37312)
- Fail vite build on rolldown warnings via NODE_ENV=test (#37270)
- Remove htmx (#37224)
- Replace custom Go formatter with golangci-lint fmt (#37194)
- Refactor htmx and fetch-action related code (#37186)
- Integrate renovate bot for all dependency updates (#37050)
- Build(sign): move to sigstore (#38250)
DOCS
- Docs: update changelog for 1.26.3 & 1.26.4 (#38178)
- Docs: fix duplicated word in foreachref doc comment (#38161)
- Docs: Clarify criteria for becoming a merger (#38113)
- Docs: Publish TOC Election Result 2026 (#38111)
- Docs: mark openapi3 as autogenerated in attributes (#37963)
- Docs: add development setup guide (#37960)
MISC
- Revert(sign): restore gpg (#38251)
- Refactor: replace legacy delete-button with link-action (#38143)
- Refactor(actions): read runner capabilities from proto field (#38068)
- Refactor(api): clarify APIError message usage and fix legacy lint error (#38012)
- Refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)
- Fix(deps): update go dependencies (#37851)
- Ci: Fix sync PR labels from the conventional-commit title (#37784) (#37825)
- Ci: tweak files-changed, add free-disk-space (#37819)
- Fix(deps): update module golang.org/x/crypto to v0.52.0 [security] (#37806)
- Test(e2e): add comment, release, star, PR and fork tests (#37800)
- Chore: simplify issue and pull request templates (#37799)
- Chore: Update giteabot to fix failure when backport (#37789)
- Fix(api): handle partial failures in push mirror synchronization gracefully (#37782)
- Fix(deps): update module gitlab.com/gitlab-org/api/client-go/v2 to v2.26.0 (#37771)
- Ci: split giteabot workflow (#37770)
- Fix(deps): update npm dependencies (#37768)
- Refactor(waitgroup): replace Add/Done goroutines with WaitGroup.Go (#37764)
- Fix(deps): update module google.golang.org/grpc to v1.81.1 (#37762)
- Ci: fix cache-related issues (#37761)
- Chore: fix tests (#37760)
- Fix(deps): update module github.com/google/go-github/v85 to v86 (#37754)
- Fix(deps): update npm dependencies (#37753)
- Fix(deps): update go dependencies (#37752)
- Chore(deps): update action dependencies (#37751)
- Fix(markup): wrap indented code blocks for the code-copy button (#37748)
- Chore(db): introduce db.Session and db.EngineMigration interfaces (#37746)
- Feat(web): also display PR counts in repo list (#37739)
- Refactor(glob): use strings.Builder for regexp compilation (#37730)
- Chore(doctor): remove four obsolete doctor check implementations (#37728)
- Refactor(org): simplify owner-team org repo creation logic (#37727)
- Refactor: move workflowpattern into modules/actions (#37717)
- Chore: clean up tests (#37715)
- Style: misc UI fixes (#37691)
- Ci: add shellcheck linter (#37682)
- Fix: catch and fix more lint problems (#37674)
- Fix(deps): update dependency mermaid to v11.15.0 [security], add e2e test (#37662)
- Fix(deps): update npm dependencies (#37647)
- Ci(renovate): update Go import paths on major bumps (#37641)
- Fix(deps): update go dependencies (major) (#37639)
- Chore(deps): update action dependencies (major) (#37638)
- Fix(deps): update module code.gitea.io/sdk/gitea to v0.25.0 (#37637)
- Fix(deps): update npm dependencies (#37636)
- Refactor(log): replace log.Critical with log.Error (#37624)
- Build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#37616)
- Feat(oauth): Support AWS Cognito OAuth2 provider (#37607)
- Chore(deps): update action dependencies (#37603)
- Ci: allow chore type in PR title lint (#37575)
- Refactor: only reset a database table when the table's data was changed (#37573)
- Ci: increase renovate frequency and fix RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS (#37565)
- Refactor: use modernc sqlite driver as default (#37562)
- Docs: fix 4 typos in CHANGELOG.md (#37549)
- Fix(deps): update go dependencies (#37541)
- Chore(deps): update action dependencies (#37540)
- Refactor pull request view (6) (#37522)
- Fix: redirect early CLI console logger to stderr (#37507)
- Refactor "flex-list" to "flex-divided-list" (#37505)
- Refactor compare diff/pull page (1) (#37481)
- Refactor pull request view (4) (#37451)
- Update 1.26.1 changelog in main (#37442)
- Refactor: use named Permission field in Repository struct instead of anonymous embedding (#37441)
- Refactor: serve site manifest via /assets/site-manifest.json endpoint (#37405)
- Remove IsValidExternalURL/IsAPIURL and use IsValidURL at call sites (#37364)
- Update Block a user form (#37359)
- Move review request functions to a standalone file (#37358)
- Feat(security): set X-Content-Type-Options: nosniff by default (#37354)
- Enable strict TypeScript, add errorMessage helper (#37292)
- Refactor frontend tw-justify-between layouts to flex-left-right (#37291)
- Update Nix flake (#37284)
- Fix Repository transferring page (#37277)
- Remove SubmitEvent polyfill (#37276)
- Remove dead code identified by deadcode tool (#37271)
- Upgrade go-git to v5.18.0 (#37268)
- Don't add useless labels which will bother changelog generation (#37267)
- Move heatmap to first-party code (#37262)
- Tests/integration: simplify code (#37249)
- Add pagination and search box to org teams list (#37245)
- Remove error returns from crypto random helpers and callers (#37240)
- Add ExternalIDClaim option for OAuth2 OIDC auth source (#37229)
- Refactor: simplify ParseCatFileTreeLine and catBatchParseTreeEntries (#37210)
- Refactor "htmx" to "fetch action" (#37208)
- Update go js py dependencies (#37204)
- Add comment for the design of "user activity time" (#37195)
- Remove outdated RunUser logic (#37180)
- Models/fixtures: add "DO NOT add more test data" comment to all yml fixture files (#37150)
- Update javascript dependencies (#37142)
- Update go dependencies (#37141)
- Frontport changelog of v1.26.0-rc0 (#37138)
- Introduce ActionRunAttempt to represent each execution of a run (#37119)
- Workflow Artifact Info Hover (#37100)
- Extend issue context popup beyond markdown content (#36908)
- Add bulk repository deletion for organizations (#36763)
- Feat: Add bypass allowlist for branch protection (#36514)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gitea/gitea](https://github.com/go-gitea/gitea) | minor | `1.26.4` → `1.27.0` | --- ### Release Notes <details> <summary>go-gitea/gitea (gitea/gitea)</summary> ### [`v1.27.0`](https://github.com/go-gitea/gitea/releases/tag/v1.27.0) [Compare Source](https://github.com/go-gitea/gitea/compare/v1.26.4...v1.27.0) - BREAKING - Feat(actions)!: improve support for reusable workflows ([#37478](https://github.com/go-gitea/gitea/issues/37478)) - Use Content-Security-Policy: script nonce ([#37232](https://github.com/go-gitea/gitea/issues/37232)) - SECURITY - Fix: various security fixes ([#38406](https://github.com/go-gitea/gitea/issues/38406)) ([#38426](https://github.com/go-gitea/gitea/issues/38426)) - Fix(security): harden access checks and migration validation ([#38324](https://github.com/go-gitea/gitea/issues/38324)) ([#38400](https://github.com/go-gitea/gitea/issues/38400)) - Fix: enforce public-only token scope and harden push options / locale parsing ([#38323](https://github.com/go-gitea/gitea/issues/38323)) ([#38399](https://github.com/go-gitea/gitea/issues/38399)) - Fix(pull): re-evaluate review official flag on target branch change ([#38319](https://github.com/go-gitea/gitea/issues/38319)) ([#38402](https://github.com/go-gitea/gitea/issues/38402)) - Fix(api): stop leaking private repo metadata after access revocation ([#38321](https://github.com/go-gitea/gitea/issues/38321)) ([#38390](https://github.com/go-gitea/gitea/issues/38390)) - Fix(lfs): require proof of possession for cross-repo objects ([#38322](https://github.com/go-gitea/gitea/issues/38322)) ([#38389](https://github.com/go-gitea/gitea/issues/38389)) - Fix(mirror): disable HTTP redirects on pull mirror sync ([#38320](https://github.com/go-gitea/gitea/issues/38320)) ([#38367](https://github.com/go-gitea/gitea/issues/38367)) - Fix: golang html template url escaping ([#38363](https://github.com/go-gitea/gitea/issues/38363)) ([#38369](https://github.com/go-gitea/gitea/issues/38369)) - Fix(release): validate web attachment renames against allowed types ([#38314](https://github.com/go-gitea/gitea/issues/38314)) ([#38328](https://github.com/go-gitea/gitea/issues/38328)) - Fix(release): gate draft release attachments on web download endpoints ([#38318](https://github.com/go-gitea/gitea/issues/38318)) ([#38325](https://github.com/go-gitea/gitea/issues/38325)) - Fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 \[security] ([#37786](https://github.com/go-gitea/gitea/issues/37786)) - Fix(oauth): restrict introspection to the token's client ([#38042](https://github.com/go-gitea/gitea/issues/38042)) - Fix(api): don't expose private org membership via public\_members ([#38145](https://github.com/go-gitea/gitea/issues/38145)) - Fix(actions): deny fork-PR cross-repo access via collaborative owner ([#38214](https://github.com/go-gitea/gitea/issues/38214)) - Fix(migrations): prevent path traversal in repository restore ([#38215](https://github.com/go-gitea/gitea/issues/38215)) - FEATURES - Feat(actions): add workflow status badge modal ([#38196](https://github.com/go-gitea/gitea/issues/38196)) - Feat(actions): support owner-level and global scoped workflows ([#38154](https://github.com/go-gitea/gitea/issues/38154)) - Feat(api): support ref suffixes in compare ([#38148](https://github.com/go-gitea/gitea/issues/38148)) - Feat(actions): implement `jobs.<job_id>.continue-on-error` ([#38100](https://github.com/go-gitea/gitea/issues/38100)) - Feat(actions): show run status on browser tab favicon ([#38071](https://github.com/go-gitea/gitea/issues/38071)) - Feat(api): add token introspection and self-deletion endpoint ([#37995](https://github.com/go-gitea/gitea/issues/37995)) - Feat(api): add q parameter to list branches API for server-side filtering ([#37982](https://github.com/go-gitea/gitea/issues/37982)) - Feat(repo): split repository creation limit into user and org scopes ([#37872](https://github.com/go-gitea/gitea/issues/37872)) - Feat(actions): bulk delete, disable and enable runners in admin UI ([#37869](https://github.com/go-gitea/gitea/issues/37869)) - Feat(actions): List workflows that were executed once but got removed from the default branch ([#37835](https://github.com/go-gitea/gitea/issues/37835)) - Feat(org): add team visibility so org members can discover teams ([#37680](https://github.com/go-gitea/gitea/issues/37680)) - Feat: add raw diff/patch endpoint for repository comparisons ([#37632](https://github.com/go-gitea/gitea/issues/37632)) - Feat: Add avatar stacks ([#37594](https://github.com/go-gitea/gitea/issues/37594)) - Feat(actions): add job summaries (GITHUB\_STEP\_SUMMARY) ([#37500](https://github.com/go-gitea/gitea/issues/37500)) - Feat(web): Add Jupyter Notebook (.ipynb) Rendering Support ([#37433](https://github.com/go-gitea/gitea/issues/37433)) - Support for Custom URI Schemes in OAuth2 Redirect URIs ([#37356](https://github.com/go-gitea/gitea/issues/37356)) - Feat(orgs): Add search bar for organization members tab page ([#37347](https://github.com/go-gitea/gitea/issues/37347)) - Feat(api): Add assignees APIs ([#37330](https://github.com/go-gitea/gitea/issues/37330)) - Feat(api): Add GET /repos/{owner}/{repo}/actions/workflows/{workflow\_id}/runs ([#37196](https://github.com/go-gitea/gitea/issues/37196)) - Serve OpenAPI 3.0 spec at /openapi.v1.json ([#37038](https://github.com/go-gitea/gitea/issues/37038)) - Add project column picker to issue and pull request sidebar ([#37037](https://github.com/go-gitea/gitea/issues/37037)) - Allow multiple projects per issue and pull requests ([#36784](https://github.com/go-gitea/gitea/issues/36784)) - Feat(ui): add "follow rename" to file commit history list ([#34994](https://github.com/go-gitea/gitea/issues/34994)) - Feat(ssh): auto generate additional ssh keys ([#33974](https://github.com/go-gitea/gitea/issues/33974)) - ENHANCEMENTS - Enhance(actions): only create filtered-out workflow commit status for required contexts ([#38371](https://github.com/go-gitea/gitea/issues/38371)) ([#38385](https://github.com/go-gitea/gitea/issues/38385)) - Enhance: allow builtin default git config options to be overridden ([#38172](https://github.com/go-gitea/gitea/issues/38172)) - Enhance: allow MathML core elements ([#38034](https://github.com/go-gitea/gitea/issues/38034)) - Enhance(markup): improve issue title rendering ([#37908](https://github.com/go-gitea/gitea/issues/37908)) - Enhance(actions): set descriptive browser tab title on run view ([#37870](https://github.com/go-gitea/gitea/issues/37870)) - Enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 ([#37866](https://github.com/go-gitea/gitea/issues/37866)) - Enhance(actions): show workflow name from YAML instead of filename ([#37833](https://github.com/go-gitea/gitea/issues/37833)) - Feat(actions): add before/after to PR synchronize event payload ([#37827](https://github.com/go-gitea/gitea/issues/37827)) - Enhance(actions): add branch filters to run list ([#37826](https://github.com/go-gitea/gitea/issues/37826)) - Enhance(actions): Make Summary UI more beautiful with more infos ([#37824](https://github.com/go-gitea/gitea/issues/37824)) - Feat: add copy button to action step header, improve other copy buttons ([#37744](https://github.com/go-gitea/gitea/issues/37744)) - Fix(icon): use repo-forked icon to display forks count ([#37731](https://github.com/go-gitea/gitea/issues/37731)) - Feat(api): add sort and order query parameters to job list endpoints ([#37672](https://github.com/go-gitea/gitea/issues/37672)) - Feat(api): add last\_sync to repository API ([#37566](https://github.com/go-gitea/gitea/issues/37566)) - Enhance: Adjust Workflow Graph styling ([#37497](https://github.com/go-gitea/gitea/issues/37497)) - Improve code editor text selection and clean up lint enablement ([#37474](https://github.com/go-gitea/gitea/issues/37474)) - Add mirror auth updates to repo edit API and settings ([#37468](https://github.com/go-gitea/gitea/issues/37468)) - Replace `olivere/elastic` with REST API client, add OpenSearch support ([#37411](https://github.com/go-gitea/gitea/issues/37411)) - Feat: Add default PR branch update style setting ([#37410](https://github.com/go-gitea/gitea/issues/37410)) - Fix inconsistent disabled styling on logged-out repo header buttons ([#37406](https://github.com/go-gitea/gitea/issues/37406)) - Allow fast-forward-only merge when signed commits are required ([#37335](https://github.com/go-gitea/gitea/issues/37335)) - Enhance styling in actions page ([#37323](https://github.com/go-gitea/gitea/issues/37323)) - Fix: improve actions status icons and texts ([#37206](https://github.com/go-gitea/gitea/issues/37206)) - Make Markdown fenced code block work with more syntaxes ([#37154](https://github.com/go-gitea/gitea/issues/37154)) - Fix: Sort action run jobs by JobID and Name with matrix examples ([#37046](https://github.com/go-gitea/gitea/issues/37046)) - Add API endpoint to reply to pull request review comments ([#36683](https://github.com/go-gitea/gitea/issues/36683)) - PERFORMANCE - Perf(actions): debounce runner heartbeat writes and throttle task picks ([#38281](https://github.com/go-gitea/gitea/issues/38281)) ([#38368](https://github.com/go-gitea/gitea/issues/38368)) - Perf(web): sort the action\_run query by a repo-scoped index when possible ([#38155](https://github.com/go-gitea/gitea/issues/38155)) - Perf: Various performance regression fixes ([#38078](https://github.com/go-gitea/gitea/issues/38078)) - Perf: extend action `c_u` index to include `created_unix` for faster dashboard feeds ([#38076](https://github.com/go-gitea/gitea/issues/38076)) - Batch-load related data in actions run, job, and task API endpoints ([#37032](https://github.com/go-gitea/gitea/issues/37032)) - BUGFIXES - Fix(util): reject invalid characters between time-estimate units ([#38416](https://github.com/go-gitea/gitea/issues/38416)) ([#38423](https://github.com/go-gitea/gitea/issues/38423)) - Fix: represent a deleted assignee team as a Ghost team ([#38413](https://github.com/go-gitea/gitea/issues/38413)) ([#38419](https://github.com/go-gitea/gitea/issues/38419)) - Fix(turnstile): route CAPTCHA verification through the configured proxy ([#38412](https://github.com/go-gitea/gitea/issues/38412)) ([#38420](https://github.com/go-gitea/gitea/issues/38420)) - Fix: refresh pull request merge box when the commit status is pending ([#38410](https://github.com/go-gitea/gitea/issues/38410)) ([#38411](https://github.com/go-gitea/gitea/issues/38411)) - Fix: actions task state concurrent update ([#38405](https://github.com/go-gitea/gitea/issues/38405)) ([#38409](https://github.com/go-gitea/gitea/issues/38409)) - Fix(actions): keep workflow run trailing on one row with long branch names ([#38382](https://github.com/go-gitea/gitea/issues/38382)) ([#38403](https://github.com/go-gitea/gitea/issues/38403)) - Fix(web): use locale-aware date formatting for contribution calendar tooltips ([#38398](https://github.com/go-gitea/gitea/issues/38398)) ([#38401](https://github.com/go-gitea/gitea/issues/38401)) - Fix: co-author detection ([#38392](https://github.com/go-gitea/gitea/issues/38392)) ([#38397](https://github.com/go-gitea/gitea/issues/38397)) - Fix: incorrect co-author detection on commit page ([#38386](https://github.com/go-gitea/gitea/issues/38386)) ([#38387](https://github.com/go-gitea/gitea/issues/38387)) - Fix(ui): restore commits table column widths ([#38379](https://github.com/go-gitea/gitea/issues/38379)) ([#38383](https://github.com/go-gitea/gitea/issues/38383)) - Fix: minio init check ([#38355](https://github.com/go-gitea/gitea/issues/38355)) ([#38361](https://github.com/go-gitea/gitea/issues/38361)) - Fix: org project view assignee list ([#38357](https://github.com/go-gitea/gitea/issues/38357)) ([#38360](https://github.com/go-gitea/gitea/issues/38360)) - Fix(actions): release claimed task if context is cancelled during `FetchTask` ([#38343](https://github.com/go-gitea/gitea/issues/38343)) ([#38347](https://github.com/go-gitea/gitea/issues/38347)) - Fix(actions): make runner list pagination order deterministic ([#38313](https://github.com/go-gitea/gitea/issues/38313)) ([#38327](https://github.com/go-gitea/gitea/issues/38327)) - Fix: Improve since/until when counting commits for X-Total-Count ([#38243](https://github.com/go-gitea/gitea/issues/38243)) ([#38304](https://github.com/go-gitea/gitea/issues/38304)) - Fix(actions): prevent chevron overlap with log text when timestamps are enabled ([#38227](https://github.com/go-gitea/gitea/issues/38227)) ([#38307](https://github.com/go-gitea/gitea/issues/38307)) - Fix(workflows): branch protection status checks fail when workflow uses on: paths filter ([#38237](https://github.com/go-gitea/gitea/issues/38237)) ([#38302](https://github.com/go-gitea/gitea/issues/38302)) - Fix(oauth2): persist linkAccountData during auto-link 2FA flow ([#38274](https://github.com/go-gitea/gitea/issues/38274)) ([#38295](https://github.com/go-gitea/gitea/issues/38295)) - Fix(actions): allow Actions bot to push to protected branches ([#38284](https://github.com/go-gitea/gitea/issues/38284)) ([#38293](https://github.com/go-gitea/gitea/issues/38293)) - Fix(actions): include all aggregable run statuses in status filter ([#38280](https://github.com/go-gitea/gitea/issues/38280)) ([#38287](https://github.com/go-gitea/gitea/issues/38287)) - Fix(archiver): use serializable repo-archive queue payload ([#38273](https://github.com/go-gitea/gitea/issues/38273)) ([#38283](https://github.com/go-gitea/gitea/issues/38283)) - Fix: update npm dependencies, fix misc issues ([#38257](https://github.com/go-gitea/gitea/issues/38257)) - Fix(api): respect since/until when counting commits for X-Total-Count ([#38204](https://github.com/go-gitea/gitea/issues/38204)) - Fix: codemirror regressions ([#38248](https://github.com/go-gitea/gitea/issues/38248)) - Fix(api): support HEAD requests on all API GET endpoints ([#38245](https://github.com/go-gitea/gitea/issues/38245)) - Fix(actions): Cleanup workflow status badge code ([#38241](https://github.com/go-gitea/gitea/issues/38241)) - Fix(web): Correctly align the "disabled" label on larger workflow names ([#38240](https://github.com/go-gitea/gitea/issues/38240)) - Fix(actions): don't swallow HTML entities into linkified URLs ([#38239](https://github.com/go-gitea/gitea/issues/38239)) - Fix(packages): accept npm "repository" and "bin" in string form ([#38236](https://github.com/go-gitea/gitea/issues/38236)) - Fix(actions): fix 500 error when canceling a canceling task ([#38223](https://github.com/go-gitea/gitea/issues/38223)) - Fix(deps): update module golang.org/x/image to v0.43.0 \[security] ([#38219](https://github.com/go-gitea/gitea/issues/38219)) - Fix(mssql): convert legacy DATETIME columns to DATETIME2 ([#38216](https://github.com/go-gitea/gitea/issues/38216)) - Fix(api): deny private org member enumeration via /members ([#38213](https://github.com/go-gitea/gitea/issues/38213)) - Fix(actions): ensure all waiting jobs get runners in large workflows ([#38200](https://github.com/go-gitea/gitea/issues/38200)) - Fix(deps): update go dependencies ([#38194](https://github.com/go-gitea/gitea/issues/38194)) - Fix(deps): update npm dependencies ([#38193](https://github.com/go-gitea/gitea/issues/38193)) - Fix(cli): default must-change-password to false for bot users ([#38175](https://github.com/go-gitea/gitea/issues/38175)) - Fix(actions): show run index in run view and fix summary graph height ([#38165](https://github.com/go-gitea/gitea/issues/38165)) - Fix: csp ([#38162](https://github.com/go-gitea/gitea/issues/38162)) - Fix(deps): update npm dependencies ([#38123](https://github.com/go-gitea/gitea/issues/38123)) - Fix(mssql): expand legacy issue and comment long-text columns ([#38120](https://github.com/go-gitea/gitea/issues/38120)) - Fix(packages): validate debian distribution and component names ([#38116](https://github.com/go-gitea/gitea/issues/38116)) - Fix(packages): validate module version in goproxy ParsePackage ([#38104](https://github.com/go-gitea/gitea/issues/38104)) - Fix(deps): update dependency esbuild to v0.28.1 \[security] ([#38097](https://github.com/go-gitea/gitea/issues/38097)) - Fix: git push hook post receive ([#38089](https://github.com/go-gitea/gitea/issues/38089)) - Fix(ui): prevent commit status popup overflowing its row ([#38081](https://github.com/go-gitea/gitea/issues/38081)) - Fix: validate gem name in rubygems parseMetadataFile ([#38061](https://github.com/go-gitea/gitea/issues/38061)) - Fix: commit display name ([#38057](https://github.com/go-gitea/gitea/issues/38057)) - Fix: csp regressions ([#38047](https://github.com/go-gitea/gitea/issues/38047)) - Fix: api error message ([#38031](https://github.com/go-gitea/gitea/issues/38031)) - Fix(deps): update npm dependencies ([#38029](https://github.com/go-gitea/gitea/issues/38029)) - Fix: pgsql lint ([#38022](https://github.com/go-gitea/gitea/issues/38022)) - Fix(indexer): fix assignee filters in issue search ([#38021](https://github.com/go-gitea/gitea/issues/38021)) - Fix: various dropdown problems ([#38020](https://github.com/go-gitea/gitea/issues/38020)) - Fix: refactor git error handling and make archive streaming handle non-existing commit id ([#38007](https://github.com/go-gitea/gitea/issues/38007)) - Fix: raise git required version to 2.13 ([#37996](https://github.com/go-gitea/gitea/issues/37996)) - Fix: remove "no-transfrom" from the cache-control header ([#37985](https://github.com/go-gitea/gitea/issues/37985)) - Fix(deps): update module github.com/google/go-github/v87 to v88 ([#37971](https://github.com/go-gitea/gitea/issues/37971)) - Fix: use committer time where ever possible as default ([#37969](https://github.com/go-gitea/gitea/issues/37969)) - Fix(deps): update npm dependencies, remove nolyfill ([#37968](https://github.com/go-gitea/gitea/issues/37968)) - Fix(deps): update go dependencies ([#37967](https://github.com/go-gitea/gitea/issues/37967)) - Fix(pull): preserve squash message trailers and additional commit messages ([#37954](https://github.com/go-gitea/gitea/issues/37954)) - Fix(deps): update module golang.org/x/image to v0.41.0 \[security] ([#37904](https://github.com/go-gitea/gitea/issues/37904)) - Fix: support ##\[command] log prefix in action run UI ([#37882](https://github.com/go-gitea/gitea/issues/37882)) - Fix(deps): update module github.com/google/go-github/v86 to v87 ([#37845](https://github.com/go-gitea/gitea/issues/37845)) - Fix(deps): update npm dependencies ([#37844](https://github.com/go-gitea/gitea/issues/37844)) - Fix(deps): update go dependencies ([#37841](https://github.com/go-gitea/gitea/issues/37841)) - Fix(frontend): resolve Vite assets by manifest source path ([#37836](https://github.com/go-gitea/gitea/issues/37836)) - Fix(locales): Replace hardcoded strings ([#37788](https://github.com/go-gitea/gitea/issues/37788)) - Fix(packages): render markdown links relative to linked repo ([#37676](https://github.com/go-gitea/gitea/issues/37676)) - Fix: persist mirror repository metadata ([#37519](https://github.com/go-gitea/gitea/issues/37519)) - Fix cmd tests by mocking builtin paths ([#37369](https://github.com/go-gitea/gitea/issues/37369)) - Add `form-fetch-action` to some forms, fix "fetch action" resp bug ([#37305](https://github.com/go-gitea/gitea/issues/37305)) - Feat: execute post run cleanup when workflow is cancelled ([#37275](https://github.com/go-gitea/gitea/issues/37275)) - Fix `relative-time` error and improve global error handler ([#37241](https://github.com/go-gitea/gitea/issues/37241)) - Refactor flash message and remove SanitizeHTML template func ([#37179](https://github.com/go-gitea/gitea/issues/37179)) - TESTING - Test(e2e): fix race in pdf file render test ([#38380](https://github.com/go-gitea/gitea/issues/38380)) ([#38381](https://github.com/go-gitea/gitea/issues/38381)) - Test: compare key file contents instead of `FileInfo` in `TestInitKeys` ([#38330](https://github.com/go-gitea/gitea/issues/38330)) ([#38331](https://github.com/go-gitea/gitea/issues/38331)) - Test: speed up two tests ([#37905](https://github.com/go-gitea/gitea/issues/37905)) - Test: Fix random failure test ([#37887](https://github.com/go-gitea/gitea/issues/37887)) - Test: fix flaky `issue-comment` close test ([#37880](https://github.com/go-gitea/gitea/issues/37880)) - Test: enable WAL for sqlite integration tests ([#37861](https://github.com/go-gitea/gitea/issues/37861)) - Test: fix flaky `TestResourceIndex` and reduce its runtime ([#37847](https://github.com/go-gitea/gitea/issues/37847)) - Test: run `TestAPIRepoMigrate` offline via a local clone source ([#37817](https://github.com/go-gitea/gitea/issues/37817)) - Ci: shard tests and reduce redundant work ([#37618](https://github.com/go-gitea/gitea/issues/37618)) - Test(e2e): run playwright via container ([#37300](https://github.com/go-gitea/gitea/issues/37300)) - Remove external service dependencies in migration tests ([#36866](https://github.com/go-gitea/gitea/issues/36866)) - BUILD - Fix(actions): authenticate snapcraft before nightly remote build ([#38252](https://github.com/go-gitea/gitea/issues/38252)) - Ci: cap Elasticsearch heap in db-tests ([#37816](https://github.com/go-gitea/gitea/issues/37816)) - Build(snap): publish nightly version to snapcraft via actions ([#37814](https://github.com/go-gitea/gitea/issues/37814)) - Ci: split pgsql shards into plain jobs, dedupe setup actions ([#37802](https://github.com/go-gitea/gitea/issues/37802)) - Ci: narrow files-changed frontend filter ([#37749](https://github.com/go-gitea/gitea/issues/37749)) - Ci: add `zizmor` to `lint-actions` ([#37720](https://github.com/go-gitea/gitea/issues/37720)) - Chore: clean up "contrib" dir ([#37690](https://github.com/go-gitea/gitea/issues/37690)) - Fix: snap build (main branch) ([#37685](https://github.com/go-gitea/gitea/issues/37685)) - Ci: Also lint json5 files ([#37659](https://github.com/go-gitea/gitea/issues/37659)) - Feat(editor): broaden language detection in web code editor ([#37619](https://github.com/go-gitea/gitea/issues/37619)) - Build: update pnpm to v11 ([#37591](https://github.com/go-gitea/gitea/issues/37591)) - Refactor(deps): migrate from `nektos/act` fork to `gitea/runner` ([#37557](https://github.com/go-gitea/gitea/issues/37557)) - Refactor: lint bare `fill`/`stroke` colors, add vars for git graph color series ([#37543](https://github.com/go-gitea/gitea/issues/37543)) - Update go js py dependencies ([#37525](https://github.com/go-gitea/gitea/issues/37525)) - Ci: lint PR titles with commitlint ([#37498](https://github.com/go-gitea/gitea/issues/37498)) - Chore: upgrade Go version in devcontainer image to 1.26 ([#37374](https://github.com/go-gitea/gitea/issues/37374)) - Update GitHub Actions to latest major versions ([#37313](https://github.com/go-gitea/gitea/issues/37313)) - Update go js dependencies ([#37312](https://github.com/go-gitea/gitea/issues/37312)) - Fail vite build on rolldown warnings via NODE\_ENV=test ([#37270](https://github.com/go-gitea/gitea/issues/37270)) - Remove htmx ([#37224](https://github.com/go-gitea/gitea/issues/37224)) - Replace custom Go formatter with `golangci-lint fmt` ([#37194](https://github.com/go-gitea/gitea/issues/37194)) - Refactor htmx and fetch-action related code ([#37186](https://github.com/go-gitea/gitea/issues/37186)) - Integrate renovate bot for all dependency updates ([#37050](https://github.com/go-gitea/gitea/issues/37050)) - Build(sign): move to sigstore ([#38250](https://github.com/go-gitea/gitea/issues/38250)) - DOCS - Docs: update changelog for 1.26.3 & 1.26.4 ([#38178](https://github.com/go-gitea/gitea/issues/38178)) - Docs: fix duplicated word in foreachref doc comment ([#38161](https://github.com/go-gitea/gitea/issues/38161)) - Docs: Clarify criteria for becoming a merger ([#38113](https://github.com/go-gitea/gitea/issues/38113)) - Docs: Publish TOC Election Result 2026 ([#38111](https://github.com/go-gitea/gitea/issues/38111)) - Docs: mark openapi3 as autogenerated in attributes ([#37963](https://github.com/go-gitea/gitea/issues/37963)) - Docs: add development setup guide ([#37960](https://github.com/go-gitea/gitea/issues/37960)) - MISC - Revert(sign): restore gpg ([#38251](https://github.com/go-gitea/gitea/issues/38251)) - Refactor: replace legacy `delete-button` with `link-action` ([#38143](https://github.com/go-gitea/gitea/issues/38143)) - Refactor(actions): read runner capabilities from proto field ([#38068](https://github.com/go-gitea/gitea/issues/38068)) - Refactor(api): clarify APIError message usage and fix legacy lint error ([#38012](https://github.com/go-gitea/gitea/issues/38012)) - Refactor: Use db.Get\[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record ([#37977](https://github.com/go-gitea/gitea/issues/37977)) - Fix(deps): update go dependencies ([#37851](https://github.com/go-gitea/gitea/issues/37851)) - Ci: Fix sync PR labels from the conventional-commit title ([#37784](https://github.com/go-gitea/gitea/issues/37784)) ([#37825](https://github.com/go-gitea/gitea/issues/37825)) - Ci: tweak `files-changed`, add `free-disk-space` ([#37819](https://github.com/go-gitea/gitea/issues/37819)) - Fix(deps): update module golang.org/x/crypto to v0.52.0 \[security] ([#37806](https://github.com/go-gitea/gitea/issues/37806)) - Test(e2e): add comment, release, star, PR and fork tests ([#37800](https://github.com/go-gitea/gitea/issues/37800)) - Chore: simplify issue and pull request templates ([#37799](https://github.com/go-gitea/gitea/issues/37799)) - Chore: Update giteabot to fix failure when backport ([#37789](https://github.com/go-gitea/gitea/issues/37789)) - Fix(api): handle partial failures in push mirror synchronization gracefully ([#37782](https://github.com/go-gitea/gitea/issues/37782)) - Fix(deps): update module gitlab.com/gitlab-org/api/client-go/v2 to v2.26.0 ([#37771](https://github.com/go-gitea/gitea/issues/37771)) - Ci: split giteabot workflow ([#37770](https://github.com/go-gitea/gitea/issues/37770)) - Fix(deps): update npm dependencies ([#37768](https://github.com/go-gitea/gitea/issues/37768)) - Refactor(waitgroup): replace Add/Done goroutines with WaitGroup.Go ([#37764](https://github.com/go-gitea/gitea/issues/37764)) - Fix(deps): update module google.golang.org/grpc to v1.81.1 ([#37762](https://github.com/go-gitea/gitea/issues/37762)) - Ci: fix cache-related issues ([#37761](https://github.com/go-gitea/gitea/issues/37761)) - Chore: fix tests ([#37760](https://github.com/go-gitea/gitea/issues/37760)) - Fix(deps): update module github.com/google/go-github/v85 to v86 ([#37754](https://github.com/go-gitea/gitea/issues/37754)) - Fix(deps): update npm dependencies ([#37753](https://github.com/go-gitea/gitea/issues/37753)) - Fix(deps): update go dependencies ([#37752](https://github.com/go-gitea/gitea/issues/37752)) - Chore(deps): update action dependencies ([#37751](https://github.com/go-gitea/gitea/issues/37751)) - Fix(markup): wrap indented code blocks for the code-copy button ([#37748](https://github.com/go-gitea/gitea/issues/37748)) - Chore(db): introduce db.Session and db.EngineMigration interfaces ([#37746](https://github.com/go-gitea/gitea/issues/37746)) - Feat(web): also display PR counts in repo list ([#37739](https://github.com/go-gitea/gitea/issues/37739)) - Refactor(glob): use strings.Builder for regexp compilation ([#37730](https://github.com/go-gitea/gitea/issues/37730)) - Chore(doctor): remove four obsolete doctor check implementations ([#37728](https://github.com/go-gitea/gitea/issues/37728)) - Refactor(org): simplify owner-team org repo creation logic ([#37727](https://github.com/go-gitea/gitea/issues/37727)) - Refactor: move `workflowpattern` into `modules/actions` ([#37717](https://github.com/go-gitea/gitea/issues/37717)) - Chore: clean up tests ([#37715](https://github.com/go-gitea/gitea/issues/37715)) - Style: misc UI fixes ([#37691](https://github.com/go-gitea/gitea/issues/37691)) - Ci: add shellcheck linter ([#37682](https://github.com/go-gitea/gitea/issues/37682)) - Fix: catch and fix more lint problems ([#37674](https://github.com/go-gitea/gitea/issues/37674)) - Fix(deps): update dependency mermaid to v11.15.0 \[security], add e2e test ([#37662](https://github.com/go-gitea/gitea/issues/37662)) - Fix(deps): update npm dependencies ([#37647](https://github.com/go-gitea/gitea/issues/37647)) - Ci(renovate): update Go import paths on major bumps ([#37641](https://github.com/go-gitea/gitea/issues/37641)) - Fix(deps): update go dependencies (major) ([#37639](https://github.com/go-gitea/gitea/issues/37639)) - Chore(deps): update action dependencies (major) ([#37638](https://github.com/go-gitea/gitea/issues/37638)) - Fix(deps): update module code.gitea.io/sdk/gitea to v0.25.0 ([#37637](https://github.com/go-gitea/gitea/issues/37637)) - Fix(deps): update npm dependencies ([#37636](https://github.com/go-gitea/gitea/issues/37636)) - Refactor(log): replace log.Critical with log.Error ([#37624](https://github.com/go-gitea/gitea/issues/37624)) - Build(deps): bump fast-uri from 3.1.0 to 3.1.2 ([#37616](https://github.com/go-gitea/gitea/issues/37616)) - Feat(oauth): Support AWS Cognito OAuth2 provider ([#37607](https://github.com/go-gitea/gitea/issues/37607)) - Chore(deps): update action dependencies ([#37603](https://github.com/go-gitea/gitea/issues/37603)) - Ci: allow `chore` type in PR title lint ([#37575](https://github.com/go-gitea/gitea/issues/37575)) - Refactor: only reset a database table when the table's data was changed ([#37573](https://github.com/go-gitea/gitea/issues/37573)) - Ci: increase renovate frequency and fix RENOVATE\_ALLOWED\_POST\_UPGRADE\_COMMANDS ([#37565](https://github.com/go-gitea/gitea/issues/37565)) - Refactor: use modernc sqlite driver as default ([#37562](https://github.com/go-gitea/gitea/issues/37562)) - Docs: fix 4 typos in CHANGELOG.md ([#37549](https://github.com/go-gitea/gitea/issues/37549)) - Fix(deps): update go dependencies ([#37541](https://github.com/go-gitea/gitea/issues/37541)) - Chore(deps): update action dependencies ([#37540](https://github.com/go-gitea/gitea/issues/37540)) - Refactor pull request view (6) ([#37522](https://github.com/go-gitea/gitea/issues/37522)) - Fix: redirect early CLI console logger to stderr ([#37507](https://github.com/go-gitea/gitea/issues/37507)) - Refactor "flex-list" to "flex-divided-list" ([#37505](https://github.com/go-gitea/gitea/issues/37505)) - Refactor compare diff/pull page (1) ([#37481](https://github.com/go-gitea/gitea/issues/37481)) - Refactor pull request view (4) ([#37451](https://github.com/go-gitea/gitea/issues/37451)) - Update 1.26.1 changelog in main ([#37442](https://github.com/go-gitea/gitea/issues/37442)) - Refactor: use named `Permission` field in `Repository` struct instead of anonymous embedding ([#37441](https://github.com/go-gitea/gitea/issues/37441)) - Refactor: serve site manifest via `/assets/site-manifest.json` endpoint ([#37405](https://github.com/go-gitea/gitea/issues/37405)) - Remove IsValidExternalURL/IsAPIURL and use IsValidURL at call sites ([#37364](https://github.com/go-gitea/gitea/issues/37364)) - Update `Block a user` form ([#37359](https://github.com/go-gitea/gitea/issues/37359)) - Move review request functions to a standalone file ([#37358](https://github.com/go-gitea/gitea/issues/37358)) - Feat(security): set X-Content-Type-Options: nosniff by default ([#37354](https://github.com/go-gitea/gitea/issues/37354)) - Enable strict TypeScript, add `errorMessage` helper ([#37292](https://github.com/go-gitea/gitea/issues/37292)) - Refactor frontend `tw-justify-between` layouts to `flex-left-right` ([#37291](https://github.com/go-gitea/gitea/issues/37291)) - Update Nix flake ([#37284](https://github.com/go-gitea/gitea/issues/37284)) - Fix Repository transferring page ([#37277](https://github.com/go-gitea/gitea/issues/37277)) - Remove `SubmitEvent` polyfill ([#37276](https://github.com/go-gitea/gitea/issues/37276)) - Remove dead code identified by `deadcode` tool ([#37271](https://github.com/go-gitea/gitea/issues/37271)) - Upgrade go-git to v5.18.0 ([#37268](https://github.com/go-gitea/gitea/issues/37268)) - Don't add useless labels which will bother changelog generation ([#37267](https://github.com/go-gitea/gitea/issues/37267)) - Move heatmap to first-party code ([#37262](https://github.com/go-gitea/gitea/issues/37262)) - Tests/integration: simplify code ([#37249](https://github.com/go-gitea/gitea/issues/37249)) - Add pagination and search box to org teams list ([#37245](https://github.com/go-gitea/gitea/issues/37245)) - Remove error returns from crypto random helpers and callers ([#37240](https://github.com/go-gitea/gitea/issues/37240)) - Add `ExternalIDClaim` option for OAuth2 OIDC auth source ([#37229](https://github.com/go-gitea/gitea/issues/37229)) - Refactor: simplify ParseCatFileTreeLine and catBatchParseTreeEntries ([#37210](https://github.com/go-gitea/gitea/issues/37210)) - Refactor "htmx" to "fetch action" ([#37208](https://github.com/go-gitea/gitea/issues/37208)) - Update go js py dependencies ([#37204](https://github.com/go-gitea/gitea/issues/37204)) - Add comment for the design of "user activity time" ([#37195](https://github.com/go-gitea/gitea/issues/37195)) - Remove outdated RunUser logic ([#37180](https://github.com/go-gitea/gitea/issues/37180)) - Models/fixtures: add "DO NOT add more test data" comment to all yml fixture files ([#37150](https://github.com/go-gitea/gitea/issues/37150)) - Update javascript dependencies ([#37142](https://github.com/go-gitea/gitea/issues/37142)) - Update go dependencies ([#37141](https://github.com/go-gitea/gitea/issues/37141)) - Frontport changelog of v1.26.0-rc0 ([#37138](https://github.com/go-gitea/gitea/issues/37138)) - Introduce `ActionRunAttempt` to represent each execution of a run ([#37119](https://github.com/go-gitea/gitea/issues/37119)) - Workflow Artifact Info Hover ([#37100](https://github.com/go-gitea/gitea/issues/37100)) - Extend issue context popup beyond markdown content ([#36908](https://github.com/go-gitea/gitea/issues/36908)) - Add bulk repository deletion for organizations ([#36763](https://github.com/go-gitea/gitea/issues/36763)) - Feat: Add bypass allowlist for branch protection ([#36514](https://github.com/go-gitea/gitea/issues/36514)) Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be automatically upgraded to this version during the specified maintenance window. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2026-07-14 00:01:33 +00:00

Update gitea/gitea Docker tag to v1.27.0 39a2c522d1

Akumatic merged commit cf60bf5b3a into main

2026-07-16 07:22:25 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Homelab/Docker-Gitea#41