This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [gitea/gitea](https://github.com/go-gitea/gitea) | patch | `1.27.2` → `1.27.3` |
---
### Release Notes
<details>
<summary>go-gitea/gitea (gitea/gitea)</summary>
### [`v1.27.3`](https://github.com/go-gitea/gitea/releases/tag/v1.27.3)
[Compare Source](https://github.com/go-gitea/gitea/compare/v1.27.2...v1.27.3)
- SECURITY
- fix(packages): restrict/limited/token-scope access ([#​39041](https://github.com/go-gitea/gitea/issues/39041), [#​39043](https://github.com/go-gitea/gitea/issues/39043), [#​39044](https://github.com/go-gitea/gitea/issues/39044), [#​39047](https://github.com/go-gitea/gitea/issues/39047), [#​39046](https://github.com/go-gitea/gitea/issues/39046)) ([#​39058](https://github.com/go-gitea/gitea/issues/39058))
- fix(attachments): enforce owning repository path ([#​39048](https://github.com/go-gitea/gitea/issues/39048)) ([#​39077](https://github.com/go-gitea/gitea/issues/39077))
- fix(markup): enforce same-repository issue access ([#​39045](https://github.com/go-gitea/gitea/issues/39045)) ([#​39054](https://github.com/go-gitea/gitea/issues/39054))
- fix(actions): verify raw artifact signatures first ([#​39049](https://github.com/go-gitea/gitea/issues/39049)) ([#​39053](https://github.com/go-gitea/gitea/issues/39053))
- fix(api): hide limited users from restricted viewers ([#​39004](https://github.com/go-gitea/gitea/issues/39004)) ([#​39039](https://github.com/go-gitea/gitea/issues/39039))
- fix(repo): limit gitignore template selections ([#​39027](https://github.com/go-gitea/gitea/issues/39027)) ([#​39040](https://github.com/go-gitea/gitea/issues/39040))
- fix(migrations): cancel GitLab version probes ([#​39023](https://github.com/go-gitea/gitea/issues/39023)) ([#​39035](https://github.com/go-gitea/gitea/issues/39035))
- fix(packages): limit Swift package manifests ([#​39025](https://github.com/go-gitea/gitea/issues/39025)) ([#​39032](https://github.com/go-gitea/gitea/issues/39032))
- fix(migrations): bound OneDev version responses ([#​39024](https://github.com/go-gitea/gitea/issues/39024)) ([#​39033](https://github.com/go-gitea/gitea/issues/39033))
- fix(packages): limit Maven checksum uploads ([#​39028](https://github.com/go-gitea/gitea/issues/39028)) ([#​39031](https://github.com/go-gitea/gitea/issues/39031))
- fix(packages): bound Alpine metadata entries ([#​39026](https://github.com/go-gitea/gitea/issues/39026)) ([#​39029](https://github.com/go-gitea/gitea/issues/39029))
- fix(actions): enforce fork pull request trust boundaries ([#​39005](https://github.com/go-gitea/gitea/issues/39005)) ([#​39018](https://github.com/go-gitea/gitea/issues/39018))
- fix(git): restrict hook permissions ([#​39008](https://github.com/go-gitea/gitea/issues/39008)) ([#​39016](https://github.com/go-gitea/gitea/issues/39016))
- fix(api): enforce repository creation token authorization ([#​39007](https://github.com/go-gitea/gitea/issues/39007)) ([#​39014](https://github.com/go-gitea/gitea/issues/39014))
- fix(api): enforce public-only scope for compare heads ([#​39006](https://github.com/go-gitea/gitea/issues/39006)) ([#​39013](https://github.com/go-gitea/gitea/issues/39013))
- fix(repo): hide repositories of hidden owners ([#​39009](https://github.com/go-gitea/gitea/issues/39009)) ([#​39012](https://github.com/go-gitea/gitea/issues/39012))
- fix: avoid enumerating every public repository in issue search ([#​38992](https://github.com/go-gitea/gitea/issues/38992)) ([#​39000](https://github.com/go-gitea/gitea/issues/39000))
- refactor: private endpoints ([#​38964](https://github.com/go-gitea/gitea/issues/38964)) ([#​38965](https://github.com/go-gitea/gitea/issues/38965))
- ENHANCEMENTS
- enhance: add permalinks to pull request reviews ([#​38849](https://github.com/go-gitea/gitea/issues/38849)) ([#​39036](https://github.com/go-gitea/gitea/issues/39036))
- BUGFIXES
- fix: add missing query parameters on runner list page ([#​39163](https://github.com/go-gitea/gitea/issues/39163))
- fix(actions): keep step-level continue-on-error expressions unevaluated ([#​39141](https://github.com/go-gitea/gitea/issues/39141)) ([#​39148](https://github.com/go-gitea/gitea/issues/39148)
- fix(packages): preserve SemVer prerelease identifiers in Swift Registry ([#​39156](https://github.com/go-gitea/gitea/issues/39156)) ([#​39158](https://github.com/go-gitea/gitea/issues/39158))
- fix(repo): prevent MarkAsBrokenEmpty when repository is being migrated ([#​39091](https://github.com/go-gitea/gitea/issues/39091)) ([#​39092](https://github.com/go-gitea/gitea/issues/39092))
- fix(asymkey): do not verify OpenPGP signatures with an SSH instance key ([#​39073](https://github.com/go-gitea/gitea/issues/39073)) ([#​39086](https://github.com/go-gitea/gitea/issues/39086))
- fix(pull): keep the merged state in sync with git ([#​39062](https://github.com/go-gitea/gitea/issues/39062)) ([#​39118](https://github.com/go-gitea/gitea/issues/39118))
- fix(pull): name the head repository in default compare links ([#​39075](https://github.com/go-gitea/gitea/issues/39075)) ([#​39079](https://github.com/go-gitea/gitea/issues/39079))
- fix(git): parse co-author trailers that are not RFC 5322 addresses ([#​39076](https://github.com/go-gitea/gitea/issues/39076)) ([#​39081](https://github.com/go-gitea/gitea/issues/39081))
- fix(actions): show "Complete job" logs when the last step is skipped ([#​38939](https://github.com/go-gitea/gitea/issues/38939)) ([#​39003](https://github.com/go-gitea/gitea/issues/39003))
- fix(actions): Fix how jobs in matrixes are grouped ([#​38980](https://github.com/go-gitea/gitea/issues/38980)) ([#​38998](https://github.com/go-gitea/gitea/issues/38998))
- fix: resolve YAML anchors and aliases in Actions workflows ([#​38984](https://github.com/go-gitea/gitea/issues/38984)) ([#​38996](https://github.com/go-gitea/gitea/issues/38996))
- fix: honor environment variables during install ([#​38974](https://github.com/go-gitea/gitea/issues/38974)) ([#​38976](https://github.com/go-gitea/gitea/issues/38976))
- fix: grant limited-org unit read access to authenticated non-members ([#​38871](https://github.com/go-gitea/gitea/issues/38871)) ([#​38963](https://github.com/go-gitea/gitea/issues/38963))
- fix: allow anonymous theme switching when REQUIRE\_SIGNIN\_VIEW is set ([#​38956](https://github.com/go-gitea/gitea/issues/38956)) ([#​38961](https://github.com/go-gitea/gitea/issues/38961))
- fix(actions): drop wrapper span around the action status icon ([#​38957](https://github.com/go-gitea/gitea/issues/38957)) ([#​38959](https://github.com/go-gitea/gitea/issues/38959))
- fix(issues): sort scoped labels by exclusive order in dropdowns ([#​38893](https://github.com/go-gitea/gitea/issues/38893)) ([#​38954](https://github.com/go-gitea/gitea/issues/38954))
- fix(indexer): correct bleve indexer token filters ([#​38853](https://github.com/go-gitea/gitea/issues/38853)) ([#​38951](https://github.com/go-gitea/gitea/issues/38951))
- fix: make "login\_name" field optional for API edit user ([#​38917](https://github.com/go-gitea/gitea/issues/38917)) ([#​38945](https://github.com/go-gitea/gitea/issues/38945))
- fix(actions): reject non-mapping matrix include/exclude ([#​38933](https://github.com/go-gitea/gitea/issues/38933))
- fix(ui): respect FEED\_PAGING\_NUM on the dashboard feed ([#​38935](https://github.com/go-gitea/gitea/issues/38935)) ([#​38936](https://github.com/go-gitea/gitea/issues/38936))
- MISC
- chore: repo compare link ([#​39088](https://github.com/go-gitea/gitea/issues/39088)) ([#​39119](https://github.com/go-gitea/gitea/issues/39119))
- ci: remove AWS S3 uploads from release workflows ([#​38928](https://github.com/go-gitea/gitea/issues/38928)) ([#​38929](https://github.com/go-gitea/gitea/issues/38929))
- chore: Pre-register a builtin OAuth2 application for the official Gitea mobile app ([#​38880](https://github.com/go-gitea/gitea/issues/38880)) ([#​38922](https://github.com/go-gitea/gitea/issues/38922))
Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be automatically upgraded to this version during the specified maintenance window.
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41MS4wIiwidXBkYXRlZEluVmVyIjoiNDQuNTEuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
1.27.2→1.27.3Release Notes
go-gitea/gitea (gitea/gitea)
v1.27.3Compare Source
Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.