Files

3.4 KiB

Release notes

  • Security bug fixes
    • PR: fix(api): fix dependency repo perms in Create/RemoveIssueDependency
    • PR: fix(api): draft releases could be read before being published
    • PR: misconfigured security checks on tag delete web form
    • PR: incorrect logic in "Update PR" did not enforce head branch protection rules correctly
    • PR: issue owner can delete another user's comment's edit history on same issue
    • PR: tag protection rules can be bypassed during tag delete operation
  • Included for completeness but not user-facing (chores, etc.)
    • PR: fix: frontend-checks failure
    • PR: Update dependency @playwright/test to v1.56.1 (v11.0/forgejo)
    • PR: chore: pin node version
    • PR: Update module golang.org/x/crypto to v0.45.0 (v11.0/forgejo)
    • PR: Update module golang.org/x/crypto to v0.44.0 (v11.0/forgejo)
    • PR: feat: Replace mholt/archiver/v3 with mholt/archives (#7025)