4 people a1c56dd96a fix(projects): hide linked pull requests the viewer cannot read (#40016) (#40134) ...

Backport #40016 by @basavaraj-sm05

Project board cards list the pull requests that reference their issue,
but loaded them without checking the viewer's access. A private pull
request mentioning a public issue showed its title, number and state on
that issue's board to anyone who can view the board, anonymous visitors
included.

Repository and organization boards now skip linked pull requests in
repositories where the viewer cannot read pull requests, matching how
the issue page already hides such references.

Co-authored-by: Basavaraj S m <basavaraj@digiscrypt.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: bircni <bircni@icloud.com>

2026-10-31 18:14:26 +01:00

..

api

fix: harden context user access scope (#39945) (#40115)

2026-10-31 17:40:49 +01:00

common

fix(api): keep milestone due date when it is omitted in edit request (#39869) (#39921)

2026-10-21 17:59:21 +02:00

install

refactor: "install" page (#39400)

2026-09-23 23:14:31 +00:00

private

fix: various bugs (#39661) (#39667)

2026-10-07 10:11:58 -07:00

utils

Refactor flash message and remove SanitizeHTML template func (#37179)

2026-04-12 10:17:25 +08:00

web

fix(projects): hide linked pull requests the viewer cannot read (#40016) (#40134)

2026-10-31 18:14:26 +01:00

init.go

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00