Gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-08-26 16:03:38 +00:00

Files

T

Artem Lytkin c8660364d9 fix(asymkey): do not verify OpenPGP signatures with an SSH instance key, require git 2.18 (#39073 )

With SIGNING_FORMAT = ssh the OpenPGP verification path builds its
GPGSettings from the instance signing key but leaves the format empty,
so it runs `gpg -a --export` on an SSH public key path. Depending on the
local gpg setup that either exports nothing, so an OpenPGP signed commit
reports gpg.error.generate_hash instead of a missing key, or it fails
outright and logs an export error for every such commit.

Both guards are needed. The first covers SIGNING_KEY set to a path with
SIGNING_FORMAT=ssh; the second covers the shipped default
SIGNING_KEY=default, where the format comes from git's own gpg.format
and never gets reconciled with the hardcoded "openpgp". Drop either one
and a working config goes back to broken.

Also raise minimum git version to 2.18 which was already required before this change.

Fixes: https://github.com/go-gitea/gitea/issues/37452
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: silverwind <me@silverwind.io>

2026-08-25 12:02:31 +00:00

actions

feat(actions)!: add RUN_RETENTION_DAYS to delete old action runs (#38855 )

2026-08-22 21:32:59 +00:00

agit

…

asymkey

fix(asymkey): do not verify OpenPGP signatures with an SSH instance key, require git 2.18 (#39073 )

2026-08-25 12:02:31 +00:00

attachment

chore: misc go 1.27 tweaks (#39069 )

2026-08-24 18:26:10 +00:00