3 people 51736a9706 fix(pull): refuse review comments on locked pull requests (#39960) (#40084) ...

Backport https://github.com/go-gitea/gitea/pull/39960

Locking a pull request stops users without write access from commenting,
but the review paths never checked the lock, so any signed-in user could
still post reviews, code comments and replies on a locked pull request.

The cherry-pick conflicted on the `repo-diff.ts` imports, because
`release/v28` has no `DiffFileTreeLocale`.

Co-authored-by: Basavaraj S m <basavaraj@digiscrypt.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-10-30 19:36:51 +00:00

..

actions

fix: add missing access checks and size limits (#39942) (#40085)

2026-10-30 08:08:32 +01:00

agit

fix(pull): refresh commits behind when an AGit pull request is updated (#39613) (#39625)

2026-10-06 11:27:16 +00:00

asymkey

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

attachment

chore: misc go 1.27 tweaks (#39069)

2026-08-24 18:26:10 +00:00

audit

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

auth

fix(auth): prevent competing remember-me token rotations (#39686) (#39688)

2026-10-12 09:48:37 +00:00

automerge

fix: trace git command correctly (#39520) (#39524)

2026-10-01 10:19:33 +00:00

automergequeue

refactor(automerge): fix error handling, populate recent automerge tasks on restart (#39001)

2026-08-28 14:17:01 -07:00

context

fix(user): answer the follow of a bot user with the profile card (#39980) (#40086)

2026-10-30 07:30:13 +00:00

contexttest

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

convert

fix: get valid UTF-8 for diff_hunk and composer readme (#39932) (#40000)

2026-10-24 13:38:33 +00:00

cron

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

doctor

fix(lfs): validate OID before building filesystem object path (#39762) (#39766)

2026-10-13 17:19:59 -07:00

externalaccount

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

feed

fix(feed): use meaningful lines as comment excerpt (#39276)

2026-09-25 03:08:15 +00:00

forms

fix: correct "go get" URL ssh scheme, fix form binding (#39674, #39528) (#39676)

2026-10-08 12:30:59 +00:00

git

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

gitdiff

fix(diff): load both blobs of renamed files for diff rendering (#39969) (#39992)

2026-10-24 14:05:09 +00:00

gitproxy

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

indexer

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue

fix(pull): refuse review comments on locked pull requests (#39960) (#40084)

2026-10-30 19:36:51 +00:00

lfs

chore: fix system users (#39299)

2026-09-12 16:26:20 +00:00

mailer

fix(pull): refuse review comments on locked pull requests (#39960) (#40084)

2026-10-30 19:36:51 +00:00

markup

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

migrations

fix: add missing access checks and size limits (#39942) (#40085)

2026-10-30 08:08:32 +01:00

mirror

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

notifications

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00

notify

fix: prevent Gitea from crashing by notification panic (#39835)

2026-10-18 11:11:15 +02:00

oauth2_provider

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

org

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

packages

fix: package registry keypair creation race (#39319)

2026-09-18 18:30:27 +00:00

projects

feat(api): add project APIs (#38691)

2026-08-08 13:53:28 +00:00

pubsub

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

pull

fix: off-by-one errors in code comment patches (#39887) (#39904)

2026-10-20 20:37:19 -07:00

release

fix: correct label deletion and release attachment load (#39743) (#39752)

2026-10-13 00:53:02 +00:00

repository

fix(actions): fix schedule cleanup and default branch switch (#39740) (#39786)

2026-10-14 22:47:59 +00:00

secrets

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

task

fix: classify git failures on stderr, restrict migration failure detail (#39010)

2026-09-15 10:59:34 +02:00

uinotification

feat: add watch options (#37571)

2026-08-08 07:35:13 +00:00

user

fix(user): allow unblocking users promoted to admin (#39192)

2026-09-23 16:54:12 +00:00

versioned_migration

refactor: prepare to decouple the "model migration" package and "models" package (#38533)

2026-07-20 03:42:02 +00:00

webhook

enhance(webhook): mention release assets in notifications (#39631) (#39912)

2026-10-21 07:05:55 +00:00

websocket

fix: get valid UTF-8 for diff_hunk and composer readme (#39932) (#40000)

2026-10-24 13:38:33 +00:00

webtheme

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

wiki

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00