Giteabot 320b44df58 fix(api): enforce public-only scope for compare heads (#39006) (#39013) ...

Backport #39006 by @bircni

Enforce public-only token scope for repositories resolved as compare
heads.

_Assisted-by: Codex:GPT-5_

Co-authored-by: bircni <bircni@icloud.com>

2026-08-21 09:15:02 +00:00

..

action.go

fix(actions): correctness and hardening fixes (#38518) (#38631)

2026-07-25 19:49:33 +02:00

actions_run.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

avatar.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

blob.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

branch.go

fix: Various security fixes (#38103)

2026-06-17 16:06:51 +00:00

collaborators.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

commits.go

fix: Improve since/until when counting commits for X-Total-Count (#38243) (#38304)

2026-07-02 10:07:29 +00:00

compare.go

feat(api): support ref suffixes in compare (#38148)

2026-06-24 05:38:02 +00:00

download.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

file.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

fork.go

feat(api): add Link header in ListForks (#38052)

2026-06-10 17:34:10 +00:00

git_hook.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

git_ref.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

hook_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

hook.go

fix: make "test push webhook" always work (#38425) (#38455)

2026-07-15 05:51:44 +00:00

issue_assignee.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

issue_attachment.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

issue_comment_attachment.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

issue_comment.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

issue_dependency.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

issue_label.go

fix: various security fixes (#38406) (#38426)

2026-07-12 17:41:58 +00:00

issue_lock.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

issue_pin.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

issue_reaction.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

issue_stopwatch.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue_subscription.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

issue_tracked_time.go

fix: various security fixes (#38406) (#38426)

2026-07-12 17:41:58 +00:00

issue.go

fix: avoid enumerating every public repository in issue search (#38992) (#39000)

2026-08-20 19:51:20 +02:00

key.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

label.go

fix: various security fixes (#38406) (#38426)

2026-07-12 17:41:58 +00:00

language.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

license.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

main_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

migrate.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

milestone.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

mirror_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

mirror.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

notes.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

patch.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_review.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

pull.go

fix(api): enforce public-only scope for compare heads (#39006) (#39013)

2026-08-21 09:15:02 +00:00

release_attachment.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

release_tags.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

release.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

repo_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

star.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

status.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

subscriber.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

tag.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

teams.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

topic.go

fix(api): align Swagger schemas for UserSettings and TopicListResponse (#38590) (#38592)

2026-07-23 07:27:47 +00:00

transfer.go

refactor(api): clarify APIError message usage and fix legacy lint error (#38012)

2026-06-07 06:19:39 +00:00

tree.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

wiki.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00