bircni 3a806a58d0 fix(attachments): enforce owning repository path (#39048) ...

Reject attachment requests routed through a repository other than the
attachment owner.

---------

Co-authored-by: silverwind <me@silverwind.io>

2026-08-24 17:32:23 +00:00

..

admin

chore: update Go to v1.27 (#39068)

2026-08-24 07:28:17 +00:00

auth

refactor: clean up form binding & validation (#38873)

2026-08-14 02:15:33 +00:00

devtest

fix(db): make paginated database reads always require "order" option (#39017)

2026-08-23 08:18:18 +00:00

explore

chore: fix form string abuse (#38106)

2026-06-14 18:26:22 +00:00

feed

fix(release): separate publication time from the release date (#36761)

2026-08-22 08:59:37 +00:00

healthcheck

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

misc

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

org

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

repo

fix(attachments): enforce owning repository path (#39048)

2026-08-24 17:32:23 +00:00

shared

fix(issues): sort scoped labels by exclusive order in dropdowns (#38893)

2026-08-17 18:47:28 +00:00

user

fix: resolve actions commit status permission per repository (#38977)

2026-08-19 20:09:00 +02:00

websocket

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00

base.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

githttp.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

goget.go

refactor: api token scope check (#38862)

2026-08-11 09:37:44 +02:00

home.go

enhance(admin): show impersonation banner and keep password change with the user (#38924)

2026-08-14 22:23:30 +08:00

metrics.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

nodeinfo.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

passkey.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

swagger_json.go

refactor: serve the api specs as plain json (#38715)

2026-07-31 14:16:27 +00:00

web.go

refactor: http request binding (#38971)

2026-08-19 14:15:42 +08:00

webfinger.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00