Gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-06-10 05:20:28 +00:00

Files

Giteabot 8bf445e86a fix(actions): reject workflow_dispatch for workflows without that trigger (#37660 ) (#37895 )

Backport #37660 by @jorgeortiz85

## Summary

Fixes #37528

This PR makes the workflow dispatch API reject workflows that do not
declare `workflow_dispatch`. Previously, `POST
/repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches` could
create an `ActionRun` for a workflow that only declared another event
such as `push`.

The service now validates that the target workflow has a
`workflow_dispatch` trigger before inserting the run. The API maps that
validation failure to `422 Unprocessable Entity`, matching existing
validation failures in this handler.

The regression test creates a push-only workflow, dispatches it through
the public API, asserts the `workflow_dispatch` validation message, and
verifies that no run was inserted.

## Testing

- `go test ./services/actions`
- `TAGS="sqlite sqlite_unlock_notify" make
test-integration#TestWorkflowDispatchPublicApiRequiresWorkflowDispatchTrigger`
- `TAGS="sqlite sqlite_unlock_notify" make
test-integration#TestWorkflowDispatchPublicApi`

## Disclosure

Developed with assistance from OpenAI Codex.

Co-authored-by: Jorge Ortiz <jorge.ortiz@gmail.com>
Co-authored-by: Nicolas <bircni@icloud.com>

2026-05-29 05:09:08 +02:00

e2e

fix(deps): update dependency mermaid to v11.15.0 [security], add e2e test (#37665 )

2026-05-12 08:37:33 +02:00

fuzz

…

gitea-lfs-meta

…

gitea-repositories-meta

Fix corrupted external render content (#35946 )

2025-11-14 08:31:11 +08:00

integration