bircni ad05aaee80 fix(actions): enforce fork pull request trust boundaries (#39005) ...

Preserve fork pull request restrictions across review-triggered
workflows, reusable workflow access, job scheduling, and filtered
workflow statuses.

This prevents untrusted fork workflow content from bypassing approval,
accessing private reusable workflows, or satisfying protected status
checks.


_Assisted-by: Codex:GPT-5_

2026-08-21 12:35:28 +00:00

..

actions

fix(actions): allow larger scheduled workflows (#38985)

2026-08-21 01:06:44 +02:00

activities

chore: fix repo watch (#38921)

2026-08-16 03:00:59 +00:00

admin

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

asymkey

refactor: deploy key and private route handlers (#38999)

2026-08-20 15:57:17 +00:00

auth

feat(user): Personal access tokens can be regenerated (#38907)

2026-08-17 18:17:16 +00:00

avatars

fix(avatar): use sha256 and inline the federated avatar lookup (#38843)

2026-08-10 23:13:28 +00:00

db

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

dbfs

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

fixtures

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

git

fix(lfs): ensure lock listing paginates with a total order (#38850)

2026-08-19 11:54:21 -07:00

gituser

fix(ui): too many participants shown in commit avatar stacks (#38689)

2026-07-29 12:39:35 +00:00

issues

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

organization

fix: grant limited-org unit read access to authenticated non-members (#38871)

2026-08-18 06:58:37 +00:00

packages

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

perm

fix(actions): enforce fork pull request trust boundaries (#39005)

2026-08-21 12:35:28 +00:00

project

feat(api): add project APIs (#38691)

2026-08-08 13:53:28 +00:00

pull

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

renderhelper

refactor: render highlight language (#38793)

2026-08-06 18:07:36 +08:00

repo

fix(repo): hide repositories of hidden owners (#39009)

2026-08-21 06:32:57 +00:00

repostats

refactor: use WithRepo instead of WithDir for most git operations, clean up model migrations (#38555)

2026-07-21 12:18:00 +00:00

secret

feat(actions)!: improve support for reusable workflows (#37478)

2026-05-30 08:31:14 +02:00

shared/types

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

system

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

unit

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

unittest

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

user

fix(avatar): use sha256 and inline the federated avatar lookup (#38843)

2026-08-10 23:13:28 +00:00

webhook

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

init.go

refactor: use WithRepo instead of WithDir for most git operations, clean up model migrations (#38555)

2026-07-21 12:18:00 +00:00