Giteabot dbc17db0c2 fix(actions): enforce fork pull request trust boundaries (#39005) (#39018) ...

Backport #39005 by @bircni

Preserve fork pull request restrictions across review-triggered
workflows, reusable workflow access, job scheduling, and filtered
workflow statuses.

This prevents untrusted fork workflow content from bypassing approval,
accessing private reusable workflows, or satisfying protected status
checks.


_Assisted-by: Codex:GPT-5_

Co-authored-by: bircni <bircni@icloud.com>

2026-08-21 14:25:59 +00:00

..

actions

fix(actions): enforce fork pull request trust boundaries (#39005) (#39018)

2026-08-21 14:25:59 +00:00

agit

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

asymkey

fix(pull): sign the commit when updating a branch by merge (#38441) (#38499)

2026-07-17 11:05:05 +00:00

attachment

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

auth

fix: update collaborator access mode and httpsign (#38894, #38862) (#38895)

2026-08-13 09:59:07 +00:00

automerge

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

automergequeue

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

context

refactor: markup render (#38864) (#38869)

2026-08-11 18:00:47 +02:00

contexttest

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

convert

fix: resolve YAML anchors and aliases in Actions workflows (#38984) (#38996)

2026-08-20 11:16:33 +02:00

cron

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

doctor

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

externalaccount

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

feed

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

forms

refactor: replace legacy delete-button with link-action (#38143)

2026-06-18 12:02:11 +00:00

git

perf: Various performance regression fixes (#38078)

2026-06-21 14:34:07 +00:00

gitdiff

fix(pulls): respect diff.orderFile in diff file tree (#38566) (#38578)

2026-07-22 18:14:16 +00:00

indexer

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

lfs

fix(lfs): failed upload deletes a concurrent upload's meta object (#38693) (#38722)

2026-07-31 13:41:26 +00:00

mailer

fix: mail template for push event (#38467) (#38468)

2026-07-15 18:57:03 +02:00

markup

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

migrations

fix(migrations): use all configured GitHub tokens (#38841) (#38846)

2026-08-13 17:27:12 +00:00

mirror

fix: revert git clone http redirection forbidden (#38530) (#38545)

2026-07-20 17:21:17 +02:00

notify

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

oauth2_provider

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

org

fix: various security fixes (#38406) (#38426)

2026-07-12 17:41:58 +00:00

packages

fix: drop newline-bearing member names in arch ParsePackage (#38102) (#38830)

2026-08-08 00:46:08 +02:00

projects

fix: various security fixes (#38406) (#38426)

2026-07-12 17:41:58 +00:00

pull

fix(pull): sign the commit when updating a branch by merge (#38441) (#38499)

2026-07-17 11:05:05 +00:00

release

fix(release): validate web attachment renames against allowed types (#38314) (#38328)

2026-07-04 17:45:11 +02:00

repository

fix: update collaborator access mode and httpsign (#38894, #38862) (#38895)

2026-08-13 09:59:07 +00:00

secrets

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

task

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

uinotification

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

user

fix: clean up orphaned user-keyed tables in deleteUser (#38511) (#38514)

2026-07-20 08:41:59 +00:00

versioned_migration

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

webhook

fix(webhook): remove slack channel name check (#38608) (#38612)

2026-07-24 08:09:05 +00:00

webtheme

fix(frontend): resolve Vite assets by manifest source path (#37836)

2026-05-28 06:14:52 +00:00

wiki

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00