bircni f69e15afe7 fix: various security fixes (#38406) ...

Addresses a batch of privately reported security issues, grouped by
area:

- **SSRF** - migration PR-patch/asset fetches, OAuth2 avatar & OpenID
discovery, pull-mirror URL re-validation, and the outbound proxy path.
- **Access-token scope** - prevent scope escalation on token creation;
keep public-only tokens confined (feeds, packages, Actions listings,
star/watch lists, limited/private owners).
- **Access control / disclosure** - go-get default-branch leak, webhook
authorization-header leak, watch clearing on private transitions,
label/attachment scoping.
- **Denial of service** - input bounds for npm dist-tags, Debian control
files, Arch file lists, and SSH keys.

### 📌 Attention for site admins

Not breaking - existing configs keep working - but two changes are worth
a look:

- **New SSRF protection** Outbound requests (migrations, OAuth2 avatars,
OpenID discovery, pull mirrors, proxy path) are now validated against
the allow/block host lists. If your instance legitimately reaches
internal hosts, you may need to add them to
`[security].ALLOWED_HOST_LIST` (and the relevant `ALLOW_LOCALNETWORKS`
settings).
- **Deprecation** `[webhook].ALLOWED_HOST_LIST` is deprecated and will
be removed in a future release. Use `[security].ALLOWED_HOST_LIST`
instead; the old key still works for now.

---------

Co-authored-by: TheFox0x7 <thefox0x7@gmail.com>
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: Zettat123 <zettat123@gmail.com>

2026-07-12 17:14:09 +00:00

..

_mock_data/Test_MigrateFromGiteaToGitea

Remove external service dependencies in migration tests (#36866)

2026-04-23 15:18:53 +00:00

migration-test

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

actions_approve_test.go

fix(actions)!: require merged PR to bypass fork PR approval gate (#38010)

2026-06-08 20:07:15 +00:00

actions_concurrency_test.go

fix(actions)!: require merged PR to bypass fork PR approval gate (#38010)

2026-06-08 20:07:15 +00:00

actions_concurrent_claim_test.go

fix(actions): ensure all waiting jobs get runners in large workflows (#38200)

2026-06-27 17:56:12 +00:00

actions_delete_run_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

actions_inputs_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

actions_job_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

actions_job_token_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

actions_list_filter_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

actions_log_finalize_test.go

fix(actions): ack re-sent UpdateLog finalize idempotently (#37885)

2026-05-28 05:19:46 +02:00

actions_log_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

actions_rerun_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

actions_reusable_workflow_test.go

feat(actions)!: improve support for reusable workflows (#37478)

2026-05-30 08:31:14 +02:00

actions_route_test.go

feat(actions): add job summaries (GITHUB_STEP_SUMMARY) (#37500)

2026-06-08 19:11:00 +00:00

actions_runner_modify_test.go

feat(actions): bulk delete, disable and enable runners in admin UI (#37869)

2026-05-29 22:16:47 +02:00

actions_runner_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

actions_schedule_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

actions_scoped_workflow_test.go

fix(workflows): branch protection status checks fail when workflow uses on: paths filter (#38237)

2026-07-01 21:47:47 +02:00

actions_settings_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

actions_trigger_test.go

enhance(actions): only create filtered-out workflow commit status for required contexts (#38371)

2026-07-09 15:34:56 +00:00

actions_variables_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

admin_config_test.go

fix: js string split (#38233)

2026-06-27 12:09:01 +00:00

admin_user_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_actions_artifact_test.go

feat(actions): add job summaries (GITHUB_STEP_SUMMARY) (#37500)

2026-06-08 19:11:00 +00:00

api_actions_artifact_v4_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

api_actions_permission_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_actions_run_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_actions_runner_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_admin_org_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_admin_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_auth_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_branch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_comment_attachment_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_comment_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_fork_test.go

feat(api): add Link header in ListForks (#38052)

2026-06-10 17:34:10 +00:00

api_gitignore_templates_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_gpg_keys_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_helper_for_declarative_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_httpsig_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_attachment_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_config_test.go

enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 (#37866)

2026-05-29 01:12:11 +00:00

api_issue_dependency_test.go

fix(security): harden access checks and migration validation (#38324)

2026-07-10 19:30:43 +02:00

api_issue_label_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_issue_lock_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_milestone_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_pin_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_reaction_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_stopwatch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_subscription_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_templates_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_issue_test.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

api_issue_tracked_time_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_keys_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_label_templates_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_license_templates_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_notification_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_oauth2_apps_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_org_avatar_test.go

docs: add development setup guide (#37960)

2026-06-17 06:39:22 +00:00

api_org_test.go

fix(api): deny private org member enumeration via /members (#38213)

2026-06-26 18:35:13 +00:00

api_packages_alpine_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_arch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_cargo_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_chef_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_composer_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_conan_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_conda_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_container_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_cran_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_debian_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_generic_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_packages_goproxy_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_helm_test.go

enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 (#37866)

2026-05-29 01:12:11 +00:00

api_packages_maven_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_npm_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_packages_nuget_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_pub_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_pypi_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_rpm_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_rubygems_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_swift_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_terraform_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_packages_vagrant_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_private_serv_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_public_only_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_pull_commits_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_pull_review_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_pull_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_releases_attachment_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_releases_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_archive_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_avatar_test.go

docs: add development setup guide (#37960)

2026-06-17 06:39:22 +00:00

api_repo_branch_test.go

feat(api): add q parameter to list branches API for server-side filtering (#37982)

2026-06-03 16:21:48 -07:00

api_repo_collaborator_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_compare_test.go

feat(api): support ref suffixes in compare (#38148)

2026-06-24 05:38:02 +00:00

api_repo_edit_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_file_create_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_file_delete_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_file_diffpatch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_file_get_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_file_helpers.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_file_update_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_files_change_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_files_get_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_get_contents_list_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_get_contents_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_git_blobs_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_git_commits_test.go

fix: Improve since/until when counting commits for X-Total-Count (#38243)

2026-07-01 20:43:46 +00:00

api_repo_git_hook_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_git_notes_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_git_ref_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_git_tags_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_git_trees_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_hook_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_repo_languages_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_lfs_locks_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_lfs_migrate_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_lfs_test.go

fix(lfs): require proof of possession for cross-repo objects (#38322)

2026-07-09 21:43:08 +00:00

api_repo_license_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_raw_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_secrets_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_tags_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_teams_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_test.go

feat(api): Add assignees APIs (#37330)

2026-06-09 06:12:09 +00:00

api_repo_topic_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_repo_variables_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_settings_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_team_test.go

fix(security): harden access checks and migration validation (#38324)

2026-07-10 19:30:43 +02:00

api_team_user_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_token_self_test.go

feat(api): add token introspection and self-deletion endpoint (#37995)

2026-06-14 20:05:18 +02:00

api_token_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_twofa_test.go

fix: Various security fixes (#38103)

2026-06-17 16:06:51 +00:00

api_user_avatar_test.go

docs: add development setup guide (#37960)

2026-06-17 06:39:22 +00:00

api_user_block_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_email_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

api_user_follow_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_heatmap_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_info_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_org_perm_test.go

fix: api error message (#38031)

2026-06-08 16:58:42 +08:00

api_user_orgs_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_public_only_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_search_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_secrets_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_star_test.go

fix(security): harden access checks and migration validation (#38324)

2026-07-10 19:30:43 +02:00

api_user_update_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_variables_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_user_watch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

api_wiki_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

attachment_test.go

fix(release): gate draft release attachments on web download endpoints (#38318)

2026-07-03 20:07:37 +02:00

auth_ldap_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

auth_oauth2_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

avatar.png

Add API for changing Avatars (#25369)

2023-06-29 23:22:55 +00:00

branches_test.go

fix: golang html template url escaping (#38363)

2026-07-08 00:16:32 +00:00

change_default_branch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

cmd_keys_test.go

fix(deps): update go dependencies (#38194)

2026-06-29 15:10:47 +00:00

compare_test.go

feat(api): support ref suffixes in compare (#38148)

2026-06-24 05:38:02 +00:00

config_instance_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

cors_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

create_no_session_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

db_collation_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

delete_user_test.go

refactor: replace legacy delete-button with link-action (#38143)

2026-06-18 12:02:11 +00:00

download_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

dump_restore_test.go

enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 (#37866)

2026-05-29 01:12:11 +00:00

editor_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

empty_repo_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

ephemeral_actions_runner_deletion_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

eventsource_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

explore_repos_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

explore_user_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

feed_repo_test.go

fix: Various sec fixes 2 (#38108)

2026-06-17 06:50:25 +02:00

feed_user_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

git_general_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

git_helper_for_declarative_test.go

feat(ssh): auto generate additional ssh keys (#33974)

2026-06-08 18:18:58 +00:00

git_lfs_ssh_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

git_misc_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

git_push_test.go

fix: enforce public-only token scope and harden push options / locale parsing (#38323)

2026-07-10 16:39:01 +00:00

git_smart_http_test.go

fix: allow git clone of private repos with anonymous code access (#38074)

2026-06-13 12:02:02 +08:00

git_ssh_redirect_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

goget_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

gpg_ssh_git_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

heatmap_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

html_helper.go

refactor: replace legacy delete-button with link-action (#38143)

2026-06-18 12:02:11 +00:00

incoming_email_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

integration_test.go

feat(api): add q parameter to list branches API for server-side filtering (#37982)

2026-06-03 16:21:48 -07:00

issue_label_scope_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

issue_test.go

fix: Fix issue target branch selection for non-collaborators (#36916)

2026-06-18 12:24:37 +00:00

issue_timetrack_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

lfs_getobject_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

lfs_local_endpoint_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

lfs_view_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

linguist_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

links_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

manual_merge_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

markup_external_test.go

fix: csp regressions (#38047)

2026-06-12 08:36:05 +08:00

migrate_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

mirror_pull_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

mirror_push_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

nonascii_branches_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

oauth_avatar_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

oauth_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

org_count_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

org_profile_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

org_project_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

org_team_invite_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

org_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

org_worktime_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

packages_service_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

private-testing.key

…

privateactivity_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

project_test.go

fix: org project view assignee list (#38357)

2026-07-07 14:40:12 +08:00

pull_comment_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_commit_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_compare_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_create_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_diff_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

pull_merge_test.go

fix(pull): preserve squash message trailers and additional commit messages (#37954)

2026-06-15 17:55:31 +00:00

pull_review_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

pull_status_test.go

fix: refresh pull request merge box when the commit status is pending (#38410)

2026-07-11 19:36:10 +02:00

pull_update_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

release_test.go

fix(release): validate web attachment renames against allowed types (#38314)

2026-07-04 15:02:17 +02:00

rename_branch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_activity_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_archive_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_branch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_commits_search_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_commits_test.go

feat: Add avatar stacks (#37594)

2026-06-08 17:16:22 +00:00

repo_fork_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_generate_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_home_token_scope_test.go

fix: various security fixes (#38406)

2026-07-12 17:14:09 +00:00

repo_merge_upstream_test.go

fix: Various security fixes (#38103)

2026-06-17 16:06:51 +00:00

repo_migrate_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_search_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_tag_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_topic_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_visibility_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_watch_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

repo_webhook_test.go

chore: Move gitea sdk from code.gitea.io/sdk/gitea -> gitea.dev/sdk (#37855)

2026-05-27 16:23:44 -07:00

repofiles_change_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

session_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

setting_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

signin_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

signout_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

signup_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

ssh_key_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

timetracking_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

user_avatar_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

user_settings_test.go

refactor: replace legacy delete-button with link-action (#38143)

2026-06-18 12:02:11 +00:00

user_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

version_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

view_test.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

wiki_test.go

fix: refactor git error handling and make archive streaming handle non-existing commit id (#38007)

2026-06-06 11:06:08 +00:00

workflow_run_api_check_test.go

feat(api): Add GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs (#37196)

2026-06-11 17:12:30 +00:00