HomeFreeBSD

www/gitea: update to 1.21.5 (fixes security vulnerabilities)

Description

www/gitea: update to 1.21.5 (fixes security vulnerabilities)

ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.21.5

SECURITY

  • Prevent anonymous container access if RequireSignInView is enabled
  • Update go dependencies and fix go-git

BUGFIXES

  • Revert "Speed up loading the dashboard on mysql/mariadb
  • Fix an actions schedule bug
  • Fix update enable_prune even if mirror_interval is not provided
  • Fix uploaded artifacts should be overwritten
  • Preserve BOM in web editor
  • Strip / from relative links
  • Don't remove all mirror repository's releases when mirroring
  • Implement MigrateRepository for the actions notifier
  • Respect branch info for relative links
  • Don't reload timeline page when (un)resolving or replying conversation
  • Only migrate the first 255 chars of a Github issue title
  • Fix sort bug on repository issues list
  • Fix DeleteCollaboration transaction behaviour
  • Fix schedule not trigger bug because matching full ref name with short ref name
  • Fix migrate storage bug
  • Fix archive creating LFS hooks and breaking pull requests
  • Fix reverting a merge commit failing
  • Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate
  • Fix incorrect PostgreSQL connection string for Unix sockets

ENHANCEMENTS

  • Make loading animation less aggressive
  • Avoid duplicate JS error messages on UI
  • Bump @github/relative-time-element to 4.3.1

MISC

  • Warn that DISABLE_QUERY_AUTH_TOKEN is false only if it's explicitly defined
  • Remove duplicated checkinit on git module

PR: 277066
Reported by: freebsd@otoh.org
MFH: 2024Q1 (security fixes, bug fixes)

Details

Provenance
Paul Armstrong <freebsd@otoh.org>Authored on Feb 16 2024, 8:27 AM
fernapeCommitted on Feb 18 2024, 4:32 PM
Parents
R11:5f1e11f7f380: www/sabredav: Update to 4.6.0
Branches
Unknown
Tags
Unknown