HomeFreeBSD

www/gitea: Update to 1.19.4 (fixes security vulnerabilities)

Description

www/gitea: Update to 1.19.4 (fixes security vulnerabilities)

ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.19.4

SECURITY

  • Fix open redirect check for more cases

API

  • Return 404 in the API if the requested webhooks were not found
  • Fix organization field being null in GET /api/v1/teams/{id}

ENHANCEMENTS

  • Set --font-weight-bold to 600
  • Make mailer SMTP check have timed context
  • Do not select line numbers when selecting text from the action run logs

BUGFIXES

  • Fix bug when change user name
  • Fix task list checkbox toggle to work with YAML front matter
  • Hide limited users if viewed by anonymous ghost
  • Add WithPullRequest for actionsNotifier
  • Fix parallelly generating index failure with Mysql
  • GitLab migration: Sanitize response for reaction list
  • Fix users cannot visit issue attachment bug
  • Fix missing reference prefix of commits when sync mirror repository
  • Only validate changed columns when update user
  • Make DeleteIssue use correct context
  • Fix topics deleted via API not being deleted in org page
  • Fix Actions being enabled accidentally
  • Fix missed table name on iterate lfs meta objects
  • Fix safari cookie session bug
  • Respect original content when creating secrets
  • Fix Pull Mirror out-of-sync bugs
  • Fix run list broken when trigger user deleted
  • Fix issues list page multiple selection update milestones
  • Fix: release page for empty or non-existing target
  • Fix close org projects
  • Refresh the refernce of the closed PR when reopening
  • Fix the permission of team's Actions unit issue
  • Bump go.etcd.io/bbolt and blevesearch deps
  • Fix new wiki page mirror
  • Match unqualified references when syncing pulls as well

DOCS

  • Change branch name from master to main in some documents' links
  • Remove unnecessary content on docs
  • Unify doc links to use paths relative to doc folder
  • Fix docs documenting invalid @every for OLDER_THAN cron settings

MISC

  • Merge different languages for language stats
  • Hiding Secrets options when Actions feature is disabled
  • Improve decryption failure message
  • Makefile: Use portable !, not GNUish -not, with find(1).

PR: 272380
Reported by: stb@lassitu.de
MFH: 2023Q3 (security fix)

(cherry picked from commit 0609a03e4b94368b5410503906f05eaec542e2c7)

Details

Provenance
stbAuthored on Jul 5 2023, 11:36 AM
fernapeCommitted on Jul 6 2023, 6:24 AM
Parents
R11:dad181d5f174: graphics/mesa-devel: update to 23.1.b.4070
Branches
Unknown
Tags
Unknown