Numerica/gitea
0
0
Fork 0
forked from coop-cloud/gitea
Code Pull Requests Activity
263 Commits 9 Branches 50 Tags
master
Commit Graph
138 Commits
Author SHA1 Message Date
Beto c52ccd5606 fix: remove /etc/timezone bind mount, not present on all hosts 
Docker Swarm requires the bind source to exist on the node before
scheduling the task; /etc/timezone is Debian/Ubuntu-specific and
missing on other distros, causing deploy failures. /etc/localtime
alone covers timezone info portably.
 2026-08-14 17:39:21 -04:00
notplants 97fe2bf213 chore: publish 3.6.3+1.27.1-rootless release 2026-08-10 12:57:05 -04:00
notplants 1f987b4ab3 chore: publish 3.6.2+1.27.1-rootless release 2026-08-10 12:32:49 -04:00
autonomic-bot 096cc70fd9 chore: upgrade gitea to 1.27.1-rootless 
Fixes two critical Gitea CVEs, both CVSS 9.8, both remediated in 1.27.1:
- CVE-2026-60004: RCE via POST /api/v1/repos/{owner}/{repo}/diffpatch — a patch
  submitted twice triggers an add/add conflict that writes an executable
  post-index-change hook into $GIT_DIR/hooks/, which git then runs as the Gitea
  service account. Affects 1.17-1.27.0; public PoC.
- CVE-2026-59774: unauthenticated arbitrary file read via Org-mode #+INCLUDE
  accepting absolute paths through the markup renderer (affects 1.22.1-1.27.0),
  escalating to RCE by reading config/tokens.

Based on current upstream main, so it includes the BREAKING CHANGE: remove forgejo
work; the previous branch predated it and was verified against a tree that would
not have deployed. Version label left at 3.6.0+1.24.2-rootless per upgrade-PR
convention (operator runs abra recipe release).
 2026-08-10 16:27:26 +00:00
notplants 4c330eb4a4 Merge branch 'master' into remove-forgejo 2026-07-07 21:11:31 +00:00
notplantsandnotplants 2f7f1b6bfe chore: upgrade gitea to 1.26.2-rootless, postgres to 15.18 2026-06-22 19:29:08 +00:00
fauno 6a0339d3f2 BREAKING CHANGE: remove forgejo 2026-06-16 18:33:21 -03:00
notplants 357926f26e feat: support Git LFS on plain gitea 
Add an opt-in compose.lfs.yml that mounts the lfs_jwt_secret secret and
enables GITEA_LFS_START_SERVER for plain gitea (forgejo already bundles
LFS). Emit LFS_JWT_SECRET in app.ini whenever the LFS server is on so the
JWT secret is stable across redeploys instead of being regenerated on
every restart (app.ini is a read-only config mount).

Bump version 3.5.2 -> 3.6.0.
 2026-06-15 19:33:03 +00:00
notplants 34dd04ac99 Merge branch 'master' into stop-first 2026-06-04 16:46:28 +00:00
notplants e7c4999f78 bump version number to 3.5.3 2026-05-18 12:59:07 -04:00
notplants c63e1cdd04 change deploy logic to stop-first instead of start-first 2026-05-18 12:51:20 -04:00
p4u1 d86d742ed1 Adds missing access controll headers 2025-10-27 18:29:54 +01:00
fauno 989294173e chore: publish 3.5.2+1.24.2-rootless release 2025-09-01 07:44:54 -03:00
fauno 485fa32512 chore: publish 3.5.1+1.24.2-rootless release 2025-07-26 01:35:54 -03:00
fauno 6d586f6ad3 chore: publish 3.5.0+1.24.2-rootless release 2025-07-19 11:42:35 -03:00
3wordchant 4cfc2ac2e0 chore: publish 3.4.0+1.24.2-rootless release 2025-06-25 18:34:34 +01:00
3wordchant 270ed7bb93 chore: publish 3.3.1+1.23.8-rootless release 2025-05-16 20:54:29 +02:00
fauno 3840e87f2f fix: security release 
https://blog.gitea.com/release-of-1.23.8/
 2025-05-15 14:24:52 -03:00
fauno b44e18f063 feat: configuration by forge 2025-02-20 09:17:58 -03:00
fauno 77624221b4 feat: lfs server 2025-02-18 15:44:59 -03:00
knoflook cf2298162d chore: publish 3.3.0+1.23.1-rootless release 2025-02-12 14:35:34 +01:00
knoflook 0bbac9ed9c feat: refresh token validity 2025-02-12 14:34:11 +01:00
fauno 8ffd4d33be chore: publish 3.2.0+1.23.1-rootless release 2025-01-21 10:23:43 -03:00
javielico 1619c333c3 chore: publish 3.1.1+1.23.1-rootless release 2025-01-18 15:14:06 +00:00
javielico 6d681457f8 chore: publish 3.1.0+1.23.0-rootless release 2025-01-18 15:13:22 +00:00
3wordchant b2087cf373 chore: publish 3.0.3+1.22.6-rootless release 2025-01-15 12:09:07 -05:00
3wordchant 407e587646 chore: publish 3.0.2+1.22.6-rootless release 2025-01-08 12:56:24 -05:00
fauno b4273a95e3 feat: sqlite3 support 2025-01-07 13:30:03 -03:00
3wordchant daf4a26f72 chore: publish 3.0.1+1.22.3-rootless release 2024-10-30 13:36:29 -04:00
3wordchant 7fec94eaec chore: publish 3.0.0+1.22.2-rootless release 2024-10-30 13:25:04 -04:00
moritz 2554109fab update forgejo to version 9.0.1 2024-10-29 13:55:32 +01:00
moritz bd57d6121b update backupbot label 2024-10-24 17:01:04 +02:00
3wordchant cae11a78e6 chore: publish 2.10.1+1.22.2-rootless release 2024-10-02 14:01:17 -04:00
javielico 8e8809fd07 chore: publish 2.10.0+1.22.1-rootless release 2024-08-23 19:21:01 +01:00
moritz 24e4b09b07 chore: publish 2.9.1+1.22.0-rootless release 2024-08-15 12:25:05 +02:00
3wordchant c5dada903e chore: publish 2.9.0+1.22.0-rootless release 2024-07-03 14:26:42 -04:00
moritz 9687f7f738 chore: publish 2.8.0+1.21.11-rootless release 2024-05-13 16:20:13 +02:00
moritz f26296ba5c add backup label 2024-04-29 15:24:13 +02:00
javielico baacc575c2 chore: publish 2.7.0+1.21.11-rootless release 2024-04-24 21:03:14 +01:00
javielico 2b15ff9c28 Added components to app.ini 2024-04-23 16:13:28 +01:00
javielico 94de0096fc Adding DISABLE_AUTH 2024-04-18 19:01:32 +01:00
javielico e0d73083e2 Adding variable configs 2024-04-14 20:48:18 +01:00
decentral1se ced3ea7978 chore: publish 2.6.2+1.21.10-rootless release 2024-04-01 17:05:17 +02:00
decentral1se 43abfe0483 chore: publish 2.6.1+1.21.10-rootless release 2024-04-01 16:38:05 +02:00
decentral1se 4683a81eeb Merge pull request 'feat: enable indexer for search' (#33) from indexer into master 
Reviewed-on: coop-cloud/gitea#33
 2024-04-01 11:58:54 +00:00
decentral1se ea7e26698a feat: enable indexer for search [ci skip] 
See coop-cloud/organising#589
 2024-03-31 01:31:39 +01:00
3wordchant 3815417c2c chore: publish 2.6.0+1.21.5-rootless release 2024-03-30 16:07:28 -03:00
3wordchant 4421f81a35 Add healthcheck, update metadata 2024-03-30 16:05:32 -03:00
3wordchant a0e8ba4839 chore: publish 2.5.2+1.21.5-rootless release 2024-02-08 14:36:08 -03:00
3wordchant ca9d0b4a6c chore: publish 2.5.1+1.21.4-rootless release 2024-01-17 17:56:28 -03:00