TheAfriForge/gitforge
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2026-07-18 23:47:50 +00:00
Code Issues Projects Releases Packages Wiki Activity
gitforge/release-notes-published/11.0.15.md
forgejo-release-manager f18694d23d chore(release-notes): Forgejo v11.0.15 (#13032) 
https://codeberg.org/forgejo/forgejo/milestone/86943
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13032
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
2026-06-10 07:43:34 +02:00

3.1 KiB
Raw Blame History

Release notes

  • Security bug fixes
    • PR: - fix: LFS locks must belong to the intended repo, port from Gitea
    • PR: - fix: prevent unauthorized access to draft releases via API
    • PR: - fix: prevent writes to OpenID visibility which may affect other users
    • PR: - fix: prevent viewing private PRs that are linked to public issues on public projects
  • Included for completeness but not user-facing (chores, etc.)
    • PR: chore(deps): Update playwright to v1.60.0
    • PR: Update go toolchain directive to v1.25.11 [SECURITY] (v11.0/forgejo)
    • PR: Update module golang.org/x/image to v0.41.0 [SECURITY] (v11.0/forgejo)
    • PR: Update module golang.org/x/net to v0.55.0 [SECURITY] (v11.0/forgejo)
    • PR: Update module golang.org/x/crypto to v0.52.0 [SECURITY] (v11.0/forgejo)
    • PR (backported): fix: make the fork API respect CanCreateOrgRepo policy