gitforge/routers/private
Andreas Ahlenstorf 85d38e354d fix: ensure runners either belong to owner or repo when updated (#13262)
A runner can either belong to an owner (user, organization) or a repository, not both. While `CreateRunner()` enforces that, `UpdateRunner()` does not, which leads to bugs. With this change, `UpdateRunner()` rejects runners that have _both_ fields set to prevent unexpected ownership changes.

Resolves https://codeberg.org/forgejo/forgejo/issues/12106 and makes https://codeberg.org/forgejo/forgejo/pulls/12117 obsolete.

### Tests for Go changes

- I added test coverage for Go changes...
  - [x] in their respective `*_test.go` for unit tests.
  - [x] in the `tests/integration` directory if it involves interactions with a live Forgejo server.
- I ran...
  - [x] `make pr-go` before pushing

### Documentation

- [ ] I created a pull request [to the documentation](https://codeberg.org/forgejo/docs) to explain to Forgejo users how to use this change.
- [x] I did not document these changes and I do not expect someone else to do it.

### Release notes

- [x] This change will be noticed by a Forgejo user or admin (feature, bug fix, performance, etc.). I suggest to include a release note for this change.
- [ ] This change is not visible to a Forgejo user or admin (refactor, dependency upgrade, etc.). I think there is no need to add a release note for this change.

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13262
Reviewed-by: Mathieu Fenniak <mfenniak@noreply.codeberg.org>
2026-07-01 03:49:07 +02:00
..
tests/repos
actions.go fix: ensure runners either belong to owner or repo when updated (#13262) 2026-07-01 03:49:07 +02:00
actions_test.go fix: ensure runners either belong to owner or repo when updated (#13262) 2026-07-01 03:49:07 +02:00
default_branch.go chore: remove branding from context imports (#9628) 2025-10-11 01:52:51 +02:00
hook_post_receive.go fix: introduce lint-single-response to prevent control flow continuing past a ctx.Error(...)-style method (#13087) 2026-06-14 17:06:03 +02:00
hook_post_receive_test.go
hook_pre_receive.go feat: detailed permission denied message on push (#10941) 2026-01-29 01:48:46 +01:00
hook_proc_receive.go chore: remove branding from context imports (#9628) 2025-10-11 01:52:51 +02:00
hook_verification.go
hook_verification_test.go
internal.go Update module github.com/go-chi/chi/v5 to v5.3.0 (forgejo) (#12697) 2026-06-29 23:35:12 +02:00
internal_repo.go chore: remove branding from context imports (#9628) 2025-10-11 01:52:51 +02:00
key.go
mail.go
main_test.go
manager.go fix: introduce lint-single-response to prevent control flow continuing past a ctx.Error(...)-style method (#13087) 2026-06-14 17:06:03 +02:00
manager_process.go
manager_unix.go
restore_repo.go chore: ensure consistent import aliasing for services and models (#10253) 2025-11-30 17:00:57 +01:00
serv.go fix: introduce lint-single-response to prevent control flow continuing past a ctx.Error(...)-style method (#13087) 2026-06-14 17:06:03 +02:00
ssh_log.go