TheAfriForge/gitforge
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2026-07-18 07:28:47 +00:00
Code Issues Projects Releases Packages Wiki Activity
gitforge/release-notes-published/15.0.4.md
forgejo-release-manager 5cbb4663e0 chore(release-notes): Forgejo v15.0.4 (#13377) 
https://codeberg.org/forgejo/forgejo/milestone/94946
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13377
Reviewed-by: Beowulf <beowulf@beocode.eu>
2026-07-09 11:52:34 +02:00

8.7 KiB
Raw Blame History

Release notes

  • Security bug fixes
    • PR: fix: don't cache write permission on first pushed git reference
    • PR (backported): fix: ensure migrations allow/deny host lists are applied to onedev, pagure, and codebase migrators
    • PR: Improved compliance with the config settings [migrations].ALLOWED_DOMAINS, [migrations].BLOCKED_DOMAINS, and [migrations].ALLOW_LOCALNETWORKS, which control the remotes that Forgejo can access for git & LFS migration and mirroring operations, fixing time-of-check vs. time-of-use issue and missing checks in LFS.
  • Localization
  • Bug fixes
    • PR (backported): fix: Update swift package registry to use the metadata schema from the official Swift docs (#12200)
    • PR (backported): fix: GET /repos/{owner}/{repo}/issues/comments/{id} does not fail if the poster is a deleted user
    • PR (backported): fix: do not try to remove task logs that don't exist (#13040)
    • PR (backported): fix: add support the http HEAD request method for generic packages
  • Other changes without a feature or bug label
    • PR (backported): chore: remove EXIF stripping capability due to usage of AGPL licensed exif-terminator library
    • PR (backported): correcting referrer policy in HTML <meta> tag
  • Included for completeness but not user-facing (chores, etc.)
    • PR: Update go toolchain directive to v1.26.5 (v15.0/forgejo)
    • PR (backported): chore(refactor): clarify REST API permissions tests
    • PR (backported): fix: intermittent test failure in process cancellation
    • PR (backported): fix: restore Forgejo's capability to build on non-Linux UNIX platforms
    • PR (backported): fix: terminate git (& other) subcommands gracefully on context timeout/cancellation
    • PR (backported): fix: ensure runners either belong to owner or repo when updated (#13262)
    • PR (backported): chore(refactor): remove GetX redundant accessors and use X in services/context/api.go
    • PR (backported): chore(refactor): add getter/setter to APIContext data members
    • PR: Update module golang.org/x/image to v0.43.0 [SECURITY] (v15.0/forgejo)
    • PR (backported): chore(refactor): s/Base.Data["requiredScopeCategories"]/APIContext.RequiredScopeCategories/
    • PR (backported): feat: improve REST API permissions functions test coverage
    • PR (backported): ci: don't use redict during Forgejo testing
    • PR (backported): fix: introduce lint-single-response to prevent control flow continuing past a ctx.Error(...)-style method