forgejo/forgejo
forgejo/forgejo
Watch
315
5.6k
Fork
You've already forked forgejo
 990
Code Issues 1.6k Pull requests 149 Projects Releases 119 Packages 1 Activity Actions 4
Labels Milestones

  • Forgejo v17.0.0

    100%
    0 Open
    552 Closed
    Updated 2026-10-12 02:03:04 +02:00
    2026-10-15

    Release notes

    • Security bug fixes
      • PR (backported): forward-port: test disabled hooks during diff patch
    • Security features
      • PR: don't render large compare diff
    • Breaking features
      • PR: always parse duration strictly in config
    • Breaking bug fixes
      • PR: Fixes markdown rendering in repositories for absolute links (those starting with /) in rendered content (comments, issues, markdown, orgmode), they are now resolved relative to the repository root. Content nested in a directory is no longer resolved relative to that directory unless you use ./ instead of /.
    • User Interface features
      • PR: feat(lfs): improve 'not found' message appearance
      • PR: feat(lfs): move submenus to navbar
      • PR: feat(ui): add focus outline to buttons
      • PR: improve the issue search syntax modal, make it work w/o JS
      • PR: improve modal dialogs in combined MDEs
      • PR: show organization avatars in dashboard list
      • PR: make the "Sign out" item work without JS
      • PR: improve space-efficiency of emoji data
      • PR: better keyboard focus indicators for switch component
      • PR: feat(ui): convert user blocking modal to modern dialog
      • PR: feat(admin): Add option to delete user from the user's page
      • PR: ui: show registry setup CLI commands for composer and npm packages
      • PR: add suggestions for issues
      • PR: Display repo/user/org funding options from FUNDING.yml
      • PR: feat(lfs/find): improve ui appearance
      • PR: feat(ui): convert comment context menu to JSless dropdown, fix tippy target
      • PR: feat(funding): display FUNDING.yml parse errors in the web UI
      • PR: feat(ui): polish elements near collaboration dropdown
      • PR: migrate collaborations to js-less dropdown, add placeholder
      • PR: Display error message in the UI if SSH key management is disabled
      • PR: Don't show LFS size if 0 and LFS is disabled
      • PR: add repositories section in the organization settings
      • PR: feat(ui): improve markup attention colors. Note: CSS variables were changed, custom themes may need to be updated accordingly
      • PR: feat(admin): add option to sort packages by size
      • PR: feat(packages): display OCI manifest annotations in container package UI
      • PR: The release assets are now listed before the source code archives on the release page.
      • PR: feat(ui): show release attachments' uploaded time on release edit page
      • PR: OSC 8 hyperlink escape sequences emitted by Forgejo Actions jobs are rendered as clickable links in the job log.
      • PR: feat(issues): Add Copy Markdown Button
    • User Interface bug fixes
      • PR: fix(ui): make repo lfs settings tables more flexible
      • PR: make the UI and API consistent on team visibility rules
      • PR (backported): fix: remove resync_all_hooks task from admin UI
      • PR: preserve filters during pagination in subscriptions list
      • PR: user mentions in comment preview
      • PR: perf: avoid emitting codemirror in index.js
      • PR: Don't auto-focus "Repository name" text field in Settings
      • PR: Improve English strings
      • PR: ensure scrollability of modals in tiny viewports
      • PR: remove role=button of 'New pull request' link
      • PR: capitalize projects board headers to be consistent with other UI headers
      • PR: fix(ui): render titles in runs list properly
      • PR: fix(dropdown): a11y: add tooltip to opener in Actions, + ui: fix rounding, + improve demos
      • PR: fix(ui): blame displays a placeholder if the commit message is empty
      • PR: fix(ui): in the admin config panel do not report a cache taking more than 100 microseconds as slow
    • Localization
      • PR: i18n: translations update from Codeberg Translate
      • PR: i18n: translations update from Codeberg Translate, fix Hungarian
      • PR: i18n: translations update from Codeberg Translate
      • PR: i18n: translations update from Codeberg Translate
    • Features
      • PR: expiration of invitations to teams
      • PR: Repositories can now be migrated from Bitbucket Data Center (Bitbucket Cloud uses a different API and is not covered), including pull requests with their reviews and comments (Bitbucket Data Center has no issues, wiki, milestones or releases). Authentication uses an HTTP access token (personal, project or repository access token), and the Bitbucket instance must have HTTP(S) SCM hosting enabled for the git clone to succeed.
      • PR: Download repository avatar when migrating from Gogs, Gitlab, Gitea, or Forgejo
      • PR (backported): enh: add org members to other teams without invitation
      • PR:  let users decline invitations
      • PR: webhooks for workflow jobs
      • PR: fine-grained event triggers for workflow run webhooks
      • PR: Add USERNAME_PREFIX setting to force a prefix on non-admin usernames
      • PR: add support in Forgejo's update checker for LTS and multiple releases
      • PR: use setting.AppName in ssh auth message
      • PR: Upload and persist TaskStepSummaries and display them in the ActionView
      • PR:  show pending invitation on org home page
      • PR: feat(packages): Allow cleaning based on last download timestamp.
      • PR: feat(api): add action API endpoints to rerun workflows and specific jobs
      • PR: feat(api): add ?q= and ?qi= substring filter to the job-logs endpoint
      • PR: feat(api): add ?format=ndjson NDJSON output to the job-logs endpoint
      • PR: feat(api): add GET /repos/{owner}/{repo}/actions/jobs/{job_id} and reintroduce ?step= on the logs endpoint
      • PR: granular settings for watched repo units
      • PR: add rss/atom feeds for issue and pull request discussions
      • PR: no longer download PR patches during migration. Migration guide is available in Admin docs.
      • PR: add API endpoint to lock/unlock issues/pull requests
      • PR: populate time property for NPM package
      • PR: search authorized key via fingerprint
      • PR: extend status diagnostics of Actions jobs
      • PR: use Go's default values for TLS server
      • PR: make delete repository transcation READ COMMITTED
      • PR: minioClient can use the web proxy
      • PR: Adds "actor" as a protected / forbidden username.
      • PR: feat(actions): add support for using workflow run-name as run title
      • PR: enh(issue-search): treat terms in query strings with no explicit operator as MUST
    • Bug fixes
      • PR: add thead to the lfs files table
      • PR (backported): fix: branches with pipe character can't display commit graph
      • PR (backported): fix: report errors to users when evaluating 'if' from actions
      • PR (backported): fix(auth/basic): return incorrect credential error on non existent email
      • PR (backported): fix: show error message when non-existent user is being added to org
      • PR (backported): fix: reduce memory usage during Actions log & artifacts uploads
      • PR (backported): fix(api): workflow dispatch returns 4xx errors on unknown ref and workflow
      • PR (backported): fix: Slack PR notifications using wrong link format
      • PR (backported): fix: set Content-Length header when serving package files
      • PR (backported): fix: filter issues by enabled repo units when populating dashboard lists
      • PR: serialize run's started, stopped to null when zero
      • PR: use correct link in email notification for issue closed by merge in another repo
      • PR: various accessibility improvements
      • PR: chore(docs): clarify the bootstrap fatal error message displayed when no config is found
    • Security changes without a feature or bug label
      • PR: Users with only read permission on a repository (including unauthenticated callers on public repositories) could retrieve the metadata and the full contents of attachments belonging to draft releases, even though draft releases are hidden from them. The GetReleaseAttachment API endpoint and the web attachment download route (ServeAttachment) did not check whether the release is a draft, while GetRelease and ListReleaseAttachments already do. This is the same class of issue fixed upstream by Gitea in CVE-2026-27660 and GHSA-q9pg-jj6x-j9p6.
    • User Interface changes without a feature or bug label
      • PR (backported): fix: sort user repositories in package linking, make input searchable
    • Other changes without a feature or bug label
      • PR: Add generic "[pfx]KEYS_ACCEPTED = :[|] ..." configuration to configure accepted keys for JWT validation and activate it for [oauth2] as JWT_KEYS_ACCEPTED. Require exp claim by default for JWTs.
      • PR (backported): fix: deleting a user w/ repo-specific access tokens or authorized integrations causes foreign-key violation (#14621)
      • PR: chore: deprecate action run webhook events
      • PR: send notifications on job failure, not run failure
      • PR: add line wrapping to webhook ms teams card
      • PR: chore: remove run recovery notifications
      • PR: chore(branding): default logfile to forgejo.log with a symlink to gitea.log for backward compatibility
      • PR: chore: remove reference to a defunct avatar service
    • Included for completeness but not user-facing (chores, etc.)
      • PR (backported): fix: avoid loading unnecessary data during tag creation
      • PR: chore: Polish actions_test.go
      • PR: feat(ui/diff): condense Git LFS label
      • PR: fix(ui): remove extra attached segment wrap in lfs settings
      • PR: chore(i18n): move ~126 strings to JSON
      • PR (backported): fix: pass merge commit messages to git via stdin
      • PR: don't fail when a user is invited to an organization again
      • PR (backported): fix: don't send like activities for unfederated repos
      • PR (backported): fix: bug in rendering links in other places such as issues/pr/releases that made root links inconsistent and unintended rendering
      • PR (backported): fix(CLI): settings not loaded for create-authorized-integration
      • PR: Update module golang.org/x/net to v0.60.0 [SECURITY] (v17.0/forgejo)
      • PR: Some cleanup/refactoring on crypto key management
      • PR: Update go toolchain directive to v1.26.9 [SECURITY] (v17.0/forgejo)
      • PR (backported): fix(ui): proper use of modern components in org teams ui
      • PR: Update dependency sharp to v0.35.5 [SECURITY] (v17.0/forgejo)
      • PR (backported): fix(ui): stop buttons breaking on hover
      • PR: improve dynamic group mappings for OIDC
      • PR (backported): fix: Actions logs are not transferred to object storage when last UpdateLog has no rows
      • PR (backported): fix: unblock concurrency group job if previous run finished by server-side evaluation
      • PR (backported): fix: prevent in-db branch state rollback from concurrent pushes
      • PR: feat(lfs): server: add documentation_url to response
      • PR (backported): refactor(tests): change all remaining tests.CreateDeclarativeRepo to forgery.CreateRepository
      • PR (backported): fix: accept Arch Linux packages with non-zero epoch
      • PR (backported): fix: avoid unconditional UPDATE query in diff view style preference
      • PR (backported): fix: prevent off by one by excluding size == 1024 in BlobsLessThan1024...
      • PR: nit(lfs): export & use blob size cutoff const
      • PR: Update https://codeberg.org/clouds666/unkai action to v0.2.15 (forgejo)
      • PR (backported): test: fix intermittent test failure in TestAPIAuthWithAuthorizedIntegration
      • PR: Allow pushing to AGit refs
      • PR: Regenerate codeChallenge after ResetOAuth2 in PKCE flow
      • PR: fix(federation): fix hostmatcher patterns
      • PR: chore: improve robustness of TestSearchPointerBlobs
      • PR: tighten JWK parsing and encoding for ECDSA curves
      • PR: Update dependency webpack to v5.111.1 (forgejo)
      • PR: improve performance when using API access tokens with real usernames in HTTP basic
      • PR: Project API Refactorings
      • PR: chore: remove repository from job webhooks payload
      • PR: fix(services/issue/assignee): handle team-only-access
      • PR: use DateUtils.FullTime instead of legacy DateTime "full" in admin_new_user.tmpl
      • PR: modules/setting: Make config file errors obvious, remove harmful clutter
      • PR: Update module golang.org/x/image to v0.46.0 (forgejo) - autoclosed
      • PR: run typescript unit tests
      • PR: Update module golang.org/x/oauth2 to v0.37.0 (forgejo)
      • PR: Update module github.com/vektra/mockery/v3 to v3.8.0 (forgejo)
      • PR: Update module github.com/dustin/go-humanize to v1.1.0 (forgejo)
      • PR: Update dependency eslint-plugin-regexp to v3.3.1 (forgejo)
      • PR: Update module github.com/go-openapi/spec to v1 (forgejo) - autoclosed
      • PR: Update dependency eslint-plugin-toml to v1 (forgejo) - autoclosed
      • PR: Update module github.com/editorconfig-checker/editorconfig-checker/v3/cmd/editorconfig-checker to v4 (forgejo)
      • PR: Update dependency stylelint to v17 (forgejo)
      • PR: Update module github.com/jackc/pgx/v5 to v5.11.0 (forgejo) - autoclosed
      • PR: Update module github.com/yuin/goldmark to v1.8.6 (forgejo) - autoclosed
      • PR: Update x/tools to v0.50.0 (forgejo)
      • PR: Update dependency @vitejs/plugin-vue to v6.0.9 (forgejo)
      • PR: Update module github.com/editorconfig/editorconfig-core-go/v2 to v2.6.5 (forgejo) - autoclosed
      • PR: Update module mvdan.cc/gofumpt to v0.12.0 (forgejo)
      • PR: chore: use Webpack's native CSS parser
      • PR: jwtx/verifier: Fix two own bugs in AddKey()
      • PR: Update Node.js to v24.21.0 (forgejo)
      • PR: Update CodeMirror (forgejo) - autoclosed
      • PR: use the current version instead of "latest" for Forgejo Docs links
      • PR: Update dependency eslint-plugin-sonarjs to v4 (forgejo)
      • PR: improve overflow behaviour of issue attachment name [skip ci]
      • PR: Update module github.com/mattn/go-sqlite3 to v1.14.52 (forgejo)
      • PR: Update dependency postcss-html to v2 (forgejo)
      • PR: consolidate construction of Forgejo docs URLs in UI text
      • PR: chore: migrate to definedConfig for eslint
      • PR: Update dependency eslint-plugin-no-jquery to v6 (forgejo)
      • PR: Update module github.com/klauspost/compress to v1.20.0 (forgejo)
      • PR: Update linters (forgejo)
      • PR: Update dependency swagger-ui-dist to v5.33.0 (forgejo)
      • PR: Update dependency webpack to v5.111.0 (forgejo)
      • PR: Update module code.forgejo.org/forgejo/runner/v13 to v13.2.0 (forgejo) - autoclosed
      • PR: Update vitest monorepo to v5 (forgejo) - autoclosed
      • PR: Update dependency markdownlint-cli to v0.49.1 (forgejo)
      • PR: Update dependency eslint-plugin-vue-scoped-css to v3 (forgejo)
      • PR: Update dependency @stoplight/spectral-cli to v6.16.3 (forgejo)
      • PR: improve invite view page
      • PR: ci: allow to rerun slow parts of of build-release workflow
      • PR: Update module github.com/go-sql-driver/mysql to v1.10.1 (forgejo) - autoclosed
      • PR: nit(lfs): add 'Pointer files' title to page
      • PR: chore(release-notes): Forgejo v16.0.5 [skip ci]
      • PR: chore(release-notes): Forgejo v15.0.9 [skip ci]
      • PR: nit(lfs): fix function names in ctx error messages
      • PR: Update dependency webpack-cli to v7.2.3 (forgejo) - autoclosed
      • PR: Update https://codeberg.org/clouds666/unkai action to v0.2.14 (forgejo) - autoclosed
      • PR: Update https://data.forgejo.org/actions/setup-forgejo action to v3.2.5 (forgejo)
      • PR: 2026-09-17 security patches
      • PR: full plural for funding.yaml_error.n_too_many_providers
      • PR: Update dependency swagger-ui-dist to v5.32.15 (forgejo) - autoclosed
      • PR: Update dependency postcss to v8.5.28 (forgejo) - autoclosed
      • PR: Update dependency vue to v3.5.42 (forgejo)
      • PR: fix(tests): make JS sleep test not flaky
      • PR: do not mark active run as completed
      • PR: Optimize PNG images losslessly: 414 → 283 KiB (−32%)
      • PR: exclude zoekt on OpenBSD to enable compilation
      • PR: chore: remove OpenID from Forgejo's initial setup page
      • PR: chore(routers/web/repo/setting/lfs): improve/fix logMsg func mentions
      • PR:  visual feedback when inviting a user via the members page
      • PR: Update dependency css-loader to v7.1.5 (forgejo)
      • PR: Update dependency mermaid to v11.17.2 (forgejo)
      • PR: Update dependency katex to v0.18.7 (forgejo)
      • PR: Update dependency sharp to v0.35.4 [SECURITY] (forgejo)
      • PR: Revert "Pin https://data.forgejo.org/forgejo/upload-artifact action to v4.3.1 (forgejo) (#14274)" and document the hack
      • PR: chore(release-notes): Forgejo v16.0.4 [skip ci]
      • PR: chore(release-notes): Forgejo v15.0.8 [skip ci]
      • PR: 2026-09-10 security patches
      • PR: initMarkupContent in RepoActionView when new summaries arrive
      • PR: chore: remove notifier method ActionRunNowDone
      • PR: refactor: trigger run notifications explicitly
      • PR: Pin https://data.forgejo.org/forgejo/upload-artifact action to v4.3.1 (forgejo)
      • PR: Update dependency @codemirror/state to v6.7.4 (forgejo)
      • PR: unclosed <div> tag in org members list
      • PR: feat(ui): add colors to pull request list status icons
      • PR: Update renovate Docker tag to v44.65.5 (forgejo)
      • PR: Lock file maintenance (forgejo)
      • PR: Update CodeMirror (forgejo)
      • PR: chore(ci): allow tests using the coverage helper to run for at most 2h
      • PR: fix(dev): update gitignore e2e for new branding
      • PR: <!--descrip

  • Forgejo v18.0.0

    100%
    0 Open
    106 Closed
    Updated 2026-10-12 02:04:35 +02:00
    2027-01-14

    Release notes

    • Breaking security features
      • PR: Move internal communication to UNIX socket. The INTERNAL_TOKEN can now be dropped from the configuration, and the UNIX socket path can be configured using the INTERNAL_LISTENER_PATH options. This change removes the ./forgejo generate secret INTERNAL_TOKEN command and updates the contrib Forgejo systemd unit file. The forgejo.service example systemd file has been updated to set RuntimeDirectory=forgejo, which is a recommended setting for all systemd users.
        See the documentation for more information.
    • User Interface features
      • PR: allow users to preview fonts in the ui
      • PR: make dropdowns dialog-based with various improvements
      • PR: adds inline copy buttons for new repo instructions
      • PR: add reload protection to file dropzone and code review comments
      • PR: accessible aria-labels & working commit description toggles w/o JS
      • PR: disable text wrapping in code blocks
      • PR: auth: start oauth2 login if its the only available login
    • User Interface bug fixes
      • PR: Fix icons in milestone and project metadata not being consistent with how icons are used elsewhere on Forgejo
    • Localization
      • PR: i18n: translations update from Codeberg Translate
    • Features
      • PR: feat(lfs): add lfs file support to /render endpoint
      • PR: instance-wide Service Message via modal dialog
      • PR: team membership provenance tracking
      • PR: add headings to common repository webpages
      • PR: enh: add org members to other teams without invitation
      • PR: add code suggestion
      • PR: feat(feed): parse and set limit parameter for release feed request
      • PR: feat(cmd): allow password to be read from stdin
    • User Interface changes without a feature or bug label
      • PR: sort user repositories in package linking, make input searchable
    • Other changes without a feature or bug label
      • PR: use DB index when accessing API GET /{owner}/{repo}/actions/runs?head_sha=...
      • PR: deleting a user w/ repo-specific access tokens or authorized integrations causes foreign-key violation
    • Included for completeness but not user-facing (chores, etc.)
      • PR: resolve access to Forgejo's internal unix socket the same for Forgejo server and SSH sessions
      • PR: bug in rendering links in other places such as issues/pr/releases that made root links inconsistent and unintended rendering
      • PR: avoid loading unnecessary data during tag creation
      • PR: Update module github.com/go-co-op/gocron to v2 (forgejo)
      • PR: fix(i18n): fix faulty remap of mde tooltips
      • PR: Update dependency wrap-ansi to v10.0.2 (forgejo)
      • PR: pass merge commit messages to git via stdin
      • PR: minor issues found with recent Makefile changes
      • PR: don't send like activities for unfederated repos
      • PR: Typo in publish-release workflow
      • PR: Update module golang.org/x/net to v0.61.0 (forgejo)
      • PR: dev(Makefile): remove unnecessary test compilation
      • PR: Update dependency vue to v3.5.43 (forgejo)
      • PR: fix(lfs): streamline pointer validations, lfs (api) errors
      • PR: Update https://codeberg.org/clouds666/unkai action to v0.2.18 (forgejo)
      • PR: fix(CLI): settings not loaded for create-authorized-integration
      • PR: Update golang packages to v1.27 (forgejo) - autoclosed
      • PR: Update https://codeberg.org/clouds666/unkai action to v0.2.17 (forgejo) - autoclosed
      • PR: add clone error enricher to make errors less technical
      • PR: accept Arch Linux packages with non-zero epoch
      • PR: refactor: migrate fetch and htmx modules to Typescript
      • PR: Update dependency postcss-nesting to v14.0.3 (forgejo)
      • PR: Update module golang.org/x/net to v0.60.0 [SECURITY] (forgejo)
      • PR: refactor: migrate relative-time component to Typescript
      • PR: testing: Add volatileConfigProvider to mock config saving
      • PR: Update go toolchain directive to v1.27.2 (forgejo)
      • PR: Update dependency katex to v0.19.0 (forgejo)
      • PR: refactor: migrate color module to Typescript
      • PR: refactor: migrate url modules to Typescript
      • PR: fix(ui): proper use of modern components in org teams ui
      • PR: Update postcss (forgejo)
      • PR: Update dependency sharp to v0.35.5 [SECURITY] (forgejo)
      • PR: fix(ui): stop buttons breaking on hover
      • PR: Actions logs are not transferred to object storage when last UpdateLog has no rows
      • PR: Update renovate Docker tag to v44.145.1 (forgejo)
      • PR: Support optional/configurable IAMEndpoint for Minio Client (#13660)
      • PR: chore: keep locale instructions out of readme, only link to relevant resources
      • PR: refactor: migrate svg component to Typescript
      • PR: uses lang attribute to set the right language for tippy tooltip
      • PR: refactor: migrate JS configs to Typescript
      • PR: refactor: migrate utils component to Typescript
      • PR: refactor: migrate emoji component to Typescript
      • PR: chore: fix forgejo branch
      • PR: prevent in-db branch state rollback from concurrent pushes
      • PR: Use the minus (−) sign instead of hyphen (-) for better alignment with the plus (+) sign
      • PR: chore: fix release notes for PR 14148
      • PR: Update dependency katex to v0.18.10 (forgejo)
      • PR: Update dependency @lezer/highlight to v1.2.5 (forgejo)
      • PR: unblock concurrency group job if previous run finished by server-side evaluation
      • PR: output error message when internal socket can't be created
      • PR: Update dependency @codemirror/lang-liquid to v6.3.3 (forgejo)
      • PR: enh: enable maintainer edits by default on new repositories
      • PR: fix(tests): fix flaky TestConvertInvitedUserWithExpiry
      • PR: fix descriptions generated from struct comments
      • PR: feat(api): endpoints to manipulate team invites
      • PR: share the head branch check + improve suggestion error
      • PR: Update dependency htmx.org to v2.0.11 (forgejo)
      • PR: less flaky markdown-editor e2e test
      • PR: refactor(tests): change all remaining tests.CreateDeclarativeRepo to forgery.CreateRepository
      • PR: avoid unconditional UPDATE query in diff view style preference
      • PR: re-use git cat-file when possible
      • PR: Update renovate Docker tag to v44.117.2 (forgejo)
      • PR: nit(forgery): add http server hint to comment
      • PR: nit(lfs): add comment for lfsAuthenticateVerb
      • PR: chore: update typescript to v6
      • PR: Update dependency @lezer/highlight to v1.2.4 (forgejo)
      • PR: Fix LFS raw file test, add additional cases
      • PR: prevent off by one by excluding size == 1024 in BlobsLessThan1024...
      • PR: improve error message in case of token not found
      • PR: chore: setting/security better testing, refactoring, add onlySymmetric() and onlyHS256() key config constraints
      • PR: test: fix intermittent test failure in TestAPIAuthWithAuthorizedIntegration
      • PR: Update CodeMirror (forgejo) - autoclosed
      • PR: fix(ui): make font size of repo watchers count consistent with stars and forks
      • PR: Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.14.0 (forgejo)
      • PR: chore(release): v17 is cut - run renovate on v17 branch
    • Already announced in the release notes of an older stable release
      • PR: report errors to users when evaluating 'if' from actions
      • PR: branches with pipe character can't display commit graph
      • PR: remove resync_all_hooks task from admin UI
      • PR: fix(auth/basic): return incorrect credential error on non existent email
      • PR: show error message when non-existent user is being added to org
      • PR: reduce memory usage during Actions log & artifacts uploads
      • PR: set Content-Length header when serving package files
      • PR: Slack PR notifications using wrong link format
      • PR: fix(api): workflow dispatch returns 4xx errors on unknown ref and workflow
      • PR: filter issues by enabled repo units when populating dashboard lists

  • Forgejo v15.0.10

    100%
    0 Open
    19 Closed
    Updated 2026-10-12 02:05:59 +02:00
    No due date

    Release notes

    • Bug fixes
      • PR (backported): fix: reduce memory usage during Actions log & artifacts uploads
      • PR (backported): PATCH /orgs/{org} responds with 200 but discards visibility public
      • PR (backported): PATCH /orgs/{org} would reset all unset attributes to their default values
      • PR (backported): fix(api): workflow dispatch returns 4xx errors on unknown ref and workflow
      • PR (backported): fix: adjust checks for Arch Linux package names and versions corresponding to specs
      • PR (backported): fix: only disable scheduled workflows if persistent parsing errors occur
      • PR (backported): fix: automerge PRs don't merge when originating from other user's fork repos
    • Other changes without a feature or bug label
      • PR (backported): fix: deleting a user w/ repo-specific access tokens causes foreign-key violation
    • Included for completeness but not user-facing (chores, etc.)
      • PR (backported): fix: avoid loading unnecessary data during tag creation
      • PR: Update module golang.org/x/net to v0.60.0 [SECURITY] (v15.0/forgejo)
      • PR: Update go toolchain directive to v1.26.9 [SECURITY] (v15.0/forgejo)
      • PR: Update dependency katex to v0.18.2 [SECURITY] (v15.0/forgejo)
      • PR: Update dependency sharp to v0.35.5 [SECURITY] (v15.0/forgejo)
      • PR (backported): fix: Actions logs are not transferred to object storage when last UpdateLog has no rows
      • PR (backported): fix: prevent in-db branch state rollback from concurrent pushes
      • PR: refactor(tests): change all remaining tests.CreateDeclarativeRepo to forgery.CreateRepository
      • PR (backported): fix: accept Arch Linux packages with non-zero epoch
      • PR (backported): fix(services/issue/assignee): handle team-only-access
      • PR: Update dependency sharp to v0.35.4 [SECURITY] (v15.0/forgejo)
      • PR (backported): ci: allow to rerun slow parts of of build-release workflow

  • Forgejo v16.0.6

    100%
    0 Open
    22 Closed
    Updated 2026-10-12 02:07:59 +02:00
    No due date

    Release notes

    • User Interface bug fixes
      • PR (backported): fix: remove resync_all_hooks task from admin UI
    • Localization
      • PR: i18n: backport of translation updates from Codeberg Translate
    • Bug fixes
      • PR (backported): fix(auth/basic): return incorrect credential error on non existent email
      • PR (backported): fix: reduce memory usage during Actions log & artifacts uploads
      • PR (backported): fix(api): workflow dispatch returns 4xx errors on unknown ref and workflow
      • PR (backported): fix: only disable scheduled workflows if persistent parsing errors occur
      • PR (backported): fix: automerge PRs don't merge when originating from other user's fork repos
      • PR (backported): fix: permit basic auth w/ authorized integration to access PyPI packages
    • Other changes without a feature or bug label
      • PR (backported): fix: deleting a user w/ repo-specific access tokens or authorized integrations causes foreign-key violation
    • Included for completeness but not user-facing (chores, etc.)
      • PR (backported): fix: avoid loading unnecessary data during tag creation
      • PR: Update dependency katex to v0.18.2 [SECURITY] (v16.0/forgejo)
      • PR: Update module golang.org/x/net to v0.60.0 [SECURITY] (v16.0/forgejo)
      • PR: Update go toolchain directive to v1.26.9 [SECURITY] (v16.0/forgejo)
      • PR: Update dependency sharp to v0.35.5 [SECURITY] (v16.0/forgejo)
      • PR (backported): fix: don't fail when a user is invited to an organization again (#14352)
      • PR (backported): fix: prevent in-db branch state rollback from concurrent pushes
      • PR (backported): fix: accept Arch Linux packages with non-zero epoch
      • PR: refactor(tests): change all remaining tests.CreateDeclarativeRepo to forgery.CreateRepository
      • PR (backported): fix: improve performance when using API access tokens with real usernames in HTTP basic
      • PR (backported): fix: Regenerate codeChallenge after ResetOAuth2 in PKCE flow
      • PR (backported): fix(services/issue/assignee): handle team-only-access
      • PR (backported): ci: allow to rerun slow parts of of build-release workflow