3 people 9d1d5ceddb fix(actions): bound requested artifact retention (#39894) (#39946) ...

`actions/upload-artifact` v4 and later send an absolute `expires_at`
computed with the runner's clock, which Gitea stored unchecked. A runner
clock running behind made artifacts expire at the next cleanup, and
workflows could keep artifacts longer than `ARTIFACT_RETENTION_DAYS`.

- Requested expiries are bounded by Gitea's clock, at least 1 day and at
most `ARTIFACT_RETENTION_DAYS` when it is not `0`. Longer
`retention-days` requests now get the instance limit.
- `github.retention_days` now carries `ARTIFACT_RETENTION_DAYS`, so
upload actions cap `retention-days` themselves and log a warning, like
on GitHub.

Co-authored-by: bircni <bircni@icloud.com>

2026-10-22 23:21:37 +00:00

..

actions

fix(actions): bound requested artifact retention (#39894) (#39946)

2026-10-22 23:21:37 +00:00

agit

fix(pull): refresh commits behind when an AGit pull request is updated (#39613) (#39625)

2026-10-06 11:27:16 +00:00

asymkey

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

attachment

chore: misc go 1.27 tweaks (#39069)

2026-08-24 18:26:10 +00:00

audit

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

auth

fix(auth): prevent competing remember-me token rotations (#39686) (#39688)

2026-10-12 09:48:37 +00:00

automerge

fix: trace git command correctly (#39520) (#39524)

2026-10-01 10:19:33 +00:00

automergequeue

refactor(automerge): fix error handling, populate recent automerge tasks on restart (#39001)

2026-08-28 14:17:01 -07:00

context

fix: correct "go get" URL ssh scheme, fix form binding (#39674, #39528) (#39676)

2026-10-08 12:30:59 +00:00

contexttest

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

convert

fix(actions): restore pushes to protected branches (#39564) (#39567)

2026-10-03 18:12:17 +00:00

cron

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

doctor

fix(lfs): validate OID before building filesystem object path (#39762) (#39766)

2026-10-13 17:19:59 -07:00

externalaccount

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

feed

fix(feed): use meaningful lines as comment excerpt (#39276)

2026-09-25 03:08:15 +00:00

forms

fix: correct "go get" URL ssh scheme, fix form binding (#39674, #39528) (#39676)

2026-10-08 12:30:59 +00:00

git

enhance: inherit team access for all units (#38938)

2026-08-17 20:30:24 +00:00

gitdiff

fix: off-by-one errors in code comment patches (#39887) (#39904)

2026-10-20 20:37:19 -07:00

gitproxy

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

indexer

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

issue

fix: add missing checks to several handlers and models (#39839) (#39847)

2026-10-18 19:50:36 +02:00

lfs

chore: fix system users (#39299)

2026-09-12 16:26:20 +00:00

mailer

enhance: allow custom watches to bypass on-mention email restriction (#39652) (#39837)

2026-10-18 12:45:52 +00:00

markup

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

migrations

fix(migrations): use cursor pagination for GitHub issue migration too (#39888) (#39941)

2026-10-22 13:33:39 +00:00

mirror

fix(git)!: use internal proxy for all git operations (#39426)

2026-09-29 14:43:36 +02:00

notifications

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00

notify

fix: prevent Gitea from crashing by notification panic (#39835)

2026-10-18 11:11:15 +02:00

oauth2_provider

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

org

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

packages

fix: package registry keypair creation race (#39319)

2026-09-18 18:30:27 +00:00

projects

feat(api): add project APIs (#38691)

2026-08-08 13:53:28 +00:00

pubsub

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

pull

fix: off-by-one errors in code comment patches (#39887) (#39904)

2026-10-20 20:37:19 -07:00

release

fix: correct label deletion and release attachment load (#39743) (#39752)

2026-10-13 00:53:02 +00:00

repository

fix(actions): fix schedule cleanup and default branch switch (#39740) (#39786)

2026-10-14 22:47:59 +00:00

secrets

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00

task

fix: classify git failures on stderr, restrict migration failure detail (#39010)

2026-09-15 10:59:34 +02:00

uinotification

feat: add watch options (#37571)

2026-08-08 07:35:13 +00:00

user

fix(user): allow unblocking users promoted to admin (#39192)

2026-09-23 16:54:12 +00:00

versioned_migration

refactor: prepare to decouple the "model migration" package and "models" package (#38533)

2026-07-20 03:42:02 +00:00

webhook

enhance(webhook): mention release assets in notifications (#39631) (#39912)

2026-10-21 07:05:55 +00:00

websocket

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00

webtheme

chore: enable forcetypeassert linter, fix issues (#38804)

2026-08-09 10:25:06 +00:00

wiki

feat: Add audit logging (#38189)

2026-09-12 08:15:23 +00:00