Skip to content

gitea

Git Forges

Self‑hosted all‑in‑one Git code management platform with issue tracking, CI/CD (GitHub Actions), wiki and package registry

Go Latest v1.27.0 · 13d ago Security brief →

Features

  • Git hosting for repositories
  • Issue tracking and project kanban boards
  • Wiki pages for documentation
  • CI/CD integration via GitHub Actions
  • Package registry support

Recent releases

View all 8 releases →
Upgrade now
v1.27.0 Breaking risk
Auth RBAC RCE / SSRF +2 more

Reusable workflows + CSP + OTP + API/UI upgrades

Config change
v1.26.4 Security relevant
Auth

OAuth2 user activation fix

Review required
v1.26.3 Breaking risk
Auth Breaking upgrade

Actions, hostmatcher, LFS, security fixes, API

Review required
v1.26.2 Mixed
Auth RBAC Dependencies

Security fixes + bugfixes

v1.26.1 Bug fix

Minor fixes and improvements.

Full changelog
  • BUGFIXES * Add event.schedule context for schedule actions task (#37320) (#37348) * Fix an issue where changing an organization's visibility caused problems when users had forked its repositories. (#37324) (#37344) * Use modern "git update-index --cacheinfo" syntax to support more file names (#37338) (#37343) * Fix URL related escaping for oauth2 (#37334) (#37340) * When the requested arch rpm is missing fall back to noarch (#37236) (#37339) * Fix actions concurrency groups cross-branch leak (#37311) (#37331) * Fix bug when accessing user badges (#37321) (#37329) * Fix AppFullLink (#37325) (#37328) * Fix container auth for public instance (#37290) (#37294) * Enhance GetActionWorkflow to support fallback references (#37189) (#37283) * Fix vite manifest update masking build errors (#37279) (#37310) * Fix Mermaid diagrams failing when node labels contain line breaks (#37296) (#37299) * Use TriggerEvent instead of Event in workflow runs API response for scheduled runs (#37288) #37360 * Add URL to Learn more about blocking a user. (#37355) #37367 * Fix button layout shift when collapsing file tree in editor (#37363) #37375 * Fix org team assignee/reviewer lookups for team member permissions (#37365) #37391 * Fix repo init README EOL (#37388) #37399 * Fix: dump with default zip type produces uncompressed zip (#37401)#37402

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
56,906
Forks
6,924
Languages
Go Handlebars TypeScript

Install & Platforms

Install via
docker binary
Platforms
linux macos windows arm64

Community & Support

Beta — feedback welcome: [email protected]