From d8e5e154a8308fe0564a7e65316003e082470e98 Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Sat, 25 Apr 2026 14:20:16 -0700
Subject: [PATCH 1/5] Use giteabot instead of backporter

---
 .github/workflows/giteabot.yml | 39 ++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 .github/workflows/giteabot.yml

diff --git a/.github/workflows/giteabot.yml b/.github/workflows/giteabot.yml
new file mode 100644
index 0000000000..4c9cd03e89
--- /dev/null
+++ b/.github/workflows/giteabot.yml
@@ -0,0 +1,39 @@
+name: Giteabot
+
+on:
+  push:
+    branches:
+      - main
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+      - labeled
+      - unlabeled
+      - closed
+      - review_requested
+      - review_request_removed
+  pull_request_review:
+    types:
+      - submitted
+      - edited
+      - dismissed
+  schedule:
+    - cron: "15 3 * * *"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+  statuses: write
+
+jobs:
+  giteabot:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run Giteabot
+        uses: go-gitea/giteabot@v1
+        with:
+          github_token: ${{ secrets.GITEABOT_TOKEN }}
+          gitea_fork: giteabot/gitea

From e9ecb61195711514cfe08b265fcd7c17a09b01fe Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Sat, 25 Apr 2026 16:15:23 -0700
Subject: [PATCH 2/5] Update .github/workflows/giteabot.yml

Co-authored-by: silverwind <me@silverwind.io>
Signed-off-by: Lunny Xiao <xiaolunwen@gmail.com>
---
 .github/workflows/giteabot.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/giteabot.yml b/.github/workflows/giteabot.yml
index 4c9cd03e89..18877f227d 100644
--- a/.github/workflows/giteabot.yml
+++ b/.github/workflows/giteabot.yml
@@ -1,4 +1,4 @@
-name: Giteabot
+name: giteabot
 
 on:
   push:

From 78d9677a6225fb33f7b972fbee0ed811103beaed Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Sun, 3 May 2026 11:49:07 -0700
Subject: [PATCH 3/5] fix

---
 .github/workflows/giteabot.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/giteabot.yml b/.github/workflows/giteabot.yml
index 4c9cd03e89..3c4456666e 100644
--- a/.github/workflows/giteabot.yml
+++ b/.github/workflows/giteabot.yml
@@ -28,12 +28,19 @@ permissions:
   pull-requests: write
   statuses: write
 
+concurrency:
+  group: ${{ format('{0}-{1}', github.workflow, (github.event_name == 'pull_request_target' || github.event_name == 'pull_request_review') && format('pr-{0}', github.event.pull_request.number) || 'maintenance') }}
+  cancel-in-progress: false
+
 jobs:
   giteabot:
+    name: Run Giteabot (${{ github.event_name }})
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     steps:
       - name: Run Giteabot
-        uses: go-gitea/giteabot@v1
+        # pull_request_target runs with a write token, so keep this pinned and do not check out PR HEAD here.
+        uses: go-gitea/giteabot@761f9199f71c68ce2c76decf3dcf7ee76ca664ed # v1 branch @ 2026-04-25
         with:
           github_token: ${{ secrets.GITEABOT_TOKEN }}
           gitea_fork: giteabot/gitea

From d29d889a9bd76bb1549711386868c6661a8da162 Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Tue, 5 May 2026 20:33:50 -0700
Subject: [PATCH 4/5] Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Lunny Xiao <xiaolunwen@gmail.com>
---
 .github/workflows/giteabot.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/giteabot.yml b/.github/workflows/giteabot.yml
index 315ee81bb2..436ad73007 100644
--- a/.github/workflows/giteabot.yml
+++ b/.github/workflows/giteabot.yml
@@ -34,6 +34,7 @@ concurrency:
 
 jobs:
   giteabot:
+    if: github.repository == 'go-gitea/gitea'
     name: Run Giteabot (${{ github.event_name }})
     runs-on: ubuntu-latest
     timeout-minutes: 30

From f6fe4c11065878c17589f91ef3c9b4739b7d95dc Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Tue, 5 May 2026 20:38:42 -0700
Subject: [PATCH 5/5] update

---
 .github/workflows/giteabot.yml | 3 ---
 docs/community-governance.md   | 2 +-
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/giteabot.yml b/.github/workflows/giteabot.yml
index 436ad73007..aae31ab479 100644
--- a/.github/workflows/giteabot.yml
+++ b/.github/workflows/giteabot.yml
@@ -24,9 +24,6 @@ on:
 
 permissions:
   contents: read
-  issues: write
-  pull-requests: write
-  statuses: write
 
 concurrency:
   group: ${{ format('{0}-{1}', github.workflow, (github.event_name == 'pull_request_target' || github.event_name == 'pull_request_review') && format('pr-{0}', github.event.pull_request.number) || 'maintenance') }}
diff --git a/docs/community-governance.md b/docs/community-governance.md
index dbf2481329..e37e9def64 100644
--- a/docs/community-governance.md
+++ b/docs/community-governance.md
@@ -48,7 +48,7 @@ If a PR has `lgtm/done`, no open discussions, and no merge conflicts, any mainta
 
 <https://github.com/go-gitea/gitea/pulls?q=is%3Apr+label%3Areviewed%2Fwait-merge+sort%3Acreated-asc+is%3Aopen>
 
-Gitea uses its own tool, <https://github.com/GiteaBot/gitea-backporter>, to automate parts of the review process. The backporter:
+Gitea uses its own tool, <https://github.com/go-gitea/gitea/blob/main/.github/workflows/giteabot.yml>, to automate parts of the review process. The backporter:
 
 - Creates a backport PR when needed after the initial PR merges.
 - Removes the PR from the merge queue after it merges.