Ross Golder 667ddab36a fix: RecalculateUserAccess sets incorrect minMode for public repos ...

Public repositories were granted AccessModeWrite as the minimum access
mode, which incorrectly elevated access for all users on public repos.
The minimum should be AccessModeNone, with access granted explicitly
through collaborator and team memberships.

2026-05-17 10:39:07 +07:00

..

actions

fix(actions): deadlock between PrepareRunAndInsert and UpdateTaskByState (#37692)

2026-05-15 08:39:18 +00:00

activities

Make GetPossibleUserByID can handle deleted user (#37430)

2026-04-26 16:57:53 +00:00

admin

feat(api): encrypt AWS creds (#37679)

2026-05-14 15:46:20 +03:00

asymkey

fix: treat email addresses case-insensitively (#37600)

2026-05-08 15:14:33 +00:00

auth

fix(oauth): strengthen PKCE validation and refresh token replay protection (#37706)

2026-05-16 15:17:00 +00:00

avatars

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

db

perf: replace goheader linter with custom check (#37599)

2026-05-08 23:39:35 +02:00

dbfs

Fix dbfs error handling (#36844)

2026-03-07 00:28:46 +08:00

fixtures

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

git

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

issues

refactor: use modernc sqlite driver as default (#37562)

2026-05-06 18:57:59 +00:00

migrations

feat: Add bypass allowlist for branch protection (#36514)

2026-05-16 14:23:42 +00:00

organization

refactor(org): simplify owner-team org repo creation logic (#37727)

2026-05-16 14:26:33 +08:00

packages

fix(packages): use file names for generic web downloads (#37514)

2026-05-03 15:19:21 +08:00

perm

fix: RecalculateUserAccess sets incorrect minMode for public repos

2026-05-17 10:39:07 +07:00

project

Allow multiple projects per issue and pull requests (#36784)

2026-04-30 22:38:05 +08:00

pull

Make GetPossibleUserByID can handle deleted user (#37430)

2026-04-26 16:57:53 +00:00

renderhelper

Rename CurrentRefPath to CurrentRefSubURL (#37453)

2026-04-28 00:34:17 +00:00

repo

feat: Add default PR branch update style setting (#37410)

2026-05-16 10:06:40 +00:00

secret

Don't block site admin's operation if SECRET_KEY is lost (#35721)

2025-10-22 12:35:56 +08:00

shared/types

…

system

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

unit

…

unittest

chore(deps): bump tool deps and pin, update golangci-lint (#37574)

2026-05-08 04:49:34 +00:00

user

fix(packages): Add label for private and internal package and fix composor package source permission check (#37610)

2026-05-11 05:49:46 +00:00

webhook

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

main_test.go

…

repo_test.go

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

repo.go

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00