mirror of https://github.com/go-gitea/gitea.git synced 2026-06-21 21:12:26 +02:00

History

Backport #38108

- Enforce repository token scope on RSS/Atom feed endpoints so a PAT
without repo scope can no longer read private repo commit data.
- Block HTTP redirects during repository migration clones to prevent
SSRF reaching internal addresses via an attacker-controlled redirect.
- Redact the notification subject after repo access is revoked so
private issue/PR metadata is no longer leaked through the notification
API.

---------

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>

2026-06-17 17:21:37 +02:00

attribute

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

foreachref

Correct spelling (#36783 )

2026-02-28 11:23:20 -08:00

gitcmd

fix: git cmd (#38084 ) (#38087 )

2026-06-12 21:28:13 +08:00

internal

…

languagestats

Fix linguist-detectable attribute being ignored for configuration files (#36640 )

2026-02-16 03:32:46 +00:00

pipeline

fix: Invalid UTF-8 commit messages in JSON API responses (#37542 ) (#37585 )

2026-05-07 16:22:09 +00:00

tests/repos

…

url

Upgrade to go 1.25.3 (#35656 )

2025-10-15 10:09:32 +02:00

blob_gogit.go

Fix panic when get editor config file (#36241 )

2025-12-25 19:26:23 -08:00

blob_nogogit.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

blob_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

blob.go

…

catfile_batch_command.go

fix: merge autodetect can't close other PRs but only the last one when multiple PRs are pushed at once (#37512 ) (#37516 )

2026-05-03 01:15:56 -07:00

catfile_batch_legacy.go

fix: merge autodetect can't close other PRs but only the last one when multiple PRs are pushed at once (#37512 ) (#37516 )

2026-05-03 01:15:56 -07:00

catfile_batch_reader.go

Fix flaky TestCatFileBatch/QueryTerminated test (#37159 ) (#37178 )

2026-04-11 13:14:35 +02:00

catfile_batch_test.go

Fix flaky TestCatFileBatch/QueryTerminated test (#37159 ) (#37178 )

2026-04-11 13:14:35 +02:00

catfile_batch.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

cmdverb.go

…

commit_convert_gogit.go

…

commit_info_gogit.go

Fix repo file list partial reloading for submodules (#35183 )

2025-07-31 09:34:51 +08:00

commit_info_nogogit.go

Fix repo file list partial reloading for submodules (#35183 )

2025-07-31 09:34:51 +08:00

commit_info_test.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

commit_info.go

Fix repo file list partial reloading for submodules (#35183 )

2025-07-31 09:34:51 +08:00

commit_reader.go

…

commit_sha256_test.go

Move commit related functions to gitrepo package (#35600 )

2025-12-05 00:20:23 +00:00

commit_submodule_file_test.go

…

commit_submodule_file.go

…

commit_submodule.go

Enable nilnil linter for new code (#36591 )

2026-02-16 09:57:18 +00:00

commit_test.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542 ) (#37585 )

2026-05-07 16:22:09 +00:00

commit.go

fix: Invalid UTF-8 commit messages in JSON API responses (#37542 ) (#37585 )

2026-05-07 16:22:09 +00:00

config_submodule_test.go

…

config_submodule.go

…

config_test.go

Move git command to git/gitcmd (#35483 )

2025-09-15 23:33:12 -07:00

config.go

Move some functions to gitrepo package (#35543 )

2025-10-07 17:06:51 +08:00

diff_test.go

…

diff.go

Refactor highlight and diff (#36599 )

2026-02-13 00:15:46 +00:00

error.go

Refactor git command context & pipeline (#36406 )

2026-01-21 01:35:14 +00:00

git_test.go

Fix various version parsing problems (#36553 )

2026-02-08 20:25:30 +00:00

git.go

Clean up Makefile, tests and legacy code (#36638 )

2026-02-19 01:23:32 +00:00

gpg.go

Remove undocumented support of signing key in the repository git configuration file (#36143 )

2025-12-14 17:34:45 +00:00

grep_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

grep.go

Add a git grep search timeout (#36809 )

2026-03-04 12:11:42 -08:00

hook.go

Refactor legacy code (#35708 )

2025-10-20 11:43:08 -07:00

key.go

Remove undocumented support of signing key in the repository git configuration file (#36143 )

2025-12-14 17:34:45 +00:00

last_commit_cache_gogit.go

…

last_commit_cache_nogogit.go

…

last_commit_cache.go

Enable nilnil linter for new code (#36591 )

2026-02-16 09:57:18 +00:00

log_name_status.go

Enable nilnil linter for new code (#36591 )

2026-02-16 09:57:18 +00:00

notes_gogit.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

notes_nogogit.go

…

notes_test.go

Update dependencies (#35733 )

2025-10-23 08:35:48 +00:00

notes.go

…

object_format.go

…

object_id_gogit.go

…

object_id_test.go

Fix the wrong push commits in the pull request when force push (#36914 )

2026-04-04 16:27:57 -07:00

object_id.go

…

parse_treeentry_test.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

parse_treeentry.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

parse.go

Improve diff file headers (#36215 )

2026-01-12 20:29:35 +08:00

README.md

…

ref_test.go

…

ref.go

fix: parse HEAD ref (#38119 )

2026-06-14 19:52:44 +00:00

remote.go

Refactor git command context & pipeline (#36406 )

2026-01-21 01:35:14 +00:00

repo_base_gogit.go

Remove undocumented support of signing key in the repository git configuration file (#36143 )

2025-12-14 17:34:45 +00:00

repo_base_nogogit_test.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

repo_base_nogogit.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

repo_blob_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

repo_blob.go

Fix panic when get editor config file (#36241 )

2025-12-25 19:26:23 -08:00

repo_branch_gogit.go

…

repo_branch_nogogit.go

Use merge tree to detect conflicts when possible (#36400 )

2026-01-27 11:57:20 -08:00

repo_branch_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

repo_branch.go

Move some functions to gitrepo package (#35543 )

2025-10-07 17:06:51 +08:00

repo_commit_gogit.go

Refactor git command stdio pipe (#36393 )

2026-01-17 18:11:46 +00:00

repo_commit_nogogit.go

Refactor git command stdio pipe (#36393 )

2026-01-17 18:11:46 +00:00

repo_commit_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

repo_commit.go

Fix the wrong push commits in the pull request when force push (#36914 )

2026-04-04 16:27:57 -07:00

repo_commitgraph_gogit.go

…

repo_commitgraph.go

Move some functions to gitrepo package (#35543 )

2025-10-07 17:06:51 +08:00

repo_compare_test.go

Move some functions to gitrepo package (#35543 )

2025-10-07 17:06:51 +08:00

repo_compare.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo_hook.go

…

repo_index.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo_object.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo_ref_gogit.go

…

repo_ref_nogogit.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo_ref_test.go

fix: parse HEAD ref (#38119 )

2026-06-14 19:52:44 +00:00

repo_ref.go

fix: parse HEAD ref (#38119 )

2026-06-14 19:52:44 +00:00

repo_stats_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

repo_stats.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo_tag_gogit.go

Remove the duplicated function GetTags (#35375 )

2025-08-29 01:11:42 +00:00

repo_tag_nogogit.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

repo_tag_test.go

Remove the duplicated function GetTags (#35375 )

2025-08-29 01:11:42 +00:00

repo_tag.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo_test.go

fix: Various sec fixes 2 (#38108 )

2026-06-17 17:21:37 +02:00

repo_tree_gogit.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

repo_tree_nogogit.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

repo_tree.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

repo.go

fix: Various sec fixes 2 (#38108 )

2026-06-17 17:21:37 +02:00

signature_gogit.go

…

signature_nogogit.go

…

signature_test.go

…

signature.go

…

submodule_test.go

Move some functions to gitrepo package (#35543 )

2025-10-07 17:06:51 +08:00

submodule.go

Refactor git command stdio pipe (#36422 )

2026-01-22 06:04:26 +00:00

tag_test.go

…

tag.go

…

tree_blob_gogit.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

tree_blob_nogogit.go

…

tree_blob.go

…

tree_entry_common_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

tree_entry_gogit_test.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

tree_entry_gogit.go

Fix panic when get editor config file (#36241 )

2025-12-25 19:26:23 -08:00

tree_entry_mode.go

Improve diff file headers (#36215 )

2026-01-12 20:29:35 +08:00

tree_entry_nogogit.go

Refactor cat-file batch operations and support --batch-command approach (#35775 )

2026-01-08 13:37:36 -08:00

tree_entry_test.go

Support rendering OpenAPI spec (#36449 )

2026-01-26 10:34:38 +08:00

tree_entry.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

tree_gogit.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

tree_nogogit.go

Use case-insensitive matching for Git error "Not a valid object name" (#36728 )

2026-02-24 12:25:34 +08:00

tree_test.go

Remove wrong "git.DefaultContext" (#35364 )

2025-08-27 16:31:21 +00:00

tree.go

Refactor ls-tree and git path related problems (#35858 )

2025-11-05 17:48:38 +00:00

utils_test.go

…

utils.go

fix attachment file size limit in server backend (#35519 )

2025-10-21 15:07:11 +00:00

README.md

Git Module

This module is merged from https://github.com/go-gitea/git which is a Go module to access Git through shell commands. Now it's a part of gitea's main repository for easier pull request.