chore(deps): update dependency go-gitea/gitea to v28.2.0 #205

2026-10-18T19:01:51Z

renovate-bot commented

2026-10-18 19:01:51 +00:00

This PR contains the following updates:

Package	Update	Change
go-gitea/gitea	minor	`28.1.0` -> `28.2.0`

Release Notes

go-gitea/gitea (go-gitea/gitea)

`v28.2.0`

Compare Source

[28.2.0] - 2026-10-18

Enhancements

(oauth) Pre-register a builtin OAuth2 application for gitea-vscode (#39785) (#39801)
Allow custom watches to bypass on-mention email restriction (#39652) (#39837)

Bug Fixes

Various bugs (#39661) (#39667)
(markup) Display MathML has no space below it (#39663) (#39668)
Correct websocket notification for change password page (#39671) (#39670)
(webhook) Keep line breaks in Telegram rich messages (#39650) (#39677)
Correct "go get" URL ssh scheme, fix form binding (#39674, #39528) (#39676)
OIDC discovery advertises unsupported id_token response_type (#39498) (#39689)
(deps) Update module golang.org/x/net to v0.60.0 [security] (#39695) (#39701)
(git) Leave reflog expiry to git's defaults (#39703) (#39711)
(actions) Settle cancelled reusable workflow runs stuck in cancelling (#39706) (#39717)
(git) Match git config values exactly when syncing (#39728) (#39729)
(actions) Harden log cursor, activity type and actor filter handling (#39721) (#39731)
(packages) Copy selected Debian installation values (#39718) (#39734)
(auth) Prevent competing remember-me token rotations (#39686) (#39688)
(packages/npm) Restore former tarball URLs (#39681) (#39749)
(issues) Allow selecting a tag in the issue Branch/Tag dropdown (#39747) (#39753)
Validate "state" for OpenID (#39642) (#39744)
Correct label deletion and release attachment load (#39743) (#39752)
(markup) Resolve and proxy srcset links of elements (#39708) (#39756)
(lfs) Validate OID before building filesystem object path (#39762) (#39766)
(markup) Restore code copy newline strip and fix copying rendered blocks (#39755) (#39765)
(user) Don't match a commit with an empty author email to a user (#39777) (#39780)
(gitdiff) Unquote C-quoted paths from git diff-tree --raw (#39781) (#39783)
(actions) Fix schedule cleanup and default branch switch (#39740) (#39786)
Skip commit-graph write when fetching remote commits (#39798)
(webauthn) Accept unsolicited client extension outputs from WebKit clients (#39792) (#39806)
(pull) Fix code context of review comments on unchanged lines (#39799) (#39805)
(pull) Don't auto-detect empty pull requests as manually merged (#39807) (#39812)
(actions) Keep folded block scalars intact across serialization (#39787) (#39817)
(actions) Bound request body size in artifacts v4 twirp handlers (#39818) (#39822)
Prevent Gitea from crashing by notification panic (#39835)
(pull) Recover PRs whose recorded merge commit never reached the base repo (#39831) (#39840)
Use correct template variable on milestone page (#39834) (#39843)
(mailer) Reject incoming email tokens of users who cannot sign in (#39833) (#39841)
Add missing checks to several handlers and models (#39839) (#39847)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [go-gitea/gitea](https://github.com/go-gitea/gitea) | minor | `28.1.0` -> `28.2.0` | --- ### Release Notes <details> <summary>go-gitea/gitea (go-gitea/gitea)</summary> ### [`v28.2.0`](https://github.com/go-gitea/gitea/releases/tag/v28.2.0) [Compare Source](https://github.com/go-gitea/gitea/compare/v28.1.0...v28.2.0) #### \[28.2.0] - 2026-10-18 ##### Enhancements - *(oauth)* Pre-register a builtin OAuth2 application for gitea-vscode ([#39785](https://github.com/go-gitea/gitea/issues/39785)) ([#39801](https://github.com/go-gitea/gitea/issues/39801)) - Allow custom watches to bypass on-mention email restriction ([#39652](https://github.com/go-gitea/gitea/issues/39652)) ([#39837](https://github.com/go-gitea/gitea/issues/39837)) ##### Bug Fixes - Various bugs ([#39661](https://github.com/go-gitea/gitea/issues/39661)) ([#39667](https://github.com/go-gitea/gitea/issues/39667)) - *(markup)* Display MathML has no space below it ([#39663](https://github.com/go-gitea/gitea/issues/39663)) ([#39668](https://github.com/go-gitea/gitea/issues/39668)) - Correct websocket notification for change password page ([#39671](https://github.com/go-gitea/gitea/issues/39671)) ([#39670](https://github.com/go-gitea/gitea/issues/39670)) - *(webhook)* Keep line breaks in Telegram rich messages ([#39650](https://github.com/go-gitea/gitea/issues/39650)) ([#39677](https://github.com/go-gitea/gitea/issues/39677)) - Correct "go get" URL ssh scheme, fix form binding ([#39674](https://github.com/go-gitea/gitea/issues/39674), [#39528](https://github.com/go-gitea/gitea/issues/39528)) ([#39676](https://github.com/go-gitea/gitea/issues/39676)) - OIDC discovery advertises unsupported id_token response_type ([#39498](https://github.com/go-gitea/gitea/issues/39498)) ([#39689](https://github.com/go-gitea/gitea/issues/39689)) - *(deps)* Update module golang.org/x/net to v0.60.0 \[security] ([#39695](https://github.com/go-gitea/gitea/issues/39695)) ([#39701](https://github.com/go-gitea/gitea/issues/39701)) - *(git)* Leave reflog expiry to git's defaults ([#39703](https://github.com/go-gitea/gitea/issues/39703)) ([#39711](https://github.com/go-gitea/gitea/issues/39711)) - *(actions)* Settle cancelled reusable workflow runs stuck in cancelling ([#39706](https://github.com/go-gitea/gitea/issues/39706)) ([#39717](https://github.com/go-gitea/gitea/issues/39717)) - *(git)* Match git config values exactly when syncing ([#39728](https://github.com/go-gitea/gitea/issues/39728)) ([#39729](https://github.com/go-gitea/gitea/issues/39729)) - *(actions)* Harden log cursor, activity type and actor filter handling ([#39721](https://github.com/go-gitea/gitea/issues/39721)) ([#39731](https://github.com/go-gitea/gitea/issues/39731)) - *(packages)* Copy selected Debian installation values ([#39718](https://github.com/go-gitea/gitea/issues/39718)) ([#39734](https://github.com/go-gitea/gitea/issues/39734)) - *(auth)* Prevent competing remember-me token rotations ([#39686](https://github.com/go-gitea/gitea/issues/39686)) ([#39688](https://github.com/go-gitea/gitea/issues/39688)) - *(packages/npm)* Restore former tarball URLs ([#39681](https://github.com/go-gitea/gitea/issues/39681)) ([#39749](https://github.com/go-gitea/gitea/issues/39749)) - *(issues)* Allow selecting a tag in the issue Branch/Tag dropdown ([#39747](https://github.com/go-gitea/gitea/issues/39747)) ([#39753](https://github.com/go-gitea/gitea/issues/39753)) - Validate "state" for OpenID ([#39642](https://github.com/go-gitea/gitea/issues/39642)) ([#39744](https://github.com/go-gitea/gitea/issues/39744)) - Correct label deletion and release attachment load ([#39743](https://github.com/go-gitea/gitea/issues/39743)) ([#39752](https://github.com/go-gitea/gitea/issues/39752)) - *(markup)* Resolve and proxy srcset links of <source> elements ([#39708](https://github.com/go-gitea/gitea/issues/39708)) ([#39756](https://github.com/go-gitea/gitea/issues/39756)) - *(lfs)* Validate OID before building filesystem object path ([#39762](https://github.com/go-gitea/gitea/issues/39762)) ([#39766](https://github.com/go-gitea/gitea/issues/39766)) - *(markup)* Restore code copy newline strip and fix copying rendered blocks ([#39755](https://github.com/go-gitea/gitea/issues/39755)) ([#39765](https://github.com/go-gitea/gitea/issues/39765)) - *(user)* Don't match a commit with an empty author email to a user ([#39777](https://github.com/go-gitea/gitea/issues/39777)) ([#39780](https://github.com/go-gitea/gitea/issues/39780)) - *(gitdiff)* Unquote C-quoted paths from `git diff-tree --raw` ([#39781](https://github.com/go-gitea/gitea/issues/39781)) ([#39783](https://github.com/go-gitea/gitea/issues/39783)) - *(actions)* Fix schedule cleanup and default branch switch ([#39740](https://github.com/go-gitea/gitea/issues/39740)) ([#39786](https://github.com/go-gitea/gitea/issues/39786)) - Skip commit-graph write when fetching remote commits ([#39798](https://github.com/go-gitea/gitea/issues/39798)) - *(webauthn)* Accept unsolicited client extension outputs from WebKit clients ([#39792](https://github.com/go-gitea/gitea/issues/39792)) ([#39806](https://github.com/go-gitea/gitea/issues/39806)) - *(pull)* Fix code context of review comments on unchanged lines ([#39799](https://github.com/go-gitea/gitea/issues/39799)) ([#39805](https://github.com/go-gitea/gitea/issues/39805)) - *(pull)* Don't auto-detect empty pull requests as manually merged ([#39807](https://github.com/go-gitea/gitea/issues/39807)) ([#39812](https://github.com/go-gitea/gitea/issues/39812)) - *(actions)* Keep folded block scalars intact across serialization ([#39787](https://github.com/go-gitea/gitea/issues/39787)) ([#39817](https://github.com/go-gitea/gitea/issues/39817)) - *(actions)* Bound request body size in artifacts v4 twirp handlers ([#39818](https://github.com/go-gitea/gitea/issues/39818)) ([#39822](https://github.com/go-gitea/gitea/issues/39822)) - Prevent Gitea from crashing by notification panic ([#39835](https://github.com/go-gitea/gitea/issues/39835)) - *(pull)* Recover PRs whose recorded merge commit never reached the base repo ([#39831](https://github.com/go-gitea/gitea/issues/39831)) ([#39840](https://github.com/go-gitea/gitea/issues/39840)) - Use correct template variable on milestone page ([#39834](https://github.com/go-gitea/gitea/issues/39834)) ([#39843](https://github.com/go-gitea/gitea/issues/39843)) - *(mailer)* Reject incoming email tokens of users who cannot sign in ([#39833](https://github.com/go-gitea/gitea/issues/39833)) ([#39841](https://github.com/go-gitea/gitea/issues/39841)) - Add missing checks to several handlers and models ([#39839](https://github.com/go-gitea/gitea/issues/39839)) ([#39847](https://github.com/go-gitea/gitea/issues/39847)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2026-10-18 19:01:51 +00:00

chore(deps): update dependency go-gitea/gitea to v28.2.0

commitlint / check-and-test (pull_request) Successful in 4s

Details

check-and-test / check-and-test (pull_request) Successful in 40s

Details

694fd53c21

renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-10-18 19:01:52 +00:00

renovate-bot merged commit e5a2a38767 into main

2026-10-18 19:01:57 +00:00

renovate-bot deleted branch renovate/go-gitea-gitea-28.x

2026-10-18 19:01:58 +00:00