GITEA-1.27.1 release notes and known issues

Summary

SECURITY Fix: orgmode render include path ( #38642 ) ( #38645 ) Fix: git patch apply ( #38637 ) ( #38638 ) API fix(api): align Swagger schemas for UserSettings and TopicListResponse ( #38590 ) ( #38592 ) ENHANCEMENTS enhance: improve diff contrast in light and dark themes ( #37477 ) ( #38574 ) BUGFIXES fix: skip OIDC end-session after password login for OAuth2 users ( #38439 ) ( #38666 ) fix: make Actions log parser support multiple line message encoding ( #38659 ) ( #38664 ) fix(actions): use base branch ref for pull_request_target context ( #38636 ) ( #38657 ) fix(actions): skip already-approved runs in ApproveRuns ( #38653 ) ( #38654 ) fix: orgmode render include path ( #38642 ) ( #38645 ) fix(actions): cancel tasks immediately when the runner stopped reporting ( #38616 ) ( #38644 ) fix(issues): fix label bulk-load key and reduce log noise in LoadLabel ( #38632 ) ( #38643 ) fix(actions): improve runner list status sorting, labels and task job links ( #38586 ) ( #38633 ) fix(actions): correctness and hardening fixes ( #38518 ) ( #38631 ) fix(repo): prevent double-write redirect collisions on dependency errors, fix ui ( #38627 ) ( #38628 ) fix: delete repo-scoped rows of seven more tables when deleting a repository ( #38534 ) ( #38618 ) fix(webhook): remove slack channel name check ( #38608 ) ( #38612 ) fix: download dropdown menu clipped on the branches page ( #38604 ) ( #38609 ) fix(project): prevent database mutations on invalid MoveIssues payload ( #38600 ) ( #38602 ) fix(actions): make SingleWorkflow.Marshal round-trip multi-line run blocks (stop silent job stranding) ( #38520 ) ( #38599 ) fix(file-tree): handle submodule links and missing view container ( #38033 ) ( #38589 ) fix(actions): fail unexpandable reusable workflow callers and decouple the job emitter's cross-run processing ( #38565 ) ( #38587 ) fix: keep serving valid ACME cert when renewal fails at startup ( #38554 ) ( #38583 ) fix: branch protection user list ( #38570 ) ( #38584 ) fix(pulls): respect diff.orderFile in diff file tree ( #38566 ) ( #38578 ) fix(issue): make issue action (issue list batch operation) elements have correct attributes ( #38575 ) ( #38580 ) fix(actions): support matrix when evaluating workflow if expression ( #38474 ) ( #38557 ) fix(actions): align status icon span for Safari rendering ( #38558 ) ( #38562 ) fix: revert git clone http redirection forbidden ( #38530 ) ( #38545 ) fix: clean up orphaned user-keyed tables in deleteUser ( #38511 ) ( #38514 ) fix(actions): coerce workflow_dispatch boolean inputs to native types ( #38472 ) ( #38521 ) fix: make the merge box button red if some checks fail ( #38508 ) ( #38516 ) fix(pull): sign the commit when updating a branch by merge ( #38441 ) ( #38499 ) fix: make commit message merge correctly ( #38490 ) ( #38502 ) fix(actions): explain why a blocked or waiting job has not started ( #38476 ) ( #38498 ) fix(actions): make cancelled() work in job if evaluation ( #38495 ) ( #38497 ) fix(actions): show retention info on hover for expired artifacts ( #38477 ) ( #38493 ) fix(actions): group reusable-workflow matrix legs in the workflow graph ( #38475 ) ( #38492 ) fix: full file highlighting for git diff with CR char ( #38484 ) ( #38491 ) fix(packages): serve noarch Alpine index for any requested architecture ( #38479 ) ( #38486 ) fix: 500 error when updating user visibility ( #38480 ) ( #38483 ) fix(actions): make job list item fully clickable ( #38462 ) ( #38471 ) fix: mail template for push event ( #38467 ) ( #38468 ) fix: make "test push webhook" always work ( #38425 ) ( #38455 ) fix(actions): prevent bulk actions from affecting all runners ( #38453 ) ( #38457 ) fix(org): align follow button and wrap description ( #38448 ) ( #38454 ) fix(actions): populate github.event for scheduled runs ( #38446 ) ( #38452 ) MISC refactor: git patch apply ( #38637 ) ( #38638 ) Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

Improvements and security content

• SECURITY Fix: orgmode render include path ( #38642 ) ( #38645 ) Fix: git patch apply ( #38637 ) ( #38638 ) API fix(api): align Swagger schemas for UserSettings and TopicListResponse ( #38590 ) ( #38592 ) ENHANCEMENTS enhance: improve diff contrast in light and dark themes ( #37477 ) ( #38574 ) BUGFIXES fix: skip OIDC end-session after password login for OAuth2 users ( #38439 ) ( #38666 ) fix: make Actions log parser support multiple line message encoding ( #38659 ) ( #38664 ) fix(actions): use base branch ref for pull_request_target context ( #38636 ) ( #38657 ) fix(actions): skip already-approved runs in ApproveRuns ( #38653 ) ( #38654 ) fix: orgmode render include path ( #38642 ) ( #38645 ) fix(actions): cancel tasks immediately when the runner stopped reporting ( #38616 ) ( #38644 ) fix(issues): fix label bulk-load key and reduce log noise in LoadLabel ( #38632 ) ( #38643 ) fix(actions): improve runner list status sorting, labels and task job links ( #38586 ) ( #38633 ) fix(actions): correctness and hardening fixes ( #38518 ) ( #38631 ) fix(repo): prevent double-write redirect collisions on dependency errors, fix ui ( #38627 ) ( #38628 ) fix: delete repo-scoped rows of seven more tables when deleting a repository ( #38534 ) ( #38618 ) fix(webhook): remove slack channel name check ( #38608 ) ( #38612 ) fix: download dropdown menu clipped on the branches page ( #38604 ) ( #38609 ) fix(project): prevent database mutations on invalid MoveIssues payload ( #38600 ) ( #38602 ) fix(actions): make SingleWorkflow.Marshal round-trip multi-line run blocks (stop silent job stranding) ( #38520 ) ( #38599 ) fix(file-tree): handle submodule links and missing view container ( #38033 ) ( #38589 ) fix(actions): fail unexpandable reusable workflow callers and decouple the job emitter's cross-run processing ( #38565 ) ( #38587 ) fix: keep serving valid ACME cert when renewal fails at startup ( #38554 ) ( #38583 ) fix: branch protection user list ( #38570 ) ( #38584 ) fix(pulls): respect diff.orderFile in diff file tree ( #38566 ) ( #38578 ) fix(issue): make issue action (issue list batch operation) elements have correct attributes ( #38575 ) ( #38580 ) fix(actions): support matrix when evaluating workflow if expression ( #38474 ) ( #38557 ) fix(actions): align status icon span for Safari rendering ( #38558 ) ( #38562 ) fix: revert git clone http redirection forbidden ( #38530 ) ( #38545 ) fix: clean up orphaned user-keyed tables in deleteUser ( #38511 ) ( #38514 ) fix(actions): coerce workflow_dispatch boolean inputs to native types ( #38472 ) ( #38521 ) fix: make the merge box button red if some checks fail ( #38508 ) ( #38516 ) fix(pull): sign the commit when updating a branch by merge ( #38441 ) ( #38499 ) fix: make commit message merge correctly ( #38490 ) ( #38502 ) fix(actions): explain why a blocked or waiting job has not started ( #38476 ) ( #38498 ) fix(actions): make cancelled() work in job if evaluation ( #38495 ) ( #38497 ) fix(actions): show retention info on hover for expired artifacts ( #38477 ) ( #38493 ) fix(actions): group reusable-workflow matrix legs in the workflow graph ( #38475 ) ( #38492 ) fix: full file highlighting for git diff with CR char ( #38484 ) ( #38491 ) fix(packages): serve noarch Alpine index for any requested architecture ( #38479 ) ( #38486 ) fix: 500 error when updating user visibility ( #38480 ) ( #38483 ) fix(actions): make job list item fully clickable ( #38462 ) ( #38471 ) fix: mail template for push event ( #38467 ) ( #38468 ) fix: make "test push webhook" always work ( #38425 ) ( #38455 ) fix(actions): prevent bulk actions from affecting all runners ( #38453 ) ( #38457 ) fix(org): align follow button and wrap description ( #38448 ) ( #38454 ) fix(actions): populate github.event for scheduled runs ( #38446 ) ( #38452 ) MISC refactor: git patch apply ( #38637 ) ( #38638 ) Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Official publisher evidence