Docker/forgejo
Docker/forgejo
1
0
Fork 0
mirror of https://codeberg.org/forgejo/forgejo.git synced 2025-07-18 17:19:41 +02:00
Code Issues Releases Activity
forgejo/release-notes-published/12.0.0.md
forgejo-release-manager 5645456cac chore(release-notes): Forgejo v12.0.0 (#8540) 
https://codeberg.org/forgejo/forgejo/milestone/12836
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/8540
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Co-authored-by: forgejo-release-manager <contact-forgejo-release-manager@forgejo.org>
Co-committed-by: forgejo-release-manager <contact-forgejo-release-manager@forgejo.org>
2025-07-17 16:25:09 +02:00

117 KiB
Raw Blame History

Release notes

  • Breaking security features
    • PR: remove API authentication methods that uses the URL query. They are disabled by default and this only has an impact if [security].DISABLE_QUERY_AUTH_TOKEN=false is explicitly set. Read more in the v12.0 companion blog post.
  • Security features
  • Breaking features
    • PR: The forgejo docs command is deprecated and CLI errors are now displayed on stderr instead of stdout. These breaking changes happened because the package used to parse the command line arguments was upgraded from v2 to v3. A separate project was initiated to re-implement the docs command, but it is not yet production ready.
    • PR: remove the legacy TEST_CONFLICTING_PATCHES_WITH_GIT_APPLY setting
  • Breaking bug fixes
    • PR: fail if sha is not provided to the POST /repos/{owner}/{repo}/contents API endpoint. Although it was documented to be required, it was not enforced and clients that do not set the sha will no longer succeed.
  • User Interface features
    • PR: transform fediverse handles (ex. @forgejo@floss.social and !forgejo@programming.dev) into links to https://fedirect.toolforge.org. Read more in the v12.0 companion blog post.
    • PR: add user visibility description in the settings page.
    • PR: add model viewer for .glb (GLTF) model in file view. Read more in the v12.0 companion blog post.
    • PR: show size constraints of custom avatar.
    • PR: add links to milestones and projects in issue comments.
    • PR: global styling for the kbd tag.
    • PR: hints in empty usercards lists.
    • PR: the user profile has been redesigned. The most notable change is that actions have been moved to a dropdown and several new actions were added.
    • PR: improve the description in the packages settings.
    • PR: inline public ssh key in verification command.
    • PR: use switch element for markdown editor modes.
    • PR: make JS asset load error message translatable.
    • PR: improve performances by using git switch -c instead of git checkout -b.
    • PR: clarify the desired autocompletion type for the clone address in migrations.
    • PR: improve the clarity of the migration description textarea.
    • PR: automatically refresh workflows in the "Actions" list. Read more in the v12.0 companion blog post.
    • PR: improve error pages.
    • PR: improve the user experience to review individual commits in a pull request. Read more in the v12.0 companion blog post.
    • PR: use the available screen width when displaying Forgejo Actions logs.
    • PR: show if a commit is verified in the activity feed of a user or an organization.
    • PR: reimplemented editor Tab key handling with accessibility safeguards. Balance having the editor work as expected by developers (with Tab key affecting indentation) while also not impeding keyboard navigation. Read more in the v12.0 companion blog post
    • PR: redesign the migration selection page.
  • User Interface bug fixes
    • PR (backported): multiple ComboMarkdownEditors on one page interfere with each other.
    • PR (backported): pasting images into the comment editor will now show that image in the ‘dropzone’.
    • PR (backported): add missing trust status to pull review commits.
    • PR (backported): add missing lazy load attribute to images.
    • PR: retain sort type when viewing issue or pull requests.
    • PR: include enough activity for the entire heatmap.
    • PR: show warning in locked issue discussion.
    • PR: ensure consistent switch position in the markdown editor.
    • PR: display user-friendly message for range error.
    • PR: make limits clearer in the create repository form.
    • PR: don't put trailing slash in autogenerated name in the migration form.
    • PR: allow user with actions write permission to run a workflow from the web UI.
    • PR: ensure usercards in grid have the same width.
  • Localization
    • PR (backported): i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
    • PR: i18n: update of translations from Codeberg Translate
  • Features
    • PR: new GET /repos/{owner}/{repo}/git/blobs API endpoint to retrieve multiple blobs at once.
    • PR: always publish the link to the commit status.
    • PR: improve the performances of the generation of bundled assets.
    • PR: enable mlkem768x25519-sha256 by default for builtin ssh.
    • PR: support artifact uploads for OCI container packages.
    • PR: add admin user reset-mfa CLI command.
    • PR: update the list of ambigious characters.
    • PR: make Forgejo Actions server logs less noisy.
    • PR: allow searching issues by number, prioritize title matches when sorted by relevance.
    • PR: replace go-rpmutils library with our own. Read more in the v12.0 companion blog post.
    • PR: configurable default units for mirrors.
    • PR: a repository administrator has control over reindexing the issues.
    • PR: auto cleanup of offline runners.
    • PR: improved performances when checking for conflicts on pull requests. Read more in the v12.0 companion blog post.
    • PR: allow access to publicly available /api/v1/packages/{username} without a token.
    • PR: implement the GET /repos/{owner}/{repo}/actions/runs and GET /repos/{owner}/{repo}/actions/runs/{run_id} API endpoints.
    • PR: use git-replay for rebasing for better performances.
    • PR: send mail on failed or recovered Forgejo Actions run. Read more in the v12.0 companion blog post.
    • PR: Forgejo Actions failure, success, recover webhooks.
    • PR: add last_commit_when to API contents responses.
    • PR: include a default robots.txt to reduce the impact of crawlers. Read more in the v12.0 companion blog post.
    • PR: use XORM EngineGroup instead of single Engine connection. Read more in the v12.0 companion blog post.
    • PR: sync forks. Read more in the v12.0 companion blog post.
  • Bug fixes
    • PR (backported): pull requests were not blocked by review request for a whitelisted team.
    • PR (backported): several fixes of the ALT RPM package registry.
    • PR (backported): allow lowercase as well as uppercase token keyword in the auth header.
    • PR (backported): correctly mark reviews as stale for AGit pull requests.
    • PR (backported): user activation failed when an email address contained uppercase letters.
    • PR (backported): fix: load OldMilestone based on OldMilestoneID, not MilestoneID
    • PR: omit Content-Length on 307 redirects when serving direct manifest for containers.
    • PR: fix a bug causing the PASCAL-modifier to return camel-case.
    • PR: remove the trailing slash from the issuer in OAuth claims.
    • PR: return the correct AGit type in ssh_info.
    • PR: fix url validation in the webhook add/edit API.
    • PR: add error reporting to pull requests with invalid Forgejo Actions workflow files.
    • PR: allow instance API URLs in release assets.
    • PR: improve the dashboard loading performances.
    • PR: fix a border case where it was not possible to cancel a pull request review.
    • PR: fix acme renewal.
    • PR: migrate Maven packages to "groupId:artifactId" name concatenation, regenerate metadata and fix missing groupId.
  • Included for completeness but not worth a release note
    • PR: i18n: update of translations from Codeberg Translate
    • PR (backported): fix(packages): skip another stack frame from logging
    • PR (backported): fix: ignore "Close" error when uploading container blob
    • PR (backported): chore: failed authentication attempts are not errors and are displayed at the log info level
    • PR (backported): fix: expanding exactly 20 lines between diff sections leaves visual artifact
    • PR (backported): chore: use eventually for mysql collation test
    • PR (backported): fix(code-search): HighlightSearchResultCode should count the number of bytes and not the number of runes
    • PR (backported): fix: use parent context for new transactions
    • PR (backported): chore: disable mismatched root URL e2e test for safari
    • PR (backported): chore: do not navigate to same URL in E2E test
    • PR (backported): fix(email): actions notification template confuses branch with PR
    • PR (backported): fix: corrupted wiki unit default permission (#8234 follow-up)
    • PR (backported): fix: cancelled or skipped runs are not failures for notifications
    • PR (backported): chore: improve reliability of webauthn e2e test
    • PR (backported): fix: skip empty tokens in SearchOptions.Tokens()
    • PR (backported): fix: disable Forgejo Actions email notifications on recovery
    • PR (backported): fix: make API /repos/{owner}/{repo}/compare/{basehead} work with forks
    • PR (backported): chore: sort blocked users list for determistic results
    • PR (backported): fix: abuse reports string data types
    • PR (backported): fix: pass doer's ID for CRUD instance signing
    • PR (backported): fix(ui): release: name is overridden with tag name on edit
    • PR (backported): Revert "fix(api): document is_system_webhook field (#7784)"
    • PR (backported): CI debug: testSleep: show actual times on failures
    • PR: chore: update security option in issue templates
    • PR: Token.ParseIssueReference crashing on empty string
    • PR: Update renovate to v41.1.4 (forgejo)
    • PR: Update renovate to v41 (forgejo) (major)
    • PR: add an index to the ActionRun.stopped column
    • PR: bug: unify RepoActionRun and ActionRun structs
    • PR: Update module github.com/go-chi/chi/v5 to v5.2.2 (forgejo)
    • PR: Downgrade playwright temporarily and allow running all e2e tests
    • PR: git/blob use NewTruncatedReader for profile and codeowners
    • PR: bug: Forgejo Actions email notifications are opt-in
    • PR: prevent 500 message on invalid username
    • PR: only send Forgejo Actions notifications to one user
    • PR: chore: sort mailer messages in test assertion
    • PR: chore(release-notes): Forgejo v11.0.2
    • PR: blob: GetBlobContent: reduce allocations
    • PR: fix(tests): TestInitInstructions must use forEachObjectFormat
    • PR: Update module code.forgejo.org/forgejo/act to v1.28.0 (forgejo)
    • PR: Update data.forgejo.org/oci/alpine Docker tag to v3.22 (forgejo)
    • PR: Update module github.com/minio/minio-go/v7 to v7.0.94 (forgejo)
    • PR: chore: migrate to @stylistic/eslint-plugin
    • PR: Update dependency eslint-plugin-wc to v3 (forgejo)
    • PR: fix(ui): issue comment anchor on time stamp
    • PR: git_model.CommitStatusesHideActionsURL is obsolete
    • PR: Remove 1ms delay before inserting list prefix, fix race condition in tests
    • PR: chore: remove gopls in Makefile
    • PR: do not check for object_format_name field
    • PR: feat(ui): use kbd in label selector hint, remove enter
    • PR: [gitea] week 2025-22 cherry pick (gitea/main -> forgejo)
    • PR: Fix sentence structure mentioning cooldown period
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v40.57.1 (forgejo)
    • PR: Update dependency chart.js to v4.5.0 (forgejo)
    • PR: make test suite run on older git version
    • PR: Update module github.com/go-sql-driver/mysql to v1.9.3 (forgejo)
    • PR: Update environment-to-ini README
    • PR: Update https://data.forgejo.org/forgejo/forgejo-build-publish action to v5.3.5 (forgejo)
    • PR: Dockerfile should re-use bindata files when possible
    • PR: Update dependency minimatch to v10.0.3 (forgejo)
    • PR: use zstd.WithLowerEncoderMem for generate-bindata
    • PR: do not mix urfave v2 with urfave v3
    • PR: chore(ci): skip tests if TEST_{MINIO_ENDPOINT,ELASTICSEARCH_URL} is not set
    • PR: Update module gitlab.com/gitlab-org/api/client-go to v0.130.1 (forgejo)
    • PR: Update module github.com/minio/minio-go/v7 to v7.0.93 (forgejo)
    • PR: Update dependency postcss to v8.5.5 (forgejo)
    • PR: Update dependency minimatch to v10.0.2 (forgejo)
    • PR: chore(ci): use code.forgejo.org/forgejo/migration-test for migration tests
    • PR: Update dependency happy-dom to v18 (forgejo)
    • PR: Update dependency typescript-eslint to v8.34.0 (forgejo)
    • PR: Update dependency @playwright/test to v1.53.0 (forgejo)
    • PR: Update ghcr.io/devcontainers/features/git-lfs Docker tag to v1.2.4 (forgejo)
    • PR: Update dependency postcss-nesting to v13.0.2 (forgejo)
    • PR: Update dependency @vitest/eslint-plugin to v1.2.2 (forgejo)
    • PR: chore: fix tests for old git versions
    • PR: chore(ci): run additional tests in integration
    • PR: Remove shebang from bash autocompletion
    • PR: Make relative-time a self-maintaining custom element
    • PR: create shell.nix; update flake.*
    • PR: Update module connectrpc.com/connect to v1.18.1 (forgejo)
    • PR: Update dependency markdownlint-cli to v0.45.0 (forgejo)
    • PR: Update dependency eslint-plugin-regexp to v2.9.0 (forgejo)
    • PR: Update vitest monorepo to v3.2.3 (forgejo)
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v40.48.4 (forgejo)
    • PR: remove download attribute from external assets
    • PR: always render detailed team permissions table in sidebar
    • PR: Update x/tools to v0.34.0 (forgejo)
    • PR: Update vitest monorepo to v3.2.2 (forgejo)
    • PR: Update module github.com/editorconfig-checker/editorconfig-checker/v3/cmd/editorconfig-checker to v3.3.0 (forgejo)
    • PR: Update linters (forgejo)
    • PR: Update dependency happy-dom to v17.6.3 (forgejo)
    • PR: Update dependency @vitejs/plugin-vue to v5.2.4 (forgejo)
    • PR: Update dependency @axe-core/playwright to v4.10.2 (forgejo)
    • PR: show membership of limited orgs
    • PR: Update module golang.org/x/crypto to v0.39.0 (forgejo)
    • PR: Update module github.com/sergi/go-diff to v1.4.0 (forgejo)
    • PR: Update dependency go to v1.24.4 (forgejo)
    • PR: Federated user activity following: Isolated model changes
    • PR: rename api.{List,}ActionRun to api.{List,}RepoActionRun
    • PR: Update module go.uber.org/mock/mockgen to v0.5.2 (forgejo)
    • PR: Update module github.com/blevesearch/bleve/v2 to v2.5.2 (forgejo)
    • PR: Update dependency vue to v3.5.16 (forgejo)
    • PR: Update dependency postcss to v8.5.4 (forgejo)
    • PR: chore: extract commit header template
    • PR: chore: drop unused misspell
    • PR: Update module code.forgejo.org/f3/gof3/v3 to v3.11.0 (forgejo)
    • PR: chore(renovate): disable indirect digest updates for stable
    • PR: chore: drop unused @typescript-eslint/parser package
    • PR: Update linters (forgejo)
    • PR: Update dependency happy-dom to v17.6.1 (forgejo)
    • PR: chore(renovate): bump to v40.40.0 and disable v7
    • PR: CLI is forgejo not Forgejo
    • PR: add missing bottom margin for verification-button in release view
    • PR: [gitea] Always use an empty line to separate the commit message and trailer
    • PR: [gitea] week 2025-21 cherry pick (gitea/main -> forgejo)
    • PR: Add a GNU Guix manifest
    • PR: chore(cleanup): suppress non actionable XORM warnings
    • PR: migrate repository.topics column for SQLite
    • PR: chore(cleanup): replaces unnecessary calls to formatting functions by non-formatting equivalents
    • PR: aggregate deleted team as ghost team
    • PR: add validating user password as trace region
    • PR: chore(cleanup): fix and simplify API comparison helper
    • PR: fix(i18n): use correct base capitalization style
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v40.31.0 (forgejo)
    • PR: Update forgejo go-chi packages (forgejo)
    • PR: Update module github.com/ProtonMail/go-crypto to v1.3.0 (forgejo)
    • PR: fix(ui): relative time elements were reset on htmx swap
    • PR: overflow-wrap strategy in .markup CSS class
    • PR: fix(ui): change escaping button bg on selected lines
    • PR: do not unconditionally append $(GITEA_COMPATIBILITY) in version
    • PR: fix(ui): center footer links
    • PR: Update go-openapi packages (forgejo)
    • PR: unify repository topics field by replacing JSON null with empty array
    • PR: Update dependency webpack to v5.99.9 (forgejo)
    • PR: Update dependency sharp to v0.34.2 (forgejo)
    • PR: chore: QoL improvements to tests
    • PR: chore(renovate): disable indirect major updates for stable branches
    • PR: Update dependency clippie to v4.1.7 (forgejo)
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v40.26.0 (forgejo)
    • PR: Update module github.com/yuin/goldmark to v1.7.12 (forgejo)
    • PR: chore(ui): cleanup unused color CSS
    • PR: fix(ui): fix force-push compare line layout
    • PR: Update module github.com/alecthomas/chroma/v2 to v2.18.0 (forgejo)
    • PR: parse change-id in the git commit header
    • PR: Update module github.com/blevesearch/bleve/v2 to v2.5.1 (forgejo)
    • PR: Update dependency vue to v3.5.14 (forgejo)
    • PR: Migrate renovate config
    • PR: fix(ui): disable autocapitalization/autocorrect for username inputs
    • PR: fix(ui): disable spellcheck on TOTP form fields
    • PR: chore: remove unused update-locales.sh
    • PR: Update module github.com/msteinert/pam/v2 to v2.1.0 (forgejo)
    • PR: Update module code.forgejo.org/forgejo/act to v1.26.0 (forgejo)
    • PR: Fix TestSSHPushMirror/Normal/Check_mirrored_content test
    • PR: Update github.com/golang-jwt/jwt/v4 (indirect) to v4.5.2 [SECURITY] (forgejo)
    • PR: ci(renovate): only fail on error
    • PR: Update module github.com/niklasfasching/go-org to v1.8.0 (forgejo)
    • PR: Lock file maintenance (forgejo)
    • PR: remove redundant permission check in RemoveLabel
    • PR: test(ui-e2e): fix flaky repo wiki test
    • PR: Update module github.com/go-webauthn/webauthn to v0.13.0 (forgejo)
    • PR: chore(ui): clean up hashbox CSS, small design changes
    • PR: replace ß with ss in normalizeUserName
    • PR: Update dependency globals to v16.1.0 (forgejo)
    • PR: Update module golang.org/x/oauth2 to v0.30.0 (forgejo)
    • PR: Update dependency go to v1.24.3 (forgejo)
    • PR: add missing loadbalancing policies for EngineGroup connections
    • PR: Update module golang.org/x/net to v0.40.0 (forgejo)
    • PR: Update module golang.org/x/image to v0.27.0 (forgejo)
    • PR: [skip ci] chore: remove backport script
    • PR: Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.1.6 (forgejo)
    • PR: [SKIP CI] chore: update CODEOWNERS
    • PR: fix(api): document is_system_webhook field
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v40 (forgejo) (major)
    • PR: Update renovate to v39.264.0 (forgejo)
    • PR: remove artificial delay for PR update
    • PR: chore: Fix outdated usage of unittest.OverrideFixtures
    • PR: Update module github.com/42wim/httpsig to v1.2.3 (forgejo)
    • PR: Update dependency @github/relative-time-element to v4.4.6 (forgejo)
    • PR: Update github.com/42wim/sshsig digest to 5100632 (forgejo)
    • PR: chore(release-notes): Forgejo v7.0.15
    • PR: chore(release-notes): Forgejo v11.0.1
    • PR: document that /repos/{owner}/{repo}/pulls may contain nulls
    • PR: Update dependency forgejo/release-notes-assistant to v1.2.5 (forgejo)
    • PR: chore(renovate): use gitea-releases datasource for rna
    • PR: chore(renovate): allow updating release notes assistant
    • PR: fix(ui): improve force-push compare line layout
    • PR: Update dependency eslint-plugin-unicorn to v59 (forgejo)
    • PR: fix(ui): multiple fixes of sync fork UI
    • PR: Update module github.com/redis/go-redis/v9 to v9.8.0 (forgejo)
    • PR: Update module github.com/alecthomas/chroma/v2 to v2.17.2 (forgejo)
    • PR: Update linters (forgejo)
    • PR: Update dependency happy-dom to v17.4.6 (forgejo)
    • PR: ci: add clarification regarding test label
    • PR: chore: fix test to avoid data race
    • PR: refactor & enhance AP elements used
    • PR: chore(release): next-digest moved to invisible.forgejo.org
    • PR: chore: replace github.com/go-testfixtures/testfixtures
    • PR: enhance validateable interface
    • PR: [gitea] week 2025-17 cherry pick (gitea/main -> forgejo)
    • PR: do not set GOPROXY=direct in Dockerfile*
    • PR: chore(ui): remove unused fomantic font size classes
    • PR: better comments and variable names for ActionRunNowDone
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v39.261.4 (forgejo)
    • PR: fix various typos
    • PR: Update module github.com/yuin/goldmark to v1.7.11 (forgejo)
    • PR: chore: tune down remote user promotion debug message shown as error
    • PR: use linguist-generated for language stats
    • PR: set default restricted for OAuth2 user
    • PR: chore: simplify GetDiff
    • PR: chore: remove unused linters
    • PR: add label for avatar settings
    • PR: i18n(en): fix typo in archive notice
    • PR: Update linters (forgejo)
    • PR: Update dependency @playwright/test to v1.52.0 (forgejo)
    • PR: Update module github.com/PuerkitoBio/goquery to v1.10.3 (forgejo)
    • PR: Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.1.5 (forgejo)
    • PR: Update dependency webpack to v5.99.7 (forgejo)
    • PR: chore: merge tests.AddFixtures and unittest.OverrideFixtures
    • PR: Remove "create branch" button on mirrored repos
    • PR: fix(ui): make pagination labels always visible to screenreader
    • PR: Update module mvdan.cc/gofumpt to v0.8.0 (forgejo)
    • PR: Update linters (forgejo)
    • PR: Update vitest monorepo to v3.1.2 (forgejo)
    • PR: Update dependency @vitest/eslint-plugin to v1.1.43 (forgejo)
    • PR: Update module github.com/alecthomas/chroma/v2 to v2.17.0 (forgejo)
    • PR: Update module github.com/minio/minio-go/v7 to v7.0.91 (forgejo)
    • PR: [gitea] week 2025-16 cherry pick (gitea/main -> forgejo)
    • PR: delay-write trace.dat for forgejo diagnosis
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v39.252.0 (forgejo)
    • PR: feat(ui): enlarge metadata line gaps in issue list and refactor
    • PR: i18n(en): add positional hints to sync_fork placeholders
    • PR: fix(ui): overflow tabular menu CSS fixes
    • PR: feat(ui): make fork related banners more consistent
    • PR: fix(ui): use correct branch name in branch tag selector
    • PR: Update dependency webpack to v5.99.6 (forgejo)
    • PR: fix(ui): show commit icon in branch dropdown button when viewing a commit
    • PR: grammar in a release API error message
    • PR: Update module github.com/caddyserver/certmagic to v0.23.0 (forgejo)
    • PR: Update module github.com/mattn/go-sqlite3 to v1.14.28 (forgejo)
    • PR: fix(ui): make tag dropdown clickable again
    • PR: Update dependency python to v3.13.3 (forgejo)
    • PR: chore(release): v10.0 is EOL [skip ci]
    • PR: chore(renovate): fix package name matching for go majors [skip ci]
    • PR: Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.1.2 (forgejo)
    • PR: Update https://data.forgejo.org/actions/git-backporting action to v4.8.5 (forgejo)
    • PR: Update dependency chart.js to v4.4.9 (forgejo)
    • PR: Update Node.js to v22 (forgejo)
    • PR: match PackageBlob.HashBlake2b definition and migration
    • PR: fix(UI): i18n: improve naming
    • PR: [gitea] week 2025-15 cherry pick (gitea/main -> forgejo)
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v39.240.1 (forgejo)
    • PR: Update module github.com/golangci/golangci-lint/v2/cmd/golangci-lint to v2.1.1 (forgejo)
    • PR: package_blob.has_blake2b may be null
    • PR: chore: use sharp to generate images
    • PR: chore: refactor for Actions Done Notification
    • PR: Update module golang.org/x/tools/cmd/deadcode to v0.32.0 (forgejo)
    • PR: Update module golang.org/x/net to v0.39.0 (forgejo)
    • PR: Update dependency katex to v0.16.22 (forgejo)
    • PR: chore(i18n): update contributing documentation with JSON format
    • PR: Update module golang.org/x/image to v0.26.0 (forgejo)
    • PR: Update module github.com/minio/minio-go/v7 to v7.0.90 (forgejo)
    • PR: Update dependency webpack to v5.99.5 (forgejo)
    • PR: Actions Done Notification
    • PR: Update dependency webpack to v5.99.1 (forgejo)
    • PR: Update module go.uber.org/mock to v0.5.1 (forgejo)
    • PR: [gitea] week 2025-14 cherry pick (gitea/main -> forgejo)
    • PR: Update module golang.org/x/crypto to v0.37.0 (forgejo)
    • PR: Update renovate to v39.233.5 (forgejo)
    • PR: Minor grammatical fix to runner deletion message
    • PR: Update module golang.org/x/oauth2 to v0.29.0 (forgejo)
    • PR: Update module github.com/fsnotify/fsnotify to v1.9.0 (forgejo)
    • PR: Update dependency clippie to v4.1.6 (forgejo)
    • PR: fix(ui): ensure dimmer always covers whole page
    • PR: fix(ui): only run auth_name code on new and edit page
    • PR: chore(release-notes): Forgejo v11.0.0
    • PR: Update module github.com/blevesearch/bleve/v2 to v2.5.0 (forgejo)
    • PR: Update dependency typescript to v5.8.3 (forgejo)
    • PR: Update dependency ansi_up to v6.0.5 (forgejo)
    • PR: chore: always enable webpack progress
    • PR: chore(i18n): add a meta line to the base json translation
    • PR: Update module github.com/alecthomas/chroma/v2 to v2.16.0 (forgejo)
    • PR: Update module code.gitea.io/sdk/gitea to v0.21.0 (forgejo)
    • PR: Update dependency ansi_up to v6.0.3 (forgejo)
    • PR: Makefile & BSDmakefile changes
    • PR: chore(sec): unify usage of crypto/rand.Read
    • PR: make installing Forgejo work again
    • PR: chore(i18n): cleanup settings.adopt string
    • PR: Update module github.com/mattn/go-sqlite3 to v1.14.27 (forgejo)
    • PR: feat(build): run lint-locale-usage w/o --allow-missing-msgids
    • PR: make repo clone https/ssh listener conditional
    • PR: feat(build): uniform ini parsing
    • PR: feat(locale Iter): properly support trPluralString
    • PR: Update module github.com/mattn/go-sqlite3 to v1.14.25 (forgejo)
    • PR: Update module github.com/go-webauthn/webauthn to v0.12.3 (forgejo)
    • PR: fix(i18n): fix several usages of i18n
    • PR: fix(migrations): transfer PR flow information
    • PR: chore: add empty action_variable fixture
    • PR: Update dependency go to v1.24.2 (forgejo)
    • PR: chore(ui): remove fomantic's dimmer module
    • PR: chore(ui): remove ineffective class small in inline code preview
    • PR: chore: enable several no-jquery rules
    • PR: Update vitest monorepo to v3.1.1 (forgejo)
    • PR: Update linters to v8.29.0 (forgejo)
    • PR: Lock file maintenance (forgejo)
    • PR: Update renovate to v39.222.1 (forgejo)
    • PR: [gitea] week 2025-13 cherry pick (gitea/main -> forgejo)
    • PR: chore: use dynamic id
    • PR: use correct init instruction for sha256
    • PR: Lock file maintenance (forgejo)
    • PR: Update github.com/google/pprof digest to a4b03ec (forgejo)
    • PR: Accessibility: fix unreadable captcha with dark themes
    • PR: Update linters (forgejo)
    • PR: Update dependency yamllint to v1.37.0 (forgejo)
    • PR: Update vitest monorepo to v3.0.9 (forgejo)
    • PR: Update dependency @vitest/eslint-plugin to v1.1.38 (forgejo)
    • PR: prepend AppSubURL to visibility hint URLs
    • PR: chore: improve repo migrate e2e test
    • PR: chore(tests): fix testing failure caused by dep update
    • PR: chore(tests): refactor migration form test
    • PR: Update dependency eslint-plugin-unicorn to v58 (forgejo)
    • PR: chore: use correct import
    • PR: Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v2 (forgejo)
    • PR: Update https://data.forgejo.org/tj-actions/changed-files action to v46 (forgejo)
    • PR: Update module golang.org/x/net to v0.38.0 (forgejo)
    • PR: fix(ui): improve vertical alignment of icons with text in the overflow menu (#7314)
    • PR: 4108-empty-slice-encoded-to-null
    • PR: refactor(cli): improve dump's temporary file handling
    • PR: introduce gitNeeded bool in setup
    • PR: fix(ui): Do not check for vertical-align
    • PR: Update dependency mermaid to v11.6.0 (forgejo)
    • PR: chore: branding import path
    • PR: fix(ui): improve vertical alignment of icons with text in the overflow menu
    • PR: feat(build): lint-locale-usage should detect more Tr functions
    • PR: feat(ui): improve button gap consistency, make it variable, larger on touchscreens
    • PR: redirect to submodule instead of throwing 500 error when viewing submodule entry
    • PR: add port and schema to federation host
    • PR: feat(repo,locale): merge PR/issues cases for some repo/issue strings
    • PR: enable HTTP signatures on all ActivityPub endpoints
    • PR: feat!: Abusive content reporting
    • PR: Replace the 'relative-time' element scripting with custom, translatable rewrite
  • Already announced in the release notes of an older stable release
    • PR: collaborator can edit wiki with write access
    • PR: do not ignore automerge while a PR is checking for conflicts
    • PR: erroneous list continuation on Cmd+Enter (#8153)
    • PR: do not fail when release or wiki is set in /repos/migrate API
    • PR: pull request cross references
    • PR: ignore expired artifacts for quota calculation
    • PR: quote reply in Chromium
    • PR: make hash pattern more strict
    • PR: fix(sec): add tests for OAuth2 signup
    • PR: fix(sec): only degrade permission check for git push
    • PR: display the list of tasks in the runner edit page
    • PR: fix(i18n): prevent incorrect logging on strings missing in JSON locales
    • PR: fix(ui/pr): use eye icon for reviews
    • PR: fix(ui): use gap in switch items
    • PR: validate input for default_{merge,update}_style