This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gitea/gitea](https://github.com/go-gitea/gitea) | patch | `1.27.2` → `1.27.3` | --- ### Release Notes <details> <summary>go-gitea/gitea (gitea/gitea)</summary> ### [`v1.27.3`](https://github.com/go-gitea/gitea/releases/tag/v1.27.3) [Compare Source](go-gitea/gitea@v1.27.2...v1.27.3) - SECURITY - fix(packages): restrict/limited/token-scope access ([#39041](go-gitea/gitea#39041), [#39043](go-gitea/gitea#39043), [#39044](go-gitea/gitea#39044), [#39047](go-gitea/gitea#39047), [#39046](go-gitea/gitea#39046)) ([#39058](go-gitea/gitea#39058)) - fix(attachments): enforce owning repository path ([#39048](go-gitea/gitea#39048)) ([#39077](go-gitea/gitea#39077)) - fix(markup): enforce same-repository issue access ([#39045](go-gitea/gitea#39045)) ([#39054](go-gitea/gitea#39054)) - fix(actions): verify raw artifact signatures first ([#39049](go-gitea/gitea#39049)) ([#39053](go-gitea/gitea#39053)) - fix(api): hide limited users from restricted viewers ([#39004](go-gitea/gitea#39004)) ([#39039](go-gitea/gitea#39039)) - fix(repo): limit gitignore template selections ([#39027](go-gitea/gitea#39027)) ([#39040](go-gitea/gitea#39040)) - fix(migrations): cancel GitLab version probes ([#39023](go-gitea/gitea#39023)) ([#39035](go-gitea/gitea#39035)) - fix(packages): limit Swift package manifests ([#39025](go-gitea/gitea#39025)) ([#39032](go-gitea/gitea#39032)) - fix(migrations): bound OneDev version responses ([#39024](go-gitea/gitea#39024)) ([#39033](go-gitea/gitea#39033)) - fix(packages): limit Maven checksum uploads ([#39028](go-gitea/gitea#39028)) ([#39031](go-gitea/gitea#39031)) - fix(packages): bound Alpine metadata entries ([#39026](go-gitea/gitea#39026)) ([#39029](go-gitea/gitea#39029)) - fix(actions): enforce fork pull request trust boundaries ([#39005](go-gitea/gitea#39005)) ([#39018](go-gitea/gitea#39018)) - fix(git): restrict hook permissions ([#39008](go-gitea/gitea#39008)) ([#39016](go-gitea/gitea#39016)) - fix(api): enforce repository creation token authorization ([#39007](go-gitea/gitea#39007)) ([#39014](go-gitea/gitea#39014)) - fix(api): enforce public-only scope for compare heads ([#39006](go-gitea/gitea#39006)) ([#39013](go-gitea/gitea#39013)) - fix(repo): hide repositories of hidden owners ([#39009](go-gitea/gitea#39009)) ([#39012](go-gitea/gitea#39012)) - fix: avoid enumerating every public repository in issue search ([#38992](go-gitea/gitea#38992)) ([#39000](go-gitea/gitea#39000)) - refactor: private endpoints ([#38964](go-gitea/gitea#38964)) ([#38965](go-gitea/gitea#38965)) - ENHANCEMENTS - enhance: add permalinks to pull request reviews ([#38849](go-gitea/gitea#38849)) ([#39036](go-gitea/gitea#39036)) - BUGFIXES - fix: add missing query parameters on runner list page ([#39163](go-gitea/gitea#39163)) - fix(actions): keep step-level continue-on-error expressions unevaluated ([#39141](go-gitea/gitea#39141)) ([#39148](go-gitea/gitea#39148) - fix(packages): preserve SemVer prerelease identifiers in Swift Registry ([#39156](go-gitea/gitea#39156)) ([#39158](go-gitea/gitea#39158)) - fix(repo): prevent MarkAsBrokenEmpty when repository is being migrated ([#39091](go-gitea/gitea#39091)) ([#39092](go-gitea/gitea#39092)) - fix(asymkey): do not verify OpenPGP signatures with an SSH instance key ([#39073](go-gitea/gitea#39073)) ([#39086](go-gitea/gitea#39086)) - fix(pull): keep the merged state in sync with git ([#39062](go-gitea/gitea#39062)) ([#39118](go-gitea/gitea#39118)) - fix(pull): name the head repository in default compare links ([#39075](go-gitea/gitea#39075)) ([#39079](go-gitea/gitea#39079)) - fix(git): parse co-author trailers that are not RFC 5322 addresses ([#39076](go-gitea/gitea#39076)) ([#39081](go-gitea/gitea#39081)) - fix(actions): show "Complete job" logs when the last step is skipped ([#38939](go-gitea/gitea#38939)) ([#39003](go-gitea/gitea#39003)) - fix(actions): Fix how jobs in matrixes are grouped ([#38980](go-gitea/gitea#38980)) ([#38998](go-gitea/gitea#38998)) - fix: resolve YAML anchors and aliases in Actions workflows ([#38984](go-gitea/gitea#38984)) ([#38996](go-gitea/gitea#38996)) - fix: honor environment variables during install ([#38974](go-gitea/gitea#38974)) ([#38976](go-gitea/gitea#38976)) - fix: grant limited-org unit read access to authenticated non-members ([#38871](go-gitea/gitea#38871)) ([#38963](go-gitea/gitea#38963)) - fix: allow anonymous theme switching when REQUIRE\_SIGNIN\_VIEW is set ([#38956](go-gitea/gitea#38956)) ([#38961](go-gitea/gitea#38961)) - fix(actions): drop wrapper span around the action status icon ([#38957](go-gitea/gitea#38957)) ([#38959](go-gitea/gitea#38959)) - fix(issues): sort scoped labels by exclusive order in dropdowns ([#38893](go-gitea/gitea#38893)) ([#38954](go-gitea/gitea#38954)) - fix(indexer): correct bleve indexer token filters ([#38853](go-gitea/gitea#38853)) ([#38951](go-gitea/gitea#38951)) - fix: make "login\_name" field optional for API edit user ([#38917](go-gitea/gitea#38917)) ([#38945](go-gitea/gitea#38945)) - fix(actions): reject non-mapping matrix include/exclude ([#38933](go-gitea/gitea#38933)) - fix(ui): respect FEED\_PAGING\_NUM on the dashboard feed ([#38935](go-gitea/gitea#38935)) ([#38936](go-gitea/gitea#38936)) - MISC - chore: repo compare link ([#39088](go-gitea/gitea#39088)) ([#39119](go-gitea/gitea#39119)) - ci: remove AWS S3 uploads from release workflows ([#38928](go-gitea/gitea#38928)) ([#38929](go-gitea/gitea#38929)) - chore: Pre-register a builtin OAuth2 application for the official Gitea mobile app ([#38880](go-gitea/gitea#38880)) ([#38922](go-gitea/gitea#38922)) Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be automatically upgraded to this version during the specified maintenance window. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.vcasaserver.com/omar/swarm/pulls/786 Co-authored-by: Renovate Bot <renovate-bot@vcasaserver.com>
-Original file line number
+Diff line change
@@ @@ -1,6 +1,6 @@ @@
 services:
   server:
 -    image: gitea/gitea:1.27.2
 +    image: gitea/gitea:1.27.3
     secrets:
       - gitea--pg_db
       - gitea--pg_user