CVS commit: pkgsrc/www/gitea

Module Name:	pkgsrc
Committed By:	khorben
Date:		Tue Jul 28 13:51:12 UTC 2026

Modified Files:
	pkgsrc/www/gitea: Makefile PLIST distinfo go-modules.mk
	pkgsrc/www/gitea/patches: patch-Makefile

Log Message:
www/gitea: update to 1.26.1

This release requires Go 1.26.
I had to generate the updated frontend assets on macOS/amd64; it is not
possible to do so on NetBSD at the moment.

Changes in 1.26.1:

* BUGFIXES
  - Add event.schedule context for schedule actions task
  - Fix an issue where changing an organization's visibility caused problems when users had forked its repositories.
  - Use modern "git update-index --cacheinfo" syntax to support more file names
  - Fix URL related escaping for oauth2
  - When the requested arch rpm is missing fall back to noarch
  - Fix actions concurrency groups cross-branch leak
  - Fix bug when accessing user badges
  - Fix AppFullLink
  - Fix container auth for public instance
  - Enhance GetActionWorkflow to support fallback references
  - Fix vite manifest update masking build errors
  - Fix Mermaid diagrams failing when node labels contain line breaks
  - Use TriggerEvent instead of Event in workflow runs API response for scheduled runs
  - Add URL to Learn more about blocking a user.
  - Fix button layout shift when collapsing file tree in editor
  - Fix org team assignee/reviewer lookups for team member permissions
  - Fix repo init README EOL
  - Fix: dump with default zip type produces uncompressed zip

Changes in 1.26.0:

* BREAKING
  - Correct swagger annotations for enums, status codes, and notification state
  - Remove GET API registration-token
  - Support Actions concurrency syntax
  - Make PUBLIC_URL_DETECTION default to "auto"
* SECURITY
  - Bound PageSize in ListUnadoptedRepositories
* FEATURES
  - Support Actions concurrency syntax
  - Add terraform state registry
  - Instance-wide (global) info banner and maintenance mode
  - Support rendering OpenAPI spec
  - Add keyboard shortcuts for repository file and code search
  - Add support for archive-upload rpc
  - Add ability to download subpath archive
  - Add workflow dependencies visualization& Restyle Workflow Graph
  - Automatic generation of release notes
  - Add "Go to file", "Delete Directory" to repo file list page
  - Introduce "config edit-ini" sub command to help maintaining INI config file
  - Add button to re-run failed jobs in Actions
  - Support actions and reusable workflows from private repos
  - Add summary to action runs view
  - Add user badges
  - Add configurable permissions for Actions automatic tokens
  - Add per-runner "Disable/Pause"
  - Feature non-zipped actions artifacts (action v7 / nodejs / npm v6.2.0)
* PERFORMANCE
  - WorkflowDispatch API optionally return runid
  - Add render cache for SVG icons
  - Load mentionValues asynchronously
  - Lazy-load some Vue components, fix heatmap chunk loading on every page
  - Load heatmap data asynchronously
  - Use prev/next pagination for user profile activities page to speed up
  - Refactor cat-file batch operations and support --batch-command approach
  - Use merge tree to detect conflicts when possible
* ENHANCEMENTS
  - Implement logout redirection for reverse proxy auth setups
  - Adds option to force update new branch in contents routes
  - Add viewer controller for mermaid (zoom, drag)
  - Add code editor setting dropdowns
  - Add elk layout support to mermaid
  - Add resolve/unresolve review comment API endpoints
  - Allow configuring default PR base branch (fixes
  - Add support for RPM Errata (updateinfo.xml)
  - Require additional user confirmation for making repo private
  - Add actions.WORKFLOW_DIRS setting
  - Avoid opening new tab when downloading actions logs
  - Implements OIDC RP-Initiated Logout
  - Show workflow link
  - Desaturate dark theme background colors
  - Refactor "org teams" page and help new users to "add member" to an org
  - Add webhook name field to improve webhook identification
  - Make task list checkboxes clickable in the preview tab
  - Improve severity labels in Actions logs and tweak colors
  - Linkify URLs in Actions workflow logs
  - Allow text selection on checkbox labels
  - Support dark/light theme images in markdown
  - Enable native dark mode for swagger-ui
  - Rework checkbox styling, remove input border hover effect
  - Refactor storage content-type handling of ServeDirectURL
  - Use "Enable Gravatar" but not "Disable"
  - Use case-insensitive matching for Git error "Not a valid object name"
  - Add "Copy Source" to markup comment menu
  - Change image transparency grid to CSS
  - Add "Run" prefix for unnamed action steps
  - Persist actions log time display settings in localStorage
  - Use first commit title for multi-commit PRs and fix auto-focus title field
  - Improve BuildCaseInsensitiveLike with lowercase
  - Improve diff highlighting
  - Exclude cancelled runs from failure-only email notifications
  - Use full-file highlighting for diff sections
  - Color command/error logs in Actions log
  - Add paging headers
  - Improve timeline entries for WIP prefix changes in pull requests
  - Add FOLDER_ICON_THEME configuration option
  - Normalize guessed languages for code highlighting
  - Add chunked transfer encoding support for LFS uploads
  - Indicate when only optional checks failed
  - Add 'allow_maintainer_edit' API option for creating a pull request
  - Support closing keywords with URL references
  - Improve diff file headers
  - Fix and enhance comment editor monospace toggle
  - Add git.DIFF_RENAME_SIMILARITY_THRESHOLD option
  - Add matching pair insertion to markdown textarea
  - Add sorting/filtering to admin user search API endpoint
  - Allow action user have read permission in public repo like other user
  - Disable matchBrackets in monaco
  - Use GitHub-style commit message for squash merge
  - Make composer registry support tar.gz and tar.bz2 and fix bugs
  - Add GITEA_PR_INDEX env variable to githooks
  - Add proper error message if session provider can not be created
  - Add button to copy file name in PR files
  - Move X_FRAME_OPTIONS setting from cors to security section
  - Add placeholder content for empty content page
  - Add DEFAULT_DELETE_BRANCH_AFTER_MERGE setting
  - Redirect to the only OAuth2 provider when no other login methods and fix various problems
  - Add admin badge to navbar avatar
  - Add never option to PUBLIC_URL_DETECTION configuration
  - Add background and run count to actions list page
  - Add icon to buttons "Close with Comment", "Close Pull Request", "Close Issue"
  - Add support for in_progress event in workflow_run webhook
  - Report commit status for pull_request_review events
  - Render merged pull request title as such in dashboard feed
  - Feature to be able to filter project boards by milestones
  - Use user id in noreply emails
  - Enable pagination on GiteaDownloader.getIssueReactions()
  - Remove striped tables in UI
  - Improve control char rendering and escape button styling
  - Support legacy run/job index-based URLs and refactor migration 326
  - Add date to "No Contributions" tooltip
  - Show edit page confirmation dialog on tree view file change
  - Mention proc-receive in text for dashboard.resync_all_hooks func
  - Reuse selectable style for wiki
  - Support blue yellow colorblind theme
  - Support selecting theme on the footer
  - Improve online runner check
  - Add quick approve button on PR page
  - Enable commenting on expanded lines in PR diffs
  - Print PR-Title into tooltip for actions
  - Use explicit, stronger defaults for newly generated repo signing keys for Debian
  - Improve the compare page
  - Unify repo names in system notices
  - Move package settings to package instead of being tied to version
  - Add Actions API rerun endpoints for runs and jobs
  - Add branch_count to repository API
  - Add created_by filter to SearchIssues
  - Allow admins to rename non-local users
  - Support updating branch via API
  - Add an option to automatically verify SSH keys from LDAP
  - Make "update file" API can create a new file when SHA is not set
  - Update issue.go with labels documentation (labels content, not ids)
  - Expose content_version for optimistic locking on issue and PR edits
  - Pass ServeHeaderOptions by value instead of pointer, fine tune httplib tests
* BUGFIXES
  - Frontend iframe renderer framework: 3D models, OpenAPI
  - Fix CODEOWNERS absolute path matching.
  - Swift registry metadata: preserve more JSON fields and accept empty metadata
  - Fix user ssh key exporting and tests
  - Fix team member avatar size and add tooltip
  - Fix commit title rendering in action run and blame
  - Fix corrupted JSON caused by goccy library
  - Add test for "fetch redirect", add CSS value validation for external render
  - Fix incorrect concurrency check
  - Fix handle missing base branch in PR commits API
  - Fix encoding for Matrix Webhooks
  - Fix handle fork-only commits in compare API
  - Indicate form field readonly via background, fix RunUser config,
  - Report structurally invalid workflows to users
  - Fix API not persisting pull request unit config when has_pull_requests is not set
  - Rename CSS variables and improve colorblind themes
  - Hide add-matcher and remove-matcher from actions job logs
  - Prevent navigation keys from triggering actions during IME composition
  - Fix vertical alignment of .commit-sign-badge children
  - Fix duplicate startup warnings in admin panel
  - Fix CODEOWNERS review request attribution using comment metadata
  - Fix HTML tags appearing in wiki table of contents
  - Fix various bugs
  - Fix various legacy problems
  - Fix RPM Registry 404 when package name contains 'package'
  - Merge some standalone Vite entries into index.js
  - Fix various problems
  - Fix issue label deletion with Actions tokens
  - Hide delete branch or tag buttons in mirror or archived repositories.
  - Fix org contact email not clearable once set
  - Fix a bug when forking a repository in an organization
  - Preserve sort order of exclusive labels from template repo
  - Make container registry support Apple Container (basic auth)
  - Fix the wrong push commits in the pull request when force push
  - Add class "list-header-filters" to the div for projects
  - Fix dbfs error handling
  - Fix incorrect viewed files counter if reverted change was viewed
  - Refactor avatar package, support default avatar fallback
  - Fix README symlink resolution in subdirectories like .github
  - Fix CSS stacking context issue in actions log
  - Add gpg signing for merge rebase and update by rebase
  - Delete non-exist branch should return 404
  - Fix TestActionsCollaborativeOwner
  - Fix multi-arch Docker build SIGILL by splitting frontend stage
  - Fix linguist-detectable attribute being ignored for configuration files
  - Fix state desync in ComboMarkdownEditor
  - Unify DEFAULT_SHOW_FULL_NAME output in templates and dropdown
  - Pull Request Pusher should be the author of the merge
  - Fix various version parsing problems
  - Fix highlight diff result
  - Fix mirror sync parser and fix mirror messages
  - Fix bug when list pull request commits
  - Fix various bugs
  - Fix issue filter menu layout
  - Restrict branch naming when new change matches with protection rules
  - Fix link/origin referrer and login redirect
  - Generate IDs for HTML headings without id attribute
  - Use a migration test instead of a wrong test which populated the meta test repositories and fix a migration bug
  - Fix issue close timeline icon
  - Fix diff blob excerpt expansion
  - Fix external render
  - Fix review request webhook bug
  - Fix shutdown waitgroup panic
  - Cleanup ActionRun creation
  - Fix possible bug when migrating issues/pull requests
  - Various fixes
  - Apply notify/register mail flags during install load
  - Repair duration display for bad stopped timestamps
  - Fix(upgrade.sh): use HTTPS for GPG key import and restore SELinux context after upgrade
  - Fix various trivial problems
  - Fix various trivial problems
  - Fix NuGet package upload error handling
  - Fix CodeQL code scanning alerts
  - Refactor issue sidebar and fix various problems
  - Fix various problems
  - Fix relative-time RangeError
  - Fix chroma lexer mapping
  - Fix typos and grammar in English locale
  - Fix milestone/project text overflow in issue sidebar
  - Fix no-content message not rendering after comment edit
  - Fix theme loading in development
  - Fix workflow run jobs API returning null steps
  - Fix timeline event layout overflow with long content
  - Fix minor UI issues in runner edit page
  - Fix incorrect vendored detections
  - Fix editorconfig not respected in PR Conversation view
  - Don't create self-references in merged PRs
  - Fix potential incorrect runID in run status update
  - Fix file-tree ui error when adding files to repo without commits
  - Improve image captcha contrast for dark mode
  - Fix panic in blame view when a file has only a single commit
  - Fix spelling error in migrate-storage cmd utility
  - Fix code highlighting on blame page
  - Fix nilnil in onedev downloader
  - Fix actions lint
  - Fix oauth2 session gob register
  - Fix Arch repo pacman.conf snippet
  - Fix a number of strictNullChecks-related issues
  - Fix URLJoin, markup render link reoslving, sign-in/up/linkaccount page common data
  - Hide delete directory button for mirror or archive repository and disable the menu item if user have no permission
  - Update message severity colors, fix navbar double border
  - Inline and lazy-load EasyMDE CSS, fix border colors
  - Closed milestones with no issues now show as 100% completed
  - Add test for ExtendCommentTreePathLength migration and fix bugs
  - Only turn links to current instance into hash links
  - Fix typos in code comments: doesnt, dont, wont
* REFACTOR
  - Clean up and improve non-gitea js error filter
  - Always show owner/repo name in compare page dropdowns
  - Remove dead CSS rules
  - Replace Monaco with CodeMirror
  - Replace CSRF cookie with CrossOriginProtection
  - Replace index with id in actions routes
  - Remove unnecessary function parameter
  - Move jobparser from act repository to Gitea
  - Refactor compare router param parse
  - Optimize 'refreshAccesses' to perform update without removing then adding
  - Clean up checkbox cursor styles
  - Remove undocumented support of signing key in the repository git configuration file
  - Switch cmd/ to use constructor functions.
  - Use relative-time to render absolute dates
  - Some refactors about GetMergeBase
  - Some small refactors
  - Use gitRepo as parameter instead of repopath when invoking sign functions
  - Move blame to gitrepo
  - Move some functions to gitrepo package to reduce RepoPath reference directly
  - Use gitrepo's clone and push when possible
  - Remove mermaid margin workaround
  - Move some functions to gitrepo package
  - Move GetDiverging functions to gitrepo
  - Use global lock instead of status pool for cron lock
  - Use explicit mux instead of DefaultServeMux
  - Use gitrepo's push function
  - Pass request context to generateAdditionalHeadersForIssue
  - Move assign project when creating pull request to the same database transaction
  - Move catfile batch to a sub package of git module
  - Use gitrepo.Repository instead of wikipath
  - Use experimental go json v2 library
  - Refactor template render
  - Refactor GetRepoRawDiffForFile to avoid unnecessary pipe or goroutine
  - Refactor text utility classes to Tailwind CSS
  - Refactor git command stdio pipe
  - Refactor git command context & pipeline
  - Refactor git command stdio pipe
  - Remove unused functions
  - Refactor Actions Token Access
  - Move commit related functions to gitrepo package
  - Move archive function to repo_model and gitrepo
  - Move some functions to gitrepo package
  - Use git model to detect whether branch exist instead of gitrepo method
  - Some refactor for repo path
  - Extract helper functions from SearchIssues
  - Refactor merge conan and container auth preserve actions taskID
  - Refactor Nuget Auth to reuse Basic Auth Token Validation
  - Refactor ActionsTaskID
  - Refactor auth middleware
  - Refactor code render and render control chars
  - Clean up AppURL, remove legacy origin-url webcomponent
  - Remove util.URLJoin and replace all callers with direct path concatenation
  - Replace legacy tw-flex utility classes with flex-text-block/inline
  - Mark unused&immature activitypub as "not implemented"
* TESTING
  - Add e2e tests for server push events
  - Rework e2e tests
  - Add e2e reaction test, improve accessibility, enable parallel testing
  - Increase e2e test timeouts on CI to fix flaky tests
* BUILD
  - Upgrade go-git to v5.18.0
  - Replace rollup-plugin-license with rolldown-license-plugin
  - Bump min go version to 1.26.2
  - Convert locale files from ini to json format
  - Bump golangci-lint to 2.7.2, enable modernize stringsbuilder
  - Port away from flake-utils
  - Remove nolint
  - Update the Unlicense copy to latest version
  - Update to go 1.26.0 and golangci-lint 2.9.0
  - Replace google/go-licenses with custom generation
  - Update go dependencies
  - Bump appleboy/git-push-action from 1.0.0 to 1.2.0
  - Remove fomantic form module
  - Bump setup-node to v6, re-enable cache
  - Bump crowdin/github-action from 1 to 2
  - Revert "Bump alpine to 3.23"
  - Update chroma to v2.21.1
  - Bump astral-sh/setup-uv from 6 to 7
  - Bump docker/build-push-action from 5 to 6
  - Bump aws-actions/configure-aws-credentials from 4 to 5
  - Bump dev-hanz-ops/install-gh-cli-action from 0.1.0 to 0.2.1
  - Add JSON linting
  - Enable dependabot for actions
  - Bump alpine to 3.23
  - Update chroma to v2.21.0
  - Update JS deps and eslint enhancements
  - Update JS deps
  - update golangci-lint to v2.7.0
  - Update JS deps, fix deprecations
  - Update JS deps
  - Add toolchain directive to go.mod
  - Move gitea-vet to use go tool
  - Update to go 1.25.4
  - Enable TypeScript strictNullChecks
  - Enable vue/require-typed-ref eslint rule
  - Update JS dependencies
  - Move codeformat folder to tools
  - Update dependencies
  - Bump happy-dom from 20.0.0 to 20.0.2
  - Bump setup-go to v6
  - Update JS deps, misc tweaks
  - Bump happy-dom from 19.0.2 to 20.0.0
  - Use bundled version of spectral
  - Update JS and PY deps
  - Bump github.com/wneessen/go-mail from 0.6.2 to 0.7.1
  - Migrate from webpack to vite
  - Update JS dependencies and misc tweaks
  - Update to eslint 10
  - Optimize Docker build with dependency layer caching
  - Update JS deps
  - Update tool dependencies and fix new lint issues
  - Remove redundant linter rules
  - Move Fomantic dropdown CSS to custom module
  - Remove and forbid @ts-expect-error
  - Refactor git command stderr handling
  - Enable gocheckcompilerdirectives linter
  - Replace lint-go-gopls with additional govet linters
  - Update golangci-lint to v2.6.0
  - Misc tool tweaks
  - Add cache to container build
  - Upgrade vite
  - Update setup-uv to v8.0.0
  - Upgrade go-git to v5.17.2 and related dependencies
  - Raise minimum Node.js version to 22.18.0
  - Upgrade golang.org/x/image to v0.38.0
  - Update minimum go version to 1.26.1, golangci-lint to 2.11.2, fix test style
  - Enable eslint concurrency
  - Vendor relative-time-element as local web component
  - Update material-icon-theme v5.32.0
  - Update Go dependencies
  - Upgrade minimatch
  - Remove i18n backport tool at the moment because of translation format changed
  - Update emoji data for Unicode 16
  - Update JS dependencies, adjust webpack config, misc fixes
  - Update material-icon-theme to v5.31.0
  - Update JS and PY deps
  - Bump alpine to 3.23, add platforms to docker-dryrun
  - Update JS deps
  - Update goldmark to v1.7.16
  - Update chroma to v2.22.0
* DOCS
  - Update AI Contribution Policy
  - Update AGENTS.md with additional guidelines
  - Add missing cron tasks to example ini
  - Add AI Contribution Policy to CONTRIBUTING.md
  - Minor punctuation improvement in CONTRIBUTING.md
  - Add documentation for markdown anchor post-processing
* MISC
  - Correct spelling
  - Update Nix flake
  - Update Nix flake
  - Add valid github scopes
  - Update Nix flake
  - Update Nix flake
  - Update Nix flake
  - Update Nix flake


To generate a diff of this commit:
cvs rdiff -u -r1.138 -r1.139 pkgsrc/www/gitea/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/gitea/PLIST
cvs rdiff -u -r1.43 -r1.44 pkgsrc/www/gitea/distinfo
cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/gitea/go-modules.mk
cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/gitea/patches/patch-Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.