Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package forgejo for openSUSE:Factory checked in at 2026-07-26 11:28:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/forgejo (Old) and /work/SRC/openSUSE:Factory/.forgejo.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "forgejo" Sun Jul 26 11:28:23 2026 rev:47 rq:1367691 version:16.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/forgejo/forgejo.changes 2026-06-11 17:30:25.218028003 +0200 +++ /work/SRC/openSUSE:Factory/.forgejo.new.2004/forgejo.changes 2026-07-26 11:31:26.608838530 +0200 @@ -1,0 +2,230 @@ +Tue Jul 21 12:49:38 UTC 2026 - Johannes Kastl <[email protected]> + +- update to 16.0.1: + * User Interface bug fixes + - PR (backported): fix(ui): use rtl alignment for options + dropdown in actions list + - PR (backported): fix: query the correct form for wiki editing + * Bug fixes + - PR (backported): fix: Initialize oauth2 only if enabled + (#13483) + - PR (backported): fix: allow OAuth access tokens to access LFS + endpoints + - PR (backported): fix: make assignment of projects to issues + consistent + * Included for completeness but not user-facing (chores, etc.) + - PR: Update module code.forgejo.org/forgejo/runner/v12 to + v12.13.1 (v16.0/forgejo) + +------------------------------------------------------------------- +Tue Jul 21 12:20:21 UTC 2026 - Johannes Kastl <[email protected]> + +- update to 16.0.0: + https://forgejo.org/2026-07-release-v16-0/ + Git hooks are now stored in a centralized location instead of + being duplicated in every repository, and Git hook example files + are no longer generated for new repositories. While a + backwards-compatible change, your instance can benefit from + following an upgrade guide to clean up these files for the + existing repositories. As always, make sure you to have a usable + backup before upgrading! + Full changelog: + https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.0.md + * Breaking security bug fixes + - PR: Improved compliance with the config settings + [migrations].ALLOWED_DOMAINS, [migrations].BLOCKED_DOMAINS, + and [migrations].ALLOW_LOCALNETWORKS, which control the + remotes that Forgejo can access for git & LFS migration and + mirroring operations, fixing time-of-check vs. time-of-use + issue and missing checks in LFS. git mirror HTTP operations + have been adjusted to never follow HTTP redirects in order to + ensure that these settings are followed, which will break + HTTP mirroring if a redirect is served by the git HTTP + remote. + * Security bug fixes + - PR (backported): fix: ensure migrations allow/deny host lists + are applied to onedev, pagure, and codebase migrators + * Breaking bug fixes + - PR: use proper ${{ forgejo.ref }} in scheduled workflows + - PR: return API URL in the url field for pull requests using + the API + * User Interface features + - PR: enh: add suggestion to document reason for repository + archival + - PR: add nix highlighting to file editor + - PR: improve checkboxes + - PR: in-browser validation of website URLs for user, + repository, and organization profiles + - PR: feat(ui): mention quote searching and search docs in + search syntax popup + - PR: feat(ui): commit view redesign for pull request page + - PR: feat(ui): modernize hidden comment types checkboxes in + appearance settings + - PR: add hint to disable the "Enable more" units hint + - PR: show progress of issues and PRs migrations + - PR (backported): OSC 8 hyperlink escape sequences emitted by + Forgejo Actions jobs are rendered as clickable links in the + job log. + - PR: improve visibility of mismatched repository & package + visibility + - PR: feat(ui): provide ability to add a warning message to the + registration/login screens + - PR: show automerge if only one merge strategy is available + - PR: feat(ui): Support Pandoc style code blocks + - PR: migrate show-modal to native dialogs + - PR: render org-mode file links with line numbers + - PR: add missing tooltips in lfs_pointers.tmpl + - PR: show breadcrumb path in path filtered commit history view + - PR: feat(ui): Fix comma separated attributes in code blocks + language preventing syntax-highlighting + - PR: add admin views for federation configuration, hosts and + users + * User Interface bug fixes + - PR (backported): fix(ui): be able to edit a comment if + attachment is disabled + - PR: paginate list of repositories in a team + - PR (backported): fix: honor format="duration" on + - PR (backported): fix(ui): fix markdown editor monospace + preference in pages with multiple editors + - PR: switch search syntax modal from table to grid + - PR: fix(ui): absolute-date: wrong selection color + - PR: fix(ui): fall back to default theme from non-existent + - PR: fix(ui): adjust distances and remove a divider in the + issue sidebar + - PR: enable "Add more..." unit hint for new users + - PR: emoji's should not render in inline code blocks in issue + lists + - PR: fix(web): org projects assignment in issue view + - PR: fix(ui): fix and simplify org invite template view + - PR: fix(ui): use tab width from .editorconfig when editing + files + * Localization + - Translations updates from Codeberg Translate: !12728, !12284, + !12128, !11810, !11963, !13460 (backport of !13166) + * Features + - PR: Allow filtering for 2fa enabled users via + /api/v1/admin/users + - PR: apply service.VALID_SITE_URL_SCHEMES to repository and + organization profiles + - PR: add /actions/runs/{id}/jobs + - PR: Add code search with zoekt support + - PR: replace repository based server-side hooks with + centralised hooks. Migration guide is available in Admin + docs. + - PR: feat(api,ui): add multiline comment on pullrequest + - PR: feat(api): add REST API endpoints for Actions artifacts + - PR: The REST API can now download action logs: GET + /repos/{owner}/{repo}/actions/jobs/{job_id}/logs returns + plaintext for a single job (supports HTTP Range: and + ?step=N), and GET + /repos/{owner}/{repo}/actions/runs/{run_id}/logs streams a + zip of every job's logs in the run. + - PR: prevent default git templates to be created when + initialising a new repository. Migration guide is available + in Admin docs. + - PR: feat(api): include creation time in Organization API type + - PR: serve downsized versions of avatars + - PR (backported): feat: granular settings for watched repo + units + - PR: evaluate action job's if on the server-side when possible + - PR: add warnings for usage of unsupported permissions: in + Actions workflows + - PR: enable manual prioritization of workflow runs + - PR: setting to add team members by invitations + - PR: adds option to force overwrite new branch for /contents + route + - PR: feat(api): add new + /repos/{owner}/{repo}/actions/runs/{run_id}/cancel API + endpoint + - PR: add dynamic group mappings for OIDC + - PR: Update Microsoft Teams webhook to use AdaptiveCard + - PR: fsck incoming objects + - PR: add /api/v1/actions/run endpoint + - PR: Allow forgejo users to follow remote users and display + federated notes. This feature is still missing some some + other basic features for "production use": there is no + moderation support, UI for following federated users, and + federation is still limited to forgejo, Mastodon, and + GoToSocial. + - PR: feat(api): add base and head query filters to list pull + requests endpoint + - PR: mark skipped checks as skipped + - PR: "Add member" button in org members list + - PR: expose API fields for ssh keys (#12517) + - PR: expose access token creation date in API responses + - PR: expose AGit topic branch in API PR head label + - PR: add option to use preferred_username claim when + registering users via oauth2 + - PR: persist OAuth2/OIDC sign-in via IdP re-validation + - PR: feat(api): add admin routes to manage user access tokens + - PR: make it possible to remove workflow runs + - PR: Hosted PyPI packages may be accessed via the simple JSON + API in addition to the simple HTML API already available. + - PR: add CLI command 'admin user + create-authorized-integration' + - PR: Improve repo file list table semantics for screen readers + (second attempt) + - PR: Improve repo file list table semantics for screen readers + - PR: support timezone in scheduled workflows + * Bug fixes + - PR: apply signed-merge checks by merge style + - PR (backported): fix: don't terminate subprocesses when SSH + connection is closed (internal SSH) + - PR (backported): fix: stop condition for github issue + pagination + - PR (backported): fix: only expand recognized variables when + generating repo + - PR (backported): fix: use net.JoinHostPort for joining acme + host and port + - PR: schedules re-registration after changing default branch + - PR: remove no-transform in Cache-Control header + - PR (backported): fix: detect schedules after merge if merged + branch remains + - PR: adjust workflow link for pull_request_target workflow + runs + - PR: remove duplicate indexes in package_blob table + - PR (backported): fix(api): return empty slice instead of null + from the branches API if the repository is empty + - PR: display code comments on removed lines-of-code to correct + locations in PR view + - PR: when reviewing in PRs, make comments relative to the + visible code's commit + - PR: when reviewing in PRs, make comments relative to viewed + base & head, not just viewed head + - PR: relocate PR review comments using git blame --reverse, + improving comment placement + - PR: mark code comments as Outdated based upon line-of-code + existence in current PR commit + - PR (backported): fix: archiver: also check valid commit ids + for existence + - PR (backported): fix: Update swift package registry to use + the metadata schema from the official Swift docs (#12200) + - PR: fix(ui): URL-encode login provider name in the href + attribute + * User Interface changes without a feature or bug label + - PR: fix(ui): dedup, fix, improve various strings + - PR: add "Forgejo Actions (Local)" authorized integration UI + - PR: chore: enforce RTL-friendly logical CSS properties with a + linter + - PR: feat(ui): view authorized integrations with generic view + * Other changes without a feature or bug label + - PR: chore: Update Zig gitignore + - PR: chore: remove EXIF stripping capability due to usage of + AGPL licensed exif-terminator library + - PR: correcting referrer policy in HTML <meta> tag + - PR: Configuration of JSON Web Token (JWT) signing secrets in + the app.ini file has been unified: [pfx]SIGNING_ALGORITHM + determines the algorithm, [pfx]SECRET is a literal secret for + symmetric algorithms, [pfx]SECRET_URI is the file: uri of a + secret for symmetric algorithms [pfx]SIGNING_PRIVATE_KEY_FILE + is the file with a private key for asymmetric algorithms. For + the following configuration keys, the existing behavior is + preserved: [oauth2] pfx = JWT_, [actions] pfx = ID_TOKEN_ + only supports asymmetric algorithms. [server] pfx = LFS_JWT_ + gained support for asymmetric algorithms. For consistency + with [pfx]SIGNING_PRIVATE_KEY_FILE, [pfx]SECRET_URI now also + accepts relative paths. + - PR: fix(api): package name in route not properly unescaped +- rebase patch custom-app.ini.patch + +------------------------------------------------------------------- Old: ---- forgejo-src-15.0.3.tar.gz forgejo-src-15.0.3.tar.gz.asc New: ---- forgejo-src-16.0.1.tar.gz forgejo-src-16.0.1.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ forgejo.spec ++++++ --- /var/tmp/diff_new_pack.cW5frB/_old 2026-07-26 11:31:41.909368529 +0200 +++ /var/tmp/diff_new_pack.cW5frB/_new 2026-07-26 11:31:41.913368669 +0200 @@ -25,7 +25,7 @@ %bcond_without apparmor %endif Name: forgejo -Version: 15.0.3 +Version: 16.0.1 Release: 0 Summary: Self-hostable forge License: GPL-3.0-or-later @@ -34,7 +34,7 @@ Source0: https://codeberg.org/forgejo/forgejo/releases/download/v%{version}/forgejo-src-%{version}.tar.gz Source1: https://codeberg.org/forgejo/forgejo/releases/download/v%{version}/forgejo-src-%{version}.tar.gz.asc Source2: https://keys.openpgp.org/vks/v1/by-fingerprint/EB114F5E6C0DC2BCDD183550A4B61A2DC5923710#/forgejo.keyring -Source3: package-lock.json +Source3: https://codeberg.org/forgejo/forgejo/raw/tag/v%{version}/package-lock.json Source4: node_modules.spec.inc %include %{_sourcedir}/node_modules.spec.inc Source5: forgejo.service ++++++ _service ++++++ --- /var/tmp/diff_new_pack.cW5frB/_old 2026-07-26 11:31:41.961370346 +0200 +++ /var/tmp/diff_new_pack.cW5frB/_new 2026-07-26 11:31:41.969370626 +0200 @@ -1,10 +1,6 @@ <?xml version="1.0" ?> <services> - <service name="download_files" mode="manual" /> - <service name="extract_file" mode="manual"> - <param name="archive">forgejo-src-*.tar.gz</param> - <param name="files">forgejo-src-*/package-lock.json</param> - </service> + <service name="download_files" mode="manual"/> <service name="node_modules" mode="manual"> <param name="cpio">node_modules.obscpio</param> <param name="output">node_modules.spec.inc</param> ++++++ custom-app.ini.patch ++++++ --- /var/tmp/diff_new_pack.cW5frB/_old 2026-07-26 11:31:41.981371045 +0200 +++ /var/tmp/diff_new_pack.cW5frB/_new 2026-07-26 11:31:41.985371185 +0200 @@ -1,6 +1,8 @@ ---- forgejo-src-15.0.1/custom/conf/app.example.ini 2026-04-29 13:05:29.000000000 +0200 -+++ forgejo-src-15.0.1-patched/custom/conf/app.example.ini 2026-05-02 14:41:22.869317792 +0200 -@@ -51,7 +51,7 @@ +diff --git a/custom/conf/app.example.ini b/custom/conf/app.example.ini +index c0f007d601..5df2cb42ce 100644 +--- a/custom/conf/app.example.ini ++++ b/custom/conf/app.example.ini +@@ -51,7 +51,7 @@ APP_NAME = ; Forgejo: Beyond coding. We Forge. ;APP_DISPLAY_NAME_FORMAT = {APP_NAME}: {APP_SLOGAN} ;; ;; RUN_USER will automatically detect the current user - but you can set it here change it if you run locally @@ -9,7 +11,7 @@ ;; ;; Application run mode, affects performance and debugging: "dev" or "prod", default is "prod" ;; Mode "dev" makes Forgejo easier to develop and debug, values other than "dev" are treated as "prod" which is for production use. -@@ -284,15 +284,15 @@ +@@ -284,15 +284,15 @@ RUN_USER = ; git ;; $ openssl pkcs12 -in cert.pfx -out cert.pem -nokeys ;; $ openssl pkcs12 -in cert.pfx -out key.pem -nocerts -nodes ;; Paths are relative to CUSTOM_PATH @@ -29,7 +31,7 @@ ;; ;; Enable gzip compression for runtime-generated content, static resources excluded ;ENABLE_GZIP = false -@@ -303,7 +303,7 @@ +@@ -303,7 +303,7 @@ RUN_USER = ; git ;ENABLE_PPROF = false ;; ;; PPROF_DATA_PATH, use an absolute path when you start Forgejo as service @@ -38,7 +40,7 @@ ;; ;; Landing page, can be "home", "explore", "organizations", "login", or any URL such as "/org/repo" or even "https://anotherwebsite.com"; ;; The "login" choice is not a security measure but just a UI flow change, use REQUIRE_SIGNIN_VIEW to force users to log in. -@@ -370,7 +370,7 @@ +@@ -373,7 +373,7 @@ DB_TYPE = sqlite3 ;; ;DB_TYPE = mysql ;HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock @@ -47,7 +49,7 @@ ;USER = root ;PASSWD = ;Use PASSWD = `your password` for quoting if you use special characters in the password. ;; Alternative location to specify mysql password. You cannot specify both this and PASSWD, and must pick one -@@ -384,7 +384,7 @@ +@@ -387,7 +387,7 @@ DB_TYPE = sqlite3 ;; ;DB_TYPE = postgres ;HOST = 127.0.0.1:5432 ; can use socket e.g. /var/run/postgresql/ @@ -56,7 +58,7 @@ ;USER = root ;PASSWD = ;; Alternative location to specify postgres password. You cannot specify both this and PASSWD, and must pick one -@@ -577,14 +577,14 @@ +@@ -581,14 +581,14 @@ ENABLED = true ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;; Root path for the log files - defaults to %(GITEA_WORK_DIR)/log @@ -73,7 +75,7 @@ ;; ;; Either "Trace", "Debug", "Info", "Warn", "Error" or "None", default is "Info" LEVEL = Info -@@ -959,7 +959,7 @@ +@@ -959,7 +959,7 @@ LEVEL = Info ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;; Root path for storing all repository data. By default, it is set to %(APP_DATA_PATH)s/gitea-repositories. ;; A relative path is interpreted as _`AppWorkPath`_/%(ROOT)s @@ -82,7 +84,7 @@ ;; ;; The script type this server supports. Usually this is `bash`, but some users report that only `sh` is available. ;SCRIPT_TYPE = bash -@@ -1085,7 +1085,7 @@ +@@ -1085,7 +1085,7 @@ LEVEL = Info ;ENABLED = true ;; ;; Path for uploads. Defaults to `data/tmp/uploads` (content gets deleted on Forgejo restart) @@ -91,7 +93,7 @@ ;; ;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. ;ALLOWED_TYPES = -@@ -1458,7 +1458,7 @@ +@@ -1461,7 +1461,7 @@ LEVEL = Info ;ISSUE_INDEXER_TYPE = bleve ;; ;; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve @@ -100,16 +102,15 @@ ;; ;; Issue indexer connection string, available when ISSUE_INDEXER_TYPE is elasticsearch (e.g. http://elastic:password@localhost:9200) or meilisearch (e.g. http://:apikey@localhost:7700) ;ISSUE_INDEXER_CONN_STR = -@@ -1485,7 +1485,7 @@ - ;REPO_INDEXER_TYPE = bleve +@@ -1489,6 +1489,7 @@ LEVEL = Info ;; - ;; Index file used for code search. available when `REPO_INDEXER_TYPE` is bleve --;REPO_INDEXER_PATH = indexers/repos.bleve + ;; Index file used for code search. available when `REPO_INDEXER_TYPE` is bleve or zoekt + ;REPO_INDEXER_PATH = indexers/repos.bleve +REPO_INDEXER_PATH = /var/lib/forgejo/indexers.bleve ;; ;; Code indexer connection string, available when `REPO_INDEXER_TYPE` is elasticsearch. i.e. http://elastic:changeme@localhost:9200 ;REPO_INDEXER_CONN_STR = -@@ -1523,7 +1523,7 @@ +@@ -1526,7 +1527,7 @@ LEVEL = Info ;TYPE = persistable-channel ;; ;; data-dir for storing persistable queues and level queues, individual queues will default to `queues/common` meaning the queue is shared. @@ -118,7 +119,7 @@ ;; ;; Default queue length before a channel queue will block ;LENGTH = 100000 -@@ -1892,7 +1892,7 @@ +@@ -1895,7 +1896,7 @@ LEVEL = Info ;; file: session file path, e.g. `data/sessions` ;; redis: `redis://127.0.0.1:6379/0?pool_size=100&idle_timeout=180s` (or `redis+cluster://127.0.0.1:6379/0?pool_size=100&idle_timeout=180s` for a Redis cluster) ;; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table` @@ -127,7 +128,7 @@ ;; ;; Session cookie name ;COOKIE_NAME = session -@@ -1979,7 +1979,7 @@ +@@ -1982,7 +1983,7 @@ LEVEL = Info ;; ;; Path for attachments. Defaults to `attachments`. Only available when STORAGE_TYPE is `local` ;; Relative paths will be resolved to `${AppDataPath}/${attachment.PATH}` @@ -136,7 +137,7 @@ ;; ;; Minio endpoint to connect only available when STORAGE_TYPE is `minio` ;MINIO_ENDPOINT = localhost:9000 -@@ -2005,7 +2005,7 @@ +@@ -2008,7 +2009,7 @@ LEVEL = Info ;MINIO_LOCATION = us-east-1 ;; ;; Minio base path on the bucket only available when STORAGE_TYPE is `minio` @@ -145,7 +146,7 @@ ;; ;; Minio enabled ssl only available when STORAGE_TYPE is `minio` ;MINIO_USE_SSL = false -@@ -2598,10 +2598,10 @@ +@@ -2601,10 +2602,10 @@ LEVEL = Info ;; ;STORAGE_TYPE = local ;; override the minio base path if storage type is minio @@ -158,7 +159,7 @@ ;; ;; Maximum count of package versions a single owner can have (`-1` means no limits) ;LIMIT_TOTAL_OWNER_COUNT = -1 -@@ -2670,10 +2670,10 @@ +@@ -2673,10 +2674,10 @@ LEVEL = Info ;STORAGE_TYPE = local ;; ;; Where your lfs files reside, default is data/lfs. @@ -171,7 +172,7 @@ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; -@@ -2693,10 +2693,10 @@ +@@ -2696,10 +2697,10 @@ LEVEL = Info ;STORAGE_TYPE = local ;; ;; Where your lfs files reside, default is data/lfs. @@ -184,4 +185,7 @@ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +-- +2.54.0 + ++++++ forgejo-src-15.0.3.tar.gz -> forgejo-src-16.0.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/forgejo/forgejo-src-15.0.3.tar.gz /work/SRC/openSUSE:Factory/.forgejo.new.2004/forgejo-src-16.0.1.tar.gz differ: char 15, line 1 ++++++ node_modules.obscpio ++++++ /work/SRC/openSUSE:Factory/forgejo/node_modules.obscpio /work/SRC/openSUSE:Factory/.forgejo.new.2004/node_modules.obscpio differ: char 8590, line 29 ++++++ node_modules.spec.inc ++++++ ++++ 2219 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/forgejo/node_modules.spec.inc ++++ and /work/SRC/openSUSE:Factory/.forgejo.new.2004/node_modules.spec.inc ++++++ package-lock.json ++++++ ++++ 7578 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/forgejo/package-lock.json ++++ and /work/SRC/openSUSE:Factory/.forgejo.new.2004/package-lock.json
