Shivansh Garg 0081bd8430 fix(actions): bound request body size in artifacts v4 twirp handlers (#39818) ...

parseProtobufBody read the full Twirp request body via io.ReadAll with
no size limit, allowing an authenticated runner token holder to force
unbounded memory allocation. Cap it at 1 MiB via io.LimitReader,
matching the existing pattern in job_summary.go.

Fixes https://github.com/go-gitea/gitea/issues/39814

2026-10-17 10:40:04 +00:00

..

actions

fix(actions): bound request body size in artifacts v4 twirp handlers (#39818)

2026-10-17 10:40:04 +00:00

packages

fix: optimize packages upload memory (#39366)

2026-10-17 06:10:04 +00:00

v1

perf(actions): batch per-row queries in run, job and cancellation paths (#39723)

2026-10-17 09:47:17 +02:00