Shivansh Garg 0081bd8430 fix(actions): bound request body size in artifacts v4 twirp handlers (#39818) ...

parseProtobufBody read the full Twirp request body via io.ReadAll with
no size limit, allowing an authenticated runner token holder to force
unbounded memory allocation. Cap it at 1 MiB via io.LimitReader,
matching the existing pattern in job_summary.go.

Fixes https://github.com/go-gitea/gitea/issues/39814

2026-10-17 10:40:04 +00:00

..

ping

refactor: use the shared workflow model from actionslib (#38768)

2026-08-07 20:56:40 -07:00

runner

fix(actions): return 401 for unregistered runner (#39578)

2026-10-04 10:28:32 +00:00

actions.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

artifact.pb.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

artifact.proto

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

artifacts_chunks.go

refactor(actions): small cleanups across models, services and routers (#39722)

2026-10-10 12:55:28 +00:00

artifacts_utils.go

chore: misc go 1.27 tweaks (#39069)

2026-08-24 18:26:10 +00:00

artifacts.go

fix(httplib): prevent leaking localhost:3000 in public links (#39217)

2026-09-02 19:32:33 +00:00

artifactsv4.go

fix(actions): bound request body size in artifacts v4 twirp handlers (#39818)

2026-10-17 10:40:04 +00:00

job_summary.go

enhance(actions): show the steps the runner reports (#39720)

2026-10-12 22:36:25 +02:00