Nicolas fedc9dc993 FIX: URL sanitization to handle schemeless credentials (#37440) ...

Fixes #37435

---------

Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: Claude (Opus 4.7) <noreply@anthropic.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
Co-authored-by: Giteabot <teabot@gitea.io>

2026-04-28 23:26:08 +08:00

..

actions

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

analyze

Fix incorrect vendored detections (#36508)

2026-02-01 10:35:51 +00:00

assetfs

Fix theme discovery and Vite dev server in dev mode (#37033)

2026-03-30 14:59:10 +00:00

auth

Update Go dependencies (#36781)

2026-04-01 11:26:52 +08:00

avatar

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

badge

Add flat-square action badge style (#34062)

2025-04-01 09:42:10 +00:00

base

Fix incorrect setting loading order (#36735)

2026-02-24 23:46:08 +08:00

cache

enforce explanation for necessary nolints and fix bugs (#34883)

2025-06-27 21:48:03 +08:00

cachegroup

Cache GPG keys, emails and users when list commits (#34086)

2025-04-09 16:34:38 +00:00

charset

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

commitstatus

Update Combine method to treat warnings as failures and adjust tests (#37048)

2026-03-31 17:22:18 +00:00

container

Refactor sidebar assignee&milestone&project selectors (#32465)

2024-11-11 04:07:54 +08:00

csv

Disable Field count validation of CSV viewer (#35228)

2025-09-04 09:54:58 -07:00

dump

fix: dump with default zip type produces uncompressed zip (#37401)

2026-04-24 14:35:15 +08:00

emoji

Update emoji data for Unicode 16 (#36596)

2026-02-12 21:39:36 +00:00

eventsource

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

fileicon

Add FOLDER_ICON_THEME configuration option (#36496)

2026-01-30 20:48:56 +00:00

generate

Remove error returns from crypto random helpers and callers (#37240)

2026-04-17 00:59:26 +08:00

git

FIX: URL sanitization to handle schemeless credentials (#37440)

2026-04-28 23:26:08 +08:00

gitrepo

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

glob

Replace gobwas/glob package (#35478)

2025-09-13 18:01:00 +00:00

globallock

Upgrade golang to 1.25.1 and add descriptions for the swagger structs' fields (#35418)

2025-09-06 16:52:41 +00:00

graceful

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

gtprof

Add start time on perf trace because it seems some steps haven't been recorded. (#35282)

2025-08-18 15:17:19 +00:00

hcaptcha

Clean up Makefile, tests and legacy code (#36638)

2026-02-19 01:23:32 +00:00

highlight

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

hostmatcher

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

htmlutil

Fix markup heading parsing, fix emphasis parsing (#36284)

2026-01-23 20:24:58 +00:00

httpcache

Refactor avatar package, support default avatar fallback (#36788)

2026-03-01 13:32:35 +00:00

httplib

Fix attachment Content-Security-Policy (#37455)

2026-04-28 01:29:09 +00:00

indexer

Improve control char rendering and escape button styling (#37094)

2026-04-06 11:07:33 +00:00

issue/template

Limit reading bytes instead of ReadAll (#35928)

2025-11-12 19:44:49 +08:00

json

Fix corrupted JSON caused by goccy library (#37214)

2026-04-14 14:00:20 +00:00

label

Run gopls modernize on codebase (#34751)

2025-06-18 01:48:09 +00:00

lfs

Feature non-zipped actions artifacts (action v7) (#36786)

2026-03-26 00:37:48 +08:00

lfstransfer

Correct spelling (#36783)

2026-02-28 11:23:20 -08:00

log

Refactor git command context & pipeline (#36406)

2026-01-21 01:35:14 +00:00

markup

refactor: serve site manifest via /assets/site-manifest.json endpoint (#37405)

2026-04-24 13:00:59 +00:00

mcaptcha

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

metrics

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

migration

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

nosql

Refactor git command context & pipeline (#36406)

2026-01-21 01:35:14 +00:00

optional

Fix API not persisting pull request unit config when has_pull_requests is not set (#36718)

2026-03-02 22:08:53 +00:00

options

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

packages

Swift registry metadata: preserve more JSON fields and accept empty metadata (#37254)

2026-04-18 04:16:26 +08:00

paginator

Only use prev and next buttons for pagination on user dashboard (#33981)

2025-03-23 19:52:43 +00:00

pprof

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

private

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

process

Refactor git command context & pipeline (#36406)

2026-01-21 01:35:14 +00:00

proxy

Replace gobwas/glob package (#35478)

2025-09-13 18:01:00 +00:00

proxyprotocol

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

public

Use MarkLongPolling instead of hard-coded route path (#37427)

2026-04-26 11:42:29 +00:00

queue

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

recaptcha

Fix URLJoin, markup render link reoslving, sign-in/up/linkaccount page common data (#36861)

2026-03-08 15:57:37 +00:00

references

Support closing keywords with URL references (#36221)

2025-12-27 09:05:24 -08:00

regexplru

Enable testifylint rules (#34075)

2025-03-31 01:53:48 -04:00

repository

feat: Add configurable permissions for Actions automatic tokens (#36173)

2026-03-21 15:39:47 -07:00

reqctx

Run gopls modernize on codebase (#34751)

2025-06-18 01:48:09 +00:00

secret

Upgrade golangci-lint to v1.64.5 (#33654)

2025-02-21 00:05:40 +08:00

session

Replace custom Go formatter with golangci-lint fmt (#37194)

2026-04-17 17:45:22 +00:00

setting

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

sitemap

Fix sitemap (#22272)

2022-12-30 23:31:00 +08:00

ssh

Update x/crypto package and make builtin SSH use default parameters (#34667)

2025-06-09 19:51:02 +00:00

storage

Remove dead code identified by deadcode tool (#37271)

2026-04-20 07:52:48 +00:00

structs

Add API endpoint to reply to pull request review comments (#36683)

2026-04-27 08:45:59 +00:00

svg

Add render cache for SVG icons (#36863)

2026-03-10 05:26:16 +00:00

system

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

tailmsg

Support performance trace (#32973)

2025-01-21 18:57:07 +00:00

tempdir

Address some CodeQL security concerns (#35572)

2025-10-04 01:21:26 +08:00

templates

Fix URL related escaping for oauth2 (#37334)

2026-04-21 23:58:32 +08:00

test

Add form-fetch-action to some forms, fix "fetch action" resp bug (#37305)

2026-04-20 18:58:44 +00:00

testlogger

Improve testing init, clean up webhook tests (#37412)

2026-04-25 18:55:18 +00:00

timeutil

Clean up Makefile, tests and legacy code (#36638)

2026-02-19 01:23:32 +00:00

translation

Fix various trivial problems (#36953)

2026-03-23 18:23:42 +00:00

turnstile

Add new captcha: cloudflare turnstile (#22369)

2023-02-05 15:29:03 +08:00

typesniffer

Feature non-zipped actions artifacts (action v7) (#36786)

2026-03-26 00:37:48 +08:00

updatechecker

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

uri

Implement FSFE REUSE for golang files (#21840)

2022-11-27 18:20:29 +00:00

user

Refactor older tests to use testify (#33140)

2025-01-09 09:21:47 +08:00

util

FIX: URL sanitization to handle schemeless credentials (#37440)

2026-04-28 23:26:08 +08:00

validation

Support for Custom URI Schemes in OAuth2 Redirect URIs (#37356)

2026-04-22 21:33:27 +00:00

web

Use MarkLongPolling instead of hard-coded route path (#37427)

2026-04-26 11:42:29 +00:00

webhook

actions: report commit status for pull_request_review events (#36589)

2026-02-20 16:12:22 +00:00

zstd

Refactor embedded assets and drop unnecessary dependencies (#34692)

2025-06-12 03:59:33 +00:00