forgejo/release-notes-published/11.0.8.md
forgejo-release-manager 74926bdbea chore(release-notes): Forgejo v11.0.8 (#10201)
https://codeberg.org/forgejo/forgejo/milestone/29558
Co-authored-by: 0ko <0ko@noreply.codeberg.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/10201
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Co-authored-by: forgejo-release-manager <contact-forgejo-release-manager@forgejo.org>
Co-committed-by: forgejo-release-manager <contact-forgejo-release-manager@forgejo.org>
2025-11-21 12:02:51 +01:00

3.4 KiB

Release notes

  • Security bug fixes
    • PR: fix(api): fix dependency repo perms in Create/RemoveIssueDependency
    • PR: fix(api): draft releases could be read before being published
    • PR: misconfigured security checks on tag delete web form
    • PR: incorrect logic in "Update PR" did not enforce head branch protection rules correctly
    • PR: issue owner can delete another user's comment's edit history on same issue
    • PR: tag protection rules can be bypassed during tag delete operation
  • Included for completeness but not user-facing (chores, etc.)
    • PR: fix: frontend-checks failure
    • PR: Update dependency @playwright/test to v1.56.1 (v11.0/forgejo)
    • PR: chore: pin node version
    • PR: Update module golang.org/x/crypto to v0.45.0 (v11.0/forgejo)
    • PR: Update module golang.org/x/crypto to v0.44.0 (v11.0/forgejo)
    • PR: feat: Replace mholt/archiver/v3 with mholt/archives (#7025)