22254f1b4f
Make JWT expiration time configurable
...
and drop attempt to set JWT header (golang-jwt/jwt does not seem to use TokenOptions ever)
2024-09-30 22:07:08 -07:00
006b0003b4
fix typos (singing key -> signing key)
2024-09-30 17:54:51 -07:00
a2e959dabb
add kid header to JWT
2024-09-30 14:47:46 -07:00
6c10f85fb5
fix query param
2024-09-30 11:11:41 -07:00
962d726bed
address linter concern
2024-09-30 11:04:23 -07:00
b14f3946e2
Use existing JWT signing key code
2024-09-30 09:11:45 -07:00
c024df7867
address additional linter concern
2024-09-29 16:58:23 -07:00
f8f47baf75
Address additional linter concern
2024-09-29 16:50:17 -07:00
b6b488ef54
address linter concern
2024-09-29 16:36:34 -07:00
a49d8b30c6
use rebased act
2024-09-29 16:36:34 -07:00
d91299d6d3
address linter concerns
2024-09-29 16:36:34 -07:00
6351ceaaee
only provide token to jobs with id-token: write permission
2024-09-29 16:36:33 -07:00
b265b40680
back to ed25519 keys
2024-09-29 16:35:23 -07:00
3d4ad65bbb
switch to RSA key to be in line with GitHub
2024-09-29 16:35:23 -07:00
481229ce60
fix ACTIONS_ID_TOKEN_REQUEST_URL
2024-09-29 16:35:23 -07:00
e4dfb8c1c7
inject the vars and secrets into the job - should be environment variables eventually
2024-09-29 16:35:22 -07:00
20af05b0c6
Add some TODOs
2024-09-29 16:35:22 -07:00
ebcf74ecbb
fix time-related jwt fields
2024-09-29 16:35:22 -07:00
7a94dac274
Fix router, other misc fixes found in local testing
2024-09-29 16:35:22 -07:00
2e3ffc5c07
fix paths and set jwt expiry time to match github's
2024-09-29 16:35:22 -07:00
84777880f2
wip job tokens
2024-09-29 16:35:22 -07:00
Otto
3a38dbac17
Merge pull request 'ci: Move preparations to local actions' ( #5410 ) from fnetx/ci-boilerplate into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5410
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
2024-09-29 23:16:13 +00:00
Earl Warren
cf56beb3f9
Merge pull request 'Update citation-js monorepo (forgejo)' ( #5395 ) from renovate/forgejo-citation-js-monorepo into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5395
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-09-29 10:02:41 +00:00
Earl Warren
ffed8ac7b4
Merge pull request 'Update module github.com/minio/minio-go/v7 to v7.0.77 (forgejo)' ( #5398 ) from renovate/forgejo-github.com-minio-minio-go-v7-7.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5398
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-09-29 09:26:54 +00:00
forgejo-renovate-action
1a90067754
Merge pull request 'Update dependency vue to v3.5.9 (forgejo)' ( #5402 ) from renovate/forgejo-patch-vue-monorepo into forgejo
2024-09-29 08:52:40 +00:00
Renovate Bot
1d5f8e5488
Update dependency vue to v3.5.10
2024-09-29 08:03:13 +00:00
Earl Warren
76a0dcd372
Merge pull request 'Update dependency webpack to v5.95.0 (forgejo)' ( #5411 ) from renovate/forgejo-webpack-5.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5411
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>
2024-09-29 06:46:03 +00:00
Otto Richter
1fa09d1621
Split Git package installation
2024-09-28 12:08:30 +02:00
Codeberg Translate
e40554f89b
i18n: update of translations from Codeberg Translate ( #5355 )
...
Co-authored-by: earl-warren <earl-warren@users.noreply.translate.codeberg.org>
Co-authored-by: Vaclovas Intas <Gateway_31@protonmail.com>
Co-authored-by: Zughy <Zughy@users.noreply.translate.codeberg.org>
Co-authored-by: aleksi <aleksi@users.noreply.translate.codeberg.org>
Co-authored-by: Application-Maker <Application-Maker@users.noreply.translate.codeberg.org>
Co-authored-by: Salif Mehmed <mail@salif.eu>
Co-authored-by: 0ko <0ko@users.noreply.translate.codeberg.org>
Co-authored-by: Fjuro <fjuro@alius.cz>
Co-authored-by: Panagiotis \"Ivory\" Vasilopoulos <git@n0toose.net>
Co-authored-by: claudep <claudep@users.noreply.translate.codeberg.org>
Co-authored-by: vri <vri@users.noreply.translate.codeberg.org>
Co-authored-by: nicokaiser <nicokaiser@users.noreply.translate.codeberg.org>
Co-authored-by: Outbreak2096 <Outbreak2096@users.noreply.translate.codeberg.org>
Co-authored-by: robines <robines@users.noreply.translate.codeberg.org>
Co-authored-by: nazrin <nazrin@users.noreply.translate.codeberg.org>
Co-authored-by: Kaede Fujisaki <ledyba@users.noreply.translate.codeberg.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5355
Reviewed-by: 0ko <0ko@noreply.codeberg.org>
Co-authored-by: Codeberg Translate <translate@noreply.codeberg.org>
Co-committed-by: Codeberg Translate <translate@noreply.codeberg.org>
2024-09-28 09:40:29 +00:00
Renovate Bot
735bcf978f
Update dependency webpack to v5.95.0
2024-09-28 00:02:39 +00:00
Otto Richter
c0b17a06ef
Split backend building boilerplate
2024-09-27 20:47:35 +02:00
Otto Richter
5b84756137
Split env preparation boilerplate
2024-09-27 20:47:35 +02:00
Exploding Dragon
89742c4913
feat: add architecture-specific removal support for arch package ( #5351 )
...
- [x] add architecture-specific removal support
- [x] Fix upload competition
- [x] Fix not checking input when downloading
docs: https://codeberg.org/forgejo/docs/pulls/874
### Release notes
- [ ] I do not want this change to show in the release notes.
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5351
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Exploding Dragon <explodingfkl@gmail.com>
Co-committed-by: Exploding Dragon <explodingfkl@gmail.com>
2024-09-27 08:21:22 +00:00
Earl Warren
89d9307d56
Merge pull request '[gitea] week 2024-39 cherry pick (gitea/main -> forgejo)' ( #5372 ) from earl-warren/wcp/2024-39 into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5372
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-09-27 08:12:43 +00:00
forgejo-renovate-action
40a68aa8f8
Merge pull request 'Update dependency markdownlint-cli to v0.42.0 (forgejo)' ( #5405 ) from renovate/forgejo-markdownlint-cli-0.x into forgejo
2024-09-27 08:09:55 +00:00
forgejo-renovate-action
84b96a7343
Merge pull request 'Update dependency @stylistic/stylelint-plugin to v3.1.0 (forgejo)' ( #5403 ) from renovate/forgejo-stylistic-stylelint-plugin-3.x into forgejo
2024-09-27 08:09:26 +00:00
forgejo-renovate-action
9ec57761f9
Merge pull request 'Update dependency @vitest/eslint-plugin to v1.1.4 (forgejo)' ( #5404 ) from renovate/forgejo-vitest-eslint-plugin-1.x into forgejo
2024-09-27 08:08:53 +00:00
Earl Warren
e3deb88a8d
chore(release-notes): weekly cherry-pick week 2024-39
2024-09-27 08:47:23 +02:00
Lunny Xiao
2ffb08bb88
Use camo.Always instead of camo.Allways ( #32097 )
...
Fix #31575
https://gitea.com/gitea/docs/pulls/73
(cherry picked from commit 8e2dd5d3ddfb442937c79f05df88d18b856952cb)
2024-09-27 08:45:55 +02:00
Jamie Schouten
9d34731198
Add bin to Composer Metadata ( #32099 )
...
This PR addresses the missing `bin` field in Composer metadata, which
currently causes vendor-provided binaries to not be symlinked to
`vendor/bin` during installation.
In the current implementation, running `composer install` does not
publish the binaries, leading to issues where expected binaries are not
available.
By properly declaring the `bin` field, this PR ensures that binaries are
correctly symlinked upon installation, as described in the [Composer
documentation](https://getcomposer.org/doc/articles/vendor-binaries.md ).
(cherry picked from commit d351a42494e71b5e2da63302c2f9b46c78e6dbde)
2024-09-27 08:42:48 +02:00
Lunny Xiao
f709de2403
Fix wrong last modify time ( #32102 )
...
(cherry picked from commit a802508f88e546bf18990559e44bf27a09c869ee)
2024-09-27 08:42:48 +02:00
Timon van der Berg
2675a24649
Repo Activity: count new issues that were closed ( #31776 )
...
I'm new to go and contributing to gitea, your guidance is much
appreciated.
This is meant to solve https://github.com/go-gitea/gitea/issues/13309
Previously, closed issues would not be shown under new issues in the
activity tab, even if they were newly created.
changes:
* Split out newlyCreatedIssues from issuesForActivityStatement to count
both currently open and closed issues.
* Use a seperate function to count active issues to prevent
double-counting issues after the above change.
Result is that new issues that have been closed are shown both under
"new" and "closed".
Signed-off-by: Timon van der Berg <tmnvanderberg@gmail.com>
(cherry picked from commit ebfde845294cc681de6b1fe1adcf27e35f61b89b)
2024-09-27 08:42:48 +02:00
KN4CK3R
526054332a
Fix incorrect /tokens api ( #32085 )
...
Fixes #32078
- Add missing scopes output.
- Disallow empty scope.
---------
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
(cherry picked from commit 08adbc468f8875fd4763c3656b334203c11adc0a)
2024-09-27 08:42:48 +02:00
Earl Warren
6275d1bc50
Refactor CSRF protector ( #32057 ) (fix forgejo tests)
...
Fix the tests unique to Forgejo that are impacted by the refactor.
2024-09-27 08:42:48 +02:00
wxiaoguang
1ae3b127fc
Refactor CSRF protector ( #32057 )
...
Remove unused CSRF options, decouple "new csrf protector" and "prepare"
logic, do not redirect to home page if CSRF validation falis (it
shouldn't happen in daily usage, if it happens, redirecting to home
doesn't help either but just makes the problem more complex for "fetch")
(cherry picked from commit 1fede04b83288d8a91304a83b7601699bb5cba04)
Conflicts:
options/locale/locale_en-US.ini
tests/integration/repo_branch_test.go
trivial context conflicts
2024-09-27 08:42:48 +02:00
Earl Warren
1bdf334844
feat: add IfZero utility function
...
(cherry picked from commit 43de021ac1ca017212ec75fd88a8a80a9db27c4c)
2024-09-27 08:42:48 +02:00
Renovate Bot
70014a7bc9
Update dependency markdownlint-cli to v0.42.0
2024-09-27 02:03:21 +00:00
Renovate Bot
757080addd
Update dependency @vitest/eslint-plugin to v1.1.4
2024-09-27 02:03:09 +00:00
Renovate Bot
d000993905
Update dependency @stylistic/stylelint-plugin to v3.1.0
2024-09-27 00:04:48 +00:00
Gusted
5e342c6fa7
Merge pull request 'Update module github.com/klauspost/compress to v1.17.10 (forgejo)' ( #5397 ) from renovate/forgejo-github.com-klauspost-compress-1.x into forgejo
...
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/5397
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
2024-09-26 14:55:51 +00:00
