From 5424954b3fa0d5f9be21cfe0e46f2c957677008e Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Fri, 7 Aug 2026 03:15:22 +0000 Subject: [PATCH] upstream(gitea): note 1.27.1 patch release --- cc-ci-plan/upstream/gitea.md | 1 + 1 file changed, 1 insertion(+) diff --git a/cc-ci-plan/upstream/gitea.md b/cc-ci-plan/upstream/gitea.md index 8e17b92..6103ef4 100644 --- a/cc-ci-plan/upstream/gitea.md +++ b/cc-ci-plan/upstream/gitea.md @@ -15,3 +15,4 @@ - **1.26.2**: Multiple CVE security fixes — strongly recommended upgrade. - **1.26.3**: carries a regression (#38177 "context deadline exceeded" opening repo code pages) — upstream says upgrade straight to 1.26.4, skip 1.26.3. - **1.27.0** (released 2026-07-13, MINOR with BREAKING changes): `Feat(actions)!: improve support for reusable workflows` (#37478) and `Use Content-Security-Policy: script nonce` (#37232, may break custom inline JS / reverse-proxy CSP). Many security + feature additions. A dedicated minor-bump run should evaluate CSP / reusable-workflow impact before adopting. +- **1.27.1** (released 2026-07-27, PATCH): security fix (oauth2 mandatory 2FA enforcement on authorize/grant endpoints, #38606), API swagger alignment, diff-contrast enhancement, and many bugfixes (actions reusable-workflow/job-stranding, OIDC end-session, repo-deletion cleanup, webhook/mail). No breaking changes; safe patch bump from 1.27.0. Release notes: https://github.com/go-gitea/gitea/releases/tag/v1.27.1