chore: merge upstream main (BREAKING CHANGE: remove forgejo) into upgrade branch
cc-ci/testme cc-ci: success
cc-ci/testme cc-ci: success
The upgrade branch was cut before upstream's forgejo removal, so its tree (and the !testme run that verified it) did not reflect what would actually deploy. Merging upstream in brings the branch current; the gitea 1.27.1-rootless bump — which fixes CVE-2026-60004 and CVE-2026-59774 (both CVSS 9.8) — is unchanged.
This commit is contained in: