recipe-maintainers/gitea
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

chore: upgrade gitea to 1.27.2-rootless, postgres to 15.19 #7

Closed
autonomic-bot wants to merge 0 commits from upgrade-2f64ddf into main
pull from: upgrade-2f64ddf
merge into: :main
Conversation 2 Commits - Files Changed -
+2 -2
autonomic-bot commented 2026-08-14 02:41:03 +00:00
Owner
Copy Link
Copy Source

Upgrade

Service Image Current New
app gitea/gitea 1.27.1-rootless 1.27.2-rootless
db postgres 15.18 15.19

Upstream release notes:

Recommended release command: abra recipe release gitea -z

Advisory scan

CVEs fixed by this upgrade: 0 identified by the deterministic scan (all 74 gitea CVEs + 2 critical CVEs from 1.27.1, CVE-2026-59774 and CVE-2026-60004, fall outside the 1.27.1→1.27.2 window; 1 unjudged: CVE-2025-68939 STILL-UNKNOWN). Postgres 15.19 fixes 20+ documented CVEs. Gitea 1.27.2 release notes list 7 SECURITY-tagged items (CVE IDs not yet assigned/disclosed).

Dev deploy

Deployed and verified on cc-ci (dev-gitea.ci.commoninternet.net): gitea 1.27.2 starts cleanly, serves healthchecks, no crash loops, no migration errors. Teardown completed.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## Upgrade | Service | Image | Current | New | |---|---|---|---| | app | gitea/gitea | 1.27.1-rootless | 1.27.2-rootless | | db | postgres | 15.18 | 15.19 | **Upstream release notes:** - gitea/gitea 1.27.1→1.27.2: https://github.com/go-gitea/gitea/releases/tag/v1.27.2 (SECURITY: collaborator access mode fix, external render refactor, pull_request_target reusable workflow fix, markup render refactor, WebAuthn user verification, render highlight fix + large batch of bugfixes) - postgres 15.18→15.19: https://www.postgresql.org/docs/release/15.19/ (20+ CVEs fixed; no dump/restore needed for 15.X) **Recommended release command:** `abra recipe release gitea -z` ### Advisory scan CVEs fixed by this upgrade: 0 identified by the deterministic scan (all 74 gitea CVEs + 2 critical CVEs from 1.27.1, CVE-2026-59774 and CVE-2026-60004, fall outside the 1.27.1→1.27.2 window; 1 unjudged: CVE-2025-68939 STILL-UNKNOWN). Postgres 15.19 fixes 20+ documented CVEs. Gitea 1.27.2 release notes list 7 SECURITY-tagged items (CVE IDs not yet assigned/disclosed). ### Dev deploy Deployed and verified on cc-ci (dev-gitea.ci.commoninternet.net): gitea 1.27.2 starts cleanly, serves healthchecks, no crash loops, no migration errors. Teardown completed. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-08-14 02:41:03 +00:00
chore: upgrade gitea to 1.27.2-rootless, postgres to 15.19
cc-ci/testme cc-ci: success
Details
2f64ddfa16
autonomic-bot requested review from trav 2026-08-14 02:41:03 +00:00
autonomic-bot requested review from notplants 2026-08-14 02:41:03 +00:00
autonomic-bot commented 2026-08-14 02:41:22 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-08-14 02:41:43 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — gitea @ 2f64ddfa ✅ passed → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1263

(summary card unavailable — see the run for details.) full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `gitea` @ `2f64ddfa` ✅ **passed** → https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1263 _(summary card unavailable — see the run for details.)_ [full logs](https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1263) · [dashboard](https://ci.commoninternet.net/)
trav closed this pull request 2026-08-17 18:42:58 +00:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
trav
notplants
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/gitea#7