Lunny Xiao 20cf4b7849 Fix various permission & login related bugs (#36002) (#36004) ...

Backport #36002 

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 12:33:48 +00:00

..

actions

Fix actions schedule update issue (#35767) (#35774)

2025-10-29 18:51:16 +01:00

agit

Move git command to git/gitcmd (#35483)

2025-09-15 23:33:12 -07:00

asymkey

Refactor legacy code (#35708) (#35716)

2025-10-21 05:47:37 +00:00

attachment

fix attachment file size limit in server backend (#35519) (#35720)

2025-10-21 18:01:59 +00:00

auth

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

automerge

Honor delete branch on merge repo setting when using merge API (#35488) (#35726)

2025-10-22 09:41:40 -07:00

automergequeue

Fix various trivial problems (#35714) (#35718)

2025-10-21 18:02:57 +08:00

context

Update tab title when navigating file tree (#35757) (#35772)

2025-10-29 14:04:19 +00:00

contexttest

Fix session gob (#35128)

2025-07-20 01:49:36 +00:00

convert

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

cron

Move git command to git/gitcmd (#35483)

2025-09-15 23:33:12 -07:00

doctor

Add a doctor command to fix inconsistent run status (#35840) (#35845)

2025-11-04 11:16:36 -08:00

externalaccount

Refactor OpenIDConnect to support SSH/FullName sync (#34978)

2025-07-10 18:35:59 +00:00

feed

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

forms

Honor delete branch on merge repo setting when using merge API (#35488) (#35726)

2025-10-22 09:41:40 -07:00

git

Fix git commit committer parsing and add some tests (#35007)

2025-07-10 19:03:36 +00:00

gitdiff

Fix viewed files number is not right if not all files loaded (#35821) (#35844)

2025-11-03 17:19:50 -08:00

indexer

Update issue indexer after merging a PR (#30715)

2024-05-08 14:45:15 +00:00

issue

Limit read bytes instead of ReadAll (#35928) (#35934)

2025-11-13 02:26:27 +08:00

lfs

Refactor legacy code (#35708) (#35716)

2025-10-21 05:47:37 +00:00

mailer

upgrade go mail to 0.7.2 and fix the bug (#35833) (#35837)

2025-11-03 20:28:12 +00:00

markup

Improve and fix markup code preview rendering (#35777) (#35787)

2025-10-30 09:06:44 +00:00

migrations

Move updateref and removeref to gitrepo and remove unnecessary open repository (#35511)

2025-09-19 08:04:18 -07:00

mirror

Move git command to git/gitcmd (#35483)

2025-09-15 23:33:12 -07:00

notify

Don't send trigger for a pending review's comment create/update/delete (#34928)

2025-07-03 10:35:45 +08:00

oauth2_provider

Make OAuth2 issuer configurable (#35915) (#35916)

2025-11-10 16:12:25 +00:00

org

Use db.WithTx/WithTx2 instead of TxContext when possible (#35428)

2025-09-10 03:15:01 +00:00

packages

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

projects

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

pull

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

release

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

repository

Limit read bytes instead of ReadAll (#35928) (#35934)

2025-11-13 02:26:27 +08:00

secrets

Fix various bugs (#35684) (#35696)

2025-10-19 02:26:03 +08:00

task

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

uinotification

Remove incorrect "db.DefaultContext" usages (#35366)

2025-08-28 03:52:43 +00:00

user

Replace gobwas/glob package (#35478)

2025-09-13 18:01:00 +00:00

versioned_migration

Remove wrong "git.DefaultContext" (#35364)

2025-08-27 16:31:21 +00:00

webhook

Limit read bytes instead of ReadAll (#35928) (#35934)

2025-11-13 02:26:27 +08:00

webtheme

Run gopls modernize on codebase (#34751)

2025-06-18 01:48:09 +00:00

wiki

Move some functions from package git to gitrepo (#33910)

2025-09-01 19:13:18 +00:00