What go-gitea/gitea shipped
Written by FoxPlug from the repository's own releases; not affiliated with Gitea. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/go-gitea/gitea; Gitea did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Released version v28.1.0 with npm client compatibility improvements and numerous bug fixes across actions, markup, and packages. Release
- Left reflog expiry to git's defaults, fixing an issue where Gitea's default gc.reflogExpire was misparsed and reachable reflog entries never expired. Pull request #39703
- Fixed git config value matching during sync to be exact, preventing startup failures and unintended removal of values like 90.days. Pull request #39728
- Hardened Actions log cursor, activity type filters, and actor filter handling to prevent panics and 500 errors from out-of-range or malformed input. Pull request #39721
- Fixed cancelled reusable workflow runs that remained stuck in the cancelling state, ensuring they settle correctly. Pull request #39706
- Removed the unsupported
id_tokenresponse type from the OIDC discovery document, aligning it with the implemented authorization code flow. Pull request #39498 - Fixed go get clone URL for SSH on the default port, using the ssh:// form so go-import meta tags are accepted. Pull request #39674
- Preserved line breaks in Telegram rich messages so multi-line issue and PR bodies, comments, and commit lists arrive correctly. Pull request #39650
- Added margin to display MathML to provide spacing below it, similar to KaTeX-rendered math. Pull request #39663
- Introduced global shortcut support that can be added to elements via data-shortcut-keys. Pull request #39604
Why it matters
This week brought a new release and important fixes for git configuration, Actions reliability, and OIDC discovery, along with improvements to markdown rendering and webhook messaging. Users benefit from fewer startup failures, more robust workflow handling, and corrected behavior in go get and Telegram notifications.
Changelog entry
- Release: v28.1.0 Release
- Fix(git): leave reflog expiry to git's defaults Pull request #39703
- Fix(git): match git config values exactly when syncing Pull request #39728
- Fix(actions): harden log cursor, activity type and actor filter handling Pull request #39721
- Fix(actions): settle cancelled reusable workflow runs stuck in cancelling Pull request #39706
- Fix: OIDC discovery advertises unsupported
id_tokenresponse_typePull request #39498 - Fix: go get fails with GO_GET_CLONE_URL_PROTOCOL=ssh on the default SSH port Pull request #39674
- Fix(webhook): keep line breaks in Telegram rich messages Pull request #39650
- Fix(markup): display MathML has no space below it Pull request #39663
- Feat: global shortcut support Pull request #39604
- Ci: reject breaking marker on non-breaking PR types Pull request #39584
- Fix(build): use the VERSION file consistently in docker builds and source tarballs Pull request #39683
Gitea v28.1.0 released with npm client compatibility and many bug fixes. Also fixed git config sync, Actions log cursors, stuck reusable workflows, OIDC discovery, and more. Update for a smoother experience.
Gitea v28.1.0 is now available, including enhanced npm client compatibility and a range of bug fixes. This week we addressed critical issues in git config synchronization, Actions workflow reliability, and OIDC discovery. We also improved markdown rendering for MathML, preserved line breaks in Telegram messages, and fixed go get over SSH on the default port. These changes help ensure a more stable and predictable experience for self-hosted Gitea installations.
Week of September 28, 2026
What shipped
- Minimum git version raised to 2.34, enabling AGit by default and removing fallbacks for older versions. Pull request #39565
- Go-git backend removed, consolidating all builds to use the git CLI backend. Pull request #39487
- Citation rendering moved server-side with a Go port replacing citation-js, supporting APA and BibTeX formats. Pull request #39373
- CITATION.cff rendering optimized to skip files over 256 KiB that consume excessive memory. Pull request #39575
- Session management refactored by moving go-chi/session into modules/session for direct bug fixes. Pull request #39504
- Cache implementation moved from go-chi/cache into modules/cache with TTL and Redis adapter improvements. Pull request #39530
- Actions API filtering by
head_shanow indexed oncommit_sha, reducing query time from 35-52 seconds to 0.14 seconds. Pull request #39559 - Label sorting corrected to use open issue count instead of total including closed issues. Pull request #39464
- Actions token permissions restored for pushes to protected branches. Pull request #39567
- HTTP caching fixed to respect RFC 9110 when both ETag and If-Modified-Since headers are present. Pull request #39435
Why it matters
This week includes foundational changes to git compatibility and backend infrastructure. The removal of the go-git backend and raising minimum git version to 2.34 simplifies the codebase while three module refactorings bring commonly-used packages under direct maintenance. Performance improvements to actions and citations address real-world usage patterns.
Changelog entry
- BREAKING: Minimum git version raised to 2.34. AGit now always enabled, diff --skip-to and apply -3 used unconditionally, default branch set via git init --initial-branch. Pull request #39565
- BREAKING: Go-git backend removed. All builds now use git CLI backend exclusively. Pull request #39487
- Citations now render server-side as APA and BibTeX, replacing citation-js and matching GitHub output on 1568 of 1571 real-world CITATION.cff files. Pull request #39373
- CITATION.cff files over 256 KiB are skipped to prevent excessive memory usage during rendering. Pull request #39575
- Actions API
head_shafilter now uses index oncommit_sha, reducing query times from 35-52 seconds to 0.14 seconds. Pull request #39559 - Session management moved from go-chi/session into modules/session. Sessions only written when changed, preventing reversions on read-only requests. Pull request #39504
- Cache implementation moved from go-chi/cache into modules/cache. Two-queue in-memory cache replaces MacaronCache hash. Pull request #39530
- Image captcha moved from go-chi/captcha into modules/imagecaptcha. Expired challenges now show new image instead of broken one. Pull request #39529
- Form binding moved from go-chi/binding into modules/web/binding. GET/HEAD always bind query, JSON null elements bind correctly. Pull request #39528
- Label pages sort by open issue count instead of total, fixing most/least issues lists. Pull request #39464
- Actions workflows can now push to protected branches using loaded token write permissions. Pull request #39567
- MySQL and MariaDB transactions use READ COMMITTED isolation level to prevent failures with
innodb_snapshot_isolationenabled. Pull request #39506
This week: git minimum raised to 2.34, go-git backend removed, citations render server-side, and three utility modules moved into core for easier maintenance.
This week in Gitea: minimum git version raised to 2.34, go-git backend consolidated into CLI-only, server-side citation rendering with APA/BibTeX support, and major infrastructure improvements including moving session, cache, and binding modules into core for direct maintenance and bug fixes.
Week of September 21, 2026
What shipped
- Actions jobs waiting on unfinished dependencies now show a persisted pending status instead of blocked, aligning the UI and API with GitHub. Pull request #39376
- A read-only Actions job queue view shows running and waiting jobs instance-wide in admin settings and per-repository, with filters and live refresh. Pull request #38585
- Actions artifact previews in the run view let you browse and render artifact files directly in the browser without downloading the ZIP. Pull request #36754
- Workflow parsing moved to actionslib with support for self: references, $/ paths, and expressions in strategy, matrix, max-parallel, and fail-fast. Pull request #39358
- Reusable workflow jobs now receive the caller's event type and with: inputs correctly instead of seeing
workflow_callas the event. Pull request #39452 - Fork pull request run approval no longer revives cancelled jobs when approving and treats cancelled runs correctly in the merge box and API. Pull request #39399
- Pull requests can now auto-close other pull requests via Fixes: references, matching GitHub behavior. Pull request #39393
- Emoji data updated to Unicode 17 with unified storage in a single JSON file and lazy-loading support. Pull request #39363
- Duplicate cross-reference timeline entries no longer appear when removing and re-adding mentions or changing reference types. Pull request #38881
- Pull request merge status is now managed by Gitea's code where the operation is triggered, fixing several merge-related bugs. Pull request #39442
Why it matters
This week includes significant improvements to Actions workflows with better job status tracking and queue visibility, artifact preview capabilities for workflow runs, and corrections to how workflows handle events and inputs. Several bug fixes address pull request operations, cross-references, and API consistency with GitHub behavior.
Changelog entry
- CHANGED: Actions jobs waiting on unfinished dependencies show pending status instead of blocked Pull request #39376
- ADDED: Actions job queue view showing running and waiting jobs with filters Pull request #38585
- ADDED: Browser preview for Actions artifacts with file browsing and rendering Pull request #36754
- CHANGED: Workflow parsing supports self: references and expressions in strategy fields Pull request #39358
- FIXED: Reusable workflow jobs receive caller's event and inputs correctly Pull request #39452
- FIXED: Fork PR run approval no longer revives cancelled jobs Pull request #39399
- ADDED: Pull requests can auto-close other PRs via Fixes: references Pull request #39393
- CHANGED: Emoji data updated to Unicode 17 with unified JSON storage Pull request #39363
- FIXED: API now accepts reviews with pending inline comments but no summary Pull request #39433
- FIXED: Commit page renders correctly for unsigned commits with different committer Pull request #39381
This week: Actions jobs now show pending status, reusable workflows receive correct event data, artifact previews in run views, and PR auto-close via Fixes: references.
This week's Gitea updates improve Actions workflows with pending job status tracking, a job queue view for monitoring, artifact previews in run views, and correct event handling in reusable workflows. Also: PR auto-close via Fixes: references, better approval handling, Unicode 17 emoji support, and fixes for cross-references and merge operations.
Week of September 14, 2026
What shipped
- Bot accounts are now first-class users that can be created and managed through the admin UI, API, and CLI for automation that authenticate only with access tokens. Pull request #38966
- Merge commit messages are now passed via stdin instead of command-line arguments, fixing failures on long messages that exceeded OS limits. Pull request #39269
- CodeCommit migration now uses a minimal REST client instead of the AWS SDK, reducing binary size by 3.1 MB. Pull request #39330
- Azure Blob SDK replaced with a minimal REST client, reducing binary size by 1.2 MB on main and 4.7 MB compared to the latest SDK. Pull request #39315
- Issue pattern capture groups improved and now support both internal and external trackers being enabled simultaneously. Pull request #39354
- Repository archive downloads now support weak ETag headers and If-None-Match conditional requests. Pull request #39289
- Mermaid updated to v12 with ELK as the default layout and the new neo design applied to diagrams. Pull request #39331
- Notifications can now be marked as read for the current page only, with an option to mark all as read preserved. Pull request #39294
- Actions job and step durations now use Gitea's clock instead of runner timestamps to avoid incorrect durations from clock skew. Pull request #39323
- SHA-256 pull request commit IDs are preserved during migrations. Pull request #39343
Why it matters
This week brings infrastructure improvements that reduce binary size and fix long-standing issues with message handling and clock synchronization. New first-class bot accounts enable better automation workflows, while better error handling and diagram rendering improve the user experience.
Changelog entry
- Add bot account management in admin UI, API, and CLI for automation with token-only authentication Pull request #38966
- Fix merge commit messages exceeding OS command-line limits by passing via stdin Pull request #39269
- Replace AWS SDK with REST client in CodeCommit migration, reduce binary by 3.1 MB Pull request #39330
- Replace Azure Blob SDK with REST client, reduce binary by 1.2 MB Pull request #39315
- Improve issue pattern capture groups and support both internal and external trackers Pull request #39354
- Add ETag support and If-None-Match conditional requests to repository archive downloads Pull request #39289
- Update Mermaid to v12 with ELK default layout and neo design Pull request #39331
- Add page-level notification read action, preserve all-read option Pull request #39294
- Use Gitea's clock for actions job and step durations to avoid clock skew issues Pull request #39323
- Focus confirm button in modals and mark delete actions with red warning Pull request #39350
- Preserve SHA-256 pull request commit IDs in migrations Pull request #39343
- Document NOTICE_ON_SUCCESS for cron tasks in app.example.ini Pull request #39352
- Unify email validation between registration and settings forms Pull request #39304
- Classify git failures on stderr and restrict migration failure details from hostile servers Pull request #39010
Gitea this week: bot accounts arrive for automation, long merge messages work reliably, and binary size shrinks by switching to REST clients from heavy SDKs.
Gitea's latest updates introduce first-class bot accounts for automation workflows, fix merge message handling on long commits, and significantly reduce binary size by replacing AWS and Azure SDKs with lightweight REST clients. Additional improvements include better error classification for migrations, ETag support for archive downloads, and Mermaid v12 integration with improved diagram rendering.