RayLabsHQ/gitea-mirror v3.44.0 on GitHub

Features

Release filters (#471, thanks @MajMcCloud). Under the Releases switch in the mirror settings there is now a Pre-releases switch: turn it off to skip releases the source marks as pre-release. Custom tag rules... opens a dialog with Include tags and Exclude tags lists. A pattern is a glob over the whole tag (v1.*, *-rc.*) or a regular expression in slashes (/^v\d+\.\d+\.\d+$/), matched case-insensitively, and an excluded tag wins over an included one. Both settings can also be set per organization and per repository in Mirror options, where Inherit (or empty lists) means the level above. The filters need a GitHub or Gitea/Forgejo source.
The release limit counts the releases that match, so "the newest 10" means the newest 10 matching releases.
RELEASE_TYPE (all or stable), RELEASE_INCLUDE_TAGS and RELEASE_EXCLUDE_TAGS set the global defaults.

git-lfs in the image is built with Go 1.27.3, golang.org/x/net 0.61.0 and golang.org/x/crypto 0.58.0, which clears the Go standard library and x/net findings Docker Scout reported against it. (#473)
npm packages bumped in the app and the docs site: sharp 0.35.5, smol-toml 1.9.1, source-map-js 1.2.2 and http-cache-semantics 4.3.0, plus vite 8.1.6 for the site. http-cache-semantics 4.3.0 is outside the advisory's range but does not change the affected code; it is only used by Astro at build time, so nothing in the running app loads it. (#473)
The VEX statement for zlib CVE-2026-85091 (no fix in any Debian release) never matched the published image because its product ID put the registry in the wrong place, so Scout kept reporting it on ghcr.io. The statements now use pkg:docker/raylabshq/gitea-mirror?repository_url=ghcr.io. (#473)

Filters remove releases that are already mirrored. When a filter is active, the next sync deletes releases in Gitea that no longer match. The tag rules dialog lists the releases the destination holds and crosses out the ones your draft rules would delete, so check a pattern there before saving. If the filters remove every release a repository had, the activity log shows an "All releases removed" warning, and the Sync errors notification sends the same alert.
Nothing changes until you turn a filter on: the default is all releases and no tag rules. No migration.

As always, back up your Gitea before upgrading.

Full Changelog: v3.43.0...v3.44.0