github RayLabsHQ/gitea-mirror v3.45.0

4 hours ago

Features

  • API additions for integrations (#476, for #472). GET /api/repositories/{id} and GET /api/organizations/{id} return a single repository or organization, so a script can watch one mirror without fetching the whole list. When a repository or organization is already tracked, the 409 from POST /api/sync/repository and POST /api/sync/organization now includes the stored record, so its id is there to start a mirror.

Changes

  • role is optional on POST /api/sync/organization. A new organization without one is added as member, and a forced re-add without one keeps the stored role instead of overwriting it. An unknown role is refused with 400. (#476)
  • A path or method under /api that has no endpoint answers with a JSON 404 that names the method and path, instead of the HTML "Page Not Found" page. (#476)
  • Adding a user account as an organization still answers 404, and the message now says that user accounts cannot be added as organizations. (#476)
  • The API docs list the organization endpoints with their status codes, the host and path fields for pasted URLs, and where the ids come from. They also note that every POST, PUT, PATCH and DELETE from a script needs Content-Type: application/json, even without a body; without it the request is refused with 403. (#476)

Security

  • astro 7.3.5 in the app and the docs site, for GHSA-mpr7-6m5w-76rw (CSS injection in View Transitions, low). @astrojs/node moves to 11.1.6 with it. (#475)
  • The app's own lockfile still had vite 8.0.0 and 8.1.5, inside the October vite advisories that #473 fixed for the docs site only. The app now uses vite 8.1.6 as well. (#475)

No action needed. As always, back up your Gitea before upgrading.

Full Changelog: v3.44.0...v3.45.0

Don't miss a new gitea-mirror release

NewReleases is sending notifications on new releases.