mirror of
1
Fork 0
Beyond coding. We forge.
Go to file
Gusted b1b635c1d9
fix(sec): permission check for project issue
- Do an access check when loading issues for a project column, currently
this is not done and exposes the title, labels and existence of a
private issue that the viewer of the project board may not have access
to.
- The number of issues cannot be calculated in a efficient manner
and stored in the database because their number may vary depending on
the visibility of the repositories participating in the project. The
previous implementation used the pre-calculated numbers stored in each
project, which did not reflect that potential variation.
- The code is derived from https://github.com/go-gitea/gitea/pull/22865
2025-02-08 07:22:10 +00:00
.devcontainer
.forgejo chore(renovate): override platform version (#6779) 2025-02-04 10:48:15 +00:00
assets Update module github.com/go-git/go-git/v5 to v5.13.2 (forgejo) (#6659) 2025-01-23 12:32:39 +00:00
build chore: teach lint-locale about locale_next (#6800) 2025-02-06 11:16:19 +00:00
cmd chore: teach `set` module about `iter.Seq` (#6676) 2025-01-24 16:45:46 +00:00
contrib branding: update contrib/legal 2024-12-19 18:55:20 +05:00
custom/conf Use 8 as default value for git lfs concurrency (#32421) 2024-12-06 00:17:57 +01:00
docker Update code.forgejo.org/oci/alpine Docker tag to v3.21 (followup) 2024-12-30 15:22:42 +00:00
models fix(sec): permission check for project issue 2025-02-08 07:22:10 +00:00
modules feat: add commit limit for webhook payload (#6797) 2025-02-07 19:26:50 +00:00
options ui: update styling of comment headers and role labels (#6816) 2025-02-07 01:07:16 +00:00
public chore(security): update security.txt with new expiration date (#6655) 2025-01-23 16:20:04 +00:00
release-notes chore(release-notes): notes for the week 2025-06 weekly cherry pick 2025-02-02 12:05:46 +01:00
release-notes-published chore: fix typos, decap a few i18n strings (#6666) 2025-01-24 05:41:59 +00:00
releases/images
routers fix(sec): permission check for project issue 2025-02-08 07:22:10 +00:00
services feat: add commit limit for webhook payload (#6797) 2025-02-07 19:26:50 +00:00
templates fix(sec): permission check for project issue 2025-02-08 07:22:10 +00:00
tests fix(ui): make Finish review button work again (#6818) 2025-02-07 10:01:09 +00:00
tools Initial support for localization and pluralization with go-i18n-JSON-v2 format 2025-01-17 11:21:28 +01:00
web_src fix: avoid y-axis clipping for branch name (#6817) 2025-02-07 10:04:24 +00:00
.air.toml
.deadcode-out chore: Remove `GetFileResponseFromCommit` 2025-01-31 16:22:29 +01:00
.dockerignore chore: update ignores 2025-01-03 14:41:34 +01:00
.editorconfig
.envrc.example Make direnv optional to let developers use their own direnv configuration 2024-11-06 20:34:49 +01:00
.gitattributes
.gitignore chore(e2e): simplify authentication setup (#6400) 2025-01-05 05:17:04 +00:00
.gitmodules
.gitpod.yml
.golangci.yml Update module github.com/golangci/golangci-lint/cmd/golangci-lint to v1.62.0 (forgejo) (#5911) 2024-11-11 13:02:01 +00:00
.ignore
.mailmap
.markdownlint.yaml
.npmrc
.release-notes-assistant.yaml
.spectral.yaml
.yamllint.yaml
BSDmakefile
CODEOWNERS [skip ci] chore: adjust i18n entries in CODEOWNERS (#6667) 2025-01-26 07:37:50 +00:00
CONTRIBUTING.md
DCO
Dockerfile fix: FromAsCasting warning from Dockerfile (#6769) 2025-02-04 07:09:21 +00:00
Dockerfile.rootless fix: FromAsCasting warning from Dockerfile (#6769) 2025-02-04 07:09:21 +00:00
LICENSE
Makefile Update renovate to v39.158.2 (forgejo) (#6778) 2025-02-04 10:40:08 +00:00
README.md
RELEASE-NOTES.md chore: fix typos, decap a few i18n strings (#6666) 2025-01-24 05:41:59 +00:00
build.go chore: remove unused dependency from build.go 2024-12-23 16:23:28 +01:00
eslint.config.mjs tests(e2e): Refactor various tests 2024-11-13 13:15:37 +01:00
flake.lock Update nixpkgs version in flake 2024-12-08 13:03:16 +01:00
flake.nix install go and gopls in nix flake devShell 2024-12-08 13:04:22 +01:00
go.mod Update module github.com/go-enry/go-enry/v2 to v2.9.2 (forgejo) (#6825) 2025-02-07 08:15:45 +00:00
go.sum Update module github.com/go-enry/go-enry/v2 to v2.9.2 (forgejo) (#6825) 2025-02-07 08:15:45 +00:00
main.go
package-lock.json Update vitest monorepo to v3 (forgejo) (major) (#6777) 2025-02-04 11:26:08 +00:00
package.json Update vitest monorepo to v3 (forgejo) (major) (#6777) 2025-02-04 11:26:08 +00:00
playwright.config.ts tests(e2e): Prepare for visual regression testing 2024-12-10 18:12:36 +01:00
poetry.lock Pin dependency codespell to 2.4.1 (forgejo) (#6776) 2025-02-04 06:18:46 +00:00
poetry.toml
pyproject.toml Pin dependency codespell to 2.4.1 (forgejo) (#6776) 2025-02-04 06:18:46 +00:00
release-notes-assistant.sh chore(release-notes-assistant): security fix / features come first 2024-11-17 20:03:11 +01:00
renovate.json chore: consistent docker image and action references (#6703) 2025-01-28 15:41:11 +00:00
stylelint.config.js
tailwind.config.js
tsconfig.json
vitest.config.ts
webpack.config.js

README.md

Welcome to Forgejo

Hi there! Tired of big platforms playing monopoly? Providing Git hosting for your project, friends, company or community? Forgejo (/for'd͡ʒe.jo/ inspired by forĝejo the Esperanto word for forge) has you covered with its intuitive interface, light and easy hosting and a lot of builtin functionality.

Forgejo was created in 2022 because we think that the project should be owned by an independent community. If you second that, then Forgejo is for you! Our promise: Independent Free/Libre Software forever!

What does Forgejo offer?

If you like any of the following, Forgejo is literally meant for you:

  • Lightweight: Forgejo can easily be hosted on nearly every machine. Running on a Raspberry? Small cloud instance? No problem!
  • Project management: Besides Git hosting, Forgejo offers issues, pull requests, wikis, kanban boards and much more to coordinate with your team.
  • Publishing: Have something to share? Use releases to host your software for download, or use the package registry to publish it for docker, npm and many other package managers.
  • Customizable: Want to change your look? Change some settings? There are many config switches to make Forgejo work exactly like you want.
  • Powerful: Organizations & team permissions, CI integration, Code Search, LDAP, OAuth and much more. If you have advanced needs, Forgejo has you covered.
  • Privacy: From update checker to default settings: Forgejo is built to be privacy first for you and your crew.
  • Federation: (WIP) We are actively working to connect software forges with each other through ActivityPub, and create a collaborative network of personal instances.

Learn more

Dive into the documentation, subscribe to releases and blog post on our website, find us on the Fediverse or hop into our Matrix room if you have any questions or want to get involved.

License

Forgejo is distributed under the terms of the GPL version 3.0 or any later version.

The agreement for this license was documented in June 2023 and implemented during the development of Forgejo v9.0. All Forgejo versions before v9.0 are distributed under the MIT license.

Get involved

If you are interested in making Forgejo better, either by reporting a bug or by changing the governance, please take a look at the contribution guide.