-
-
Notifications
You must be signed in to change notification settings - Fork 5.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
update jwt and redis packages #33984
Merged
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
fixes CVE-2025-30204 for jwt and CVE-2025-29923 for go-redis
e99ae76
to
8dd1764
Compare
wxiaoguang
approved these changes
Mar 23, 2025
techknowlogick
approved these changes
Mar 23, 2025
I was unable to create a backport for 1.23. @TheFox0x7, please send one manually. 🍵
|
TheFox0x7
added a commit
to TheFox0x7/gitea
that referenced
this pull request
Mar 23, 2025
TheFox0x7
added a commit
to TheFox0x7/gitea
that referenced
this pull request
Mar 23, 2025
techknowlogick
pushed a commit
that referenced
this pull request
Mar 23, 2025
zjjhot
added a commit
to zjjhot/gitea
that referenced
this pull request
Mar 24, 2025
* giteaofficial/main: [skip ci] Updated translations via Crowdin Only use prev and next buttons for pagination on user dashboard (go-gitea#33981) update jwt and redis packages (go-gitea#33984) [skip ci] Updated translations via Crowdin Improve oauth2 error handling (go-gitea#33969) [skip ci] Updated translations via Crowdin Cover `go.mod` and `go.sum` in `.editorconfig` (go-gitea#33960) Drop timeout for requests made to the internal hook api (go-gitea#33947) Fix file name could not be searched if the file was not a text file when using the Bleve indexer (go-gitea#33959) Fix oauth2 auth and UI (go-gitea#33961) Allow filtering issues by any assignee (go-gitea#33343) Optimize total count of feed when loading activities in user dashboard. (go-gitea#33841) Extract code to their own functions for push update (go-gitea#33944) Optimize heatmap query (go-gitea#33853)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
backport/done
All backports for this PR have been created
backport/manual
No power to the bots! Create your backport yourself!
backport/v1.23
This PR should be backported to Gitea 1.23
lgtm/done
This PR has enough approvals to get merged. There are no important open reservations anymore.
modifies/dependencies
size/XS
Denotes a PR that changes 0-9 lines, ignoring generated files.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
fixes CVE-2025-30204 for jwt and CVE-2025-29923 for go-redis