• v0.6.26 ef5a14ea9a

    v0.6.26 Stable

    pipeline-bot released this 2026-07-24 07:50:01 +00:00 | 4 commits to main since this release

    Fixed

    • Keep repository imports Running until Forgejo reports written refs; when
      importSource.branch is set, verify it, make it the default, and prune the
      other one-shot imported branch refs before reporting Ready. Reject non-zero
      depth, which Forgejo's migrate API cannot honor, instead of silently
      promising a shallow import, and make the one-shot importSource immutable
      so post-seed edits cannot silently claim an action the controller will not run.
    • Upgrade reachable x/crypto, x/net, x/text, and OpenTelemetry SDK
      dependencies to patched releases.

    Changed

    • Clear the golangci-lint backlog and add focused repository-import contract
      coverage for branch selection, missing branches, and truthful import status.

    Included changes (v0.6.25 -> v0.6.26)

    • 727d408a4046 chore(quality): clear static analysis backlog
    • e92174d9349f fix(security): upgrade reachable vulnerable dependencies
    • cfa2de5ee93a fix(repository): enforce one-shot import contract
    Downloads