• v0.6.9 640e2505e2

    v0.6.9 Stable

    gitea_admin released this 2026-07-06 22:28:00 +00:00 | 91 commits to main since this release

    Added

    • ForgejoTagProtection CRD + controller: declaratively manage a repo's
      tag-protection rules (glob namePattern + whitelistUsernames/whitelistTeams)
      through the gitea SDK's tag_protections API. Because the API has no get-by-name
      and keys rules by int64 ID, Converge lists (paginated), matches on the natural
      namePattern key, create-or-edits, and stores status.tagProtectionID for
      edit/delete — mirroring ForgejoLabel. Lets tag creation (e.g. release v* tags)
      be restricted to the in-cluster pipeline identity.
    • ForgejoCollaborator CRD + controller: declaratively grant a user direct
      collaborator access (read/write/admin) on a single repository via
      AddCollaborator (idempotent PUT), removing it on delete. This is the only way to
      grant write on a user-owned repo (sean/*) — ForgejoTeam only covers
      org-owned repos — so a dedicated non-admin pipeline-bot can be given write on
      each pipeline repo without the site-admin token.
    • ForgejoBranchProtection: merge-whitelist fields (enableMergeWhitelist,
      mergeWhitelistUsernames, mergeWhitelistTeams). With push disabled, protected
      branches advance only via PR merges; enabling this + listing pipeline-bot forces
      every change to a protected branch through the pipeline (no human or bot outside
      the whitelist can merge).

    Included changes (v0.6.8 -> v0.6.9)

    • 4b1c1ef9e473 feat(crd): ForgejoTagProtection + ForgejoCollaborator + merge-whitelist
    • c0152458da61 fix(cicd): auto-resolve CHANGELOG land conflicts via .gitattributes merge=union
    • 16b1f5d488f5 fix(ci): pin golang:1.26 builder base by digest
    • a6ab3a1ab9ca chore: retrigger CI (transient buildkit lease error)
    • 8c50685f4aa8 docs(forgejorepository): correct stale cloneAddrFor comment (no server derivation)
    Downloads