• v0.6.9 640e2505e2

    v0.6.9 Stable

    gitea_admin released this 2026-07-06 22:28:00 +00:00 | 116 commits to trunk since this release

    Added

    • ForgejoTagProtection CRD + controller: declaratively manage a repo's
      tag-protection rules (glob namePattern + whitelistUsernames/whitelistTeams)
      through the gitea SDK's tag_protections API. Because the API has no get-by-name
      and keys rules by int64 ID, Converge lists (paginated), matches on the natural
      namePattern key, create-or-edits, and stores status.tagProtectionID for
      edit/delete — mirroring ForgejoLabel. Lets tag creation (e.g. release v* tags)
      be restricted to the in-cluster pipeline identity.
    • ForgejoCollaborator CRD + controller: declaratively grant a user direct
      collaborator access (read/write/admin) on a single repository via
      AddCollaborator (idempotent PUT), removing it on delete. This is the only way to
      grant write on a user-owned repo (sean/*) — ForgejoTeam only covers
      org-owned repos — so a dedicated non-admin pipeline-bot can be given write on
      each pipeline repo without the site-admin token.
    • ForgejoBranchProtection: merge-whitelist fields (enableMergeWhitelist,
      mergeWhitelistUsernames, mergeWhitelistTeams). With push disabled, protected
      branches advance only via PR merges; enabling this + listing pipeline-bot forces
      every change to a protected branch through the pipeline (no human or bot outside
      the whitelist can merge).

    Included changes (v0.6.8 -> v0.6.9)

    • 4b1c1ef9e473 feat(crd): ForgejoTagProtection + ForgejoCollaborator + merge-whitelist
    • c0152458da61 fix(cicd): auto-resolve CHANGELOG land conflicts via .gitattributes merge=union
    • 16b1f5d488f5 fix(ci): pin golang:1.26 builder base by digest
    • a6ab3a1ab9ca chore: retrigger CI (transient buildkit lease error)
    • 8c50685f4aa8 docs(forgejorepository): correct stale cloneAddrFor comment (no server derivation)
    Downloads
  • v0.6.8 8e5e9ce118

    v0.6.8 Stable

    gitea_admin released this 2026-07-03 22:53:36 +00:00 | 128 commits to trunk since this release

    Added

    • Unit tests for the import-source helpers cloneAddrFor / serviceTypeFor:
      cover the TypeCloneAddr and TypeGitServiceType mappings,
      including the gitea-default and plain-git fallback paths.
    Downloads
  • v0.6.7 fd6518962e

    v0.6.7 Stable

    gitea_admin released this 2026-07-01 10:36:26 +00:00 | 133 commits to trunk since this release

    Changed

    • CI: route Go module fetches through the in-cluster Athens proxy (GOPROXY,
      direct fallback) in both the ci-test validate and the multi-arch image build,
      and verified a build fetches its modules (the gitea SDK) via Athens — cold builds
      no longer re-download the module graph from proxy.golang.org.
    Downloads
  • v0.6.6 2deddb8488

    v0.6.6 Stable

    gitea_admin released this 2026-06-28 13:39:31 +00:00 | 136 commits to trunk since this release

    Added

    • In-cluster CI/CD pipeline (the seanfarm release path): a multi-arch image build via buildkitd
      (cross-compiled, no qemu) → cosign-EC signed push to registry.sean.farm/seanfarm/forgejo-operator
      make build-installer → an in-cluster release (lightweight tag + a Forgejo Release carrying the
      changelog notes + the rendered install.yaml as an asset). Adds the staging dev-trunk branch,
      a VERSION file, this CHANGELOG, and a make test (envtest) CI gate.

    Changed

    • Dockerfile: pin the builder stage to $BUILDPLATFORM so the multi-arch build cross-compiles on
      the native host instead of qemu-emulating the arm64 leg.
    Downloads