-
v0.6.9 Stable
released this
2026-07-06 22:28:00 +00:00 | 116 commits to trunk since this releaseAdded
ForgejoTagProtectionCRD + controller: declaratively manage a repo's
tag-protection rules (globnamePattern+whitelistUsernames/whitelistTeams)
through the gitea SDK'stag_protectionsAPI. Because the API has no get-by-name
and keys rules by int64 ID, Converge lists (paginated), matches on the natural
namePatternkey, create-or-edits, and storesstatus.tagProtectionIDfor
edit/delete — mirroringForgejoLabel. Lets tag creation (e.g. releasev*tags)
be restricted to the in-cluster pipeline identity.ForgejoCollaboratorCRD + controller: declaratively grant a user direct
collaborator access (read/write/admin) on a single repository via
AddCollaborator(idempotent PUT), removing it on delete. This is the only way to
grant write on a user-owned repo (sean/*) —ForgejoTeamonly covers
org-owned repos — so a dedicated non-adminpipeline-botcan be given write on
each pipeline repo without the site-admin token.ForgejoBranchProtection: merge-whitelist fields (enableMergeWhitelist,
mergeWhitelistUsernames,mergeWhitelistTeams). With push disabled, protected
branches advance only via PR merges; enabling this + listingpipeline-botforces
every change to a protected branch through the pipeline (no human or bot outside
the whitelist can merge).
Included changes (v0.6.8 -> v0.6.9)
4b1c1ef9e473feat(crd): ForgejoTagProtection + ForgejoCollaborator + merge-whitelistc0152458da61fix(cicd): auto-resolve CHANGELOG land conflicts via .gitattributes merge=union16b1f5d488f5fix(ci): pin golang:1.26 builder base by digesta6ab3a1ab9cachore: retrigger CI (transient buildkit lease error)8c50685f4aa8docs(forgejorepository): correct stale cloneAddrFor comment (no server derivation)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.6.8 Stable
released this
2026-07-03 22:53:36 +00:00 | 128 commits to trunk since this releaseAdded
- Unit tests for the import-source helpers
cloneAddrFor/serviceTypeFor:
cover theType→CloneAddrandType→GitServiceTypemappings,
including the gitea-default and plain-git fallback paths.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Unit tests for the import-source helpers
-
v0.6.7 Stable
released this
2026-07-01 10:36:26 +00:00 | 133 commits to trunk since this releaseChanged
- CI: route Go module fetches through the in-cluster Athens proxy (
GOPROXY,
directfallback) in both the ci-test validate and the multi-arch image build,
and verified a build fetches its modules (the gitea SDK) via Athens — cold builds
no longer re-download the module graph fromproxy.golang.org.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- CI: route Go module fetches through the in-cluster Athens proxy (
-
v0.6.6 Stable
released this
2026-06-28 13:39:31 +00:00 | 136 commits to trunk since this releaseAdded
- In-cluster CI/CD pipeline (the seanfarm release path): a multi-arch image build via buildkitd
(cross-compiled, no qemu) → cosign-EC signed push toregistry.sean.farm/seanfarm/forgejo-operator
→make build-installer→ an in-cluster release (lightweight tag + a Forgejo Release carrying the
changelog notes + the renderedinstall.yamlas an asset). Adds thestagingdev-trunk branch,
aVERSIONfile, this CHANGELOG, and amake test(envtest) CI gate.
Changed
Dockerfile: pin the builder stage to$BUILDPLATFORMso the multi-arch build cross-compiles on
the native host instead of qemu-emulating the arm64 leg.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- In-cluster CI/CD pipeline (the seanfarm release path): a multi-arch image build via buildkitd