Gusted dc15aefa3e fix: ensure correct ssh public key is used for authentication ... - The root cause is described in b4f1988a35 - Move to a fork of `github.com/gliderlabs/ssh` that exposes the permissions that was chosen by `x/crypto/ssh` after succesfully authenticating, this is the recommended mitigation by the Golang security team. The fork exposes this, since `gliderlabs/ssh` instead relies on context values to do so, which is vulnerable to the same attack, although partially mitigated by the fix in `x/crypto/ssh` it would not be good practice and defense deep to rely on it. - Existing tests covers that the functionality is preserved. - No tests are added to ensure it fixes the described security, the exploit relies on non-standard SSH behavior it would be too hard to craft SSH packets to exploit this. (cherry picked from commit 3e1b03838e) Conflicts: go.mod go.sum trivial context conflict		2024-12-12 07:09:00 +01:00
..
actions	Fix wrong status of Set up Job when first step is skipped (#32120)	2024-09-29 11:52:09 +02:00
activitypub	Use forum.gitea.com instead of old URL (#31989)	2024-09-09 20:54:47 +02:00
analyze	Rename code_langauge.go to code_language.go (#26377)	2023-08-07 15:00:53 -04:00
assetfs	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
auth	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
avatar	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
base	fix: extend forgejo_auth_token table	2024-11-15 11:33:17 +01:00
cache	Increase cacheContextLifetime to reduce false reports (#32011)	2024-09-14 17:09:03 +02:00
charset	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
container	Add container.FilterSlice function (gitea#30339)	2024-04-16 11:49:44 +02:00
csv	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
emoji	Update emoji set to Unicode 15 (#25595)	2023-06-29 16:29:48 +00:00
eventsource	fix: use better code to group UID and stopwatches	2024-11-17 19:18:45 +00:00
forgefed	style: reenable switch check	2024-08-18 15:19:01 +02:00
generate	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
git	Fix: return correct type in GetSubModule	2024-12-03 03:24:54 +00:00
gitgraph	Add codespell support and fix a good number of typos with its help (#3270)	2024-05-09 13:49:37 +00:00
gitrepo	[CHORE] Drop go-git support	2024-08-12 19:11:09 +02:00
graceful	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
hcaptcha	Consume hcaptcha and pwn deps (#22610)	2023-01-29 09:49:51 -06:00
highlight	fix: normalize guessed languages from enry	2024-11-27 18:25:12 +00:00
hostmatcher	Support allowed hosts for migrations to work with proxy (#32025)	2024-09-14 17:52:54 +02:00
html	Refactor backend SVG package and add tests (#26335)	2023-08-05 04:34:59 +00:00
httpcache	Fix wrong last modify time (#32102)	2024-09-27 08:13:30 +00:00
httplib	Fix wrong last modify time (#32102)	2024-09-27 08:13:30 +00:00
indexer	Fixed race condition when deleting documents by repoId in ElasticSearch (#32185)	2024-10-06 11:45:22 +02:00
issue/template	Fix linting issues	2024-08-18 16:25:13 +02:00
json	Replace interface{} with any (#25686)	2023-07-04 18:36:08 +00:00
keying	[FEAT] Allow pushmirror to use publickey authentication	2024-08-22 17:05:07 +02:00
label	Make label templates have consistent behavior and priority (#23749)	2023-04-10 16:44:02 +08:00
lfs	[FEAT] Allow pushmirror to use publickey authentication	2024-08-22 17:05:07 +02:00
log	[CHORE] Fix darwin compatibility	2024-08-09 17:44:41 +02:00
markup	fix: remove softbreak from github legacy callout	2024-12-04 23:12:58 +00:00
mcaptcha	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
metrics	Rename project board -> column to make the UI less confusing (#30170)	2024-06-02 09:42:39 +02:00
migration	Use correct function name (#31887)	2024-08-25 11:56:35 +02:00
nosql	[FEAT] Only implement used API of Redis client	2024-08-30 04:33:15 +02:00
optional	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
options	Use a general approach to access custom/static/builtin assets (#24022)	2023-04-12 18:16:45 +08:00
packages	fix: handle renamed dependency for cargo registery	2024-11-13 22:56:30 +00:00
paginator	Use more specific test methods (#24265)	2023-04-22 17:56:27 -04:00
pprof	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
private	fix(hook): ignore unknown push options instead of failing	2024-07-02 21:39:01 +02:00
process	Add codespell support and fix a good number of typos with its help (#3270)	2024-05-09 13:49:37 +00:00
proxy	Use proxy for pull mirror (#22771)	2023-02-11 08:39:50 +08:00
proxyprotocol	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
public	Refactor CORS handler (#28587)	2023-12-25 20:13:18 +08:00
queue	chore: update mock redis client	2024-09-01 05:42:34 +02:00
recaptcha	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
references	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
regexplru	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
repository	style: reenable switch check	2024-08-18 15:19:01 +02:00
secret	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
session	[FEAT] Only implement used API of Redis client	2024-08-30 04:33:15 +02:00
setting	fix: Specify default value for EXPLORE_DEFAULT_SORT.	2024-10-20 23:07:18 +00:00
sitemap	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
ssh	fix: ensure correct ssh public key is used for authentication	2024-12-12 07:09:00 +01:00
storage	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
structs	fix: add label to issues and PR labeled/unlabeled events	2024-11-04 14:10:27 +00:00
svg	Refactor backend SVG package and add tests (#26335)	2023-08-05 04:34:59 +00:00
sync	Implement FSFE REUSE for golang files (#21840)	2022-11-27 18:20:29 +00:00
system	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
templates	Lazy load avatar images (#32051)	2024-09-27 08:13:29 +00:00
test	test(util): MockProtect when mocking multiple times	2024-06-02 15:24:06 +02:00
testlogger	fix: make branch protection work for new branches	2024-10-24 20:21:43 +00:00
timeutil	Remove the time-since class (#29826)	2024-03-20 08:46:30 +01:00
translation	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
turnstile	Add new captcha: cloudflare turnstile (#22369)	2023-02-05 15:29:03 +08:00
typesniffer	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
updatechecker	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
uri	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
user	test: enforce tenv usage in tests	2024-07-17 23:07:41 +02:00
util	feat: add IfZero utility function	2024-09-27 08:13:29 +00:00
validation	added validation fixes	2024-05-14 08:31:34 +02:00
web	Add testifylint to lint checks (#4535)	2024-07-30 19:41:10 +00:00
webhook	Add support for workflow_dispatch (#3334)	2024-06-28 05:17:11 +00:00
zstd	Cache generated binary across jobs	2024-08-26 23:43:09 +02:00