Lunny Xiao 20cf4b7849 Fix various permission & login related bugs (#36002) (#36004) ...

Backport #36002 

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 12:33:48 +00:00

..

admin

split admin config settings templates to make it maintain easier (#35294)

2025-09-04 15:42:26 +00:00

auth

Fix a bug missed return (#35655) (#35667)

2025-10-15 07:40:31 +02:00

devtest

fix: auto-expand and auto-scroll for actions logs (#35583) (#35586)

2025-10-05 12:06:41 +08:00

events

…

explore

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

feed

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

healthcheck

…

misc

enforce explanation for necessary nolints and fix bugs (#34883)

2025-06-27 21:48:03 +08:00

org

Fix #35763: Add proper page title for project pages (#35773) (#35909)

2025-11-10 09:42:14 +02:00

repo

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

shared

when using rules to delete packages, remove unclean bugs (#34632)

2025-06-18 04:47:49 +00:00

user

Fix package link setting can only list limited repositories (#35394)

2025-09-11 01:50:17 +02:00

base.go

Redirect to a presigned URL of HEAD for HEAD requests (#35088)

2025-07-16 11:22:45 +00:00

githttp.go

Fix git client accessing renamed repo (#34034)

2025-03-28 07:28:58 +08:00

goget.go

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

home.go

Do not mutate incoming options to SearchRepositoryByName (#34553)

2025-06-02 17:33:25 +00:00

metrics.go

…

nodeinfo.go

Enable addtional linters (#34085)

2025-04-01 10:14:01 +00:00

passkey.go

…

swagger_json.go

Improve OAuth2 provider (correct Issuer, respect ENABLED) (#34966)

2025-07-06 13:36:45 +08:00

web.go

Revert #18491, fix oauth2 client link account (#35745) (#35751)

2025-10-26 15:26:40 -07:00

webfinger.go

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00