Release history
Gitea 28.2.0
Adds a builtin OAuth2 app for gitea-vscode and loosens mention-email restrictions for custom watches; Mostly minor fixes otherwise
Gitea 28.1.0
Gitea 28.1.0 fixes git concurrency issues, npm compatibility, OAuth2 scope approval, and improves database transaction handling across MySQL, MariaDB, and MSSQL
Gitea 28.0.0
Breaking changes include routing Git network operations through an internal proxy and new egress settings. Security fix rejects invalid and duplicate Git objects on push
Gitea 1.27.3
Five security fixes: token scope, attachment path enforcement, markup issue access, and artifact verification. Upgrade recommended
Gitea 1.27.2
Gitea 1.27.2 fixes security issues in collaborator access control and WebAuthn, resolves Actions workflow bugs, and corrects markup rendering and storage handling
Gitea 1.27.1
OAuth2 endpoints now enforce mandatory 2FA policy. Security fix
Gitea 1.27.0
Breaking changes to reusable-workflow support; Upgrade now for hardened access checks and migration validation. Script-nonce CSP enforcement ships