silverwind b23c70d439 fix: add missing checks to several handlers and services (#40120) ...

Several code paths skipped checks their siblings perform, or cleaned up
more than they validated.

- Official team review requests now count, and removing one no longer
marks an unrelated review official
- Release edits only delete files of validated attachments
- Rejected container uploads no longer delete an existing blob
- Attachment removal only removes the uploader's own pending uploads
- OpenID sign-in checks the allow and block lists against the normalized
identifier
- HTTP git access is rejected while a repository is being created, like
SSH

---------

Signed-off-by: silverwind <me@silverwind.io>
Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2026-11-07 09:43:39 +00:00

..

actions

refactor: remove UnmarshalHandleDoubleEncode patch and fix repo unit TODO (#39998)

2026-11-04 05:28:49 +00:00

activities

refactor: remove duplicated and dead Go code (#40244)

2026-11-06 11:59:49 +00:00

admin

refactor: Use db.Get[] instead of db.GetEngine(ctx).Get(bean) to avoid zero value fetching wrong database record (#37977)

2026-06-27 10:24:02 -07:00

asymkey

fix: stop discarding file close and test setup errors (#39987)

2026-11-06 20:45:17 +00:00

audit

feat(auth)!: remove support for obsolete OpenID 2.0 draft (#40231)

2026-11-06 07:21:19 +00:00

auth

refactor: remove duplicated and dead Go code (#40244)

2026-11-06 11:59:49 +00:00

avatars

fix(avatar): use sha256 and inline the federated avatar lookup (#38843)

2026-08-10 23:13:28 +00:00

db

refactor: remove UnmarshalHandleDoubleEncode patch and fix repo unit TODO (#39998)

2026-11-04 05:28:49 +00:00

dbfs

test: consolidate Go tests (#39962)

2026-10-24 13:48:19 +00:00

deploykey

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00

fixtures

feat(auth)!: remove support for obsolete OpenID 2.0 draft (#40231)

2026-11-06 07:21:19 +00:00

git

perf(pull): load the repository once for all commit statuses (#39930)

2026-10-31 17:32:03 +01:00

gituser

fix(ui): too many participants shown in commit avatar stacks (#38689)

2026-07-29 12:39:35 +00:00

issues

fix: add missing checks to several handlers and services (#40120)

2026-11-07 09:43:39 +00:00

organization

perf: speed up repository issue and pull request lists (#40114)

2026-10-31 17:31:44 +01:00

packages

refactor: remove duplicated and dead Go code (#40244)

2026-11-06 11:59:49 +00:00

perm

refactor: remove duplicated and dead Go code (#40244)

2026-11-06 11:59:49 +00:00

project

refactor: remove duplicated and dead Go code (#40244)

2026-11-06 11:59:49 +00:00

pull

fix: PR merge (#39442)

2026-09-26 17:38:42 +00:00

renderhelper

test: consolidate Go tests (#39962)

2026-10-24 13:48:19 +00:00

repo

fix: add missing checks to several handlers and services (#40120)

2026-11-07 09:43:39 +00:00

repostats

refactor: use WithRepo instead of WithDir for most git operations, clean up model migrations (#38555)

2026-07-21 12:18:00 +00:00

secret

test: consolidate Go tests (#39962)

2026-10-24 13:48:19 +00:00

shared/types

feat: manage bot accounts from the admin UI, API and CLI (#38966)

2026-09-18 12:43:36 +00:00

system

test: consolidate Go tests (#39962)

2026-10-24 13:48:19 +00:00

unit

fix(projects): only require project write to move board cards (#40161)

2026-11-01 10:46:53 +00:00

unittest

fix: Fix OneDev migration with OneDev 16.8 and newer (#40017)

2026-10-26 09:48:18 +00:00

user

feat(auth)!: remove support for obsolete OpenID 2.0 draft (#40231)

2026-11-06 07:21:19 +00:00

webhook

test: consolidate Go tests (#39962)

2026-10-24 13:48:19 +00:00

init.go

refactor: use WithRepo instead of WithDir for most git operations, clean up model migrations (#38555)

2026-07-21 12:18:00 +00:00