Lunny Xiao 20cf4b7849

Fix various permission & login related bugs (#36002) (#36004) ...

Backport #36002 

Permission & protection check:

- Fix Delete Release permission check
- Fix Update Pull Request with rebase branch protection check
- Fix Issue Dependency permission check
- Fix Delete Comment History ID check

Information leaking:

- Show unified message for non-existing user and invalid password
    - Fix #35984
- Don't expose release draft to non-writer users.
- Make API returns signature's email address instead of the user
profile's.

Auth & Login:

- Avoid GCM OAuth2 attempt when OAuth2 is disabled
    - Fix #35510

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

2025-11-22 12:33:48 +00:00

..

activitypub

Fix context usages (#35348)

2025-08-27 11:00:01 +00:00

admin

Fix updating user visibility (#35036)

2025-07-10 16:17:28 -07:00

misc

enforce explanation for necessary nolints and fix bugs (#34883)

2025-06-27 21:48:03 +08:00

notify

Refactor error system (#33610)

2025-02-16 22:13:17 -08:00

org

Fix updating user visibility (#35036)

2025-07-10 16:17:28 -07:00

packages

Add package version api endpoints (#34173)

2025-04-13 20:00:44 +00:00

repo

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00

settings

Add API endpoint to request contents of multiple files simultaniously (#34139)

2025-04-22 01:20:11 +08:00

shared

Add workflow_run api + webhook (#33964)

2025-06-20 20:14:00 +08:00

swagger

Fix diffpatch API endpoint (#35610) (#35613)

2025-10-10 03:28:40 +00:00

user

Add a login/login-name/username disambiguation to affected endpoint parameters and response/request models (#34901)

2025-06-29 21:17:45 -07:00

utils

Add workflow_run api + webhook (#33964)

2025-06-20 20:14:00 +08:00

api.go

Fix various permission & login related bugs (#36002) (#36004)

2025-11-22 12:33:48 +00:00