v1.26.4

cyphar/paperbackv1.26.4Jun 21, 2026by GiteaBot

AI Summary

This release focuses on security and bug fixes. It addresses a potential security vulnerability in OAuth2 authentication by preventing the auto-reactivation of disabled users and fixes a context error handling issue in git log walking.

Key Highlights

Security fix for OAuth2 callback handling
Fixes context error handling in git log walking
Prevents auto-reactivation of disabled users

Full Release Notes

* SECURITY   
  * fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) (#38183)

* BUGFIXES
  * fix: walk git log context error handling (#38182) (#38185)

Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be automatically upgraded to this version during the specified maintenance window.