v1.26.4

labring/sealosv1.26.4Jun 21, 2026by GiteaBot

AI Summary

This release addresses a critical security vulnerability where disabled users could be auto-reactivated during OAuth2 callbacks and fixes a bug related to error handling in git log context walks.

Key Highlights

Security fix: prevents auto-reactivation of disabled users on OAuth2 callback
Bugfix: resolves walk git log context error handling issues
Gitea Cloud instances will be automatically upgraded during maintenance

New Features

OAuth2 security patch
Git log error handling fix

Full Release Notes

* SECURITY   
  * fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) (#38183)

* BUGFIXES
  * fix: walk git log context error handling (#38182) (#38185)

Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be automatically upgraded to this version during the specified maintenance window.