v1.26.4

stalwartlabs/stalwartv1.26.4Jun 21, 2026by GiteaBot

AI Summary

This release focuses on critical security enhancements and bug fixes for the authentication and git handling modules. It addresses a potential vulnerability in OAuth2 to prevent the unintended reactivation of disabled users. Additionally, it resolves an error handling issue within the git log walking functionality.

Key Highlights

Security fix: Prevents auto-reactivation of disabled users on OAuth2 callback
Bugfix: Resolves context error handling in git log walking
Automatic upgrade available for Gitea Cloud instances

Full Release Notes

* SECURITY   
  * fix(auth): do not auto-reactivate disabled users on OAuth2 callback (#38009) (#38183)

* BUGFIXES
  * fix: walk git log context error handling (#38182) (#38185)

Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be automatically upgraded to this version during the specified maintenance window.