3 of 4 on in the package: GIT_LFSPAMSQLITEShow the 1 options that are off
BINDATA
pkg-message
Shown after upgrading
Please make sure to empty or maintain the contents of the
/usr/local/share/gitea folder between your upgrades of gitea.
Changes between versions can break the web UI due to residual
files from earlier versions.
1.21.0 has a breaking change regarding the public assets folder. In case
you use a proxying webserver serving the files, you need to update your
configuration:
https://github.com/go-gitea/gitea/pull/25907
Shown after upgrading
When upgrading from Gitea 1.7 or earlier, Gitea requires the addition of
another secret to the config file in order to start up. Either manually add
JWT_SECRET to the /usr/local/etc/gitea/conf/app.ini config file (see
app.ini.sample), or allow Gitea to make the change for you by making the
config file writable to the git user.
Shown after upgrading
Some config file options have been changed in Gitea 1.15. Please refer to
the documentation at https://docs.gitea.io/en-us/customizing-gitea/ and
the release notes.
Shown after upgrading
We remind users that a bug was discovered with gitea dump in 1.14.3-1.14.6
and 1.15.0. Database dumps from these versions cause broken fields in the
repo_unit and login_source tables causing the issue identified in #16961.
Users on 1.14.x must upgrade to 1.14.7 before running gitea dump. See the
release notes for more information.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
28.2.0
✗
–
FreeBSD 15
28.2.0
1.27.3_1
–
FreeBSD 14
28.2.0
1.27.3_1
28.2.0
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
✗
1.27.3_1
–
FreeBSD 14
✗
1.27.3_1
✗
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 28.2.0.
Fixed (63)
Show 63 fixed
VuXML entries whose affected range the packaged version has left.
www/gitea: update to 1.21.5 (fixes security vulnerabilities)
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.21.5
SECURITY
* Prevent anonymous container access if RequireSignInView is enabled
* Update go dependencies and fix go-git
BUGFIXES
* Revert "Speed up loading the dashboard on mysql/mariadb
* Fix an actions schedule bug
* Fix update enable_prune even if mirror_interval is not provided
* Fix uploaded artifacts should be overwritten
* Preserve BOM in web editor
* Strip / from relative links
* Don't remove all mirror repository's releases when mirroring
* Implement MigrateRepository for the actions notifier
* Respect branch info for relative links
* Don't reload timeline page when (un)resolving or replying conversation
* Only migrate the first 255 chars of a Github issue title
* Fix sort bug on repository issues list
* Fix DeleteCollaboration transaction behaviour
* Fix schedule not trigger bug because matching full ref name with short ref
name
* Fix migrate storage bug
* Fix archive creating LFS hooks and breaking pull requests
* Fix reverting a merge commit failing
* Upgrade xorm to v1.3.7 to fix a resource leak problem caused by Iterate
* Fix incorrect PostgreSQL connection string for Unix sockets
ENHANCEMENTS
* Make loading animation less aggressive
* Avoid duplicate JS error messages on UI
* Bump @github/relative-time-element to 4.3.1
MISC
* Warn that DISABLE_QUERY_AUTH_TOKEN is false only if it's explicitly defined
* Remove duplicated checkinit on git module
PR: 277066
Reported by: freebsd@otoh.org
MFH: 2024Q1 (security fixes, bug fixes)
www/gitea: Update version 1.21.0=>1.21.3
- Add relevant vuxml entry
- Move pkg-message to SUB_FILES as we are using PREFIX
Changelog: https://blog.gitea.com/release-of-1.21.3/
PR: 275742
Approved by: submitter is maintainer
www/gitea: Update to 1.20.4 (fixes security vulnerabilities)
This release contains one security fix, as well as a number of enhancements
and bug fixes. See the release notes for details.
Release notes:
* https://blog.gitea.com/release-of-1.20.4
* https://github.com/go-gitea/gitea/releases/tag/v1.20.4
PR: 273691
MFH: 2023Q3
Security: 4061a4b2-4fb1-11ee-acc7-0151f07bc899
www/gitea: Update to 1.20.1 (fixes security vulnerabilities)
This release contains one security fix, and a number of enhancements and
bug fixes. See the release notes for details.
Release notes:
* https://blog.gitea.com/release-of-1.20.1
* https://github.com/go-gitea/gitea/releases/tag/v1.20.1
PR: 272672
MFH: 2023Q3
Security: ab0bab3c-2927-11ee-8608-07b8d3947721
www/gitea: Update to 1.19.4 (fixes security vulnerabilities)
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.19.4
SECURITY
* Fix open redirect check for more cases
API
* Return 404 in the API if the requested webhooks were not found
* Fix organization field being null in GET /api/v1/teams/{id}
ENHANCEMENTS
* Set --font-weight-bold to 600
* Make mailer SMTP check have timed context
* Do not select line numbers when selecting text from the action run logs
BUGFIXES
* Fix bug when change user name
* Fix task list checkbox toggle to work with YAML front matter
* Hide limited users if viewed by anonymous ghost
* Add WithPullRequest for actionsNotifier
* Fix parallelly generating index failure with Mysql
* GitLab migration: Sanitize response for reaction list
* Fix users cannot visit issue attachment bug
* Fix missing reference prefix of commits when sync mirror repository
* Only validate changed columns when update user
* Make DeleteIssue use correct context
* Fix topics deleted via API not being deleted in org page
* Fix Actions being enabled accidentally
* Fix missed table name on iterate lfs meta objects
* Fix safari cookie session bug
* Respect original content when creating secrets
* Fix Pull Mirror out-of-sync bugs
* Fix run list broken when trigger user deleted
* Fix issues list page multiple selection update milestones
* Fix: release page for empty or non-existing target
* Fix close org projects
* Refresh the refernce of the closed PR when reopening
* Fix the permission of team's Actions unit issue
* Bump go.etcd.io/bbolt and blevesearch deps
* Fix new wiki page mirror
* Match unqualified references when syncing pulls as well
DOCS
* Change branch name from master to main in some documents' links
* Remove unnecessary content on docs
* Unify doc links to use paths relative to doc folder
* Fix docs documenting invalid @every for OLDER_THAN cron settings
MISC
* Merge different languages for language stats
* Hiding Secrets options when Actions feature is disabled
* Improve decryption failure message
* Makefile: Use portable !, not GNUish -not, with find(1).
PR: 272380
Reported by: stb@lassitu.de
MFH: 2023Q3 (security fix)
Fix some more needless usages of UTF-8 where ASCII is sufficient
While here, drop the quotes around <beat 'em up> added in commit
fa4ecd821fadb6 as I have been convinced they are not needed here.
www/gitea: Update to 1.18.2
This release fixes a large number of bugs.
Relnotes: https://blog.gitea.io/2023/01/gitea-1.18.1-is-released/
Relnotes: https://blog.gitea.io/2023/01/gitea-1.18.2-is-released/
www/gitea: Update to 1.17.4 (fixes security vulnerabilities)
This release fixes two security issues, a large number of bugs and
contains some enhancements.
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.17.4
PR: 268512
MFH: 2022Q4
Security: d0da046a-81e6-11ed-96ca-0800277bb8a8
www/gitea: Update to 1.17.3 (fixes security vulnerabilities)
- This release fixes three security issues, a large number of bugs and
contains some enhancements.
- Pet portlint
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.17.3
PR: 267106
MFH: 2022Q4
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.
There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.
The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.
Approved by: portmgr (tcberner)
www/gitea: Update to 1.17.0
- add dl.gitea.io to MASTER_SITES
This release fixes ten bugs and contains two enhancements.
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.17.0
PR: 265527
www/gitea: Update to 1.16.9 (fixes security vulnerabilities)
This release fixes two security issues and 18 bugs
ChangeLog: https://github.com/go-gitea/gitea/releases/tag/v1.16.9
PR: 265526