Gitea v1.27.1 released on 27-07-2026
Gitea v1.27.1 is out now. It tightens OAuth2 and authentication behaviour with mandatory 2FA for OAuth flows, and delivers a large set of fixes to Actions, runners and UI/diff handling that improve stability and correctness for CI users and administrators.
See Gitea’s GitHub release page for the full notes and details before upgrading.
What’s in this release
- Security and auth hardening: mandatory 2FA enforced on OAuth2 authorize/grant endpoints and prevention of OIDC end-session after password login for OAuth2 users.
- Actions and runners: numerous fixes including multiline log parser support, more robust reusable-workflow and matrix handling, immediate task cancellation when a runner stops reporting, better runner status sorting and protections against bulk runner actions.
- API, UI and diff improvements: aligned Swagger/OpenAPI schemas for UserSettings and TopicListResponse, improved diff contrast and visual fixes, full file highlighting for CR-containing diffs, and several file-tree and UX polish fixes.
Upgrade notes
- Mandatory 2FA on OAuth2 endpoints may affect OAuth clients and users without 2FA enabled; review OAuth client workflows and user 2FA status before upgrading.
- Test the upgrade in staging where possible; workflow and runner behaviour changes can affect CI runs and should be validated prior to production rollout.
Share any feedback or problems you see after upgrading — community reports help catch edge cases and improve follow-up fixes.
