Gitea v1.27.2 released on 13-08-2026
Gitea v1.27.2 is out now. It addresses several security and authentication issues, tightens collaborator access handling and httpsign, and makes WebAuthn user verification configurable per request to reduce privilege and verification regressions.
See the project’s release notes on the repository for full details, including Actions, rendering, storage and package fixes and the dependency update to mermaid v11.16.1.
What’s in this release
- Security and authentication fixes: updated collaborator access handling, httpsign fixes, and WebAuthn user verification configurable per request to harden auth flows.
- Actions and reusable-workflow reliability: resolve pull_request_target reusable workflows at the base commit, preserve github.event.inputs as strings for workflow_dispatch, allow reruns to read previous attempt artifacts, evaluate each ${{ }} expression part independently, and write action task reports atomically.
- Markup, rendering and syntax-highlighting improvements: refactored renderers to avoid panics, fixed markup links and double-strikethrough-on-code issues, corrected code-block language highlighting, and bumped mermaid to v11.16.1.
Upgrade notes
- Authentication and permission changes may affect workflows and access; test collaborator permissions and WebAuthn behaviour in a staging environment and consult the release notes for configuration details.
- Gitea Cloud instances will be upgraded automatically during the scheduled maintenance window; self-hosted instances should be tested and upgraded when ready.
Share any comments or issues you encounter on the project’s issue tracker or community channels so others can benefit from your experience.
