Gitea Files

• SECURITY
• Upgrade golang.org/x/crypto to 0.45.0 (#35985) (#35988)
• Fix various permission & login related bugs (#36002) (#36004)
• ENHANCEMENTS
• Display source code downloads last for release attachments (#35897) (#35903)
• Change project default column icon to 'star' (#35967) (#35979)
• BUGFIXES
• Allow empty commit when merging pull request with squash style (#35989) (#36003)
• Fix container push tag overwriting (#35936) (#35954)
• Fix corrupted external render content (#35946) and upgrade golang.org/x packages (#35950)
• Limit reading bytes instead of ReadAll (#35928) (#35934)
• Use correct form field for allowed force push users in branch protection API (#35894) (#35908)
• Fix team member access check (#35899) (#35905)
• Fix conda null depend issue (#35900) (#35902)
• Set the dates to now when not specified by the caller (#35861) (#35874)
• Fix gogit ListEntriesRecursiveWithSize (#35862)
• Misc CSS fixes (#35888) (#35981)
• Don't show unnecessary error message to end users for DeleteBranchAfterMerge (#35937) (#35941)
• Load jQuery as early as possible to support custom scripts (#35926) (#35929)
• Allow to display embed images/pdfs when SERVE_DIRECT was enabled on MinIO storage (#35882) (#35917)
• Make OAuth2 issuer configurable (#35915) (#35916)
• Fix [#35763]: Add proper page title for project pages (#35773) (#35909)
• Fix avatar upload error handling (#35887) (#35890)
• Contribution heatmap improvements (#35876) (#35880)
• Remove padding override on .ui .sha.label (#35864) (#35873)
• Fix pull description code label background (#35865) (#35870)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.