oscbot
released this
2026-06-05 23:39:20 +02:00
| 208 commits to main since this release
4.1.0 (2026-06-05)
Features
- ops: sweep expired sessions and reap stranded CI runs (43c7045)
Bug Fixes
- auth: verify OAuth state nonce to block login CSRF (2d4334c)
- rate-limit: scope integration token to user_get and meter download-all (5959768)
CI
- add Renovate config + PR-check workflow (ef80a18)
- install nodejs in pr-check container (actions/checkout needs it) (a2ba68d)
- pin held deps by allowedVersions (0.x bumps are Renovate 'minor') (1fe548b)
- resolve forgejo-hosted actions via gitea-tags @ data.forgejo.org (c42947e)
- scope gitea-tags override to github-tags datasource only (aaa22ce)
- set Renovate minimumReleaseAge to 3 days (pnpm cooldown + supply-chain hygiene) (bf71b4b)
Downloads