Is it safe to update Gitea?
Tracking go-gitea/gitea
Safe to update.
v1.26.4 contains only a security fix preventing disabled users from being auto-reactivated via OAuth2 and a single bug fix for git log context error handling. The release notes call out no breaking changes, required migrations, or manual upgrade steps.
What changed
v1.26.4 is a focused patch release shipping one security fix and one bug fix. The security change closes a gap where disabled user accounts could be silently reactivated when logging in through an OAuth2 provider; disabled accounts now remain inactive after the OAuth2 callback completes. A separate bug fix improves error handling during git log traversal, preventing context errors from being silently ignored.
Source
Every verdict on Bumplog traces back to a GitHub release. No invented details.
