Basavaraj S mandsilverwind 25c5b6ab37 fix(issues): hide commit references the viewer cannot read (#40216) ...

Pushing a commit whose message mentions `owner/repo#1` adds a
"referenced this issue from a commit" event to that issue, with the
commit subject and a link into the pushed repository. The event never
recorded that repository, so a commit in a private repository
referencing a public issue showed its subject and repository path to
anonymous visitors of the issue page and the timeline API.

- The event now records the pushed repository in `RefRepoID`, and is
only shown to viewers who can read that repository's code, including the
issue's own. Older events have no recorded source and stay as they are.
- As on GitHub, the event stays attributed to the repository the commit
was first pushed to, even after the commit reaches another repository,
and is removed when that repository is deleted.

---------

Co-authored-by: silverwind <me@silverwind.io>

2026-11-10 06:13:50 +00:00

..

assignee_test.go

…

assignee.go

…

comments_test.go

fix(issues): hide commit references the viewer cannot read (#40216)

2026-11-10 06:13:50 +00:00

comments.go

fix(issues): hide commit references the viewer cannot read (#40216)

2026-11-10 06:13:50 +00:00

commit_test.go

fix(issues): hide commit references the viewer cannot read (#40216)

2026-11-10 06:13:50 +00:00

commit.go

fix(issues): hide commit references the viewer cannot read (#40216)

2026-11-10 06:13:50 +00:00

content.go

fix(repo): centralize repository-scoped authorization (#39063)

2026-08-26 20:12:53 +08:00

creation.go

feat: restrict pull/issue creation on access basis (#40069)

2026-11-10 00:53:49 +00:00

issue_test.go

feat: restrict pull/issue creation on access basis (#40069)

2026-11-10 00:53:49 +00:00

issue.go

feat: restrict pull/issue creation on access basis (#40069)

2026-11-10 00:53:49 +00:00

label_test.go

fix(actions): match pull_request unlabeled on label removal (#40215)

2026-11-04 17:24:33 +00:00

label.go

fix(actions): match pull_request unlabeled on label removal (#40215)

2026-11-04 17:24:33 +00:00

main_test.go

feat: Allow automatic project actions on events (#30205)

2026-10-23 01:53:45 +00:00

milestone_test.go

…

milestone.go

…

project.go

feat: Allow automatic project actions on events (#30205)

2026-10-23 01:53:45 +00:00

pull_test.go

enhance(codeowners): support section / glob / file view display / skip review request (#40243)

2026-11-06 07:19:51 +00:00

pull.go

enhance(codeowners): support section / glob / file view display / skip review request (#40243)

2026-11-06 07:19:51 +00:00

reaction_test.go

test: consolidate Go tests (#39962)

2026-10-24 13:48:19 +00:00

reaction.go

feat: add release reactions and a GitHub-like reaction bar (#38415)

2026-10-20 15:04:10 +02:00

review_request_test.go

fix: allow re-requesting uncounted review approvals (#38988)

2026-09-08 15:59:06 +00:00

review_request.go

fix: allow re-requesting uncounted review approvals (#38988)

2026-09-08 15:59:06 +00:00

status.go

feat: Replace SSE with WebSocket for UI notifications (#36965)

2026-07-27 07:46:00 +00:00

suggestion_test.go

…

suggestion.go

…

template.go

refactor: remove Ctx field from git.Repository (#38500)

2026-07-17 18:44:31 +08:00