Nicolas c20df84548 fix: block fork sync when base repo is no longer readable ...

POST /api/v1/repos/{owner}/{repo}/merge-upstream kept importing commits
from the parent repository even after the parent was switched from public
to private, leaking commits a fork owner could no longer access directly.
Require the doer to still have read access to the base repo's code before
syncing, and map the permission error to 403 (API) / not-found (web).

Assisted-by: Claude:claude-opus-4-8

2026-06-13 17:36:35 +02:00

..

actions

refactor(actions): read runner capabilities from proto field (#38068)

2026-06-11 09:18:31 +00:00

packages

enhance: Migrate remaining gopkg.in/yaml.v3 usages to go.yaml.in/yaml/v4 (#37866)

2026-05-29 01:12:11 +00:00

v1

fix: block fork sync when base repo is no longer readable

2026-06-13 17:36:35 +02:00