## go-gitea/gitea — v1.27.2…v1.27.3

_44 commits._

### Features
- **enhance: add permalinks to pull request reviews (#38849) (#39036)** (1350cf8)

### Fixes
- **fix: add missing query parameters on runner list page (#39163)** (a17fb24)
- **fix(actions): keep step-level continue-on-error expressions unevaluated (#39141) (#39148)** (51cc0e7)
- **fix(packages): preserve SemVer prerelease identifiers in Swift Registry (#39156) (#39158)** (e435d76)
- **fix(packages): restrict/limited/token-scope access (#39041, #39043, #39044, #39047, #39046) (#39058)** (1dab66b)
- **fix(repo): prevent MarkAsBrokenEmpty when repository is being migrated (#39091) (#39092)** (068355c)
- **fix(asymkey): do not verify OpenPGP signatures with an SSH instance key (#39073) (#39086)** (3f93080)
- **fix(pull): keep the merged state in sync with git (#39062) (#39118)** (b70f7ae)
- **fix(pull): name the head repository in default compare links (#39075) (#39079)** (3af1ee8)
- **fix(git): parse co-author trailers that are not RFC 5322 addresses (#39076) (#39081)** (6d348e5)
- **fix(attachments): enforce owning repository path (#39048) (#39077)** (565e12d)
- **fix(markup): enforce same-repository issue access (#39045) (#39054)** (25fff4c)
- **fix(actions): verify raw artifact signatures first (#39049) (#39053)** (6e2cf10)
- **fix(api): hide limited users from restricted viewers (#39004) (#39039)** (1e86e1e)
- **fix(repo): limit gitignore template selections (#39027) (#39040)** (0d946be)
- **fix(migrations): cancel GitLab version probes (#39023) (#39035)** (3f01f06)
- **fix(packages): limit Swift package manifests (#39025) (#39032)** (9fe8653)
- **fix(migrations): bound OneDev version responses (#39024) (#39033)** (f64ee9d)
- **fix(packages): limit Maven checksum uploads (#39028) (#39031)** (b5c6b80)
- **fix(packages): bound Alpine metadata entries (#39026) (#39029)** (c9da655)
- **fix(actions): enforce fork pull request trust boundaries (#39005) (#39018)** (dbc17db)
- **fix(git): restrict hook permissions (#39008) (#39016)** (bf7b6f8)
- **fix(api): enforce repository creation token authorization (#39007) (#39014)** (76c768e)
- **fix(api): enforce public-only scope for compare heads (#39006) (#39013)** (320b44d)
- **fix(repo): hide repositories of hidden owners (#39009) (#39012)** (078bb4f)
- **fix(actions): show "Complete job" logs when the last step is skipped (#38939) (#39003)** (883ed3b)
- **fix: avoid enumerating every public repository in issue search (#38992) (#39000)** (eee37e0)
- **fix(actions): Fix how jobs in matrixes are grouped (#38980) (#38998)** (4e515cc)
- **fix: resolve YAML anchors and aliases in Actions workflows (#38984) (#38996)** (d8e179f)
- **fix: honor environment variables during install (#38974) (#38976)** (616dbdd)
- **fix: grant limited-org unit read access to authenticated non-members (#38871) (#38963)** (96c6513)
- **fix: allow anonymous theme switching when REQUIRE_SIGNIN_VIEW is set (#38956) (#38961)** (50be834)
- **fix(actions): drop wrapper span around the action status icon (#38957) (#38959)** (f4bff43)
- **fix(issues): sort scoped labels by exclusive order in dropdowns (#38893) (#38954)** (11de54d)
- **fix(indexer): correct bleve indexer token filters (#38853) (#38951)** (1c3ae57)
- **fix: make "login_name" field optional for API edit user (#38917) (#38945)** (cbcf36c)
- **fix(actions): reject non-mapping matrix include/exclude (#38933)** (5a665c0)
- **fix(ui): respect FEED_PAGING_NUM on the dashboard feed (#38935) (#38936)** (0aa0ea1)

### Docs
- **docs: fix the date in the changelog (#39166)** (146cc3e)
- **docs: add 1.27.3 changelog (#39165)** (65aa1a8)

### Chore
- **chore: repo compare link (#39088) (#39119)** (d2572c7)
- **refactor: private endpoints (#38964) (#38965)** (6024280)
- **ci: remove AWS S3 uploads from release workflows (#38928) (#38929)** (11cd8ff)
- **chore: Pre-register a builtin OAuth2 application for the official Gitea mobile app (#38880) (#38922)** (33498f8)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/go-gitea/gitea?utm_source=github-action)._