git: 4a4015c6e349 - main - www/gitea: update 1.23.6 => 1.23.8 (fix security issues)

From: Vladimir Druzenko <vvd_at_FreeBSD.org>
Date: Thu, 22 May 2025 20:02:17 UTC
The branch main has been updated by vvd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=4a4015c6e349864b1f35a5b7a44dba55a117d689

commit 4a4015c6e349864b1f35a5b7a44dba55a117d689
Author:     Chris Hutchinson <portmaster@bsdforge.com>
AuthorDate: 2025-05-22 19:48:17 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-05-22 20:00:48 +0000

    www/gitea: update 1.23.6 => 1.23.8 (fix security issues)
    
    Security:
    - Fixed a bug when uploading files via the LFS SSH command
      (affects 1.23)
    - Resolved CVE-2025-22873 in the Go os package, which previously
      allowed improper access to parent directories under certain conditions
    
    Release notes:
    https://blog.gitea.com/release-of-1.23.7/
    https://blog.gitea.com/release-of-1.23.8/
    
    Changelogs:
    https://github.com/go-gitea/gitea/releases/tag/v1.23.7
    https://github.com/go-gitea/gitea/releases/tag/v1.23.8
    
    While here improve port:
     - remove go version after default go version was increased to 1.24
     - update WWW
     - align options
    
    PR:             286828
    Approved by:    Stefan Bethke <stb@lassitu.de> (maintainer, implicit - fix security issues)
    Security:       CVE-2025-22873
---
 www/gitea/Makefile | 17 ++++++++---------
 www/gitea/distinfo |  6 +++---
 2 files changed, 11 insertions(+), 12 deletions(-)

diff --git a/www/gitea/Makefile b/www/gitea/Makefile
index 977f1b9cd1d1..dce5dc6f1e97 100644
--- a/www/gitea/Makefile
+++ b/www/gitea/Makefile
@@ -1,7 +1,6 @@
 PORTNAME=	gitea
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.23.6
-PORTREVISION=	1
+DISTVERSION=	1.23.8
 CATEGORIES=	www
 MASTER_SITES=	https://github.com/go-gitea/gitea/releases/download/${DISTVERSIONPREFIX}${DISTVERSION}/ \
 		https://dl.gitea.io/gitea/${DISTVERSION}/
@@ -9,14 +8,14 @@ DISTNAME=	gitea-src-${DISTVERSION}
 
 MAINTAINER=	stb@lassitu.de
 COMMENT=	Compact self-hosted Git service
-WWW=		https://gitea.io/en-US/
+WWW=		https://gitea.com/
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	git:devel/git
 
-USES=		cpe gmake go:1.23,no_targets
+USES=		cpe gmake go:no_targets
 USE_RC_SUBR=	gitea
 
 EXTRACT_AFTER_ARGS=	--strip-components 1 # since 1.17.0, archive includes gitea-src-VERSION directory
@@ -30,18 +29,18 @@ GROUPS=		git
 
 PORTDATA=	*
 
-OPTIONS_DEFINE=	BINDATA GIT_LFS PAM SQLITE
+OPTIONS_DEFINE=		BINDATA GIT_LFS PAM SQLITE
 OPTIONS_DEFAULT=	GIT_LFS PAM SQLITE
-OPTIONS_SUB=	yes
+OPTIONS_SUB=		yes
 
 BINDATA_DESC=	Build a single monolithic binary, with all assets included
 GIT_LFS_DESC=	Support for Git Large File Storage (LFS)
 PAM_DESC=	Enable support for PAM
 
-BINDATA_VARS=	GO_TAGS+=bindata
+BINDATA_VARS=		GO_TAGS+=bindata
 GIT_LFS_RUN_DEPENDS=	git-lfs:devel/git-lfs
-PAM_VARS=	GO_TAGS+=pam
-SQLITE_VARS=	GO_TAGS+="sqlite sqlite_unlock_notify"
+PAM_VARS=		GO_TAGS+=pam
+SQLITE_VARS=		GO_TAGS+="sqlite sqlite_unlock_notify"
 
 .include <bsd.port.options.mk>
 
diff --git a/www/gitea/distinfo b/www/gitea/distinfo
index ccbc74f10126..cff6db15cdc5 100644
--- a/www/gitea/distinfo
+++ b/www/gitea/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1743171461
-SHA256 (gitea-src-1.23.6.tar.gz) = 7704ebce0e31617d9dad985d3f3f4828855ad856383b9efc5a2f81befbed693c
-SIZE (gitea-src-1.23.6.tar.gz) = 55397368
+TIMESTAMP = 1747455860
+SHA256 (gitea-src-1.23.8.tar.gz) = 0ff96c1b7cc0960b5b9d34bd978cedc0f856a168654838bdef3551621f049717
+SIZE (gitea-src-1.23.8.tar.gz) = 55482190