We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·19d ago·5 min read
Forgejo v16.0 is available
TL;DR
Forgejo v16.0 introduces critical updates to enhance security against Server-Side Request Forgery (SSRF) vulnerabilities. The update includes a fix that prevents Git from following HTTP redirects, which previously bypassed access restrictions.
✦ Why It Matters
Administrators should immediately review and update their Forgejo configurations to enhance security against SSRF vulnerabilities.
Key Takeaways
- Backup your instance before upgrading to v16.0.
- Review breaking changes in the release notes.
- Customize notification settings for better control.
- Update security configurations for reverse proxy authentication.
Full Summary
Forgejo is a self-hosted platform for code collaboration that has released version 16.0, which includes numerous enhancements and fixes. Notable changes include improved notification settings, allowing users to customize alerts for issues, pull requests, and releases.
The handling of Git mirroring has been refined to prevent unauthorized access through HTTP redirects, and security configurations for reverse proxy authentication have been tightened. Additionally, the user interface has been updated for better readability, and the process of adding members to organizations has been simplified.
The upgrade process is straightforward, but users are advised to back up their instances and review breaking changes before proceeding. Overall, these updates aim to enhance user control and security while improving the overall experience of using Forgejo.