<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Latest commits for branch codeberg-12</title>
    <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/branch/codeberg-12</link>
    <description>The code deployed to Codeberg. If you want to deploy Forgejo yourself or work on the code, check out:</description>
    <pubDate>Wed, 04 Mar 2026 02:27:59 +0100</pubDate>
    <item>
      <title>cb/feat: add symbol of tolerance (!114)</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/33810e15f9aef18cbea77167e51cb25c9daf1285</link>
      <description>cb/feat: add symbol of tolerance (!114)&#xA;&#xA;Ref: !109&#xA;&#xA;Add a symbol of tolerance via the queer flag in the footer. Always show it for guests, otherwise show it for `/`, `/user`, `/about`, `/explore` and all Codeberg organizations related pages.&#xA;&#xA;Reviewed-on: https://codeberg.org/Codeberg-Infrastructure/forgejo/pulls/114&#xA;Reviewed-by: Otto &lt;otto@codeberg.org&gt;&#xA;Co-authored-by: Gusted &lt;postmaster@gusted.xyz&gt;&#xA;Co-committed-by: Gusted &lt;postmaster@gusted.xyz&gt;&#xA;</description>
      <content:encoded><![CDATA[cb/feat: add symbol of tolerance (!114)

Ref: !109

Add a symbol of tolerance via the queer flag in the footer. Always show it for guests, otherwise show it for `/`, `/user`, `/about`, `/explore` and all Codeberg organizations related pages.

Reviewed-on: https://codeberg.org/Codeberg-Infrastructure/forgejo/pulls/114
Reviewed-by: Otto <otto@codeberg.org>
Co-authored-by: Gusted <postmaster@gusted.xyz>
Co-committed-by: Gusted <postmaster@gusted.xyz>
]]></content:encoded>
      <author>Gusted</author>
      <guid>33810e15f9aef18cbea77167e51cb25c9daf1285</guid>
      <pubDate>Sat, 11 Oct 2025 21:26:17 +0200</pubDate>
    </item>
    <item>
      <title>Update to latest Forgejo v12</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/f67cf8ef81ed18a5f07cdea32b996f9b6caac61e</link>
      <description>Update to latest Forgejo v12&#xA;</description>
      <content:encoded><![CDATA[Update to latest Forgejo v12
]]></content:encoded>
      <author>Gusted</author>
      <guid>f67cf8ef81ed18a5f07cdea32b996f9b6caac61e</guid>
      <pubDate>Tue, 07 Oct 2025 22:32:05 +0200</pubDate>
    </item>
    <item>
      <title>[v12.0/forgejo] fix: allow unactivated users to send recovery mails (#9514)</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/3c5457b957037f7ebba8142244f8ea35f2cbaee1</link>
      <description>[v12.0/forgejo] fix: allow unactivated users to send recovery mails (#9514)&#xA;&#xA;**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9504&#xA;&#xA;With forgejo/forgejo#9075 the `GetUserByEmail` now actually only used activated emails. This however broke sending recovery mails to unactivated users, as their email are not yet activated.&#xA;&#xA;Use the newly introduced function `GetUserByEmailSimple` to not care about this activated email requirement and also avoid the no-reply address being a valid email address for this functionality.&#xA;&#xA;Co-authored-by: Gusted &lt;postmaster@gusted.xyz&gt;&#xA;Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9514&#xA;Reviewed-by: Gusted &lt;gusted@noreply.codeberg.org&gt;&#xA;Co-authored-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;Co-committed-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;</description>
      <content:encoded><![CDATA[[v12.0/forgejo] fix: allow unactivated users to send recovery mails (#9514)

**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9504

With forgejo/forgejo#9075 the `GetUserByEmail` now actually only used activated emails. This however broke sending recovery mails to unactivated users, as their email are not yet activated.

Use the newly introduced function `GetUserByEmailSimple` to not care about this activated email requirement and also avoid the no-reply address being a valid email address for this functionality.

Co-authored-by: Gusted <postmaster@gusted.xyz>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9514
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
]]></content:encoded>
      <author>forgejo-backport-action</author>
      <guid>3c5457b957037f7ebba8142244f8ea35f2cbaee1</guid>
      <pubDate>Fri, 03 Oct 2025 08:07:24 +0200</pubDate>
    </item>
    <item>
      <title>Update to latest Forgejo v12</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/eb0ca6b92edede87166dfe97d0dfaeb26b6a9801</link>
      <description>Update to latest Forgejo v12&#xA;</description>
      <content:encoded><![CDATA[Update to latest Forgejo v12
]]></content:encoded>
      <author>Codeberg Build Maintainers</author>
      <guid>eb0ca6b92edede87166dfe97d0dfaeb26b6a9801</guid>
      <pubDate>Wed, 01 Oct 2025 19:05:28 +0000</pubDate>
    </item>
    <item>
      <title>[v12.0/forgejo] fix: package cleaned rule fails if the keep count is too high (#9470)</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/ccf898e7fd4bb049c572018d576585d65ee4b774</link>
      <description>[v12.0/forgejo] fix: package cleaned rule fails if the keep count is too high (#9470)&#xA;&#xA;**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9468&#xA;&#xA;If the keep count of a cleanup rule is greater than the number of available packages, it fails with:&#xA;&#xA;```&#xA;panic(boundsError{x: int64(x), signed: true, y: y, code: boundsSliceB})&#xA;.../packages/packages.go:175&#xA;.../routers/web/org/setting_packages.go:108&#xA;```&#xA;&#xA;Regression of https://codeberg.org/forgejo/forgejo/pulls/9219/files&#xA;&#xA;Refs https://codeberg.org/forgejo/forgejo/issues/9461&#xA;&#xA;&lt;!--start release-notes-assistant--&gt;&#xA;&#xA;## Release notes&#xA;&lt;!--URL:https://codeberg.org/forgejo/forgejo--&gt;&#xA;- Bug fixes&#xA;  - [PR](https://codeberg.org/forgejo/forgejo/pulls/9468): &lt;!--number 9468 --&gt;&lt;!--line 0 --&gt;&lt;!--description cGFja2FnZSBjbGVhbmVkIHJ1bGUgZmFpbHMgaWYgdGhlIGtlZXAgY291bnQgaXMgdG9vIGhpZ2g=--&gt;package cleaned rule fails if the keep count is too high&lt;!--description--&gt;&#xA;&lt;!--end release-notes-assistant--&gt;&#xA;&#xA;Co-authored-by: Earl Warren &lt;contact@earl-warren.org&gt;&#xA;Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9470&#xA;Reviewed-by: Earl Warren &lt;earl-warren@noreply.codeberg.org&gt;&#xA;Co-authored-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;Co-committed-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;</description>
      <content:encoded><![CDATA[[v12.0/forgejo] fix: package cleaned rule fails if the keep count is too high (#9470)

**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9468

If the keep count of a cleanup rule is greater than the number of available packages, it fails with:

```
panic(boundsError{x: int64(x), signed: true, y: y, code: boundsSliceB})
.../packages/packages.go:175
.../routers/web/org/setting_packages.go:108
```

Regression of https://codeberg.org/forgejo/forgejo/pulls/9219/files

Refs https://codeberg.org/forgejo/forgejo/issues/9461

<!--start release-notes-assistant-->

## Release notes
<!--URL:https://codeberg.org/forgejo/forgejo-->
- Bug fixes
  - [PR](https://codeberg.org/forgejo/forgejo/pulls/9468): <!--number 9468 --><!--line 0 --><!--description cGFja2FnZSBjbGVhbmVkIHJ1bGUgZmFpbHMgaWYgdGhlIGtlZXAgY291bnQgaXMgdG9vIGhpZ2g=-->package cleaned rule fails if the keep count is too high<!--description-->
<!--end release-notes-assistant-->

Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9470
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
]]></content:encoded>
      <author>forgejo-backport-action</author>
      <guid>ccf898e7fd4bb049c572018d576585d65ee4b774</guid>
      <pubDate>Mon, 29 Sep 2025 18:00:43 +0200</pubDate>
    </item>
    <item>
      <title>[v12.0/forgejo] fix: upgrade to the ldap version used for testing to 2.5 (#9419)</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/b85ac45c9992ce83150d84e6ac597c9c387cc723</link>
      <description>[v12.0/forgejo] fix: upgrade to the ldap version used for testing to 2.5 (#9419)&#xA;&#xA;**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9417&#xA;&#xA;The LDAP server ontainer image used for tests is pre-populated with:&#xA;&#xA;- https://github.com/rroemhild/docker-test-openldap/tree/v2.5.0/rootfs/&#xA;- https://code.forgejo.org/forgejo/forgejo-test-openldap/src/branch/main/rootfs (adds files)&#xA;&#xA;---&#xA;&#xA;use https://code.forgejo.org/forgejo/forgejo-test-openldap with ldap 2.5 instead of a stretch based image with ldap 2.4 that cannot be rebuilt.&#xA;&#xA;- user sshuser exists specifically to test sshKey sync  instead of a modified hermes user&#xA;- user bender was different from the base image for no useful  purpose (accent in the name), remove the accent&#xA;- the port is 10389 by default instead of 389&#xA;&#xA;Refs https://codeberg.org/forgejo/forgejo/issues/9406&#xA;&#xA;Co-authored-by: Earl Warren &lt;contact@earl-warren.org&gt;&#xA;Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9419&#xA;Reviewed-by: Earl Warren &lt;earl-warren@noreply.codeberg.org&gt;&#xA;Co-authored-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;Co-committed-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;</description>
      <content:encoded><![CDATA[[v12.0/forgejo] fix: upgrade to the ldap version used for testing to 2.5 (#9419)

**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9417

The LDAP server ontainer image used for tests is pre-populated with:

- https://github.com/rroemhild/docker-test-openldap/tree/v2.5.0/rootfs/
- https://code.forgejo.org/forgejo/forgejo-test-openldap/src/branch/main/rootfs (adds files)

---

use https://code.forgejo.org/forgejo/forgejo-test-openldap with ldap 2.5 instead of a stretch based image with ldap 2.4 that cannot be rebuilt.

- user sshuser exists specifically to test sshKey sync  instead of a modified hermes user
- user bender was different from the base image for no useful  purpose (accent in the name), remove the accent
- the port is 10389 by default instead of 389

Refs https://codeberg.org/forgejo/forgejo/issues/9406

Co-authored-by: Earl Warren <contact@earl-warren.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9419
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
]]></content:encoded>
      <author>forgejo-backport-action</author>
      <guid>b85ac45c9992ce83150d84e6ac597c9c387cc723</guid>
      <pubDate>Thu, 25 Sep 2025 14:57:03 +0200</pubDate>
    </item>
    <item>
      <title>[v12.0/forgejo] fix: use correct commit when fetching patch view for review comments (#9374)</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/4b8a01c87949ca0614e61693fbf335f0b3bcc2e3</link>
      <description>[v12.0/forgejo] fix: use correct commit when fetching patch view for review comments (#9374)&#xA;&#xA;**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9264&#xA;&#xA;This is effectively a clean revert of e7a77d32cc, which for some reason broke this logic.&#xA;&#xA;Yes, always having the latest code shown in the diff is nice, but doing this mismatches the commitID and the line number the comment is being posted on, which very easily and frequently leads to reviews that show a completely nonsensical patch above them, cause the code it&#39;s referring too shifted by several lines since the time the review was started and the time it was posted.&#xA;&#xA;Co-authored-by: BtbN &lt;btbn@btbn.de&gt;&#xA;Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9374&#xA;Reviewed-by: Gusted &lt;gusted@noreply.codeberg.org&gt;&#xA;Co-authored-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;Co-committed-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;</description>
      <content:encoded><![CDATA[[v12.0/forgejo] fix: use correct commit when fetching patch view for review comments (#9374)

**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9264

This is effectively a clean revert of e7a77d32cc, which for some reason broke this logic.

Yes, always having the latest code shown in the diff is nice, but doing this mismatches the commitID and the line number the comment is being posted on, which very easily and frequently leads to reviews that show a completely nonsensical patch above them, cause the code it's referring too shifted by several lines since the time the review was started and the time it was posted.

Co-authored-by: BtbN <btbn@btbn.de>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9374
Reviewed-by: Gusted <gusted@noreply.codeberg.org>
Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
]]></content:encoded>
      <author>forgejo-backport-action</author>
      <guid>4b8a01c87949ca0614e61693fbf335f0b3bcc2e3</guid>
      <pubDate>Mon, 22 Sep 2025 03:28:05 +0200</pubDate>
    </item>
    <item>
      <title>Update to latest Forgejo v12</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/d2d67b048a1a507ceb757ad32dad9d59eb708a45</link>
      <description>Update to latest Forgejo v12&#xA;</description>
      <content:encoded><![CDATA[Update to latest Forgejo v12
]]></content:encoded>
      <author>Gusted</author>
      <guid>d2d67b048a1a507ceb757ad32dad9d59eb708a45</guid>
      <pubDate>Sat, 20 Sep 2025 17:27:24 +0200</pubDate>
    </item>
    <item>
      <title>CB/tmpl: update number of ev members</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/b84434259fcd812b36b031f83c9b32e7f21078b1</link>
      <description>CB/tmpl: update number of ev members&#xA;</description>
      <content:encoded><![CDATA[CB/tmpl: update number of ev members
]]></content:encoded>
      <author>Codeberg Build Maintainers</author>
      <guid>b84434259fcd812b36b031f83c9b32e7f21078b1</guid>
      <pubDate>Sat, 20 Sep 2025 14:11:29 +0000</pubDate>
    </item>
    <item>
      <title>[v12.0/forgejo] fix: do not display the title of unsubscribed issues or pull requests in the notification web page (#9364)</title>
      <link>https://codeberg.org/Codeberg-Infrastructure/forgejo/commit/39aca9766ba2d3bb89881813a2e36299920ff1ca</link>
      <description>[v12.0/forgejo] fix: do not display the title of unsubscribed issues or pull requests in the notification web page (#9364)&#xA;&#xA;**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9362&#xA;&#xA;Do not display the title of unsubscribed issues or pull requests in the notification web page . The title of some random issues or pull requests from repositories were accidentally displayed in the notifications of a user. It was a rare occurrence, caused by an incorrect comparison of two unrelated unique identifiers that are unlikely to match (the id of the notification and the id of a repository). If the issue or the pull request belonged to a private repository to which the user had no read access, only the title was leaked. The user was denied permission to view the issue or the pull request when clicking on the link displayed in the notifications web page.&#xA;&#xA;## Checklist&#xA;&#xA;The [contributor guide](https://forgejo.org/docs/next/contributor/) contains information that will be helpful to first time contributors. There also are a few [conditions for merging Pull Requests in Forgejo repositories](https://codeberg.org/forgejo/governance/src/branch/main/PullRequestsAgreement.md). You are also welcome to join the [Forgejo development chatroom](https://matrix.to/#/#forgejo-development:matrix.org).&#xA;&#xA;### Tests&#xA;&#xA;- I added test coverage for Go changes...&#xA;  - [x] in their respective `*_test.go` for unit tests.&#xA;  - [ ] in the `tests/integration` directory if it involves interactions with a live Forgejo server.&#xA;- I added test coverage for JavaScript changes...&#xA;  - [ ] in `web_src/js/*.test.js` if it can be unit tested.&#xA;  - [ ] in `tests/e2e/*.test.e2e.js` if it requires interactions with a live Forgejo server (see also the [developer guide for JavaScript testing](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/tests/e2e/README.md#end-to-end-tests)).&#xA;&#xA;### Documentation&#xA;&#xA;- [ ] I created a pull request [to the documentation](https://codeberg.org/forgejo/docs) to explain to Forgejo users how to use this change.&#xA;- [x] I did not document these changes and I do not expect someone else to do it.&#xA;&#xA;### Release notes&#xA;&#xA;- [ ] I do not want this change to show in the release notes.&#xA;- [ ] I want the title to show in the release notes with a link to this pull request.&#xA;- [x] I want the content of the `release-notes/&lt;pull request number&gt;.md` to be be used for the release notes instead of the title.&#xA;&#xA;&lt;!--start release-notes-assistant--&gt;&#xA;&#xA;## Release notes&#xA;&lt;!--URL:https://codeberg.org/forgejo/forgejo--&gt;&#xA;- Security bug fixes&#xA;  - [PR](https://codeberg.org/forgejo/forgejo/pulls/9362): &lt;!--number 9362 --&gt;&lt;!--line 0 --&gt;&lt;!--description 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--&gt;Do not display the title of unsubscribed issues or pull requests in the notification web page . The title of some random issues or pull requests from repositories were accidentally displayed in the notifications of a user. It was a rare occurrence, caused by an incorrect comparison of two unrelated unique identifiers that are unlikely to match (the id of the notification and the id of a repository). If the issue or the pull request belonged to a private repository to which the user had no read access, only the title was leaked. The user was denied permission to view the issue or the pull request when clicking on the link displayed in the notifications web page.&lt;!--description--&gt;&#xA;&lt;!--end release-notes-assistant--&gt;&#xA;&#xA;Co-authored-by: Earl Warren &lt;earl-warren@noreply.codeberg.org&gt;&#xA;Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9364&#xA;Reviewed-by: Earl Warren &lt;earl-warren@noreply.codeberg.org&gt;&#xA;Co-authored-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;Co-committed-by: forgejo-backport-action &lt;forgejo-backport-action@noreply.codeberg.org&gt;&#xA;</description>
      <content:encoded><![CDATA[[v12.0/forgejo] fix: do not display the title of unsubscribed issues or pull requests in the notification web page (#9364)

**Backport:** https://codeberg.org/forgejo/forgejo/pulls/9362

Do not display the title of unsubscribed issues or pull requests in the notification web page . The title of some random issues or pull requests from repositories were accidentally displayed in the notifications of a user. It was a rare occurrence, caused by an incorrect comparison of two unrelated unique identifiers that are unlikely to match (the id of the notification and the id of a repository). If the issue or the pull request belonged to a private repository to which the user had no read access, only the title was leaked. The user was denied permission to view the issue or the pull request when clicking on the link displayed in the notifications web page.

## Checklist

The [contributor guide](https://forgejo.org/docs/next/contributor/) contains information that will be helpful to first time contributors. There also are a few [conditions for merging Pull Requests in Forgejo repositories](https://codeberg.org/forgejo/governance/src/branch/main/PullRequestsAgreement.md). You are also welcome to join the [Forgejo development chatroom](https://matrix.to/#/#forgejo-development:matrix.org).

### Tests

- I added test coverage for Go changes...
  - [x] in their respective `*_test.go` for unit tests.
  - [ ] in the `tests/integration` directory if it involves interactions with a live Forgejo server.
- I added test coverage for JavaScript changes...
  - [ ] in `web_src/js/*.test.js` if it can be unit tested.
  - [ ] in `tests/e2e/*.test.e2e.js` if it requires interactions with a live Forgejo server (see also the [developer guide for JavaScript testing](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/tests/e2e/README.md#end-to-end-tests)).

### Documentation

- [ ] I created a pull request [to the documentation](https://codeberg.org/forgejo/docs) to explain to Forgejo users how to use this change.
- [x] I did not document these changes and I do not expect someone else to do it.

### Release notes

- [ ] I do not want this change to show in the release notes.
- [ ] I want the title to show in the release notes with a link to this pull request.
- [x] I want the content of the `release-notes/<pull request number>.md` to be be used for the release notes instead of the title.

<!--start release-notes-assistant-->

## Release notes
<!--URL:https://codeberg.org/forgejo/forgejo-->
- Security bug fixes
  - [PR](https://codeberg.org/forgejo/forgejo/pulls/9362): <!--number 9362 --><!--line 0 --><!--description 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-->Do not display the title of unsubscribed issues or pull requests in the notification web page . The title of some random issues or pull requests from repositories were accidentally displayed in the notifications of a user. It was a rare occurrence, caused by an incorrect comparison of two unrelated unique identifiers that are unlikely to match (the id of the notification and the id of a repository). If the issue or the pull request belonged to a private repository to which the user had no read access, only the title was leaked. The user was denied permission to view the issue or the pull request when clicking on the link displayed in the notifications web page.<!--description-->
<!--end release-notes-assistant-->

Co-authored-by: Earl Warren <earl-warren@noreply.codeberg.org>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/9364
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
Co-committed-by: forgejo-backport-action <forgejo-backport-action@noreply.codeberg.org>
]]></content:encoded>
      <author>forgejo-backport-action</author>
      <guid>39aca9766ba2d3bb89881813a2e36299920ff1ca</guid>
      <pubDate>Fri, 19 Sep 2025 23:12:57 +0200</pubDate>
    </item>
  </channel>
</rss>