Update dependency go-gitea/gitea to v1.25.4

[renovate]

This PR contains the following updates:

Package	Update	Change
go-gitea/gitea	patch	1.25.1 → 1.25.4

---

Release Notes

go-gitea/gitea (go-gitea/gitea)

v1.25.4

Compare Source

• SECURITY
  • Release attachments must belong to the intended repo (#​36347) (#​36375)
  • Fix permission check on org project operations (#​36318) (#​36373)
  • Clean watches when make a repository private and check permission when send release emails (#​36319) (#​36370)
  • Add more check for stopwatch read or list (#​36340) (#​36368)
  • Fix openid setting check (#​36346) (#​36361)
  • Fix cancel auto merge bug (#​36341) (#​36356)
  • Fix delete attachment check (#​36320) (#​36355)
  • LFS locks must belong to the intended repo (#​36344) (#​36349)
  • Fix bug on notification read (#​36339) #​36387
• ENHANCEMENTS
  • Add more routes to the "expensive" list (#​36290)
  • Make "commit statuses" API accept slashes in "ref" (#​36264) (#​36275)
• BUGFIXES
  • Fix git http service handling (#​36396)
  • Fix markdown newline handling during IME composition (#​36421) (#​36424)
  • Fix missing repository id when migrating release attachments (#​36389)
  • Fix bug when compare in the pull request (#​36363) (#​36372)
  • Fix incorrect text content detection (#​36364) (#​36369)
  • Fill missing has_code in repository api (#​36338) (#​36359)
  • Fix notifications pagination query parameters (#​36351) (#​36358)
  • Fix some trivial problems (#​36336) (#​36337)
  • Prevent panic when GitLab release has more links than sources (#​36295) (#​36305)
  • Fix stats bug when syncing release (#​36285) (#​36294)
  • Always honor user's choice for "delete branch after merge" (#​36281) (#​36286)
  • Use the requested host for LFS links (#​36242) (#​36258)
  • Fix panic when get editor config file (#​36241) (#​36247)
  • Fix regression in writing authorized principals (#​36213) (#​36218)
  • Fix WebAuthn error checking (#​36219) (#​36235)

v1.25.3

Compare Source

• SECURITY
  • Bump toolchain to go1.25.5, misc fixes (#​36082)
• ENHANCEMENTS
  • Add strikethrough button to markdown editor (#​36087) (#​36104)
  • Add "site admin" back to profile menu (#​36010) (#​36013)
  • Improve math rendering (#​36124) (#​36125)
• BUGFIXES
  • Check user visibility when redirecting to a renamed user (#​36148) (#​36159)
  • Fix various bugs (#​36139) (#​36151)
  • Fix bug when viewing the commit diff page with non-ANSI files (#​36149) (#​36150)
  • Hide RSS icon when viewing a file not under a branch (#​36135) (#​36141)
  • Fix SVG size calulation, only use style attribute (#​36133) (#​36134)
  • Make Golang correctly delete temp files during uploading (#​36128) (#​36129)
  • Fix the bug when ssh clone with redirect user or repository (#​36039) (#​36090)
  • Use Golang net/smtp instead of gomail's smtp to send email (#​36055) (#​36083)
  • Fix edit user email bug in API (#​36068) (#​36081)
  • Fix bug when updating user email (#​36058) (#​36066)
  • Fix incorrect viewed files counter if file has changed (#​36009) (#​36047)
  • Fix container registry error handling (#​36021) (#​36037)
  • Fix webAuthn insecure error view (#​36165) (#​36179)
  • Fix some file icon ui (#​36078) (#​36088)
  • Fix Actions pull_request.paths being triggered incorrectly by rebase (#​36045) (#​36054)
  • Fix error handling in mailer and wiki services (#​36041) (#​36053)
  • Fix bugs when comparing and creating pull request (#​36166) (#​36144)

v1.25.2

Compare Source

• SECURITY
  • Upgrade golang.org/x/crypto to 0.45.0 (#​35985) (#​35988)
  • Fix various permission & login related bugs (#​36002) (#​36004)
• ENHANCEMENTS
  • Display source code downloads last for release attachments (#​35897) (#​35903)
  • Change project default column icon to 'star' (#​35967) (#​35979)
• BUGFIXES
  • Allow empty commit when merging pull request with squash style (#​35989) (#​36003)
  • Fix container push tag overwriting (#​35936) (#​35954)
  • Fix corrupted external render content (#​35946) and upgrade golang.org/x packages (#​35950)
  • Limit reading bytes instead of ReadAll (#​35928) (#​35934)
  • Use correct form field for allowed force push users in branch protection API (#​35894) (#​35908)
  • Fix team member access check (#​35899) (#​35905)
  • Fix conda null depend issue (#​35900) (#​35902)
  • Set the dates to now when not specified by the caller (#​35861) (#​35874)
  • Fix gogit ListEntriesRecursiveWithSize (#​35862)
  • Misc CSS fixes (#​35888) (#​35981)
  • Don't show unnecessary error message to end users for DeleteBranchAfterMerge (#​35937) (#​35941)
  • Load jQuery as early as possible to support custom scripts (#​35926) (#​35929)
  • Allow to display embed images/pdfs when SERVE_DIRECT was enabled on MinIO storage (#​35882) (#​35917)
  • Make OAuth2 issuer configurable (#​35915) (#​35916)
  • Fix #​35763: Add proper page title for project pages (#​35773) (#​35909)
  • Fix avatar upload error handling (#​35887) (#​35890)
  • Contribution heatmap improvements (#​35876) (#​35880)
  • Remove padding override on .ui .sha.label (#​35864) (#​35873)
  • Fix pull description code label background (#​35865) (#​35870)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.