forgejo/release-notes/8.0.0
Emmanuel BENOÎT 0801518f5d fix(actions): prevent deleted records' UUID from colliding with new records (#3830)
This commit changes the code that deletes a runner so it updates the UUID before deleting the record. The new UUID is set to 8 0xff bytes followed by a little endian version of the record's numeric ID. Such UUIDs cannot be created from tokens when registering runners, as the first 16 bytes of the token are in the `[0-9a-f]` range. This should prevent deleted runners from colliding with new records if the tokens share the same first 16 characters.

It is a possible solution to issue #3828

Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/3830
Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org>
Co-authored-by: Emmanuel BENOÎT <tseeker@nocternity.net>
Co-committed-by: Emmanuel BENOÎT <tseeker@nocternity.net>
2024-05-19 10:46:15 +00:00
..
feat [FEAT] support searching non default branches/tags when using git-grep (#3654) 2024-05-14 15:41:03 +00:00
fix chore(release-notes): update dependency mermaid to v10.9.1 2024-05-16 15:34:17 +02:00
3139.md Add release note for #3139 2024-04-28 22:44:59 +02:00
3285.md Add a release note for #3285 2024-05-10 09:32:07 +02:00
3383.md Release notes for Limit database max connections by default 2024-04-27 22:03:25 +02:00
3414.md ldap: default domain name (#3414) 2024-04-26 22:38:58 +00:00
3572.md FIX gogs migration if gogs is hosted at a subpath (#3572) 2024-05-01 16:28:44 +00:00
3583.md Fix inconsistent required field (#3583) 2024-05-01 18:29:42 +00:00
3608.md [THEME] fix text selection color 2024-05-02 21:31:03 +05:00
3671.md fix(security): CVE-2024-24788 malformed DNS message 2024-05-08 14:25:08 +02:00
3724.md Update module github.com/caddyserver/certmagic to v0.21.0 (#3724) 2024-05-12 14:56:39 +00:00
3830.md fix(actions): prevent deleted records' UUID from colliding with new records (#3830) 2024-05-19 10:46:15 +00:00