ci: only read the Depends on lines, and let the label be the gate

ci: keep the jq expressions parsable on jq 1.6
ci: run the check with the script from the pull request
2026-11-08 19:10:32 +00:00 · 2026-09-08 12:03:59 -07:00 · 2026-09-08 12:00:37 -07:00 · 2026-09-08 11:58:23 -07:00 · 2026-09-08 11:50:21 -07:00
48 changed files with 2244 additions and 1103 deletions
@@ -0,0 +1,48 @@
+# The status check context of this job is "checks / depends-upstream
+# (pull_request)", which the required status check `checks / *` of the protected
+# main branch matches, so a pull request waiting for gitea cannot be merged.
+# It is a workflow of its own so that a label change does not cancel the build
+# and the preview deployment of the `checks` workflow in test.yaml.
+#
+# The check script comes from the pull request, like the workflow file itself:
+# `pull_request` runs both from the head, so taking the script from the base
+# branch would not gain anything and would leave this workflow unable to run on
+# the pull request that adds it.
+name: checks
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - synchronize
+      - edited
+      - labeled
+      - unlabeled
+
+concurrency:
+  group: depends-upstream-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  depends-upstream:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
+      - name: check the upstream dependencies
+        env:
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          # optional, only lifts the rate limit of the unauthenticated github api
+          GITHUB_COM_TOKEN: ${{ secrets.GITHUB_COM_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          # read the description and the labels from the api instead of the
+          # event context, so nothing from a pull request body is expanded into
+          # this script
+          api="${GITHUB_API_URL:-$GITHUB_SERVER_URL/api/v1}/repos/$GITHUB_REPOSITORY"
+          curl --silent --show-error --fail --output pull.json "$api/pulls/$PR_NUMBER"
+
+          ./scripts/check-upstream-deps.sh pull.json
@@ -0,0 +1,29 @@
+name: unlabel merged upstream dependencies
+
+on:
+  schedule:
+    - cron: '15 */6 * * *' # every 6 hours, quarter past
+  workflow_dispatch:
+
+jobs:
+  unlabel:
+    if: github.repository == 'gitea/docs'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
+      - name: drop the label from the pull requests upstream caught up with
+        env:
+          DEPLOY_TOKEN: ${{ secrets.DEPLOY_TOKEN }}
+          GITHUB_COM_TOKEN: ${{ secrets.GITHUB_COM_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          if [ -z "${DEPLOY_TOKEN:-}" ]; then
+            echo "secrets.DEPLOY_TOKEN is missing, cannot remove the label"
+            exit 1
+          fi
+
+          export GITEA_API="${GITHUB_API_URL:-$GITHUB_SERVER_URL/api/v1}/repos/$GITHUB_REPOSITORY"
+          ./scripts/unlabel-upstream-deps.sh
@@ -48,6 +48,38 @@ The order of the top level sidebar groups comes from `sidebars.js` (and
 `versioned_sidebars/` for released versions), the label and order of every other
 group from the `_category_.json` of its directory.

+### Documenting an unreleased feature
+
+A page that describes a gitea change which is not merged yet must wait for it,
+otherwise the site documents something no release has. Say so in the description
+of the pull request, on a line of its own, and add the `depends-on-upstream`
+label:
+
+```
+Depends on: gitea#35851
+```
+
+The label is what blocks the merge: the `depends-upstream` check fails while it
+is set, unless every dependency is verified as merged, and `main` requires the
+`checks` contexts. The check reads the `Depends on:` lines (`gitea#<id>` or the
+full pull request url, several lines are allowed) to find out what to wait for,
+so the label needs at least one of them. A `gitea#<id>` mentioned anywhere else
+in the description is ignored.
+
+Without the label, a dependency that the check finds unmerged still fails it, so
+forgetting the label does not let an unreleased feature through.
+
+The `unlabel merged upstream dependencies` job runs every 6 hours, removes the
+label once every referenced pull request is merged and comments on the pull
+request, which reruns the check. `scripts/check-upstream-deps.sh` is the check
+itself and can be run locally against the json of a pull request.
+
+The check asks the github api whether a pull request is merged, and the runners
+share the 60 requests per hour it allows without authentication. The optional
+`GITHUB_COM_TOKEN` secret (a token without scopes is enough) raises that limit;
+without it an unverifiable dependency only fails the check when the label is
+set.
+
 ## Cutting a version

 ```shell
@@ -1,153 +0,0 @@
---
-date: "2026-09-12T00:00:00+00:00"
-slug: "audit-logging"
-sidebar_position: 41
-aliases:
-  - /en-us/audit-logging
---
-
-# Audit Logging
-
-Gitea can record security-relevant events as structured audit records: each
-event has an `action`, `actor`, `scope`, `origin`, `message` and a JSON
-`metadata` blob. Recording is **off by default** and does not change request
-behavior when it is disabled.
-
-This is separate from the application, router and access logs described in
-[Logging Configuration](logging-config.md). Those logs are for operations and
-debugging. The audit log is a durable trail of who changed what.
-
-## Enable recording
-
-Set `[audit].RECORD_OUTPUT` to `database` in `app.ini` and restart Gitea:
-
-```ini
-[audit]
-RECORD_OUTPUT = database
-RETENTION_DAYS = 30
-```
-
-Invalid values of `RECORD_OUTPUT` fall back to `disabled`. See the
-[configuration cheat sheet](config-cheat-sheet.md#audit-audit) for every option.
-
-With Docker, the same settings can be applied as
-`GITEA__audit__RECORD_OUTPUT=database` and `GITEA__audit__RETENTION_DAYS=30`
-before Gitea writes them into `app.ini`.
-
-## View events
-
-The Audit Log pages are always available and still list any events that were
-stored earlier. When recording is disabled, the site administration page also
-shows a warning.
-
-| Audience | Location | Events shown |
-| --- | --- | --- |
-| Site administrators | Site administration → Monitoring → Audit Log (`/-/admin/monitor/audit_logs`) | Every event |
-| Signed-in users | User settings → Audit Log (`/user/settings/audit_logs`) | Events scoped to that user |
-| Organization owners | Organization settings → Audit Log (`/<org>/settings/audit_logs`) | Events scoped to that organization |
-| Repository administrators | Repository settings → Audit Log (`/<owner>/<repo>/settings/audit_logs`) | Events scoped to that repository |
-
-Each listing can be filtered by actor (username), action and origin, and sorted
-by timestamp. The actor filter does not match the
-[system actors](#actors-and-origins). Action filters accept an exact action or
-a family prefix such as `user:impersonation` or `repository:webhook`.
-
-Site administrators can download the current filtered result as JSONL
-(newline-delimited JSON) from **Export JSONL**. The file name is
-`gitea-audit-log-<timestamp>.jsonl`.
-
-## Event shape
-
-A recorded event contains:
-
- **Action**: a stable, colon-separated identifier such as `repository:archive`
-  or `user:accesstoken:add`.
- **Actor**: the user who performed the action. Actions taken while impersonating
-  a user record both the impersonator and the impersonated user.
- **Actor credential**: when the request authenticated with a named credential,
-  the event stores its kind and id, never the secret. Typical values:
-  `access-token:<id>`, `oauth2-grant:<id>`, `gitea-actions:<task id>`,
-  `deploy-key:<key id>`.
- **Scope**: the affected unit — `user`, `organization`, `repository` or
-  `system` (instance-wide).
- **Origin**: how the action was initiated — `ui`, `api`, `cli` or `system`.
- **Message**: a human-readable sentence rendered from a per-action template.
- **Metadata**: extra fields that fill the message template (token name, new
-  visibility, and so on). Secrets and token values are not stored.
- **IP address**: the client address of the request, when one exists. Events
-  triggered by a git push record the SSH client address for SSH pushes and
-  `127.0.0.1` for HTTP pushes.
- **Timestamp**: when the event was recorded.
-
-An exported JSONL line looks like:
-
-```json
-{"action":"repository:archive","actor":{"type":"user","id":1,"name":"alice"},"scope":{"type":"repository","id":42,"name":"org/repo"},"message":"Archived repository org/repo.","time":"2026-09-12T11:00:00Z","ip_address":"203.0.113.10","origin":"ui"}
-```
-
-The `system:startup` message is kept stable across Gitea versions so operators
-can parse it: `System started [Gitea {version}]`.
-
-## Actors and origins
-
-Most web and API requests pick up the signed-in user automatically.
-
-Other entry points record a system actor:
-
- `(gitea-cli)` for `gitea admin` commands and the `system:startup` and
-  `system:shutdown` events
- `(gitea-auth-source)` for authentication-source syncs and for users an
-  authentication source creates or updates at sign-in
- `gitea-actions` for Gitea Actions tasks
- `(deploy-key)` for pushes with a deploy key
- `(Cron)` for scheduled cron tasks
- `Unknown` when no actor can be resolved
-
-Events of the `(gitea-cli)` actor use origin `cli`. Cron tasks, git hooks and
-other background work use origin `system`.
-
-## What is recorded
-
-Events cover security-relevant changes, grouped by action family:
-
- **User**: create and delete, admin, restricted and active status, name,
-  password and password reset requests, visibility, emails, authentication
-  source, 2FA, WebAuthn, OpenID, external logins, access tokens, OAuth2
-  applications and grants, SSH/GPG/principal keys, secrets, webhooks,
-  impersonation, failed two-factor authentication
- **Organization**: create and delete, name, visibility, members, teams,
-  OAuth2 applications, secrets, webhooks
- **Repository**: create, fork, archive, delete, rename, visibility, transfer,
-  mirrors, signing verification, collaborators and teams, default branch,
-  branch and tag protection, deploy keys, webhooks, secrets
- **Issues and pull requests**: create, delete, comments and merges
- **Projects and wiki pages**: create, update and delete
- **Actions**: enable, disable and dispatch a workflow
- **System**: startup and shutdown, instance-wide webhooks, authentication
-  sources, instance-wide OAuth2 applications
-
-Recording never fails the request that triggered it. A write error is logged
-and the original operation continues.
-
-## What is not recorded
-
- Read-only access such as browsing, clone, fetch or API GET requests
- Logins, successful or failed, other than failed two-factor authentication
-  (use the [access log](logging-config.md) and
-  [Fail2ban Setup](fail2ban-setup.md) for authentication traffic)
- Edits to issues and pull requests
- Token or secret values
- Which SSH key a real user pushed with (deploy keys are named; ordinary SSH
-  user pushes are not)
-
-## Retention
-
-`RETENTION_DAYS` (default **30**) is the age after which recorded events are
-eligible for deletion. Set it to `0` to keep events forever.
-
-Cleanup is performed by the `cron.delete_old_audit_events` task (`SCHEDULE`
-defaults to `@every 24h`, `OLDER_THAN` defaults to `[audit].RETENTION_DAYS`).
-The task is registered only while `RECORD_OUTPUT` records events **and**
-`RETENTION_DAYS` is greater than `0`. Turning recording off therefore also
-stops pruning; existing rows stay until you delete them or turn recording back
-on.
@@ -656,11 +656,6 @@ And the following unique queues:
  - CIDR list: `1.2.3.0/8` for IPv4 and `2001:db8::/32` for IPv6
  - Wildcard hosts: `*.mydomain.com`, `192.168.100.*`

-## Audit (`audit`)
-
- `RECORD_OUTPUT`: **disabled**: Where security-relevant events are recorded. `disabled` records nothing. `database` writes events to the `audit_event` table and shows them in the admin, organization, repository and user settings. Invalid values fall back to `disabled`. See [Audit Logging](audit-logging.md).
- `RETENTION_DAYS`: **30**: Days to keep recorded events. `0` keeps them forever. Pruning is done by `cron.delete_old_audit_events`. That task is only registered while `RECORD_OUTPUT` records events and `RETENTION_DAYS` is greater than `0`.
-
 ## Camo (`camo`)

 - `ENABLED`: **false**: Enable media proxy, we support images only at the moment.
@@ -1052,7 +1047,7 @@ Release attachment has its own config options in `[repository.release]` section.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -1061,7 +1056,7 @@ Release attachment has its own config options in `[repository.release]` section.
 - `ENABLED`: **true**: Enable running repository health check task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run repository health check task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -1070,13 +1065,12 @@ Release attachment has its own config options in `[repository.release]` section.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running repository statistics check task periodically.
 - `RUN_AT_START`: **true**: Run repository statistics check task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -1096,7 +1090,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -1105,7 +1099,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1113,14 +1107,12 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable cleanup expired actions assets job.
 - `RUN_AT_START`: **true**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight** : Cron syntax for the job.

 #### Cron - Delete Old Action Runs (`cron.cleanup_action_runs`)

 - `ENABLED`: **true**: Enable the job deleting action runs older than `RUN_RETENTION_DAYS`. Deletes nothing while that is 0.
 - `RUN_AT_START`: **false**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for the job.

 #### Cron - Cleanup Deleted Branches (`cron.deleted_branches_cleanup`)
@@ -1206,21 +1198,11 @@ Synchronize external user data (only LDAP user synchronization is supported)
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any action older than this expression will be deleted from database, suggest using `8760h` (1 year) because that's the max length of heatmap.

-#### Cron - Delete old audit events (`cron.delete_old_audit_events`)
-
-Deletes audit events older than the retention period. The task is only registered when `[audit].RECORD_OUTPUT` records events and `[audit].RETENTION_DAYS` is greater than `0`. See [Audit Logging](audit-logging.md).
-
- `ENABLED`: **true**: Enable service.
- `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
- `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
- `OLDER_THAN`: **720h**: any audit event older than this expression will be deleted from the database. Defaults to `[audit].RETENTION_DAYS`.
-
 #### Cron -  Check for new Gitea versions (`cron.update_checker`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1228,7 +1210,7 @@ Deletes audit events older than the retention period. The task is only registere

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1236,7 +1218,6 @@ Deletes audit events older than the retention period. The task is only registere

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -1249,35 +1230,35 @@ Deletes audit events older than the retention period. The task is only registere

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@annually**: Cron syntax to set how often to rebuild

 #### Cron - Stop running tasks which haven't been updated for a long time (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 5m**: Cron syntax to set how often tasks to run the check

 #### Cron - Stop running tasks which have running status and continuous updates but don't end for a long time (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 30m**: Cron syntax to set how often to run the check.

 #### Cron - Cancel jobs which haven't been picked up for a long time (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 6h**: Cron syntax to set how often to run the check.

 #### Cron - Start cron based actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 1m**: Cron syntax to set how often to schedule tasks

 ## Git (`git`)
@@ -86,21 +86,6 @@ PROTOCOL       = smtps
 Note that you'll need to create and use an [App password](https://support.google.com/accounts/answer/185833?hl=en) by enabling 2FA on your Google
 account. You won't be able to use your Google account password directly.

-An app password is the only option: Google
-[turned off access for apps that sign in with a password alone](https://workspaceupdates.googleblog.com/2023/09/winding-down-google-sync-and-less-secure-apps-support.html)
-in 2024 and asks applications to use OAuth instead, which Gitea's mailer does
-not implement — it authenticates with `CRAM-MD5`, `PLAIN` or `LOGIN`.
-
-Two things to keep in mind:
-
- app passwords require 2-step verification on the account, and a Google
-  Workspace administrator can switch them off for the whole domain. If they are
-  not available, send through the
-  [Workspace SMTP relay service](https://support.google.com/a/answer/2956491)
-  or through another mail provider.
- port `587` works as well, with `SMTP_PORT = 587` and
-  `PROTOCOL = smtp+starttls`.
-
 ### ProtonMail

 This feature is currently only available for select Proton for Business customers and those with Visionary and Family plans with custom domain addresses. See [ProtonMail's SMTP documentation](https://proton.me/support/smtp-submission) for more information. This limitation can be circumvented by using the ProtonMail Bridge application.
@@ -41,24 +41,3 @@ client that causes SSH transfers to hang: https://github.com/git-lfs/git-lfs/pul
 This can be worked around on all the client machines by setting the git config:
 `git config --global lfs.ssh.automultiplex false`
 :::
-
-# Changing LFS files through the API
-
-The [contents API](https://docs.gitea.com/api/operations/repo-change-files/)
-works on LFS tracked files as well: send the file content as usual and Gitea
-stores it as an LFS object and commits a pointer file, as long as the path is
-matched by a `filter=lfs` rule in `.gitattributes`.
-
-What is easy to get wrong is the `sha` of the file being changed, which
-`PUT`/`DELETE /repos/{owner}/{repo}/contents/{filepath}` and
-`POST /repos/{owner}/{repo}/contents` require for an existing file. Gitea
-compares it with the ID of the blob the commit has at that path, and for an LFS
-tracked file that blob is the **pointer file**, not the content:
-
- use the `sha` returned by
-  [`GET /repos/{owner}/{repo}/contents/{filepath}`](https://docs.gitea.com/api/operations/repo-get-contents/)
- do not use `lfs_oid` from the same response, which identifies the LFS object,
-  and do not use a checksum of the file itself
-
-Sending anything else fails with `sha does not match`, even though the request
-looks correct.
@@ -16,8 +16,6 @@ The logging configuration of Gitea mainly consists of 3 types of components:

 There is a fully functional log output by default, so it is not necessary to define one.

-Security-relevant events (repository transfers, token changes, impersonation, and similar) are recorded separately. See [Audit Logging](audit-logging.md).
-
 ## Collecting Logs for Help

 To collect logs for help and issue report, see [Support Options](help/support.md).
@@ -43,7 +43,7 @@ You can try it out using [the online demo](https://demo.gitea.com).

 - **Security**

-  Gitea places a strong emphasis on security, offering features such as user permission management, access control lists, [audit logging](administration/audit-logging.md), and more to ensure the security of code and data.
+  Gitea places a strong emphasis on security, offering features such as user permission management, access control lists, and more to ensure the security of code and data.

 - **Code Review**

@@ -34,7 +34,6 @@ _Symbols used in table:_
 | Telemetry                                        | **✘**                                               | ✓         | ✓         | ✓         | ✓         | ✘            | ✘            |
 | Third-party render tool support                  | ✓                                                   | ✘         | ✘         | ✘         | ✓         | ✘            | ✘            |
 | WebAuthn (2FA)                                   | ✓                                                   | ✓         | ✓         | ✓         | ✓         | ✘            | ✓            |
-| Audit log                                        | ✓                                                   | ✓         | ⁄         | ✓         | ✓         | ?            | ?            |
 | Extensive API                                    | ✓                                                   | ✓         | ✓         | ✓         | ✓         | ✓            | ✓            |
 | Built-in Package/Container Registry              | ✓                                                   | ✓         | ✓         | ✓         | ✘         | ✘            | ✘            |
 | Sync commits to an external repo (push mirror)   | ✓                                                   | ✘         | ✓         | ✓         | ✘         | ✓            | ✓            |
@@ -1,166 +0,0 @@
---
-date: "2026-09-03T20:00:00+02:00"
-slug: "install-with-podman-quadlet"
-sidebar_position: 65
-aliases:
-  - /en-us/install-with-podman-quadlet
---
-
-# Installation with Podman Quadlet
-
-Similarly to [Docker](with-docker.md), [Podman](https://podman.io/) can be used to deploy Gitea.
-
-This reference setup guides users through the setup based on Podman Quadlet.
-Podman Quadlet is the native integration of Podman through systemd.
-
-To learn more about Podman Quadlet, see [systemd units using Podman Quadlet](https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html).
-
-This setup installs the quadlets in `~/.config/containers/systemd/`, the directory for rootless quadlets, and uses the rootless images.
-If you install them in a rootful directory such as `/etc/containers/systemd/`, use the rootful images instead.
-
-## Basics
-
-Since Podman v6.0 a single `gitea.quadlets` file can hold multiple quadlets separated by the `---` delimiter.
-
-Paste the following content into a file named `gitea.quadlets`
-
-```ini
-# FileName=gitea-data
-[Volume]
-VolumeName=gitea-data
---
-# FileName=gitea-config
-[Volume]
-VolumeName=gitea-config
---
-# FileName=gitea
-[Container]
-PublishPort=2222:2222
-PublishPort=3000:3000
-Image=docker.gitea.com/gitea:@dockerVersion@-rootless
-ContainerName=gitea
-Mount=type=volume,src=gitea-data.volume,destination=/var/lib/gitea
-Mount=type=volume,src=gitea-config.volume,destination=/etc/gitea
-
-[Service]
-Restart=always
-
-[Install]
-# Start with the user session
-WantedBy=default.target
-```
-
-You can run the installation command
-
-```sh
-$ podman quadlet install ./gitea.quadlets --application=gitea
-/home/user/.config/containers/systemd/gitea/gitea-data.volume
-/home/user/.config/containers/systemd/gitea/gitea-config.volume
-/home/user/.config/containers/systemd/gitea/gitea.container
-```
-
-The `--application=gitea` flag allows us to tell podman to group the quadlets together, this can help for managing and organizing the quadlets files.
-
-You can validate the quadlets are properly installed by looking at the list command
-
-```sh
-$ podman quadlet list
-NAME                 UNIT NAME                    PATH ON DISK                                                     STATUS         APPLICATION  POD
-gitea-config.volume  gitea-config-volume.service  /home/user/.config/containers/systemd/gitea/gitea-config.volume  active/exited  gitea
-gitea-data.volume    gitea-data-volume.service    /home/user/.config/containers/systemd/gitea/gitea-data.volume    active/exited  gitea
-gitea.container      gitea.service                /home/user/.config/containers/systemd/gitea/gitea.container      failed/failed  gitea
-```
-
-You can start the application by running `systemctl --user start gitea` command.
-
-`WantedBy=default.target` starts the service when the user session starts.
-Rootless user services do not run without a session, so to start Gitea at boot, enable lingering for the user with `loginctl enable-linger $USER`.
-
-## Databases
-
-### PostgreSQL database
-
-To start Gitea in combination with a PostgreSQL database, apply these changes to the
-`gitea.quadlets` file created above.
-
-To start Gitea with a database, we need to create a network, so the database and Gitea container can communicate.
-
-```diff
-# FileName=gitea-data
-[Volume]
-VolumeName=gitea-data
---
-# FileName=gitea-config
-[Volume]
-VolumeName=gitea-config
---
-+ # FileName=gitea-postgres-data
-+ [Volume]
-+ VolumeName=gitea-postgres-data
-+ ---
-+ # FileName=gitea
-+ [Network]
-+ NetworkName=gitea
-+ ---
-+ # FileName=gitea-postgres
-+ [Container]
-+ Image=docker.io/library/postgres:18
-+ ContainerName=gitea-postgres
-+ Network=gitea.network
-+ Mount=type=volume,src=gitea-postgres-data.volume,destination=/var/lib/postgresql
-+ Environment=POSTGRES_USER=gitea
-+ Environment=POSTGRES_PASSWORD=gitea
-+ Environment=POSTGRES_DB=gitea
-+
-+ [Service]
-+ Restart=always
-+
-+ [Install]
-+ # Start with the user session
-+ WantedBy=default.target
-+ ---
-# FileName=gitea
-+ [Unit]
-+ Requires=gitea-postgres.service
-+ After=gitea-postgres.service
-+
-[Container]
-PublishPort=2222:2222
-PublishPort=3000:3000
-Image=docker.gitea.com/gitea:@dockerVersion@-rootless
-ContainerName=gitea
-Mount=type=volume,src=gitea-data.volume,destination=/var/lib/gitea
-Mount=type=volume,src=gitea-config.volume,destination=/etc/gitea
-+ Network=gitea.network
-+ Environment=GITEA__database__DB_TYPE=postgres
-+ Environment=GITEA__database__HOST=gitea-postgres:5432
-+ Environment=GITEA__database__NAME=gitea
-+ Environment=GITEA__database__USER=gitea
-+ Environment=GITEA__database__PASSWD=gitea
-
-[Service]
-Restart=always
-
-[Install]
-# Start with the user session
-WantedBy=default.target
-```
-
-## Logs
-
-As systemd manages the container we can use `journalctl` to access the logs
-
-```sh
-$ journalctl --user --follow --unit=gitea.service
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:263:runWeb() [I] Starting Gitea on PID: 2
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:115:showWebStartupMessage() [I] Gitea version: 1.27.3 built with go1.26.7-X:jsonv2 : bindata, timetzdata,
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:116:showWebStartupMessage() [I] * RunMode: prod
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:117:showWebStartupMessage() [I] * AppPath: /usr/local/bin/gitea
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:118:showWebStartupMessage() [I] * WorkPath: /var/lib/gitea
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:119:showWebStartupMessage() [I] * CustomPath: /var/lib/gitea/custom
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:120:showWebStartupMessage() [I] * ConfigFile: /etc/gitea/app.ini
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:121:showWebStartupMessage() [I] Prepare to run install page
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:329:listen() [I] Listen: http://0.0.0.0:3000
-gitea[5967]: 2026/09/03 14:50:42 cmd/web.go:333:listen() [I] AppURL(ROOT_URL): http://localhost:3000/
-gitea[5967]: 2026/09/03 14:50:42 modules/graceful/server.go:52:NewServer() [I] Starting new Web server: tcp:0.0.0.0:3000 on PID: 2
-```
@@ -1074,7 +1074,7 @@ In-Reply-To =

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `ENABLE_SUCCESS_NOTICE`: **true**: 设置为 false 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于安排任务，例如 `@every 168h`。
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: Gitea 用于检查新版本的端点。

@@ -1082,7 +1082,7 @@ In-Reply-To =

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -1102,35 +1102,35 @@ In-Reply-To =

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@annually**: Cron 语法，用于设置重建索引的频率。

 #### Cron - 停止长时间未更新的运行中任务 (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 5m**: Cron 语法，用于设置检查的频率。

 #### Cron - 停止持续更新但长时间未结束的运行中任务 (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 30m**: Cron 语法，用于设置检查的频率。

 #### Cron - 取消长时间未被领取的任务 (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 6h**: Cron 语法，用于设置检查的频率。

 #### Cron - 启动基于定时的 Actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 1m**: Cron 语法，用于设置调度任务的频率。

 ## Git (`git`)
@@ -14,8 +14,6 @@ aliases:
 2. 将 `https://git.example.com/foo` 反向代理到 `http://gitea:3000/foo`
 3. 确保反向代理不会解码 URI。`https://git.example.com/a%2Fb`的请求应该被传递给 `http://gitea:3000/a%2Fb`。
 4. 确保 `Host` 和 `X-Forwarded-Proto` 头被正确的传递给 Gitea，使 Gitea 可以看到正在访问的真实 URL。
-5. 确保 Web 服务器有完整的证书（包括所有中间证书和根证书），以便 `git clone` 和 `git pull` 正常工作。
-6. Gitea 会在 `/-/ws` 使用 WebSocket 连接，用于通知计数等实时更新。请确保反向代理使用 HTTP/1.1，并转发 `Upgrade` 和 `Connection` 头，参见下面的示例。否则 Gitea 会回退为定期轮询。

 ## 使用子路径

@@ -41,7 +39,6 @@ server {
    location / {
        client_max_body_size 512M;
        proxy_pass http://localhost:3000;
-        proxy_http_version 1.1;
        proxy_set_header Connection $http_connection;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Host $host;
@@ -64,9 +61,8 @@ server {

        # 确保 nginx 使用未转义 URI， 按原样保持 "%2F"。 确保 nginx 去除 "/gitea" 子路径前缀， 按原样传递 "/v2"。
        rewrite ^ $request_uri;
-        rewrite ^/(gitea($|/))?(.*) /$3 break;
+        rewrite ^(/gitea)?(/.*) $2 break;
        proxy_pass http://127.0.0.1:3000$uri;
-        proxy_http_version 1.1;

        # 其他的常规 HTTP 表头，见上面“使用 Nginx 作为反向代理服务”小节的配置
        proxy_set_header Connection $http_connection;
@@ -111,7 +107,6 @@ server {
    }

    location / {
-        # 其他指令见上面「使用 Nginx 作为反向代理服务」小节
        proxy_pass http://localhost:3000;
    }
 }
@@ -128,7 +123,6 @@ server {
    server_name git.example.com;

    location / {
-        # 其他指令见上面「使用 Nginx 作为反向代理服务」小节
        proxy_pass http://localhost:3000;
    }
 }
@@ -150,20 +144,6 @@ server {
 }
 ```

-## Nginx Proxy Manager
-
-如果使用 Nginx Proxy Manager 作为 Gitea 的反向代理，配置与原生 Nginx 略有不同。
-
-它会[默认给自定义 location 加上一些指令](https://github.com/NginxProxyManager/nginx-proxy-manager/blob/master/docker/rootfs/etc/nginx/conf.d/include/proxy.conf)，因此上面 Nginx 配置里对应的指令不要再写一遍。否则会因为指令重复（尤其是 `proxy_set_header Host $host`）出现 `400 bad request`。
-
-创建 `/` 自定义 location 时，只需在其配置中加入：
-
-```nginx
-client_max_body_size 512M;
-```
-
-在代理主机上启用 `Websockets Support`，Nginx Proxy Manager 会自行加入 WebSocket 相关指令。再额外添加 `proxy_http_version` 会导致 Nginx 拒绝启动。
-
 ## 使用 Apache HTTPD 作为反向代理服务

 如果您想使用 Apache HTTPD 作为 Gitea 的反向代理服务，您可以为您的 Apache HTTPD 作如下配置（在 Ubuntu 中，配置文件通常在 `/etc/apache2/httpd.conf` 目录下）：
@@ -174,23 +154,30 @@ client_max_body_size 512M;
    ProxyPreserveHost On
    ProxyRequests off
    AllowEncodedSlashes NoDecode
-    ProxyPass / http://localhost:3000/ nocanon upgrade=websocket
+    ProxyPass / http://localhost:3000/ nocanon
    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
 </VirtualHost>
 ```

-:::note
-必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`。
-
-`upgrade=websocket` 需要 Apache HTTPD 2.4.48 或更高版本。更旧的版本**必须**去掉它，否则 Apache HTTPD 将无法启动。
-:::
-
-如果希望用 Let's Encrypt 的 webroot 验证，请在 `ProxyPass` 之前加入 `ProxyPass /.well-known !`，避免把这些请求代理到 Gitea。
+注：必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`

 ## 使用 Apache HTTPD 作为反向代理服务并将 Gitea 路由至一个子路径

 如果您已经有一个域名并且想与 Gitea 共享该域名，您可以增加以下配置为 Gitea 添加路由规则（在 Ubuntu 中，配置文件通常在 `/etc/apache2/httpd.conf` 目录下）：

+```
+<VirtualHost *:80>
+    ...
+    <Proxy *>
+         Order allow,deny
+         Allow from all
+    </Proxy>
+    AllowEncodedSlashes NoDecode
+    # 注意: 路径和 URL 后面都不要写路径符号 '/'
+    ProxyPass /git http://localhost:3000 nocanon
+</VirtualHost>
+```
+
 ```apacheconf
 <VirtualHost *:80>
    ...
@@ -200,7 +187,7 @@ client_max_body_size 512M;
    </Proxy>
    AllowEncodedSlashes NoDecode
    # 注意: 路径和 URL 后面都不要写路径符号 '/'
-    ProxyPass /git http://localhost:3000 nocanon upgrade=websocket
+    ProxyPass /git http://localhost:3000 nocanon
    ProxyPreserveHost On
    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
 </VirtualHost>
@@ -208,55 +195,7 @@ client_max_body_size 512M;

 然后您**必须**在 Gitea 的配置文件中正确的添加类似 `[server] ROOT_URL = http://git.example.com/git/` 的配置项。

-:::note
-必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`。`upgrade=websocket` 需要 Apache HTTPD 2.4.48 或更高版本，更旧的版本请去掉它。
-:::
-
-## 使用 Apache HTTPD 直接提供静态资源
-
-我们可以通过将资源分为静态和动态两种类型来调节性能。
-
-CSS 文件、JavaScript 文件、图片和字体是静态内容。首页、仓库视图和工单列表是动态内容。
-
-Apache HTTPD 可以直接提供静态资源，并且只代理动态资源请求给 Gitea。
-
-将 Gitea 源代码仓库的一个快照下载到 `/path/to/gitea/`。
-在此之后，在本地仓库目录运行 `make frontend` 来生成静态资源。在这个情况下，我们只对 `public/` 目录感兴趣，您可以删除剩下的其他目录。
-（为了生成静态资源，您需要安装一个[带 npm 的 Node ](https://nodejs.org/en/download/)和 `make`）
-
-取决于您的用户量的大小，您可以将流量分离到两个不同的服务器，或者为静态资源配置一个 cdn。
-
-### 单服务器节点，单域名
-
-将 `[server] STATIC_URL_PREFIX = /_/static` 写入您的 Gitea 配置文件：
-
-```apacheconf
-<VirtualHost *:80>
-    ...
-    <Proxy *>
-         Order allow,deny
-         Allow from all
-    </Proxy>
-
-    ProxyPass /_/static/ !
-    Alias /_/static/ /path/to/gitea/public/
-    <Directory /path/to/gitea/public/>
-        Options FollowSymlinks
-		AllowOverride None
-		Require all granted
-    </Directory>
-
-    AllowEncodedSlashes NoDecode
-    # 注意: 路径和 URL 后面都不要写路径符号 '/'
-    ProxyPass / http://localhost:3000/ nocanon upgrade=websocket
-    ProxyPreserveHost On
-    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
-</VirtualHost>
-```
-
-:::note
-必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`。`upgrade=websocket` 需要 Apache HTTPD 2.4.48 或更高版本，更旧的版本请去掉它。
-:::
+注：必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`

 ## 使用 Caddy 作为反向代理服务

@@ -292,13 +231,11 @@ git.example.com {

 - 使用 Microsoft Web Platform Installer 5.1 (WebPI) 安装 Application Request Routing（简称 ARR），或者在 [IIS.net](https://www.iis.net/downloads/microsoft/application-request-routing) 下载这个插件。
 - 一但这个模块被安装到 IIS 上，你将会在 IIS 管理控制台看到一个叫做 URL Rewrite 的新图标。
- 安装 Windows 功能 `WebSocket Protocol`，否则 ARR 无法代理 Gitea 的 WebSocket 端点。
 - 打开 IIS 管理控制台，在左边的列表中点击 `Gitea Proxy` 网页。在中间选中并且双击 URL Rewrite 的图标来加载 URL 重写的面板。
 - 在管理控制台的右边选择 `Add Rule` 操作，并且在 `Inbound and Outbound Rules` 分类中选择 `Reverse Proxy Rule`。
 - 在 Inbound Rules 中， 将 server name 设置为 Gitea 正在运行的主机以及对应端口。例如，如果你在 localhost 的 3000 端口上运行 Gitea，则设置为 `127.0.0.1:3000`。
 - 启用 SSL Offloading
 - 在 Outbound Rules 中，确保设置了 `Rewrite the domain names of the links in HTTP response`，并且将 `From:` 设置为上面的 server name，将 `To:` 设置为你的外部访问名称，例如：`git.example.com`
- 关闭 Application Request Routing 的 `Server Proxy Settings` 中的 `Reverse rewrite host in response headers`（在 IIS 管理器中选择服务器节点，打开 `Application Request Routing Cache`，再打开右侧的 `Server Proxy Settings`）。若保持开启，ARR 会把 `Location` 头里的主机改回内部地址，导致登录或表单提交后的重定向把浏览器送到 `127.0.0.1:3000` 而不是 `git.example.com`。
 - 现在，根据下面的内容为您的网页编辑 `web.config`（将 `127.0.0.1:3000` 和 `git.example.com` 改为适当的值）

 ```xml
@@ -969,7 +969,7 @@ Gitea 创建以下非唯一队列：

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -975,7 +975,7 @@ Gitea 创建以下非唯一队列：

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -990,7 +990,7 @@ Gitea 创建以下非唯一队列：

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -990,7 +990,7 @@ Gitea 创建以下非唯一队列：

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -1101,7 +1101,7 @@ In-Reply-To =

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `ENABLE_SUCCESS_NOTICE`: **true**: 设置为 false 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于安排任务，例如 `@every 168h`。
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: Gitea 用于检查新版本的端点。

@@ -1109,7 +1109,7 @@ In-Reply-To =

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -1129,35 +1129,35 @@ In-Reply-To =

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@annually**: Cron 语法，用于设置重建索引的频率。

 #### Cron - 停止长时间未更新的运行中任务 (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 5m**: Cron 语法，用于设置检查的频率。

 #### Cron - 停止持续更新但长时间未结束的运行中任务 (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 30m**: Cron 语法，用于设置检查的频率。

 #### Cron - 取消长时间未被领取的任务 (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 6h**: Cron 语法，用于设置检查的频率。

 #### Cron - 启动基于定时的 Actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 1m**: Cron 语法，用于设置调度任务的频率。

 ## Git (`git`)
@@ -1106,7 +1106,7 @@ In-Reply-To =

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `ENABLE_SUCCESS_NOTICE`: **true**: 设置为 false 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于安排任务，例如 `@every 168h`。
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: Gitea 用于检查新版本的端点。

@@ -1114,7 +1114,7 @@ In-Reply-To =

 - `ENABLED`: **false**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 语法，用于设置多长时间进行检查。
 - `OLDER_THAN`: **8760h**: 早于此表达式的任何系统通知都将从数据库中删除。

@@ -1134,35 +1134,35 @@ In-Reply-To =

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@annually**: Cron 语法，用于设置重建索引的频率。

 #### Cron - 停止长时间未更新的运行中任务 (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 5m**: Cron 语法，用于设置检查的频率。

 #### Cron - 停止持续更新但长时间未结束的运行中任务 (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **true**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 30m**: Cron 语法，用于设置检查的频率。

 #### Cron - 取消长时间未被领取的任务 (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 6h**: Cron 语法，用于设置检查的频率。

 #### Cron - 启动基于定时的 Actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: 启用服务。
 - `RUN_AT_START`: **false**: 在启动时运行任务（如果启用）。
- `NOTICE_ON_SUCCESS`: **false**: 设置为 true 以打开成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 设置为 true 以关闭成功通知。
 - `SCHEDULE`: **@every 1m**: Cron 语法，用于设置调度任务的频率。

 ## Git (`git`)
@@ -14,7 +14,6 @@ aliases:
 2. 将 `https://git.example.com/foo` 反向代理到 `http://gitea:3000/foo`
 3. 确保反向代理不会解码 URI。`https://git.example.com/a%2Fb`的请求应该被传递给 `http://gitea:3000/a%2Fb`。
 4. 确保 `Host` 和 `X-Forwarded-Proto` 头被正确的传递给 Gitea，使 Gitea 可以看到正在访问的真实 URL。
-5. 确保 Web 服务器有完整的证书（包括所有中间证书和根证书），以便 `git clone` 和 `git pull` 正常工作。

 ## 使用子路径

@@ -62,7 +61,7 @@ server {

        # 确保 nginx 使用未转义 URI， 按原样保持 "%2F"。 确保 nginx 去除 "/gitea" 子路径前缀， 按原样传递 "/v2"。
        rewrite ^ $request_uri;
-        rewrite ^/(gitea($|/))?(.*) /$3 break;
+        rewrite ^(/gitea)?(/.*) $2 break;
        proxy_pass http://127.0.0.1:3000$uri;

        # 其他的常规 HTTP 表头，见上面“使用 Nginx 作为反向代理服务”小节的配置
@@ -76,7 +75,7 @@ server {
 }
 ```

-然后您**必须**在 Gitea 的配置文件中正确的添加类似 `[server] ROOT_URL = http://git.example.com/gitea/` 的配置项。
+然后您**必须**在 Gitea 的配置文件中正确的添加类似 `[server] ROOT_URL = http://git.example.com/git/` 的配置项。

 ## 使用 Nginx 直接提供静态资源

@@ -145,20 +144,6 @@ server {
 }
 ```

-## Nginx Proxy Manager
-
-如果使用 Nginx Proxy Manager 作为 Gitea 的反向代理，配置与原生 Nginx 略有不同。
-
-它会[默认给自定义 location 加上一些指令](https://github.com/NginxProxyManager/nginx-proxy-manager/blob/master/docker/rootfs/etc/nginx/conf.d/include/proxy.conf)，因此上面 Nginx 配置里对应的指令不要再写一遍。否则会因为指令重复（尤其是 `proxy_set_header Host $host`）出现 `400 bad request`。
-
-创建 `/` 自定义 location 时，只需在其配置中加入：
-
-```nginx
-client_max_body_size 512M;
-proxy_set_header Connection $http_connection;
-proxy_set_header Upgrade $http_upgrade;
-```
-
 ## 使用 Apache HTTPD 作为反向代理服务

 如果您想使用 Apache HTTPD 作为 Gitea 的反向代理服务，您可以为您的 Apache HTTPD 作如下配置（在 Ubuntu 中，配置文件通常在 `/etc/apache2/httpd.conf` 目录下）：
@@ -176,12 +161,23 @@ proxy_set_header Upgrade $http_upgrade;

 注：必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`

-如果希望用 Let's Encrypt 的 webroot 验证，请在 `ProxyPass` 之前加入 `ProxyPass /.well-known !`，避免把这些请求代理到 Gitea。
-
 ## 使用 Apache HTTPD 作为反向代理服务并将 Gitea 路由至一个子路径

 如果您已经有一个域名并且想与 Gitea 共享该域名，您可以增加以下配置为 Gitea 添加路由规则（在 Ubuntu 中，配置文件通常在 `/etc/apache2/httpd.conf` 目录下）：

+```
+<VirtualHost *:80>
+    ...
+    <Proxy *>
+         Order allow,deny
+         Allow from all
+    </Proxy>
+    AllowEncodedSlashes NoDecode
+    # 注意: 路径和 URL 后面都不要写路径符号 '/'
+    ProxyPass /git http://localhost:3000 nocanon
+</VirtualHost>
+```
+
 ```apacheconf
 <VirtualHost *:80>
    ...
@@ -201,48 +197,6 @@ proxy_set_header Upgrade $http_upgrade;

 注：必须启用以下 Apache HTTPD 组件：`proxy`， `proxy_http`

-## 使用 Apache HTTPD 直接提供静态资源
-
-我们可以通过将资源分为静态和动态两种类型来调节性能。
-
-CSS 文件、JavaScript 文件、图片和字体是静态内容。首页、仓库视图和工单列表是动态内容。
-
-Apache HTTPD 可以直接提供静态资源，并且只代理动态资源请求给 Gitea。
-
-将 Gitea 源代码仓库的一个快照下载到 `/path/to/gitea/`。
-在此之后，在本地仓库目录运行 `make frontend` 来生成静态资源。在这个情况下，我们只对 `public/` 目录感兴趣，您可以删除剩下的其他目录。
-（为了生成静态资源，您需要安装一个[带 npm 的 Node ](https://nodejs.org/en/download/)和 `make`）
-
-取决于您的用户量的大小，您可以将流量分离到两个不同的服务器，或者为静态资源配置一个 cdn。
-
-### 单服务器节点，单域名
-
-将 `[server] STATIC_URL_PREFIX = /_/static` 写入您的 Gitea 配置文件：
-
-```apacheconf
-<VirtualHost *:80>
-    ...
-    <Proxy *>
-         Order allow,deny
-         Allow from all
-    </Proxy>
-
-    ProxyPass /_/static/ !
-    Alias /_/static/ /path/to/gitea/public/
-    <Directory /path/to/gitea/public/>
-        Options FollowSymlinks
-		AllowOverride None
-		Require all granted
-    </Directory>
-
-    AllowEncodedSlashes NoDecode
-    # 注意: 路径和 URL 后面都不要写路径符号 '/'
-    ProxyPass / http://localhost:3000/ nocanon
-    ProxyPreserveHost On
-    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
-</VirtualHost>
-```
-
 ## 使用 Caddy 作为反向代理服务

 如果您想使用 Caddy 作为 Gitea 的反向代理服务，您可以在 `Caddyfile` 中添加如下配置：
@@ -1079,7 +1079,7 @@ In-Reply-To =

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `ENABLE_SUCCESS_NOTICE`: **true**: 設定為 false 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於安排任務，例如 `@every 168h`。
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: Gitea 用於檢查新版本的端點。

@@ -1087,7 +1087,7 @@ In-Reply-To =

 - `ENABLED`: **false**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於設定多長時間進行檢查。
 - `OLDER_THAN`: **8760h**: 早於此表達式的任何系統通知都將從資料庫中刪除。

@@ -1108,35 +1108,35 @@ In-Reply-To =

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@annually**: Cron 語法，用於設定重建索引的頻率。

 #### Cron - 停止長時間未更新的運行中任務 (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 5m**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 停止持續更新但長時間未結束的運行中任務 (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 30m**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 取消長時間未被領取的任務 (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 6h**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 啟動基於定時的 Actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 1m**: Cron 語法，用於設定調度任務的頻率。

 ## Git (`git`)
@@ -14,8 +14,6 @@ aliases:
 2. 將 `https://git.example.com/foo` 反向代理到 `http://gitea:3000/foo`
 3. 確保反向代理不會解碼 URI。`https://git.example.com/a%2Fb`的請求應該被傳遞給 `http://gitea:3000/a%2Fb`。
 4. 確保 `Host` 和 `X-Forwarded-Proto` 頭被正確的傳遞給 Gitea，使 Gitea 可以看到正在訪問的真實 URL。
-5. 確保 Web 伺服器有完整的憑證（包括所有中間憑證和根憑證），以便 `git clone` 和 `git pull` 正常工作。
-6. Gitea 會在 `/-/ws` 使用 WebSocket 連線，用於通知計數等即時更新。請確保反向代理使用 HTTP/1.1，並轉發 `Upgrade` 和 `Connection` 頭，參見下面的示例。否則 Gitea 會改為定期輪詢。

 ## 使用子路徑

@@ -41,7 +39,6 @@ server {
    location / {
        client_max_body_size 512M;
        proxy_pass http://localhost:3000;
-        proxy_http_version 1.1;
        proxy_set_header Connection $http_connection;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Host $host;
@@ -64,9 +61,8 @@ server {

        # 確保 nginx 使用未轉義 URI， 按原樣保持 "%2F"。 確保 nginx 去除 "/gitea" 子路徑前綴， 按原樣傳遞 "/v2"。
        rewrite ^ $request_uri;
-        rewrite ^/(gitea($|/))?(.*) /$3 break;
+        rewrite ^(/gitea)?(/.*) $2 break;
        proxy_pass http://127.0.0.1:3000$uri;
-        proxy_http_version 1.1;

        # 其他的常規 HTTP 表頭，見上面“使用 Nginx 作為反向代理服務”小節的配置
        proxy_set_header Connection $http_connection;
@@ -111,7 +107,6 @@ server {
    }

    location / {
-        # 其他指令見上面「使用 Nginx 作為反向代理服務」小節
        proxy_pass http://localhost:3000;
    }
 }
@@ -128,7 +123,6 @@ server {
    server_name git.example.com;

    location / {
-        # 其他指令見上面「使用 Nginx 作為反向代理服務」小節
        proxy_pass http://localhost:3000;
    }
 }
@@ -150,20 +144,6 @@ server {
 }
 ```

-## Nginx Proxy Manager
-
-如果使用 Nginx Proxy Manager 作為 Gitea 的反向代理，設定與原生 Nginx 略有不同。
-
-它會[預設給自訂 location 加上一些指令](https://github.com/NginxProxyManager/nginx-proxy-manager/blob/master/docker/rootfs/etc/nginx/conf.d/include/proxy.conf)，因此上面 Nginx 設定裡對應的指令不要再寫一遍。否則會因為指令重複（尤其是 `proxy_set_header Host $host`）出現 `400 bad request`。
-
-建立 `/` 自訂 location 時，只需在其設定中加入：
-
-```nginx
-client_max_body_size 512M;
-```
-
-在代理主機上啟用 `Websockets Support`，Nginx Proxy Manager 會自行加入 WebSocket 相關指令。再額外添加 `proxy_http_version` 會導致 Nginx 拒絕啟動。
-
 ## 使用 Apache HTTPD 作為反向代理服務

 如果您想使用 Apache HTTPD 作為 Gitea 的反向代理服務，您可以為您的 Apache HTTPD 作如下設定（在 Ubuntu 中，設定文件通常在 `/etc/apache2/httpd.conf` 目錄下）：
@@ -174,23 +154,30 @@ client_max_body_size 512M;
    ProxyPreserveHost On
    ProxyRequests off
    AllowEncodedSlashes NoDecode
-    ProxyPass / http://localhost:3000/ nocanon upgrade=websocket
+    ProxyPass / http://localhost:3000/ nocanon
    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
 </VirtualHost>
 ```

-:::note
-必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`。
-
-`upgrade=websocket` 需要 Apache HTTPD 2.4.48 或更高版本。更舊的版本**必須**去掉它，否則 Apache HTTPD 將無法啟動。
-:::
-
-如果希望用 Let's Encrypt 的 webroot 驗證，請在 `ProxyPass` 之前加入 `ProxyPass /.well-known !`，避免把這些請求代理到 Gitea。
+注：必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`

 ## 使用 Apache HTTPD 作為反向代理服務並將 Gitea 路由至一個子路徑

 如果您已經有一個域名並且想與 Gitea 共享該域名，您可以增加以下設定為 Gitea 添加路由規則（在 Ubuntu 中，設定文件通常在 `/etc/apache2/httpd.conf` 目錄下）：

+```
+<VirtualHost *:80>
+    ...
+    <Proxy *>
+         Order allow,deny
+         Allow from all
+    </Proxy>
+    AllowEncodedSlashes NoDecode
+    # 注意: 路徑和 URL 後面都不要寫路徑符號 '/'
+    ProxyPass /git http://localhost:3000 nocanon
+</VirtualHost>
+```
+
 ```apacheconf
 <VirtualHost *:80>
    ...
@@ -200,7 +187,7 @@ client_max_body_size 512M;
    </Proxy>
    AllowEncodedSlashes NoDecode
    # 注意: 路徑和 URL 後面都不要寫路徑符號 '/'
-    ProxyPass /git http://localhost:3000 nocanon upgrade=websocket
+    ProxyPass /git http://localhost:3000 nocanon
    ProxyPreserveHost On
    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
 </VirtualHost>
@@ -208,55 +195,7 @@ client_max_body_size 512M;

 然後您**必須**在 Gitea 的設定文件中正確的添加類似 `[server] ROOT_URL = http://git.example.com/git/` 的設定項。

-:::note
-必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`。`upgrade=websocket` 需要 Apache HTTPD 2.4.48 或更高版本，更舊的版本請去掉它。
-:::
-
-## 使用 Apache HTTPD 直接提供靜態資源
-
-我們可以通過將資源分為靜態和動態兩種類型來調節性能。
-
-CSS 文件、JavaScript 文件、圖片和字體是靜態內容。首頁、倉庫視圖和工單列表是動態內容。
-
-Apache HTTPD 可以直接提供靜態資源，並且只代理動態資源請求給 Gitea。
-
-將 Gitea 源代碼倉庫的一個快照下載到 `/path/to/gitea/`。
-在此之後，在本地倉庫目錄運行 `make frontend` 來生成靜態資源。在這個情況下，我們只對 `public/` 目錄感興趣，您可以刪除剩下的其他目錄。
-（為了生成靜態資源，您需要安裝一個[帶 npm 的 Node ](https://nodejs.org/en/download/)和 `make`）
-
-取決於您的用戶量的大小，您可以將流量分離到兩個不同的服務器，或者為靜態資源設定一個 cdn。
-
-### 單伺服器節點，單域名
-
-將 `[server] STATIC_URL_PREFIX = /_/static` 寫入您的 Gitea 設定文件：
-
-```apacheconf
-<VirtualHost *:80>
-    ...
-    <Proxy *>
-         Order allow,deny
-         Allow from all
-    </Proxy>
-
-    ProxyPass /_/static/ !
-    Alias /_/static/ /path/to/gitea/public/
-    <Directory /path/to/gitea/public/>
-        Options FollowSymlinks
-		AllowOverride None
-		Require all granted
-    </Directory>
-
-    AllowEncodedSlashes NoDecode
-    # 注意: 路徑和 URL 後面都不要寫路徑符號 '/'
-    ProxyPass / http://localhost:3000/ nocanon upgrade=websocket
-    ProxyPreserveHost On
-    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
-</VirtualHost>
-```
-
-:::note
-必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`。`upgrade=websocket` 需要 Apache HTTPD 2.4.48 或更高版本，更舊的版本請去掉它。
-:::
+注：必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`

 ## 使用 Caddy 作為反向代理服務

@@ -292,13 +231,11 @@ git.example.com {

 - 使用 Microsoft Web Platform Installer 5.1 (WebPI) 安裝 Application Request Routing（簡稱 ARR），或者在 [IIS.net](https://www.iis.net/downloads/microsoft/application-request-routing) 下載這個外掛。
 - 一但這個模組被安裝到 IIS 上，你將會在 IIS 管理控制檯看到一個叫做 URL Rewrite 的新圖標。
- 安裝 Windows 功能 `WebSocket Protocol`，否則 ARR 無法代理 Gitea 的 WebSocket 端點。
 - 打開 IIS 管理控制檯，在左邊的列表中點擊 `Gitea Proxy` 網頁。在中間選中並且雙擊 URL Rewrite 的圖標來加載 URL 重寫的面板。
 - 在管理控制檯的右邊選擇 `Add Rule` 操作，並且在 `Inbound and Outbound Rules` 分類中選擇 `Reverse Proxy Rule`。
 - 在 Inbound Rules 中， 將 server name 設定為 Gitea 正在運行的主機以及對應端口。例如，如果你在 localhost 的 3000 端口上運行 Gitea，則設定為 `127.0.0.1:3000`。
 - 啟用 SSL Offloading
 - 在 Outbound Rules 中，確保設定了 `Rewrite the domain names of the links in HTTP response`，並且將 `From:` 設定為上面的 server name，將 `To:` 設定為你的外部訪問名稱，例如：`git.example.com`
- 關閉 Application Request Routing 的 `Server Proxy Settings` 中的 `Reverse rewrite host in response headers`（在 IIS 管理員中選擇伺服器節點，打開 `Application Request Routing Cache`，再開啟右側的 `Server Proxy Settings`）。若保持開啟，ARR 會把 `Location` 頭裡的主機改回內部位址，導致登入或表單提交後的重新導向把瀏覽器送到 `127.0.0.1:3000` 而不是 `git.example.com`。
 - 現在，根據下面的內容為您的網頁編輯 `web.config`（將 `127.0.0.1:3000` 和 `git.example.com` 改為適當的值）

 ```xml
@@ -974,7 +974,7 @@ Gitea 建立以下非唯一隊列：

 - `ENABLED`: **false**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於設定多長時間進行檢查。
 - `OLDER_THAN`: **8760h**: 早於此表達式的任何系統通知都將從資料庫中刪除。

@@ -990,7 +990,7 @@ Gitea 建立以下非唯一隊列：

 - `ENABLED`: **false**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於設定多長時間進行檢查。
 - `OLDER_THAN`: **8760h**: 早於此表達式的任何系統通知都將從資料庫中刪除。

@@ -991,7 +991,7 @@ Gitea 建立以下非唯一隊列：

 - `ENABLED`: **false**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於設定多長時間進行檢查。
 - `OLDER_THAN`: **8760h**: 早於此表達式的任何系統通知都將從資料庫中刪除。

@@ -1106,7 +1106,7 @@ In-Reply-To =

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `ENABLE_SUCCESS_NOTICE`: **true**: 設定為 false 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於安排任務，例如 `@every 168h`。
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: Gitea 用於檢查新版本的端點。

@@ -1114,7 +1114,7 @@ In-Reply-To =

 - `ENABLED`: **false**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於設定多長時間進行檢查。
 - `OLDER_THAN`: **8760h**: 早於此表達式的任何系統通知都將從資料庫中刪除。

@@ -1135,35 +1135,35 @@ In-Reply-To =

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@annually**: Cron 語法，用於設定重建索引的頻率。

 #### Cron - 停止長時間未更新的運行中任務 (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 5m**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 停止持續更新但長時間未結束的運行中任務 (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 30m**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 取消長時間未被領取的任務 (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 6h**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 啟動基於定時的 Actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 1m**: Cron 語法，用於設定調度任務的頻率。

 ## Git (`git`)
@@ -1111,7 +1111,7 @@ In-Reply-To =

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `ENABLE_SUCCESS_NOTICE`: **true**: 設定為 false 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於安排任務，例如 `@every 168h`。
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: Gitea 用於檢查新版本的端點。

@@ -1119,7 +1119,7 @@ In-Reply-To =

 - `ENABLED`: **false**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 168h**: Cron 語法，用於設定多長時間進行檢查。
 - `OLDER_THAN`: **8760h**: 早於此表達式的任何系統通知都將從資料庫中刪除。

@@ -1140,35 +1140,35 @@ In-Reply-To =

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@annually**: Cron 語法，用於設定重建索引的頻率。

 #### Cron - 停止長時間未更新的運行中任務 (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 5m**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 停止持續更新但長時間未結束的運行中任務 (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **true**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 30m**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 取消長時間未被領取的任務 (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 6h**: Cron 語法，用於設定檢查的頻率。

 #### Cron - 啟動基於定時的 Actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: 啟用服務。
 - `RUN_AT_START`: **false**: 在啟動時運行任務（如果啟用）。
- `NOTICE_ON_SUCCESS`: **false**: 設定為 true 以打開成功通知。
+- `NO_SUCCESS_NOTICE`: **false**: 設定為 true 以關閉成功通知。
 - `SCHEDULE`: **@every 1m**: Cron 語法，用於設定調度任務的頻率。

 ## Git (`git`)
@@ -14,7 +14,6 @@ aliases:
 2. 將 `https://git.example.com/foo` 反向代理到 `http://gitea:3000/foo`
 3. 確保反向代理不會解碼 URI。`https://git.example.com/a%2Fb`的請求應該被傳遞給 `http://gitea:3000/a%2Fb`。
 4. 確保 `Host` 和 `X-Forwarded-Proto` 頭被正確的傳遞給 Gitea，使 Gitea 可以看到正在訪問的真實 URL。
-5. 確保 Web 伺服器有完整的憑證（包括所有中間憑證和根憑證），以便 `git clone` 和 `git pull` 正常工作。

 ## 使用子路徑

@@ -62,7 +61,7 @@ server {

        # 確保 nginx 使用未轉義 URI， 按原樣保持 "%2F"。 確保 nginx 去除 "/gitea" 子路徑前綴， 按原樣傳遞 "/v2"。
        rewrite ^ $request_uri;
-        rewrite ^/(gitea($|/))?(.*) /$3 break;
+        rewrite ^(/gitea)?(/.*) $2 break;
        proxy_pass http://127.0.0.1:3000$uri;

        # 其他的常規 HTTP 表頭，見上面“使用 Nginx 作為反向代理服務”小節的配置
@@ -76,7 +75,7 @@ server {
 }
 ```

-然後您**必須**在 Gitea 的設定文件中正確的添加類似 `[server] ROOT_URL = http://git.example.com/gitea/` 的設定項。
+然後您**必須**在 Gitea 的設定文件中正確的添加類似 `[server] ROOT_URL = http://git.example.com/git/` 的設定項。

 ## 使用 Nginx 直接提供靜態資源

@@ -145,20 +144,6 @@ server {
 }
 ```

-## Nginx Proxy Manager
-
-如果使用 Nginx Proxy Manager 作為 Gitea 的反向代理，設定與原生 Nginx 略有不同。
-
-它會[預設給自訂 location 加上一些指令](https://github.com/NginxProxyManager/nginx-proxy-manager/blob/master/docker/rootfs/etc/nginx/conf.d/include/proxy.conf)，因此上面 Nginx 設定裡對應的指令不要再寫一遍。否則會因為指令重複（尤其是 `proxy_set_header Host $host`）出現 `400 bad request`。
-
-建立 `/` 自訂 location 時，只需在其設定中加入：
-
-```nginx
-client_max_body_size 512M;
-proxy_set_header Connection $http_connection;
-proxy_set_header Upgrade $http_upgrade;
-```
-
 ## 使用 Apache HTTPD 作為反向代理服務

 如果您想使用 Apache HTTPD 作為 Gitea 的反向代理服務，您可以為您的 Apache HTTPD 作如下設定（在 Ubuntu 中，設定文件通常在 `/etc/apache2/httpd.conf` 目錄下）：
@@ -176,12 +161,23 @@ proxy_set_header Upgrade $http_upgrade;

 注：必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`

-如果希望用 Let's Encrypt 的 webroot 驗證，請在 `ProxyPass` 之前加入 `ProxyPass /.well-known !`，避免把這些請求代理到 Gitea。
-
 ## 使用 Apache HTTPD 作為反向代理服務並將 Gitea 路由至一個子路徑

 如果您已經有一個域名並且想與 Gitea 共享該域名，您可以增加以下設定為 Gitea 添加路由規則（在 Ubuntu 中，設定文件通常在 `/etc/apache2/httpd.conf` 目錄下）：

+```
+<VirtualHost *:80>
+    ...
+    <Proxy *>
+         Order allow,deny
+         Allow from all
+    </Proxy>
+    AllowEncodedSlashes NoDecode
+    # 注意: 路徑和 URL 後面都不要寫路徑符號 '/'
+    ProxyPass /git http://localhost:3000 nocanon
+</VirtualHost>
+```
+
 ```apacheconf
 <VirtualHost *:80>
    ...
@@ -201,48 +197,6 @@ proxy_set_header Upgrade $http_upgrade;

 注：必須啟用以下 Apache HTTPD 元件：`proxy`， `proxy_http`

-## 使用 Apache HTTPD 直接提供靜態資源
-
-我們可以通過將資源分為靜態和動態兩種類型來調節性能。
-
-CSS 文件、JavaScript 文件、圖片和字體是靜態內容。首頁、倉庫視圖和工單列表是動態內容。
-
-Apache HTTPD 可以直接提供靜態資源，並且只代理動態資源請求給 Gitea。
-
-將 Gitea 源代碼倉庫的一個快照下載到 `/path/to/gitea/`。
-在此之後，在本地倉庫目錄運行 `make frontend` 來生成靜態資源。在這個情況下，我們只對 `public/` 目錄感興趣，您可以刪除剩下的其他目錄。
-（為了生成靜態資源，您需要安裝一個[帶 npm 的 Node ](https://nodejs.org/en/download/)和 `make`）
-
-取決於您的用戶量的大小，您可以將流量分離到兩個不同的服務器，或者為靜態資源設定一個 cdn。
-
-### 單伺服器節點，單域名
-
-將 `[server] STATIC_URL_PREFIX = /_/static` 寫入您的 Gitea 設定文件：
-
-```apacheconf
-<VirtualHost *:80>
-    ...
-    <Proxy *>
-         Order allow,deny
-         Allow from all
-    </Proxy>
-
-    ProxyPass /_/static/ !
-    Alias /_/static/ /path/to/gitea/public/
-    <Directory /path/to/gitea/public/>
-        Options FollowSymlinks
-		AllowOverride None
-		Require all granted
-    </Directory>
-
-    AllowEncodedSlashes NoDecode
-    # 注意: 路徑和 URL 後面都不要寫路徑符號 '/'
-    ProxyPass / http://localhost:3000/ nocanon
-    ProxyPreserveHost On
-    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
-</VirtualHost>
-```
-
 ## 使用 Caddy 作為反向代理服務

 如果您想使用 Caddy 作為 Gitea 的反向代理服務，您可以在 `Caddyfile` 中添加如下設定：
@@ -13,5 +13,5 @@
  "engines": {
    "node": ">=22"
  },
-  "packageManager": "pnpm@12.4.0"
+  "packageManager": "pnpm@12.2.1"
 }
@@ -68,12 +68,11 @@ runner:
  # scratch directories (left behind when a host cleanup delete stalls) older than
  # this duration. Setting either workdir_cleanup_age or idle_cleanup_interval to 0
  # (or any non-positive value) disables stale-directory cleanup entirely, along with
-  # the docker network and volume cleanup below.
+  # the docker network cleanup below.
  #workdir_cleanup_age: 24h
  # Cadence for the idle cleanup pass. Besides the directories above, on runners that use
-  # docker it removes the per-job networks and volumes of jobs this runner did not live to
-  # tear down, which would otherwise hold a subnet of the daemon address pool and the job's
-  # workspace contents until the host is rebuilt.
+  # docker it removes the per-job networks of jobs this runner did not live to tear down,
+  # which would otherwise hold a subnet of the daemon address pool until the host is rebuilt.
  #idle_cleanup_interval: 10m
  # The base interval for periodic log flush to the Gitea instance.
  # Logs may be sent earlier if the buffer reaches log_report_batch_size
@@ -155,8 +154,7 @@ runner:
  #  job_completed: ''

 cache:
-  # Enable caching (used by actions/cache and similar actions). Off means no built-in server is
-  # started and no job is registered with an external_server either.
+  # Enable the built-in cache server (used by actions/cache and similar actions).
  #enabled: true
  # Directory where cache blobs are stored on disk. Default: $HOME/.cache/actcache
  # Ignored when external_server is set.
@@ -193,9 +191,9 @@ cache:
  # until its cache entry expires or is manually removed.
  #offline_mode: false
  # Serve the actions cache service v2 API. The actions that use it refuse any host they do not
-  # take for GitHub, so reaching it means editing that check out of their own bundle, put back
-  # after the copy into the job. That edit is made either way, this only governs the API
-  # advertised. A bundle that does not match is left alone. With v2, uploads need a reachable cache.
+  # take for GitHub, so reaching it means editing that check out of their own bundle, undone
+  # whenever it is downloaded again. That edit is made either way, this only governs the API
+  # advertised. A bundle that does not match is left alone.
  #v2: true
  # How the cache server discards entries, ignored when external_server is set since that
  # server applies its own. Leave a setting out for its default; 0s or 0 turns the three
@@ -273,10 +271,11 @@ container:
  #require_docker: false
  # Timeout to wait for the docker daemon to be reachable, if docker is required by require_docker or runner
  #docker_timeout: 0s
-  # Mount the workspace from a host directory instead of a Docker volume, so jobs
-  # can bind-mount it by its own path into sibling containers (".:/app" in docker
-  # compose). Not needed when workflows use the GITEA_DOCKER_WORKSPACE variable.
-  # The workspace parent directory must be mounted into the runner container.
+  # Bind the workspace to the host filesystem instead of using Docker volumes.
+  # This is required for Docker-in-Docker (DinD) setups when jobs use docker compose
+  # with bind mounts (e.g., ".:/app"), as volume-based workspaces are not accessible
+  # from the DinD daemon's filesystem. When enabled, ensure the workspace parent
+  # directory is also mounted into the runner container and listed in valid_volumes.
  #bind_workdir: false
  # How long a job waits for a service container that declares a healthcheck to become
  # healthy. A negative value (e.g. -1s) starts the steps without waiting.
@@ -103,15 +103,13 @@ Flags:
      --detect-event                     Use first event type from workflow as event that triggered the workflow
  -C, --directory string                 working directory (default ".")
  -n, --dryrun                           dryrun mode
-      --env stringArray                  env to make available to actions with optional value (e.g. --env myenv=foo or --env myenv; override env-file)
+      --env stringArray                  env to make available to actions with optional value (e.g. --env myenv=foo or --env myenv)
      --env-file string                  environment file to read and use as env in the containers (default ".env")
  -E, --event string                     run a event name
  -e, --eventpath string                 path to a JSON event payload file exposed as the event that triggered the workflow
      --gitea-instance string            Gitea instance to use.
  -h, --help                             help for exec
  -i, --image string                     Docker image to use. Use "-self-hosted" to run directly on the host. (default "docker.gitea.com/runner-images:ubuntu-latest")
-      --input stringArray                set an input the workflow declares under its workflow_dispatch or workflow_call trigger, others stay invisible to the inputs context (e.g. --input name=bar; can be specified multiple times with highest precedence)
-      --input-file string                path to an .env-format file containing key=value pairs as baseline workflow inputs (override event inputs)
      --insecure-secrets                 NOT RECOMMENDED! Doesn't hide secrets while printing logs.
  -j, --job string                       run a specific job ID; when several workflow files define that job, also pass --workflows/-W to select the file
      --json                             Output logs in json format
@@ -154,8 +154,7 @@ runner:
  #  job_completed: ''

 cache:
-  # Enable caching (used by actions/cache and similar actions). Off means no built-in server is
-  # started and no job is registered with an external_server either.
+  # Enable the built-in cache server (used by actions/cache and similar actions).
  #enabled: true
  # Directory where cache blobs are stored on disk. Default: $HOME/.cache/actcache
  # Ignored when external_server is set.
@@ -192,9 +191,9 @@ cache:
  # until its cache entry expires or is manually removed.
  #offline_mode: false
  # Serve the actions cache service v2 API. The actions that use it refuse any host they do not
-  # take for GitHub, so reaching it means editing that check out of their own bundle, put back
-  # after the copy into the job. That edit is made either way, this only governs the API
-  # advertised. A bundle that does not match is left alone. With v2, uploads need a reachable cache.
+  # take for GitHub, so reaching it means editing that check out of their own bundle, undone
+  # whenever it is downloaded again. That edit is made either way, this only governs the API
+  # advertised. A bundle that does not match is left alone.
  #v2: true
  # How the cache server discards entries, ignored when external_server is set since that
  # server applies its own. Leave a setting out for its default; 0s or 0 turns the three
@@ -272,10 +271,11 @@ container:
  #require_docker: false
  # Timeout to wait for the docker daemon to be reachable, if docker is required by require_docker or runner
  #docker_timeout: 0s
-  # Mount the workspace from a host directory instead of a Docker volume, so jobs
-  # can bind-mount it by its own path into sibling containers (".:/app" in docker
-  # compose). Not needed when workflows use the GITEA_DOCKER_WORKSPACE variable.
-  # The workspace parent directory must be mounted into the runner container.
+  # Bind the workspace to the host filesystem instead of using Docker volumes.
+  # This is required for Docker-in-Docker (DinD) setups when jobs use docker compose
+  # with bind mounts (e.g., ".:/app"), as volume-based workspaces are not accessible
+  # from the DinD daemon's filesystem. When enabled, ensure the workspace parent
+  # directory is also mounted into the runner container and listed in valid_volumes.
  #bind_workdir: false
  # How long a job waits for a service container that declares a healthcheck to become
  # healthy. A negative value (e.g. -1s) starts the steps without waiting.
@@ -0,0 +1,142 @@
+#!/bin/bash
+#
+# Fails when a pull request depends on a gitea change that is not merged yet.
+#
+# Usage: ./scripts/check-upstream-deps.sh <pull request json>
+#
+# The json is what the gitea api returns for a pull request; the script reads
+# the description and the labels from it. A dependency is declared on a line of
+# its own in the description:
+#
+#   Depends on: gitea#35851
+#   Depends on: https://github.com/go-gitea/gitea/pull/35851
+#
+# and may be declared several times. Only such lines count, so a pull request
+# that merely mentions gitea#35851 in prose is not held back.
+#
+# The `depends-on-upstream` label is what blocks the merge: it fails the check
+# unless every declared dependency is verified as merged. Without the label, a
+# dependency that is known to be unmerged still fails, so a forgotten label does
+# not let an unreleased feature through.
+#
+# Exit codes: 0 nothing blocks, 1 blocked, 2 usage.
+#
+# Environment:
+#   GITHUB_COM_TOKEN   optional, lifts the rate limit of the github api
+#   UPSTREAM_LABEL     label to look for, `depends-on-upstream` by default
+#   REQUIRE_VERIFIED   set to 1 to also fail when the state cannot be determined
+
+set -euo pipefail
+
+LABEL="${UPSTREAM_LABEL:-depends-on-upstream}"
+PULL_JSON="${1:-}"
+
+if [ -z "$PULL_JSON" ] || [ ! -f "$PULL_JSON" ]; then
+  echo "usage: $0 <pull request json>" >&2
+  exit 2
+fi
+
+body="$(jq -r '.body // ""' "$PULL_JSON")"
+# `label` is a keyword in jq 1.6, which is what the runner image has, so the
+# argument cannot be named after it; `(.labels // [])` keeps it parsable there
+labelled="$(jq -r --arg want "$LABEL" '[(.labels // [])[].name] | index($want) != null' "$PULL_JSON")"
+
+require_verified="${REQUIRE_VERIFIED:-0}"
+if [ "$labelled" = 'true' ]; then
+  # the label says the pull request is not ready, so an unverifiable dependency
+  # keeps it blocked instead of letting it through
+  require_verified=1
+fi
+
+# the ids of the `Depends on:` lines, deduplicated
+refs="$(printf '%s\n' "$body" \
+  | grep -iE '^[[:space:]]*depends[ _-]?on[[:space:]]*:' \
+  | grep -oiE 'gitea#[0-9]+|github\.com/go-gitea/gitea/pull/[0-9]+' \
+  | grep -oE '[0-9]+' \
+  | sort -un || true)"
+
+if [ -z "$refs" ]; then
+  if [ "$labelled" = 'true' ]; then
+    echo "This pull request carries the \"$LABEL\" label but does not say what it"
+    echo "depends on. Add a line to the description, for example:"
+    echo
+    echo "  Depends on: gitea#35851"
+    exit 1
+  fi
+  echo "no upstream dependency declared"
+  exit 0
+fi
+
+github_api() {
+  local url="$1"
+  if [ -n "${GITHUB_COM_TOKEN:-}" ]; then
+    curl --silent --show-error --write-out '\n%{http_code}' \
+      -H "Authorization: Bearer $GITHUB_COM_TOKEN" "$url"
+  else
+    curl --silent --show-error --write-out '\n%{http_code}' "$url"
+  fi
+}
+
+unmerged=0
+unknown=0
+for ref in $refs; do
+  response="$(github_api "https://api.github.com/repos/go-gitea/gitea/pulls/$ref")"
+  code="$(printf '%s' "$response" | tail -n 1)"
+  payload="$(printf '%s' "$response" | sed '$d')"
+
+  case "$code" in
+    200)
+      if [ "$(printf '%s' "$payload" | jq -r '.merged')" = 'true' ]; then
+        echo "gitea#$ref is merged"
+      else
+        echo "gitea#$ref is not merged yet ($(printf '%s' "$payload" | jq -r '.state'))"
+        unmerged=1
+      fi
+      ;;
+    404)
+      echo "gitea#$ref is not a pull request of go-gitea/gitea, reference the pull request that adds the feature"
+      unmerged=1
+      ;;
+    403 | 429)
+      echo "gitea#$ref: the github api rejected the request (rate limit), cannot tell whether it is merged"
+      unknown=1
+      ;;
+    *)
+      echo "gitea#$ref: unexpected response $code from the github api, cannot tell whether it is merged"
+      unknown=1
+      ;;
+  esac
+done
+
+if [ "$unknown" -eq 1 ] && [ -z "${GITHUB_COM_TOKEN:-}" ]; then
+  echo
+  echo "The github api allows 60 unauthenticated requests per hour and address,"
+  echo "which the runners share. Set the GITHUB_COM_TOKEN secret to a token with"
+  echo "no scopes to raise that limit."
+fi
+
+if [ "$unmerged" -eq 1 ] || { [ "$unknown" -eq 1 ] && [ "$require_verified" = '1' ]; }; then
+  echo
+  if [ "$labelled" = 'true' ]; then
+    echo "This pull request is labelled \"$LABEL\", so it stays blocked until every"
+    echo "dependency above is merged into gitea main. The scheduled job removes the"
+    echo "label and reruns this check as soon as that is the case."
+  else
+    echo "The documentation of an unreleased feature can only be merged once the"
+    echo "feature itself is in gitea main. Add the \"$LABEL\" label so the pull"
+    echo "request is picked up by the job that watches for it."
+  fi
+  exit 1
+fi
+
+if [ "$unknown" -eq 1 ]; then
+  echo
+  echo "Could not verify every dependency, letting the check pass: the pull request"
+  echo "does not carry the \"$LABEL\" label."
+  exit 0
+fi
+
+if [ "$labelled" = 'true' ]; then
+  echo
+  echo "every declared dependency is merged, the \"$LABEL\" label can be removed"
+fi
@@ -0,0 +1,80 @@
+#!/bin/bash
+#
+# Removes the `depends-on-upstream` label from every open pull request whose
+# referenced gitea pull requests are all merged, and says so in a comment.
+# Removing the label reruns the `depends-upstream` check of that pull request.
+#
+# Usage: ./scripts/unlabel-upstream-deps.sh
+#
+# Environment:
+#   GITEA_API      api of the repository, e.g. https://gitea.com/api/v1/repos/gitea/docs
+#   DEPLOY_TOKEN   token used to remove the label and to comment
+#   GITHUB_COM_TOKEN  optional, lifts the rate limit of the github api
+#   UPSTREAM_LABEL    label to look for, `depends-on-upstream` by default
+#   DRY_RUN        set to 1 to only report what would happen
+
+set -euo pipefail
+
+LABEL="${UPSTREAM_LABEL:-depends-on-upstream}"
+API="${GITEA_API:?GITEA_API is required}"
+DRY_RUN="${DRY_RUN:-0}"
+
+gitea_api() {
+  local method="$1" url="$2" data="${3:-}"
+  local args=(--silent --show-error --fail -X "$method")
+  if [ -n "${DEPLOY_TOKEN:-}" ]; then args+=(-H "Authorization: token $DEPLOY_TOKEN"); fi
+  if [ -n "$data" ]; then args+=(-H 'Content-Type: application/json' --data "$data"); fi
+  curl "${args[@]}" "$url"
+}
+
+# see the note in check-upstream-deps.sh about the argument name
+label_id="$(gitea_api GET "$API/labels?limit=100" | jq -r --arg want "$LABEL" \
+  '.[] | select(.name == $want) | .id')"
+if [ -z "$label_id" ]; then
+  echo "the repository has no \"$LABEL\" label, nothing to do"
+  exit 0
+fi
+
+pulls="$(gitea_api GET "$API/pulls?state=open&limit=50")"
+indexes="$(printf '%s' "$pulls" | jq -r --arg want "$LABEL" \
+  '.[] | select([(.labels // [])[].name] | index($want) != null) | .number')"
+
+if [ -z "$indexes" ]; then
+  echo "no open pull request carries the \"$LABEL\" label"
+  exit 0
+fi
+
+here="$(cd "$(dirname "$0")" && pwd)"
+work="$(mktemp -d)"
+trap 'rm -rf "$work"' EXIT
+
+for index in $indexes; do
+  gitea_api GET "$API/pulls/$index" > "$work/pull.json"
+
+  # the check script exits 0 when every reference is merged; it needs the label
+  # to be absent from its input to stay quiet about it, so drop it here
+  jq 'del(.labels)' "$work/pull.json" > "$work/pull-unlabelled.json"
+  # REQUIRE_VERIFIED keeps a dependency whose state could not be determined from
+  # counting as merged, which would drop the label too early
+  if ! output="$(REQUIRE_VERIFIED=1 "$here/check-upstream-deps.sh" "$work/pull-unlabelled.json" 2>&1)"; then
+    echo "#$index still waits for upstream:"
+    printf '%s\n' "$output" | sed 's/^/    /'
+    continue
+  fi
+
+  if printf '%s' "$output" | grep -q 'no upstream dependency declared'; then
+    echo "#$index carries the label but declares no dependency, leaving it alone"
+    continue
+  fi
+
+  if [ "$DRY_RUN" = '1' ]; then
+    echo "#$index would lose the label:"
+    printf '%s\n' "$output" | sed 's/^/    /'
+    continue
+  fi
+
+  gitea_api DELETE "$API/issues/$index/labels/$label_id" > /dev/null
+  comment="$(printf 'Every referenced gitea pull request is merged, so the `%s` label was removed and the check was rerun.\n\n%s' "$LABEL" "$output")"
+  gitea_api POST "$API/issues/$index/comments" "$(jq -n --arg body "$comment" '{body: $body}')" > /dev/null
+  echo "#$index unlabelled"
+done
@@ -61,7 +61,7 @@ export default defineConfig({
          if (
            !useDocSearch &&
            source === '@pagefind/default-ui' &&
-            importer?.includes('starlight/dist/components/Search.astro')
+            importer?.includes('starlight/components/Search.astro')
          ) {
            pagefindUiRedirected = true;
            return path.join(repoRoot, 'sites/docs/src/lib/pagefind-ui.ts');
@@ -11,13 +11,13 @@
    "check": "astro check"
  },
  "dependencies": {
-    "@astrojs/starlight": "0.42.0",
-    "@astrojs/starlight-docsearch": "0.8.0",
+    "@astrojs/starlight": "0.41.11",
+    "@astrojs/starlight-docsearch": "0.7.0",
    "@gitea-docs/content-loader": "workspace:*",
    "@pagefind/default-ui": "1.5.2",
-    "astro": "7.3.2",
+    "astro": "7.2.10",
    "sharp": "0.35.4",
-    "starlight-openapi": "0.26.2"
+    "starlight-openapi": "0.26.1"
  },
  "devDependencies": {
    "@astrojs/check": "0.9.10",
@@ -27,11 +27,6 @@ interface Operation {
  operationId?: string;
 }

-interface Schema {
-  title?: string;
-  description?: string;
-}
-
 interface SwaggerDocument {
  openapi?: string;
  basePath?: string;
@@ -39,7 +34,6 @@ interface SwaggerDocument {
  schemes?: string[];
  tags?: { name: string; description?: string }[];
  paths?: Record<string, Record<string, Operation | unknown>>;
-  components?: { schemas?: Record<string, Schema> };
 }

 const httpMethods = ['get', 'put', 'post', 'delete', 'options', 'head', 'patch'];
@@ -101,7 +95,6 @@ function normalizeSchema(source: string, name: string): string {
  hyphenateOperationIds(document);

  describeTags(document);
-  nameSchemas(document);

  mkdirSync(cacheDir, { recursive: true });
  const target = path.join(cacheDir, name);
@@ -130,32 +123,6 @@ function describeTags(document: SwaggerDocument): void {
  document.tags = [...described.values()];
 }

-/**
- * Titles the named schemas of an openapi 3.0 document with their own name.
- *
- * starlight-openapi dereferences every `$ref`, so a field of type
- * `ReviewStateType` is rendered as the bare string enum it points at and the
- * name of the type is nowhere on the page: searching the reference for a type
- * name found in an sdk or in an error message turns up nothing (gitea/docs#258).
- * The plugin renders `title` next to the type of a field, so setting it brings
- * the name back, next to the allowed values.
- *
- * Swagger 2.0 documents are left alone, they are rendered with the name of the
- * definition already.
- */
-function nameSchemas(document: SwaggerDocument): void {
-  for (const [name, schema] of Object.entries(document.components?.schemas ?? {})) {
-    if (!schema || typeof schema !== 'object') continue;
-    if (!schema.title) schema.title = name;
-    // the go doc comments start with the name of the type, which would read
-    // "ChangeFilesOptions — ChangeFilesOptions options for ..." once the title
-    // is rendered in front of the description
-    if (schema.description?.startsWith(`${name} `)) {
-      schema.description = schema.description.slice(name.length + 1);
-    }
-  }
-}
-
 /**
 * One starlight-openapi schema per documented api version, each mounted at the
 * route of its version: `/api/` for the latest release, `/api/1.26/` and
@@ -51,7 +51,7 @@

 /* Centre the mobile menu button on the navigation row instead of on the whole
   header bar, which the announcement strip made taller. */
-.sl-menu-button {
+starlight-menu-button button {
  top: calc(
    var(--gitea-announcement-height) + (var(--gitea-nav-row-height) - var(--sl-menu-button-size)) / 2
  );
@@ -6311,14 +6311,6 @@
            "type": "integer",
            "x-go-name": "SourceID"
          },
-          "type": {
-            "allOf": [
-              {
-                "$ref": "#/components/schemas/UserTypeString"
-              }
-            ],
-            "description": "The user type"
-          },
          "visibility": {
            "allOf": [
              {
@@ -10730,14 +10722,6 @@
            "type": "integer",
            "x-go-name": "StarredRepos"
          },
-          "type": {
-            "allOf": [
-              {
-                "$ref": "#/components/schemas/UserTypeString"
-              }
-            ],
-            "description": "the user type"
-          },
          "visibility": {
            "allOf": [
              {
@@ -10894,14 +10878,6 @@
        "type": "object",
        "x-go-package": "gitea.dev/modules/structs"
      },
-      "UserTypeString": {
-        "enum": [
-          "User",
-          "Organization",
-          "Bot"
-        ],
-        "type": "string"
-      },
      "VisibilityString": {
        "enum": [
          "public",
@@ -12082,9 +12058,6 @@
          "403": {
            "$ref": "#/components/responses/forbidden"
          },
-          "409": {
-            "$ref": "#/components/responses/error"
-          },
          "422": {
            "$ref": "#/components/responses/validationError"
          }
@@ -12169,9 +12142,6 @@
          "403": {
            "$ref": "#/components/responses/forbidden"
          },
-          "409": {
-            "$ref": "#/components/responses/error"
-          },
          "422": {
            "$ref": "#/components/responses/validationError"
          }
@@ -27179,9 +27149,6 @@
          },
          "404": {
            "$ref": "#/components/responses/notFound"
-          },
-          "409": {
-            "$ref": "#/components/responses/error"
          }
        },
        "summary": "Merge a branch from upstream",
@@ -35032,12 +34999,6 @@
          "201": {
            "$ref": "#/components/responses/EmailList"
          },
-          "400": {
-            "$ref": "#/components/responses/error"
-          },
-          "409": {
-            "$ref": "#/components/responses/error"
-          },
          "422": {
            "$ref": "#/components/responses/validationError"
          }
@@ -945,9 +945,6 @@
          "403": {
            "$ref": "#/responses/forbidden"
          },
-          "409": {
-            "$ref": "#/responses/error"
-          },
          "422": {
            "$ref": "#/responses/validationError"
          }
@@ -1032,9 +1029,6 @@
          "403": {
            "$ref": "#/responses/forbidden"
          },
-          "409": {
-            "$ref": "#/responses/error"
-          },
          "422": {
            "$ref": "#/responses/validationError"
          }
@@ -14997,9 +14991,6 @@
          },
          "404": {
            "$ref": "#/responses/notFound"
-          },
-          "409": {
-            "$ref": "#/responses/error"
          }
        }
      }
@@ -22282,12 +22273,6 @@
          "201": {
            "$ref": "#/responses/EmailList"
          },
-          "400": {
-            "$ref": "#/responses/error"
-          },
-          "409": {
-            "$ref": "#/responses/error"
-          },
          "422": {
            "$ref": "#/responses/validationError"
          }
@@ -29392,17 +29377,6 @@
          "format": "int64",
          "x-go-name": "SourceID"
        },
-        "type": {
-          "description": "The user type",
-          "type": "string",
-          "enum": [
-            "User",
-            "Organization",
-            "Bot"
-          ],
-          "x-go-enum-desc": "User UserTypeStringUser\nOrganization UserTypeStringOrganization\nBot UserTypeStringBot",
-          "x-go-name": "Type"
-        },
        "visibility": {
          "description": "User visibility level: public, limited, or private",
          "type": "string",
@@ -33765,17 +33739,6 @@
          "format": "int64",
          "x-go-name": "StarredRepos"
        },
-        "type": {
-          "description": "the user type",
-          "type": "string",
-          "enum": [
-            "User",
-            "Organization",
-            "Bot"
-          ],
-          "x-go-enum-desc": "User UserTypeStringUser\nOrganization UserTypeStringOrganization\nBot UserTypeStringBot",
-          "x-go-name": "Type"
-        },
        "visibility": {
          "description": "User visibility level option: public, limited, private",
          "type": "string",
@@ -942,7 +942,7 @@ Default templates for project boards:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -951,7 +951,7 @@ Default templates for project boards:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -960,13 +960,12 @@ Default templates for project boards:
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `RUN_AT_START`: **true**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -986,7 +985,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -995,7 +994,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1003,7 +1002,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable cleanup expired actions assets job.
 - `RUN_AT_START`: **true**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight** : Cron syntax for the job.

 #### Cron - Cleanup Deleted Branches (`cron.deleted_branches_cleanup`)
@@ -1072,7 +1070,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1080,7 +1078,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1088,7 +1086,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -992,7 +992,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -1001,7 +1001,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -1010,13 +1010,12 @@ Default templates for project board view:
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `RUN_AT_START`: **true**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -1036,7 +1035,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -1045,7 +1044,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1114,7 +1113,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1122,7 +1121,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1130,7 +1129,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -1024,7 +1024,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -1033,7 +1033,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -1042,13 +1042,12 @@ Default templates for project board view:
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `RUN_AT_START`: **true**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -1068,7 +1067,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -1077,7 +1076,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1085,7 +1084,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable cleanup expired actions assets job.
 - `RUN_AT_START`: **true**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight** : Cron syntax for the job.

 #### Cron - Cleanup Deleted Branches (`cron.deleted_branches_cleanup`)
@@ -1161,7 +1159,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1169,7 +1167,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1177,7 +1175,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -1026,7 +1026,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -1035,7 +1035,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -1044,13 +1044,12 @@ Default templates for project board view:
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `RUN_AT_START`: **true**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -1070,7 +1069,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -1079,7 +1078,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1087,7 +1086,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable cleanup expired actions assets job.
 - `RUN_AT_START`: **true**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight** : Cron syntax for the job.

 #### Cron - Cleanup Deleted Branches (`cron.deleted_branches_cleanup`)
@@ -1163,7 +1161,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1171,7 +1169,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1179,7 +1177,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -1056,7 +1056,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -1065,7 +1065,7 @@ Default templates for project board view:
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -1074,13 +1074,12 @@ Default templates for project board view:
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `RUN_AT_START`: **true**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -1100,7 +1099,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -1109,7 +1108,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1117,7 +1116,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable cleanup expired actions assets job.
 - `RUN_AT_START`: **true**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight** : Cron syntax for the job.

 #### Cron - Cleanup Deleted Branches (`cron.deleted_branches_cleanup`)
@@ -1207,7 +1205,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1215,7 +1213,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1223,7 +1221,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -1236,35 +1233,35 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@annually**: Cron syntax to set how often to rebuild

 #### Cron - Stop running tasks which haven't been updated for a long time (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 5m**: Cron syntax to set how often tasks to run the check

 #### Cron - Stop running tasks which have running status and continuous updates but don't end for a long time (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 30m**: Cron syntax to set how often to run the check.

 #### Cron - Cancel jobs which haven't been picked up for a long time (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 6h**: Cron syntax to set how often to run the check.

 #### Cron - Start cron based actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 1m**: Cron syntax to set how often to schedule tasks

 ## Git (`git`)
@@ -1069,7 +1069,7 @@ Release attachment has its own config options in `[repository.release]` section.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@every 10m**: Cron syntax for scheduling update mirrors, e.g. `@every 3h`.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `PULL_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling pull mirror updating).
 - `PUSH_LIMIT`: **50**: Limit the number of mirrors added to the queue to this number (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating).

@@ -1078,7 +1078,7 @@ Release attachment has its own config options in `[repository.release]` section.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository health check.
 - `RUN_AT_START`: **false**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `TIMEOUT`: **60s**: Time duration syntax for health check execution timeout.
 - `ARGS`: **_empty_**: Arguments for command `git fsck`, e.g. `--unreachable --tags`. See more on http://git-scm.com/docs/git-fsck

@@ -1087,13 +1087,12 @@ Release attachment has its own config options in `[repository.release]` section.
 - `SCHEDULE`: **@midnight**: Cron syntax for scheduling repository statistics check.
 - `ENABLED`: **true**: Enable running Update mirrors task periodically.
 - `RUN_AT_START`: **true**: Run Update mirrors task when Gitea starts.
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success

 #### Cron - Cleanup hook_task Table (`cron.cleanup_hook_task_table`)

 - `ENABLED`: **true**: Enable cleanup hook_task job.
 - `RUN_AT_START`: **false**: Run cleanup hook_task at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight**: Cron syntax for cleaning hook_task table.
 - `CLEANUP_TYPE` **OlderThan** OlderThan or PerWebhook Method to cleanup hook_task, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook).
 - `OLDER_THAN`: **168h**: If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted.
@@ -1113,7 +1112,7 @@ Update migrated repositories' issues and comments' posterid, it will always atte

 - `ENABLED`: **true**: Enable update migration poster id job.
 - `RUN_AT_START`: **true**: Update migrated repositories' issues and comments' posterid when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.

 #### Cron - Sync External Users (`cron.sync_external_users`)
@@ -1122,7 +1121,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable synchronize external user data job
 - `RUN_AT_START`: **false**: Synchronize external user data when starting server
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NOTICE_ON_SUCCESS`: **false**: Notice if not success
 - `SCHEDULE`: **@midnight** : Interval as a duration between each synchronization, it will always attempt synchronization when the instance starts.
 - `UPDATE_EXISTING`: **true**: Create new users, update existing user data and disable users that are not in external source anymore (default) or only create new users if UPDATE_EXISTING is set to false.

@@ -1130,7 +1129,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable cleanup expired actions assets job.
 - `RUN_AT_START`: **true**: Run job at start time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@midnight** : Cron syntax for the job.

 #### Cron - Cleanup Deleted Branches (`cron.deleted_branches_cleanup`)
@@ -1220,7 +1218,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `ENABLE_SUCCESS_NOTICE`: **true**: Set to false to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax for scheduling a work, e.g. `@every 168h`.
 - `HTTP_ENDPOINT`: **https://dl.gitea.com/gitea/version.json**: the endpoint that Gitea will check for newer versions

@@ -1228,7 +1226,7 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 168h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **8760h**: any system notice older than this expression will be deleted from database.

@@ -1236,7 +1234,6 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **false**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
 - `SCHEDULE`: **@every 24h**: Cron syntax to set how often to check.
 - `OLDER_THAN`: **168h**: Only attempt to garbage collect LFSMetaObjects older than this (default 7 days)
 - `LAST_UPDATED_MORE_THAN_AGO`: **72h**: Only attempt to garbage collect LFSMetaObjects that have not been attempted to be garbage collected for this long (default 3 days)
@@ -1249,35 +1246,35 @@ Synchronize external user data (only LDAP user synchronization is supported)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@annually**: Cron syntax to set how often to rebuild

 #### Cron - Stop running tasks which haven't been updated for a long time (`cron.stop_zombie_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 5m**: Cron syntax to set how often tasks to run the check

 #### Cron - Stop running tasks which have running status and continuous updates but don't end for a long time (`cron.stop_endless_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **true**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 30m**: Cron syntax to set how often to run the check.

 #### Cron - Cancel jobs which haven't been picked up for a long time (`cron.cancel_abandoned_jobs`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 6h**: Cron syntax to set how often to run the check.

 #### Cron - Start cron based actions (`cron.start_schedule_tasks`)

 - `ENABLED`: **true**: Enable service.
 - `RUN_AT_START`: **false**: Run tasks at start up time (if ENABLED).
- `NOTICE_ON_SUCCESS`: **false**: Set to true to switch on success notices.
+- `NO_SUCCESS_NOTICE`: **false**: Set to true to switch off success notices.
 - `SCHEDULE`: **@every 1m**: Cron syntax to set how often to schedule tasks

 ## Git (`git`)
@@ -51,11 +51,6 @@ Example:

 > This bug was introduced in [e59ff077](#)

-Commits in other repositories can be referred to as well
-using the form `owner/repository@e59ff077`:
-
-> This bug was introduced in [mike/compiler@e59ff077](#)
-
 ## Issues and Pull Requests

 A reference to another issue or pull request can be created using the simple
@@ -182,7 +177,7 @@ In the examples, `User1/Repo1` refers to the repository where the reference is u
 | `UserZ/RepoZ!1234`          |            -              |            no             | A link to issue/pull 1234 in `UserZ/RepoZ`              |
 | `UserZ/RepoZ#1234`          |            -              |            yes            | A link to _external issue_ 1234 for `UserZ/RepoZ`       |
 | `UserZ/RepoZ!1234`          |            -              |            yes            | A link to _PR_ 1234 for `UserZ/RepoZ`                   |
-| **Alphanumeric issue IDs:** |            -              |            -              | -                                                       |
+| **Alphanumeric issue IDs:** |             -             |             -             | -                                                       |
 | `AAA-1234`                  |            yes            |            -              | A link to _external issue_ `AAA-1234` for `User1/Repo1` |
 | `!1234`                     |            yes            |            -              | A link to _PR_ 1234 for `User1/Repo1`                   |
 | `User1/Repo1!1234`          |            yes            |            -              | A link to _PR_ 1234 for `User1/Repo1`                   |
Author	SHA1	Message	Date
Lunny Xiao	fecad73221	ci: only read the Depends on lines, and let the label be the gate	2026-09-08 12:03:59 -07:00
Lunny Xiao	83cbd0138f	ci: keep the jq expressions parsable on jq 1.6	2026-09-08 12:00:37 -07:00
Lunny Xiao	3fb4de8560	ci: run the check with the script from the pull request	2026-09-08 11:58:23 -07:00
Lunny Xiao	7d4c23de0b	ci: fail a pull request that waits for an unmerged gitea change	2026-09-08 11:50:21 -07:00