Forgejo 17.0 Adds Actions Job Summaries, Workflow Webhooks, and Better Git LFS Management

Forgejo 17.0 Adds Actions Job Summaries, Workflow Webhooks, and Better Git LFS Management

By Our editorial standards

Forgejo, the community-governed Git forge that powers Codeberg, released version 17.0 on October 15. It is a non-LTS release, supported until January 28, 2027.

Actions

  • Job summaries: workflows can show Markdown summaries above job logs. This requires Forgejo Runner 13.2 or newer
  • The Actions API can rerun completed workflows and jobs, filter logs, fetch individual steps, and export logs as NDJSON
  • New workflow and job webhooks, with configurable status notifications

Git LFS

The LFS interface has better navigation and file management, can show which commits reference a given LFS file, and handles LFS pointers better.

Also new

  • FUNDING.yml support adds a Donate button to repositories
  • Migration from Bitbucket Data Center

Breaking changes

  • Action run webhook events are deprecated in favour of the new workflow run events, and existing webhooks are not migrated automatically. Check any integrations that listen for them
  • Absolute links in rendered repository documents now resolve from the repository root rather than the instance root

The container image is codeberg.org/forgejo/forgejo:17.0.0. If you are deciding between Forgejo and its parent project, see our Gitea vs Forgejo comparison; Gitea also shipped a security release this week.

More news

Gitea 28.2 Fixes Nine Security Vulnerabilities, Including SSH Certificate and OpenID Account TakeoversGitea 28.2 fixes nine vulnerabilities, among them an SSH certificate principal validation flaw and an OpenID linking bug that could let an attacker sign in as another user, plus private attachment exposure and an Actions memory exhaustion bug. Upgrade promptly.Gitea Jumps From 1.x to 28.0 and Adds Audit Logs, Bot Accounts, and Admin ImpersonationGitea drops its 1.x version scheme and ships 28.0 with security audit logging, token-only bot accounts, admin impersonation for troubleshooting, CODEOWNERS approvals, and several breaking changes to check before upgrading.Git 2.56 Adds git add --resolved, git branch --delete-merged, and a history drop CommandGit 2.56 makes conflict resolution and branch cleanup easier, lets bisect reset itself when done, adds a linearize mode to git replay, and expands the experimental git history and git refs commands.

Background reading

Explainers for the concepts behind this story.

Preparing for 64-Day TLS Certificates: Audit Your Renewals NowLet's Encrypt certificates drop to 64 days in February 2027 and 45 days in 2028. How to find every certificate and renewal job on your servers, what ACME Renewal Information does, client-specific settings to check, and how to get alerted before a certificate expires.CrowdSec vs Fail2ban: Blocking Attackers on Linux ServersFail2ban bans IPs that fail too often in your logs. CrowdSec does the same and shares signals with every other CrowdSec user. How each works, setup for SSH, the bouncer model, privacy trade-offs, and which to run.Docker Volumes, Bind Mounts, and Networks ExplainedWhere container data should live and how containers talk to each other. Named volumes vs bind mounts vs tmpfs, permissions and SELinux labels, backing up volumes, user-defined bridge networks and DNS, publishing ports safely, and the firewall surprise.