Security backport to 1.22#35766

Closed

charles25565 wants to merge 6 commits intogo-gitea:release/v1.22from

charles25565:security-backport

Commits on Sep 22, 2025

Include file extension checks in attachment API (#32151)

kemzeb
authored and
Charles
committed
Bump crypto and oauth2
Charles
committed
Fix a bug when uploading file via lfs ssh command 1.23 (#34408) (#34411)

wxiaoguang
authored and
Charles
committed
Bump net
Charles
committed
Bump xz
Charles
committed

Commits on Sep 23, 2025

Bump JWT v4
Charles
committed