From 8ebc18c3bc60e2fbeb0c94b53c6618fabcb8d252 Mon Sep 17 00:00:00 2001
From: Kit OC5 <kit5@thewindstorm.uk>
Date: Thu, 1 Oct 2026 02:45:28 -0400
Subject: [PATCH] gitea 1.24.6 -> 1.24.7 (security: LFS auth bypass, symlink
 bypass, OAuth2 missed return)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 04dc001..34dc5dd 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -32,7 +32,7 @@ services:
 
   gitea:
     # G2.1 — PIN AN EXACT VERSION. Never `latest`. Record it in SUBSTRATE.md.
-    image: docker.io/gitea/gitea:1.24.6
+    image: docker.io/gitea/gitea:1.24.7
     environment:
       GITEA__database__DB_TYPE: postgres
       GITEA__database__HOST: db:5432