From b70c7f86604185ed18a9d5e3b25327805e2b6a52 Mon Sep 17 00:00:00 2001
From: wxiaoguang <wxiaoguang@gmail.com>
Date: Wed, 8 Mar 2023 11:26:37 +0800
Subject: [PATCH 01/11] Fix incorrect display for comment context menu 
 (#23343)

Replace #23342

Fix a regression of #23014: the `a` couldn't be used here because
Fomantic UI has style conflicts: `.ui.comments .comment .actions a {
display: inline-block; }`


And complete one more of my TODOs: "in the future there could be a
special CSS class for it"
---
 templates/repo/issue/view_content/context_menu.tmpl | 10 +++++-----
 web_src/js/features/aria.js                         |  5 +++--
 2 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/templates/repo/issue/view_content/context_menu.tmpl b/templates/repo/issue/view_content/context_menu.tmpl
index f836271b65b5..c073c74ea32f 100644
--- a/templates/repo/issue/view_content/context_menu.tmpl
+++ b/templates/repo/issue/view_content/context_menu.tmpl
@@ -10,16 +10,16 @@
 		{{else}}
 			{{$referenceUrl = Printf "%s/files#%s" .ctxData.Issue.Link .item.HashTag}}
 		{{end}}
-		<a class="item context" data-clipboard-text-type="url" data-clipboard-text="{{AppSubUrl}}{{$referenceUrl}}">{{.ctxData.locale.Tr "repo.issues.context.copy_link"}}</a>
-		<a class="item context quote-reply {{if .diff}}quote-reply-diff{{end}}" data-target="{{.item.HashTag}}-raw">{{.ctxData.locale.Tr "repo.issues.context.quote_reply"}}</a>
+		<div class="item context js-aria-clickable" data-clipboard-text-type="url" data-clipboard-text="{{AppSubUrl}}{{$referenceUrl}}">{{.ctxData.locale.Tr "repo.issues.context.copy_link"}}</div>
+		<div class="item context js-aria-clickable quote-reply {{if .diff}}quote-reply-diff{{end}}" data-target="{{.item.HashTag}}-raw">{{.ctxData.locale.Tr "repo.issues.context.quote_reply"}}</div>
 		{{if not .ctxData.UnitIssuesGlobalDisabled}}
-			<a class="item context reference-issue" data-target="{{.item.HashTag}}-raw" data-modal="#reference-issue-modal" data-poster="{{.item.Poster.GetDisplayName}}" data-poster-username="{{.item.Poster.Name}}" data-reference="{{$referenceUrl}}">{{.ctxData.locale.Tr "repo.issues.context.reference_issue"}}</a>
+			<div class="item context js-aria-clickable reference-issue" data-target="{{.item.HashTag}}-raw" data-modal="#reference-issue-modal" data-poster="{{.item.Poster.GetDisplayName}}" data-poster-username="{{.item.Poster.Name}}" data-reference="{{$referenceUrl}}">{{.ctxData.locale.Tr "repo.issues.context.reference_issue"}}</div>
 		{{end}}
 		{{if or .ctxData.Permission.IsAdmin .IsCommentPoster .ctxData.HasIssuesOrPullsWritePermission}}
 			<div class="divider"></div>
-			<a class="item context edit-content">{{.ctxData.locale.Tr "repo.issues.context.edit"}}</a>
+			<div class="item context js-aria-clickable edit-content">{{.ctxData.locale.Tr "repo.issues.context.edit"}}</div>
 			{{if .delete}}
-				<a class="item context delete-comment" data-comment-id={{.item.HashTag}} data-url="{{.ctxData.RepoLink}}/comments/{{.item.ID}}/delete" data-locale="{{.ctxData.locale.Tr "repo.issues.delete_comment_confirm"}}">{{.ctxData.locale.Tr "repo.issues.context.delete"}}</a>
+				<div class="item context js-aria-clickable delete-comment" data-comment-id={{.item.HashTag}} data-url="{{.ctxData.RepoLink}}/comments/{{.item.ID}}/delete" data-locale="{{.ctxData.locale.Tr "repo.issues.delete_comment_confirm"}}">{{.ctxData.locale.Tr "repo.issues.context.delete"}}</div>
 			{{end}}
 		{{end}}
 	</div>
diff --git a/web_src/js/features/aria.js b/web_src/js/features/aria.js
index 373d667c5f73..46944336adc1 100644
--- a/web_src/js/features/aria.js
+++ b/web_src/js/features/aria.js
@@ -83,8 +83,9 @@ function attachOneDropdownAria($dropdown) {
     if (e.key === 'Enter') {
       let $item = $dropdown.dropdown('get item', $dropdown.dropdown('get value'));
       if (!$item) $item = $menu.find('> .item.selected'); // when dropdown filters items by input, there is no "value", so query the "selected" item
-      // if the selected item is clickable, then trigger the click event. in the future there could be a special CSS class for it.
-      if ($item && $item.is('a')) $item[0].click();
+      // if the selected item is clickable, then trigger the click event.
+      // we can not click any item without check, because Fomantic code might also handle the Enter event. that would result in double click.
+      if ($item && ($item.is('a') || $item.is('.js-aria-clickable'))) $item[0].click();
     }
   });
 

From 7e3b7c23463bf71c4e2ab93f184a675f1e30df0e Mon Sep 17 00:00:00 2001
From: wxiaoguang <wxiaoguang@gmail.com>
Date: Wed, 8 Mar 2023 11:40:41 +0800
Subject: [PATCH 02/11] Do not recognize text files as audio (#23355)

Close #17108

This PR uses a trick (removing the ID3 tag) to detect the content again
to to see whether the content is text type.

---------

Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
---
 modules/typesniffer/typesniffer.go      | 10 ++++++++++
 modules/typesniffer/typesniffer_test.go |  4 ++++
 2 files changed, 14 insertions(+)

diff --git a/modules/typesniffer/typesniffer.go b/modules/typesniffer/typesniffer.go
index 5b215496b80c..7887fd42b72e 100644
--- a/modules/typesniffer/typesniffer.go
+++ b/modules/typesniffer/typesniffer.go
@@ -106,6 +106,16 @@ func DetectContentType(data []byte) SniffedType {
 		}
 	}
 
+	if strings.HasPrefix(ct, "audio/") && bytes.HasPrefix(data, []byte("ID3")) {
+		// The MP3 detection is quite inaccurate, any content with "ID3" prefix will result in "audio/mpeg".
+		// So remove the "ID3" prefix and detect again, if result is text, then it must be text content.
+		// This works especially because audio files contain many unprintable/invalid characters like `0x00`
+		ct2 := http.DetectContentType(data[3:])
+		if strings.HasPrefix(ct2, "text/") {
+			ct = ct2
+		}
+	}
+
 	return SniffedType{ct}
 }
 
diff --git a/modules/typesniffer/typesniffer_test.go b/modules/typesniffer/typesniffer_test.go
index 2bafdffd141c..6c6da34aa006 100644
--- a/modules/typesniffer/typesniffer_test.go
+++ b/modules/typesniffer/typesniffer_test.go
@@ -109,6 +109,10 @@ func TestIsAudio(t *testing.T) {
 	mp3, _ := base64.StdEncoding.DecodeString("SUQzBAAAAAABAFRYWFgAAAASAAADbWFqb3JfYnJhbmQAbXA0MgBUWFhYAAAAEQAAA21pbm9yX3Zl")
 	assert.True(t, DetectContentType(mp3).IsAudio())
 	assert.False(t, DetectContentType([]byte("plain text")).IsAudio())
+
+	assert.True(t, DetectContentType([]byte("ID3Toy\000")).IsAudio())
+	assert.True(t, DetectContentType([]byte("ID3Toy\n====\t* hi 🌞, ...")).IsText())          // test ID3 tag for plain text
+	assert.True(t, DetectContentType([]byte("ID3Toy\n====\t* hi 🌞, ..."+"🌛"[0:2])).IsText()) // test ID3 tag with incomplete UTF8 char
 }
 
 func TestDetectContentTypeFromReader(t *testing.T) {

From a12f5757372f751d25f9e5ca1f168f6920ded894 Mon Sep 17 00:00:00 2001
From: JakobDev <jakobdev@gmx.de>
Date: Wed, 8 Mar 2023 08:07:58 +0100
Subject: [PATCH 03/11] Clean Path in Options (#23006)

At the Moment it is possible to read files in another Directory as
supposed using the Options functions. e.g.
`options.Gitignore("../label/Default) `. This was discovered while
working on #22783, which exposes `options.Gitignore()` through the
public API. At the moment, this is not a security problem, as this
function is only used internal, but I thought it would be a good idea to
make a PR to fix this for all types of Options files, not only
Gitignore, to make it safe for the further. This PR should be merged
before the linked PR.

---------

Co-authored-by: Jason Song <i@wolfogre.com>
---
 modules/options/dynamic.go | 8 ++++----
 modules/options/static.go  | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/modules/options/dynamic.go b/modules/options/dynamic.go
index a20253676e67..f9b3714b8fb9 100644
--- a/modules/options/dynamic.go
+++ b/modules/options/dynamic.go
@@ -79,22 +79,22 @@ func WalkLocales(callback func(path, name string, d fs.DirEntry, err error) erro
 
 // Readme reads the content of a specific readme from static or custom path.
 func Readme(name string) ([]byte, error) {
-	return fileFromDir(path.Join("readme", name))
+	return fileFromDir(path.Join("readme", path.Clean("/"+name)))
 }
 
 // Gitignore reads the content of a specific gitignore from static or custom path.
 func Gitignore(name string) ([]byte, error) {
-	return fileFromDir(path.Join("gitignore", name))
+	return fileFromDir(path.Join("gitignore", path.Clean("/"+name)))
 }
 
 // License reads the content of a specific license from static or custom path.
 func License(name string) ([]byte, error) {
-	return fileFromDir(path.Join("license", name))
+	return fileFromDir(path.Join("license", path.Clean("/"+name)))
 }
 
 // Labels reads the content of a specific labels from static or custom path.
 func Labels(name string) ([]byte, error) {
-	return fileFromDir(path.Join("label", name))
+	return fileFromDir(path.Join("label", path.Clean("/"+name)))
 }
 
 // fileFromDir is a helper to read files from static or custom path.
diff --git a/modules/options/static.go b/modules/options/static.go
index ff3c86d3f84f..2405d658bfb1 100644
--- a/modules/options/static.go
+++ b/modules/options/static.go
@@ -84,22 +84,22 @@ func WalkLocales(callback func(path, name string, d fs.DirEntry, err error) erro
 
 // Readme reads the content of a specific readme from bindata or custom path.
 func Readme(name string) ([]byte, error) {
-	return fileFromDir(path.Join("readme", name))
+	return fileFromDir(path.Join("readme", path.Clean("/"+name)))
 }
 
 // Gitignore reads the content of a gitignore locale from bindata or custom path.
 func Gitignore(name string) ([]byte, error) {
-	return fileFromDir(path.Join("gitignore", name))
+	return fileFromDir(path.Join("gitignore", path.Clean("/"+name)))
 }
 
 // License reads the content of a specific license from bindata or custom path.
 func License(name string) ([]byte, error) {
-	return fileFromDir(path.Join("license", name))
+	return fileFromDir(path.Join("license", path.Clean("/"+name)))
 }
 
 // Labels reads the content of a specific labels from static or custom path.
 func Labels(name string) ([]byte, error) {
-	return fileFromDir(path.Join("label", name))
+	return fileFromDir(path.Join("label", path.Clean("/"+name)))
 }
 
 // fileFromDir is a helper to read files from bindata or custom path.

From 090e75392385041b3abb30d02564962a3ff687f6 Mon Sep 17 00:00:00 2001
From: Jason Song <i@wolfogre.com>
Date: Wed, 8 Mar 2023 17:31:27 +0800
Subject: [PATCH 04/11] Reduce duplicate and useless code in options (#23369)

Avoid maintaining two copies of code, some functions can be used with
both `bindata` and `no bindata`.

And removed `GetRepoInitFile`, it's useless now.
`Readme`/`Gitignore`/`License`/`Labels` will clean the name and use
custom files when available.
---
 modules/label/parser.go    |  6 ++--
 modules/options/base.go    | 56 ++++++++++++++++++++++++++++++
 modules/options/dynamic.go | 70 ++++----------------------------------
 modules/options/repo.go    | 44 ------------------------
 modules/options/static.go  | 50 ++++-----------------------
 modules/repository/init.go |  6 ++--
 6 files changed, 74 insertions(+), 158 deletions(-)
 delete mode 100644 modules/options/repo.go

diff --git a/modules/label/parser.go b/modules/label/parser.go
index 768c72a61b01..55bf570de6b9 100644
--- a/modules/label/parser.go
+++ b/modules/label/parser.go
@@ -36,17 +36,17 @@ func (err ErrTemplateLoad) Error() string {
 // GetTemplateFile loads the label template file by given name,
 // then parses and returns a list of name-color pairs and optionally description.
 func GetTemplateFile(name string) ([]*Label, error) {
-	data, err := options.GetRepoInitFile("label", name+".yaml")
+	data, err := options.Labels(name + ".yaml")
 	if err == nil && len(data) > 0 {
 		return parseYamlFormat(name+".yaml", data)
 	}
 
-	data, err = options.GetRepoInitFile("label", name+".yml")
+	data, err = options.Labels(name + ".yml")
 	if err == nil && len(data) > 0 {
 		return parseYamlFormat(name+".yml", data)
 	}
 
-	data, err = options.GetRepoInitFile("label", name)
+	data, err = options.Labels(name)
 	if err != nil {
 		return nil, ErrTemplateLoad{name, fmt.Errorf("GetRepoInitFile: %w", err)}
 	}
diff --git a/modules/options/base.go b/modules/options/base.go
index 039e934b3a4d..3c140f64326b 100644
--- a/modules/options/base.go
+++ b/modules/options/base.go
@@ -7,11 +7,52 @@ import (
 	"fmt"
 	"io/fs"
 	"os"
+	"path"
 	"path/filepath"
 
+	"code.gitea.io/gitea/modules/setting"
 	"code.gitea.io/gitea/modules/util"
 )
 
+// Locale reads the content of a specific locale from static/bindata or custom path.
+func Locale(name string) ([]byte, error) {
+	return fileFromDir(path.Join("locale", path.Clean("/"+name)))
+}
+
+// Readme reads the content of a specific readme from static/bindata or custom path.
+func Readme(name string) ([]byte, error) {
+	return fileFromDir(path.Join("readme", path.Clean("/"+name)))
+}
+
+// Gitignore reads the content of a gitignore locale from static/bindata or custom path.
+func Gitignore(name string) ([]byte, error) {
+	return fileFromDir(path.Join("gitignore", path.Clean("/"+name)))
+}
+
+// License reads the content of a specific license from static/bindata or custom path.
+func License(name string) ([]byte, error) {
+	return fileFromDir(path.Join("license", path.Clean("/"+name)))
+}
+
+// Labels reads the content of a specific labels from static/bindata or custom path.
+func Labels(name string) ([]byte, error) {
+	return fileFromDir(path.Join("label", path.Clean("/"+name)))
+}
+
+// WalkLocales reads the content of a specific locale
+func WalkLocales(callback func(path, name string, d fs.DirEntry, err error) error) error {
+	if IsDynamic() {
+		if err := walkAssetDir(filepath.Join(setting.StaticRootPath, "options", "locale"), callback); err != nil && !os.IsNotExist(err) {
+			return fmt.Errorf("failed to walk locales. Error: %w", err)
+		}
+	}
+
+	if err := walkAssetDir(filepath.Join(setting.CustomPath, "options", "locale"), callback); err != nil && !os.IsNotExist(err) {
+		return fmt.Errorf("failed to walk locales. Error: %w", err)
+	}
+	return nil
+}
+
 func walkAssetDir(root string, callback func(path, name string, d fs.DirEntry, err error) error) error {
 	if err := filepath.WalkDir(root, func(path string, d fs.DirEntry, err error) error {
 		// name is the path relative to the root
@@ -37,3 +78,18 @@ func walkAssetDir(root string, callback func(path, name string, d fs.DirEntry, e
 	}
 	return nil
 }
+
+func statDirIfExist(dir string) ([]string, error) {
+	isDir, err := util.IsDir(dir)
+	if err != nil {
+		return nil, fmt.Errorf("unable to check if static directory %s is a directory. %w", dir, err)
+	}
+	if !isDir {
+		return nil, nil
+	}
+	files, err := util.StatDir(dir, true)
+	if err != nil {
+		return nil, fmt.Errorf("unable to read directory %q. %w", dir, err)
+	}
+	return files, nil
+}
diff --git a/modules/options/dynamic.go b/modules/options/dynamic.go
index f9b3714b8fb9..8c954492ae51 100644
--- a/modules/options/dynamic.go
+++ b/modules/options/dynamic.go
@@ -7,10 +7,8 @@ package options
 
 import (
 	"fmt"
-	"io/fs"
 	"os"
 	"path"
-	"path/filepath"
 
 	"code.gitea.io/gitea/modules/log"
 	"code.gitea.io/gitea/modules/setting"
@@ -27,76 +25,20 @@ func Dir(name string) ([]string, error) {
 
 	var result []string
 
-	customDir := path.Join(setting.CustomPath, "options", name)
-
-	isDir, err := util.IsDir(customDir)
-	if err != nil {
-		return []string{}, fmt.Errorf("Unabe to check if custom directory %s is a directory. %w", customDir, err)
-	}
-	if isDir {
-		files, err := util.StatDir(customDir, true)
-		if err != nil {
-			return []string{}, fmt.Errorf("Failed to read custom directory. %w", err)
-		}
-
-		result = append(result, files...)
-	}
-
-	staticDir := path.Join(setting.StaticRootPath, "options", name)
-
-	isDir, err = util.IsDir(staticDir)
-	if err != nil {
-		return []string{}, fmt.Errorf("unable to check if static directory %s is a directory. %w", staticDir, err)
-	}
-	if isDir {
-		files, err := util.StatDir(staticDir, true)
+	for _, dir := range []string{
+		path.Join(setting.CustomPath, "options", name),     // custom dir
+		path.Join(setting.StaticRootPath, "options", name), // static dir
+	} {
+		files, err := statDirIfExist(dir)
 		if err != nil {
-			return []string{}, fmt.Errorf("Failed to read static directory. %w", err)
+			return nil, err
 		}
-
 		result = append(result, files...)
 	}
 
 	return directories.AddAndGet(name, result), nil
 }
 
-// Locale reads the content of a specific locale from static or custom path.
-func Locale(name string) ([]byte, error) {
-	return fileFromDir(path.Join("locale", name))
-}
-
-// WalkLocales reads the content of a specific locale from static or custom path.
-func WalkLocales(callback func(path, name string, d fs.DirEntry, err error) error) error {
-	if err := walkAssetDir(filepath.Join(setting.StaticRootPath, "options", "locale"), callback); err != nil && !os.IsNotExist(err) {
-		return fmt.Errorf("failed to walk locales. Error: %w", err)
-	}
-
-	if err := walkAssetDir(filepath.Join(setting.CustomPath, "options", "locale"), callback); err != nil && !os.IsNotExist(err) {
-		return fmt.Errorf("failed to walk locales. Error: %w", err)
-	}
-	return nil
-}
-
-// Readme reads the content of a specific readme from static or custom path.
-func Readme(name string) ([]byte, error) {
-	return fileFromDir(path.Join("readme", path.Clean("/"+name)))
-}
-
-// Gitignore reads the content of a specific gitignore from static or custom path.
-func Gitignore(name string) ([]byte, error) {
-	return fileFromDir(path.Join("gitignore", path.Clean("/"+name)))
-}
-
-// License reads the content of a specific license from static or custom path.
-func License(name string) ([]byte, error) {
-	return fileFromDir(path.Join("license", path.Clean("/"+name)))
-}
-
-// Labels reads the content of a specific labels from static or custom path.
-func Labels(name string) ([]byte, error) {
-	return fileFromDir(path.Join("label", path.Clean("/"+name)))
-}
-
 // fileFromDir is a helper to read files from static or custom path.
 func fileFromDir(name string) ([]byte, error) {
 	customPath := path.Join(setting.CustomPath, "options", name)
diff --git a/modules/options/repo.go b/modules/options/repo.go
deleted file mode 100644
index 1480f7808176..000000000000
--- a/modules/options/repo.go
+++ /dev/null
@@ -1,44 +0,0 @@
-// Copyright 2023 The Gitea Authors. All rights reserved.
-// SPDX-License-Identifier: MIT
-
-package options
-
-import (
-	"fmt"
-	"os"
-	"path"
-	"strings"
-
-	"code.gitea.io/gitea/modules/log"
-	"code.gitea.io/gitea/modules/setting"
-	"code.gitea.io/gitea/modules/util"
-)
-
-// GetRepoInitFile returns repository init files
-func GetRepoInitFile(tp, name string) ([]byte, error) {
-	cleanedName := strings.TrimLeft(path.Clean("/"+name), "/")
-	relPath := path.Join("options", tp, cleanedName)
-
-	// Use custom file when available.
-	customPath := path.Join(setting.CustomPath, relPath)
-	isFile, err := util.IsFile(customPath)
-	if err != nil {
-		log.Error("Unable to check if %s is a file. Error: %v", customPath, err)
-	}
-	if isFile {
-		return os.ReadFile(customPath)
-	}
-
-	switch tp {
-	case "readme":
-		return Readme(cleanedName)
-	case "gitignore":
-		return Gitignore(cleanedName)
-	case "license":
-		return License(cleanedName)
-	case "label":
-		return Labels(cleanedName)
-	default:
-		return []byte{}, fmt.Errorf("Invalid init file type")
-	}
-}
diff --git a/modules/options/static.go b/modules/options/static.go
index 2405d658bfb1..549f4e25b11a 100644
--- a/modules/options/static.go
+++ b/modules/options/static.go
@@ -8,10 +8,8 @@ package options
 import (
 	"fmt"
 	"io"
-	"io/fs"
 	"os"
 	"path"
-	"path/filepath"
 
 	"code.gitea.io/gitea/modules/log"
 	"code.gitea.io/gitea/modules/setting"
@@ -28,17 +26,14 @@ func Dir(name string) ([]string, error) {
 
 	var result []string
 
-	customDir := path.Join(setting.CustomPath, "options", name)
-	isDir, err := util.IsDir(customDir)
-	if err != nil {
-		return []string{}, fmt.Errorf("unable to check if custom directory %q is a directory. %w", customDir, err)
-	}
-	if isDir {
-		files, err := util.StatDir(customDir, true)
+	for _, dir := range []string{
+		path.Join(setting.CustomPath, "options", name), // custom dir
+		// no static dir
+	} {
+		files, err := statDirIfExist(dir)
 		if err != nil {
-			return []string{}, fmt.Errorf("unable to read custom directory %q. %w", customDir, err)
+			return nil, err
 		}
-
 		result = append(result, files...)
 	}
 
@@ -69,39 +64,6 @@ func AssetDir(dirName string) ([]string, error) {
 	return results, nil
 }
 
-// Locale reads the content of a specific locale from bindata or custom path.
-func Locale(name string) ([]byte, error) {
-	return fileFromDir(path.Join("locale", name))
-}
-
-// WalkLocales reads the content of a specific locale from static or custom path.
-func WalkLocales(callback func(path, name string, d fs.DirEntry, err error) error) error {
-	if err := walkAssetDir(filepath.Join(setting.CustomPath, "options", "locale"), callback); err != nil && !os.IsNotExist(err) {
-		return fmt.Errorf("failed to walk locales. Error: %w", err)
-	}
-	return nil
-}
-
-// Readme reads the content of a specific readme from bindata or custom path.
-func Readme(name string) ([]byte, error) {
-	return fileFromDir(path.Join("readme", path.Clean("/"+name)))
-}
-
-// Gitignore reads the content of a gitignore locale from bindata or custom path.
-func Gitignore(name string) ([]byte, error) {
-	return fileFromDir(path.Join("gitignore", path.Clean("/"+name)))
-}
-
-// License reads the content of a specific license from bindata or custom path.
-func License(name string) ([]byte, error) {
-	return fileFromDir(path.Join("license", path.Clean("/"+name)))
-}
-
-// Labels reads the content of a specific labels from static or custom path.
-func Labels(name string) ([]byte, error) {
-	return fileFromDir(path.Join("label", path.Clean("/"+name)))
-}
-
 // fileFromDir is a helper to read files from bindata or custom path.
 func fileFromDir(name string) ([]byte, error) {
 	customPath := path.Join(setting.CustomPath, "options", name)
diff --git a/modules/repository/init.go b/modules/repository/init.go
index 49c8d2a904d1..f9a33cd4f68c 100644
--- a/modules/repository/init.go
+++ b/modules/repository/init.go
@@ -136,7 +136,7 @@ func prepareRepoCommit(ctx context.Context, repo *repo_model.Repository, tmpDir,
 	}
 
 	// README
-	data, err := options.GetRepoInitFile("readme", opts.Readme)
+	data, err := options.Readme(opts.Readme)
 	if err != nil {
 		return fmt.Errorf("GetRepoInitFile[%s]: %w", opts.Readme, err)
 	}
@@ -164,7 +164,7 @@ func prepareRepoCommit(ctx context.Context, repo *repo_model.Repository, tmpDir,
 		var buf bytes.Buffer
 		names := strings.Split(opts.Gitignores, ",")
 		for _, name := range names {
-			data, err = options.GetRepoInitFile("gitignore", name)
+			data, err = options.Gitignore(name)
 			if err != nil {
 				return fmt.Errorf("GetRepoInitFile[%s]: %w", name, err)
 			}
@@ -182,7 +182,7 @@ func prepareRepoCommit(ctx context.Context, repo *repo_model.Repository, tmpDir,
 
 	// LICENSE
 	if len(opts.License) > 0 {
-		data, err = options.GetRepoInitFile("license", opts.License)
+		data, err = options.License(opts.License)
 		if err != nil {
 			return fmt.Errorf("GetRepoInitFile[%s]: %w", opts.License, err)
 		}

From b116418f05b822481bba3613873eef876da73814 Mon Sep 17 00:00:00 2001
From: Lunny Xiao <xiaolunwen@gmail.com>
Date: Wed, 8 Mar 2023 20:17:39 +0800
Subject: [PATCH 05/11] Use CleanPath instead of path.Clean (#23371)

As title.
---
 models/git/lfs_lock.go                       | 12 ++++--------
 modules/options/base.go                      | 10 +++++-----
 modules/public/public.go                     |  4 ++--
 modules/storage/local.go                     |  3 +--
 modules/storage/minio.go                     |  3 ++-
 modules/util/path.go                         |  8 ++++++++
 modules/util/path_test.go                    | 12 ++++++++++++
 routers/web/base.go                          |  5 +++--
 routers/web/repo/editor.go                   |  2 +-
 routers/web/repo/lfs.go                      |  2 +-
 services/migrations/gitea_uploader.go        |  4 ++--
 services/packages/container/blob_uploader.go |  4 ++--
 services/repository/files/file.go            |  4 ++--
 13 files changed, 45 insertions(+), 28 deletions(-)

diff --git a/models/git/lfs_lock.go b/models/git/lfs_lock.go
index 25480f3f9654..178fa72f09bf 100644
--- a/models/git/lfs_lock.go
+++ b/models/git/lfs_lock.go
@@ -6,7 +6,6 @@ package git
 import (
 	"context"
 	"fmt"
-	"path"
 	"strings"
 	"time"
 
@@ -17,6 +16,7 @@ import (
 	"code.gitea.io/gitea/models/unit"
 	user_model "code.gitea.io/gitea/models/user"
 	"code.gitea.io/gitea/modules/setting"
+	"code.gitea.io/gitea/modules/util"
 )
 
 // LFSLock represents a git lfs lock of repository.
@@ -34,11 +34,7 @@ func init() {
 
 // BeforeInsert is invoked from XORM before inserting an object of this type.
 func (l *LFSLock) BeforeInsert() {
-	l.Path = cleanPath(l.Path)
-}
-
-func cleanPath(p string) string {
-	return path.Clean("/" + p)[1:]
+	l.Path = util.CleanPath(l.Path)
 }
 
 // CreateLFSLock creates a new lock.
@@ -53,7 +49,7 @@ func CreateLFSLock(ctx context.Context, repo *repo_model.Repository, lock *LFSLo
 		return nil, err
 	}
 
-	lock.Path = cleanPath(lock.Path)
+	lock.Path = util.CleanPath(lock.Path)
 	lock.RepoID = repo.ID
 
 	l, err := GetLFSLock(dbCtx, repo, lock.Path)
@@ -73,7 +69,7 @@ func CreateLFSLock(ctx context.Context, repo *repo_model.Repository, lock *LFSLo
 
 // GetLFSLock returns release by given path.
 func GetLFSLock(ctx context.Context, repo *repo_model.Repository, path string) (*LFSLock, error) {
-	path = cleanPath(path)
+	path = util.CleanPath(path)
 	rel := &LFSLock{RepoID: repo.ID}
 	has, err := db.GetEngine(ctx).Where("lower(path) = ?", strings.ToLower(path)).Get(rel)
 	if err != nil {
diff --git a/modules/options/base.go b/modules/options/base.go
index 3c140f64326b..e83e8df5d094 100644
--- a/modules/options/base.go
+++ b/modules/options/base.go
@@ -16,27 +16,27 @@ import (
 
 // Locale reads the content of a specific locale from static/bindata or custom path.
 func Locale(name string) ([]byte, error) {
-	return fileFromDir(path.Join("locale", path.Clean("/"+name)))
+	return fileFromDir(path.Join("locale", util.CleanPath(name)))
 }
 
 // Readme reads the content of a specific readme from static/bindata or custom path.
 func Readme(name string) ([]byte, error) {
-	return fileFromDir(path.Join("readme", path.Clean("/"+name)))
+	return fileFromDir(path.Join("readme", util.CleanPath(name)))
 }
 
 // Gitignore reads the content of a gitignore locale from static/bindata or custom path.
 func Gitignore(name string) ([]byte, error) {
-	return fileFromDir(path.Join("gitignore", path.Clean("/"+name)))
+	return fileFromDir(path.Join("gitignore", util.CleanPath(name)))
 }
 
 // License reads the content of a specific license from static/bindata or custom path.
 func License(name string) ([]byte, error) {
-	return fileFromDir(path.Join("license", path.Clean("/"+name)))
+	return fileFromDir(path.Join("license", util.CleanPath(name)))
 }
 
 // Labels reads the content of a specific labels from static/bindata or custom path.
 func Labels(name string) ([]byte, error) {
-	return fileFromDir(path.Join("label", path.Clean("/"+name)))
+	return fileFromDir(path.Join("label", util.CleanPath(name)))
 }
 
 // WalkLocales reads the content of a specific locale
diff --git a/modules/public/public.go b/modules/public/public.go
index 42026f9b1054..e1d60d89eb9f 100644
--- a/modules/public/public.go
+++ b/modules/public/public.go
@@ -6,7 +6,6 @@ package public
 import (
 	"net/http"
 	"os"
-	"path"
 	"path/filepath"
 	"strings"
 
@@ -14,6 +13,7 @@ import (
 	"code.gitea.io/gitea/modules/httpcache"
 	"code.gitea.io/gitea/modules/log"
 	"code.gitea.io/gitea/modules/setting"
+	"code.gitea.io/gitea/modules/util"
 )
 
 // Options represents the available options to configure the handler.
@@ -103,7 +103,7 @@ func setWellKnownContentType(w http.ResponseWriter, file string) {
 
 func (opts *Options) handle(w http.ResponseWriter, req *http.Request, fs http.FileSystem, file string) bool {
 	// use clean to keep the file is a valid path with no . or ..
-	f, err := fs.Open(path.Clean(file))
+	f, err := fs.Open(util.CleanPath(file))
 	if err != nil {
 		if os.IsNotExist(err) {
 			return false
diff --git a/modules/storage/local.go b/modules/storage/local.go
index a6a9d54a8ca3..05bf1fb28a56 100644
--- a/modules/storage/local.go
+++ b/modules/storage/local.go
@@ -8,7 +8,6 @@ import (
 	"io"
 	"net/url"
 	"os"
-	"path"
 	"path/filepath"
 	"strings"
 
@@ -59,7 +58,7 @@ func NewLocalStorage(ctx context.Context, cfg interface{}) (ObjectStorage, error
 }
 
 func (l *LocalStorage) buildLocalPath(p string) string {
-	return filepath.Join(l.dir, path.Clean("/" + strings.ReplaceAll(p, "\\", "/"))[1:])
+	return filepath.Join(l.dir, util.CleanPath(strings.ReplaceAll(p, "\\", "/")))
 }
 
 // Open a file
diff --git a/modules/storage/minio.go b/modules/storage/minio.go
index c427d8d7e312..24da14b63463 100644
--- a/modules/storage/minio.go
+++ b/modules/storage/minio.go
@@ -15,6 +15,7 @@ import (
 	"time"
 
 	"code.gitea.io/gitea/modules/log"
+	"code.gitea.io/gitea/modules/util"
 
 	"github.com/minio/minio-go/v7"
 	"github.com/minio/minio-go/v7/pkg/credentials"
@@ -120,7 +121,7 @@ func NewMinioStorage(ctx context.Context, cfg interface{}) (ObjectStorage, error
 }
 
 func (m *MinioStorage) buildMinioPath(p string) string {
-	return strings.TrimPrefix(path.Join(m.basePath, path.Clean("/" + strings.ReplaceAll(p, "\\", "/"))[1:]), "/")
+	return strings.TrimPrefix(path.Join(m.basePath, util.CleanPath(strings.ReplaceAll(p, "\\", "/"))), "/")
 }
 
 // Open open a file
diff --git a/modules/util/path.go b/modules/util/path.go
index 74acb7a85fd8..5aa9e15f5c3e 100644
--- a/modules/util/path.go
+++ b/modules/util/path.go
@@ -14,6 +14,14 @@ import (
 	"strings"
 )
 
+// CleanPath ensure to clean the path
+func CleanPath(p string) string {
+	if strings.HasPrefix(p, "/") {
+		return path.Clean(p)
+	}
+	return path.Clean("/" + p)[1:]
+}
+
 // EnsureAbsolutePath ensure that a path is absolute, making it
 // relative to absoluteBase if necessary
 func EnsureAbsolutePath(path, absoluteBase string) string {
diff --git a/modules/util/path_test.go b/modules/util/path_test.go
index 93f4f67cf648..2f020f924dd2 100644
--- a/modules/util/path_test.go
+++ b/modules/util/path_test.go
@@ -136,3 +136,15 @@ func TestMisc_IsReadmeFileName(t *testing.T) {
 		assert.Equal(t, testCase.idx, idx)
 	}
 }
+
+func TestCleanPath(t *testing.T) {
+	cases := map[string]string{
+		"../../test": "test",
+		"/test":      "/test",
+		"/../test":   "/test",
+	}
+
+	for k, v := range cases {
+		assert.Equal(t, v, CleanPath(k))
+	}
+}
diff --git a/routers/web/base.go b/routers/web/base.go
index b0d8a7c3f1e6..d0135eac7a96 100644
--- a/routers/web/base.go
+++ b/routers/web/base.go
@@ -19,6 +19,7 @@ import (
 	"code.gitea.io/gitea/modules/setting"
 	"code.gitea.io/gitea/modules/storage"
 	"code.gitea.io/gitea/modules/templates"
+	"code.gitea.io/gitea/modules/util"
 	"code.gitea.io/gitea/modules/web/middleware"
 	"code.gitea.io/gitea/modules/web/routing"
 	"code.gitea.io/gitea/services/auth"
@@ -44,7 +45,7 @@ func storageHandler(storageSetting setting.Storage, prefix string, objStore stor
 				routing.UpdateFuncInfo(req.Context(), funcInfo)
 
 				rPath := strings.TrimPrefix(req.URL.Path, "/"+prefix+"/")
-				rPath = path.Clean("/" + strings.ReplaceAll(rPath, "\\", "/"))[1:]
+				rPath = util.CleanPath(strings.ReplaceAll(rPath, "\\", "/"))
 
 				u, err := objStore.URL(rPath, path.Base(rPath))
 				if err != nil {
@@ -80,7 +81,7 @@ func storageHandler(storageSetting setting.Storage, prefix string, objStore stor
 			routing.UpdateFuncInfo(req.Context(), funcInfo)
 
 			rPath := strings.TrimPrefix(req.URL.Path, "/"+prefix+"/")
-			rPath = path.Clean("/" + strings.ReplaceAll(rPath, "\\", "/"))[1:]
+			rPath = util.CleanPath(strings.ReplaceAll(rPath, "\\", "/"))
 			if rPath == "" {
 				http.Error(w, "file not found", http.StatusNotFound)
 				return
diff --git a/routers/web/repo/editor.go b/routers/web/repo/editor.go
index e5ba4ad2c139..4f208098e476 100644
--- a/routers/web/repo/editor.go
+++ b/routers/web/repo/editor.go
@@ -726,7 +726,7 @@ func UploadFilePost(ctx *context.Context) {
 
 func cleanUploadFileName(name string) string {
 	// Rebase the filename
-	name = strings.Trim(path.Clean("/"+name), "/")
+	name = strings.Trim(util.CleanPath(name), "/")
 	// Git disallows any filenames to have a .git directory in them.
 	for _, part := range strings.Split(name, "/") {
 		if strings.ToLower(part) == ".git" {
diff --git a/routers/web/repo/lfs.go b/routers/web/repo/lfs.go
index 869a69c37721..43f5527986b9 100644
--- a/routers/web/repo/lfs.go
+++ b/routers/web/repo/lfs.go
@@ -207,7 +207,7 @@ func LFSLockFile(ctx *context.Context) {
 		ctx.Redirect(ctx.Repo.RepoLink + "/settings/lfs/locks")
 		return
 	}
-	lockPath = path.Clean("/" + lockPath)[1:]
+	lockPath = util.CleanPath(lockPath)
 	if len(lockPath) == 0 {
 		ctx.Flash.Error(ctx.Tr("repo.settings.lfs_invalid_locking_path", originalPath))
 		ctx.Redirect(ctx.Repo.RepoLink + "/settings/lfs/locks")
diff --git a/services/migrations/gitea_uploader.go b/services/migrations/gitea_uploader.go
index 8b259a362b1e..ca961524d12c 100644
--- a/services/migrations/gitea_uploader.go
+++ b/services/migrations/gitea_uploader.go
@@ -9,7 +9,6 @@ import (
 	"fmt"
 	"io"
 	"os"
-	"path"
 	"path/filepath"
 	"strconv"
 	"strings"
@@ -30,6 +29,7 @@ import (
 	"code.gitea.io/gitea/modules/structs"
 	"code.gitea.io/gitea/modules/timeutil"
 	"code.gitea.io/gitea/modules/uri"
+	"code.gitea.io/gitea/modules/util"
 	"code.gitea.io/gitea/services/pull"
 
 	"github.com/google/uuid"
@@ -866,7 +866,7 @@ func (g *GiteaLocalUploader) CreateReviews(reviews ...*base.Review) error {
 			}
 
 			// SECURITY: The TreePath must be cleaned!
-			comment.TreePath = path.Clean("/" + comment.TreePath)[1:]
+			comment.TreePath = util.CleanPath(comment.TreePath)
 
 			var patch string
 			reader, writer := io.Pipe()
diff --git a/services/packages/container/blob_uploader.go b/services/packages/container/blob_uploader.go
index ba92b0507343..860672587d2b 100644
--- a/services/packages/container/blob_uploader.go
+++ b/services/packages/container/blob_uploader.go
@@ -8,13 +8,13 @@ import (
 	"errors"
 	"io"
 	"os"
-	"path"
 	"path/filepath"
 	"strings"
 
 	packages_model "code.gitea.io/gitea/models/packages"
 	packages_module "code.gitea.io/gitea/modules/packages"
 	"code.gitea.io/gitea/modules/setting"
+	"code.gitea.io/gitea/modules/util"
 )
 
 var (
@@ -33,7 +33,7 @@ type BlobUploader struct {
 }
 
 func buildFilePath(id string) string {
-	return filepath.Join(setting.Packages.ChunkedUploadPath, path.Clean("/" + strings.ReplaceAll(id, "\\", "/"))[1:])
+	return filepath.Join(setting.Packages.ChunkedUploadPath, util.CleanPath(strings.ReplaceAll(id, "\\", "/")))
 }
 
 // NewBlobUploader creates a new blob uploader for the given id
diff --git a/services/repository/files/file.go b/services/repository/files/file.go
index 2bac4372d378..7939491aec62 100644
--- a/services/repository/files/file.go
+++ b/services/repository/files/file.go
@@ -7,7 +7,6 @@ import (
 	"context"
 	"fmt"
 	"net/url"
-	"path"
 	"strings"
 	"time"
 
@@ -15,6 +14,7 @@ import (
 	user_model "code.gitea.io/gitea/models/user"
 	"code.gitea.io/gitea/modules/git"
 	api "code.gitea.io/gitea/modules/structs"
+	"code.gitea.io/gitea/modules/util"
 )
 
 // GetFileResponseFromCommit Constructs a FileResponse from a Commit object
@@ -129,7 +129,7 @@ func GetAuthorAndCommitterUsers(author, committer *IdentityOptions, doer *user_m
 // CleanUploadFileName Trims a filename and returns empty string if it is a .git directory
 func CleanUploadFileName(name string) string {
 	// Rebase the filename
-	name = strings.Trim(path.Clean("/"+name), "/")
+	name = strings.Trim(util.CleanPath(name), "/")
 	// Git disallows any filenames to have a .git directory in them.
 	for _, part := range strings.Split(name, "/") {
 		if strings.ToLower(part) == ".git" {

From 15a1c2d7efa2c835fb9bcff439446579f08c5e32 Mon Sep 17 00:00:00 2001
From: Zettat123 <zettat123@gmail.com>
Date: Wed, 8 Mar 2023 20:21:23 +0800
Subject: [PATCH 06/11] Fix panic when getting notes by ref (#23372)

Fix #23357 .

Now the `/repos/{owner}/{repo}/git/notes/{sha}` API supports getting
notes by a ref or sha
(https://try.gitea.io/api/swagger#/repository/repoGetNote). But the
`GetNote` func can only accept commit ID.

https://github.com/go-gitea/gitea/blob/a12f5757372f751d25f9e5ca1f168f6920ded894/modules/git/notes_nogogit.go#L18

So we need to convert the query parameter to commit ID before calling
`GetNote`.
---
 routers/api/v1/repo/notes.go | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/routers/api/v1/repo/notes.go b/routers/api/v1/repo/notes.go
index 2d1f3291f8b9..74969f2cad7c 100644
--- a/routers/api/v1/repo/notes.go
+++ b/routers/api/v1/repo/notes.go
@@ -58,8 +58,18 @@ func getNote(ctx *context.APIContext, identifier string) {
 		return
 	}
 
+	commitSHA, err := ctx.Repo.GitRepo.ConvertToSHA1(identifier)
+	if err != nil {
+		if git.IsErrNotExist(err) {
+			ctx.NotFound(err)
+		} else {
+			ctx.Error(http.StatusInternalServerError, "ConvertToSHA1", err)
+		}
+		return
+	}
+
 	var note git.Note
-	if err := git.GetNote(ctx, ctx.Repo.GitRepo, identifier, &note); err != nil {
+	if err := git.GetNote(ctx, ctx.Repo.GitRepo, commitSHA.String(), &note); err != nil {
 		if git.IsErrNotExist(err) {
 			ctx.NotFound(identifier)
 			return

From d949d8e074407a96dbcfa98a71ccd80527b5ad78 Mon Sep 17 00:00:00 2001
From: yp05327 <576951401@qq.com>
Date: Thu, 9 Mar 2023 00:18:10 +0900
Subject: [PATCH 07/11] add user visibility in dashboard navbar (#22747)

Add private/limited tag to dashboard user/org list dropdown menu

![image](https://user-images.githubusercontent.com/18380374/216752207-5beb5281-1b0b-4e2b-adfc-b39c192c5032.png)

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
---
 templates/user/dashboard/navbar.tmpl | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/templates/user/dashboard/navbar.tmpl b/templates/user/dashboard/navbar.tmpl
index 719d5b06b9f5..ab6f1bc5841b 100644
--- a/templates/user/dashboard/navbar.tmpl
+++ b/templates/user/dashboard/navbar.tmpl
@@ -5,12 +5,10 @@
 				<span class="text truncated-item-container">
 					{{avatar $.Context .ContextUser}}
 					<span class="truncated-item-name">{{.ContextUser.ShortName 40}}</span>
-					{{if .ContextUser.IsOrganization}}
-						<span class="org-visibility">
-							{{if .ContextUser.Visibility.IsLimited}}<div class="ui basic tiny horizontal label">{{.locale.Tr "org.settings.visibility.limited_shortname"}}</div>{{end}}
-							{{if .ContextUser.Visibility.IsPrivate}}<div class="ui basic tiny horizontal label">{{.locale.Tr "org.settings.visibility.private_shortname"}}</div>{{end}}
-						</span>
-					{{end}}
+					<span class="org-visibility">
+						{{if .ContextUser.Visibility.IsLimited}}<div class="ui basic tiny horizontal label">{{.locale.Tr "org.settings.visibility.limited_shortname"}}</div>{{end}}
+						{{if .ContextUser.Visibility.IsPrivate}}<div class="ui basic tiny horizontal label">{{.locale.Tr "org.settings.visibility.private_shortname"}}</div>{{end}}
+					</span>
 					{{svg "octicon-triangle-down" 14 "dropdown icon"}}
 				</span>
 				<div class="context user overflow menu" tabindex="-1">
@@ -21,6 +19,10 @@
 						<a class="{{if eq .ContextUser.ID .SignedUser.ID}}active selected{{end}} item truncated-item-container" href="{{AppSubUrl}}/{{if .PageIsIssues}}issues{{else if .PageIsPulls}}pulls{{else if .PageIsMilestonesDashboard}}milestones{{end}}">
 							{{avatar $.Context .SignedUser}}
 							<span class="truncated-item-name">{{.SignedUser.ShortName 40}}</span>
+							<span class="org-visibility">
+								{{if .ContextUser.Visibility.IsLimited}}<div class="ui basic tiny horizontal label">{{$.locale.Tr "org.settings.visibility.limited_shortname"}}</div>{{end}}
+								{{if .ContextUser.Visibility.IsPrivate}}<div class="ui basic tiny horizontal label">{{$.locale.Tr "org.settings.visibility.private_shortname"}}</div>{{end}}
+							</span>
 						</a>
 						{{range .Orgs}}
 							<a class="{{if eq $.ContextUser.ID .ID}}active selected{{end}} item truncated-item-container" title="{{.Name}}" href="{{.OrganisationLink}}/{{if $.PageIsIssues}}issues{{else if $.PageIsPulls}}pulls{{else if $.PageIsMilestonesDashboard}}milestones{{else}}dashboard{{end}}">

From 1960ad5c90df65100488b64e7047d1ba3096c11c Mon Sep 17 00:00:00 2001
From: Jason Song <i@wolfogre.com>
Date: Thu, 9 Mar 2023 01:57:05 +0800
Subject: [PATCH 08/11] Improve cache context (#23330)

Related to: #22294 #23186 #23054

Replace: #23218

Some discussion is in the comments of #23218.

Highlights:
- Add Expiration for cache context. If a cache context has been used for
more than 10s, the cache data will be ignored, and warning logs will be
printed.
- Add `discard` field to `cacheContext`, a `cacheContext` with `discard`
true will drop all cached data and won't store any new one.
- Introduce `WithNoCacheContext`, if one wants to run long-life tasks,
but the parent context is a cache context,
`WithNoCacheContext(perentCtx)` will discard the cache data, so it will
be safe to keep the context for a long time.
- It will be fine to treat an original context as a cache context, like
`GetContextData(context.Backgraud())`, no warning logs will be printed.

Some cases about nesting:

When:
- *A*, *B* or *C* means a cache context.
- ~*A*~, ~*B*~ or ~*C*~ means a discard cache context.
- `ctx` means `context.Backgrand()`
- *A(ctx)* means a cache context with `ctx` as the parent context.
- *B(A(ctx))* means a cache context with `A(ctx)` as the parent context.
- `With` means `WithCacheContext`
- `WithNo` means `WithNoCacheContext`

So:
- `With(ctx)` -> *A(ctx)*
- `With(With(ctx))` -> *A(ctx)*, not *B(A(ctx))*
- `With(With(With(ctx)))` -> *A(ctx)*, not *C(B(A(ctx)))*
- `WithNo(ctx)` -> *ctx*, not *~A~(ctx)*
- `WithNo(With(ctx))` -> *~A~(ctx)*
- `WithNo(WithNo(With(ctx)))` -> *~A~(ctx)*, not *~B~(~A~(ctx))*
- `With(WithNo(With(ctx)))` -> *B(~A~(ctx))*
- `WithNo(With(WithNo(With(ctx))))` -> *~B~(~A~(ctx))*
- `With(WithNo(With(WithNo(With(ctx)))))` -> *C(~B~(~A~(ctx)))*
---
 modules/cache/context.go      | 119 +++++++++++++++++++++++++++++-----
 modules/cache/context_test.go |  39 ++++++++++-
 services/repository/push.go   |   1 -
 3 files changed, 141 insertions(+), 18 deletions(-)

diff --git a/modules/cache/context.go b/modules/cache/context.go
index f741a8744538..62bbf5dcba84 100644
--- a/modules/cache/context.go
+++ b/modules/cache/context.go
@@ -6,6 +6,7 @@ package cache
 import (
 	"context"
 	"sync"
+	"time"
 
 	"code.gitea.io/gitea/modules/log"
 )
@@ -14,65 +15,151 @@ import (
 // This is useful for caching data that is expensive to calculate and is likely to be
 // used multiple times in a request.
 type cacheContext struct {
-	ctx  context.Context
-	data map[any]map[any]any
-	lock sync.RWMutex
+	data    map[any]map[any]any
+	lock    sync.RWMutex
+	created time.Time
+	discard bool
 }
 
 func (cc *cacheContext) Get(tp, key any) any {
 	cc.lock.RLock()
 	defer cc.lock.RUnlock()
-	if cc.data[tp] == nil {
-		return nil
-	}
 	return cc.data[tp][key]
 }
 
 func (cc *cacheContext) Put(tp, key, value any) {
 	cc.lock.Lock()
 	defer cc.lock.Unlock()
-	if cc.data[tp] == nil {
-		cc.data[tp] = make(map[any]any)
+
+	if cc.discard {
+		return
+	}
+
+	d := cc.data[tp]
+	if d == nil {
+		d = make(map[any]any)
+		cc.data[tp] = d
 	}
-	cc.data[tp][key] = value
+	d[key] = value
 }
 
 func (cc *cacheContext) Delete(tp, key any) {
 	cc.lock.Lock()
 	defer cc.lock.Unlock()
-	if cc.data[tp] == nil {
-		return
-	}
 	delete(cc.data[tp], key)
 }
 
+func (cc *cacheContext) Discard() {
+	cc.lock.Lock()
+	defer cc.lock.Unlock()
+	cc.data = nil
+	cc.discard = true
+}
+
+func (cc *cacheContext) isDiscard() bool {
+	cc.lock.RLock()
+	defer cc.lock.RUnlock()
+	return cc.discard
+}
+
+// cacheContextLifetime is the max lifetime of cacheContext.
+// Since cacheContext is used to cache data in a request level context, 10s is enough.
+// If a cacheContext is used more than 10s, it's probably misuse.
+const cacheContextLifetime = 10 * time.Second
+
+var timeNow = time.Now
+
+func (cc *cacheContext) Expired() bool {
+	return timeNow().Sub(cc.created) > cacheContextLifetime
+}
+
 var cacheContextKey = struct{}{}
 
+/*
+Since there are both WithCacheContext and WithNoCacheContext,
+it may be confusing when there is nesting.
+
+Some cases to explain the design:
+
+When:
+- A, B or C means a cache context.
+- A', B' or C' means a discard cache context.
+- ctx means context.Backgrand().
+- A(ctx) means a cache context with ctx as the parent context.
+- B(A(ctx)) means a cache context with A(ctx) as the parent context.
+- With is alias of WithCacheContext.
+- WithNo is alias of WithNoCacheContext.
+
+So:
+- With(ctx) -> A(ctx)
+- With(With(ctx)) -> A(ctx), not B(A(ctx)), always reuse parent cache context if possible.
+- With(With(With(ctx))) -> A(ctx), not C(B(A(ctx))), ditto.
+- WithNo(ctx) -> ctx, not A'(ctx), don't create new cache context if we don't have to.
+- WithNo(With(ctx)) -> A'(ctx)
+- WithNo(WithNo(With(ctx))) -> A'(ctx), not B'(A'(ctx)), don't create new cache context if we don't have to.
+- With(WithNo(With(ctx))) -> B(A'(ctx)), not A(ctx), never reuse a discard cache context.
+- WithNo(With(WithNo(With(ctx)))) -> B'(A'(ctx))
+- With(WithNo(With(WithNo(With(ctx))))) -> C(B'(A'(ctx))), so there's always only one not-discard cache context.
+*/
+
 func WithCacheContext(ctx context.Context) context.Context {
+	if c, ok := ctx.Value(cacheContextKey).(*cacheContext); ok {
+		if !c.isDiscard() {
+			// reuse parent context
+			return ctx
+		}
+	}
 	return context.WithValue(ctx, cacheContextKey, &cacheContext{
-		ctx:  ctx,
-		data: make(map[any]map[any]any),
+		data:    make(map[any]map[any]any),
+		created: timeNow(),
 	})
 }
 
+func WithNoCacheContext(ctx context.Context) context.Context {
+	if c, ok := ctx.Value(cacheContextKey).(*cacheContext); ok {
+		// The caller want to run long-life tasks, but the parent context is a cache context.
+		// So we should disable and clean the cache data, or it will be kept in memory for a long time.
+		c.Discard()
+		return ctx
+	}
+
+	return ctx
+}
+
 func GetContextData(ctx context.Context, tp, key any) any {
 	if c, ok := ctx.Value(cacheContextKey).(*cacheContext); ok {
+		if c.Expired() {
+			// The warning means that the cache context is misused for long-life task,
+			// it can be resolved with WithNoCacheContext(ctx).
+			log.Warn("cache context is expired, may be misused for long-life tasks: %v", c)
+			return nil
+		}
 		return c.Get(tp, key)
 	}
-	log.Warn("cannot get cache context when getting data: %v", ctx)
 	return nil
 }
 
 func SetContextData(ctx context.Context, tp, key, value any) {
 	if c, ok := ctx.Value(cacheContextKey).(*cacheContext); ok {
+		if c.Expired() {
+			// The warning means that the cache context is misused for long-life task,
+			// it can be resolved with WithNoCacheContext(ctx).
+			log.Warn("cache context is expired, may be misused for long-life tasks: %v", c)
+			return
+		}
 		c.Put(tp, key, value)
 		return
 	}
-	log.Warn("cannot get cache context when setting data: %v", ctx)
 }
 
 func RemoveContextData(ctx context.Context, tp, key any) {
 	if c, ok := ctx.Value(cacheContextKey).(*cacheContext); ok {
+		if c.Expired() {
+			// The warning means that the cache context is misused for long-life task,
+			// it can be resolved with WithNoCacheContext(ctx).
+			log.Warn("cache context is expired, may be misused for long-life tasks: %v", c)
+			return
+		}
 		c.Delete(tp, key)
 	}
 }
diff --git a/modules/cache/context_test.go b/modules/cache/context_test.go
index 77e3ecad2ca7..5315547865e1 100644
--- a/modules/cache/context_test.go
+++ b/modules/cache/context_test.go
@@ -6,6 +6,7 @@ package cache
 import (
 	"context"
 	"testing"
+	"time"
 
 	"github.com/stretchr/testify/assert"
 )
@@ -25,7 +26,7 @@ func TestWithCacheContext(t *testing.T) {
 	assert.EqualValues(t, 1, v.(int))
 
 	RemoveContextData(ctx, field, "my_config1")
-	RemoveContextData(ctx, field, "my_config2") // remove an non-exist key
+	RemoveContextData(ctx, field, "my_config2") // remove a non-exist key
 
 	v = GetContextData(ctx, field, "my_config1")
 	assert.Nil(t, v)
@@ -38,4 +39,40 @@ func TestWithCacheContext(t *testing.T) {
 
 	v = GetContextData(ctx, field, "my_config1")
 	assert.EqualValues(t, 1, v)
+
+	now := timeNow
+	defer func() {
+		timeNow = now
+	}()
+	timeNow = func() time.Time {
+		return now().Add(10 * time.Second)
+	}
+	v = GetContextData(ctx, field, "my_config1")
+	assert.Nil(t, v)
+}
+
+func TestWithNoCacheContext(t *testing.T) {
+	ctx := context.Background()
+
+	const field = "system_setting"
+
+	v := GetContextData(ctx, field, "my_config1")
+	assert.Nil(t, v)
+	SetContextData(ctx, field, "my_config1", 1)
+	v = GetContextData(ctx, field, "my_config1")
+	assert.Nil(t, v) // still no cache
+
+	ctx = WithCacheContext(ctx)
+	v = GetContextData(ctx, field, "my_config1")
+	assert.Nil(t, v)
+	SetContextData(ctx, field, "my_config1", 1)
+	v = GetContextData(ctx, field, "my_config1")
+	assert.NotNil(t, v)
+
+	ctx = WithNoCacheContext(ctx)
+	v = GetContextData(ctx, field, "my_config1")
+	assert.Nil(t, v)
+	SetContextData(ctx, field, "my_config1", 1)
+	v = GetContextData(ctx, field, "my_config1")
+	assert.Nil(t, v) // still no cache
 }
diff --git a/services/repository/push.go b/services/repository/push.go
index 355c2878113f..cdf030396fcf 100644
--- a/services/repository/push.go
+++ b/services/repository/push.go
@@ -80,7 +80,6 @@ func pushUpdates(optsList []*repo_module.PushUpdateOptions) error {
 
 	ctx, _, finished := process.GetManager().AddContext(graceful.GetManager().HammerContext(), fmt.Sprintf("PushUpdates: %s/%s", optsList[0].RepoUserName, optsList[0].RepoName))
 	defer finished()
-	ctx = cache.WithCacheContext(ctx)
 
 	repo, err := repo_model.GetRepositoryByOwnerAndName(ctx, optsList[0].RepoUserName, optsList[0].RepoName)
 	if err != nil {

From af0468ed8dea62f373c51efaa679080a9cb69f5c Mon Sep 17 00:00:00 2001
From: Yarden Shoham <hrsi88@gmail.com>
Date: Wed, 8 Mar 2023 22:40:04 +0200
Subject: [PATCH 09/11] Set `X-Gitea-Debug` header once (#23361)

Instead of adding it

# Before
On the raw commit page:

![image](https://user-images.githubusercontent.com/20454870/223470744-cdf11898-e023-4198-8c8b-c294e5d78b73.png)

# After

![image](https://user-images.githubusercontent.com/20454870/223470596-af898d66-bd5b-4ddb-b220-ceb1f149bfec.png)

Fixes #23308

---------

Signed-off-by: Yarden Shoham <hrsi88@gmail.com>
Co-authored-by: techknowlogick <techknowlogick@gitea.io>
Co-authored-by: John Olheiser <john.olheiser@gmail.com>
---
 modules/context/api.go         |  2 +-
 modules/context/context.go     |  4 ++--
 modules/httpcache/httpcache.go | 12 ++++++------
 routers/install/routes.go      |  2 +-
 routers/web/base.go            |  2 +-
 routers/web/user/avatar.go     |  2 +-
 6 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/modules/context/api.go b/modules/context/api.go
index 3f938948aed6..f7a338469124 100644
--- a/modules/context/api.go
+++ b/modules/context/api.go
@@ -244,7 +244,7 @@ func APIContexter() func(http.Handler) http.Handler {
 				}
 			}
 
-			httpcache.AddCacheControlToHeader(ctx.Resp.Header(), 0, "no-transform")
+			httpcache.SetCacheControlInHeader(ctx.Resp.Header(), 0, "no-transform")
 			ctx.Resp.Header().Set(`X-Frame-Options`, setting.CORSConfig.XFrameOptions)
 
 			ctx.Data["Context"] = &ctx
diff --git a/modules/context/context.go b/modules/context/context.go
index 0c8d7411ed5d..50c34edae2e5 100644
--- a/modules/context/context.go
+++ b/modules/context/context.go
@@ -388,7 +388,7 @@ func (ctx *Context) SetServeHeaders(opts *ServeHeaderOptions) {
 	if duration == 0 {
 		duration = 5 * time.Minute
 	}
-	httpcache.AddCacheControlToHeader(header, duration)
+	httpcache.SetCacheControlInHeader(header, duration)
 
 	if !opts.LastModified.IsZero() {
 		header.Set("Last-Modified", opts.LastModified.UTC().Format(http.TimeFormat))
@@ -753,7 +753,7 @@ func Contexter(ctx context.Context) func(next http.Handler) http.Handler {
 				}
 			}
 
-			httpcache.AddCacheControlToHeader(ctx.Resp.Header(), 0, "no-transform")
+			httpcache.SetCacheControlInHeader(ctx.Resp.Header(), 0, "no-transform")
 			ctx.Resp.Header().Set(`X-Frame-Options`, setting.CORSConfig.XFrameOptions)
 
 			ctx.Data["CsrfToken"] = ctx.csrf.GetToken()
diff --git a/modules/httpcache/httpcache.go b/modules/httpcache/httpcache.go
index f0caa30eb82b..46e0152ef455 100644
--- a/modules/httpcache/httpcache.go
+++ b/modules/httpcache/httpcache.go
@@ -15,8 +15,8 @@ import (
 	"code.gitea.io/gitea/modules/setting"
 )
 
-// AddCacheControlToHeader adds suitable cache-control headers to response
-func AddCacheControlToHeader(h http.Header, maxAge time.Duration, additionalDirectives ...string) {
+// SetCacheControlInHeader sets suitable cache-control headers in the response
+func SetCacheControlInHeader(h http.Header, maxAge time.Duration, additionalDirectives ...string) {
 	directives := make([]string, 0, 2+len(additionalDirectives))
 
 	// "max-age=0 + must-revalidate" (aka "no-cache") is preferred instead of "no-store"
@@ -31,7 +31,7 @@ func AddCacheControlToHeader(h http.Header, maxAge time.Duration, additionalDire
 		directives = append(directives, "max-age=0", "private", "must-revalidate")
 
 		// to remind users they are using non-prod setting.
-		h.Add("X-Gitea-Debug", "RUN_MODE="+setting.RunMode)
+		h.Set("X-Gitea-Debug", "RUN_MODE="+setting.RunMode)
 	}
 
 	h.Set("Cache-Control", strings.Join(append(directives, additionalDirectives...), ", "))
@@ -50,7 +50,7 @@ func HandleTimeCache(req *http.Request, w http.ResponseWriter, fi os.FileInfo) (
 
 // HandleGenericTimeCache handles time-based caching for a HTTP request
 func HandleGenericTimeCache(req *http.Request, w http.ResponseWriter, lastModified time.Time) (handled bool) {
-	AddCacheControlToHeader(w.Header(), setting.StaticCacheTime)
+	SetCacheControlInHeader(w.Header(), setting.StaticCacheTime)
 
 	ifModifiedSince := req.Header.Get("If-Modified-Since")
 	if ifModifiedSince != "" {
@@ -81,7 +81,7 @@ func HandleGenericETagCache(req *http.Request, w http.ResponseWriter, etag strin
 			return true
 		}
 	}
-	AddCacheControlToHeader(w.Header(), setting.StaticCacheTime)
+	SetCacheControlInHeader(w.Header(), setting.StaticCacheTime)
 	return false
 }
 
@@ -125,6 +125,6 @@ func HandleGenericETagTimeCache(req *http.Request, w http.ResponseWriter, etag s
 			}
 		}
 	}
-	AddCacheControlToHeader(w.Header(), setting.StaticCacheTime)
+	SetCacheControlInHeader(w.Header(), setting.StaticCacheTime)
 	return false
 }
diff --git a/routers/install/routes.go b/routers/install/routes.go
index a8efc92fe17c..82d9c34b41f1 100644
--- a/routers/install/routes.go
+++ b/routers/install/routes.go
@@ -64,7 +64,7 @@ func installRecovery(ctx goctx.Context) func(next http.Handler) http.Handler {
 						"SignedUserName": "",
 					}
 
-					httpcache.AddCacheControlToHeader(w.Header(), 0, "no-transform")
+					httpcache.SetCacheControlInHeader(w.Header(), 0, "no-transform")
 					w.Header().Set(`X-Frame-Options`, setting.CORSConfig.XFrameOptions)
 
 					if !setting.IsProd {
diff --git a/routers/web/base.go b/routers/web/base.go
index d0135eac7a96..2eb0b6f39118 100644
--- a/routers/web/base.go
+++ b/routers/web/base.go
@@ -159,7 +159,7 @@ func Recovery(ctx goctx.Context) func(next http.Handler) http.Handler {
 						store["SignedUserName"] = ""
 					}
 
-					httpcache.AddCacheControlToHeader(w.Header(), 0, "no-transform")
+					httpcache.SetCacheControlInHeader(w.Header(), 0, "no-transform")
 					w.Header().Set(`X-Frame-Options`, setting.CORSConfig.XFrameOptions)
 
 					if !setting.IsProd {
diff --git a/routers/web/user/avatar.go b/routers/web/user/avatar.go
index 2dba74822e53..7ad65cd51e39 100644
--- a/routers/web/user/avatar.go
+++ b/routers/web/user/avatar.go
@@ -17,7 +17,7 @@ func cacheableRedirect(ctx *context.Context, location string) {
 	// here we should not use `setting.StaticCacheTime`, it is pretty long (default: 6 hours)
 	// we must make sure the redirection cache time is short enough, otherwise a user won't see the updated avatar in 6 hours
 	// it's OK to make the cache time short, it is only a redirection, and doesn't cost much to make a new request
-	httpcache.AddCacheControlToHeader(ctx.Resp.Header(), 5*time.Minute)
+	httpcache.SetCacheControlInHeader(ctx.Resp.Header(), 5*time.Minute)
 	ctx.Redirect(location)
 }
 

From c5573dbc0fe2937a363813971a443277ccd580c3 Mon Sep 17 00:00:00 2001
From: GiteaBot <teabot@gitea.io>
Date: Thu, 9 Mar 2023 00:15:57 +0000
Subject: [PATCH 10/11] [skip ci] Updated translations via Crowdin

---
 options/locale/locale_zh-TW.ini | 91 ++++++++++++++++++++++++++++++++-
 1 file changed, 90 insertions(+), 1 deletion(-)

diff --git a/options/locale/locale_zh-TW.ini b/options/locale/locale_zh-TW.ini
index edf7376e7cc4..4f2e0ebb13c3 100644
--- a/options/locale/locale_zh-TW.ini
+++ b/options/locale/locale_zh-TW.ini
@@ -57,6 +57,7 @@ new_mirror=新鏡像
 new_fork=新增儲存庫 fork
 new_org=新增組織
 new_project=新增專案
+new_project_column=新增欄位
 manage_org=管理組織
 admin_panel=網站管理
 account_settings=帳戶設定
@@ -90,9 +91,11 @@ disabled=已停用
 
 copy=複製
 copy_url=複製 URL
+copy_content=複製內容
 copy_branch=複製分支名稱
 copy_success=複製成功！
 copy_error=複製失敗
+copy_type_unsupported=無法複製此類型的檔案
 
 write=撰寫
 preview=預覽
@@ -109,8 +112,14 @@ never=從來沒有
 rss_feed=RSS 摘要
 
 [aria]
+navbar=導航列
+footer=頁尾
+footer.software=關於軟體
+footer.links=連結
 
 [filter]
+string.asc=A - Z
+string.desc=Z - A
 
 [error]
 occurred=發生錯誤
@@ -238,7 +247,10 @@ default_enable_timetracking_popup=預設情況下啟用新存儲庫的時間跟
 no_reply_address=隱藏電子信箱域名
 no_reply_address_helper=作為隱藏電子信箱使用者的域名。例如，如果隱藏的電子信箱域名設定為「noreply.example.org」，帳號「joe」將以「joe@noreply.example.org」的身分登錄到 Git 中。
 password_algorithm=密碼雜湊演算法
+invalid_password_algorithm=無效的密碼雜湊演算法
 password_algorithm_helper=設定密碼雜湊演算法。演算法有不同的需求和強度。「argon2」雖然有優秀的特性但會占用大量記憶體，所以可能不適用於小型系統。
+enable_update_checker=啟用更新檢查器
+enable_update_checker_helper=定期連線到 gitea.io 檢查更新。
 
 [home]
 uname_holder=帳號或電子信箱
@@ -285,6 +297,8 @@ org_no_results=沒有找到符合的組織。
 code_no_results=找不到符合您關鍵字的原始碼。
 code_search_results=「%s」的搜尋結果
 code_last_indexed_at=最後索引 %s
+relevant_repositories_tooltip=已隱藏缺少主題、圖示、說明、Fork 的儲存庫。
+relevant_repositories=只顯示相關的儲存庫，<a href="%s">顯示未篩選的結果</a>。
 
 
 [auth]
@@ -357,6 +371,7 @@ password_pwned_err=無法完成對 HaveIBeenPwned 的請求。
 
 [mail]
 view_it_on=在 %s 上查看
+reply=或是直接回覆此電子郵件
 link_not_working_do_paste=無法開啟？請複製超連結到瀏覽器貼上。
 hi_user_x=<b>%s</b> 您好，
 
@@ -491,6 +506,7 @@ user_not_exist=該用戶名不存在
 team_not_exist=團隊不存在
 last_org_owner=你不能從「Owners」團隊中刪除最後一個使用者。每個組織中至少要有一個擁有者。
 cannot_add_org_to_team=組織不能被新增為團隊成員。
+organization_leave_success=您已成功離開組織 %s。
 
 invalid_ssh_key=無法驗證您的 SSH 密鑰：%s
 invalid_gpg_key=無法驗證您的 GPG 密鑰：%s
@@ -1002,10 +1018,12 @@ unstar=移除星號
 star=加上星號
 fork=Fork
 download_archive=下載此儲存庫
+more_operations=更多操作
 
 no_desc=暫無描述
 quick_guide=快速幫助
 clone_this_repo=Clone 此儲存庫
+cite_this_repo=引用此儲存庫
 create_new_repo_command=從命令列建立新儲存庫。
 push_exist_repo=從命令列推送已存在的儲存庫
 empty_message=此儲存庫未包含任何內容。
@@ -1155,6 +1173,7 @@ commits.signed_by_untrusted_user_unmatched=由不受信任且與提交者不相
 commits.gpg_key_id=GPG 金鑰 ID
 commits.ssh_key_fingerprint=SSH 金鑰指紋
 
+commit.operations=操作
 commit.revert=還原
 commit.revert-header=還原: %s
 commit.revert-content=選擇還原的目標分支：
@@ -1187,11 +1206,22 @@ projects.type.bug_triage=Bug 檢傷分類
 projects.template.desc=專案範本
 projects.template.desc_helper=選擇專案範本以開始
 projects.type.uncategorized=未分類
+projects.column.edit=編輯欄位
 projects.column.edit_title=組織名稱
 projects.column.new_title=組織名稱
+projects.column.new_submit=建立欄位
+projects.column.new=新增欄位
+projects.column.set_default=設為預設
+projects.column.set_default_desc=將此欄位設定為未分類問題及合併請求的預設預設值
+projects.column.delete=刪除欄位
+projects.column.deletion_desc=刪除專案欄位會將所有相關的問題移動到「未分類」，是否繼續？
 projects.column.color=彩色
 projects.open=開啟
 projects.close=關閉
+projects.column.assigned_to=已指派給
+projects.card_type.desc=卡片預覽
+projects.card_type.images_and_text=圖片和文字
+projects.card_type.text_only=純文字
 
 issues.desc=管理錯誤報告、任務和里程碑。
 issues.filter_assignees=篩選負責人
@@ -1268,6 +1298,7 @@ issues.filter_label_no_select=所有標籤
 issues.filter_milestone=里程碑
 issues.filter_milestone_no_select=所有里程碑
 issues.filter_project=專案
+issues.filter_project_all=所有專案
 issues.filter_project_none=未選擇專案
 issues.filter_assignee=負責人
 issues.filter_assginee_no_select=所有負責人
@@ -1300,6 +1331,8 @@ issues.action_milestone=里程碑
 issues.action_milestone_no_select=無里程碑
 issues.action_assignee=負責人
 issues.action_assignee_no_select=沒有負責人
+issues.action_check=選取/取消選取
+issues.action_check_all=全選/取消全選
 issues.opened_by=建立於 %[1]s 由 <a href="%[2]s">%[3]s</a>
 pulls.merged_by=由 <a href="%[2]s">%[3]s</a> 建立，合併於 %[1]s
 pulls.merged_by_fake=由 %[2]s 建立，合併於 %[1]s
@@ -1798,6 +1831,7 @@ settings.mirror_sync_in_progress=鏡像同步正在進行中。 請稍後再回
 settings.site=網站
 settings.update_settings=更新設定
 settings.branches.update_default_branch=更新預設分支
+settings.branches.add_new_rule=加入新規則
 settings.advanced_settings=進階設定
 settings.wiki_desc=啟用儲存庫 Wiki
 settings.use_internal_wiki=使用內建 Wiki
@@ -1827,8 +1861,11 @@ settings.pulls.ignore_whitespace=衝突時忽略空白
 settings.pulls.enable_autodetect_manual_merge=啟用自動偵測手動合併 (注意: 在某些特殊情況下可能發生誤判)
 settings.pulls.allow_rebase_update=啟用透過 Rebase 更新合併請求分支
 settings.pulls.default_delete_branch_after_merge=預設在合併後刪除合併請求分支
+settings.pulls.default_allow_edits_from_maintainers=預設允許維護者進行編輯
+settings.releases_desc=啟用儲存庫版本發佈
 settings.packages_desc=啟用儲存庫套件註冊中心
 settings.projects_desc=啟用儲存庫專案
+settings.actions_desc=啟用儲存庫 Actions
 settings.admin_settings=管理員設定
 settings.admin_enable_health_check=啟用儲存庫的健康檢查 (git fsck)
 settings.admin_code_indexer=程式碼索引器
@@ -2038,6 +2075,8 @@ settings.deploy_key_deletion_desc=移除部署金鑰將拒絕它存取此儲存
 settings.deploy_key_deletion_success=部署金鑰已移除。
 settings.branches=分支
 settings.protected_branch=分支保護
+settings.protected_branch.save_rule=儲存規則
+settings.protected_branch.delete_rule=刪除規則
 settings.protected_branch_can_push=允許推送？
 settings.protected_branch_can_push_yes=你可以推送
 settings.protected_branch_can_push_no=你不能推送
@@ -2072,6 +2111,7 @@ settings.dismiss_stale_approvals=捨棄過時的核可
 settings.dismiss_stale_approvals_desc=當新的提交有修改到合併請求的內容，並被推送到此分支時，將捨棄舊的核可。
 settings.require_signed_commits=僅接受經簽署的提交
 settings.require_signed_commits_desc=拒絕未經簽署或未經驗證的提交推送到此分支。
+settings.protect_branch_name_pattern=受保護的分支名稱模式
 settings.protect_protected_file_patterns=受保護的檔案模式 (以分號區隔「\;」):
 settings.protect_protected_file_patterns_desc=即便使用者有權限新增、修改、刪除此分支的檔案，仍不允許直接修改受保護的檔案。可以用半形分號「\;」分隔多個模式。請於<a href="https://pkg.go.dev/github.com/gobwas/glob#Compile">github.com/gobwas/glob</a> 文件查看模式格式。範例：<code>.drone.yml</code>, <code>/docs/**/*.txt</code>。
 settings.protect_unprotected_file_patterns=未受保護的檔案模式 (以分號區隔「\;」):
@@ -2080,6 +2120,7 @@ settings.add_protected_branch=啟用保護
 settings.delete_protected_branch=停用保護
 settings.update_protect_branch_success=已更新「%s」的分支保護。
 settings.remove_protected_branch_success=已停用「%s」的分支保護。
+settings.remove_protected_branch_failed=刪除分支保護規則「%s」失敗。
 settings.protected_branch_deletion=停用分支保護
 settings.protected_branch_deletion_desc=停用分支保護將允許有寫入權限的使用者推送至該分支，是否繼續？
 settings.block_rejected_reviews=有退回的審核時阻擋合併
@@ -2089,9 +2130,13 @@ settings.block_on_official_review_requests_desc=如果有官方的審核請求
 settings.block_outdated_branch=如果合併請求已經過時則阻擋合併
 settings.block_outdated_branch_desc=當 head 分支落後於基礎分支時不得合併。
 settings.default_branch_desc=請選擇用來提交程式碼和合併請求的預設分支。
+settings.merge_style_desc=合併方式
+settings.default_merge_style_desc=預設合併方式
 settings.choose_branch=選擇一個分支...
 settings.no_protected_branch=沒有受保護的分支。
 settings.edit_protected_branch=編輯
+settings.protected_branch_required_rule_name=必須填寫規則名稱
+settings.protected_branch_duplicate_rule_name=規則名稱已存在
 settings.protected_branch_required_approvals_min=需要的核可數量不能為負數。
 settings.tags=標籤
 settings.tags.protection=標籤保護
@@ -2247,6 +2292,8 @@ release.downloads=下載附件
 release.download_count=下載次數：%s
 release.add_tag_msg=使用此版本的標題和內容作為標籤訊息。
 release.add_tag=只建立標籤
+release.releases_for=%s 的版本發佈
+release.tags_for=%s 的標籤
 
 branch.name=分支名稱
 branch.search=搜尋分支
@@ -2305,7 +2352,7 @@ org_full_name_holder=組織全名
 org_name_helper=組織名稱應該要簡短且方便記憶
 create_org=建立組織
 repo_updated=更新於
-members=成員數
+members=成員
 teams=團隊
 code=程式碼
 lower_members=名成員
@@ -2957,6 +3004,7 @@ monitor.queue.pool.cancel_desc=讓佇列沒有任何工作者群組可能造成
 
 notices.system_notice_list=系統提示
 notices.view_detail_header=查看提示細節
+notices.operations=操作
 notices.select_all=選取全部
 notices.deselect_all=取消所有選取
 notices.inverse_selection=反向選取
@@ -3081,6 +3129,8 @@ keywords=關鍵字
 details=詳情
 details.author=作者
 details.project_site=專案網站
+details.repository_site=儲存庫網站
+details.documentation_site=文件網站
 details.license=授權條款
 assets=檔案
 versions=版本
@@ -3088,7 +3138,14 @@ versions.on=於
 versions.view_all=檢視全部
 dependency.id=ID
 dependency.version=版本
+cargo.registry=在 Cargo 組態檔設定此註冊中心 (例如: <code>~/.cargo/config.toml</code>):
+cargo.install=執行下列命令以使用 Cargo 安裝此套件:
+cargo.documentation=關於 Cargo registry 的詳情請參閱<a target="_blank" rel="noopener noreferrer" href="https://docs.gitea.io/en-us/packages/cargo/">說明文件</a>。
+cargo.details.repository_site=儲存庫網站
+cargo.details.documentation_site=文件網站
+chef.registry=在您的 <code>~/.chef/config.rb</code> 檔設定此註冊中心:
 chef.install=執行下列命令安裝此套件:
+chef.documentation=關於 Chef registry 的詳情請參閱<a target="_blank" rel="noopener noreferrer" href="https://docs.gitea.io/en-us/packages/chef/">說明文件</a>。
 composer.registry=在您的 <code>~/.composer/config.json</code> 檔設定此註冊中心:
 composer.install=執行下列命令以使用 Composer 安裝此套件:
 composer.documentation=關於 Composer registry 的詳情請參閱<a target="_blank" rel="noopener noreferrer" href="https://docs.gitea.io/en-us/packages/composer/">說明文件</a>。
@@ -3098,6 +3155,11 @@ conan.details.repository=儲存庫
 conan.registry=透過下列命令設定此註冊中心:
 conan.install=執行下列命令以使用 Conan 安裝此套件:
 conan.documentation=關於 Conan registry 的詳情請參閱<a target="_blank" rel="noopener noreferrer" href="https://docs.gitea.io/en-us/packages/conan/">說明文件</a>。
+conda.registry=在您的 <code>.condarc</code> 檔設定此註冊中心為 Conda 存儲庫:
+conda.install=執行下列命令以使用 Conda 安裝此套件:
+conda.documentation=關於 Conda registry 的詳情請參閱<a target="_blank" rel="noopener noreferrer" href="https://docs.gitea.io/en-us/packages/conda/">說明文件</a>。
+conda.details.repository_site=儲存庫網站
+conda.details.documentation_site=文件網站
 container.details.type=映像檔類型
 container.details.platform=平台
 container.pull=透過下列命令拉取映像檔:
@@ -3156,7 +3218,27 @@ settings.delete.description=刪除套件是永久且不可還原的。
 settings.delete.notice=您正要刪除 %s (%s)，此動作是無法還原的，您確定嗎？
 settings.delete.success=已刪除該套件。
 settings.delete.error=刪除套件失敗。
+owner.settings.cargo.initialize=初始化索引
+owner.settings.cargo.rebuild=重建索引
+owner.settings.cleanuprules.title=管理清理規則
+owner.settings.cleanuprules.add=加入清理規則
+owner.settings.cleanuprules.edit=編輯清理規則
+owner.settings.cleanuprules.none=沒有可用的清理規則。閱讀文件以了解更多。
+owner.settings.cleanuprules.preview=清理規則預覽
+owner.settings.cleanuprules.preview.none=清理規則不符合任何套件。
 owner.settings.cleanuprules.enabled=已啟用
+owner.settings.cleanuprules.pattern_full_match=將比對規則套用到完整的套件名稱
+owner.settings.cleanuprules.keep.title=符合這些規則的版本即使符合下面的刪除規則也會被保留。
+owner.settings.cleanuprules.keep.count=保留最新的
+owner.settings.cleanuprules.keep.count.1=每個套件 1 個版本
+owner.settings.cleanuprules.keep.count.n=每個套件 %d 個版本
+owner.settings.cleanuprules.keep.pattern=保留版本的比對規則
+owner.settings.cleanuprules.keep.pattern.container=Container 套件的<code>最新</code>版本總是會保留。
+owner.settings.cleanuprules.remove.title=符合這些規則的版本將被移除，除非前述的規則要求保留它們。
+owner.settings.cleanuprules.remove.days=移除早於天數的版本
+owner.settings.cleanuprules.remove.pattern=移除版本的比對規則
+owner.settings.cleanuprules.success.update=已更新清理規則。
+owner.settings.cleanuprules.success.delete=已刪除清理規則。
 
 [secrets]
 value=值
@@ -3166,16 +3248,23 @@ name=組織名稱
 
 
 
+runners.status=狀態
 runners.id=ID
 runners.name=組織名稱
 runners.owner_type=認證類型
 runners.description=組織描述
 runners.labels=標籤
+runners.agent_labels=代理程式標籤
+runners.custom_labels=自訂標籤
 runners.task_list.run=執行
+runners.task_list.status=狀態
 runners.task_list.repository=儲存庫
 runners.task_list.commit=提交
+runners.task_list.done_at=完成於
 runners.status.active=啟用
 
+runs.open_tab=%d 開放中
+runs.closed_tab=%d 已關閉
 runs.commit=提交
 
 

From 52e24167e5ebe0297f7630e9daecd6ffc9570a99 Mon Sep 17 00:00:00 2001
From: Nick <nick.guenther@polymtl.ca>
Date: Wed, 8 Mar 2023 20:24:23 -0500
Subject: [PATCH 11/11] Test renderReadmeFile (#23185)

Add test coverage to the important features of
[`routers.web.repo.renderReadmeFile`](https://github.com/go-gitea/gitea/blob/067b0c2664d127c552ccdfd264257caca4907a77/routers/web/repo/view.go#L273);
namely that:

- it can handle looking in docs/, .gitea/, and .github/
- it can handle choosing between multiple competing READMEs
- it prefers the localized README to the markdown README to the
plaintext README
- it can handle broken symlinks when processing all the options
- it uses the name of the symlink, not the name of the target of the
symlink
---
 models/db/iterate_test.go                     |   2 +-
 models/db/list_test.go                        |   4 +-
 models/fixtures/repo_unit.yml                 |   6 +
 models/fixtures/repository.yml                |  13 +++
 models/fixtures/user.yml                      |   2 +-
 .../user2/readme-test.git/HEAD                |   1 +
 .../user2/readme-test.git/config              |   4 +
 .../user2/readme-test.git/info/exclude        |   6 +
 .../user2/readme-test.git/info/refs           |  21 ++++
 .../12/11481f7314efbfe4e44703170d96c8fac8172b | Bin 0 -> 169 bytes
 .../17/2343566bf11fc71ba4acf8d2ea70d12bc1d037 | Bin 0 -> 214 bytes
 .../1a/48cae3f18ccd9c929e6608f67087dbaac3cf9e | Bin 0 -> 167 bytes
 .../1e/1e08102cf1b1fc01c069c88ee75445974363ab | Bin 0 -> 83 bytes
 .../21/470f9b3e8ff24e0fa083d2dbc447f4c3401355 |   2 +
 .../23/65bfe0c5714e2e3f2d53bb302b10d8d5b4fc7d | Bin 0 -> 175 bytes
 .../38/9d08c6a71d024a91f14089007cd789cd977ca6 | Bin 0 -> 48 bytes
 .../3a/a8f4e0e1a535f0f9e0ae40e6ec1bce42642bc4 | Bin 0 -> 140 bytes
 .../3b/23d7f1a9cb904cb46f5f2272bfa5ed5f871fb9 |   1 +
 .../50/6ff7310f420e878595b4bc8f11688e3f0ae14e | Bin 0 -> 166 bytes
 .../58/3eb775c596858380273492759d39081d65d029 | Bin 0 -> 169 bytes
 .../60/ea618ae7d4ecbe9c1962591c7da1b05bb1a5c8 |   3 +
 .../6a/b05db4c52530726c1856eb558228e9d1949e7f | Bin 0 -> 169 bytes
 .../71/60a063b5544b5a78131b94f47bfd200046eda2 | Bin 0 -> 167 bytes
 .../75/6c70c97047d8aeb11ca3c71edd9fb76cefee9c | Bin 0 -> 28 bytes
 .../7f/2b9f991d99362eb827b67f4ae2f5fbc5fa2271 | Bin 0 -> 211 bytes
 .../7f/792e709143fb0f021da2371e5f40d1bcc284fd | Bin 0 -> 166 bytes
 .../82/817856dadc7f6b944633e1b77d5b6e302dde06 | Bin 0 -> 51 bytes
 .../8b/4149e7dede3cd53ba11c64c88b057c5fe2c200 | Bin 0 -> 169 bytes
 .../93/54813d81053c14afe878a9f056b937ec42bb48 | Bin 0 -> 28 bytes
 .../9c/72c10e55e7d6ea21f591aa424e2625e8ad8094 | Bin 0 -> 136 bytes
 .../a3/cd04bb110e17591ac04e156c7df2c2f5c96fa6 | Bin 0 -> 82 bytes
 .../b0/e851a5619e2d6cee1da25a15ab67305f0861ec | Bin 0 -> 76 bytes
 .../b4/4c8eb00bdaf0522de61e591fee5f66851ef4b5 | Bin 0 -> 112 bytes
 .../b8/eaa80ad86072e1f23d2638842154ce9aceff8d | Bin 0 -> 77 bytes
 .../d5/34f914944c3c943a6bdb677d869ac54934928d | Bin 0 -> 31 bytes
 .../e2/f9904cd97b4045feecfffef5a426e9461bee70 | Bin 0 -> 117 bytes
 .../e3/a6fd8fe49e323ee10017f72b777a53fbd8076f |   3 +
 .../e7/bf02fcfa7a86f7fe9e8158b55d58ddf9d877ec | Bin 0 -> 171 bytes
 .../ea/57c91ddb8b4ac705b5ac4c34c7a48f2d0fc180 | Bin 0 -> 77 bytes
 .../fe/495ea336f079ef2bed68648d0ba9a37cdbd4aa | Bin 0 -> 197 bytes
 .../readme-test.git/objects/info/commit-graph | Bin 0 -> 2612 bytes
 .../user2/readme-test.git/objects/info/packs  |   2 +
 ...d634b76f8154310cccb52537a0195e43166.bitmap | Bin 0 -> 1642 bytes
 ...33bd634b76f8154310cccb52537a0195e43166.idx | Bin 0 -> 4012 bytes
 ...3bd634b76f8154310cccb52537a0195e43166.pack | Bin 0 -> 7854 bytes
 .../user2/readme-test.git/packed-refs         |  22 ++++
 .../refs/heads/fallbacks-broken-symlinks      |   1 +
 tests/integration/repo_test.go                | 105 ++++++++++++++++++
 48 files changed, 194 insertions(+), 4 deletions(-)
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/HEAD
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/config
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/info/exclude
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/info/refs
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/12/11481f7314efbfe4e44703170d96c8fac8172b
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/17/2343566bf11fc71ba4acf8d2ea70d12bc1d037
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/1a/48cae3f18ccd9c929e6608f67087dbaac3cf9e
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/1e/1e08102cf1b1fc01c069c88ee75445974363ab
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/21/470f9b3e8ff24e0fa083d2dbc447f4c3401355
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/23/65bfe0c5714e2e3f2d53bb302b10d8d5b4fc7d
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/38/9d08c6a71d024a91f14089007cd789cd977ca6
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/3a/a8f4e0e1a535f0f9e0ae40e6ec1bce42642bc4
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/3b/23d7f1a9cb904cb46f5f2272bfa5ed5f871fb9
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/50/6ff7310f420e878595b4bc8f11688e3f0ae14e
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/58/3eb775c596858380273492759d39081d65d029
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/60/ea618ae7d4ecbe9c1962591c7da1b05bb1a5c8
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/6a/b05db4c52530726c1856eb558228e9d1949e7f
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/71/60a063b5544b5a78131b94f47bfd200046eda2
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/75/6c70c97047d8aeb11ca3c71edd9fb76cefee9c
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/7f/2b9f991d99362eb827b67f4ae2f5fbc5fa2271
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/7f/792e709143fb0f021da2371e5f40d1bcc284fd
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/82/817856dadc7f6b944633e1b77d5b6e302dde06
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/8b/4149e7dede3cd53ba11c64c88b057c5fe2c200
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/93/54813d81053c14afe878a9f056b937ec42bb48
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/9c/72c10e55e7d6ea21f591aa424e2625e8ad8094
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/a3/cd04bb110e17591ac04e156c7df2c2f5c96fa6
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/b0/e851a5619e2d6cee1da25a15ab67305f0861ec
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/b4/4c8eb00bdaf0522de61e591fee5f66851ef4b5
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/b8/eaa80ad86072e1f23d2638842154ce9aceff8d
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/d5/34f914944c3c943a6bdb677d869ac54934928d
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/e2/f9904cd97b4045feecfffef5a426e9461bee70
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/e3/a6fd8fe49e323ee10017f72b777a53fbd8076f
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/e7/bf02fcfa7a86f7fe9e8158b55d58ddf9d877ec
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/ea/57c91ddb8b4ac705b5ac4c34c7a48f2d0fc180
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/fe/495ea336f079ef2bed68648d0ba9a37cdbd4aa
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/info/commit-graph
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/info/packs
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.bitmap
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.idx
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.pack
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/packed-refs
 create mode 100644 tests/gitea-repositories-meta/user2/readme-test.git/refs/heads/fallbacks-broken-symlinks

diff --git a/models/db/iterate_test.go b/models/db/iterate_test.go
index a713fe0d8b85..6bcf740c238b 100644
--- a/models/db/iterate_test.go
+++ b/models/db/iterate_test.go
@@ -25,7 +25,7 @@ func TestIterate(t *testing.T) {
 		return nil
 	})
 	assert.NoError(t, err)
-	assert.EqualValues(t, 83, repoCnt)
+	assert.EqualValues(t, 84, repoCnt)
 
 	err = db.Iterate(db.DefaultContext, nil, func(ctx context.Context, repoUnit *repo_model.RepoUnit) error {
 		reopUnit2 := repo_model.RepoUnit{ID: repoUnit.ID}
diff --git a/models/db/list_test.go b/models/db/list_test.go
index ffef1e4948ee..1295692cec85 100644
--- a/models/db/list_test.go
+++ b/models/db/list_test.go
@@ -35,11 +35,11 @@ func TestFind(t *testing.T) {
 	var repoUnits []repo_model.RepoUnit
 	err := db.Find(db.DefaultContext, &opts, &repoUnits)
 	assert.NoError(t, err)
-	assert.EqualValues(t, 83, len(repoUnits))
+	assert.EqualValues(t, 84, len(repoUnits))
 
 	cnt, err := db.Count(db.DefaultContext, &opts, new(repo_model.RepoUnit))
 	assert.NoError(t, err)
-	assert.EqualValues(t, 83, cnt)
+	assert.EqualValues(t, 84, cnt)
 
 	repoUnits = make([]repo_model.RepoUnit, 0, 10)
 	newCnt, err := db.FindAndCount(db.DefaultContext, &opts, &repoUnits)
diff --git a/models/fixtures/repo_unit.yml b/models/fixtures/repo_unit.yml
index 503b8c9ddfa4..ef0b7c1a941e 100644
--- a/models/fixtures/repo_unit.yml
+++ b/models/fixtures/repo_unit.yml
@@ -569,3 +569,9 @@
   type: 3
   config: "{\"IgnoreWhitespaceConflicts\":false,\"AllowMerge\":true,\"AllowRebase\":true,\"AllowRebaseMerge\":true,\"AllowSquash\":true}"
   created_unix: 946684810
+
+-
+  id: 84
+  repo_id: 56
+  type: 1
+  created_unix: 946684810
diff --git a/models/fixtures/repository.yml b/models/fixtures/repository.yml
index dd8facb7a313..32ba8744d452 100644
--- a/models/fixtures/repository.yml
+++ b/models/fixtures/repository.yml
@@ -1634,3 +1634,16 @@
   is_private: true
   num_issues: 1
   status: 0
+
+-
+  id: 56
+  owner_id: 2
+  owner_name: user2
+  lower_name: readme-test
+  name: readme-test
+  default_branch: master
+  is_empty: false
+  is_archived: false
+  is_private: true
+  status: 0
+  num_issues: 0
diff --git a/models/fixtures/user.yml b/models/fixtures/user.yml
index c6081f07d06b..ce54defacdc6 100644
--- a/models/fixtures/user.yml
+++ b/models/fixtures/user.yml
@@ -66,7 +66,7 @@
   num_followers: 2
   num_following: 1
   num_stars: 2
-  num_repos: 11
+  num_repos: 12
   num_teams: 0
   num_members: 0
   visibility: 0
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/HEAD b/tests/gitea-repositories-meta/user2/readme-test.git/HEAD
new file mode 100644
index 000000000000..cb089cd89a7d
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/HEAD
@@ -0,0 +1 @@
+ref: refs/heads/master
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/config b/tests/gitea-repositories-meta/user2/readme-test.git/config
new file mode 100644
index 000000000000..07d359d07cf1
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/config
@@ -0,0 +1,4 @@
+[core]
+	repositoryformatversion = 0
+	filemode = true
+	bare = true
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/info/exclude b/tests/gitea-repositories-meta/user2/readme-test.git/info/exclude
new file mode 100644
index 000000000000..a5196d1be8fb
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/info/exclude
@@ -0,0 +1,6 @@
+# git ls-files --others --exclude-from=.git/info/exclude
+# Lines that start with '#' are comments.
+# For a project mostly in C, the following would be a good set of
+# exclude patterns (uncomment them if you want to use them):
+# *.[oa]
+# *~
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/info/refs b/tests/gitea-repositories-meta/user2/readme-test.git/info/refs
new file mode 100644
index 000000000000..fd5f1b98ebd5
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/info/refs
@@ -0,0 +1,21 @@
+ea9ef877d1d88af76682d8798418081264f10cfc	refs/heads/fallbacks
+0d4c14db927c9ffba01fa7e126cc748b5c02c01e	refs/heads/fallbacks2
+c66d5b07c2063d3268707f22226c708b589574ef	refs/heads/fallbacks3
+89f8426e9eb5eff35c09b3565836c8f8e15d0ce9	refs/heads/fallbacks4
+b0e902496eae435ad03c92a5d479f916ef2d4893	refs/heads/fallbacks5
+84a5500b5cc040b11daf53fc42c542a99589dc76	refs/heads/fallbacks6
+cf406a96e416d7de5c4c1bbfffdd672300c822bf	refs/heads/fallbacks7
+0d6ac644b969e9199915a492da9dba08c179fd23	refs/heads/fallbacks8
+5038febc0c57215beb3748d7ae4091a25a4acc93	refs/heads/fallbacks9
+9134e1f178ca4cccf1a197142646f2d7627e8cd5	refs/heads/i18n
+744d2441e55bc0010d6b340d303f0106a627ad29	refs/heads/master
+3c492566170b057e962c025515ab38bbd7444077	refs/heads/plain
+3882d6373a0882a6739b3cd9b24d21c630621234	refs/heads/sp-ace
+bf5ed898252eaa50dcc01108ed4417c3ea98a294	refs/heads/special-subdir-.gitea
+c03543573ab088ce1cf7090a387d2be621426234	refs/heads/special-subdir-.github
+e75957ad9b7e6ed16dda183529ec283db0bbc5fe	refs/heads/special-subdir-docs
+46f5d5ab33d701642e08c713fab42af89fdd4fea	refs/heads/special-subdir-nested
+9c0f872256b839c2b97ec22fd348d87b14045513	refs/heads/subdir
+d7a854fff61e45b98234d7aa79ecbcb1619cd3dd	refs/heads/symlink
+30b9c0ed4b1039dbd99f3fb537b84ca507e0549d	refs/heads/symlink-loop
+41489b7be5c2244d2b7b524dcb31caf3bd1f9ccc	refs/heads/txt
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/12/11481f7314efbfe4e44703170d96c8fac8172b b/tests/gitea-repositories-meta/user2/readme-test.git/objects/12/11481f7314efbfe4e44703170d96c8fac8172b
new file mode 100644
index 0000000000000000000000000000000000000000..b9009e32444a4be9dd189dc611880aef4f0d8b02
GIT binary patch
literal 169
zcmV;a09OBa0iDh{4#F@Hg<)!+VlF^5cDzMGh>nhm3wW6!5zeCE6x^N&aRSP}_?}*x
z$8o5jv^vz42%^@>Q$&n8FdC&YSxKgoOk~(vZzQpfMl4~ase)tIDRS6J-Eu@mC38@%
z+YM{XGNz=w<}AWi`+0@ike+becG}Ylr)kgT@yp9Hm-kpplfoIKb<P;sY7a*=h$4NT
X)?NL-A@205z@d~F(o=i@i<M4nfA~|$

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/17/2343566bf11fc71ba4acf8d2ea70d12bc1d037 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/17/2343566bf11fc71ba4acf8d2ea70d12bc1d037
new file mode 100644
index 0000000000000000000000000000000000000000..c7a4deca9293a563181b8dadbe42a5f669681739
GIT binary patch
literal 214
zcmV;{04e`?0hNxiZp0uEL{s}Kwo8>07%!ZqC`y+u{{YMSK(^sz);i_ygQEL^6jO{e
zZ)T|OdloQidXa+}u3^&C%r0_dLlI5zT9cjVdJPI4;ld-0N)2~^a1pQ=J^Bfq!Z3~o
z?QE2G+S%wGd&01gUFN6;e@dzcd}mtW>+ERa1Kvxwm)p~R-s|?W%XT6E0opo;IHEQ1
zrmzpv-&5(-e><$1pB+PcWT6C7fy-^nEkR)NXJg0^Yk3t|OMO7<>Y3fI4E-nwH)(L3
Q1#$sOxp3p*7x&_1XWgo56#xJL

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/1a/48cae3f18ccd9c929e6608f67087dbaac3cf9e b/tests/gitea-repositories-meta/user2/readme-test.git/objects/1a/48cae3f18ccd9c929e6608f67087dbaac3cf9e
new file mode 100644
index 0000000000000000000000000000000000000000..d8522ae6d3319a48188c99be269b1622f89e7030
GIT binary patch
literal 167
zcmV;Y09gNc0iBLJ4#GeT1*!KGz5vMHFGvW{(NS>$uj3^V`6(;~w<kiJfO4caqbJia
zbQP?3o4TliW8N39sKmjAg5{vd>QSQ#Wl?XVw^_WIdC{=~CF{HkG3G*4BvEG1Qud8i
zPT0`8r3PIx{HpD=z_pVHTwbf%>H^1c#ohgf=XvViL+y9MC!m;82sTlGEe1p*-=}r8
V{%@F@J}VUN`^@rqnhyv1PZ>ILQ$7Fy

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/1e/1e08102cf1b1fc01c069c88ee75445974363ab b/tests/gitea-repositories-meta/user2/readme-test.git/objects/1e/1e08102cf1b1fc01c069c88ee75445974363ab
new file mode 100644
index 0000000000000000000000000000000000000000..d4152e535edee4dede53f2b78c5890f6010635bb
GIT binary patch
literal 83
zcmV-Z0IdIb0V^p=O;s>AWH2-^Ff%bx2y%6F@pWa`@t!|<rStv(_qzdwi6*BHu4Y%~
pFf=j%0;meT+!Th=oPv`D?l;zLlv#XS?(Y2UIq%=i0RRG$9p!&{B{Bd2

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/21/470f9b3e8ff24e0fa083d2dbc447f4c3401355 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/21/470f9b3e8ff24e0fa083d2dbc447f4c3401355
new file mode 100644
index 000000000000..8aabb78c6838
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/objects/21/470f9b3e8ff24e0fa083d2dbc447f4c3401355
@@ -0,0 +1,2 @@
+x
��;�0@�s
+_�*N��H��1q
�u(�?�t��T�0��==���Q��+�*4��d��h�S�η.z���͙Z3�c
t��0'�As�5h�zL�=D��B�\cx-ݴ��!O������q�����<�����	0�T�装���5�=-�����U s�7,O�
#�M�
\ No newline at end of file
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/23/65bfe0c5714e2e3f2d53bb302b10d8d5b4fc7d b/tests/gitea-repositories-meta/user2/readme-test.git/objects/23/65bfe0c5714e2e3f2d53bb302b10d8d5b4fc7d
new file mode 100644
index 0000000000000000000000000000000000000000..715977676d5041e2a56504189cb38b4d3b524cfb
GIT binary patch
literal 175
zcmV;g08syU0iBLJ4#F@HM5%p>y#UeLtnFArh>nhm3v8S<iO5fhDRO%(#0lu;Y4k=D
z=W*;a7>kFzih!6D0#a;)ZwSdIk(g4FWSNYUKu$Lz9@WCDOc?~pa~)axw&jwzZiIq1
zuJ+oU1dS;ror2<b?&cNleSE>~UDQriI8Ozu=MS&TJnUm0s>m16&U;JVSO-V6h$?=c
d=3@Q7p&qhjh#mKnw6N{t&`+;TeE>rzQOAB&RpI~u

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/38/9d08c6a71d024a91f14089007cd789cd977ca6 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/38/9d08c6a71d024a91f14089007cd789cd977ca6
new file mode 100644
index 0000000000000000000000000000000000000000..c5929ae89288aa30a1a891326bc8bb9f340640f8
GIT binary patch
literal 48
zcmV-00MGw;0V^p=O;s>9W-u`T0tLPF%#zeZ2HRsE+r`do2(@WGwr9=%yg1I;B`E+G
GZx5ikFcZ80

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/3a/a8f4e0e1a535f0f9e0ae40e6ec1bce42642bc4 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/3a/a8f4e0e1a535f0f9e0ae40e6ec1bce42642bc4
new file mode 100644
index 0000000000000000000000000000000000000000..106393d722517fe5c97ef75e78200b79654ea7ab
GIT binary patch
literal 140
zcmV;70CWF%0V^p=O;s>7Hf1m|00ITQ^vsgfL<ZYq9^1vvYzVb!KDKAg|GYTP*(E84
z1_ov(CJI5WjxN5g441E2x84pr@IRN~v|{A0KVp7v4r(YW^m0=e&Rwp&wwytJxyMf)
u-uwA856+yPrwXwrB|o{CVL=ApB%AZ+6fKVJFG^nY{Okp@nMwfU={Lu<i9rDX

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/3b/23d7f1a9cb904cb46f5f2272bfa5ed5f871fb9 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/3b/23d7f1a9cb904cb46f5f2272bfa5ed5f871fb9
new file mode 100644
index 000000000000..c36705ba28dd
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/objects/3b/23d7f1a9cb904cb46f5f2272bfa5ed5f871fb9
@@ -0,0 +1 @@
+x
��M� �aל��0&Ƹs��ئ�'�.���x������4]���.)�D��Q�|@b6Xbd��}�2+b�%�T� �I>g�	2�7Q���. (c�����"o��n�M�<�[6�_^橼�Z��T�U�� ���n��
qO�*3��{���N\
\ No newline at end of file
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/50/6ff7310f420e878595b4bc8f11688e3f0ae14e b/tests/gitea-repositories-meta/user2/readme-test.git/objects/50/6ff7310f420e878595b4bc8f11688e3f0ae14e
new file mode 100644
index 0000000000000000000000000000000000000000..a7f4501ea2e8b7d2c984dcf2f926497f5b9597b3
GIT binary patch
literal 166
zcmV;X09pTd0iBLH4#F@H0IB_o{Q%M0@p{)1LUeRge84!%A#y1=1;58aynu3w8BLys
z;ZeYOw<(J%By>uA70(!0I5Gw7qT1ldv)C*w>PWMh)1qSml2$Lwlqm+OAn3UD(J{rY
zjVQJY)S-(et>r!~aC+n?9M`Jeb%EVjvAO;5Fi-t^D1DRD9&D&pvcw*?NQfqXPfNA_
UZ<w>b3S3j)Us8UW4?((1W7)${?*IS*

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/58/3eb775c596858380273492759d39081d65d029 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/58/3eb775c596858380273492759d39081d65d029
new file mode 100644
index 0000000000000000000000000000000000000000..a2dadacf8ac5c581336a8fec56846cc07f12f8ac
GIT binary patch
literal 169
zcmV;a09OBa0iBL9Zo@DP06Xgy{6Gv+kwgh7if-95^#c^eG(qe*aOEMtk5S|W8E?45
z={!xB4nFvgzL>#2mxfuBFg5f+3Y{omE{Lp+bJ13qRg$~QVz&+nO%i1>Zo#x#Q7XyD
zLds33Vyu-UYId^r^Sr?EqE|Sqn|ihdK5rWizc2j0&*Nk2<Dl{dl$c|r;1ldHB0Bv)
X?VI&}!~NJ_hm(wB6}`GA1W--qeJ4@w

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/60/ea618ae7d4ecbe9c1962591c7da1b05bb1a5c8 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/60/ea618ae7d4ecbe9c1962591c7da1b05bb1a5c8
new file mode 100644
index 000000000000..4367c41e2858
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/objects/60/ea618ae7d4ecbe9c1962591c7da1b05bb1a5c8
@@ -0,0 +1,3 @@
+x
��;�0@�s
+_�*N뤕bcc���Њ�Tҁ�S!N�����d�>���!���քLu�Ul�#q����l�Q�,�ꔡ��lCBn$6��X�Dɹ�bbҖR0���y�[/O�n���
+�i�����2�1��Ї@�e�p�d���iޭ�殯��!�<���N�
\ No newline at end of file
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/6a/b05db4c52530726c1856eb558228e9d1949e7f b/tests/gitea-repositories-meta/user2/readme-test.git/objects/6a/b05db4c52530726c1856eb558228e9d1949e7f
new file mode 100644
index 0000000000000000000000000000000000000000..3e4c8247d906f07f3985a58a76b08000a1d661f2
GIT binary patch
literal 169
zcmV;a09OBa0V^p=O;s>7H)Sv}00ITQ^vsgfL<ZYq9^1vvYzVb!KDKAg|GYTP*(E84
z1_ov(CJI5WjxN5g441E2x84pr@IRN~v|{A0KVp7v4r(YW^iuQma#I*MKHl3FemK04
zf9a#bto-)V?OCrAQPlwzox5ClZ8?Mda*v-py!Z2G9-KKnPZi>xl>Fpkh6NdXlWfkP
XQ?xj?zbJXp^RpMsW-0*yojgaTO}bCn

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/71/60a063b5544b5a78131b94f47bfd200046eda2 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/71/60a063b5544b5a78131b94f47bfd200046eda2
new file mode 100644
index 0000000000000000000000000000000000000000..477d5b1f1f4312265b57e9f6403dc133ddd83c81
GIT binary patch
literal 167
zcmV;Y09gNc0iBLJ4#F@H1*v_Cy#UcVvDZdIh>nhm3)tov5Y9)zDY!im;slga%xKcs
z_m4`gX*YES$XOR9!)OuX!4Zru$`1C59MBmbSfh<eO<~4R$+G0^I?dU%4DY<%*=S<&
zS!?kgUFHC7pu$q`<4osAdeUiG)jMX|4=XmeA0DT%y!%?36b_`tIcv4B(3UN;O5fAE
VTK_lH1+PjuloCUFst-`>P8}43Q9A$t

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/75/6c70c97047d8aeb11ca3c71edd9fb76cefee9c b/tests/gitea-repositories-meta/user2/readme-test.git/objects/75/6c70c97047d8aeb11ca3c71edd9fb76cefee9c
new file mode 100644
index 0000000000000000000000000000000000000000..3ef17969867f6a1e4c2138ae8d469601e3c1fb5f
GIT binary patch
literal 28
kcmb<m^geacKghr&^}^-L=TDx$=zr?`X|_a$pc3|K0L<|X(f|Me

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/7f/2b9f991d99362eb827b67f4ae2f5fbc5fa2271 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/7f/2b9f991d99362eb827b67f4ae2f5fbc5fa2271
new file mode 100644
index 0000000000000000000000000000000000000000..4e39c0306eaa5ba7dbcc8926ab9cf76da6c05cea
GIT binary patch
literal 211
zcmV;^04)D_0iBL9YQ!)QMN|6}(`}VSmOYXUOGvj}?jViED`8t&tT9V&9}#kb6u<cJ
z-{(=;_arc=@l6h9FwQFsek9a5D60+i6B_o2lhzZ@p`XW@?b1En!CAmyaOg&~3cc0?
znt4#Y?X3yUvLo~hnPm>DbEm{|z*nLb?q@?IA8^a9ULSw;^I5j<UA8N^59p1x*d)vV
z?+TUb=+{&l_5Y8qzLHP`DZu%$r5eFAxwA4P2qj+x)?8i?TiRxKD?<|n;VKo5GegQi
NF=ejY{Qw1TV~XWYWat0@

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/7f/792e709143fb0f021da2371e5f40d1bcc284fd b/tests/gitea-repositories-meta/user2/readme-test.git/objects/7f/792e709143fb0f021da2371e5f40d1bcc284fd
new file mode 100644
index 0000000000000000000000000000000000000000..90fae23886ca83c4be056c5dd3c8125047bcf0b9
GIT binary patch
literal 166
zcmV;X09pTd0iBLH4#F@H0IB_o{Q%MWSer-)(a}-yf%Rrh5IImV1-~akynu3w8I8>2
zc&p%o+tfuBJoByuMYT+x3YJ!pHK0Znn?-|*!DR{N!HZ56B6Un0C?RF%JjK?dO*X}j
zld@1Q5=+~m;aBbF1<p6Q!|AoEy)LkyR&1_6JU-^(J=UQSK7frW5n1mDwn&IZzNdAy
U{%@FzJ}VR+hRkv|AA!wIRa@CkBme*a

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/82/817856dadc7f6b944633e1b77d5b6e302dde06 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/82/817856dadc7f6b944633e1b77d5b6e302dde06
new file mode 100644
index 0000000000000000000000000000000000000000..0428af472a486f6b2689fd113291540555a8374f
GIT binary patch
literal 51
zcmb<m)YkO!4K*-JG%ztRFg6U-@bdLJ>6`jPaYEJa*lGXHNtRod<n7tJvaYTyUY)`C
HlVA=2#pM&k

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/8b/4149e7dede3cd53ba11c64c88b057c5fe2c200 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/8b/4149e7dede3cd53ba11c64c88b057c5fe2c200
new file mode 100644
index 0000000000000000000000000000000000000000..64542d37589eb57bf563c0cbe7d8c305c26c8ecb
GIT binary patch
literal 169
zcmV;a09OBa0V^p=O;s>7H)Sv}00ITQ^vsgfL<ZYq9^1vvYzVb!KDKAg|GYTP*(E84
z1_ov(CJI5WjxN5g441E2x84pr@IRN~v|{A0KVp7v4r(YW^iuQma#I*K?z)n5cxkwB
zUXi5E4&_&;XDDi>qpAZcI(ND9+HwZ@<sLtIc<<-WJUDZDo+`vWDf!983=1;&CfS@n
Xr)Y6(e^K(H=VvdN%~S#aJ3dB3^BhgC

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/93/54813d81053c14afe878a9f056b937ec42bb48 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/93/54813d81053c14afe878a9f056b937ec42bb48
new file mode 100644
index 0000000000000000000000000000000000000000..8542b45c75ff86619f87b916e8ee3df903bd9e8e
GIT binary patch
literal 28
kcmb<m^geacKghr&$>WUXx$Eao>!0_~^<rgk+0XV90Iqrq{{R30

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/9c/72c10e55e7d6ea21f591aa424e2625e8ad8094 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/9c/72c10e55e7d6ea21f591aa424e2625e8ad8094
new file mode 100644
index 0000000000000000000000000000000000000000..b53d42aee9e633a49905c0bd76fb95bf9031145d
GIT binary patch
literal 136
zcmV;30C)d*0V^p=O;s>7Hf1m|00ITQ^vsgfL<X4)hIe;7JfhoTwBDaX@@Tka?4NQ&
zBe04fS4S6LSB9%5KSiea*i5m?zMWp%HtVRT$)sKs6?(ZT43k3|Z5vr_MApBkSotAr
qr}-PF-5wBoQu33F8RX<R1av-b{KI%4^F-hC5ZCF>$*TcJIW-;CK0dJk

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/a3/cd04bb110e17591ac04e156c7df2c2f5c96fa6 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/a3/cd04bb110e17591ac04e156c7df2c2f5c96fa6
new file mode 100644
index 0000000000000000000000000000000000000000..6d9bc2a7664fe2968b95869b01587b4eaa61a4fe
GIT binary patch
literal 82
zcmV-Y0ImOc0V^p=O;s?nWH2-`00M;|S4S6LSH0X6h6P%IvU?Y)CvG|R|7KUck;K%O
or+%1#)#R6Cq!uv*co<)>wEEN6zbbUcs*pz-KP}|_02Heo?n7)OQvd(}

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/b0/e851a5619e2d6cee1da25a15ab67305f0861ec b/tests/gitea-repositories-meta/user2/readme-test.git/objects/b0/e851a5619e2d6cee1da25a15ab67305f0861ec
new file mode 100644
index 0000000000000000000000000000000000000000..2f88dbd361ae06a6ca6202ea1441b965b36a145a
GIT binary patch
literal 76
zcmV-S0JHyi0V^p=O;s>6VK6ZO0tLPF%#zeZ2HRsE+r`do2(@WGwr9=%yg1I;B`FXE
iDf!9848easzi??;<(R6yt3=9gw&*v>c|QTPTpYU4?IQ>P

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/b4/4c8eb00bdaf0522de61e591fee5f66851ef4b5 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/b4/4c8eb00bdaf0522de61e591fee5f66851ef4b5
new file mode 100644
index 0000000000000000000000000000000000000000..55bb8491afef625eeeb1af14dd0b3cd87974c3f3
GIT binary patch
literal 112
zcmV-$0FVE80V^p=O;xb8U@$QN0tLPF%#zeZ2HRsE+r`do2(@WGwr9=%yg1I;B`Jmm
z24*HE3PG-pF21e|m#<m3-VQtPKbPUOV&twrVt#H8Y7iq*@{@}h7G&^EvN?ZF(c;+t
SqU1%-&t5Q_sRRHQqbY&h9y1C6

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/b8/eaa80ad86072e1f23d2638842154ce9aceff8d b/tests/gitea-repositories-meta/user2/readme-test.git/objects/b8/eaa80ad86072e1f23d2638842154ce9aceff8d
new file mode 100644
index 0000000000000000000000000000000000000000..84ab5684a0093099072185262a4a43517cb15030
GIT binary patch
literal 77
zcmV-T0J8sh0V^p=O;s>6VK6ZO0tLPF%#zeZ2HRsE+r`do2(@WGwr9=%yg1I;B`FXE
jDf!983=1;&CfS@nr)Y6(e^K(H=VvdN%~S#at56)Q)g~dT

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/d5/34f914944c3c943a6bdb677d869ac54934928d b/tests/gitea-repositories-meta/user2/readme-test.git/objects/d5/34f914944c3c943a6bdb677d869ac54934928d
new file mode 100644
index 0000000000000000000000000000000000000000..7bb434442f72d254b112e2740ebf900a8bcd1e73
GIT binary patch
literal 31
ncmb<m^geacKghr&Rl`H)<OThc*Uz8UKY8MeH#<YrWe#ot*oh5(

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/e2/f9904cd97b4045feecfffef5a426e9461bee70 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/e2/f9904cd97b4045feecfffef5a426e9461bee70
new file mode 100644
index 0000000000000000000000000000000000000000..9654f877b8c59f52226850f204f4323b224e85e2
GIT binary patch
literal 117
zcmV-*0E+*30V^p=O;s>7Fk>(@G5`XFAXi5hUst`{6b8%sw0Rmmf%9Jnzj)s0?^SW}
zGS5X5u$toh+*F3eXIXX&@`*=E9q<#)sr_{5>&g6OP%}!35_1dkb29T%8JyT;7#ALA
Xn11m|_<YT!Yrk;qeKQpRC{`>_kh3)c

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/e3/a6fd8fe49e323ee10017f72b777a53fbd8076f b/tests/gitea-repositories-meta/user2/readme-test.git/objects/e3/a6fd8fe49e323ee10017f72b777a53fbd8076f
new file mode 100644
index 000000000000..2307ba82dca7
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/objects/e3/a6fd8fe49e323ee10017f72b777a53fbd8076f
@@ -0,0 +1,3 @@
+x
��M
+1�a�=E.��m�� �Νwh����#�"��A<��g�~|eǾ�#�jU:����$%�9o��{�9F	�գQdsOU��H��rA�(�=�x��E���$nkҳ]�
+�����\ҫV�M7��yx�mؔ��1�-�1 ��}ږ��
3�/�%=�f>&L�
\ No newline at end of file
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/e7/bf02fcfa7a86f7fe9e8158b55d58ddf9d877ec b/tests/gitea-repositories-meta/user2/readme-test.git/objects/e7/bf02fcfa7a86f7fe9e8158b55d58ddf9d877ec
new file mode 100644
index 0000000000000000000000000000000000000000..9f898ef87387dc17cf15c794fd48d43921ddccbc
GIT binary patch
literal 171
zcmV;c095~Y0hNw94#F@H0IB_o{Q!~e_>>T$qod*j>&==(ITf6O-xHyHfO3i%4b9`&
z70^bX%E}DM7z&)EObupfwQkrcwozqfo1F_*aW=_{1y`O5C^UhP>#PD%6DjJ*&dHFS
zm%%p)k!s431#YFCS9o;P!+qP;mRGn;J65j)Z_7M<#xhidS5VG-YgKImoTZgg(C@VD
Z)}IaSwLco-$?pOghan;L;tL^5Pf1exQLg|1

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/ea/57c91ddb8b4ac705b5ac4c34c7a48f2d0fc180 b/tests/gitea-repositories-meta/user2/readme-test.git/objects/ea/57c91ddb8b4ac705b5ac4c34c7a48f2d0fc180
new file mode 100644
index 0000000000000000000000000000000000000000..d1eff52868d457865f396c829e7060972f4f3ac8
GIT binary patch
literal 77
zcmV-T0J8sh0V^p=O;s>6VK6ZO0tLPF%#zeZ2HRsE+r`do2(@WGwr9=%yg1I;B`FXE
jDf!9841Xgw?YVe?)2-mtT+c<4vwUKHHtqxfy8Rtw@<$_V

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/fe/495ea336f079ef2bed68648d0ba9a37cdbd4aa b/tests/gitea-repositories-meta/user2/readme-test.git/objects/fe/495ea336f079ef2bed68648d0ba9a37cdbd4aa
new file mode 100644
index 0000000000000000000000000000000000000000..48c0b5a4d621e0a9c34ca50ef4b53faef90a273a
GIT binary patch
literal 197
zcmV;$06PD80iBLJPQ@?~0I7Y7y#P<P@n<a|L`O%%3HI4*62<w*-W2clM2HhmPBEj&
z`?}5o7UPq2W=J{OY&3h%u>>Y-s!xW<S;sb5&qxJza_XSYn*dYdiZK>b5UIux&=!md
zok5Mp23L*FH7h!0+B<yCd4Z4fQYY^4x?Ont{=@fUZ;w^lEz=vA5To}m-g<b}UTc+q
zPvx@y-%wvHa2{~)`@$QH$J*v?86Z0d4}nUp-RU~)XX63$1~QRArork53iw_DU9Mm~

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/info/commit-graph b/tests/gitea-repositories-meta/user2/readme-test.git/objects/info/commit-graph
new file mode 100644
index 0000000000000000000000000000000000000000..9bb0976fdc30e99f66fae5f74525635980f9d928
GIT binary patch
literal 2612
zcmZ>E5Aa}QWMT04ba7*V02d(J2f}1=advSGfw0*u+~I7_Jy5kkic0~(CW*xaR80zI
z2CAnOW&xUw53>U0kue*PkB-@aV(6FyC`JtC1gfJp<^q~YF6IX6r3CW;^`m26pcp>P
z2b3ok^8?jV6AJ*%BNqz-^$Ov@!a#9CSOlmB9~K456T)IZHMp=iP!5JAfNV;!B+v{L
z%<Cg^ds5B(-wWiIKU6zY(jCKeK#n)-n9I)0my$C@mrS}fcNfRO%D>8zK1&YU-HHxe
zmCLN&ILp~k?&R0C20IVD^%k(aeRID3R`VS`OW7ZU%(ZB`W^TpNw5)ix&CN}|ipLC+
zgiLHaRnx?|S?i|hFolY)w%C2$#i88MV|Mk^Ln^-7)j__e4NraED?jIq+t;hBjjuDN
z=y4nu{<THx$NanguL3Oo?coVmjDBtIaebY`#6?kFXC|lKigGQ8Rx-^r5Esu~{_5!d
zV?QsH_^LQQjXuE0n{C2tV9&_5Ont3p%hCYum;(+QW!DG)aXRX>a%$(Dvd$k)dGofu
z{~W`)IV{5L#E*xuJTE7jJp5R3%ID0-h0{gU+&*1Ts_VHrhreAZY=`Bcopp!wFMHgm
z7GVh$-tdyiGjE-9)CHSKORrS^6nn4hF?oO7jTx$Xs{-yE5af94B7XSQj73upm^z1B
zZRj{B^PQ8+qE`EvqEnK|vD|3(Lu|H283px9N;w7H5mQUvpLfWb_C)OZy%-<q{r~T#
zD>Ix>+JAjT$p3G0t~;AduCJ<mvu9)CoXd9~xUV=Res}qb75hAeG76I)DD^C{d>$FT
zc6MFf#oSvGrkZawY&Yya`tQ}eALSQsbbU{2x>4C8!6B6Lk>}5E=X1$zK@pyxS4EkZ
zZ1^<&4@-&iF^6LpBYmgao?0X(%6VfV^TV$@Qb6gf07w9VK=R+5r3>`Jf4H+%RF)>(
ze3%qcA=BQc`UWT`3{|6%{5LnLeuja=E0Kx!N*@H3>B=0svPQS{B2bMOR1Ht^-{_SO
z|2}>0xO{VcN8^Xi``aG4$mCzP1FDfg*cGEYL*S{!*Mrg5-p&`wUjD!Ri}d8@u0S<h
zP&FLMe`Eh0xiwjNQGfqK&iRucc3zHH^T#wc6jhCniD>TgV~gZxzL{V>wLbF3s>=s+
zPiUj55n*(gcSdJv+={1fcv-49yg4VW)G{Bah6&-GMAg#j{3l{5ecTToZ<`nUew|4d
z<0DX=$p}@W1N3_#18?qy_WAQJ<TGEtk$BTsi!1Mv2C7}DkCY@6%Zgqtb$c}Bi%wnF
zwbfohwHY8Ypyse7|23I#(lz?(o!!khydGtht()aM_3eir$AC)sp=uO>cA4o%&GHpn
zyIWbSr!{U{z;+GSyUj^JH9}A|62SP{^X#|TiToP@*~J^H4Ug1MdH&7eQ9i1BykEvl
zZ;+RCHd*Y@wc3A$>xwU%ZIAv%RTF4ZzQj|VbIOFK^Nh>xR7^7ca_-9fM?f_^P`hM+
z?okO!7VD0Aw%4<F=H~ScAHv?3nr1EnszHkPpzZ6Fzsxz*w373<#Az!*p3hhAUcK%G
zR3iX22bji!`L{dr*lX;zJ*RVGN#)YxUS-?XaJU22z`{oa=&ub?_W!uqSPzwc-1|DA
zne{3EvSpo~KqcHzb5wxtaXD`F`!!EP#>H)$pS$WO&#KDIzrPl!1}Tjt_=wDK`ufVL
zbfQCZz^$WUu2v7OZYu?<K}usGl1s15<j&l1yW^Mp<kHPC!e)|pGoGTV37RikK1r_d
z%>A9sQ~94%E7h)ZW#<L8w>Y8h0jBw!$ramKP6<~!DQfQdH_4Y{>oIPwOMifBL=kGj
eWq^E|gV$BAMVrhm)^9AH!JzuP<h^G|_fG&<$XM6_

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/info/packs b/tests/gitea-repositories-meta/user2/readme-test.git/objects/info/packs
new file mode 100644
index 000000000000..aad10862f145
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/objects/info/packs
@@ -0,0 +1,2 @@
+P pack-8933bd634b76f8154310cccb52537a0195e43166.pack
+
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.bitmap b/tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.bitmap
new file mode 100644
index 0000000000000000000000000000000000000000..db39955a2535726c21da5f59d413fb4da9c2eb12
GIT binary patch
literal 1642
zcmZ{jO=uHA6vy9~#19k<X#FTEK>|G}Vl9XW+O1w%QfsjW(UKwxq6eWDbLb%*Otnc%
zQR~KHPdOB!rFT(K*IPk7h#m?emH2T`M7^~ljqm?9yGgdwfqftU`R$vxGqWc;&YmJg
z5hB`|Z+Uh(kzQ;#8GZfgOwWKSd}+P{ou4(8haHhBm&+0mU1J~OCycx|fBi!m0jcEU
zU%hW6B)ZDpXQtBQ@tiv`(;l5VRAJy$O^h%mxn}FXO@mlE!m9(ul#F#^HQPFJi6YAZ
z@|>BRrpUhldDuuUGr1Tb+l}NmCVvOWBPMeB5tE++WRHpb3(^UYYfa=+kUBtKGLRV|
zd7^GV_Zi56o5g84<~nlsO0rdRwJ6S*$rvZ@I4@4K_0P!RM1`WTq?{Mto!ZKRd$>Lc
zK~YRBk;7gFUJa0%1r@SjNiFDB4lp)~)olHmxHKvXsjg4lcw<e-=+m#+3q>xWUsJQ7
z@UMW>dKV%d-C{LcpOn>QUQwocle<<ScR*LvUnMWDLdu@-7gfpQD@iCS#)kJwSIO;A
zB=!4*pyc;gn`&w{LN|~WWOcBHJPO4?YRJl|ArC+?kRsQ8ktp_fH;u)^?}ieo`N`x*
zEh3xA!Jl(p44-|VYg37H{I_Q(M%qSa+@r}(q-o4@G4R6+Zd`aDxAQ%p{dexZoxOp?
z-g4RzZ=ud;7%}?|t{-W$?|dzCzP^$l8|vz7LhOy)wm+SSQ<b)d5`FuTGbbMXVc2$j
z0N>|k?zc@QOZR2Y!kYOd^oxFS4Mh**I;r_W=R*eq=2NAYGG|-jj0Ssv;q{a%WiEK2
uw}<w<?>0273(tKw<!)&?2hq`s#ro*xx#s>B>v_j;V$YM?vyFwlKmG$ksnc)(

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.idx b/tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.idx
new file mode 100644
index 0000000000000000000000000000000000000000..561e0f2e9d241a658eca432443f071acb88482ce
GIT binary patch
literal 4012
zcmb7{c{J7g*T)YTjw!^!$rP@cB1497%(Fy>GGq=JawAh_U9&PK3in(yAqtU9nTN<6
zGF&1<5i;}J*5X-~)$@DS^T%uL;q&?Iy}xIzv(|nexL&hFAP~3!&XGOzPjUugJOCdc
zI0X{o-$4X<Vu0inq!1rN2L9RKKn}V8FBI^G@;6XHj`|1`SQ>!#2s*H6;QR>~z-K%K
z6U3)shTJh1z(0ib2sW^PoPZttlW;)H32^-e9?0>YfDioB@I&sHi{SrnT!J%!BLu+;
z{RUyk9U^jsDA;4JfPWG(h{b<{1mup91pgQ*@J}KQ@kwMLJ_ZB6{BKZ%+)0!mK1Lb*
zLsX7X1*>)nb%+nq1hoDO+HiLL6gm(eas$viLLcmD3?OHCiklFh<QBw6{|Cl!ZgK)s
z@DI5Sm;)9^9R6Q_hZW@i8#Zu$j4k+w*!>S=j@=<?sol<J28Yatg?NaaK5^k-QakuE
zO><@z$?&|37rW?LgVP9B(_3oii9`3Vzp;~hZ=Ip~884LZvWzR?Wj@<7vE-0qgEMUo
z*so2<l`mxm4F)dcnNu$I&LQm~_6z1j(ayC-dAh7Jos^{iHsh9=;zwb~G^j^nAExc3
zGiOh7bht(s<JK~f**7V?wflyChRTTj{Gt+B=efs5Rl;8qMHefr_=#3A2{pg$V_H5+
zog}wDFXtA63DW-DsIMq7(O>3<a-40#GCx~<BAMWKb11L3&as6Tt&!0n{n_Yxp5qzL
zfMj_=rq=bB4Bdib6_X$MgD)3dL!uiE#7%bH8Qo)<Tsp?z1|^VBd$al!DiV@uu%gW$
z{5hYgG!?(b=NmqducqT;d+AoPCe6z#HlD~wre)gYT#92s76NZ;m((f5M~2g6-dw5B
z$RwP&@j?XMSQ_)o-`CAQM8sv?jCRn9Oh?38e#=-kh}uiQPsrn&9E%}SGr6drNwau!
z*8sh`y>WddZtHn%!G~gj16L%Ffm!!ct`3)IvNQ=;oD&xJvq|NOyq>n8J2x9}P0gdH
zm$XNMIA`o0?G^ptC$8)Ys-okyW?@2CRoQK5N$`CW`Ed16`C?Ur3K(~(CY5rUj$*y5
zK~3)p4xCJhQe3U1xh}Aip(eb9H1HBd5v!^iW_41sDk<JG^?zvcdh2Mm3%0FRGe7T;
z)y&?xro5DaKQ(zTGG!pI)y8c{j(`E@?`Fi)o@s+L?#!2K#MO%lO6&dkLW4L~7m>|W
z+pl>x)5fmNt82Q)284Ew1}Oi$796>E`?l7@hgt`VdpiiPpTXD?mgf5ecjK>$<7kWR
zzauqZF<Q8yGFXU-!QN8qh|^XP>K2#SjeeY`SCMyPifc=ZSxd)~Cc^k@wQAI}(jxz5
z{U2^3c39or)j5UWJXverO4svRDX3rQ)Gd8JWFcZXXT&A^{df-|TU*#*rT&)8J_!MS
zz1vFlf>{v$40%>on5vPLXH{x63p=yo?aAKEi&-1I``gA({h877!vA2x^RMM7=B$-U
zHSU@7v6J9seQhY;+AVXtO%nd8lWNp_HD1z<#pF%nXvR1Zv-EeN8+o=CXhutNFD$dD
zBF4q@Nyc9^E9c^@Ki^WkXT&OECqPT<m_6TE)3nuXuhcNtIv_2r{)LiD?Q37N1c!5#
zV+4Kc#QhDb+UfY$iOeMQX5j++u9|<y&KT9=klhs~6Oh3n$l`p-?dI(~O=A^JGVyO&
zs>zQ+;c%R(ckUUgoJ8?Y0zcwpje5k2tabIJO?e<A^2(;NS)<gv<#$YjCbw5DXgtdC
z+NeC`Sh(Nq$7&+qG?5U0+V!z^@EqbJZ~nzowIX6h@lxr9@maql0n9vg%on!_od^63
z^?e2Wk9q=RQ3q<doJzLkkF1@y7?Z-19dv^;wMmR?F|Qblba&+%<#H3kMjwPqYS9ck
zr>oKz8dTYKyI#h9qB|G1Dd&{>=EtfrQK`P6Xv^lL3F)_JlRcrt!JpXe;W-5c<P!f{
zxRO$g@Z^d|n?}dV-%qJIlzt9c_(t}}U%H5;xzBoENO6w4#?hBw^^@RwyjCavo`HLw
zZd_o0QpLt+;ju~kB#Ifa^*W=0rL=Q*vkyYn=;LM;pOc5M>Q{)@zxA!Z)T=V&O^v5V
zm1cCIyJ$t3AKPIru;_$c#HZiqPUpGKSdHa0f8BI29PW3SF5z3-X8J{gO=SWPPdBsS
zNsAjE3?b3%i|Mv!W3PVfVi9Yq`O^|R+u1Gpj5QOfaX^5eDRs*ITJ*8_W8_jnjecg|
zGZMSvk<e}BIJZ(`DpB;9?M!anM$2mn%2gJA%lwV-u#rxJ%Jc&N9T|+Xg*q{A+a%7E
z-t)CAjjlqrwdeJLxkSx$?Gluvt9@hrgKEX!a8;cO<!^Ogjm_-y+@krxuM+pFvd^I*
z(}2q9Pc&Zz+kATx3-_HjQ`K?!HFqOcbNqM9*JevTI4Ka6%aY1)RY`U6wPbi^Hmf}-
zD?lojPtA?(Kl<=u6Q%sO`Mb#pp`Es>iXY^bx$-sI%46Ct=ECiD`GlOv8q=X9_KSJi
zqqUUCB?a1s`6O(7O@wgSa&!VVtVW?umbgwb`7zn;S`m2ziQ>>Mh7BTOF(2NqEOHjY
zA3n#iVIM!9Bua~$4C^&4*cCC+Yr-`3+|+z3)rO@(5e>zhnOv{1YH~CptS6AVY<tg-
zmDS;1gkgf~k7kLT1yX<8p0d(e#Y>jSUUtsoFIyFj`bVpRhSa9)9~36bCoC;*Hg)xS
z4rC*kvsJc8$;O?Z)jfOa#QqUupEyl3_{CU*zUE-;4jZC{wWfDK^3jNX?SUhro#kfb
zE{&EFhGQ`2#=$Qp#kYaNgL$5d?_QZd?;RV;U6<uqD0%e7*UHVf(r+sEAH(<w<(xL!
zvFx0j_p0Y?T`VV9BQwM&_hx2gvrGL#1D3<a%O(^UoO`9GgSzO+3Q!IX?76`=kvNRA
zWQ6@+cSKv9hqUkBf8{Os!7qOH7iP+NmZPTK$MOzNhnGOU98<9&YF~YN_NKwh6kn$v
z$Io;k+>2aN#Z`^_bK^06@hcGz9>0%ba(LX|bKy>L%6#gkd(Tk#hE3p*XD}V|oYe~H
z?s9%Eo&&nv%fQKT=!L;Ue?5hj#7zq8k?;1G-X@J9`G%H;IX|XEhi&eSKQ6Kn)hkeW
zNM(uV)@j-Gz-ULl%knQBL)F#1TUT6*e?HyCb7kB4LUnTvEnO<nrj^*e!1Q&(TD)@4
zu;g7&H<8l4wil{cbh3u=R>0fySKBFPSBuWCmfLx`HSx`aEhTs4YVl&4wRnFCgshKn
zOn>6vm^S<p7l^$SZe#3TTZ!iwW%|QMDT9{7miNtdxr%?cG(&_x5~$PKJ#XA8O3l2p
zL2{jKp65xO$$l6%F6A4Z#Z(GL(zHa)3}c9CmAJOev@1GbxIn;@y)bXh)*6hSe6`Nm
z5)t+yY-DdS;C+q3fDLZi;Mt{qAsnQqr11x7(I|vmtW@DY6}bEz)g*S!!<$4lEcLi5
zJ~57$dPl9kb$n1LoL;*8J!t#el-tHurM0?!<k{PuRLz;YtQi#UWHPzMZ|u}`aog2m
z19#c_X$$}83hm`6YS>!86P#ax)sK#=i9yICDa<meqd5Wtv%ec|U+E=kq7-Y$x~uu~
zZD6`qdKHE_l&3(_GcUV$@q$*n8kTsX8&_5}vjnH}{ioN2$=b{<^S0ExuALLh>4F1h
z0pIyUI1hd)+$C5#_yBuFfQn@aitZ^2VeIi&6xN^Nm5pCw?*@lCE9T#s1;V*47xxe}
z?Tmu1H?56KMwk+}olR;^{r9;YU+OwWzOgw3f@%?gK!F}XgU&hM4sxggBu+m_x+vKF
zUV$8%K_KX1&t=R+Ac$bcBnRDa?r)Gh_8_V1K;G@b9d?jTuv^nPK^zJG9{AiK2XR2c
zwIL7;TOjKOpa<;mbfB*Y>7f_w%;-O%2PwP{g*&i^Q}{s580g^)_h2rDE`SB*O9on@
z9?ZiCbr0nn**{Pl4gMhXgL?FGaOMvdbQ|>w$W`ch4(2%ndHNS{AG8GBdzc$E3mU$S
z6ndTChu$#5*>vd3487nRQ4pVp+VoI^z6qpm8vI7^4z&zc0qz16c_3X|pgs{;F6gTZ
zXMWIY7G`mSa}kK+V1~my?Ei$F@XiG!FT6p+9R|3=ga`8^!W{71lS_eo2K_}H4d+!b
zQ!(6yZz6~9rVI)bs<u>ru!)kV=xEo`^}<P*7PPsm6Bm0Sdb`1%-;?2`YdLLqAA{U~
E06F%2IsgCw

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.pack b/tests/gitea-repositories-meta/user2/readme-test.git/objects/pack/pack-8933bd634b76f8154310cccb52537a0195e43166.pack
new file mode 100644
index 0000000000000000000000000000000000000000..6f5bf1f044bcfb2158b5ca9c6743c51c89a0dba0
GIT binary patch
literal 7854
zcmbVQcOcb$`~KSH9EU>os_Z?=9%YYXCVQPYp@UL{vbPY&J{>c%N7-AbjN{lLD|@7f
zB87ejJ*%hpeV^y|hrfKjpZmJ6`?|0D{v6#)ikbib;N$)rkmMfdgh)w9s}Kcnuep_l
z)s%BvikD4ERrLkQ>+KLFNjr4Fblh2%3`PgI#+m-9UB6W0KzlQPR#vFO>7?vy4v22+
zY>1u{+K!w4w5!q$0;bb+XGNm<hr_vvLN3zlSQIe4xVJJ=l&;A5`I`KI<+COMlB?^K
z>*G@1OCpA`E^jh+uylk&G&cdBk}a9|v%d25fE3FrdwQ01+LM-BSLAhTHL2rpAagLX
z5PUWYg_$&in|R^`_ypm??(SDDfsp5uHNG}ut>g8<;$?dgJEnGtr^L+ordTCD(e_Do
z_$Lg$&M=zqFR#*qMI|h8<kQ|1mblnuhe344XynHu%N4zeSxen`&VDGiD!32+l(@66
zcCTbpgk{ZAe(JT|o|e-Zmt~G?*y~k_NEv@3iVCg4KKk!l6gpEVzFUk2**hFf3&a{L
zM>IzLnMP?#&P0l=$B$<T-u0mVpb-r_q*2XH1OJo^>o{>-c&ZY)6B*ZuaGBkUH5nJX
zo>5IoT_z0c07J5bnb?acrMs8;g8iJ9Yd%J750sk7lQ83G9QuhyEpey&gRJz|8=G2g
z={8`ubR+gA%bwSlXIgG@OZAH>&+6?1*h?BWj!<G6$=X;CdE_=`Jwpt+txuJsnZyHP
zyxE@Ut9&!|{ah<38^@!gP2wqj1+^I1iK+80;gyfEr_PxKws04&J*H%!wk!Zg=s7%y
z4ll;j=u#RY>~v3l>V|fE#vGN=xP2qGmo0kpDT_m|vSm_W&$oGRv)py_T#f-~RmnTR
zbk59EFC#weoeX*9<}`U!1~$~=V{Vt$AQe~iEJ>85rtWdI|B6zAJ7OS5Gl6JhH;jLd
z#m3zBTTKTsck^tcX>!g^zv+-Ao9UHH2Kr8SWOx1EC_HO#e9>--c)Fo)*Fsg~9yx)R
zYwJhlPRvL+$Ccf}|0#l2S!T8D%r2t?^5L8oiNIzZ8Zjk5ReiyC5ycQ8J|?w}Cq~aN
zNE&~-0=s3*iz~O_RH2selE6U41HlC~jjq3S&6}d~cgmN;qN5|oiyp>=nUiWiUssPM
z7n-CJwd)y!X?nfp7%t)_ypwl2n2Utt1anSie7i78c|?YqA%&7?<CMRJYsc*K>YBFx
zKtiPGE=RRW^*~Rd_ot6e>*Hzeo|Q=sBdc!9PAQ@5#vweb!>`w5_1@F2ojlRf?#cK~
zAIBqA{G3hNt^uO3jY6!chukVaz5ck`vbfd;E6m8|b`a&E#lj6vvR%B$A@H^aQv9_L
z37JTPGy-!BO-2__rS{Ril^RdhpL}M#s0Lx!jEok_Rsi>BnmWYQ+S@ZRj68XHR$P)3
zKknp<(H4@hPEljxb2v@%Kl0g@S$^fyr+v{o^<mM}^{ElNJ#D+9Wal@8O6$<~SxtT<
zx(!+eRuOyqW&J^0N17az;F!I%4<t)z`W#j}0V92g((f4M8Zz`8Tl>qG?L?7teGyGp
z2K>j{021rHkng311qp8zE~})QYu`!_u6^Ohtp6ma%!uzm<#|f5QEGvqwkg-k$doWm
zu>Tt^;aEld){8X(tjb`Q%11``Ru*h}$2s5MsSI6dTRd2BNC_P=4psSLFWkQD&Coy2
z<N=)9lGv_X{Z1Y*-DdvT#A(K+=BZ5DBH5Ej4Xqf;Lz@(KZW974-%SrN%OylQMF{Is
zP1b#eh$yQDIB}QR6V`fPn8#;2*zns)XFh99&_86x*3FpcSw}{RQdU8IOAAOkMV2Du
zy0Z~#OBDM2F-t7?;xz?vvX@A98kz9xXd3r!Dy=1*s0F|2cHTYod-?^x-iZw_-?^Q~
zh*FDc-fx0s(I=j&inqMT5N1m9)+yNhPCU6hxx6aMt=fl=TsJE?1-J3N>Q9(CPab?B
ziL<?Gam|O?-cUE+bVfon8_Z~s$TP{3D`fp9jsoYWSSTsZ^oibjYYWrpa>x%}WSv!+
z@C;4X5*vMz!*t2T<;+w|PoT?3W}U0>FaaW$C^C45B0Os9x{C?9oC*D9O#f;2vz0*!
zg$nEDB3K8GI%TD({Cbnn&a57&#j+L)@*_{fym0AF{*Nb<j0)vEf)$-6rhR4jx4xv<
zPQ1EFIQdytQZ=lsEs+O1ctz<;I+>dfXrvh9Ht!T@t`ag~dD2CH)xsMuxnDPShS*QY
z1APPjwKLC5KOR+JZEYO`OGLt~ZJbl!DJYnABHS7cOM}_KlVJ`BM7({BeIg2GYb&fL
z9yL7F*D_%{3%<uLq<CqhWvIpP0k1@*Qf7q$8^16oC%3SqS?2l5njjExS&tzo>5!S<
z>YN%tqo!brbiz~aD>i##>6f*vlE+UMAv3@2=0BA&*mkewdt*L6vMu9mVA)Prxfiw8
z@)O#R7>!%BaGEpaw+9FO11Q~L#T?uHlv~MtkU=f~)Ji2Dn~!KP%f24NMEU);SGTlT
z-n=bFd+mQ6+-WQ+EiN^hVd#^9P6d0OugOpq)34^=DfzxDl>T*1*RhsQH8$<W40T$)
z#=*iV1Ls8&?jnOs)TzVS2z5U4blKcwkl5M9UNyrZi@PQZ_yph!5zjj!sTa0CXNfOw
znl-$VKBbf^L_#Wp9l);8BXs90Ql1$yGnu;F?n+jAl}fJ&F;#x%SOpg;-!@^Rzk*$1
z-I}+E)|Zy$_9qb>hwPkA-|$AST$a9H6_=DQ@AKKo+sIPzl*`RZEZzI!*Bfk6@n@YY
z&%nR-D$3XkMc%d0ya(~1w#;DWO=>#L=nYg6I^3(o%Xz*V7~K$NrNM17vq&5S@<0<k
z*CY)R0t31+CZDOs$OuR~M@QY44D}xgmFu?m;<Z!OY}GW~y{c;H@_;8>EpI|)&R-%)
zTT|q#yGeivc#%8zYGCu~G_P0oyASdw#}or2mnRxrSj(^?Tzj0xSGw}nsX6F|W!q$!
zG}nmy1wGJ@UVMtutIp=SV8}Ks#Lqq~HayWT)GyOHD$~>2+A7r3(kjBv-^n-J(%vpK
z#>f9+RKhLGS?WP>e(*v&9mJK@^fx8pl%tecBO=ZzDrm;WDc|e|0=~Xw5PozdBWMHx
z8->bFT9$y&C8t6|+ROMSO`vCP6IAjHA`cXuE<4LNCNp3bp9k)E7YhY?dyJ@`ljNGC
zeyW_9=TxemlieA_1W^yaK$XU@=C8`oq1r7Qw;CSc%H-IqULTzmDLfOXJo=`Ls%Gg^
z(0G*&iNJ>By4RQ8!NI!7_57$%s^|=_8~qZ2XXMUna1V$;YcCx1hSuD6+VGaOYAT6Y
zLWO5Gp2_3QWmL&C%Qi3gLPS7j@EL`3<J3s$Xq?X}-8<5M|1&PUOEJ#%#oPGt?d>Xi
zfyGp{`vn~*2YT8t4RwY1q3z4hMx!5}dq!o@bmP2{P`2DXEw11XV~A((^e^>44XRqw
z&t^ZVZc#B$U^dNtx^lp+zoQWH4$^$hr?t1xf@E^$nV5{coX7a<71@y$^aAN?(Vgi0
zotv%9{qt^VuS`FKRI?wp?XBpsk&6hJzV+xGtdSw#BIhH4<}4D0sUF!vN1nlvE!e{x
zY+&(l6v`fE>+I-Yk245_V+=AG;phm5IiiytV_+y-xSSqm;0w%9$IV$Vi8@7b#tmyn
z>y{UWNK^AHUGtPjaVbeXM8LiSP3GYM&H3|g{N>H);Z8S4{^;`}#eB>d)m|Fao}X)W
zN^DnAZ0foqhij+J#gr`QkY~kf-E~c_9EEVa;gAHHehYGQeQgNixd3jZ#ha8#6o~V^
z$&_`BR3Ai24COhzR=@dVpEL3{fgnOyrm8-FPFWbHu&i{t7StyNc#Bv^X1S$to;p~{
z44Te*WP`l5j$H)>(Q9(e5Cy_L(C^@0Z9i<$(H4%dhsWBY(2j}mFqlIu%pt`VoeZ~$
zfm=H!qTtSs2uFB|y_lYO>KLXEF?&b#6sujy4+3(M(oB%3yj~)p<RNw6I^lzJhunI-
zIOaCS9)-KmA;uP-VjF|BwTVr%hdDbSoKdz26v7^XfZL}aVenX~BX0ZJJ#gHz{myLy
zGTpogcX1#;HRlJy2ltOI{>{r#2nS~y>twjS0}O#c+9P1rvB}A{$V7V^7|K2tj<iLf
zkqA_x$RX&V2^bFaC04tPAD|P^$*EmLzzs`k>2;z=!y`5H{9wc0F%jvQhDfxxO@=$9
z;KEp=Z5<rb;EpLUTm%>zVV{UZ*u>-52pnt2z-Ga!?5sII?xl{2OHRqvMVjhm#Uxr0
z+EOLiF6P|E0~EIy?cWnQ96DAlnIF!v6fUK3V}MvKW)f2s^)i1BwYL%c15bI$?pp1*
zT@{2|BiHh^&cCCIb=~yT8hgloK81iY({D`;CF?~qUJn)scoAlgDOZ#%bTy3G!e20Z
zSeL>gB*iG4K#JQpx-XI93xgH<y>((iTuxeXkg(-}Ywg<Ym)~_zJfGwB!Z%`(ld<Xn
zgrVplBIpH52JJiSMKI;-uR#tfDYb;&U!6>5hRiOE`rfWcidL<5vUrJi`oX*f8&6rd
z<jalP$F<{DT<G<lNA6!%Hi%#E37^lz_dtsZ1NcOZpD@TFrI7azEhqLzylg*^>+J-G
z-(!{&I`DQB2iCMtQD+?<6%!H?71lf9>UQU&n_bP*&BDj8-$9FaR`oTmxev>uDkNZ}
zzyK10t;QWTxT>a!=~UOy!d~T4=NFinCGG6sy9%5=4z<r}q)KCDBmnF;fu(<fL7V~#
zxqDYeCTkp4F_o^kX<uWvmhK8PF@U>EiT@Fb2)1XWjT2NMG&`J@DVtC0i+rt0&9%P|
zKOkLUfIsFb=mPS;m3gsiM$c~-Y&1+T+-|!;f7wD#n*ew*Cjhdw^FVjsO@9jk2=?%z
z>;7pjxPSrxJ13dcPw9kA?*yH*QhVc6CAA>_zV$}!b#i_FyLdoX806Z&$!AFBFr^9S
zl{oT<W)O>qh+Vgsr}IjXK%j5ls$YcVM7oDv*Q*cD4!j#(CHIX4d9q!S$$;Cz{Ckc6
zIEAAa0)UPmL^^};uiE%!7Abzz+4Gz<qJ-af_gZu860Q|&mz?Hq9?P0OzqC&XD4b#N
z{JU^QKc>lh=4>4RJN0<M;T*Z-C2*r90I2H)?N<J0q*?KM^RVA#voH%P`d0||qDCv0
zW{I?`0}O7<(x_uM!*|DOC;^pf#&dr!!Y>gDDP7G>delnsr0r?+Ok2cwu*J6zR<_2>
z)~63XQWRtrfMe=ZRQtbM@(xdmR8>D&{2rg$FUiYE3z(2_h1uHvSyMItEX^ZDfzrT*
z|0>h9^^0TMnJ%kY*nI&Krdo(;@9I(%37|N}Ao6cAMdjj>?X!8$=`QN)pZlq9W0H<W
zBQlwTuvx*7<O<a<SpaD5xajKtVRApTCZ<7FREl%IKl{)xwMIuzo1Bu&MOZ6U_oYt6
zya_((CB4@2-8^J4BDVe@Y`0c2FEg)CvuCgyYBO5%P6IoWGt=s+jFgg&w@OXR%u9(b
zfaEPtEOg!IrkhW?w>Ll2m@dEd7PI16z+t^}B;)@;-MQ0BiS~ZD@o3hYEcV=Ume3P`
zWD;<c{g*_4v$q1jlS2-EmWQ8?VkOva!gA;UiYWrq^8fkmQSrNSNC&I__t76zzV8GL
z{X`}4_%-J77g)rJN(Z^B>pkBaB(P)b+#$roa1IXAOC`|)O(o!@Qj_W_i1dbh(o6+x
zzC<48;|y`+;`!uiK#R2~X{bV9@~M5L!#wqESCkx!PRorb$m1c%j-H!qbeaim1MMcs
z@nE`K<R{ZUOZ5}3r5*NZ2oc@=I0QD`phBXmnai_(tDFV{=fML8T9noPxf>OLk4VsY
z3(@!oB>Xu2fg3dUPbK){6R`ra`X@ixU5*jl^}2J-<i~Dr*Of(D8_~{sIvr>WX@q7R
zX~br^ew-$4mE0TY6gOY@oh52A-zs0vrWLg`5CgE3#*$QucP!}OBQn~14T?0WuT?WQ
zme0%OHcU#-#Te27PtSr;Ik?*XWvUM2#H)skhc1?yo_ASX)isv1QGYb5n%N0dID??a
zisRCNYIQ<~`TsOkGi8n<c?$rAC{l$Z%l&PvM-H41A&vfEIL^#(wEDTg{eWp?Z)0TX
zyfDz;1Bv@303oQ`0o~jvpT3>0i}}X^b>Yh&B;<kC7|`wG+Hna$dAPcIHK4eu&T}-?
zGiA=(cppx7Tr?aA#}4wQ+!KeXi2(S)$Gw0nC2{xH3Qu}j|1B$$W{;`mb;Da9MS7Jf
z%TTj>6IX~0Iv+pc^tqA8>trv^zlUP=kqs8_pn$2U>%p8a`Dnu}c>*aPf#+K1z=MKv
zC(}!7@4TleX>@sV8O+UZT{dfat6E_~rpWGcc)^3*v3-J*sV{+>o1!0^aHZhI_Ckky
z1v}OF2L#plI{S3^bfCOF>e?9XVcvW$JfLC$RDC3XKjTG4oDLx}^?!DcCZE$;a{D{n
zs4=#EC@I$`*^hc5$u|3pFrf#nRawQ?!I5U3JFg02RO#jU=l6k!{ETw49_YcrK|yW}
z41Y&&Cq|P9V5TB`^}8wp+L7Q87T@)qQXNr{#hl(bG)CX+;;y-g7|_@Q-YWP*6>5J$
zYC|!VU7v3RL#DoCzcoUaRVp|1(y5sM;KQf5d#w3iYvYjL{XJyl(AoXN(6R!6v>D{C
zqz4*ww94T`hX;Ur@k>ewe#kbveI7wv{&jRN@l~%y+%`5svf{x?_7y*ysFTK0?9DO{
z{oii|P?A{Qa@zw<pjIjb-NKjn6Cps~eLCsivy9){lnGgK{H8O)kt>>(FJk=ud^OwU
zPw6|9KuH$(?qAPwfAxCM9+40cWnpFip|^PObA#;{Y9IjvVmX%RUxXC09N#s$^_9wS
z!D5cZ(z2j>t$w@N3g|O|SU2Ff!%;s%@c1zN{wyZ`3I!+Ug<_><E>YRXgzdZ<(4J0c
z4~76>q9uFxI|lSn#c5*I>4oO~$!P%_?@whJ*S9MTIR`a-34q!xNJ91>CBadAbi=ic
zZ{HW!T|x?U_#a&4W)_5Zr@^juo&fOtAZt%?qTAxr6TGT+r2{&w*8%10!Yttf0#!tk
zkN<L$7Vdv`U)W;2zF8z5VCn8k-f?bd%=htex8ek5=Ex17;Z7S|{i&*IhH5zJ8sgSz
z-1VJW!*lpRQzdCq!O?R37oz@q$GJ>zsz)(hUl*(M-E>*mWnfu1GPrg^_;EIua5bwu
z?kA3f=i$(hTQj#pR%p_LdPmIbwm~CP;s$ueqCBhrkA5kV`Lf@BhWB}IL|tcL^If+o
zx$dePctGw=X2stNai~vX_jBJ)yPr#qbUIW1Mm$I~z02g&8Z8i>38Fo2jl&$<H-{<)
z(DUtUR~ipHb+@0C=C$vg5sNz<{coXDS>i<l-^K70Zk#$(hO5P)A_fP^kJWzE^33Ce
z20t(Azw~^(&NpOTc41K5Q}a3o6+;9N-NAdGeK;-tY!?5++(Md0n_mu=_?mutw+N!4
zi>|J-s+*VqtehCp8HaknnRW0{e}(|$bD+elzF)r@1%EK6-c*~*4Q^los;0s9e{=N<
zWX<oHHscy<leJ}S?^8)Fb&I6m20AFnUj5S5)rRyI;3nH^8{6r=RS7R|-?fn9y-xxR
zVj=M3ZR97F9lq8wWsaVP$F7d42dVu`8E4N@w&zIL;(T5SB7ELD-W%KPLk*OKlFt7U
zgK^i)R(jMW#O<lB>+gD9B&N6Adk%zv*PM_qzf}64FbpZ-21`o@Y42}51fwz8hvg@h
zCL=Pm>?bjNDaSX6p_RM$^*mz*5s=AFD)UPW9j?-Qv-20ErPuET&|CJFFjnh#Pm=-D
z!4RI~`HE{P4P1XM%(`|9^6PVTV0gK&cIX)3rk)Pp0It^xnn~~f{Z*3(?a6P*Z1dfF
z^!mfYCnxc5OfJ6Mzyqp=z@+s!1>WxB>(cHq=qSFzCD5sZ6}YOV12ydE5Y)+^#|It|
zpKN~ehc6sIun$L*&D*tZd5T6J<IaO3*50`}t?^modrZJcBRI4PcOGYEzi$Eq%7B2t
zv_|l3z}}urFa{Qk+`Au~jk$v}dj%mf_q@MdU)a@$TQ-ts?<RhB@z^bR+X*$gzV^kZ
zd;UWkA3z#Nv2nO_;c)<C-_NlwhZZb1mn|lS&evCwk}f}buvDI~m|Qwv<2PSZuv`|s
qoaaZ1wWH<xCE@?U-d2>z?}UpsUek2{Laj)F>DD*!!b_MJhW{VoRCZec

literal 0
HcmV?d00001

diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/packed-refs b/tests/gitea-repositories-meta/user2/readme-test.git/packed-refs
new file mode 100644
index 000000000000..2399a8008dcb
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/packed-refs
@@ -0,0 +1,22 @@
+# pack-refs with: peeled fully-peeled sorted 
+ea9ef877d1d88af76682d8798418081264f10cfc refs/heads/fallbacks
+0d4c14db927c9ffba01fa7e126cc748b5c02c01e refs/heads/fallbacks2
+c66d5b07c2063d3268707f22226c708b589574ef refs/heads/fallbacks3
+89f8426e9eb5eff35c09b3565836c8f8e15d0ce9 refs/heads/fallbacks4
+b0e902496eae435ad03c92a5d479f916ef2d4893 refs/heads/fallbacks5
+84a5500b5cc040b11daf53fc42c542a99589dc76 refs/heads/fallbacks6
+cf406a96e416d7de5c4c1bbfffdd672300c822bf refs/heads/fallbacks7
+0d6ac644b969e9199915a492da9dba08c179fd23 refs/heads/fallbacks8
+5038febc0c57215beb3748d7ae4091a25a4acc93 refs/heads/fallbacks9
+9134e1f178ca4cccf1a197142646f2d7627e8cd5 refs/heads/i18n
+744d2441e55bc0010d6b340d303f0106a627ad29 refs/heads/master
+3c492566170b057e962c025515ab38bbd7444077 refs/heads/plain
+3882d6373a0882a6739b3cd9b24d21c630621234 refs/heads/sp-ace
+bf5ed898252eaa50dcc01108ed4417c3ea98a294 refs/heads/special-subdir-.gitea
+c03543573ab088ce1cf7090a387d2be621426234 refs/heads/special-subdir-.github
+e75957ad9b7e6ed16dda183529ec283db0bbc5fe refs/heads/special-subdir-docs
+46f5d5ab33d701642e08c713fab42af89fdd4fea refs/heads/special-subdir-nested
+9c0f872256b839c2b97ec22fd348d87b14045513 refs/heads/subdir
+d7a854fff61e45b98234d7aa79ecbcb1619cd3dd refs/heads/symlink
+30b9c0ed4b1039dbd99f3fb537b84ca507e0549d refs/heads/symlink-loop
+41489b7be5c2244d2b7b524dcb31caf3bd1f9ccc refs/heads/txt
diff --git a/tests/gitea-repositories-meta/user2/readme-test.git/refs/heads/fallbacks-broken-symlinks b/tests/gitea-repositories-meta/user2/readme-test.git/refs/heads/fallbacks-broken-symlinks
new file mode 100644
index 000000000000..cf36865a7126
--- /dev/null
+++ b/tests/gitea-repositories-meta/user2/readme-test.git/refs/heads/fallbacks-broken-symlinks
@@ -0,0 +1 @@
+fe495ea336f079ef2bed68648d0ba9a37cdbd4aa
diff --git a/tests/integration/repo_test.go b/tests/integration/repo_test.go
index 7c3eac20cfac..cef9dccf24f6 100644
--- a/tests/integration/repo_test.go
+++ b/tests/integration/repo_test.go
@@ -257,6 +257,111 @@ func TestViewRepoDirectory(t *testing.T) {
 	assert.Zero(t, repoSummary.Length())
 }
 
+// ensure that the all the different ways to find and render a README work
+func TestViewRepoDirectoryReadme(t *testing.T) {
+	defer tests.PrepareTestEnv(t)()
+
+	// there are many combinations:
+	// - READMEs can be .md, .txt, or have no extension
+	// - READMEs can be tagged with a language and even a country code
+	// - READMEs can be stored in docs/, .gitea/, or .github/
+	// - READMEs can be symlinks to other files
+	// - READMEs can be broken symlinks which should not render
+	//
+	// this doesn't cover all possible cases, just the major branches of the code
+
+	session := loginUser(t, "user2")
+
+	check := func(name, url, expectedFilename, expectedReadmeType, expectedContent string) {
+		t.Run(name, func(t *testing.T) {
+			defer tests.PrintCurrentTest(t)()
+
+			req := NewRequest(t, "GET", url)
+			resp := session.MakeRequest(t, req, http.StatusOK)
+
+			htmlDoc := NewHTMLParser(t, resp.Body)
+			readmeName := htmlDoc.doc.Find("h4.file-header")
+			readmeContent := htmlDoc.doc.Find(".file-view") // TODO: add a id="readme" to the output to make this test more precise
+			readmeType, _ := readmeContent.Attr("class")
+
+			assert.Equal(t, expectedFilename, strings.TrimSpace(readmeName.Text()))
+			assert.Contains(t, readmeType, expectedReadmeType)
+			assert.Contains(t, readmeContent.Text(), expectedContent)
+		})
+	}
+
+	// viewing the top level
+	check("Home", "/user2/readme-test/", "README.md", "markdown", "The cake is a lie.")
+
+	// viewing different file extensions
+	check("md", "/user2/readme-test/src/branch/master/", "README.md", "markdown", "The cake is a lie.")
+	check("txt", "/user2/readme-test/src/branch/txt/", "README.txt", "plain-text", "My spoon is too big.")
+	check("plain", "/user2/readme-test/src/branch/plain/", "README", "plain-text", "Birken my stocks gee howdy")
+	check("i18n", "/user2/readme-test/src/branch/i18n/", "README.zh.md", "markdown", "蛋糕是一个谎言")
+
+	// viewing different subdirectories
+	check("subdir", "/user2/readme-test/src/branch/subdir/libcake", "README.md", "markdown", "Four pints of sugar.")
+	check("docs-direct", "/user2/readme-test/src/branch/special-subdir-docs/docs/", "README.md", "markdown", "This is in docs/")
+	check("docs", "/user2/readme-test/src/branch/special-subdir-docs/", "docs/README.md", "markdown", "This is in docs/")
+	check(".gitea", "/user2/readme-test/src/branch/special-subdir-.gitea/", ".gitea/README.md", "markdown", "This is in .gitea/")
+	check(".github", "/user2/readme-test/src/branch/special-subdir-.github/", ".github/README.md", "markdown", "This is in .github/")
+
+	// symlinks
+	// symlinks are subtle:
+	// - they should be able to handle going a reasonable number of times up and down in the tree
+	// - they shouldn't get stuck on link cycles
+	// - they should determine the filetype based on the name of the link, not the target
+	check("symlink", "/user2/readme-test/src/branch/symlink/", "README.md", "markdown", "This is in some/other/path")
+	check("symlink-multiple", "/user2/readme-test/src/branch/symlink/some/", "README.txt", "plain-text", "This is in some/other/path")
+	check("symlink-up-and-down", "/user2/readme-test/src/branch/symlink/up/back/down/down", "README.md", "markdown", "It's a me, mario")
+
+	// testing fallback rules
+	// READMEs are searched in this order:
+	// - [README.zh-cn.md, README.zh_cn.md, README.zh.md, README_zh.md, README.md, README.txt, README,
+	//     docs/README.zh-cn.md, docs/README.zh_cn.md, docs/README.zh.md, docs/README_zh.md, docs/README.md, docs/README.txt, docs/README,
+	//    .gitea/README.zh-cn.md, .gitea/README.zh_cn.md, .gitea/README.zh.md, .gitea/README_zh.md, .gitea/README.md, .gitea/README.txt, .gitea/README,
+
+	//     .github/README.zh-cn.md, .github/README.zh_cn.md, .github/README.zh.md, .github/README_zh.md, .github/README.md, .github/README.txt, .github/README]
+	// and a broken/looped symlink counts as not existing at all and should be skipped.
+	// again, this doesn't cover all cases, but it covers a few
+	check("fallback/top", "/user2/readme-test/src/branch/fallbacks/", "README.en.md", "markdown", "This is README.en.md")
+	check("fallback/2", "/user2/readme-test/src/branch/fallbacks2/", "README.md", "markdown", "This is README.md")
+	check("fallback/3", "/user2/readme-test/src/branch/fallbacks3/", "README", "plain-text", "This is README")
+	check("fallback/4", "/user2/readme-test/src/branch/fallbacks4/", "docs/README.en.md", "markdown", "This is docs/README.en.md")
+	check("fallback/5", "/user2/readme-test/src/branch/fallbacks5/", "docs/README.md", "markdown", "This is docs/README.md")
+	check("fallback/6", "/user2/readme-test/src/branch/fallbacks6/", "docs/README", "plain-text", "This is docs/README")
+	check("fallback/7", "/user2/readme-test/src/branch/fallbacks7/", ".gitea/README.en.md", "markdown", "This is .gitea/README.en.md")
+	check("fallback/8", "/user2/readme-test/src/branch/fallbacks8/", ".gitea/README.md", "markdown", "This is .gitea/README.md")
+	check("fallback/9", "/user2/readme-test/src/branch/fallbacks9/", ".gitea/README", "plain-text", "This is .gitea/README")
+
+	// this case tests that broken symlinks count as missing files, instead of rendering their contents
+	check("fallbacks-broken-symlinks", "/user2/readme-test/src/branch/fallbacks-broken-symlinks/", "docs/README", "plain-text", "This is docs/README")
+
+	// some cases that should NOT render a README
+	// - /readme
+	// - /.github/docs/README.md
+	// - a symlink loop
+
+	missing := func(name, url string) {
+		t.Run("missing/"+name, func(t *testing.T) {
+			defer tests.PrintCurrentTest(t)()
+
+			req := NewRequest(t, "GET", url)
+			resp := session.MakeRequest(t, req, http.StatusOK)
+
+			htmlDoc := NewHTMLParser(t, resp.Body)
+			_, exists := htmlDoc.doc.Find(".file-view").Attr("class")
+			fmt.Printf("%s", resp.Body)
+
+			assert.False(t, exists, "README should not have rendered")
+		})
+	}
+	missing("sp-ace", "/user2/readme-test/src/branch/sp-ace/")
+	missing("nested-special", "/user2/readme-test/src/branch/special-subdir-nested/subproject") // the special subdirs should only trigger on the repo root
+	// missing("special-subdir-nested", "/user2/readme-test/src/branch/special-subdir-nested/") // This is currently FAILING, due to a bug introduced in https://github.com/go-gitea/gitea/pull/22177
+	missing("symlink-loop", "/user2/readme-test/src/branch/symlink-loop/")
+}
+
 func TestMarkDownImage(t *testing.T) {
 	defer tests.PrepareTestEnv(t)()