[release-23.11] forgejo: 1.20.6-1-unstable-2024-02-22 -> 1.20.6-1-unstable-2024-04-18

[emilylange]

Description of changes

This bump backports 1.21.11-0's security fixes to 1.20.6-1.

https://codeberg.org/forgejo/forgejo/pulls/3319

Please refer to the "Security fix" section in 1.21.11-0's release notes: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#1-21-11-0

Ref:

• [release-23.11] forgejo: 1.20.6-1 -> 1.20.6-1-unstable-2024-02-22 #290725
• forgejo: 1.21.10-0 -> 1.21.11-0 #305143

I also ran this version against our newer nixos-unstable VM test suite, which tests Forgejo Actions as well, using the following patch:

diff --git a/nixos/tests/forgejo.nix b/nixos/tests/forgejo.nix
index 8b9ee46ff5d3..bacaa7cb30bf 100644
--- a/nixos/tests/forgejo.nix
+++ b/nixos/tests/forgejo.nix
@@ -226,7 +226,7 @@ let
             def poll_workflow_action_status(_) -> bool:
                 output = server.succeed(
                     "curl --fail http://localhost:3000/test/repo/actions | "
-                    + 'htmlq ".flex-item-leading span" --attribute "data-tooltip-content"'
+                    + 'htmlq "span" --attribute "data-tooltip-content"'
                 ).strip()
 
                 # values taken from https://codeberg.org/forgejo/forgejo/src/commit/af47c583b4fb3190fa4c4c414500f9941cc02389/options/locale/locale_en-US.ini#L3649-L3661

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.