With Gitea specifically or in general? A lot of different software has silently included security fixes in updates combined with other changes and then later revealed what security fixes were made or stayed quiet about it all together, since long before LLMs could analyze changes.

Security researchers and malware authors would reverse engineer software updates of proprietary software, and scrutinise source code changes of open source projects to find secretly shipped security fixes.

Bizarre policy. Any bad guys unaware of the security implications are analyzing the patch diffs as we speak, so this seems nonsensical to me.

Thanks! Currently going through this decision process myself.

> Gitea drops the historical 1. prefix from its version numbers, so this release is 28.0.0 rather than 1.28.0.

They're even ahead of Apple. macOS 27? Nah, how about Gitea 28?