forgejo-11-secure/release-notes/9848.md

fix: commit prevent commit API from leaking user's hidden email address on valid GPG signed commits fix: commit prevent writing to out-of-repo symlink destinations while evaluating template repos fix: commit prevent .forgejo/template from being out-of-repo content fix: commit return on error if an LFS token cannot be parsed