Issues

• Docs: what the web UI's browse shows for a proxy and a group

  documentation
  forgepkg/forge#840 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Browse: the package list of a proxy or group pages in SQL, and a Docker group's image list stops reading every member's images per page

  bug
  forgepkg/forge#839 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Browse: upstream failures and failed searches show as such, and the package page says what it lacks

  bug
  forgepkg/forge#838 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Browse: a group's package page asks its members concurrently, and shows delayed-only packages, sizes and dates as its proxy does

  bug
  forgepkg/forge#837 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Browse: a proxy's or group's package page asks the upstream (each group member in turn), so it is slow and often shows no package info, and a proxy and its group list different packages

  bug
  forgepkg/forge#834 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Rail: remove the Repositories section, a flat copy of the Browse list that shows the kind only as an unlabelled colour dot

  enhancement
  forgepkg/forge#833 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Traffic: each instance rewrites its whole day file every minute, so a versioned bucket keeps about 1,440 copies of it per day

  bug
  forgepkg/forge#826 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Kubernetes: the startup probe kills a pod whose migrations run past five minutes, and the next pod waits for the killed one's locks, so a long migration never completes

  bug
  forgepkg/forge#825 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• Imports: an import whose run kills the process is claimed again after every lease, with no limit, and takes each instance down in turn

  bug
  forgepkg/forge#824 · Filter by author schmitch opened on Nov 3, 2026 · Backlog

• apt proxies: looking up an uncached pool file reads the upstream's Packages index with no limit per line, so a single line can take 1 GiB

  bug
  forgepkg/forge#823 · Filter by author schmitch opened on Nov 3, 2026 · 2.3.0

• Imports: an apt import holds every entry of the source's Packages index in memory, about 16 times the inflated index, so a source can exhaust the instance's memory

  bug
  forgepkg/forge#821 · Filter by author schmitch opened on Nov 3, 2026 · 2.3.0

• apt: the control parser compares each field with every earlier one, so a writer's 1 MiB control file costs about 20 s of CPU on every upload and every index generation

  bug
  forgepkg/forge#820 · Filter by author schmitch opened on Nov 3, 2026 · 2.3.0

• NuGet: a package whose end record names another disk for its central directory, or gives two different entry counts, is stored and listed though NuGet refuses it

  bug
  forgepkg/forge#818 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Docker imports: a tag pushed to Forge while an import copies it is moved to the source's manifest, even with on_conflict skip

  bug
  forgepkg/forge#817 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Retention screen: a protected tag glob with braces ({latest,stable}) is split at its comma, so the policy cannot be saved from the screen

  bug
  forgepkg/forge#816 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• apt: one package with a malformed Depends (or another relationship field) is published as is, and apt-get update then fails on every client of the repository

  bug
  forgepkg/forge#814 · Filter by author schmitch opened on Nov 2, 2026 · 2.3.0

• Reader role: an administrator made on 2.2 through the user page or POST /admin/users holds admin alone, so an IdP or upstream demotion leaves them Roles only

  bug
  forgepkg/forge#812 · Filter by author schmitch opened on Nov 2, 2026 · 2.3.0

• apt: Forge reads the first control of a control.tar, while dpkg installs from the last one it extracts

  bug
  forgepkg/forge#807 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• apt proxies: after a remote_url change, the previous upstream's cached indexes and pool files are still served

  bug
  forgepkg/forge#806 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Workload identity: an issuer-wide rule is accepted for multi-tenant issuers other than GitHub Actions and GitLab.com (Buildkite, Google, Terraform Cloud)

  enhancement
  forgepkg/forge#805 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Device login docs: the scope example names the npm-all group, and a token scoped to a group reads nothing through it

  documentation
  forgepkg/forge#804 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Device login: ten wrong codes from one network lock every user of that network out of /device, and a linked code counts without a click

  bug
  forgepkg/forge#803 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Retention screen: a cron-scheduled policy whose min_run_interval_seconds is 0 cannot be saved, and the error is on a field the screen hides

  bug
  forgepkg/forge#802 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Docker imports: every run, a dry run included, GETs every tag's manifest, and the path that decides an unchanged tag without fetching is never taken

  enhancement
  forgepkg/forge#801 · Filter by author schmitch opened on Nov 2, 2026 · Backlog

• Import docs: the password is said to go to the origins the source's documents name, but the code sends it to the source's origin only

  documentation
  forgepkg/forge#800 · Filter by author schmitch opened on Nov 2, 2026 · Backlog