The Forgejo team has announced the release of Forgejo 14.0, the latest version of the self-hosted Git forge software. On the usability side, the new version introduces simple inline search filters for issues and PRs, making it easier to narrow results by status, author, or sorting criteria directly from the search bar.
The web-based file editor has also been replaced, moving away from Microsoft’s Monaco editor to the lighter CodeMirror. According to devs, the change improves performance, loading times, accessibility, and mobile usability, particularly for quick, single-file edits.
Additional interface refinements include improved previews for CITATION files, allowing users to switch between CFF and BibTeX formats, and continued progress toward a fully functional UI without JavaScript. Users can now post comments and access more menus with JavaScript disabled, reinforcing Forgejo’s focus on robustness and accessibility.
Forgejo Actions also sees expansion in this release. PRs’ trust management has been refined with clearer controls to approve workflows once, always, or deny execution entirely, as well as the ability to revoke previously granted trust.
Actions now display explicit “waiting” states when jobs are queued for specific runners, helping users diagnose stalled workflows. Support for concurrency groups allows administrators to control whether workflows run in parallel or sequentially, while dynamic matrices and runs-on definitions enable more advanced, logic-driven workflows.
On the bug fixes side, a long-standing issue that caused millions of redundant records to accumulate in the commit_status table has been fixed. Moreover, Forgejo 14.0 introduces a new CLI cleanup command to remove these records, reducing redundant data by more than 97% on the project’s own infrastructure.
Database behavior has also been improved by nearly eliminating deadlocks that previously caused incorrect repository statistics, and by introducing foreign keys to prevent data inconsistencies during upgrades.
Regarding security improvements, Forgejo now validates the SSH authorized_keys file at startup when configured to manage SSH access this way. If unexpected keys are detected, the service will refuse to start, forcing administrators to address the issue.
Finally, CSRF protection has also been reworked to use a stateless mechanism based on browser fetch metadata, allowing users to keep tabs open for extended periods without losing the ability to submit changes.
Forgejo 14.0 is available for download now, with container images and binaries published on the official site. Before upgrading, users are advised to review the breaking changes section of the release notes and back up their instances as outlined in the upgrade guide.
For more information, see the announcement. The next Forgejo 15.0 LTS version is scheduled for release in April.
