Update package version to 1.38.4

| datasource      | package        | from   | to     |
| --------------- | -------------- | ------ | ------ |
| github-releases | go-gitea/gitea | 1.26.3 | 1.26.4 |

CHANGELOG.md

@@ -2022,3 +2022,23 @@
 * fix: treat email addresses case-insensitively ([#37600](https://github.com/go-gitea/gitea/issues/37600))
 * Fix color regressions, add `priority` color ([#37417](https://github.com/go-gitea/gitea/issues/37417)) ([#37421](https://github.com/go-gitea/gitea/issues/37421))
 
+[1.38.3]
+* Update gitea to 1.26.3
+* [Full Changelog](https://github.com/go-gitea/gitea/releases/tag/v1.26.3)
+* fix(actions)!: require merged MR to bypass fork MR approval gate ([#38010](https://github.com/go-gitea/gitea/issues/38010)) ([#38041](https://github.com/go-gitea/gitea/issues/38041))
+* fix(hostmatcher): patch incorrect private list ([#38170](https://github.com/go-gitea/gitea/issues/38170)) ([#38173](https://github.com/go-gitea/gitea/issues/38173))
+* fix: Various security fixes ([#38103](https://github.com/go-gitea/gitea/issues/38103)) ([#38151](https://github.com/go-gitea/gitea/issues/38151))
+* fix: allow git clone of private repos with anonymous code access ([#38074](https://github.com/go-gitea/gitea/issues/38074)) ([#38146](https://github.com/go-gitea/gitea/issues/38146))
+* fix(hostmatcher): block reserved IP ranges from external/private filters ([#38039](https://github.com/go-gitea/gitea/issues/38039)) ([#38059](https://github.com/go-gitea/gitea/issues/38059))
+* feat(api): add Link header in ListForks ([#38052](https://github.com/go-gitea/gitea/issues/38052)) ([#38063](https://github.com/go-gitea/gitea/issues/38063))
+* fix: Fix the panic when ssh remote lfs endpoint parsing failure ([#38026](https://github.com/go-gitea/gitea/issues/38026)) ([#38158](https://github.com/go-gitea/gitea/issues/38158))
+* fix(api): nil pointer panic when filtering tracked times by a non-existent user ([#38112](https://github.com/go-gitea/gitea/issues/38112)) ([#38115](https://github.com/go-gitea/gitea/issues/38115))
+* fix(releases): generate notes for initial tag ([#37697](https://github.com/go-gitea/gitea/issues/37697)) ([#37986](https://github.com/go-gitea/gitea/issues/37986))
+* fix: Fix issue target branch selection for non-collaborators ([#36916](https://github.com/go-gitea/gitea/issues/36916)) ([#38164](https://github.com/go-gitea/gitea/issues/38164))
+
+[1.38.4]
+* Update gitea to 1.26.4
+* [Full Changelog](https://github.com/go-gitea/gitea/releases/tag/v1.26.4)
+* fix(auth): do not auto-reactivate disabled users on OAuth2 callback ([#38009](https://github.com/go-gitea/gitea/issues/38009)) ([#38183](https://github.com/go-gitea/gitea/issues/38183))
+* fix: walk git log context error handling ([#38182](https://github.com/go-gitea/gitea/issues/38182)) ([#38185](https://github.com/go-gitea/gitea/issues/38185))
+

CloudronManifest.json

@@ -4,8 +4,8 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.38.2",
-  "upstreamVersion": "1.26.2",
+  "version": "1.38.4",
+  "upstreamVersion": "1.26.4",
   "healthCheckPath": "/explore",
   "httpPort": 3000,
   "memoryLimit": 536870912,

Dockerfile

@@ -18,7 +18,7 @@ WORKDIR /home/git
 ENV GNUPGHOME="/app/data/gnupg"
 
 # renovate: datasource=github-releases depName=go-gitea/gitea versioning=semver extractVersion=^v(?<version>.+)$
-ARG GITEA_VERSION=1.26.2
+ARG GITEA_VERSION=1.26.4
 
 RUN mkdir -p /home/git/gitea && \
     curl -L https://github.com/go-gitea/gitea/releases/download/v${GITEA_VERSION}/gitea-${GITEA_VERSION}-linux-amd64 -o /home/git/gitea/gitea \