gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.13.0:

• Add Allow-/Block-List for Migrate and Mirrors
• Prevent git operations for inactive users
• Disallow urlencoded new lines in git protocol paths if there is a port
• Mitigate Security vulnerability in the git hook feature
• Disable DSA ssh keys by default
• Set TLS minimum version to 1.2
• Use argon as default password hash algorithm
• Escape failed highlighted files

[source]