gitea: prevent unauthorized access to containers from public repos if…

… REQUIRE_SIGNIN_VIEW is set

The issue got fixed in 1.21, but we still have 1.20 on 23.11.
See go-gitea/gitea#28875 / go-gitea/gitea#28875

pkgs/applications/version-management/gitea/default.nix

@@ -2,6 +2,7 @@
 , stdenv
 , buildGoModule
 , fetchurl
+, fetchpatch
 , makeWrapper
 , git
 , bash
@@ -32,6 +33,11 @@ buildGoModule rec {
 
   patches = [
     ./static-root-path.patch
+    # https://github.com/go-gitea/gitea/pull/28877
+    (fetchpatch {
+      url = "https://patch-diff.githubusercontent.com/raw/go-gitea/gitea/pull/28877.patch";
+      hash = "sha256-cThW3EnHR695thajbnmfNziVB/iBP9OPeDgWbszYIeg=";
+    })
   ];
 
   postPatch = ''