gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled
Go gitea.com/gitea/runner · Upgrade to 1.0.9-0.20260731160927-34bfa1915022 (pre-release) or later · < 1.0.9-0.20260731160927-34bfa1915022 · CVE-2026-73802 · GHSA-x4q3-gcj3-m6cf · amended