Log Message:
gitea: update to 1.18.5

There have been a few security-related fixes between 1.18.0 and this
version. (XXX pull-up to pkgsrc-2023Q2)

This also includes a trivial fix in a comment for the default app.ini
configuration file.

Changes in 1.18.5:

* ENHANCEMENTS
  * Hide 2FA status from other members in organization members list
* BUGFIXES
  * Add force_merge to merge request and fix checking mergable
  * Use --message=%s for git commit message
  * Render access log template as text instead of HTML
  * Fix the Manually Merged form
  * Use beforeCommit instead of baseCommit
  * Display attachments of review comment when comment content is blank
  * Return empty url for submodule tree entries

Changes in 1.18.4:

* SECURITY
  * Provide the ability to set password hash algorithm parameters
  * Add command to bulk set must-change-password
* ENHANCEMENTS
  * Use import of OCI structs
  * Fix color of tertiary button on dark theme
  * Link issue and pull requests status change in UI notifications
    directly to their event in the timelined view.
* BUGFIXES
  * Notify on container image create
  * Fix blame view missing lines
  * Fix incorrect role labels for migrated issues and comments
  * Fix PR file tree folders no longer collapsing
  * Escape filename when assemble URL
  * Fix isAllowed of escapeStreamer
  * Load issue before accessing index in merge message
  * Improve trace logging for pulls and processes
  * Fix restore repo bug, clarify the problem of ForeignIndex
  * Add default user visibility to cli command "admin user create"
  * Escape path for the file list
  * Fix bugs with WebAuthn preventing sign in and registration.
  * Add missing close bracket in imagediff
  * Move code comments to a standalone file and fix the bug when adding
    a reply to an outdated review appears to not post(#20821)
  * Fix line spacing for plaintext previews
  * Fix wrong hint when deleting a branch successfully from pull request
    UI
  * Fix README TOC links
  * Fix missing message in git hook when pull requests disabled on fork
  * Improve checkIfPRContentChanged
  * Prevent duplicate labels when importing more than 99
  * Don't return duplicated users who can create org repo
* BUILD
  * Upgrade golangcilint to v1.51.0
* MISC
  * Use proxy for pull mirror
  * Use --index-url in PyPi description

Changes in 1.18.3:

* SECURITY
  * Prevent multiple To recipients
* BUGFIXES
  * Truncate commit summary on repo files table.
  * Mute all links in issue timeline

Changes in 1.18.2:

* BUGFIXES
  * When updating by rebase we need to set the environment for head repo
  * Fix issue not auto-closing when it includes a reference to a branch
  * Fix invalid issue branch reference if not specified in template
  * Fix 500 error viewing pull request when fork has pull requests
    disabled
  * Reliable selection of admin user
  * Set disable_gravatar/enable_federated_avatar when offline mode is
    true
* BUILD
  * cgo cross-compile for freebsd

Changes in 1.18.1:

* API
  * Add sync_on_commit option for push mirrors api
* BUGFIXES
  * Update github.com/zeripath/zapx/v15
  * Fix pull request API field closed_at always being null
  * Fix container blob mount
  * Fix error when calculating repository size
  * Fix Operator does not exist bug on explore page with
    ONLY_SHOW_RELEVANT_REPOS
  * Fix environments for KaTeX and error reporting
  * Remove the netgo tag for Windows build
  * Fix migration from GitBucket
  * Prevent panic on looking at api "git" endpoints for empty repos
  * Fix PR status layout on mobile
  * Fix wechatwork webhook sends empty content in PR review
  * Remove duplicate "Actions" label in mobile view
  * Fix leaving organization bug on user settings -> orgs
  * Fixed colour transparency regex matching in project board sorting
  * Correctly handle select on multiple channels in Queues
  * Prepend refs/heads/ to issue template refs
  * Restore function to "Show more" buttons
  * Continue GCing other repos on error in one repo
  * Allow HOST has no port
  * Fix omit avatar_url in discord payload when empty
  * Don't display stop watch top bar icon when disabled and hidden when
    click other place
  * Don't lookup mail server when using sendmail
  * Fix gravatar disable bug
  * Fix update settings table on install
  * Fix sitemap
  * Fix code search title translation
  * Fix due date rendering the wrong date in issue
  * Fix get system setting bug when enabled redis cache
  * Fix bug of DisableGravatar default value
  * Fix key signature error page
* TESTING
  * Remove test session cache to reduce possible concurrent problem
* MISC
  * Restore previous official review when an official review is deleted
  * Log STDERR of external renderer when it fails