v1.16.1

Highlights

• Signed-in users without repository permissions receive a localized 403 explanation across repository pages, REST API, and authenticated Git HTTP. Anonymous users and public-only tokens continue to receive 404.
• Fix typed-array request bodies when the view begins at a non-zero byte offset.
• Add Darwin disk reservation support for organization-share uploads, with a safe fallback when filesystem preallocation is unsupported.
• Includes the latest main branch, including organization sharing and project boards.

Verification

• make lint-go passed with 0 issues.
• go test -race -tags="bindata sqlite sqlite_unlock_notify" ./modules/orgshare ./modules/projectboard passed.
• Repository-access integration regression passed.
• Darwin arm64 and amd64 org-share test binaries cross-compiled successfully.
• All seven Linux, macOS, and Windows platform packages were built locally; all 35 SHA256 sidecars verified.