01 · capture
Review and capture
Review breaking changes and deprecated configuration, record the rendered model and image references, and prepare database, configuration, application-data, repository, and external-storage backups.
Complete when
The old version and every recovery input can be identified before the database changes.
02 · quiesce
Stop for consistency
Stop Gitea before the final recovery set so repository writes cannot race the database and file backup.
Complete when
The database, repositories, and application data share one consistent stopped-instance boundary.
03 · apply
Start the new application
Apply the selected image transition and let the documented startup migration complete without deleting the prior recovery set.
Complete when
The application starts, migrations complete, and no deprecated configuration blocks operation.
04 · verify
Exercise Git and web paths
Verify login, repository browse, clone, fetch, push, issues or pull requests, enabled data features, webhooks or actions, and optional SSH.
Complete when
The workflows that make the instance useful pass before the rollback set expires.
Rollback boundary
When an update migrates the database, rollback requires the previous application model plus the matching database, repositories, application data, configuration, and external-storage recovery point; an older image alone cannot reverse the migration.