chore(deps): update miniflux/miniflux docker tag to v2.2.13 #448

Merged

catalin merged 1 commit from renovate/miniflux-miniflux-2.x into main 2025-10-02 10:15:08 +00:00

Conversation 0 Commits 1 Files changed 2 +4 -4

renovate-bot commented 2025-07-27 01:59:29 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
miniflux/miniflux (source)	patch	2.2.10 -> 2.2.13

---

Release Notes

miniflux/v2 (miniflux/miniflux)

v2.2.13: Miniflux 2.2.13

Compare Source

✨ New Features

• UI: Added a "Back to top" link for easier navigation.
• Integrations:
  • Added support for Wallabag tags.
  • Added support for LinkTaco service to save articles.

🐛 Bug Fixes

• API: Fixed issue where removed entries could still be returned. It was generating an error when fetching entries.
• Icons: Improved handling of relative icon URLs within subfolders.
• Timezone: Ensured only current IANA time zones are used. This avoids issues with Debian Trixie where deprecated time zones have been removed.

🛠 Refactoring & Improvements

• Complete rewrite of the config parser with validation and consistency improvements.
• Combined YouTube subscription parsing functions into a single function.
• Simplified and optimized JavaScript files (modal_handler.js, removed isTouchSupported()).
• Refactored internal code to consistently use time.Duration for time values across CLI, server, fetcher, metrics, and HTTP components.
• Replaced "Bookmarks" with "Starred" across UI and codebase for consistency.
• Template and UI cleanups: explicit template dependencies, moved inline SVGs to sprite.svg, improved layout.html consistency.
• Strengthened the JavaScript Trusted Types policy to enhance security.
• Updated translations for German, Polish, and French.

⚡ Performance

• XML Parsing: Optimized filterValidXMLChars (~4% faster).
• Sanitizer: Improved sanitization performance by ~10% using slices.Contains.
• Converted slices to arrays in some internal structures for efficiency.

📦 Dependency Updates

• go-webauthn/webauthn: 0.13.4 → 0.14.0
• golang.org/x/net: 0.43.0 → 0.44.0
• golang.org/x/image: 0.30.0 → 0.31.0
• golang.org/x/crypto: 0.41.0 → 0.42.0
• golang.org/x/term: 0.34.0 → 0.35.0
• golang.org/x/oauth2: 0.30.0 → 0.31.0
• tdewolff/minify/v2: 2.23.11 → 2.24.3
• prometheus/client_golang: 1.23.0 → 1.23.2
• GitHub Actions: setup-go and setup-python bumped from v5 → v6

v2.2.12: Miniflux 2.2.12

Compare Source

✨ New Features

• Keep only metadata of removed entries to reduce database size.
• Removed entry status is now immutable and cannot be changed back to unread or read status.
• SVG favicons are now minified before storing them in the database.
• Added support for resizing WebP images.
• Main menu now includes icons.
• Added Progressive Web App (PWA) shortcuts for quick access to common actions.
• Added direct link to the Apache 2.0 license on the About page.
• Feed-level webhook URLs now take priority when saving entries.
• New option: POLLING_LIMIT_PER_HOST to limit concurrent requests per host.
  Limits the number of concurrent requests to the same hostname when polling feeds.
  This helps prevent overwhelming a single server during batch processing by the worker pool.
• Added a rewrite rule to remove useless heading images on Phoronix articles.
• Use Golang's built-in VCS feature to get commit and build date when not specified by LDFLAGS.
• Disable OAuth2 and WebAuthn routes when the feature is not enabled.
• Added request URI logging in authentication handlers.

🛠 Fixes

• Limited tsvector indexing to the first 500K characters to avoid PostgreSQL limits.
• Use rel=apple-touch-icon instead of rel=apple-touch-icon-precomposed.png.
• Fixed broken WebAuthn error alert message on the settings page.
• Reverted SameSiteStrict cookie mode because it forces people to authenticate each time when using the PWA on Android.
• Prevent stale data by forcing reload when navigating back from articles (fix for Chrome's bfcache).
• Fixed URL detection capturing newlines in media descriptions.

⚡ Performance Improvements

• Optimized SQL queries (FetchJobs, markFeedAsRead) by removing unnecessary joins and heavy-weight operations.
• Improved memory usage by minimizing SVGs, static images, and templates.
• WebAuthn script (webauthn.js) is no longer loaded when the feature is disabled.
• Replaced regex-based YouTube and Invidious video ID extraction with URL parsing.
• Introspect the translation files at load time.
• Parse and merge filters only once per refresh.

🔧 Refactoring & Internal Changes

• Extensive refactoring across UI, templates, storage, and fetcher to simplify code and reduce memory allocations.
• Replaced interface{} with any (Go 1.18+ idiomatic usage).
• Reorganized JavaScript code: simplified functions, reduced duplication, and modernized handlers.
• app.js bundle and service worker files are now loaded as a JavaScript module.
• Use request builder in media proxy handler.

📚 Documentation

• Fixed typos and updated default values in the man page.
• Removed ChangeLog file (release notes are visible on GitHub and the official website - use the commit history for more details).

🛠 Dependencies

• Updated GitHub Actions workflows to use Go version 1.25.

• Updated dependencies:

  • golang.org/x/net → 0.43.0
  • golang.org/x/image → 0.30.0
  • golang.org/x/term → 0.34.0
  • github.com/tdewolff/minify/v2 → 2.23.11
  • github.com/coreos/go-oidc/v3 → 3.15.0
  • github.com/prometheus/client_golang → 1.23.0
  • GitHub Actions: actions/checkout bumped to v5

✅ Tests

• Added API integration tests for fetching categories with counters.
• Added tests for icon URL discovery, SVG minification error handling, and version format enforcement.
• Added unit tests for RequestBuilder.
• Avoided building a temporary binary for integration tests.

For more details, look at the commit history.

v2.2.11: Miniflux 2.2.11

Compare Source

✨ New Features

• TLS support for Unix sockets: Miniflux can now serve TLS over Unix domain sockets using CERT_FILE and KEY_FILE (#fcf86e3).
• RSS fallback: If a feed entry has no URL, Miniflux now uses the enclosure URL as a fallback (#d9de9d1).
• Bearer token for Linkwarden: The Linkwarden integration now uses Bearer token authorization instead of cookies (#​1d11623).
• Cookie policy improvement: SameSiteStrictMode is enforced for cookies when OAuth2/OIDC is not used (#​135ce1d).
• Readability engine: Avoid removing elements with the content class during readability parsing (#​66b269e).

🛠️ Improvements

• Massive readability engine refactoring and performance optimizations:

  • Improved performance of getClassWeight, getLinkDensity, and transformMisusedDivsIntoParagraphs.
  • Simplified and optimized internal logic of removeUnlikelyCandidates, getSelectionLength, and getArticle.
  • Reduced memory allocation in sanitizer and readability components.

• Storage optimization: Strings are now truncated on the Go side to respect tsvector limits, reducing DB load and ensuring valid UTF-8 (#​703f113).

• Simplified and clarified internal code structure:

  • Major cleanup and size optimization of internal structs (Feed, FeedCreationRequest, etc.).
  • Reduced memory use and improved CPU cache locality.
  • Numerous refactors across config, template, locale, subscription, and fetcher modules.

🐛 Bug Fixes

• Fixed an issue with feeds having excessive leading whitespace causing parser buffer issues (#​54abd0a).
• Properly preserve UTF-8 when truncating strings for full-text search (#​703f113).
• Fixed logic error in enclosure type detection (#​50d5cb9).
• Fixed incorrect filter rule parsing of Windows-style newlines (#dc81725).
• Fixed a panic in startAutoCertTLSServer function when using Let's Encrypt automatic certificates (#f7a6b02)
• Improved UI spacing consistency around header/footer (#​32fbb4e).

⚠️ Breaking Changes

• Windows binary no longer distributed: Windows is no longer a supported platform for binary distribution. Users must build from source if needed (#b470b18).

🧪 Tests & CI

• Test coverage significantly increased for modules like readability, sanitizer, processor, locale, and storage.
• Commit linter updated to support new Git revert message format.

🐘 Docker & Environment

• Base Docker image updated to Alpine 3.22.
• PostgreSQL Docker example updated to use the latest version.

🌐 Localization

• Updated Chinese and German translations.

🔒 Dependency Updates

• Bumped github.com/go-webauthn/webauthn to 0.13.4
• Bumped github.com/tdewolff/minify/v2 to 2.23.10
• Bumped golang.org/x/* modules: image, net, term, crypto
• Bumped github.com/andybalholm/brotli to 1.2.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [miniflux/miniflux](https://miniflux.app) ([source](https://github.com/miniflux/v2)) | patch | `2.2.10` -> `2.2.13` | --- ### Release Notes <details> <summary>miniflux/v2 (miniflux/miniflux)</summary> ### [`v2.2.13`](https://github.com/miniflux/v2/releases/tag/2.2.13): Miniflux 2.2.13 [Compare Source](https://github.com/miniflux/v2/compare/v2.2.12...2.2.13) ##### ✨ New Features - **UI:** Added a "Back to top" link for easier navigation. - **Integrations:** - Added support for **Wallabag tags**. - Added support for **LinkTaco** service to save articles. ##### 🐛 Bug Fixes - **API:** Fixed issue where `removed` entries could still be returned. It was generating an error when fetching entries. - **Icons:** Improved handling of relative icon URLs within subfolders. - **Timezone:** Ensured only current IANA time zones are used. This avoids issues with Debian Trixie where deprecated time zones have been removed. ##### 🛠 Refactoring & Improvements - Complete rewrite of the config parser with validation and consistency improvements. - Combined YouTube subscription parsing functions into a single function. - Simplified and optimized JavaScript files (`modal_handler.js`, removed `isTouchSupported()`). - Refactored internal code to consistently use `time.Duration` for time values across CLI, server, fetcher, metrics, and HTTP components. - Replaced "Bookmarks" with "Starred" across UI and codebase for consistency. - Template and UI cleanups: explicit template dependencies, moved inline SVGs to `sprite.svg`, improved `layout.html` consistency. - Strengthened the JavaScript Trusted Types policy to enhance security. - Updated translations for German, Polish, and French. ##### ⚡ Performance - **XML Parsing:** Optimized `filterValidXMLChars` (\~4% faster). - **Sanitizer:** Improved sanitization performance by \~10% using `slices.Contains`. - Converted slices to arrays in some internal structures for efficiency. ##### 📦 Dependency Updates - **go-webauthn/webauthn:** 0.13.4 → 0.14.0 - **golang.org/x/net:** 0.43.0 → 0.44.0 - **golang.org/x/image:** 0.30.0 → 0.31.0 - **golang.org/x/crypto:** 0.41.0 → 0.42.0 - **golang.org/x/term:** 0.34.0 → 0.35.0 - **golang.org/x/oauth2:** 0.30.0 → 0.31.0 - **tdewolff/minify/v2:** 2.23.11 → 2.24.3 - **prometheus/client\_golang:** 1.23.0 → 1.23.2 - GitHub Actions: `setup-go` and `setup-python` bumped from v5 → v6 ### [`v2.2.12`](https://github.com/miniflux/v2/releases/tag/2.2.12): Miniflux 2.2.12 [Compare Source](https://github.com/miniflux/v2/compare/2.2.11...v2.2.12) ##### ✨ New Features - Keep only metadata of removed entries to reduce database size. - Removed entry status is now immutable and cannot be changed back to `unread` or `read` status. - SVG favicons are now minified before storing them in the database. - Added support for resizing WebP images. - Main menu now includes icons. - Added Progressive Web App (PWA) shortcuts for quick access to common actions. - Added direct link to the Apache 2.0 license on the About page. - Feed-level webhook URLs now take priority when saving entries. - New option: `POLLING_LIMIT_PER_HOST` to limit concurrent requests per host. Limits the number of concurrent requests to the same hostname when polling feeds. This helps prevent overwhelming a single server during batch processing by the worker pool. - Added a rewrite rule to remove useless heading images on Phoronix articles. - Use Golang's built-in VCS feature to get commit and build date when not specified by `LDFLAGS`. - Disable OAuth2 and WebAuthn routes when the feature is not enabled. - Added request URI logging in authentication handlers. ##### 🛠 Fixes - Limited `tsvector` indexing to the first 500K characters to avoid PostgreSQL limits. - Use `rel=apple-touch-icon` instead of `rel=apple-touch-icon-precomposed.png`. - Fixed broken WebAuthn error alert message on the settings page. - Reverted `SameSiteStrict` cookie mode because it forces people to authenticate each time when using the PWA on Android. - Prevent stale data by forcing reload when navigating back from articles (fix for Chrome's **bfcache**). - Fixed URL detection capturing newlines in media descriptions. ##### ⚡ Performance Improvements - Optimized SQL queries (`FetchJobs`, `markFeedAsRead`) by removing unnecessary joins and heavy-weight operations. - Improved memory usage by minimizing SVGs, static images, and templates. - WebAuthn script (`webauthn.js`) is no longer loaded when the feature is disabled. - Replaced regex-based YouTube and Invidious video ID extraction with URL parsing. - Introspect the translation files at load time. - Parse and merge filters only once per refresh. ##### 🔧 Refactoring & Internal Changes - Extensive refactoring across UI, templates, storage, and fetcher to simplify code and reduce memory allocations. - Replaced `interface{}` with `any` (Go 1.18+ idiomatic usage). - Reorganized JavaScript code: simplified functions, reduced duplication, and modernized handlers. - `app.js` bundle and service worker files are now loaded as a JavaScript module. - Use request builder in media proxy handler. ##### 📚 Documentation - Fixed typos and updated default values in the man page. - Removed `ChangeLog` file (release notes are visible on GitHub and the official website - use the commit history for more details). ##### 🛠 Dependencies - Updated GitHub Actions workflows to use Go version **1.25**. - Updated dependencies: - `golang.org/x/net` → 0.43.0 - `golang.org/x/image` → 0.30.0 - `golang.org/x/term` → 0.34.0 - `github.com/tdewolff/minify/v2` → 2.23.11 - `github.com/coreos/go-oidc/v3` → 3.15.0 - `github.com/prometheus/client_golang` → 1.23.0 - GitHub Actions: `actions/checkout` bumped to v5 ##### ✅ Tests - Added API integration tests for fetching categories with counters. - Added tests for icon URL discovery, SVG minification error handling, and version format enforcement. - Added unit tests for `RequestBuilder`. - Avoided building a temporary binary for integration tests. For more details, look at the commit history. ### [`v2.2.11`](https://github.com/miniflux/v2/releases/tag/2.2.11): Miniflux 2.2.11 [Compare Source](https://github.com/miniflux/v2/compare/v2.2.10...2.2.11) ##### ✨ New Features - **TLS support for Unix sockets**: Miniflux can now serve TLS over Unix domain sockets using `CERT_FILE` and `KEY_FILE` ([#fcf86e3](https://github.com/miniflux/v2/commit/fcf86e3)). - **RSS fallback**: If a feed entry has no URL, Miniflux now uses the enclosure URL as a fallback ([#d9de9d1](https://github.com/miniflux/v2/commit/d9de9d1)). - **Bearer token for Linkwarden**: The Linkwarden integration now uses Bearer token authorization instead of cookies ([#&#8203;1d11623](https://github.com/miniflux/v2/commit/1d11623)). - **Cookie policy improvement**: `SameSiteStrictMode` is enforced for cookies when OAuth2/OIDC is not used ([#&#8203;135ce1d](https://github.com/miniflux/v2/commit/135ce1d)). - **Readability engine**: Avoid removing elements with the `content` class during readability parsing ([#&#8203;66b269e](https://github.com/miniflux/v2/commit/66b269e)). ##### 🛠️ Improvements - **Massive readability engine refactoring** and performance optimizations: - Improved performance of `getClassWeight`, `getLinkDensity`, and `transformMisusedDivsIntoParagraphs`. - Simplified and optimized internal logic of `removeUnlikelyCandidates`, `getSelectionLength`, and `getArticle`. - Reduced memory allocation in sanitizer and readability components. - **Storage optimization**: Strings are now truncated on the Go side to respect `tsvector` limits, reducing DB load and ensuring valid UTF-8 ([#&#8203;703f113](https://github.com/miniflux/v2/commit/703f113)). - **Simplified and clarified internal code structure**: - Major cleanup and size optimization of internal structs (`Feed`, `FeedCreationRequest`, etc.). - Reduced memory use and improved CPU cache locality. - Numerous refactors across `config`, `template`, `locale`, `subscription`, and `fetcher` modules. ##### 🐛 Bug Fixes - Fixed an issue with feeds having excessive leading whitespace causing parser buffer issues ([#&#8203;54abd0a](https://github.com/miniflux/v2/commit/54abd0a)). - Properly preserve UTF-8 when truncating strings for full-text search ([#&#8203;703f113](https://github.com/miniflux/v2/commit/703f113)). - Fixed logic error in enclosure type detection ([#&#8203;50d5cb9](https://github.com/miniflux/v2/commit/50d5cb9)). - Fixed incorrect filter rule parsing of Windows-style newlines ([#dc81725](https://github.com/miniflux/v2/commit/dc81725)). - Fixed a panic in `startAutoCertTLSServer` function when using Let's Encrypt automatic certificates ([#f7a6b02](https://github.com/miniflux/v2/commit/f7a6b02)) - Improved UI spacing consistency around header/footer ([#&#8203;32fbb4e](https://github.com/miniflux/v2/commit/32fbb4e)). ##### ⚠️ Breaking Changes - **Windows binary no longer distributed**: Windows is no longer a supported platform for binary distribution. Users must build from source if needed ([#b470b18](https://github.com/miniflux/v2/commit/b470b18)). ##### 🧪 Tests & CI - Test coverage significantly increased for modules like `readability`, `sanitizer`, `processor`, `locale`, and `storage`. - Commit linter updated to support new Git revert message format. ##### 🐘 Docker & Environment - Base Docker image updated to Alpine 3.22. - PostgreSQL Docker example updated to use the latest version. ##### 🌐 Localization - Updated Chinese and German translations. ##### 🔒 Dependency Updates - Bumped `github.com/go-webauthn/webauthn` to `0.13.4` - Bumped `github.com/tdewolff/minify/v2` to `2.23.10` - Bumped `golang.org/x/*` modules: `image`, `net`, `term`, `crypto` - Bumped `github.com/andybalholm/brotli` to `1.2.0` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zOC4yIiwidXBkYXRlZEluVmVyIjoiNDEuMTE2LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

renovate-bot added 1 commit 2025-07-27 01:59:33 +00:00

chore(deps): update miniflux/miniflux docker tag to v2.2.11 7ba831308b

renovate-bot changed title from chore(deps): update miniflux/miniflux docker tag to v2.2.11 to chore(deps): update miniflux/miniflux docker tag to v2.2.12 2025-08-22 18:00:19 +00:00

renovate-bot force-pushed renovate/miniflux-miniflux-2.x from 7ba831308b to 489ff27004 2025-08-22 18:00:49 +00:00 Compare

renovate-bot force-pushed renovate/miniflux-miniflux-2.x from 489ff27004 to 7f9cc9d803 2025-09-19 02:17:37 +00:00 Compare

renovate-bot changed title from chore(deps): update miniflux/miniflux docker tag to v2.2.12 to chore(deps): update miniflux/miniflux docker tag to v2.2.13 2025-09-19 02:17:39 +00:00

catalin force-pushed renovate/miniflux-miniflux-2.x from 7f9cc9d803 to f28b0fe95d 2025-10-02 10:14:33 +00:00 Compare

catalin merged commit f28b0fe95d into main 2025-10-02 10:15:08 +00:00

catalin deleted branch renovate/miniflux-miniflux-2.x 2025-10-02 10:15:10 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

catalin/fukuops!448

No description provided.