Update ghcr.io/miniflux/miniflux Docker tag to v2.3.1 #717

2026-05-30T03:04:34Z

renovate commented

2026-05-30 03:04:34 +00:00

This PR contains the following updates:

Package	Update	Change
ghcr.io/miniflux/miniflux (source)	patch	`2.3.0` → `2.3.1`

Release Notes

miniflux/v2 (ghcr.io/miniflux/miniflux)

`v2.3.1`: Miniflux 2.3.1

Compare Source

Security

Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account.
Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs.
Fixed a potential SQL injection vulnerability in dynamically generated ORDER BY clauses.
Hardened metrics endpoint authentication by using constant-time credential comparisons.

Bug Fixes

Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted.

Improvements

Added Korean language support.
Improved HTML truncation performance and reduced memory allocations.
Optimized feed discovery, subscription detection, date parsing, and tag filtering.
Simplified and refactored several storage and query-building components for better maintainability.

Dependencies

Updated several dependencies, including:

github.com/go-webauthn/webauthn 0.17.4
golang.org/x/crypto 0.52.0
golang.org/x/image 0.41.0
golang.org/x/net 0.55.0

As always, thank you to all contributors who helped improve Miniflux in this release.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/miniflux/miniflux](https://miniflux.app) ([source](https://github.com/miniflux/v2)) | patch | `2.3.0` → `2.3.1` | --- ### Release Notes <details> <summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary> ### [`v2.3.1`](https://github.com/miniflux/v2/releases/tag/2.3.1): Miniflux 2.3.1 [Compare Source](https://github.com/miniflux/v2/compare/v2.3.0...2.3.1) ##### Security - Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account. - Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs. - Fixed a potential SQL injection vulnerability in dynamically generated `ORDER BY` clauses. - Hardened metrics endpoint authentication by using constant-time credential comparisons. ##### Bug Fixes - Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted. ##### Improvements - Added Korean language support. - Improved HTML truncation performance and reduced memory allocations. - Optimized feed discovery, subscription detection, date parsing, and tag filtering. - Simplified and refactored several storage and query-building components for better maintainability. ##### Dependencies Updated several dependencies, including: - `github.com/go-webauthn/webauthn` 0.17.4 - `golang.org/x/crypto` 0.52.0 - `golang.org/x/image` 0.41.0 - `golang.org/x/net` 0.55.0 *** As always, thank you to all contributors who helped improve Miniflux in this release. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added 1 commit 2026-05-30 03:04:35 +00:00

Update ghcr.io/miniflux/miniflux Docker tag to v2.3.1 803f086a54

AverageMarcus merged commit fd46f3f0b3 into master

2026-05-30 05:35:19 +00:00

AverageMarcus deleted branch renovate/ghcr.io-miniflux-miniflux-2.x

2026-05-30 05:35:19 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#717