AverageMarcus/cluster.fun
1
0
Fork 0
Code Issues 1 Pull Requests 3 Releases Activity

Update ghcr.io/miniflux/miniflux Docker tag to v2.3.1 #717

Merged
AverageMarcus merged 1 commits from renovate/ghcr.io-miniflux-miniflux-2.x into master 2026-05-30 05:35:19 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate commented 2026-05-30 03:04:34 +00:00
Collaborator
Copy Link
Copy Source

This PR contains the following updates:

Package Update Change
ghcr.io/miniflux/miniflux (source) patch 2.3.0 → 2.3.1

Release Notes

miniflux/v2 (ghcr.io/miniflux/miniflux)

v2.3.1: Miniflux 2.3.1

Compare Source

Security
  • Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account.
  • Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs.
  • Fixed a potential SQL injection vulnerability in dynamically generated ORDER BY clauses.
  • Hardened metrics endpoint authentication by using constant-time credential comparisons.
Bug Fixes
  • Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted.
Improvements
  • Added Korean language support.
  • Improved HTML truncation performance and reduced memory allocations.
  • Optimized feed discovery, subscription detection, date parsing, and tag filtering.
  • Simplified and refactored several storage and query-building components for better maintainability.
Dependencies

Updated several dependencies, including:

  • github.com/go-webauthn/webauthn 0.17.4
  • golang.org/x/crypto 0.52.0
  • golang.org/x/image 0.41.0
  • golang.org/x/net 0.55.0

As always, thank you to all contributors who helped improve Miniflux in this release.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/miniflux/miniflux](https://miniflux.app) ([source](https://github.com/miniflux/v2)) | patch | `2.3.0` → `2.3.1` | --- ### Release Notes <details> <summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary> ### [`v2.3.1`](https://github.com/miniflux/v2/releases/tag/2.3.1): Miniflux 2.3.1 [Compare Source](https://github.com/miniflux/v2/compare/v2.3.0...2.3.1) ##### Security - Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account. - Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs. - Fixed a potential SQL injection vulnerability in dynamically generated `ORDER BY` clauses. - Hardened metrics endpoint authentication by using constant-time credential comparisons. ##### Bug Fixes - Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted. ##### Improvements - Added Korean language support. - Improved HTML truncation performance and reduced memory allocations. - Optimized feed discovery, subscription detection, date parsing, and tag filtering. - Simplified and refactored several storage and query-building components for better maintainability. ##### Dependencies Updated several dependencies, including: - `github.com/go-webauthn/webauthn` 0.17.4 - `golang.org/x/crypto` 0.52.0 - `golang.org/x/image` 0.41.0 - `golang.org/x/net` 0.55.0 *** As always, thank you to all contributors who helped improve Miniflux in this release. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjIwNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate added 1 commit 2026-05-30 03:04:35 +00:00
Update ghcr.io/miniflux/miniflux Docker tag to v2.3.1 803f086a54
AverageMarcus merged commit fd46f3f0b3 into master 2026-05-30 05:35:19 +00:00
AverageMarcus deleted branch renovate/ghcr.io-miniflux-miniflux-2.x 2026-05-30 05:35:19 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate (Renovate Bot) AverageMarcus (Marcus Noble)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#717