AverageMarcus/cluster.fun
1
0 Fork 0
Code Issues 1 Pull Requests 4 Releases Activity

Update ghcr.io/miniflux/miniflux Docker tag to v2.3.4 #815

Merged
AverageMarcus merged 1 commits from renovate/ghcr.io-miniflux-miniflux-2.x into master 2026-10-21 18:03:05 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
renovate commented 2026-10-20 03:21:36 +00:00
Collaborator
Copy link
Copy source

This PR contains the following updates:

Package Update Change
ghcr.io/miniflux/miniflux (source) patch 2.3.3 → 2.3.4

Release Notes

miniflux/v2 (ghcr.io/miniflux/miniflux)

v2.3.4: Miniflux 2.3.4

Compare Source

New features
  • Added Gotify push notification support.
  • Added Steam scraper rules.
  • Added validation with helpful error messages when saving rewrite rules.
Performance improvements
  • Reduced database storage used by enclosure and entry indexes.
  • Reduced memory used by internal data structures.
Security
  • Blocked reserved IP address ranges to further protect against server-side request forgery.
  • Hardened WebAuthn redirects against open-redirect attacks, including redirect URLs containing surrounding whitespace.
  • Prevented per-feed proxy URLs from bypassing private-network restrictions by default. Set FETCHER_ALLOW_PRIVATE_FEED_PROXY=1 to retain access to private per-feed proxies.
  • Enforced DISABLE_LOCAL_AUTH for API password authentication and password changes; API clients must use an API key when local authentication is disabled.
  • Rejected Google Reader authentication tokens when no password is configured.
  • Restricted embedded iframe URLs to web schemes and tightened YouTube hostname validation.
Bug fixes
  • Added timeouts to the ACME challenge listener.
  • Fixed response compression negotiation to consistently prefer the server's configured encoding order.
  • Improved Karakeep errors when saving an entry fails by reporting the HTTP status.
  • Returned to the first unread page when marking entries as read leaves the current feed or category page empty.
  • Restored support for proxies configured through HTTP_PROXY or HTTPS_PROXY, including across redirects.
  • Returned a validation error instead of crashing when creating or importing feeds for users without a category.
  • Preserved the requested redirect after passkey login.
  • Increased the Google Reader item-ID limit to 10,000.
  • Returned a bad-request response instead of crashing on POST requests to static asset paths.
  • Improved accessibility by adding descriptive names to documentation links.
  • Improved error logging and responses for failed database existence checks and shared-entry lookups.
Localization
  • Updated Polish (pl_PL) translations.
Documentation
  • Clarified the Unix socket permissions used with LISTEN_ADDR.
Dependencies
  • Updated several Go modules and GitHub Actions dependencies.

As always, thank you to all contributors who helped improve Miniflux in this release.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/miniflux/miniflux](https://miniflux.app) ([source](https://github.com/miniflux/v2)) | patch | `2.3.3` → `2.3.4` | --- ### Release Notes <details> <summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary> ### [`v2.3.4`](https://github.com/miniflux/v2/releases/tag/2.3.4): Miniflux 2.3.4 [Compare Source](https://github.com/miniflux/v2/compare/2.3.3...2.3.4) ##### New features - Added Gotify push notification support. - Added Steam scraper rules. - Added validation with helpful error messages when saving rewrite rules. ##### Performance improvements - Reduced database storage used by enclosure and entry indexes. - Reduced memory used by internal data structures. ##### Security - Blocked reserved IP address ranges to further protect against server-side request forgery. - Hardened WebAuthn redirects against open-redirect attacks, including redirect URLs containing surrounding whitespace. - Prevented per-feed proxy URLs from bypassing private-network restrictions by default. **Set `FETCHER_ALLOW_PRIVATE_FEED_PROXY=1` to retain access to private per-feed proxies.** - Enforced `DISABLE_LOCAL_AUTH` for API password authentication and password changes; API clients must use an API key when local authentication is disabled. - Rejected Google Reader authentication tokens when no password is configured. - Restricted embedded iframe URLs to web schemes and tightened YouTube hostname validation. ##### Bug fixes - Added timeouts to the ACME challenge listener. - Fixed response compression negotiation to consistently prefer the server's configured encoding order. - Improved Karakeep errors when saving an entry fails by reporting the HTTP status. - Returned to the first unread page when marking entries as read leaves the current feed or category page empty. - Restored support for proxies configured through `HTTP_PROXY` or `HTTPS_PROXY`, including across redirects. - Returned a validation error instead of crashing when creating or importing feeds for users without a category. - Preserved the requested redirect after passkey login. - Increased the Google Reader item-ID limit to 10,000. - Returned a bad-request response instead of crashing on POST requests to static asset paths. - Improved accessibility by adding descriptive names to documentation links. - Improved error logging and responses for failed database existence checks and shared-entry lookups. ##### Localization - Updated Polish (`pl_PL`) translations. ##### Documentation - Clarified the Unix socket permissions used with `LISTEN_ADDR`. ##### Dependencies - Updated several Go modules and GitHub Actions dependencies. *** As always, thank you to all contributors who helped improve Miniflux in this release. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate added 1 commit 2026-10-20 03:21:36 +00:00
Update ghcr.io/miniflux/miniflux Docker tag to v2.3.4 0fe03bb187
AverageMarcus merged commit 7469fb42df into master 2026-10-21 18:03:05 +00:00
AverageMarcus deleted branch renovate/ghcr.io-miniflux-miniflux-2.x 2026-10-21 18:03:06 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
renovate (Renovate Bot) AverageMarcus (Marcus Noble)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#815