fix(miniflux): update image ghcr.io/miniflux/miniflux 2.3.0 → 2.3.1 (#48619)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/miniflux/miniflux](https://miniflux.app) ([source](https://redirect.github.com/miniflux/v2)) | patch | `65266db` → `42f1438` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary> ### [`v2.3.1`](https://redirect.github.com/miniflux/v2/releases/tag/2.3.1): Miniflux 2.3.1 [Compare Source](https://redirect.github.com/miniflux/v2/compare/v2.3.0...2.3.1) ##### Security - Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account. - Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs. - Fixed a potential SQL injection vulnerability in dynamically generated `ORDER BY` clauses. - Hardened metrics endpoint authentication by using constant-time credential comparisons. ##### Bug Fixes - Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted. ##### Improvements - Added Korean language support. - Improved HTML truncation performance and reduced memory allocations. - Optimized feed discovery, subscription detection, date parsing, and tag filtering. - Simplified and refactored several storage and query-building components for better maintainability. ##### Dependencies Updated several dependencies, including: - `github.com/go-webauthn/webauthn` 0.17.4 - `golang.org/x/crypto` 0.52.0 - `golang.org/x/image` 0.41.0 - `golang.org/x/net` 0.55.0 *** As always, thank you to all contributors who helped improve Miniflux in this release. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9taW5pZmx1eCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
This commit is contained in:
@@ -9,7 +9,7 @@ annotations:
|
||||
trueforge.org/min_helm_version: "3.14"
|
||||
trueforge.org/train: stable
|
||||
apiVersion: v2
|
||||
appVersion: 2.3.0
|
||||
appVersion: 2.3.1
|
||||
dependencies:
|
||||
- name: common
|
||||
version: 29.3.4
|
||||
@@ -37,5 +37,5 @@ sources:
|
||||
- https://github.com/miniflux/v2
|
||||
- https://github.com/trueforge-org/truecharts/tree/master/charts/stable/miniflux
|
||||
type: application
|
||||
version: 18.4.0
|
||||
version: 18.4.1
|
||||
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
image:
|
||||
pullPolicy: IfNotPresent
|
||||
repository: ghcr.io/miniflux/miniflux
|
||||
tag: 2.3.0@sha256:65266db84761d09d999946218adfc91fd7abbd4a1086f74b3ad0e51083e30df2
|
||||
tag: 2.3.1@sha256:42f14382a035e9d9bbc33910ca53f72d47177f75c3c638d2c5a85adf5582d538
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
|
||||
Reference in New Issue
Block a user