fix(miniflux): update image ghcr.io/miniflux/miniflux 2.3.0 → 2.3.1 (#48619)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/miniflux/miniflux](https://miniflux.app)
([source](https://redirect.github.com/miniflux/v2)) | patch | `65266db`
→ `42f1438` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary>

###
[`v2.3.1`](https://redirect.github.com/miniflux/v2/releases/tag/2.3.1):
Miniflux 2.3.1

[Compare
Source](https://redirect.github.com/miniflux/v2/compare/v2.3.0...2.3.1)

##### Security

- Fixed an OAuth account binding vulnerability that could allow users to
associate arbitrary OAuth identities with their account.
- Fixed an open redirect vulnerability caused by backslashes in relative
redirect URLs.
- Fixed a potential SQL injection vulnerability in dynamically generated
`ORDER BY` clauses.
- Hardened metrics endpoint authentication by using constant-time
credential comparisons.

##### Bug Fixes

- Fixed an issue where the stdlib cross-origin protection middleware
could block legitimate requests in certain self-hosted environments. The
middleware has been reverted.

##### Improvements

- Added Korean language support.
- Improved HTML truncation performance and reduced memory allocations.
- Optimized feed discovery, subscription detection, date parsing, and
tag filtering.
- Simplified and refactored several storage and query-building
components for better maintainability.

##### Dependencies

Updated several dependencies, including:

- `github.com/go-webauthn/webauthn` 0.17.4
- `golang.org/x/crypto` 0.52.0
- `golang.org/x/image` 0.41.0
- `golang.org/x/net` 0.55.0

***

As always, thank you to all contributors who helped improve Miniflux in
this release.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9taW5pZmx1eCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
This commit is contained in:
TrueCharts Bot
2026-05-30 03:07:17 +02:00
committed by GitHub
parent b136eb2abf
commit fe6bf54a75
2 changed files with 3 additions and 3 deletions
+2 -2
View File
@@ -9,7 +9,7 @@ annotations:
trueforge.org/min_helm_version: "3.14"
trueforge.org/train: stable
apiVersion: v2
appVersion: 2.3.0
appVersion: 2.3.1
dependencies:
- name: common
version: 29.3.4
@@ -37,5 +37,5 @@ sources:
- https://github.com/miniflux/v2
- https://github.com/trueforge-org/truecharts/tree/master/charts/stable/miniflux
type: application
version: 18.4.0
version: 18.4.1
+1 -1
View File
@@ -2,7 +2,7 @@
image:
pullPolicy: IfNotPresent
repository: ghcr.io/miniflux/miniflux
tag: 2.3.0@sha256:65266db84761d09d999946218adfc91fd7abbd4a1086f74b3ad0e51083e30df2
tag: 2.3.1@sha256:42f14382a035e9d9bbc33910ca53f72d47177f75c3c638d2c5a85adf5582d538
persistence:
config:
enabled: true