From fe6bf54a75c07373140ea85541f0f9422e114c71 Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Sat, 30 May 2026 03:07:17 +0200 Subject: [PATCH] =?UTF-8?q?fix(miniflux):=20update=20image=20ghcr.io/minif?= =?UTF-8?q?lux/miniflux=202.3.0=20=E2=86=92=202.3.1=20(#48619)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/miniflux/miniflux](https://miniflux.app) ([source](https://redirect.github.com/miniflux/v2)) | patch | `65266db` → `42f1438` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
miniflux/v2 (ghcr.io/miniflux/miniflux) ### [`v2.3.1`](https://redirect.github.com/miniflux/v2/releases/tag/2.3.1): Miniflux 2.3.1 [Compare Source](https://redirect.github.com/miniflux/v2/compare/v2.3.0...2.3.1) ##### Security - Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account. - Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs. - Fixed a potential SQL injection vulnerability in dynamically generated `ORDER BY` clauses. - Hardened metrics endpoint authentication by using constant-time credential comparisons. ##### Bug Fixes - Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted. ##### Improvements - Added Korean language support. - Improved HTML truncation performance and reduced memory allocations. - Optimized feed discovery, subscription detection, date parsing, and tag filtering. - Simplified and refactored several storage and query-building components for better maintainability. ##### Dependencies Updated several dependencies, including: - `github.com/go-webauthn/webauthn` 0.17.4 - `golang.org/x/crypto` 0.52.0 - `golang.org/x/image` 0.41.0 - `golang.org/x/net` 0.55.0 *** As always, thank you to all contributors who helped improve Miniflux in this release.
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/miniflux/Chart.yaml | 4 ++-- charts/stable/miniflux/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/miniflux/Chart.yaml b/charts/stable/miniflux/Chart.yaml index 060f75f0b10..c0ba7e6d0bc 100644 --- a/charts/stable/miniflux/Chart.yaml +++ b/charts/stable/miniflux/Chart.yaml @@ -9,7 +9,7 @@ annotations: trueforge.org/min_helm_version: "3.14" trueforge.org/train: stable apiVersion: v2 -appVersion: 2.3.0 +appVersion: 2.3.1 dependencies: - name: common version: 29.3.4 @@ -37,5 +37,5 @@ sources: - https://github.com/miniflux/v2 - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/miniflux type: application -version: 18.4.0 +version: 18.4.1 diff --git a/charts/stable/miniflux/values.yaml b/charts/stable/miniflux/values.yaml index cd74647b412..50fab5ad1f2 100644 --- a/charts/stable/miniflux/values.yaml +++ b/charts/stable/miniflux/values.yaml @@ -2,7 +2,7 @@ image: pullPolicy: IfNotPresent repository: ghcr.io/miniflux/miniflux - tag: 2.3.0@sha256:65266db84761d09d999946218adfc91fd7abbd4a1086f74b3ad0e51083e30df2 + tag: 2.3.1@sha256:42f14382a035e9d9bbc33910ca53f72d47177f75c3c638d2c5a85adf5582d538 persistence: config: enabled: true