TrueCharts Bot
8b9a2423f2
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/miniflux/miniflux](https://miniflux.app) ([source](https://redirect.github.com/miniflux/v2)) | minor | `8810dfe` → `65266db` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary> ### [`v2.3.0`](https://redirect.github.com/miniflux/v2/releases/tag/2.3.0): Miniflux 2.3.0 [Compare Source](https://redirect.github.com/miniflux/v2/compare/2.2.19...v2.3.0) ##### Security - Only discoverable WebAuthn credentials (resident keys / passkeys) are supported for login. - Non-resident credentials can no longer be used for first-factor authentication to prevent username enumeration before password verification. They are intended for post-password MFA flows, which Miniflux does not currently support. - Persist WebAuthn backup eligibility/state and validated credential state after login. - Require `POST` requests for logout, feed refresh, and OAuth2 unlink actions. - Apply CSRF protection to all non-safe HTTP methods. - Add `http.CrossOriginProtection` middleware for the web UI. - Validate redirect URL schemes in `HTMLRedirect` to prevent unsafe redirects. - Restore URL scheme validation in templates for untrusted feed URLs. - Sanitize filenames in `Content-Disposition` headers to prevent header injection. - Reject empty OAuth2 state parameters when no authentication flow is in progress. - Allow configured private proxies while still enforcing private-network restrictions for direct requests and redirects. - Validate URI schemes case-insensitively according to RFC 3986. - Pin third-party GitHub Actions to immutable commit SHAs to reduce supply-chain risks. - Cap the maximum entry limit to 1000 across the UI, API, and storage layer. ##### Improvements - Add support for exporting and importing Miniflux-specific feed settings in OPML files, allowing full feed configuration backups and restores. - Add enclosure links rewrite rule to expose podcast/video enclosure URLs inside entry content for external RSS clients. - Add support for the `shortcuts:` iOS URL scheme in sanitized content. - Add Linux `riscv64` builds. - Allow disabling local authentication without enabling automatic OAuth2/auth-proxy user creation. - Improve Chinese Traditional (`zh-TW`) translations. - Improve RSS parsing for feeds that reuse the same GUID across multiple entries. - Improve UI consistency for authentication settings and external-link behavior. - Automatically clean up orphaned feed icons from the database. - Detect Cloudflare bot challenge pages during feed refresh and return a dedicated error message. - Improve error handling and cleanup in WebAuthn login flows. - Simplify large feed and user deletions using `ON DELETE CASCADE`. ##### Performance - Improve sanitizer performance significantly and reduce allocations in multiple hot paths. - Optimize reading-time calculation to avoid unnecessary allocations. - Improve feed parsing performance by preallocating slices/maps and reducing string allocations. - Optimize ISO8601 duration parsing for YouTube and podcast feeds. - Reduce database queries for navigation metadata and storage operations. - Optimize template rendering for icons and CSP generation. - Avoid loading entry content from PostgreSQL when not needed. - Reuse a singleton HTML minifier instance instead of allocating one per request. - Optimize string handling in the reader and sanitizer packages. ##### Bug Fixes - Fix incorrect read/starred toggling in Google Reader API. - Prevent archived/deleted entries from reappearing as unread by using a tombstone table and removing the `removed` entry status. - Fix handling of slow HTTP headers. - Fix "open in new tab" behavior for redirected external entry links. - Fix Wallabag integration typo in error messages. ##### Dependency Updates - Update `github.com/go-webauthn/webauthn` to `v0.17.3`. - Update various `golang.org/x/*` packages. - Update `github.com/coreos/go-oidc/v3` to `v3.18.0`. - Update `github.com/tdewolff/minify/v2` to `v2.24.13`. *** As always, thank you to all contributors who helped improve Miniflux in this release. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9taW5pZmx1eCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
title
| title |
|---|
| TrueCharts |
Community Helm Chart Catalog
TrueCharts is a catalog of highly optimised Helm Charts. Made for the community, by the community!
All our charts are supposed to work together and be easy to setup using any helm-compatible deployment tool, above all, give the average user more than enough options to tune things to their liking.
Getting started using TrueCharts
Support
Please check our FAQ, manual and Issue tracker There is a significant chance your issue has been reported before!
Still something not working as expected? Contact us! and we'll figure it out together!
Development
Our development process is fully distributed and agile, so every chart-maintainer is free to set their own roadmap and development speed and does not have to comply to a centralised roadmap. This ensures freedom and flexibility for everyone involved and makes sure you, the end user, always has the latest and greatest of every Chart installed.
Getting into creating Charts
For more information check the website: https://truecharts.org
Contact and Support
To contact the TrueCharts project:
-
Create an issue on Github issues
-
Open a Support Ticket
-
Send us an email
Contributors ✨
Thanks goes to these wonderful people (emoji key):
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4?s=100)
![allcontributors[bot]](https://avatars.githubusercontent.com/in/23186?v=4?s=100)
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4?s=100)
This project follows the all-contributors specification. Contributions of any kind welcome!
Licence
Truecharts, is primarily based on the AGPL-v3 license, this ensures almost everyone can use and modify our charts. Licences can vary on a per-Chart basis. This can easily be seen by the presence of a "LICENSE" file in that folder.
An exception to this, has been made for every document inside folders labeled as docs or doc and their subfolders: those folders are not licensed under AGPL-v3 and are considered "all rights reserved". Said content can be modified and changes submitted per PR, in accordance to the github End User License Agreement.
SPDX-License-Identifier: AGPL-3.0
