This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/miniflux/miniflux](https://miniflux.app)
([source](https://redirect.github.com/miniflux/v2)) | patch | `65266db`
→ `42f1438` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary>
###
[`v2.3.1`](https://redirect.github.com/miniflux/v2/releases/tag/2.3.1):
Miniflux 2.3.1
[Compare
Source](https://redirect.github.com/miniflux/v2/compare/v2.3.0...2.3.1)
##### Security
- Fixed an OAuth account binding vulnerability that could allow users to
associate arbitrary OAuth identities with their account.
- Fixed an open redirect vulnerability caused by backslashes in relative
redirect URLs.
- Fixed a potential SQL injection vulnerability in dynamically generated
`ORDER BY` clauses.
- Hardened metrics endpoint authentication by using constant-time
credential comparisons.
##### Bug Fixes
- Fixed an issue where the stdlib cross-origin protection middleware
could block legitimate requests in certain self-hosted environments. The
middleware has been reverted.
##### Improvements
- Added Korean language support.
- Improved HTML truncation performance and reduced memory allocations.
- Optimized feed discovery, subscription detection, date parsing, and
tag filtering.
- Simplified and refactored several storage and query-building
components for better maintainability.
##### Dependencies
Updated several dependencies, including:
- `github.com/go-webauthn/webauthn` 0.17.4
- `golang.org/x/crypto` 0.52.0
- `golang.org/x/image` 0.41.0
- `golang.org/x/net` 0.55.0
***
As always, thank you to all contributors who helped improve Miniflux in
this release.
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9taW5pZmx1eCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
TrueCharts Bot
fe6bf54a75