Hello, ports. Here is a new version of miniflux that comes with various enhancements. Building and running tested on today's amd64 snap. QP-encoded diff just below the changelog. Someone please commit if OK.
Changelog: - Disallow the media proxy from fetching resources on private networks to mitigate potential SSRF issues. This behavior is configurable at the instance level. - Disallow fetching feed icons from private networks to reduce the SSRF attack surface. This is also configurable at the instance level. - Add the 'TRUSTED_REVERSE_PROXY_NETWORKS' configuration option to prevent spoofing of HTTP headers such as 'X-Forwarded-For', 'X-Forwarded-Proto', and 'X-Real-Ip'. This option must be configured when 'AUTH_PROXY_HEADER' is enabled. - Stop logging generated Google Reader API tokens, even when debug mode is enabled. - Remove the CORS handler from the Google Reader API, as it is not intended to be used by web clients, reducing the overall attack surface. - Avoid indexing the content of removed entries, significantly reducing database index size after cleanup. - Minor storage and database refactoring to simplify code paths and reduce unnecessary formatting overhead. - Add a new API endpoint to import entries into an existing feed. - Execute the content sanitizer when updating or importing entries through the API to ensure consistent sanitization. - Improve Google Reader API compatibility by removing unnecessary output parameter checks and aligning behavior with other open-source RSS readers. - Add an auto-push option to the Readeck integration. - Add smooth page transitions for a more polished navigation experience. - Add a route to view individual starred entries directly from a category’s starred list. - Add a link to the GitHub contributors page in templates. - Update all translations. - Improve consistency and fix typos in the 'miniflux(1)' manual page. Detailed changelog is available at https://github.com/miniflux/v2/releases/tag/2.2.16 Index: Makefile =================================================================== RCS file: /cvs/ports/net/miniflux/Makefile,v retrieving revision 1.28 diff -u -p -u -p -r1.28 Makefile --- Makefile 30 Dec 2025 23:27:26 -0000 1.28 +++ Makefile 21 Jan 2026 11:24:30 -0000 @@ -1,6 +1,6 @@ COMMENT = atom/rss feed reader web application -V = 2.2.15 +V = 2.2.16 MODGO_MODNAME = miniflux.app/v2 MODGO_VERSION = v${V} Index: distinfo =================================================================== RCS file: /cvs/ports/net/miniflux/distinfo,v retrieving revision 1.24 diff -u -p -u -p -r1.24 distinfo --- distinfo 30 Dec 2025 23:27:26 -0000 1.24 +++ distinfo 21 Jan 2026 11:24:30 -0000 @@ -221,7 +221,7 @@ SHA256 (go_modules/gopkg.in/check.v1/@v/ SHA256 (go_modules/gopkg.in/check.v1/@v/v1.0.0-20201130134442-10cb98267c6c.zip) = 9VVoTlxdrMKFDd2zRf7xuPk/VGtyaFWJeJ2m0rBicQ4= SHA256 (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.mod) = IVeYYKIDBvz0OxvSNNH7oxlJnHdhG3HAX5vzupDauTk= SHA256 (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.zip) = qrj7xOYwDqCOav4crqGKIckMefSJ9SxT4vIEMfGpoBU= -SHA256 (miniflux.app/v2-v2.2.15.zip) = O2FTdWbdKWei7ZeX0826fmPSKfPUYOEujX1YwESOSPA= +SHA256 (miniflux.app/v2-v2.2.16.zip) = xo8PpkLo8rsn3t4YJZqZAwh6ybP/IhFu2C2xjQXJXRQ= SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.3.0.mod) = 53 SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.3.0.zip) = 19692 SIZE (go_modules/github.com/!puerkito!bio/goquery/@v/v1.11.0.mod) = 148 @@ -445,4 +445,4 @@ SIZE (go_modules/gopkg.in/check.v1/@v/v1 SIZE (go_modules/gopkg.in/check.v1/@v/v1.0.0-20201130134442-10cb98267c6c.zip) = 42835 SIZE (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.mod) = 95 SIZE (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.zip) = 104623 -SIZE (miniflux.app/v2-v2.2.15.zip) = 1169088 +SIZE (miniflux.app/v2-v2.2.16.zip) = 1177687
