# FreshRSS changelog See also [the FreshRSS releases](https://github.com/FreshRSS/FreshRSS/releases). ## 2026-09-09 FreshRSS 1.30.0 * Security * 💥 Disallow access to local networks such as `127.0.0.1` by default, for security reasons (breaking change) [#8400](https://github.com/FreshRSS/FreshRSS/pull/8400), [#9195](https://github.com/FreshRSS/FreshRSS/pull/9195) * Selected local networks can be allowed under *System configuration* or using the `INTERNAL_HOST_ALLOWLIST` environment variable * Passing `*` allows all networks like before (unsafe) * Improve SSRF mitigations by restricting `CURLOPT_PROXY` [#8950](https://github.com/FreshRSS/FreshRSS/pull/8950) * Fix auth CSRFs (login and register actions) [#9171](https://github.com/FreshRSS/FreshRSS/pull/9171) * Log invalid challenge and ignore JSON error during login [#9278](https://github.com/FreshRSS/FreshRSS/pull/9278) * Disallow fetching of non remote URI [#9215](https://github.com/FreshRSS/FreshRSS/pull/9215) * Only allow HTTP/HTTPS schemes for enclosure and thumbnail URLs [#9272](https://github.com/FreshRSS/FreshRSS/pull/9272) * Fix access control in `rss` and `opml` actions [#8912](https://github.com/FreshRSS/FreshRSS/pull/8912) * Refactor to use CSRF field directly instead of borrowing it from a form [#9169](https://github.com/FreshRSS/FreshRSS/pull/9169), [#9205](https://github.com/FreshRSS/FreshRSS/pull/9205) * Cleaner limit anonymous mode to default user [#9235](https://github.com/FreshRSS/FreshRSS/pull/9235) * Fix HTML ingestions in templates [#9146](https://github.com/FreshRSS/FreshRSS/pull/9146), [#9170](https://github.com/FreshRSS/FreshRSS/pull/9170) * Fix bad header filtering bypass [#8964](https://github.com/FreshRSS/FreshRSS/pull/8964) * Sanitize all fields during JSON import [#9168](https://github.com/FreshRSS/FreshRSS/pull/9168) * Gate `greader` (JSON) user query share format behind *Share by OPML* [#9248](https://github.com/FreshRSS/FreshRSS/pull/9248) * Public OPML should not contain cURL parameters [#9070](https://github.com/FreshRSS/FreshRSS/pull/9070) * Ignore security-relevant OPML attributes for dynamic OPML sources [#9276](https://github.com/FreshRSS/FreshRSS/pull/9276) * Strip feed URL credentials from anonymous user query output [#9246](https://github.com/FreshRSS/FreshRSS/pull/9246) * Set limits for regex during search [#8913](https://github.com/FreshRSS/FreshRSS/pull/8913) * Fix path disclosure in cache error message [#9206](https://github.com/FreshRSS/FreshRSS/pull/9206) * Limit the length and parentheses nesting depth of a search query [#9277](https://github.com/FreshRSS/FreshRSS/pull/9277) * Use timing-safe comparison for tokens [#8945](https://github.com/FreshRSS/FreshRSS/pull/8945) * Use `hash_equals()` for GReader API token comparison [#9183](https://github.com/FreshRSS/FreshRSS/pull/9183) * Mailer: allow disabling SMTPAutoTLS via config [#9026](https://github.com/FreshRSS/FreshRSS/pull/9026) * Warn during install if document root does not point to `./p/` [#9010](https://github.com/FreshRSS/FreshRSS/pull/9010) * Stop the unread-count poller after the session ends [#9065](https://github.com/FreshRSS/FreshRSS/pull/9065) * Add remote IP address to warning on form login [#8942](https://github.com/FreshRSS/FreshRSS/pull/8942) * Pin the GitHub actions using SHA [#9200](https://github.com/FreshRSS/FreshRSS/pull/9200) * Harden cache and SimplePie cache deserialization [#9273](https://github.com/FreshRSS/FreshRSS/pull/9273) * SimplePie * Security: Disallow `javascript:` URI scheme (protocol) [#8263](https://github.com/FreshRSS/FreshRSS/pull/8263) * Fix wrong player parent logic leading to invalid type [#8893](https://github.com/FreshRSS/FreshRSS/pull/8893), [simplepie#978](https://github.com/simplepie/simplepie/pull/978) * Consistently enable `XML_OPTION_PARSE_HUGE` [#8894](https://github.com/FreshRSS/FreshRSS/pull/8894), [simplepie#977](https://github.com/simplepie/simplepie/pull/977) * Fix null warning in IRI for PHP 8.5+ [#8918](https://github.com/FreshRSS/FreshRSS/pull/8918), [simplepie#979](https://github.com/simplepie/simplepie/pull/979) * Fix sanitizer whitelist stripping order [#9066](https://github.com/FreshRSS/FreshRSS/pull/9066) * Show only one representation per `media:group` [#9009](https://github.com/FreshRSS/FreshRSS/pull/9009) * Bump upstream SimplePie [#8947](https://github.com/FreshRSS/FreshRSS/pull/8947) * Features * Filter global view feed list by state and search [#9132](https://github.com/FreshRSS/FreshRSS/pull/9132) * Use global view when searching from subscription page [#9144](https://github.com/FreshRSS/FreshRSS/pull/9144) * New option to hide badges showing number of unread articles (*Phantom Obligation*) [#8844](https://github.com/FreshRSS/FreshRSS/pull/8844) * Refresh only feeds in the current view [#9060](https://github.com/FreshRSS/FreshRSS/pull/9060) * Offer to add a prefix when resharing user labels [#9236](https://github.com/FreshRSS/FreshRSS/pull/9236) * Add log search to the logs page [#9059](https://github.com/FreshRSS/FreshRSS/pull/9059) * Add configurable `log_level` system setting [#9185](https://github.com/FreshRSS/FreshRSS/pull/9185) * New option to keep or not the custom sort order when navigating between categories and feeds [#8969](https://github.com/FreshRSS/FreshRSS/pull/8969) * New per-feed option to show or hide enclosures (attachments) [#9015](https://github.com/FreshRSS/FreshRSS/pull/9015) * Detect JSON feeds from URLs containing `json` [#9058](https://github.com/FreshRSS/FreshRSS/pull/9058) * Also when subscribing via the API [#9167](https://github.com/FreshRSS/FreshRSS/pull/9167) * Order categories during OPML import/export according to position [#9203](https://github.com/FreshRSS/FreshRSS/pull/9203) * OPML: include each feed’s refresh interval (TTL) in export/import [#8982](https://github.com/FreshRSS/FreshRSS/pull/8982) * Log failed CSS content retrieval (Web scraping) [#9077](https://github.com/FreshRSS/FreshRSS/pull/9077) * Allow providing a category when adding a feed by bookmarklet [#9047](https://github.com/FreshRSS/FreshRSS/pull/9047) * Add LinkAce sharing service [#9024](https://github.com/FreshRSS/FreshRSS/pull/9024) * Add Nextcloud Bookmarks sharing service [#9032](https://github.com/FreshRSS/FreshRSS/pull/9032) * Bug fixing * Fix lost elements while parsing search query [#8884](https://github.com/FreshRSS/FreshRSS/pull/8884) * Fix “mark as read older than…” widening the active search [#9173](https://github.com/FreshRSS/FreshRSS/pull/9173) * Fix saving user queries [#9190](https://github.com/FreshRSS/FreshRSS/pull/9190) * Fix SQL errors breaking some regex searches with MySQL / MariaDB [#9036](https://github.com/FreshRSS/FreshRSS/pull/9036) * Fix marking filtered label articles as read in SQLite and PostgreSQL [#9264](https://github.com/FreshRSS/FreshRSS/pull/9264) * Fix tagging an already-tagged entry on PostgreSQL raising a SQL error instead of being a no-op [#9136](https://github.com/FreshRSS/FreshRSS/pull/9136) * PostgreSQL: make committing new entries resilient to duplicate keys [#9231](https://github.com/FreshRSS/FreshRSS/pull/9231) * Preserve negative timezone offsets in date intervals [#9071](https://github.com/FreshRSS/FreshRSS/pull/9071) * Fix feed dropdown bugs due to hash desync [#8949](https://github.com/FreshRSS/FreshRSS/pull/8949) * Fix slider not reinitializing after form submit [#8973](https://github.com/FreshRSS/FreshRSS/pull/8973) * Minz: Skip loading duplicated JS/CSS assets [#9000](https://github.com/FreshRSS/FreshRSS/pull/9000) * Respect `simplepie_syslog_enabled` for the *uses cache* logs [#8986](https://github.com/FreshRSS/FreshRSS/pull/8986) * Fix statistics repartition averages [#8996](https://github.com/FreshRSS/FreshRSS/pull/8996) * Fix article hover date visibility [#8997](https://github.com/FreshRSS/FreshRSS/pull/8997) * Keep search and state filters when marking articles as read [#9007](https://github.com/FreshRSS/FreshRSS/pull/9007) * Fix `--db-prefix` silently drops following CLI flags [#9042](https://github.com/FreshRSS/FreshRSS/pull/9042) * Remove stale dynamic favicon links [#9127](https://github.com/FreshRSS/FreshRSS/pull/9127) * Fix desync between favicon and title unread counters [#9262](https://github.com/FreshRSS/FreshRSS/pull/9262) * Fix outdated username length hint on registration and install forms [#9013](https://github.com/FreshRSS/FreshRSS/pull/9013) * Redirect away from wrong URL paths [#9075](https://github.com/FreshRSS/FreshRSS/pull/9075) * Fix auto-share shortcut on first use [#9072](https://github.com/FreshRSS/FreshRSS/pull/9072) * Exclude hidden feeds from global view counts [#9152](https://github.com/FreshRSS/FreshRSS/pull/9152) * Fix only the last `` being written to the RSS output [#9174](https://github.com/FreshRSS/FreshRSS/pull/9174) * CLI * New `cli/reconfigure-user.php` to read/write per-user config attributes [#8873](https://github.com/FreshRSS/FreshRSS/pull/8873) * Report new articles count per feed in `app/actualize_script.php` output [#8948](https://github.com/FreshRSS/FreshRSS/pull/8948) * Output a diagnostic when the `cli/health.php` check fails [#8980](https://github.com/FreshRSS/FreshRSS/pull/8980) * API * Add a warning message to the API password section and a log warning when a client uses GET instead of recommended POST [#8845](https://github.com/FreshRSS/FreshRSS/pull/8845) * Fever API: log the client IP address on authentication failure [#8981](https://github.com/FreshRSS/FreshRSS/pull/8981) * WebSub: ignore HTTP/HTTPS scheme difference in Self URL comparison [#9005](https://github.com/FreshRSS/FreshRSS/pull/9005) * Deployment * Docker alternative image updated to Alpine 3.24 with PHP 8.5.7 and Apache 2.4.67 [#8916](https://github.com/FreshRSS/FreshRSS/pull/8916) * Start supporting PHP 8.6+ * Docker dev `:newest` with PHP 8.6 [#9155](https://github.com/FreshRSS/FreshRSS/pull/9155) * Docker: attach provenance and SBOM attestations to the published image [#9150](https://github.com/FreshRSS/FreshRSS/pull/9150) * Apache use only `CONN_REMOTE_ADDR` in logs when `mod_remoteip` is available, for compatibility with LiteSpeed Web Server [#8890](https://github.com/FreshRSS/FreshRSS/pull/8890) * Fix `.dockerignore` being ignored during build in CI [#9001](https://github.com/FreshRSS/FreshRSS/pull/9001) * New `ENABLE_ACCESS_LOG` environment variable to disable access logs [#9191](https://github.com/FreshRSS/FreshRSS/pull/9191) * Check GMP during 32-bit installation [#9046](https://github.com/FreshRSS/FreshRSS/pull/9046) * Improve actualize mutex to allow multiple instances [#9045](https://github.com/FreshRSS/FreshRSS/pull/9045) * OIDC: redirect to a default URL on expired auth state instead of 400 [#9143](https://github.com/FreshRSS/FreshRSS/pull/9143) * UI * Always jump article to top when header is offscreen, also when *Stick the article to the top when opened* is disabled [#8870](https://github.com/FreshRSS/FreshRSS/pull/8870) * Move article header/footer options (feed title, authors and date, icons position, tags) from *Reading* to *Display* configuration [#9139](https://github.com/FreshRSS/FreshRSS/pull/9139) * Move disable button before remove button in user management [#8944](https://github.com/FreshRSS/FreshRSS/pull/8944) * Keep scroll position of slider after form submit [#8974](https://github.com/FreshRSS/FreshRSS/pull/8974) * Group export feeds by category [#9079](https://github.com/FreshRSS/FreshRSS/pull/9079), [#9154](https://github.com/FreshRSS/FreshRSS/pull/9154) * Sort feed names with locale-aware collation [#8985](https://github.com/FreshRSS/FreshRSS/pull/8985) * Sort labels with locale-aware collation [#9023](https://github.com/FreshRSS/FreshRSS/pull/9023) * Format unread counter in title on page load [#9263](https://github.com/FreshRSS/FreshRSS/pull/9263) * Display slider after submit for all buttons in feed update UI [#8999](https://github.com/FreshRSS/FreshRSS/pull/8999) * Improve aside keyboard navigation [#9202](https://github.com/FreshRSS/FreshRSS/pull/9202) * Allows usage of Ctrl/Shift keys with the open website shortcut [#9186](https://github.com/FreshRSS/FreshRSS/pull/9186) * Fix padding for `.nav_menu` in Alternative-Dark, Flat, and Nord themes [#8901](https://github.com/FreshRSS/FreshRSS/pull/8901) * Fix typo in alert error border `color` variable [#9266](https://github.com/FreshRSS/FreshRSS/pull/9266) * Use JavaScript `Event()` constructor instead of deprecated `initEvent()` [#9035](https://github.com/FreshRSS/FreshRSS/pull/9035) * Use `:user-invalid` instead of `:invalid` for CSS form field styling [#9025](https://github.com/FreshRSS/FreshRSS/pull/9025) * Remove unused simple layout [#8998](https://github.com/FreshRSS/FreshRSS/pull/8998) * Various UI and style improvements: [#8823](https://github.com/FreshRSS/FreshRSS/pull/8823), [#8824](https://github.com/FreshRSS/FreshRSS/pull/8824), [#9140](https://github.com/FreshRSS/FreshRSS/pull/9140), [#9145](https://github.com/FreshRSS/FreshRSS/pull/9145) * Extensions * Minor `Minz_Extension` typing [#8952](https://github.com/FreshRSS/FreshRSS/pull/8952) * Improve extension list fetch diagnostics [#9055](https://github.com/FreshRSS/FreshRSS/pull/9055) * Fix a PHP warning in *Serve* action [#9267](https://github.com/FreshRSS/FreshRSS/pull/9267) * Fix extension settings cancel action [#9053](https://github.com/FreshRSS/FreshRSS/pull/9053) * Fix sharing menu conflicts with extensions [#9074](https://github.com/FreshRSS/FreshRSS/pull/9074) * Add read status hook for entries [#8995](https://github.com/FreshRSS/FreshRSS/pull/8995) * Dispatch a new JavaScript event `freshrss:entryStateChange` when an entry finishes being marked read/unread [#9031](https://github.com/FreshRSS/FreshRSS/pull/9031) * Redirect after saving user CSS/JS so changes apply immediately [#9006](https://github.com/FreshRSS/FreshRSS/pull/9006) * I18n * New plural system [#8988](https://github.com/FreshRSS/FreshRSS/pull/8988) * Pluralize the *new articles* count message * Prefer OS-bundled Japanese fonts when UI language is Japanese [#9002](https://github.com/FreshRSS/FreshRSS/pull/9002) * Add Azerbaijani [#9269](https://github.com/FreshRSS/FreshRSS/pull/9269) * Add Lithuanian [#9201](https://github.com/FreshRSS/FreshRSS/pull/9201), [#9213](https://github.com/FreshRSS/FreshRSS/pull/9213) * Improve Brazilian Portuguese [#9240](https://github.com/FreshRSS/FreshRSS/pull/9240), [#9242](https://github.com/FreshRSS/FreshRSS/pull/9242) * Improve German [#9149](https://github.com/FreshRSS/FreshRSS/pull/9149) * Improve Greek [#8977](https://github.com/FreshRSS/FreshRSS/pull/8977), [#9038](https://github.com/FreshRSS/FreshRSS/pull/9038) * Improve Hungarian [#8879](https://github.com/FreshRSS/FreshRSS/pull/8879) * Improve Indonesian (Bahasa Indonesia) [#9220](https://github.com/FreshRSS/FreshRSS/pull/9220) * Improve Italian [#8880](https://github.com/FreshRSS/FreshRSS/pull/8880) * Improve Japanese [#9064](https://github.com/FreshRSS/FreshRSS/pull/9064) * Improve Persian [#8923](https://github.com/FreshRSS/FreshRSS/pull/8923) * Improve Spanish [#8878](https://github.com/FreshRSS/FreshRSS/pull/8878), [#9245](https://github.com/FreshRSS/FreshRSS/pull/9245) * Improve Traditional Chinese [#9037](https://github.com/FreshRSS/FreshRSS/pull/9037), [#9069](https://github.com/FreshRSS/FreshRSS/pull/9069), [#9223](https://github.com/FreshRSS/FreshRSS/pull/9223) * Improve Turkish [#8966](https://github.com/FreshRSS/FreshRSS/pull/8966), [#8971](https://github.com/FreshRSS/FreshRSS/pull/8971), [#8970](https://github.com/FreshRSS/FreshRSS/pull/8970), [#8989](https://github.com/FreshRSS/FreshRSS/pull/8989) * Improve Ukrainian [#8871](https://github.com/FreshRSS/FreshRSS/pull/8871) * Refactor user query translation keys [#9049](https://github.com/FreshRSS/FreshRSS/pull/9049) * Misc. * Update to PHPMailer 7.1.1 [#8907](https://github.com/FreshRSS/FreshRSS/pull/8907) * Improve PHP code [#8906](https://github.com/FreshRSS/FreshRSS/pull/8906), [#9156](https://github.com/FreshRSS/FreshRSS/pull/9156) * Fix PHPStan 2.2.2 in CLI [#8911](https://github.com/FreshRSS/FreshRSS/pull/8911) * Migrate `markdownlint-cli` to `markdownlint-cli2` [#8987](https://github.com/FreshRSS/FreshRSS/pull/8987) * Update dev dependencies [#8904](https://github.com/FreshRSS/FreshRSS/pull/8904), [#8905](https://github.com/FreshRSS/FreshRSS/pull/8905), [#8926](https://github.com/FreshRSS/FreshRSS/pull/8926), [#8939](https://github.com/FreshRSS/FreshRSS/pull/8939), [#8940](https://github.com/FreshRSS/FreshRSS/pull/8940), [#8963](https://github.com/FreshRSS/FreshRSS/pull/8963), [#8961](https://github.com/FreshRSS/FreshRSS/pull/8961), [#8959](https://github.com/FreshRSS/FreshRSS/pull/8959), [#8958](https://github.com/FreshRSS/FreshRSS/pull/8958), [#8962](https://github.com/FreshRSS/FreshRSS/pull/8962), [#8960](https://github.com/FreshRSS/FreshRSS/pull/8960), [#9148](https://github.com/FreshRSS/FreshRSS/pull/9148), [#9162](https://github.com/FreshRSS/FreshRSS/pull/9162), [#9165](https://github.com/FreshRSS/FreshRSS/pull/9165), [#9158](https://github.com/FreshRSS/FreshRSS/pull/9158), [#9159](https://github.com/FreshRSS/FreshRSS/pull/9159), [#9176](https://github.com/FreshRSS/FreshRSS/pull/9176), [#9178](https://github.com/FreshRSS/FreshRSS/pull/9178), [#9179](https://github.com/FreshRSS/FreshRSS/pull/9179), [#9219](https://github.com/FreshRSS/FreshRSS/pull/9219), [#9253](https://github.com/FreshRSS/FreshRSS/pull/9253), [#9254](https://github.com/FreshRSS/FreshRSS/pull/9254), [#9255](https://github.com/FreshRSS/FreshRSS/pull/9255), [#9257](https://github.com/FreshRSS/FreshRSS/pull/9257) ## 2026-05-20 FreshRSS 1.29.1 * Features * Accept `.txt` import of feed URLs in additional to e.g. OPML [#8818](https://github.com/FreshRSS/FreshRSS/pull/8818), [#8837](https://github.com/FreshRSS/FreshRSS/pull/8837) * New CLI for automatic periodic SQLite export with retention [#8819](https://github.com/FreshRSS/FreshRSS/pull/8819) * More feed info: last received date, publication date [#8799](https://github.com/FreshRSS/FreshRSS/pull/8799) * Bug fixing * Fix cookies with some browsers [#8867](https://github.com/FreshRSS/FreshRSS/pull/8867) * Fix search in shared user queries with empty results [#8863](https://github.com/FreshRSS/FreshRSS/pull/8863) * Fix XML errors with loading invalid OPML in `lib_opml` library [#8652](https://github.com/FreshRSS/FreshRSS/pull/8652), [#8853](https://github.com/FreshRSS/FreshRSS/pull/8853), [lib_opml#48](https://framagit.org/marienfressinaud/lib_opml/-/merge_requests/48), [lib_opml#51](https://framagit.org/marienfressinaud/lib_opml/-/merge_requests/51) * Fix ensure maximum number of feeds also with Dynamic OPML [#8832](https://github.com/FreshRSS/FreshRSS/pull/8832) * Fix click mark as read [#8817](https://github.com/FreshRSS/FreshRSS/pull/8817) * UI * Improve browser compatibility to keep mobile navigation at the bottom [#8833](https://github.com/FreshRSS/FreshRSS/pull/8833) * Improve support of older/simpler Web browsers/engines such as SeaMonkey [#8810](https://github.com/FreshRSS/FreshRSS/pull/8810), [#8811](https://github.com/FreshRSS/FreshRSS/pull/8811), [#8813](https://github.com/FreshRSS/FreshRSS/pull/8813), * Improve *Swage* theme [#8842](https://github.com/FreshRSS/FreshRSS/pull/8842) * Rename *Nord theme* to *Nord* [#8805](https://github.com/FreshRSS/FreshRSS/pull/8805) * Replace GIF spinner by CSS spinner [#8804](https://github.com/FreshRSS/FreshRSS/pull/8804), [#8812](https://github.com/FreshRSS/FreshRSS/pull/8812) * Various UI and style improvements: [#8800](https://github.com/FreshRSS/FreshRSS/pull/8800), [#8816](https://github.com/FreshRSS/FreshRSS/pull/8816), * I18n * Improve Brazilian Portuguese [#8846](https://github.com/FreshRSS/FreshRSS/pull/8846) * Improve Dutch [#8868](https://github.com/FreshRSS/FreshRSS/pull/8868) * Improve German [#8840](https://github.com/FreshRSS/FreshRSS/pull/8840) * Improve Polish [#8854](https://github.com/FreshRSS/FreshRSS/pull/8854) * Improve Russian [#8861](https://github.com/FreshRSS/FreshRSS/pull/8861) * Improve Traditional Chinese [#8849](https://github.com/FreshRSS/FreshRSS/pull/8849) * Misc. * Update dev dependencies [#8858](https://github.com/FreshRSS/FreshRSS/pull/8858), [#8864](https://github.com/FreshRSS/FreshRSS/pull/8864) ## 2026-05-10 FreshRSS 1.29.0 * Features * New sort order preferences at global, category, and feed levels [#8234](https://github.com/FreshRSS/FreshRSS/pull/8234) * New filtering by date of *Server modification date* [#8131](https://github.com/FreshRSS/FreshRSS/pull/8131), [#8576](https://github.com/FreshRSS/FreshRSS/pull/8576) * Corresponding search operator, e.g. `mdate:P1D` for finding articles modified by the author / server during the past day. * Especially useful for optimising the API synchronisation. * Use feed-provided icon [#8633](https://github.com/FreshRSS/FreshRSS/pull/8633) * New option to automatically mark new articles as read if an identical GUID already exists in the same category [#8673](https://github.com/FreshRSS/FreshRSS/pull/8673) * Automatic feed visibility/priority during search [#8609](https://github.com/FreshRSS/FreshRSS/pull/8609) * Add feed visibility filter to statistics view *unread dates* [#8489](https://github.com/FreshRSS/FreshRSS/pull/8489) * Add option to enable/disable notifications, also for PWA [#8458](https://github.com/FreshRSS/FreshRSS/pull/8458) * Add a form to create new user queries on the *User Queries* page [#8623](https://github.com/FreshRSS/FreshRSS/pull/8623) * Allow WebSub hub push from same private network [#8450](https://github.com/FreshRSS/FreshRSS/pull/8450) * Support category field in JSON feed import [#8786](https://github.com/FreshRSS/FreshRSS/pull/8786) * Bug fixing * Fix wrong search `toString` in case of regex-looking string [#8479](https://github.com/FreshRSS/FreshRSS/pull/8479) * Fix article *last seen date* in case of feed errors [#8646](https://github.com/FreshRSS/FreshRSS/pull/8646) * Fix search expansion with backslash [#8497](https://github.com/FreshRSS/FreshRSS/pull/8497) * Fix user query parsing [#8543](https://github.com/FreshRSS/FreshRSS/pull/8543) * Fix search in shared user queries [#8789](https://github.com/FreshRSS/FreshRSS/pull/8789) * Fix redirect to wrong view after mark as read in *reader* and *global* views [#8552](https://github.com/FreshRSS/FreshRSS/pull/8552) * Fix SQLite paging when sorting by article length [#8594](https://github.com/FreshRSS/FreshRSS/pull/8594) * Fix change sorting during paging [#8688](https://github.com/FreshRSS/FreshRSS/pull/8688) * Fix SQL keyset pagination when sorting by category name [#8597](https://github.com/FreshRSS/FreshRSS/pull/8597) * Fix SQL duplicates in the user labels when sorting randomly [#8626](https://github.com/FreshRSS/FreshRSS/pull/8626) * Fix wrong error redirect in subscription management [#8625](https://github.com/FreshRSS/FreshRSS/pull/8625) * Fix do not include hidden feeds when counting total number of unread articles [#8715](https://github.com/FreshRSS/FreshRSS/pull/8715) * Update user modify date when changing extensions UserJS / UserCSS [#8607](https://github.com/FreshRSS/FreshRSS/pull/8607) * Non-strict OPML export [#eedefb](https://github.com/FreshRSS/FreshRSS/commit/eedefbd9fedbb14d3387b6b036afa64f75de4610) * Security * Limit cURL to protocols HTTP, HTTPS [#8713](https://github.com/FreshRSS/FreshRSS/pull/8713) * Better sanitise favicon URLs [#8714](https://github.com/FreshRSS/FreshRSS/pull/8714) * New setting for `