ChangeLog 82 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670
  1. Version 2.2.1 (September 28, 2024)
  2. ----------------------------------
  3. * refactor: split processor package into smaller files
  4. * fix(mediaproxy): forward client user-agent to origin to bypass bot protection
  5. * fix: use root URL to generate absolute proxy URL
  6. * fix: remove progression save on shared entry
  7. * fix: add datasource variable and upgrade depecrated panels on the Grafana dashboard
  8. * feat(locale): update zh_CN translations
  9. * feat(locale): update Ukrainian translations
  10. * feat(locale): update Spanish translations
  11. * feat(locale): update Dutch translations
  12. * feat: use Bilibili API instead of web scraping to get videos watch time
  13. * feat: add pagination to shared entries listing
  14. * feat: add button to show only starred entries per category
  15. * build(deps): bump `golang.org/x/term` from `0.23.0` to `0.24.0`
  16. * build(deps): bump `golang.org/x/oauth2` from `0.22.0` to `0.23.0`
  17. * build(deps): bump `golang.org/x/net` from `0.28.0` to `0.29.0`
  18. * build(deps): bump `github.com/PuerkitoBio/goquery` from `1.9.2` to `1.10.0`
  19. * build(deps): bump `github.com/prometheus/client_golang` from `1.20.3` to `1.20.4`
  20. * build(deps): bump `github.com/go-webauthn/webauthn` from `0.10.2` to `0.11.2`
  21. * build: update go.mod to Go 1.23
  22. * build: bump devcontainer version to go 1.23
  23. Version 2.2.0 (August 18, 2024)
  24. -------------------------------
  25. * refactor: simplify Youtube feeds discovery
  26. * fix(integration): define content encoding explicitly when sending article body to Readeck
  27. * fix(fever): correct sorting direction when using `max_id` argument
  28. * fix(client): Return `nil` and error if endpoint is an empty string
  29. * fix: video poster image URL is encoded twice when using `MEDIA_PROXY_MODE=all`
  30. * fix: use `BASE_URL` instead of `r.Host` to generate absolute media proxy URL
  31. * fix: panic during YouTube channel feed discovery
  32. * fix: honor `hide_globally` when creating a new feed through the api
  33. * fix: align pagination correctly on small screens with non-English text
  34. * fix: `store.GetEnclosure()` should return `nil` if no rows are returned
  35. * feat(locale): update Turkish translations
  36. * feat(locale): update French translations
  37. * feat(locale): update Chinese` translations
  38. * feat(integration): add ntfy integration
  39. * feat(api): add API routes `/v1/enclosures/{enclosureID}`
  40. * feat: validate `OAUTH2_PROVIDER` config option value
  41. * feat: remove YouTube video page subscription finder because `meta[itemprop="channelId"]` no longer exists
  42. * feat: remove well-known URL parameter trackers
  43. * feat: mark media as read when playback reaches 90%
  44. * feat: change log level to info when running migrations
  45. * feat: allow customizing the display name of the OpenID Connect provider
  46. * feat: add support for `base` HTML element when discovering feeds
  47. * feat: add support for `aside` HTML element in entry content
  48. * feat: Add option to disable local auth form
  49. * feat: add license info to Javascript files for LibreJS compatibility
  50. * feat: add `FETCH_BILIBILI_WATCH_TIME` config option
  51. * docs: update links to filtering rules
  52. * chore: avoid using legacy key/value format in Dockerfile
  53. * build(deps): bump `golang.org/x/oauth2` from `0.21.0` to `0.22.0`
  54. * build(deps): bump `golang.org/x/net` from `0.27.0` to `0.28.0`
  55. * build(deps): bump `golang.org/x/crypto` from `0.25.0` to `0.26.0`
  56. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.20.36` to `2.20.37`
  57. * build(deps): bump `github.com/prometheus/client_golang`
  58. * build: update GitHub Actions to Go 1.23
  59. * build: publish OCI images only if `PUBLISH_DOCKER_IMAGES=true`
  60. * build: bump Alpine Linux build image to v3.20
  61. * build: add sha256 checksum file for published binaries
  62. Version 2.1.4 (July 9, 2024)
  63. ----------------------------
  64. * test: add unit tests for `IsModified()` behaviour
  65. * refactor: improve YouTube page feed detection
  66. * fix(ui): settings form is not populated correctly after validation errors
  67. * fix(ui): playback speed indicator precision
  68. * fix(ui): playback speed indicator on shared entries
  69. * fix(integration): preserve existing Pinboard bookmarks
  70. * fix(googlereader): set `CrawlTimeMsec` to the correct precision
  71. * fix(build): failed to solve container image `arm64v8/golang:1.22-bookworm`
  72. * fix(build): add `distroless` suffix on `latest` tag in GitHub workflow
  73. * fix: use `ETag` as a stronger validator than `Last-Modified`
  74. * fix: update `theverge.com` rewrite rule to avoid duplicate image
  75. * fix: incorrect Go package comment `reader/readingtime`
  76. * fix: error out for improper rewrite regexp when processing feed entries
  77. * fix: ensures that session cookies are not expiring before the session is cleaned up from the database as per `CLEANUP_REMOVE_SESSIONS_DAYS`
  78. * fix: `<img>` aspect ratio with `height: auto`
  79. * feat(ui): add `viewport-fit=cover`
  80. * feat(sanitizer): add support for HTML hidden attribute
  81. * feat(locale): update French translations
  82. * feat(integration): add Raindrop integration
  83. * feat(integration): add feed name to Telegram message
  84. * feat(integration): add Betula integration
  85. * feat: use of insecure TLS ciphers when "Allow self-signed or invalid certificates" is enabled to workaround some broken websites
  86. * feat: discover feeds from a Youtube playlist pages
  87. * feat: add navigation to last/first page
  88. * feat: add global block and keep filters
  89. * feat: add description field to feed settings
  90. * feat: add `pitchfork.com` scraping rule
  91. * feat: add `FETCH_NEBULA_WATCH_TIME` config option
  92. * Bump `github.com/PuerkitoBio/goquery` from` 1.9.1` to` 1.9.2`
  93. * Bump `github.com/prometheus/client_golang` from `1.19.0` to `1.19.1`
  94. * build(deps): bump `library/alpine` in `/packaging/docker/alpine`
  95. * build(deps): bump `golangci/golangci-lint-action` from `4` to `6`
  96. * build(deps): bump `golang.org/x/term` from `0.19.0` to `0.22.0`
  97. * build(deps): bump `golang.org/x/oauth2` from `0.19.0` to `0.21.0`
  98. * build(deps): bump `golang.org/x/net` from `0.22.0` to `0.27.0`
  99. * build(deps): bump `golang.org/x/crypto` from `0.24.0` to `0.25.0`
  100. * build(deps): bump `github.com/yuin/goldmark` from `1.7.1` to `1.7.4`
  101. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.20.20` to `2.20.36`
  102. * build(deps): bump `github.com/coreos/go-oidc/v3` from `3.10.0` to `3.11.0`
  103. * build(deps): bump `docker/build-push-action` from `5` to `6`
  104. Version 2.1.3 (April 27, 2024)
  105. ------------------------------
  106. * `api`: `rand.Intn(math.MaxInt64)` causes tests to fail on 32-bit architectures (use `rand.Int()` instead)
  107. * `ci`: use `docker/metadata-action` instead of deprecated shell-scripts
  108. * `database`: remove `entries_feed_url_idx` index because entry URLs can exceeds btree index size limit
  109. * `finder`: find feeds from YouTube playlist
  110. * `http/response`: add brotli compression support
  111. * `integration/matrix`: fix function name in comment
  112. * `packaging`: specify container registry explicitly (e.g., Podman does not use `docker.io` by default)
  113. * `packaging`: use `make miniflux` instead of duplicating `go build` arguments (this leverages Go's PIE build mode)
  114. * `reader/fetcher`: add brotli content encoding support
  115. * `reader/processor`: minimize feed entries HTML content
  116. * `reader/rewrite`: add a rule for `oglaf.com`
  117. * `storage`: change `GetReadTime()` function to use `entries_feed_id_hash_key` index
  118. * `ui`: add seek and speed controls to media player
  119. * `ui`: add tag entries page
  120. * `ui`: fix JavaScript error when clicking on unread counter
  121. * `ui`: use `FORCE_REFRESH_INTERVAL` config for category refresh
  122. * Bump `github.com/tdewolff/minify/v2` from `2.20.19` to `2.20.20`
  123. * Bump `golang.org/x/net` from `0.22.0` to `0.24.0`
  124. * Bump `golang.org/x/term` from `0.18.0` to `0.19.0`
  125. * Bump `golang.org/x/oauth2` from `0.18.0` to `0.19.0`
  126. * Bump `github.com/yuin/goldmark` from `1.7.0` to `1.7.1`
  127. Version 2.1.2 (March 30, 2024)
  128. ------------------------------
  129. * `api`: rewrite API integration tests without build tags
  130. * `ci`: add basic ESLinter checks
  131. * `ci`: enable go-critic linter and fix various issues detected
  132. * `ci`: fix JavaScript linter path in GitHub Actions
  133. * `cli`: avoid misleading error message when creating an admin user automatically
  134. * `config`: add `FILTER_ENTRY_MAX_AGE_DAYS` option
  135. * `config`: bump the number of simultaneous workers
  136. * `config`: rename `PROXY_*` options to `MEDIA_PROXY_*`
  137. * `config`: use `crypto.GenerateRandomBytes` instead of doing it by hand
  138. * `http/request`: refactor conditions to be more idiomatic
  139. * `http/response`: remove legacy `X-XSS-Protection` header
  140. * `integration/rssbrige`: fix rssbrige import
  141. * `integration/shaarli`: factorize the header+payload concatenation as data
  142. * `integration/shaarli`: no need to base64-encode then remove the padding when we can simply encode without padding
  143. * `integration/shaarli`: the JWT token was declared as using HS256 as algorithm, but was using HS512
  144. * `integration/webhook`: add category title to request body
  145. * `locale`: update Turkish translations
  146. * `man page`: sort config options in alphabetical order
  147. * `mediaproxy`: reduce the internal indentation of `ProxifiedUrl` by inverting some conditions
  148. * `mediaproxy`: simplify and refactor the package
  149. * `model`: replace` Optional{Int,Int64,Float64}` with a generic function `OptionalNumber()`
  150. * `model`: use struct embedding for `FeedCreationRequestFromSubscriptionDiscovery` to reduce code duplication
  151. * `reader/atom`: avoid debug message when the date is empty
  152. * `reader/atom`: change `if !a { a = } if !a {a = }` constructs into `if !a { a = ; if !a {a = }}` to reduce the number of comparisons and improve readability
  153. * `reader/atom`: Move the population of the feed's entries into a new function, to make BuildFeed easier to understand/separate concerns/implementation details
  154. * `reader/atom`: refactor Atom parser to use an adapter
  155. * `reader/atom`: use `sort+compact` instead of `compact+sort` to remove duplicates
  156. * `reader/atom`: when detecting the format, detect its version as well
  157. * `reader/encoding`: inline a one-liner function
  158. * `reader/handler`: fix force refresh feature
  159. * `reader/json`: refactor JSON Feed parser to use an adapter
  160. * `reader/media`: remove a superfluous error-check: `strconv.ParseInt` returns `0` when passed an empty string
  161. * `reader/media`: simplify switch-case by moving a common condition above it
  162. * `reader/processor`: compile block/keep regex only once per feed
  163. * `reader/rdf`: refactor RDF parser to use an adapter
  164. * `reader/rewrite`: inline some one-line functions
  165. * `reader/rewrite`: simplify `removeClickbait`
  166. * `reader/rewrite`: transform a free-standing function into a method
  167. * `reader/rewrite`: use a proper constant instead of a magic number in `applyFuncOnTextContent`
  168. * `reader/rss`: add support for `<media:category>` element
  169. * `reader/rss`: don't add empty tags to RSS items
  170. * `reader/rss`: refactor RSS parser to use a default namespace to avoid some limitations of the Go XML parser
  171. * `reader/rss`: refactor RSS Parser to use an adapter
  172. * `reader/rss`: remove some duplicated code in RSS parser
  173. * `reader`: ensure that enclosure URLs are always absolute
  174. * `reader`: move iTunes and GooglePlay XML definitions to their own packages
  175. * `reader`: parse podcast categories
  176. * `reader`: remove trailing space in `SiteURL` and `FeedURL`
  177. * `storage`: do not store empty tags
  178. * `storage`: simplify `removeDuplicates()` to use a `sort`+`compact` construct instead of doing it by hand with a hashmap
  179. * `storage`: Use plain strings concatenation instead of building an array and then joining it
  180. * `timezone`: make sure the tests pass when the timezone database is not installed on the host
  181. * `ui/css`: align `min-width` with the other `min-width` values
  182. * `ui/css`: fix regression: "Add to Home Screen" button is unreadable
  183. * `ui/js`: don't use lambdas to return a function, use directly the function instead
  184. * `ui/js`: enable trusted-types
  185. * `ui/js`: fix download button loading label
  186. * `ui/js`: fix JavaScript error on the login page when the user not authenticated
  187. * `ui/js`: inline one-line functions
  188. * `ui/js`: inline some `querySelectorAll` calls
  189. * `ui/js`: reduce the scope of some variables
  190. * `ui/js`: remove a hack for "Chrome 67 and earlier" since it was released in 2018
  191. * `ui/js`: replace `DomHelper.findParent` with `.closest`
  192. * `ui/js`: replace `let` with `const`
  193. * `ui/js`: simplify `DomHelper.getVisibleElements` by using a `filter` instead of a loop with an index
  194. * `ui/js`: use a `Set` instead of an array in a `KeyboardHandler`'s member
  195. * `ui/js`: use some ternaries where it makes sense
  196. * `ui/static`: make use of `HashFromBytes` everywhere
  197. * `ui/static`: set minifier ECMAScript version
  198. * `ui`: add keyboard shortcuts for scrolling to top/bottom of the item list
  199. * `ui`: add media player control playback speed
  200. * `ui`: remove unused variables and improve JSON decoding in `saveEnclosureProgression()`
  201. * `validator`: display an error message on edit feed page when the feed URL is not unique
  202. * Bump `github.com/coreos/go-oidc/v3` from `3.9.0` to `3.10.0`
  203. * Bump `github.com/go-webauthn/webauthn` from `0.10.1` to `0.10.2`
  204. * Bump `github.com/tdewolff/minify/v2` from `2.20.18` to `2.20.19`
  205. * Bump `google.golang.org/protobuf` from `1.32.0` to `1.33.0`
  206. Version 2.1.1 (March 10, 2024)
  207. -----------------------------
  208. * Move search form to a dedicated page
  209. * Add Readeck integration
  210. * Add feed option to disable HTTP/2 to avoid fingerprinting
  211. * Add `Enter` key as a hotkey to open selected item
  212. * Proxify `video` element `poster` attribute
  213. * Add a couple of new possible locations for feeds
  214. * Hugo likes to generate `index.xml`
  215. * `feed.atom` and `feed.rss` are used by enterprise-scale/old-school gigantic CMS
  216. * Fix categories import from Thunderbird's OPML
  217. * Fix logo misalignment when using languages that are more verbose than English
  218. * Google Reader: Do not return a 500 error when no items is returned
  219. * Handle RDF feeds with duplicated `<title>` elements
  220. * Sort integrations alphabetically
  221. * Add more URL validation in media proxy
  222. * Add unit test to ensure each translation has the correct number of plurals
  223. * Add missing plurals for some languages
  224. * Makefile: quiet `git describe` and `rev-parse` stderr: When building from a tarball instead of a cloned git repo, there would be two `fatal: not a git repository` errors emitted even though the build succeeds. This is because of how `VERSION` and `COMMIT` are set in the Makefile. This PR suppresses the stderr for these variable assignments.
  225. * Makefile: do not force `CGO_ENABLED=0` for `miniflux` target
  226. * Add GitHub Action pipeline to build packages on-demand
  227. * Remove Golint (deprecated), use `staticcheck` and `golangci-lint` instead
  228. * Build amd64/arm64 Debian packages with CGO disabled
  229. * Update `go.mod` and add `.exe` suffix to Windows binary
  230. * Add a couple of fuzzers
  231. * Fix CodeQL workflow
  232. * Code and performance improvements:
  233. * Use an `io.ReadSeeker` instead of an `io.Reader` to parse feeds
  234. * Speed up the sanitizer:
  235. - Allow Youtube URLs to start with `www`
  236. - Use `strings.Builder` instead of a `bytes.Buffer`
  237. - Use a `strings.NewReader` instead of a `bytes.NewBufferString`
  238. - Sprinkles a couple of `continue` to make the code-flow more obvious
  239. - Inline calls to `inList`, and put their parameters in the right order
  240. - Simplify `isPixelTracker`
  241. - Simplify `isValidIframeSource`, by extracting the hostname and comparing it directly, instead of using the full url and checking if it starts with multiple variations of the same one (`//`, `http:`, `https://` multiplied by `/www.`)
  242. - Add a benchmark
  243. - Instead of having to allocate a ~100 keys map containing possibly dynamic values (at least to the go compiler), allocate it once in a global variable. This significantly speeds things up, by reducing the garbage
  244. - Use constant time access for maps instead of iterating on them
  245. - Build a ~large whitelist map inline instead of constructing it item by item (and remove a duplicate key/value pair)
  246. - Use `slices` instead of hand-rolled loops
  247. collector/allocator involvements.
  248. * Reuse a `Reader` instead of copying to a buffer when parsing an Atom feed
  249. * Preallocate memory when exporting to OPML: This should marginally increase performance when exporting a large amount of feeds to OPML
  250. * Delay call of `view.New` after logging the user in: There is no need to do extra work like creating a session and its associated view until the user has been properly identified and as many possibly-failing sql request have been successfully run
  251. * Use constant-time comparison for anti-csrf tokens: This is probably completely overkill, but since anti-csrf tokens are secrets, they should be compared against untrusted inputs in constant time
  252. * Simplify and optimize `genericProxyRewriter`
  253. - Reduce the amount of nested loops: it's preferable to search the whole page once and filter on it (even with filters that should always be false), than searching it again for every element we're looking for.
  254. - Factorize the proxying conditions into a `shouldProxy` function to reduce the copy-pasta.
  255. * Speed up `removeUnlikelyCandidates`: `.Not` returns a brand new `Selection`, copied element by element
  256. * Improve `EstimateReadingTime`'s speed by a factor 7
  257. - Refactorise the tests and add some
  258. - Use 250 signs instead of the whole text
  259. - Only check for Korean, Chinese and Japanese script
  260. - Add a benchmark
  261. - Use a more idiomatic control flow
  262. * Don't compute reading-time when unused: If the user doesn't display reading times, there is no need to compute them. This should speed things up a bit, since `whatlanggo.Detect` is abysmally slow.
  263. * Simplify `username` generation for the integration tests: No need to generate random numbers 10 times, generate a single big-enough one. A single int64 should be more than enough
  264. * Add missing regex anchor detected by CodeQL
  265. * Don't mix up slices capacity and length
  266. * Use prepared statements for intervals, `ArchiveEntries` and `updateEnclosures`
  267. * Use modern for-loops introduced with Go 1.22
  268. * Remove a superfluous condition: No need to check if the length of `line` is positive since we're checking afterwards that it contains the `=` sign
  269. * Close resources as soon as possible, instead of using `defer()` in a loop
  270. * Remove superfluous escaping in a regex
  271. * Use `strings.ReplaceAll` instead of `strings.Replace(…, -1)`
  272. * Use `strings.EqualFold` instead of `strings.ToLower(…) ==`
  273. * Use `.WriteString(` instead of `.Write([]byte(…`
  274. * Use `%q` instead of `"%s"`
  275. * Make `internal/worker/worker.go` read-only
  276. * Use a switch-case construct in `internal/locale/plural.go` instead of an avalanche of `if`
  277. * Template functions: simplify `formatFileSize` and `duration` implementation
  278. * Inline some templating functions
  279. * Make use of `printer.Print` when possible
  280. * Add a `printer.Print` to `internal/locale/printer.go`: No need to use variadic functions with string format interpolation to generate static strings
  281. * Minor code simplification in `internal/ui/view/view.go`: No need to create the map item by item when we can create it in one go
  282. * Build the map inline in `CountAllFeeds()`: No need to build an empty map to then add more fields in it one by one
  283. * Miscellaneous improvements to `internal/reader/subscription/finder.go`:
  284. - Surface `localizedError` in `FindSubscriptionsFromWellKnownURLs` via `slog`
  285. - Use an inline declaration for new subscriptions, like done elsewhere in the
  286. file, if only for consistency's sake
  287. - Preallocate the `subscriptions` slice when using an RSS-bridge,
  288. * Use an update-where for `MarkCategoryAsRead` instead of a subquery
  289. * Simplify `CleanOldUserSessions`' query: No need for a subquery, filtering on `created_at` directly is enough
  290. * Simplify `cleanupEntries`' query
  291. - `NOT (hash=ANY(%4))` can be expressed as `hash NOT IN $4`
  292. - There is no need for a subquery operating on the same table, moving the conditions out is equivalent.
  293. * Reformat `ArchiveEntries`'s query for consistency's sake and replace the `=ANY` with an `IN`
  294. * Reformat the query in `GetEntryIDs` and `GetReadTime`'s query for consistency's sake
  295. * Simplify `WeeklyFeedEntryCount`: No need for a `BETWEEN`: we want to filter on entries published in the last week, no need to express is as "entries published between now and last week", "entries published after last week" is enough
  296. * Add some tests for `add_image_title`
  297. * Remove `github.com/google/uuid` dependencies: Replace it with a hand-rolled implementation. Heck, an UUID isn't even a requirement according to Omnivore API docs
  298. * Simplify `internal/reader/icon/finder.go`:
  299. - Use a simple regex to parse data uri instead of a hand-rolled parser, and document what fields are considered mandatory.
  300. - Use case-insensitive matching to find (fav)icons, instead of doing the same query twice with different letter cases
  301. - Add `apple-touch-icon-precomposed.png` as a fallback `favicon`
  302. - Reorder the queries to have `icon` first, since it seems to be the most popular one. It used to be last, meaning that pages had to be parsed completely 4 times, instead of one now.
  303. - Minor factorisation in `findIconURLsFromHTMLDocument`
  304. * Small refactoring of `internal/reader/date/parser.go`:
  305. - Split dates formats into those that require local times and those who don't, so that there is no need to have a switch-case in the for loop with around 250 iterations at most.
  306. - Be more strict when it comes to timezones, previously invalid ones like -13 were accepted. Also add a test for this.
  307. - Bail out early if the date is an empty string.
  308. * Make use of Go ≥ 1.21 slices package instead of hand-rolled loops
  309. * Reorder the fields of the `Entry` struct to save some memory
  310. * Dependencies update:
  311. * Bump `golang.org/x/oauth2` from `0.17.0` to `0.18.0`
  312. * Bump `github.com/prometheus/client_golang` from `1.18.0` to `1.19.0`
  313. * Bump `github.com/tdewolff/minify/v2` from `2.20.16` to `2.20.18`
  314. * Bump `github.com/PuerkitoBio/goquery` from `1.8.1` to `1.9.1`
  315. * Bump `golang.org/x/crypto` from `0.19.0` to `0.20.0`
  316. * Bump `github.com/go-jose/go-jose/v3` from `3.0.1` to `3.0.3`
  317. Version 2.1.0 (February 17, 2024)
  318. ---------------------------------
  319. * Add Linkwarden integration
  320. * Add LinkAce integration
  321. * Add `FORCE_REFRESH_INTERVAL` config option
  322. * Add `item-meta-info-reading-time` CSS class
  323. * Add `add_dynamic_iframe` rewrite function
  324. * Add attribute `data-original-mos` to `add_dynamic_image` rewrite candidates
  325. * Update entry processor to allow blocking/keeping entries by tags and/or authors
  326. * Change default `Accept` header when fetching feeds
  327. * Rewrite relative RSS Bridge URL to absolute URL
  328. * Use numeric user ID in Alpine and distroless container image (avoid `securityContext` error in Kubernetes)
  329. * Always try to use HTTP/2 when fetching feeds if available
  330. * Add `type` attribute in OPML export as per OPML 2.0 specs
  331. * Fix missing translation argument for the key `error.unable_to_parse_feed`
  332. * Fix Debian package builder when using Go 1.22 and `armhf` architecture
  333. * Fix typo in log message
  334. * Fix incorrect label shown when saving an article
  335. * Fix incorrect condition in refresh feeds cli
  336. * Fix incorrect label `for` attribute
  337. * Add missing label ID for custom CSS field
  338. * Accessibility improvements:
  339. * Add workaround for macOS VoiceOver that didn't announce `details` and `summary` when expanded
  340. * Add `alert` role to alert message element
  341. * Add a `h2` heading to the article element so that the screen reader users can navigate the article through the heading level
  342. * Add an `aria-label` attribute for the article element for screen readers
  343. * Remove the icon image `alt` attribute in feeds list to prevent screen reader to announce it before entry title
  344. * Add `sr-only` CSS class for screen reader users (provides more context)
  345. * Differentiate between buttons and links
  346. * Change links that could perform actions to buttons
  347. * Improve translation of hidden Aria elements
  348. * Remove the redundant article role
  349. * Add a search landmark for the search form so that the screen reader users can navigate to it
  350. * Add skip to content link
  351. * Add `nav` landmark to page header links
  352. * Limit feed/category entry pagination to unread entries when coming from unread entry list
  353. * Update German translation
  354. * Update GitHub Actions to Go 1.22
  355. * Bump `golang.org/x/term` from `0.16.0` to `0.17.0`
  356. * Bump `github.com/google/uuid` from `1.5.0` to `1.6.0`
  357. * Bump `github.com/yuin/goldmark` from `1.6.0` to `1.7.0`
  358. * Bump `golang.org/x/oauth2` from `0.15.0` to `0.17.0`
  359. * Bump `github.com/tdewolff/minify/v2` from `2.20.10` to `2.20.12`
  360. * Bump `golang.org/x/term` from `0.15.0` to `0.16.0`
  361. * Bump `github.com/prometheus/client_golang` from `1.17.0` to `1.18.0`
  362. * Bump `github.com/tdewolff/minify/v2` from `2.20.9` to `2.20.16`
  363. * Bump `golang.org/x/crypto` from `0.16.0` to `0.19.0`
  364. * Bump `github.com/go-webauthn/webauthn` from `0.9.4` to` 0.10.1`
  365. * Bump `golang.org/x/net` from `0.20.0` to `0.21.0`
  366. Version 2.0.51 (December 13, 2023)
  367. ----------------------------------
  368. * Add Omnivore integration
  369. * Fixes for the regressions introduced in version 2.0.50:
  370. * Ensure all HTML documents are encoded in UTF-8
  371. * Send default User-Agent and HTTP caching headers when making HTTP requests
  372. * Allow Youtube links to be opened outside the `iframe` (avoid `ERR_BLOCKED_BY_RESPONSE` error)
  373. * Fix inaccessible metrics endpoint when listening on Unix socket
  374. * Allow renaming and moving feed at the same time in the Google Reader API
  375. * Log `nb_jobs` only when number of jobs is larger than 0 in background scheduler
  376. * Deduplicate feed URLs when parsing HTML document during discovery process
  377. * Calculate a virtual weekly count based on the average updating frequency (`POLLING_SCHEDULER=entry_frequency`)
  378. * Update GitHub Actions workflow to be able to run the linter and tests on-demand
  379. * Add `SCHEDULER_ROUND_ROBIN_MIN_INTERVAL` config option
  380. * Add links to GitHub for the commit hash and the version in the about page
  381. * Use "starred" rather than "bookmarked" in English translation
  382. * Update Chinese (CN & TW) translation
  383. * Bump `github.com/google/uuid` from `1.4.0` to `1.5.0`
  384. * Bump `github.com/coreos/go-oidc/v3` from `3.7.0` to `3.9.0`
  385. * Bump `github.com/tdewolff/minify/v2` from `2.20.6` to `2.20.9`
  386. * Bump `github.com/go-webauthn/webauthn` from `0.8.6` to `0.9.4`
  387. * Bump `golang.org/x/oauth2` from `0.14.0` to `0.15.0`
  388. Version 2.0.50 (November 12, 2023)
  389. ----------------------------------
  390. * Add WebAuthn / Passkey integration
  391. * Add RSS-Bridge integration
  392. * Take RSS TTL field into consideration to schedule next check date
  393. * Show number of visible entries instead of number of read entries in feed list
  394. * OpenID Connect: Redirect to configured user home page after successful authentication
  395. * Google Reader API fixes:
  396. * `user/{userID}/state/com.google/read` is missing in categories section for read entries
  397. * Take `ExcludeTargets` into consideration in feed stream handler
  398. * Allow iframes pointing to Twitch videos
  399. * Filter feed entries based on URL or title
  400. * Take into consideration `hide_globally` property defined for categories in `/v1/entries` API endpoint
  401. * Add category ID to webhooks request body
  402. * Update date parser to parse more invalid date formats
  403. * Refactor feed discovery handler, and avoid an extra HTTP request if the URL provided is the feed
  404. * Refactor HTTP Client and `LocalizedError` packages
  405. * Refactor Batch Builder, and prevent accidental and excessive refreshes from the web UI
  406. * Refactor icon finder:
  407. - Continue the discovery process when the feed icon is invalid
  408. - Search all icons from the HTML document and do not stop on the first one
  409. * Add support for SVG icons with data URL without encoding
  410. * Expose `next_check_at` in the web ui and API
  411. * Add database indexes to improve performance
  412. * Change log level to warning for failed feeds refresh in cronjob
  413. * Do not log website without icon as warning
  414. * Add GitHub workflow to build binaries
  415. * Add GitHub extensions to devcontainer
  416. * Make sure to pull the latest base image when building the Docker image
  417. * Strip version prefix when building Debian package
  418. * Add `github-cli` and `docker-outside-of-docker` features to devcontainer
  419. * Bump `golang.org/x/*` dependencies
  420. * Bump `github.com/gorilla/mux` from `1.8.0` to `1.8.1`
  421. * Bump `github.com/tdewolff/minify/v2` from `2.19.9` to `2.20.6`
  422. * Bump `github.com/yuin/goldmark` from `1.5.6` to `1.6.0`
  423. * Bump `github.com/coreos/go-oidc/v3` from `3.6.0` to `3.7.0`
  424. Version 2.0.49 (October 15, 2023)
  425. ---------------------------------
  426. * Implement structured logging using `log/slog` package. New config options available:
  427. * `LOG_FORMAT`: `json` or `text`
  428. * `LOG_LEVEL`: `debug`, `info`, `warning`, or `error`
  429. * `LOG_FILE`: `sdterr`, `stdout`, or a file path
  430. * The `DEBUG` option is now deprecated in favor of `LOG_LEVEL`
  431. * API Improvements:
  432. * Add endpoint `/v1/version`
  433. * Add endpoint `PUT /v1/entries` to update entry title and content
  434. * Add endpoint `/v1/icons/{iconID}`
  435. * Add endpoint `/v1/flush-history` to flush history
  436. * Make the category optional when creating feeds for API clients who don't support categories
  437. * Add enclosures to `GET /v1/entries` endpoint
  438. * Add `published_after`, `published_before`, `changed_after` and `changed_before` options to `/v1/entries` endpoint
  439. * Telegram integration improvements:
  440. * Replace feed HTML link with a button to avoid page preview issues
  441. * Add the possibility to disable buttons
  442. * Add Bruno Miniflux API collection in `contrib` folder (Bruno is an open source alternative to Postman/Insomnia)
  443. * Add command line argument to export user feeds as OPML
  444. * Add new rewrite rules `add_hn_links_using_hack` and `add_hn_links_using_opener` to open HN comments with iOS apps
  445. * Fix timestamp format for `Expires` response header
  446. * Fix Javascript error when reading time option is disabled
  447. * Fix Apprise logic to handle feed service URLs
  448. * Fix missing word in force refresh message
  449. * Remove deprecated `PreferServerCipherSuites` TLS option
  450. * Replace `github.com/rylans/getlang` with `github.com/abadojack/whatlanggo` because `getlang` doesn't seems to be updated anymore
  451. * Bump `github.com/mccutchen/go-httpbin/v2` from `2.11.0` to `2.11.1`
  452. * Bump `golang.org/x/*` dependencies
  453. Version 2.0.48 (September 15, 2023)
  454. -----------------------------------
  455. * Add generic webhook integration
  456. * Send webhook events when new entries are detected
  457. * Send wehbook events when saving an entry
  458. * Sign the outgoing requests with HMAC-SHA256
  459. * Improve Telegram integration
  460. * Add built-in Telegram client
  461. * Remove dependency on `go-telegram-bot-api` library
  462. * Add new options:
  463. * Optional topic ID
  464. * Disable page preview
  465. * Disable notifications
  466. * Add new button to go to article
  467. * Improve Matrix integration
  468. * Add built-in Matrix client
  469. * Remove dependency on `gomatrix` library
  470. * Send HTML formatted messages to Matrix
  471. * OpenID Connect authentication improvements:
  472. * Add OAuth2 PKCE support
  473. * Add `profile` scope to OIDC integration to support accounts without email address
  474. * Prevent empty username when using the OIDC integration
  475. * Add `factor` for `entry_frequency` scheduler:
  476. * Allow the user to increase the frequency of the `entry_frequency`
  477. scheduler by a configurable factor in order to shorten the time between
  478. updates.
  479. * Fix: status bar is unreadable when using PWA in dark mode on Firefox Android
  480. * Group form fields into fieldsets to improve page layout
  481. * Update Russian translation
  482. * Make sure icon URLs are always absolute
  483. * Add Apprise service URLs per feed
  484. * Trim `username` and `password` form fields
  485. * Strip HTML tags from DublinCore Creator tags
  486. * Fix scroll up behavior on Firefox Android
  487. * Add missing `return` statement in `fetchContent` UI handler
  488. * Add `replace_title` rewrite rule to adjust entry titles
  489. * Fix Pocket integration redirect URL and Google Reader API HREF
  490. * Fix feed `hide_globally` property to use it with third-party clients.
  491. Version 2.0.47 (August 20, 2023)
  492. --------------------------------
  493. * Update rules for `webtoons.com`
  494. * Use HTTP client from the standard library for third-party integrations
  495. * Rename internal `url` package to `urllib` to avoid overlap with `net/url`
  496. * Add Shaarli integration
  497. * Add Shiori integration
  498. * Add Apprise integration
  499. * Add Readwise Reader integration
  500. * Consider base path when generating third-party services API endpoint
  501. * Use podcast duration tag as reading time
  502. * Move internal packages to an `internal` folder
  503. * For reference: <https://go.dev/doc/go1.4#internalpackages>
  504. * Rename Miniflux package name to follow Go module naming convention
  505. * For reference: <https://go.dev/ref/mod#major-version-suffixes>
  506. * Update RockyLinux image from 8 to 9 (used to build RPM package)
  507. * Add force refresh in feed edit and feed entries page
  508. * Use Odysee video duration as read time
  509. * Upgrade to Go 1.21
  510. * Use details disclosure element to show the list of third-party services
  511. * Use Web Share API for sharing entry
  512. * Add a workaround for parsing some invalid date format
  513. * Add Thunder Client API collection into contrib folder
  514. * Add new API endpoint: `/entries/{entryID}/save`
  515. * Trigger Docker and packages workflows only for semantic tags
  516. * Go module versioning expect Git tags to start with the letter v.
  517. * The goal is to keep the existing naming convention for generated artifacts and
  518. have proper versioning for the Go module.
  519. * Bump `golang.org/x/*` dependencies
  520. * Bump `github.com/yuin/goldmark`
  521. * Bump `github.com/tdewolff/minify/v2`
  522. * Bump `github.com/mccutchen/go-httpbin/v2`
  523. Version 2.0.46 (July 21, 2023)
  524. ------------------------------
  525. * Add scraper and rewrite rules for Webtoons
  526. * Fix regression in integration page and simplify SQL query
  527. * Wallabag integration: add more information in log messages
  528. * Add support for custom Youtube embed URL
  529. * Fix accessibility issues in modal component
  530. * Fix modal aria role
  531. * Trap focusing with tab / shift+tab inside the modal
  532. * Restore keyboard focus when closing modal
  533. * Automatically move keyboard focus to first focusable element unless specified otherwise
  534. * Keyboard shortcut help modal: move keyboard focus to modal title
  535. * Keyboard shortcut help modal: change close control from link to button
  536. * Add Notion integration
  537. * Update `golang.org/x/*` dependencies and `go-oidc` to v3.6.0
  538. * Improve responsive design
  539. * Add user setting for marking entry as read on view
  540. * Improve Russian translation
  541. * Add the possibility to run cleanup tasks from the command line
  542. * Add the possibility to run Miniflux as a cronjob
  543. * Use `go-httpbin` to run tests locally and avoid remote calls to `httpbin.org`
  544. * Display tags when viewing entries
  545. * Update categories API endpoint to return `total_unread` and `feed_count`
  546. * Improve date parser to handle various broken date formats
  547. * Avoid `pq: time zone displacement out of range` errors
  548. * Improve entry existance check to make better use of index
  549. * Add unique index `enclosures_user_entry_url_idx`
  550. * Add mark as unread for Linkding integration
  551. * Add sub-folder support for Wallabag integration
  552. * Use RockyLinux to build RPM package
  553. * Disable CGO when building RPM package
  554. * Disable CGO when building Docker images
  555. Version 2.0.45 (June 21, 2023)
  556. ------------------------------
  557. * Add media player to listen to audio and video podcasts with the possiblity to resume to last playback position
  558. * Add default tag names for Linkding integration
  559. * Mark only globally visible entries when marking all entries from UI
  560. * Use image included in feed as feed icon when available
  561. * Order history by `changed_at` and `published_at`
  562. * Remove title attribute from entry title links
  563. * Fix reading time that is not aligned correctly with the latest version of Safari
  564. * Use glyphs of the same size on keyboard shortcuts page
  565. * Add maskable versions of the PWA icon
  566. * Replace copyright header with SPDX identifier
  567. * Remove the "í" letter from the Portuguese "lido" word
  568. * Increase golangci-lint timeout value
  569. * Bump `github.com/tdewolff/minify/v2`, `github.com/prometheus/client_golang`, `golang.org/x/*` dependencies
  570. Version 2.0.44 (May 6, 2023)
  571. ----------------------------
  572. * Add link to the URL rewrite rules documentation
  573. * Update scraping rules for `ilpost.it`
  574. * Update rewrite rules for `theverge.com`
  575. * Add a rewrite rule to remove clickbait titles
  576. * Make sure `PROXY_IMAGES` option is backward compatible with `PROXY_OPTION` and `PROXY_MEDIA_TYPES`
  577. * Add new rule to remove tables
  578. * Add support for searching well-known URLs in subdirectory
  579. * Add CSS `word-wrap` rule to break very long entry title into multiple lines
  580. * Add swipe as option for gesture navigation between entries. There are now 3 possible choices: `none`, `double-tap`, and `swipe`.
  581. * Prefer typographic punctuation in English translation
  582. * Process older entries first:
  583. - Feed entries are usually ordered from most to least recent.
  584. - Processing older entries first ensures that their creation timestamp
  585. is lower than that of newer entries.
  586. - This is useful when we order by creation, because then we get a
  587. consistent timeline.
  588. * Fix Grafana dashboard
  589. * Push Docker images to `Quay.io` (RedHat)
  590. * Bump `golang.org/x/*`, `github.com/lib/pq`, `mvdan.cc/xurls/v2` and `github.com/prometheus/client_golang` dependencies
  591. Version 2.0.43 (March 16, 2023)
  592. -------------------------------
  593. * Avoid XSS when opening a broken image due to unescaped ServerError in proxy handler (CVE-2023-27592)
  594. Creating an RSS feed item with the inline description containing an `<img>` tag
  595. with a `srcset` attribute pointing to an invalid URL like
  596. `http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error
  597. condition where the invalid URL is returned unescaped and in full.
  598. This results in JavaScript execution on the Miniflux instance as soon as the
  599. user is convinced to open the broken image.
  600. * Use `r.RemoteAddr` to check `/metrics` endpoint network access (CVE-2023-27591)
  601. HTTP headers like `X-Forwarded-For` or `X-Real-Ip` can be easily spoofed. As
  602. such, it cannot be used to test if the client IP is allowed.
  603. The recommendation is to use HTTP Basic authentication to protect the
  604. metrics endpoint, or run Miniflux behind a trusted reverse-proxy.
  605. * Add HTTP Basic authentication for `/metrics` endpoint
  606. * Add proxy support for several media types
  607. * Parse feed categories from RSS, Atom and JSON feeds
  608. * Ignore empty link when discovering feeds
  609. * Disable CGO explicitly to make sure the binary is statically linked
  610. * Add CSS classes to differentiate between category/feed/entry view and icons
  611. * Add rewrite and scraper rules for `blog.cloudflare.com`
  612. * Add `color-scheme` to themes
  613. * Add new keyboard shortcut to toggle open/close entry attachments section
  614. * Sanitizer: allow `id` attribute in `<sup>` element
  615. * Add Indonesian Language
  616. * Update translations
  617. * Update Docker Compose examples:
  618. - Run the application in one command
  619. - Bring back the health check condition to `depends_on`
  620. - Remove deprecated `version` element
  621. * Update scraping rules for `ilpost.it`
  622. * Bump `github.com/PuerkitoBio/goquery` from `1.8.0` to `1.8.1`
  623. * Bump `github.com/tdewolff/minify/v2` from `2.12.4` to `2.12.5`
  624. * Bump `github.com/yuin/goldmark` from `1.5.3` to `1.5.4`
  625. * Bump `golang.org/x/*` dependencies
  626. Version 2.0.42 (January 29, 2023)
  627. ---------------------------------
  628. * Fix header items wrapping
  629. * Add option to enable or disable double tap
  630. * Improve PWA display mode label in settings page
  631. * Bump `golang.org/x/*` dependencies
  632. * Update translations
  633. * Add scraping rule for `ilpost.it`
  634. * Update reading time HTML element after fetching the original web page
  635. * Add category feeds refresh feature
  636. Version 2.0.41 (December 10, 2022)
  637. ----------------------------------
  638. * Reverted PR #1290 (follow the only link) because it leads to several panics/segfaults that prevent feed updates
  639. * Disable double-tap mobile gesture if swipe gesture is disabled
  640. * Skip integrations if there are no entries to push
  641. * Enable TLS-ALPN-01 challenge for ACME
  642. - This type of challenge works purely at the TLS layer and is compatible
  643. with SNI proxies. The existing HTTP-01 challenge support has been left
  644. as-is.
  645. * Preconfigure Miniflux for GitHub Codespaces
  646. * Updated `golang.org/x/net/*` dependencies
  647. Version 2.0.40 (November 13, 2022)
  648. ----------------------------------
  649. * Update dependencies
  650. * Pin Postgres image version in Docker Compose examples to avoid unexpected upgrades
  651. * Make English and Spanish translation more consistent:
  652. - Use "Feed" everywhere instead of "Subscription"
  653. - Use "Entry" instead of "Article"
  654. * Allow Content-Type and Accept headers in CORS policy
  655. * Use dirs file for Debian package
  656. * Use custom home page in PWA manifest
  657. * Fix scraper rule that could be incorrect when there is a redirect
  658. * Improve web scraper to fetch the only link present as workaround to some landing pages
  659. * Add Matrix bot integration
  660. * Proxify images in API responses
  661. * Add new options in user preferences to configure sorting of entries in the category page
  662. * Remove dependency on `github.com/mitchellh/go-server-timing`
  663. * Add support for the `continuation` parameter and result for Google Reader API ID calls
  664. * Use automatic variable for build target file names
  665. * Add rewrite rule for `recalbox.com`
  666. * Improve Dutch translation
  667. Version 2.0.39 (October 16, 2022)
  668. ---------------------------------
  669. * Add support for date filtering in Google Reader API item ID calls
  670. * Handle RSS entries with only a GUID permalink
  671. * Go API Client: Accept endpoint URLs ending with `/v1/`
  672. * CORS API headers: Allow `Basic` authorization header
  673. * Log feed URL when submitting a subscription that returns an error
  674. * Update `make run` command to execute migrations automatically
  675. * Add option to send only the URL to Wallabag
  676. * Do not convert anchors to absolute links
  677. * Add config option to use a custom image proxy URL
  678. * Allow zoom on mobile devices
  679. * Add scraping rules for `theverge.com`, `royalroad.com`, `swordscomic.com`, and `smbc-comics.com`
  680. * Add Ukrainian translation
  681. * Update `golang.org/x/*` dependencies
  682. * Bump `github.com/tdewolff/minify/v2` from `2.12.0` to `2.12.4`
  683. * Bump `github.com/yuin/goldmark` from `1.4.13` to `1.5.2`
  684. * Bump `github.com/lib/pq` from `1.10.6` to `1.10.7`
  685. Version 2.0.38 (August 13, 2022)
  686. --------------------------------
  687. * Rename default branch from master to main
  688. * Update GitHub Actions
  689. * Bump `github.com/prometheus/client_golang` from `1.12.2` to `1.13.0`
  690. * Fix some linter issues
  691. * Handle Atom links with a text/html type defined
  692. * Add `parse_markdown` rewrite function
  693. * Build RPM and Debian packages automatically using GitHub Actions
  694. * Add `explosm.net` scraper rule
  695. * Make default home page configurable
  696. * Add title attribute to entry links because text could be truncated
  697. * Highlight categories with unread entries
  698. * Allow option to order by title and author in API entry endpoint
  699. * Update Russian translation
  700. * Make reading speed user-configurable
  701. * Added translation for Hindi language used in India
  702. * Add rewrite rules for article URL before fetching content
  703. * Bump `github.com/tdewolff/minify/v2` from `2.11.7` to `2.12.0`
  704. * Support other repo owners in GitHub Docker Action
  705. * Proxify empty URL should not crash
  706. * Avoid stretched image if specified width is larger than Miniflux's layout
  707. * Add support for OPML files with several nested outlines
  708. * sanitizer: handle image URLs in `srcset` attribute with comma
  709. * Allow `width` and `height` attributes for `img` tags
  710. * Document that `-config-dump` command line argument shows sensitive info
  711. * Add System-V init service in contrib folder
  712. * Fix syntax error in `RequestBuilder.getCsrfToken()` method
  713. Version 2.0.37 (May 27, 2022)
  714. -----------------------------
  715. * Add rewrite rule to decode base64 content
  716. * Add Linkding integration
  717. * Add comment button to Telegram message
  718. * Add API endpoint to fetch unread and read counters
  719. * Fixes logic bug in Google Reader API sanity check
  720. * Reduce number of CORS preflight check to save network brandwidth
  721. * Add Espial integration
  722. * Allow API search for entries which are not starred
  723. * Try to use outermost element text when title is empty
  724. * Make swipe gestures feel more natural
  725. - Removes opacity transition when swiping an article read/unread
  726. - Adds "resistance" to the swiped entry when the 75px threshold is
  727. reached
  728. - Fixes an issue in which a swiped article couldn't be moved <15px
  729. * Add support for feed streams to Google Reader API IDs API
  730. * Fix invalid parsing of icon data URL
  731. * Add Traditional Chinese translation
  732. * Add distroless Docker image variant
  733. * Add Go 1.18 to GitHub Action
  734. * Bump `github.com/tdewolff/minify/v2` from `2.10.0` to `2.11`
  735. * Bump `github.com/prometheus/client_golang` from `1.12.1` to `1.12.2`
  736. * Bump `github.com/lib/pq` from `1.10.4` to `1.10.6`
  737. Version 2.0.36 (March 8, 2022)
  738. ------------------------------
  739. * Gray out pagination buttons when they are not applicable
  740. * Use truncated entry description as title if unavailable
  741. * Do not fallback to InnerXML if XHTML title is empty
  742. * Add `+` keyboard shortcut for new subscription page
  743. * Add `(+)` action next to Feeds to quickly add new feeds
  744. * Fix unstar not working via Google Reader API
  745. * Remove circles in front of page header list items
  746. * Fix CSS hover style for links styled as buttons
  747. * Avoid showing `undefined` when clicking on read/unread
  748. * Add new keyboard shortcut `M` to toggle read/unread, and go to previous item
  749. * Add several icons to menus according to their roles
  750. * Add missing event argument to `onClick()` function call
  751. * Add links to scraper/rewrite/filtering docs when editing feeds
  752. * Add a rewrite rule for Castopod episodes
  753. * Fix regression: reset touch-item if not in `/unread` page
  754. * Add API endpoint to fetch original article
  755. * Show the category first in feed settings
  756. * Add pagination on top of all entries
  757. * Display Go version in "About" page
  758. * Bump `mvdan.cc/xurls/v2` from 2.3.0 to 2.4.0
  759. * Bump `github.com/prometheus/client_golang` from 1.11.0 to 1.12.1
  760. * Bump `github.com/tdewolff/minify/v2` from 2.9.28 to 2.10.0
  761. Version 2.0.35 (January 21, 2022)
  762. ---------------------------------
  763. * Set `read-all` permission to `GITHUB_TOKEN` for GitHub Actions
  764. * Pin `jshint` version in linter job
  765. * Fix incorrect conversion between integer types
  766. * Add new GitHub Actions workflows: CodeQL and Scorecards analysis
  767. * Handle Atom feeds with space around CDATA
  768. * Bump `github.com/tdewolff/minify/v2` from 2.9.22 to 2.9.28
  769. * Add Documentation directive to Systemd service
  770. * Do not reset `touch-item` if successfully swiped
  771. * Add support for multiple authors in Atom feeds
  772. * Omit `User-Agent` header in image proxy to avoid being blocked
  773. * Use custom feed user agent to fetch website icon
  774. * Make default Invidious instance configurable
  775. * Add new rewrite rule `add_youtube_video_from_id` to add Youtube videos in Quanta articles
  776. * Add scrape and rewrite rules for `quantamagazine.org`
  777. * Expose entry unshare link in the entry and list views
  778. * Add Google Reader API implementation (experimental)
  779. * Add `Content-Security-Policy` header to feed icon and image proxy endpoints
  780. - SVG images could contain Javascript. This CSP blocks inline script.
  781. - Feed icons are served using `<img>` tag and Javascript is not interpreted.
  782. * Add Finnish translation
  783. * Add scraper rule for `ikiwiki.iki.fi`
  784. * Remove `SystemCallFilter` from `miniflux.service`
  785. * Fix minor typo in French translation
  786. Version 2.0.34 (December 16, 2021)
  787. ----------------------------------
  788. * Add rewrite rule for comics website http://monkeyuser.com
  789. * Add `<head>` tag to OPML export
  790. * Tighten Systemd sandboxing and update comments in `miniflux.service`
  791. * Add `RuntimeDirectory` to Systemd service
  792. * Order disabled feeds at the end of the list
  793. * Add support for theme color based on preferred color scheme of OS
  794. * Bump `github.com/lib/pq` from 1.10.3 to 1.10.4
  795. * Bump `github.com/PuerkitoBio/goquery` from 1.7.1 to 1.8.0
  796. * Fix typos in `model/icon.go`
  797. * Add `data-srcset` support to `add_dynamic_image rewrite` rewrite rule
  798. * Fix Docker Compose example files compatibility to v3
  799. * Added the `role="article"` to `<article>` elements for better accessibility with screen readers
  800. * Redact secrets shown on the about page
  801. * Handle `srcset` images with no space after comma
  802. * Hide the logout link when using auth proxy
  803. * Fix wrong CSS variable
  804. * Change `-config-dump` command to use `KEY=VALUE` format
  805. Version 2.0.33 (September 25, 2021)
  806. -----------------------------------
  807. * Build RPM and Debian package with PIE mode enabled
  808. * Add CSS rule to hide `<template>` tag in old browsers
  809. * Bump `github.com/tdewolff/minify/v2 from 2.9.21 to 2.9.22`
  810. * Bump `github.com/lib/pq from 1.10.2 to 1.10.3`
  811. * Remove `RequestURI()` hack
  812. * Improve `zh_CN` translation
  813. * Add ability to change entry sort order in the UI
  814. * Add minor improvements in integration package
  815. * Add Telegram integration
  816. * Add rewrite rule to remove DOM elements
  817. * Add proxy argument to `scraper.Fetch()`
  818. * Add mime type `application/feed+json` to discover JSON Feed v1.1
  819. * Update scraper rule for `theregister.com`
  820. * Add Go 1.17 to GitHub Actions
  821. * Display option to hide feed only when category is not already hidden
  822. * Add option to hide feeds from the global Unread list
  823. Version 2.0.32 (August 14, 2021)
  824. --------------------------------
  825. * Bump `github.com/tdewolff/minify/v2` from 2.9.17 to 2.9.21
  826. * Bump `mvdan.cc/xurls/v2` from 2.2.0 to 2.3.0
  827. * Bump `github.com/PuerkitoBio/goquery` from 1.6.1 to 1.7.1
  828. * Bump `github.com/prometheus/client_golang` from 1.10.0 to 1.11.0
  829. * Add `/rss/` to the list of well known URLs during feed discovery
  830. * Use `authors` entry for JSON 1.1 feeds
  831. * Added Greek translation
  832. * Added the ability to mark an entire category as read in the web ui
  833. * Added "in" in "logged in" for en_US `tooltip.logged_user`
  834. * Added option to hide categories from the global unread list
  835. * Show "saving" labels for entry status button
  836. * Golang client: Try to parse response body on `InternalServerError` errors
  837. * contrib: Add support for a $MINIFLUX_IMAGE env var in docker-compose
  838. * contrib: Bump docker-compose version to 3.4
  839. Version 2.0.31 (June 6, 2021)
  840. -----------------------------
  841. * Expose comments_url entry field in Golang API client
  842. * Use unique file names for cache busting instead of query string
  843. * Highlight and sort feeds with unread entries in feeds list
  844. * Mark items as read on click/middle click of external links
  845. * Fix: Firefox on Windows does not show the active link as bold
  846. * Avoid extra HTTP request for fetching custom stylesheet
  847. * Remove invalid CSRF HTML meta tag
  848. * Add lang attribute to root HTML tag
  849. * Use runes instead of bytes to truncate JSON feed titles (avoid breaking Unicode strings)
  850. * Expose changed_at time through the API
  851. * Add new config option CLEANUP_ARCHIVE_BATCH_SIZE
  852. * Add new option DATABASE_CONNECTION_LIFETIME
  853. * Add database stats to Prometheus exporter
  854. * Add Systemd watchdog
  855. * Avoid custom stylesheet to be cached by third-party CDN
  856. * Update a shared entry label translation in zh_CN
  857. * Bump github.com/tdewolff/minify/v2 from 2.9.16 to 2.9.17
  858. * Bump github.com/lib/pq from 1.10.1 to 1.10.2
  859. Version 2.0.30 (May 7, 2021)
  860. ----------------------------
  861. * Security fix: any user can delete any feed (Regression introduced in commit 51fb949)
  862. * Fix password reset via CLI
  863. * Increase default batch size value
  864. * Handle RSS feed title with encoded Unicode entities
  865. * Show number of unread per category in category list instead of number of feeds
  866. * Bump github.com/lib/pq from 1.10.0 to 1.10.1
  867. * Filtering doesn't work when selecting from multiple found feeds
  868. * Bump github.com/tdewolff/minify/v2 from 2.9.15 to 2.9.16
  869. * Use an appropriate color for visited links on dark theme
  870. * Fix typo in reader/json/doc.go
  871. * Create SECURITY.md
  872. * Setup golangci-lint Github Action
  873. * Add per feed cookies option
  874. * Bump github.com/prometheus/client_golang from 1.9.0 to 1.10.0
  875. * Bump github.com/tdewolff/minify/v2 from 2.9.13 to 2.9.15
  876. Version 2.0.29 (Mar 21, 2021)
  877. -----------------------------
  878. * Miniflux requires at least Go 1.16 now
  879. * Improved support of Atom text constructs
  880. - Improve handling of CDATA in text elements
  881. - Omit XHTML root element because it should not be part of the content
  882. - Fix incorrect parsing of HTML elements
  883. * Handle RDF feed with HTML encoded entry title
  884. * Add Turkish language
  885. * Improve deletion of feeds with lots of entries
  886. * Add support of Systemd readiness notification using the sd_notify protocol
  887. * Remove feed_icons service worker cache because it's causing more problems than it solves (and HTTP cache seems faster)
  888. * Add basic PWA offline page
  889. - Add basic offline mode when using the service worker
  890. - Starting in Chrome 93, offline mode is going to be a requirement to install the PWA
  891. * Replace icon for "Add to home screen" button
  892. * Use SVG icons for "toast" notifications
  893. * Use SVG sprite for icons instead of inline elements
  894. * Reset scroll position on mark page as read
  895. * Add link to mark all feed entries as read
  896. * Make web app display mode configurable (The change is visible after reinstalling the web app)
  897. * Handle RSS feeds with CDATA in author item element
  898. * Add read time on the article page
  899. * Avoid showing a broken image when there is no feed icon
  900. * Add option to allow self-signed or invalid certificates
  901. * Add new config option to scrape YouTube's website to get video duration as read time (disabled by default)
  902. * Send full article content to Wallabag
  903. * Add more extensive health check support
  904. - Improve endpoint to test database connection
  905. - Add new cli argument: -healthcheck
  906. - Update Docker Compose examples
  907. * Update iframe "allow list" to support Bilibili videos
  908. * Remove completely generated files and use embed package to bundle JS/CSS/Images/Translations files into the final binary
  909. * Remove deprecated io/ioutil package
  910. * Show Postgres version in "About" page
  911. Version 2.0.28 (Feb 15, 2021)
  912. -----------------------------
  913. * Add HTTP header "Referrer-Policy: no-referrer"
  914. * Handle entry title with double encoded entities
  915. * Add Open Containers annotations to Docker image
  916. * Remove iframe inner HTML contents (iframe element never has fallback content)
  917. * Update date parser to fix another time zone issue
  918. * Update German translation for blocklist and keeplist
  919. * Validate Keep list and Block list rules syntax
  920. * Add support for IPv6 with zone index
  921. * Allow images with data URLs
  922. * Limit full-text search indexation to first 500K characters (tsvector has a size limit of 1MB)
  923. * Change PWA display mode to standalone
  924. * ETag value is not set correctly in HTTP client (regression)
  925. * Add database backed Let's Encrypt certificate cache
  926. * Add global option POLLING_PARSING_ERROR_LIMIT
  927. * Update systemd service file comments to use `systemctl edit` for editing
  928. * Update Go version to 1.15 in go.mod
  929. * Don't discard the "Fetch via Proxy" option
  930. * Update man page to show the default values
  931. * Add PostgreSQL indices
  932. * Add API endpoints to get feeds and entries of a category
  933. * Create feed query builder
  934. * Bump github.com/PuerkitoBio/goquery from 1.6.0 to 1.6.1
  935. * Show global options in the about page
  936. * Update man page to mention -1 can be used for CLEANUP_ARCHIVE_* options
  937. Version 2.0.27 (Jan 9, 2021)
  938. ----------------------------
  939. * Add spellcheck="false" to input fields
  940. * Refactoring of entry, feed, category, and user validation
  941. * Avoid stripping tags for entry title
  942. * Add the possibility to subscribe to feeds with the Android Share menu
  943. * API improvements:
  944. - Change feed creation request to allow setting most fields via API
  945. - Allow regular users to change settings via API
  946. - Make user fields editable via API
  947. - Renaming non-existent category via API should return a 404
  948. * Update Systemd service file:
  949. - Add capability CAP_NET_BIND_SERVICE (allow the process to listen on privileged ports)
  950. - Enable a private /tmp for $CERT_CACHE (required when using Let's Encrypt)
  951. * Update read/star icons to SVGs
  952. * Add autocomplete="username" to HTML forms
  953. * Improve user mass delete to use fewer Goroutines
  954. * Use SQL transaction when creating user sessions and users
  955. * Remove extra column (HSTORE field) from users table and migrate key/value pairs to specific columns
  956. * Bump github.com/prometheus/client_golang from 1.8.0 to 1.9.0
  957. * Bump github.com/lib/pq from 1.8.0 to 1.9.0
  958. * Add styles for <abbr> HTML tag
  959. * Refactor SQL migrations:
  960. - Avoid embedding SQL files into binary
  961. - Allow more flexible changes by using Go functions
  962. * Add Server-Timing header to unread page
  963. * Show correct User Agent in input placeholders
  964. * Add autocomplete attribute to login form
  965. * Add Grafana dashboard in contrib folder
  966. Version 2.0.26 (Dec 5, 2020)
  967. ----------------------------
  968. * Use created_at instead of published_at for archiving entries
  969. * Add created_at field for entries
  970. * Handle invalid feeds with relative URLs
  971. * Add API routes for "mark all as read"
  972. * Add support for setting a global default User-Agent
  973. * Add rewrite rule "replace" for custom search and replace
  974. * Calculate reading time during feed processing
  975. * Handle various invalid dates
  976. * systemd: keep /run writeable
  977. * debian package: add missing post-install script
  978. * Do not follow redirects when trying known feed URLs
  979. * Trim spaces around icon URLs
  980. * Reinstate EXPOSE instruction in Dockerfile
  981. * Update German and Portuguese translations
  982. Version 2.0.25 (Nov 3, 2020)
  983. ----------------------------
  984. * Rename "original" link to be more explicit
  985. * Do not escape HTML for Atom 1.0 text content during parsing (Avoid HTML entities issues)
  986. * Do not use charset.NewReader if the body is a valid UTF-8 document
  987. * Restore the ability to use a proxy for all HTTP requests (see https://golang.org/pkg/net/http/#ProxyFromEnvironment)
  988. * Show Git commit in about page
  989. * Publish Docker images to GitHub Container Registry
  990. * Added few Docker Compose examples in contrib folder
  991. * Added Ansible Role + Playbook for Miniflux in contrib folder
  992. * Add rewrite rule to use noscript content for images rendered with Javascript
  993. * Bump github.com/prometheus/client_golang from 1.7.1 to 1.8.0
  994. * Update contributor link and Godoc badge for API client
  995. * Move Debian package builder to main repository
  996. * Move RPM build files to main repository
  997. * Add GitHub Action to generate Docker images
  998. * Build multi-platform images with Docker Buildx
  999. * Add keyboard shortcut to scroll current item to the top
  1000. * Add feed filters (Keeplist and Blocklist)
  1001. * Do not proxy image with a data URL
  1002. * Bump github.com/PuerkitoBio/goquery from 1.5.1 to 1.6.0
  1003. * Proxify articles crawled manually
  1004. * Proxify images defined in srcset attribute
  1005. * Remove plaintext Fever password from database
  1006. * Add keyboard shortcut to jump to an item's feed page
  1007. * Add option for swipe gesture on entries on mobile
  1008. Version 2.0.24 (Oct 3, 2020)
  1009. ----------------------------
  1010. * Add rewrite rule to fix Medium.com images
  1011. * Update sanitizer to support responsive images:
  1012. - Add support for picture HTML tag
  1013. - Add support for srcset, media, and sizes attributes to img and source tags
  1014. * Enhance man page formatting
  1015. * Add Prometheus exporter
  1016. * Remove dependency on global config options in HTTP client
  1017. * API:
  1018. - Avoid database lookup if empty credentials are provided
  1019. - Add the possibility to filter entries by category ID
  1020. - Add the possibility to filter entries by a list of statuses
  1021. * Add Feed ID in worker error logs
  1022. * Tweak default HTTP client transport timeout values to reduce the number of file descriptors
  1023. * CSS tweaks and optimizations:
  1024. - Prevent sub and sup from affecting line-height
  1025. - Set touch-action on .items to prevent browser navigation
  1026. - Move font-family specific CSS to the appropriate file
  1027. - Update primary font-family for UI to be even more compatible with various operating systems
  1028. - Make .entry-content font-weight variable depending on font-family used
  1029. * Avoid Javascript minifier to break keyboard shortcuts
  1030. * Rename service worker script to avoid being blocked by uBlock
  1031. * Update date parser to handle Pacific Daylight Time in addition to Pacific Standard Time
  1032. * Create index to speed up bookmark page
  1033. * Do not try to update a duplicated feed after a refresh
  1034. * Use a transaction to refresh and create entries
  1035. * Speed up entries clean up with an index and a goroutine
  1036. * Avoid the accumulation of enclosures by keeping only what is referenced in the feed
  1037. * Add workarounds for parsing an invalid date
  1038. * Archive older entries first
  1039. * Update API client to support more filters
  1040. * Avoid duplication between get feed entries and get entries API endpoints
  1041. * Enable strict slash to avoid a page not found (404) when using a trailing slash in the URLs
  1042. * Add a submit button to each section of the integration page
  1043. * Reload page after making page as read when showing unread entries
  1044. * Add option to archive unread entries
  1045. * Add option to enable maintenance mode
  1046. * Add HTTP proxy option for subscriptions
  1047. * Make add_invidious_video rule applicable for different invidious instances
  1048. * Fix reading time for jp, ko and zh languages
  1049. * Update POLLING_SCHEDULER description in man page
  1050. * Bump gorilla/mux from 1.7.4 to 1.8.0
  1051. * Add link to mark a feed as read
  1052. Version 2.0.23 (Aug 15, 2020)
  1053. -----------------------------
  1054. * Try known URLs when discovering subscriptions
  1055. * Add workarounds to find YouTube channel feeds (YouTube doesn't expose RSS links anymore for new-style URLs)
  1056. * Increase HTTP server timeout values
  1057. * Use stdlib constants for HTTP methods instead of strings
  1058. * Add support for RTL feed content
  1059. * Ignore <media:title> to avoid overriding the default title if they are different
  1060. * Add support for secret keys exposed as a file (useful for containerized environments)
  1061. * Display recent entries first in search results
  1062. * Do not archive shared items
  1063. * Add option to change the number of entries per page
  1064. * Add Brazilian Portuguese (pt_BR) translation
  1065. * Add reading time for entries
  1066. * Redirect to login page if CSRF token is expired
  1067. * Fever API:
  1068. - Use getEntryIDs instead of getEntries to reduce memory consumption
  1069. - Fix max_id argument logic to follow the specs
  1070. - Improve logging
  1071. - Do not send articles to external services when unsaving an item
  1072. - Create index to speed up API calls
  1073. - Log client IP in middleware
  1074. * API client: Do not return body for response with no content
  1075. * REST API:
  1076. - Delete users asynchronously (Deleting large users might lock the tables)
  1077. - Add CORS support
  1078. * Align entry actions to the left
  1079. - Attempt to avoid awkward alignment on smartphone screens
  1080. - Keep the read/star actions aligned to the left
  1081. - Remove CSS flex to allow easier override with custom CSS
  1082. * Upgrade Postgres client library
  1083. * Upgrade CI checks to Go 1.15
  1084. Version 2.0.22 (Jun 19, 2020)
  1085. -----------------------------
  1086. * Remove child-src CSP policy (deprecated)
  1087. * Add /version endpoint
  1088. * Add the ability to use custom css
  1089. * Handle more invalid dates
  1090. * Add CSS styles for textarea
  1091. * Add index to speed up slow query
  1092. * Speed up feed list page rendering
  1093. * Add alternative scheduler based on the number of entries
  1094. * Setup Dependabot on GitHub
  1095. * Update Docker image to Alpine 3.12
  1096. * Add feed option to ignore HTTP cache
  1097. * Fix some Italian and German translations
  1098. * Added scraper rule for RayWenderlich.com, TheOatmeal.com, financialsamurai.com, dilbert.com and turnoff.us
  1099. * Replace link to categories by a link to the list of entries in "Category > Feeds" page
  1100. * Change feed title to a link to the original website
  1101. * Add icons to feeds and categories list
  1102. * Update dependencies and remove vendor folder
  1103. Version 2.0.21 (Mar 28, 2020)
  1104. -----------------------------
  1105. * Add SVG icons to entry actions
  1106. * Add support for Invidious
  1107. - Embed Invidious player for invidio.us feeds
  1108. - Add new rewrite rule to use Invidious player for Youtube feeds
  1109. * Check during application startup if the database schema is up to date
  1110. * Change default theme for public pages to "System Serif"
  1111. * Add feature to share an article (create a public link of a feed entry)
  1112. * Fix SQL injection in full-text search rank ordering
  1113. * Add generic OpenID Connect provider (OAuth2)
  1114. * Use more secure TLS configuration for autocert server (increase SSL Labs score from B to A+)
  1115. * Add feature to create per-application API Keys
  1116. * Add Go 1.14 to GitHub Actions
  1117. * Add scraper rule for wdwnt.com
  1118. * Add API client function to refresh all feeds
  1119. * Add API endpoint to refresh all feeds
  1120. * Add Auth Proxy authentication
  1121. * Use rel=prev/next on pagination links
  1122. Version 2.0.20 (Feb 15, 2020)
  1123. -----------------------------
  1124. * Add Japanese translation
  1125. * History: show entries in the order in which they were read
  1126. * Add button to add to Home screen
  1127. * Ignore enclosures without URL
  1128. * Correct spelling of "toggle"
  1129. * List view: align information to the left side, and the actionable buttons to the right
  1130. * Redirect to /unread when getting a 404 for an unread expired entry
  1131. * Do not advance to the next item when using the 'v' shortcut on the list of starred items
  1132. * Wrap around when navigating with keyboard shortcuts on a list view
  1133. * Remove unused Feed.Entries and Entry.Category from API client
  1134. * Add comments link keyboard shortcut
  1135. * Allow application/xhtml+xml links as comments URL in Atom replies
  1136. * Allow only absolute URLs in comments URL
  1137. * Use internal XML workarounds to detect feed format
  1138. * Make menu consistent across feed pages
  1139. * Make sure external URLs are not encoded incorrectly by Go template engine
  1140. * Make sure whitelisted URI schemes are handled properly by the sanitizer
  1141. * Use white background for favicon (Improve legibility when using a dark theme)
  1142. * Remove dependency on Sed to build Docker images
  1143. * Normalize URL query string before executing HTTP requests
  1144. * Improve Dublin Core support for RDF feeds
  1145. * Improve Podcast support (iTunes and Google Play feeds)
  1146. * Add support for Atom 0.3
  1147. * Add support for Atom "replies" link relation
  1148. * Return outer HTML when scraping elements
  1149. * Update scraper rule for "Le Monde"
  1150. * Filter valid XML characters for UTF-8 XML documents before decoding
  1151. * Trim spaces for RDF entry links
  1152. Version 2.0.19 (Dec 1, 2019)
  1153. ----------------------------
  1154. * Add shortcut "V" to open original link in current tab
  1155. * Add the possibility to add rules during feed creation
  1156. * Wrap attachments into <details> disclosure element
  1157. * Show attachment size on entry page
  1158. * Add support of RSS Media elements (group, description, peer link, and thumbnails)
  1159. * Add rewrite functions: convert_text_link and nl2br
  1160. * Add scraper rule for openingsource.org
  1161. * Add Makefile target to build only amd64 Docker image
  1162. * Make sure to remove integration settings when removing a user
  1163. * Add API parameter to filter entries by category
  1164. * Display list of feeds per category
  1165. * Show the number of read and unread entries for each feed
  1166. * Make sure settings menu is consistent
  1167. * Remove fixed table-layout for entry content
  1168. * Update autocert lib because ACME v1 is EOL
  1169. * Do not lighten blockquote font color
  1170. * Update de_DE translation
  1171. * Send a response when changing status of removed entries in Fever API
  1172. * Add meta tag to disable Google Translate
  1173. * Improve storage module
  1174. * Improve XML decoder to remove illegal characters
  1175. * Compare Fever token case-insensitively
  1176. * Make sure integration tests are marked as failed in Github Actions
  1177. * Add new formats to date parser
  1178. * Add notification message when using keyboard shortcuts: f, s, and m.
  1179. * Avoid keyboard shortcuts to conflict with Firefox’s "Find as you type" feature
  1180. Version 2.0.18 (Sep 25, 2019)
  1181. -----------------------------
  1182. * Add Docker image variant for arm32v7
  1183. * Add theme variants
  1184. - Use CSS variables instead of inherence
  1185. - Rename default theme to "Light - Serif"
  1186. - Rename Black theme to "Dark - Serif"
  1187. - Rename "Sans-Serif" theme to "Light - Sans Serif"
  1188. - Add "System" theme that use system preferences: Dark or Light
  1189. - Add Serif and Sans-Serif variants for each color theme
  1190. * Avoid constraint error when having duplicate entries during feed creation
  1191. * Disable strict XML parsing
  1192. * Ignore invalid content type
  1193. * Update man page
  1194. * Replace Travis by GitHub Actions
  1195. * Rename cleanup config variables and deprecate old ones
  1196. - CLEANUP_FREQUENCY_HOURS instead of CLEANUP_FREQUENCY
  1197. - CLEANUP_ARCHIVE_READ_DAYS instead of ARCHIVE_READ_DAYS
  1198. * Make configurable the number of days to remove old sessions
  1199. * Add native lazy loading for images and iframes
  1200. * Do not buffer responses in the image proxy
  1201. * Update dependencies
  1202. * Add Go 1.13 to test matrix
  1203. * Replace link border by outline to avoid slight content shift
  1204. * New rewrite function: add_mailto_subject
  1205. * Import OPML from URL
  1206. * Fix HTML injection in addImageTitle
  1207. * Accept HTML entities when parsing XML
  1208. Version 2.0.17 (Aug 3, 2019)
  1209. ----------------------------
  1210. * Update Docker image to Alpine Linux 3.10.1
  1211. * Pass auth header to manifest request (crossorigin attribute)
  1212. * Sort feed categories before serialization
  1213. * Fix syntax errors in man page
  1214. * Add .search margin-right
  1215. * Ask for confirmation before flushing history, marking page as read, and mark all as read
  1216. * Add option to disable feeds
  1217. Version 2.0.16 (Jun 8, 2019)
  1218. ----------------------------
  1219. * Add option to toggle date/time in log messages
  1220. * Add optional config file parser in addition to environment variables
  1221. * Make HTTP Client timeout and max body size configurable
  1222. * Refactor config package:
  1223. - Parse configuration only once during startup time
  1224. - Store configuration values in a global variable
  1225. * Flip behavior of j and k keyboard shortcuts
  1226. * Bump Postgresql client library to v1.1.1 to bring in SCRAM-SHA-256 authentication
  1227. * Add option to enable/disable keyboard shortcuts
  1228. * Add missing translation
  1229. * Improve page reload when showing unread/all entries:
  1230. - Show only unread entries = refresh current page
  1231. - Show all entries = go to next page
  1232. * Always display feed entries even when there is a feed error
  1233. * Use loading label instead of saving when submitting login form
  1234. * Add OPML v1 support during importation
  1235. * Add 'allow-popups' to iframe sandbox permissions
  1236. Version 2.0.15 (Mar 16, 2019)
  1237. -----------------------------
  1238. * Move Dockerfile to main repo
  1239. * Change location of the binary from /usr/local/bin to /usr/bin in Docker image
  1240. * Add double tap detection for next/previous page navigation
  1241. * Allow users to disable auto-remove
  1242. * Make parser compatible with Go 1.12
  1243. * Add Golang 1.12 to CI
  1244. * Use feed ID instead of user ID to check entry URLs presence
  1245. * Fix typo in stylesheet
  1246. * Sort search results by relevance
  1247. * Use preferably the published date for Atom feeds
  1248. * Add Spanish translation
  1249. * Rename session cookies
  1250. * Handle the case when application session is expired and not user session
  1251. Version 2.0.14 (Jan 13, 2019)
  1252. -----------------------------
  1253. * Only attempt to change password if the confirmation field is filled in (Firefox)
  1254. * Remove URL from client user agent
  1255. * Make the feed list order case-insensitive
  1256. * Handle XHTML Summary elements for Atom feeds
  1257. * Make UTF-8 the default encoding for XML feeds
  1258. * Add more targets to Makefile
  1259. * Add -mod=vendor in Makefile
  1260. * Move health check endpoint from ui package to httpd service
  1261. * Add workaround for non GMT dates (RFC822, RFC850, and RFC1123)
  1262. * Make sure `<strong>` elements are bold
  1263. * Show scrollbars only when necessary for <pre> elements
  1264. * Add Italian translation
  1265. * Allow to switch between unread only and all entries on category/feed views
  1266. * Add function storage.UpdateFeedError()
  1267. * Add BBC News scraping rule
  1268. * Ignore JSON feeds from EnsureUnicode()
  1269. * Preserve category selection when no feed is found
  1270. * Update XML encoding regex to take single quotes into consideration
  1271. * Send cli errors to stderr
  1272. * Update dependencies
  1273. * Make password prompt compatible with Windows
  1274. * Make configurable the number of days to archive read items
  1275. * Change log level to debug when starting workers
  1276. * Do not show $DATABASE_URL warning when showing application info
  1277. * Move image proxy filter to template functions
  1278. * Update scraper rule for lemonde.fr
  1279. * Refactor manual entry scraper
  1280. * Apply rewriter rules on manual "Fetch Original Content"
  1281. * Add Makefile target for current OS and architecture
  1282. * Improve Makefile
  1283. Version 2.0.13 (Nov 25, 2018)
  1284. -----------------------------
  1285. * Add man page
  1286. * Add support for Systemd Socket Activation (experimental)
  1287. * Add the possibility to listen on Unix sockets
  1288. * Add config options to disable HTTP and scheduler services
  1289. * Archive more read entries in cleanup job
  1290. * Change default database connection string (backward compatible)
  1291. * Improve logging messages in ui package
  1292. * Improve overall Simplified Chinese translations
  1293. * Improve time since post date displays:
  1294. - "15 days" now is "15 days" rather than "3 weeks" ago
  1295. - "32 days" is now "1 month" rather than "2 months" ago
  1296. - "366 days" is now "1 year" rather than "2 years" ago
  1297. * Allow the scraper to parse XHTML documents
  1298. * Remove charset=utf-8 from JSON responses
  1299. * Ignore hotkeys containing Control, Alt or Meta keys
  1300. * Handle more encoding conversion edge cases
  1301. * Disable go test caching
  1302. * Avoid duplication of ldflags in Makefile
  1303. * Fix wrong translation key for category pages
  1304. * Code refactoring:
  1305. - Simplify application HTTP middlewares
  1306. - Replace daemon and scheduler package with service package
  1307. - Move UI middlewares and routes to ui package
  1308. - Move API middleware and routes to api package
  1309. - Move Fever middleware and routes to fever package
  1310. Version 2.0.12 (Oct 26, 2018)
  1311. -----------------------------
  1312. * Add OpenBSD build
  1313. * Improve logging for OAuth2 callback
  1314. * Make "g f" go to feed, or list of feeds
  1315. * Add more details in feed storage errors to facilitate debugging
  1316. * Add entries storage error to feed errors count
  1317. * Set arbitrary maximum size for tsvector column
  1318. * Unsubscribe from feed through link or "#"
  1319. * Simplify feed entries filtering
  1320. * Simplify feed fetcher
  1321. * Simplify feed parser and format detection
  1322. * Improve unit tests in url package
  1323. * Add short cli flags -i and -v
  1324. * Convert text links and line feeds to HTML in YouTube channels
  1325. * Change link state when marking all entries as read
  1326. * Add missing package descriptions for GoDoc
  1327. * Fix typo in license header
  1328. * Refactor HTTP response builder
  1329. * Improve Fever API performances when marking a feed or group as read
  1330. * Set focus on article link when pressing prev/next hotkeys
  1331. * Improve request package and add more unit tests
  1332. * Add more unit tests for config package
  1333. * Simplify locale package usage (refactoring)
  1334. * Translate application in Russian
  1335. * Use disclosure widget <details> for advanced feed options
  1336. * Use unique translation IDs instead of English text as key
  1337. * Add more unit tests for template functions
  1338. * Fix invalid output when truncating Unicode text in templates
  1339. * Add the possibility to override default user agent for each feed
  1340. * Split Makefile linux targets by architecture
  1341. * Add compiler, Arch, and OS to info command
  1342. * Avoid line break between emoji and (un)read/(un)star links
  1343. * Build Docker image for multiple architectures (amd64, arm32v6, arm64v8)
  1344. Version 2.0.11 (Sep 11, 2018)
  1345. -----------------------------
  1346. * Set cookie flag `SameSite` to Lax mode
  1347. * Use predefined ciphers when TLS is configured
  1348. * Avoid displaying an error when shutting down the daemon
  1349. * Add "Mark this page as read" to the bottom
  1350. * Store client IP address in request context
  1351. * Refactor HTTP context handling
  1352. * Make user creation via environment variables idempotent
  1353. * Use regular text version of ✔︎ instead of emoji version on iOS
  1354. * Add toggle status button to entry page
  1355. * Migrate to Go Modules and Go 1.11
  1356. * Show count of feeds with permanent errors in header menu
  1357. * Display remote client IP in logs when having a login failure (Fail2Ban)
  1358. * Add remove button in feed edit page
  1359. * Split integration tests into multiple files
  1360. * Update scraper rule for heise.de
  1361. * Expose real error messages for internal server API errors
  1362. * Move Golang API client in project source tree (the separate project is deprecated)
  1363. * Use canonical imports
  1364. * Add Procfile
  1365. * Create database package (refactoring)
  1366. * Update user agent with new website URL
  1367. * Update German translation
  1368. Version 2.0.10 (July 22, 2018)
  1369. ------------------------------
  1370. * Avoid browser caching issues when assets changes
  1371. * Add Gzip/Deflate compression for HTML, JSON, CSS and Javascript responses
  1372. * Improve themes handling
  1373. * Store user theme in session
  1374. * Logged out users will keep their theme
  1375. * Add theme background color to web manifest and meta tag
  1376. * Update application icon with different sizes
  1377. * Add support for published tag in Atom feeds
  1378. * Add tooltip to feed domain in feeds list (title attribute)
  1379. * Prevent vertical scrolling on swipe
  1380. * Show feed title instead of domain in items list
  1381. * Add service worker to cache feed icons
  1382. * Make image proxy configurable via IMAGE_PROXY environment variable:
  1383. * none = No proxy
  1384. * http-only = Proxy only non-HTTPS images (default)
  1385. * all = Proxy everything
  1386. * Add alt attribute for feed icons
  1387. * Update CI jshint check
  1388. * Add embedly.com to iframe whitelist
  1389. * Use passive event listeners for touch events
  1390. * Add `add_dynamic_image` rewriter for JavaScript-loaded images
  1391. * Change feed password field type to text to avoid auto-completion with Firefox
  1392. * Using autocomplete="off" or autocomplete="new-password" doesn't change anything
  1393. * Changing the input ID doesn't change anything
  1394. * Using a different input name doesn't change anything
  1395. * Only Chrome supports autocomplete="new-password"
  1396. * Add base URL validation
  1397. * Update default stylesheet name in HTML layout
  1398. * Pre-generate themes stylesheets at build time
  1399. * Update vendor dependencies
  1400. * Refactor assets bundler and split Javascript files
  1401. * Run sanitizer after all processing and entry content rewrite
  1402. * Remove timestamp from generated files
  1403. * Add support for protocol relative YouTube URLs
  1404. * Add Postgres full-text search for entries
  1405. * Add search form in user interface
  1406. * Add search parameter to the API
  1407. * Improve Dutch locales
  1408. * Sandbox iframes when sanitizing
  1409. * Keep consistent text size on mobile orientation change
  1410. * Change permission of /etc/miniflux.conf to 600 instead of 644 in RPM package
  1411. * Add tzdata package to Docker image
  1412. * Update Docker image to Alpine Linux 3.8
  1413. Version 2.0.9 (July 1, 2018)
  1414. ----------------------------
  1415. * Avoid Chrome to autocomplete no-login password fields
  1416. * Add cli flag to reset all feed errors
  1417. * Do not ignore errored feeds when a user refresh feeds manually
  1418. * Add specific 404 and 401 error messages
  1419. * Strip binaries to reduce size
  1420. * Make sure we always get the pagination in unread mode
  1421. * Fix incorrect data value when toggling bookmark flag on entry page
  1422. * Set opener to null when opening original URL with JavaScript
  1423. * Remove unnecessary style
  1424. * Refactor AddImageTitle rewriter
  1425. * Only processes images with `src` **and** `title` attributes (others are ignored)
  1426. * Processes **all** images in the document (not just the first one)
  1427. * Wraps the image and its title attribute in a `figure` tag with the title attribute's contents in a `figcaption` tag
  1428. * Improve sanitizer to remove `style`, `noscript` and `script` tag contents
  1429. * Improve feed and user API updates with optional values
  1430. * Add new fields for feed username/password
  1431. * Improve memory usage debug log
  1432. * Disable keep-alive for HTTP client
  1433. * Close HTTP response body even for failed requests
  1434. * Add Sans-Serif theme
  1435. * Rewrite iframe Youtube URLs to https://www.youtube-nocookie.com
  1436. * Add more filters for API call `/entries`:
  1437. * before (unix timestamp)
  1438. * before_entry_id (int64)
  1439. * after (unix timestamp)
  1440. * after_entry_id (int64)
  1441. * starred (boolean)
  1442. * Rewrite individual entry pagination SQL queries
  1443. * Simplify entry query builder
  1444. * Prevent items from sticking on touchend
  1445. * Extended horizontal overflow to feed and category views
  1446. * Translate missing strings
  1447. * Update German translation
  1448. Version 2.0.8 (June 4, 2018)
  1449. ----------------------------
  1450. * Add Pocket integration
  1451. * Rewrite RealIP() to avoid returning an empty string
  1452. * Convert IP field from text to inet type
  1453. * Improve error handling in integration clients
  1454. * Make unread counter clickable
  1455. * Archive read entries automatically after 60 days
  1456. * Hide horizontal overflow when swiping articles on touch devices
  1457. * Add API endpoint to get logged user
  1458. * Fever API: Return response with an empty list if there is no item
  1459. * Handle feeds with dates formatted as Unix timestamp
  1460. Version 2.0.7 (May 7, 2018)
  1461. ---------------------------
  1462. * Add API endpoint to import OPML file
  1463. * Make sure to close request body in HTTP client
  1464. * Do not show save link if no integration is configured
  1465. * Make sure integrations are configured before to make any HTTP requests
  1466. * Avoid people to unlink their OAuth2 account without having a local password
  1467. * Do not use shared variable to translate templates (avoid concurrency issue)
  1468. * Use vanilla HTTP handlers (refactoring)
  1469. * Move HTTP client to its own package (refactoring)
  1470. * Add middleware to read X-Forwarded-Proto header (refactoring)
  1471. * Use Gorilla middleware (refactoring)
  1472. * Scrape parent element for iframe
  1473. * Add SoundCloud and Bandcamp iframe sources
  1474. Version 2.0.6 (Apr 20, 2018)
  1475. ----------------------------
  1476. * Improve graceful shutdown
  1477. * Simplify Heroku deployment
  1478. * Display memory usage and some metrics in logs
  1479. * Increase read/write timeout for HTTP server
  1480. * Add support for Dublin Core date in RDF feeds
  1481. * Do not return an error if the user session is not found
  1482. * Handle some non-english date formats
  1483. * Add missing French translation
  1484. * Rename RSS parser getters
  1485. * Get the right comments URL when having multiple namespaces
  1486. * Ignore caching headers for feeds that send "Expires: 0"
  1487. * Update translations
  1488. Version 2.0.5 (Apr 7, 2018)
  1489. ---------------------------
  1490. * Avoid unread counter to be off by one when reading an entry
  1491. * Add Comments URL to entries
  1492. * Add FreeBSD build target
  1493. * Handle RSS author elements with inner HTML
  1494. * Fix typo in translations
  1495. * Add Dutch translation
  1496. * Convert enclosure size field to bigint
  1497. * Switch CI to Go v1.10
  1498. * Fix broken OPML import when compiling with Go 1.10
  1499. Version 2.0.4 (Mar 5, 2018)
  1500. ---------------------------
  1501. * Add Simplified Chinese translation
  1502. * Add Nunux Keeper integration
  1503. * Filter the list of timezones
  1504. * Add timezone to entries dates for REST and Fever API
  1505. * Show last login and session creation date in current timezone
  1506. * Fix typo in edit user template
  1507. * Improve parser error messages
  1508. * Remove parentheses around feed error messages
  1509. * Support localized feed errors generated by background workers
  1510. * Print info message if DATABASE_URL is not set
  1511. Version 2.0.3 (Feb 19, 2018)
  1512. ----------------------------
  1513. * Add Polish translation
  1514. * Change color of <q> tags for black theme
  1515. * Add database indexes (don't forget to run database migrations)
  1516. * Handle Atom feeds with HTML title
  1517. * Strip invalid XML characters to avoid parsing errors
  1518. * Improve error handling for HTTP client
  1519. Version 2.0.2 (Feb 5, 2018)
  1520. ---------------------------
  1521. * Add support for Let's Encrypt http-01 challenge
  1522. * Move template functions outside engine (refactoring)
  1523. * Take timezone into consideration when calculating relative time
  1524. * Add support for HTTP Strict Transport Security header
  1525. * Add support for base URLs with subfolders
  1526. * Add missing about menu in settings
  1527. * Show API URL endpoints in user interface
  1528. * Do not update entry date while refreshing a feed
  1529. * Add flag to toggle debug logging
  1530. * Improve unread counter updates
  1531. Version 2.0.1 (Jan 22, 2018)
  1532. ----------------------------
  1533. * Change user agent (People are blocking the crawler with mod_security)
  1534. * Move environment variables to config package (refactoring)
  1535. * Add build targets for all ARM architectures
  1536. * Do not crawl existing entry URLs
  1537. * Show translated login page in user language when logged out
  1538. * Handle more encoding edge cases:
  1539. - Feeds with charset specified only in Content-Type header and not in XML document
  1540. - Feeds with charset specified in both places
  1541. - Feeds with charset specified only in XML document and not in HTTP header
  1542. * Add German translation
  1543. * Add mark as read/unread link on list items
  1544. * Add API endpoint for OPML export
  1545. Version 2.0.0 (Jan 11, 2018)
  1546. ----------------------------
  1547. * Initial release of Miniflux 2.