ChangeLog 105 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072
  1. Version 2.2.10 (June 23, 2025)
  2. ------------------------------
  3. * test(sanitizer): add unit test for 0x0 pixel tracker
  4. * test(sanitizer): add test case to cover Vimeo iframe rewrite without query string
  5. * refactor(youtube): Remove a regex and make use of `fetchWatchTime`
  6. * refactor(youtube): initialize two maps to the proper length
  7. * refactor(tests): use `b.Loop()` instead of for range `b.N`
  8. * refactor(server): avoid double call to `Sprintf`
  9. * refactor(sanitizer): use global variables to avoid recreating slices on every call
  10. * refactor(sanitizer): use a map for iframe allow list
  11. * refactor(sanitizer): remove two useless `www.` prefixes
  12. * refactor(sanitizer): make `isValidAttribute()` check O(1)
  13. * refactor(rewrite): rename `Rewriter` function to `ApplyContentRewriteRules`
  14. * refactor(processor): simplify Bilibili processing
  15. * refactor(processor): remove a useless type declaration
  16. * refactor(processor): remove a duplicated function call
  17. * refactor(processor): refactor common code into a `fetchWatchTime` function
  18. * refactor(processor): move filters to a `filter` package
  19. * refactor(processor): move `FilterEntryMaxAgeDays` filter to filter package
  20. * refactor(processor): move `RewriteEntryURL` function to `rewrite` package
  21. * refactor(processor): minor simplification of a loop
  22. * refactor(internal): add an `urllib.DomainWithoutWWW` function
  23. * refactor(http): rename package from `httpd` to `server` for consistency
  24. * refactor(http): Don't hardcode TLS configuration
  25. * refactor(filter): avoid code duplication between `IsBlockedEntry` and `IsAllowedEntry` functions
  26. * refactor(database): drop 3 columns in a single transaction
  27. * refactor(crypto): use `rand.Text()` instead of a custom implementation
  28. * refactor(config): remove deprecated config options
  29. * refactor(appjs): no need to check if always present elements are always present
  30. * perf(xml): optimized `NewXMLDecoder`
  31. * perf(xml): optimize XML filtering
  32. * perf(validator): slightly optimize a regex
  33. * perf(timezone): cache `getLocation`'s results
  34. * perf(storage): pre-allocate a slice in `RefreshFeedEntries`
  35. * perf(storage): optimize away two `Sprintf` calls
  36. * perf(sanitizer): use a switch-case instead of a map
  37. * perf(sanitizer): minor simplifications of the sanitizer
  38. * perf(sanitizer): extract a call to `url.Parse` and make intensive use of it
  39. * perf(rss): optimize a bit `BuildFeed`
  40. * perf(rss): early return when looking for an item's author
  41. * perf(rewrite): make `getPredefinedRewriteRules` O(1)
  42. * perf(reader): use a non-cryptographic hash when possible
  43. * perf(reader): optimize `RemoveTrackingParameters`
  44. * perf(readability): minor regex improvement
  45. * perf(media): minor regex simplification
  46. * perf(fetcher): pre-allocate the cipherSuites
  47. * perf(database): use `TRUNCATE` instead of `DELETE FROM` in migrations
  48. * perf(database): marginally speeds migrations up
  49. * perf(api): use `math/rand/v2` instead of `math/rand` for better performance
  50. * fix(readability): do not remove elements within code blocks
  51. * fix(karakeep): correct method name and improve error handling in `SaveURL`
  52. * fix(filter): skip invalid rules instead of exiting the loop
  53. * feat(ui): display external link in single entry view because the URL was not visible on mobile (no mouse over)
  54. * feat(ui): avoid showing an excessive number of tags
  55. * feat(ui): add user setting to control `target="_blank"` on links
  56. * feat(sanitizer): validate MathML XML namespace
  57. * feat(sanitizer): consider images of size 0x0 as pixel trackers
  58. * feat(sanitizer): add validation for empty `width` and `height` attributes in img tags
  59. * feat(sanitizer): add support for `fetchpriority` and `decoding` attributes in img tags
  60. * feat(rewrite): add support for YouTube Shorts video URL pattern
  61. * feat(rewrite): add `parkablogs.com` to the referer override list
  62. * feat(oidc): use `preferred_username` first instead of `email` claim
  63. * feat(locale): update Polish translations
  64. * feat(locale): update locales using machine translation
  65. * feat(locale): update Indonesian translations
  66. * feat(locale): update German translations
  67. * feat(locale): update Chinese translations
  68. * feat(integration)!: remove Pocket integration (Pocket will no longer be available after July 8, 2025)
  69. * feat(filter): add `EntryDate=max-age:duration` filter
  70. * feat(css): add margin-bottom to input for consistent spacing
  71. * feat(config)!: remove `SERVER_TIMING_HEADER` config option
  72. * feat: Allow multiple listen addresses
  73. * feat: adding support for saving entries to Karakeep
  74. * feat: add entry filters at the feed level
  75. * docs(readme): document a couple of nifty features
  76. * docs: add `CONTRIBUTING.md` file
  77. * chore(template): remove `X-UA-Compatible` meta tag specific to Internet Explorer
  78. * build(go): bump to go 1.24
  79. * build(deps): bump `library/alpine` in `/packaging/docker/alpine`
  80. * build(deps): bump `golang.org/x/net` from `0.40.0` to `0.41.0`
  81. * build(deps): bump `golang.org/x/image` from `0.27.0` to `0.28.0`
  82. * build(deps): bump `golang.org/x/crypto` from `0.38.0` to `0.39.0`
  83. Version 2.2.9 (May 26, 2025)
  84. ----------------------------
  85. * refactor(googlereader): remove redundant log message
  86. * refactor(googlereader): move constants to separate files
  87. * fix(webauthn): correct argument in debug log
  88. * fix(sanitizer): MathML tags are not fully supported by `golang.org/x/net/html`
  89. * fix(migrations): prevent failure at version 45 with long entry URLs
  90. * fix(locale): localize Git commit label in about page
  91. * fix(googlereader): return a 400 instead of 500 for invalid edit requests
  92. * fix(googlereader): handle various item ID formats
  93. * fix(googlereader): avoid panic for inexisting feed or category
  94. * fix(googlereader): `/items/contents` should accept short form item IDs
  95. * feat(webauthn): prefer creation of a client-side discoverable credential
  96. * feat(urlcleaner): remove the `ref` parameter from url
  97. * feat(settings): replace `div.panel` with paragraph tags for OAuth2 links
  98. * feat(settings): add validation for entry order and categories sorting order
  99. * feat(settings): add option to always open articles externally
  100. * feat(server): add liveness and readiness probes
  101. * feat(sanitizer): add MathML tags to the sanitizer
  102. * feat(sanitized): allow Spotify iframes
  103. * feat(rssbridge): support authentication token for RSS-Bridge
  104. * feat(response): change error response content type to plain text and escape HTML
  105. * feat(reader): populate feed description automatically
  106. * feat(locale): update Russian translation
  107. * feat(locale): update Polish translation
  108. * feat(locale): update French translation
  109. * feat(googlereader): avoid SQL query to fetch username in streamItemContentsHandler
  110. * feat(googlereader): add `mark-all-as-read` endpoint
  111. * feat(api): add new endpoints to manage API keys
  112. * ci: remove deprecated `reviewers` field from `dependantbot.yml`
  113. * chore(gitignore): ignore miniflux binary in root directory
  114. * build(deps): bump `golangci/golangci-lint-action` from `7` to `8`
  115. * build(deps): bump `golang.org/x/oauth2` from `0.29.0` to `0.30.0`
  116. * build(deps): bump `golang.org/x/net` from `0.39.0` to `0.40.0`
  117. * build(deps): bump `golang.org/x/image` from `0.26.0` to `0.27.0`
  118. * build(deps): bump `golang.org/x/crypto` from `0.37.0` to `0.38.0`
  119. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.23.3` to `2.23.8`
  120. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.23.1` to `2.23.3`
  121. * build(deps): bump `github.com/go-webauthn/webauthn` from `0.12.3` to `0.13.0`
  122. Version 2.2.8 (April 22, 2025)
  123. ------------------------------
  124. * refactor(js): replace `DomHelper` methods with standalone functions
  125. * refactor: avoid logging twice the feed errors in the background worker
  126. * fix(api): `hide_globally` categories field should be a boolean
  127. * fix(ui): add missing `await` when calling `navigator.share()` method
  128. * fix(ui): replace share link with a form button for better accessibility
  129. * feat(telegrambot): replace "Go to website" button with "Go to Miniflux"
  130. * feat(locale): update Polish translation
  131. * feat(locale): update German translation
  132. * feat(locale): update Chinese translation
  133. * feat(config): add `SCHEDULER_ROUND_ROBIN_MAX_INTERVAL` option
  134. * feat(cli): add `-reset-feed-next-check-at` argument
  135. * feat(api): add `update_content` query parameter to `/entries/{entryID}/fetch-content` endpoint
  136. * feat: use `Cache-Control` max-age and `Expires` headers to calculate next check
  137. * feat: implement proxy URL per feed
  138. * feat: add proxy rotation functionality
  139. * ci(linter): replace commitlint with a Python script
  140. * ci: add documentation issue template
  141. * build(deps): bump `golang.org/x/oauth2` from `0.28.0` to `0.29.0`
  142. * build(deps): bump `golang.org/x/net` from `0.38.0` to `0.39.0`
  143. * build(deps): bump `golang.org/x/image` from `0.25.0` to `0.26.0`
  144. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.22.4` to `2.23.1`
  145. * build(deps): bump `github.com/PuerkitoBio/goquery` from `1.10.2` to `1.10.3`
  146. * build(deps): bump `github.com/prometheus/client_golang`
  147. * build(deps): bump `github.com/mattn/go-sqlite3` from `1.14.24` to `1.14.28`
  148. * build(deps): bump `github.com/go-webauthn/webauthn` from `0.12.2` to `0.12.3`
  149. * build(deps): bump `github.com/coreos/go-oidc/v3` from `3.13.0` to `3.14.1`
  150. Version 2.2.7 (April 1, 2025)
  151. -----------------------------
  152. * test(api): update base URL after upgrading Hugo
  153. * refactor(rewrite): reorganize referer rules and remove obsolete mappings
  154. * refactor: combine feed icon handlers to use only `externalIconID`
  155. * fix(ui): update share feature to correctly select the title element and handle empty titles
  156. * fix(ui): update entry tags display logic to show links based on user authentication
  157. * fix(ui): remove touch-action style to prevent horizontal scrolling issues
  158. * fix(ui): log a warning for an empty client secret
  159. * fix(ui): change labels from "Read / Unread" to "Mark as Read"
  160. * fix(ui): avoid 500 errors and NaN when marking a deleted entry as read
  161. * fix(subscription): add `/rss/feed.xml` to the list of known feed URLs
  162. * fix(security): use a more restrictive CSP for untrusted content
  163. * fix(rewrite): remove obsolete rule for `webtoons.com`
  164. * fix(processor): add missing quotation marks to import comments
  165. * fix(googlereader): return enclosures in the `streamItemContentsHandler` response
  166. * fix: address minor issues detected by Go linters
  167. * feat(urlcleaner): add more Google Analytics parameters
  168. * feat(storage): reduce the number of SQL queries when fetching entry enclosures
  169. * feat(sanitizer): allow the `<u>` tag in feeds
  170. * feat(sanitizer): allow the `<b>` tag
  171. * feat(locale): update Polish translation
  172. * feat(locale): add Romanian translation
  173. * feat(integrations/ntfy): make ntfy topics configurable per feed
  174. * feat(googlereader): add a feed icon endpoint
  175. * feat: show database size on the about page
  176. * feat: add a `make add string` command to add new localized strings
  177. * docs: update README
  178. * docs: update client README to remove references to deprecated functions
  179. * ci: replace GitHub Issue Markdown templates with YAML forms
  180. * build(deps): bump `golangci/golangci-lint-action` from `6` to `7`
  181. * build(deps): bump `golang.org/x/term` from `0.29.0` to `0.30.0`
  182. * build(deps): bump `golang.org/x/oauth2` from `0.26.0` to` 0.28.0`
  183. * build(deps): bump `golang.org/x/net` from `0.35.0` to `0.38.0`
  184. * build(deps): bump `golang.org/x/image` from `0.24.0` to `0.25.0`
  185. * build(deps): bump `golang.org/x/crypto` from `0.33.0` to `0.36.0`
  186. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.21.3` to `2.22.4`
  187. * build(deps): bump `github.com/prometheus/client_golang`
  188. * build(deps): bump `github.com/golang-jwt/jwt/v5` from `5.2.1` to `5.2.2`
  189. * build(deps): bump `github.com/go-webauthn/webauthn` from `0.11.2` to `0.12.2`
  190. * build(deps): bump `github.com/go-jose/go-jose/v4` from `4.0.2` to `4.0.5`
  191. * build(deps): bump `github.com/coreos/go-oidc/v3` from `3.12.0` to `3.13.0`
  192. Version 2.2.6 (February 22, 2025)
  193. ---------------------------------
  194. * test(encoding): add unit tests for `CharsetReader` function
  195. * refactor(xml): improve the performances of `NewXMLDecoder`
  196. * refactor(ui): remove superfluous cast
  197. * refactor(request): broaden an error condition when parsing cookies
  198. * refactor(processor): remove superfluous parenthesis
  199. * refactor(opml): don't define receivers on both values and pointer
  200. * refactor(model): simplify a condition
  201. * refactor(model): don't define methods both on instance and pointer
  202. * refactor(locale): sort JSON documents alphabetically by keys
  203. * refactor(locale): remove superfluous parenthesis
  204. * refactor(js): use proper types in `app.js`
  205. * refactor(js): replace the deprecated `window.pageYOffset` with `window.scollY`
  206. * refactor(js): remove a useless `return`
  207. * refactor(js): anchor `=` removal in `webauthn_handler.js` regex
  208. * refactor(js): add default value for parameter `fallbackSelf` in `goToPage` function
  209. * refactor(integration): don't use `defer` in a loop
  210. * refactor(icon): guard against a potential `null` dereference
  211. * refactor(date): use an else-if instead of two if statements
  212. * refactor(css): use shortcuts to declare padding
  213. * refactor(client): remove a useless cast
  214. * perf(sanitizer): remove two useless calls to `strings.ReplaceAll`
  215. * fix(ui): Redirect correctly post feed removal from category feeds list
  216. * fix(scraper): update TechCrunch scraper rule
  217. * fix(scraper): avoid encoding issue if charset meta tag is after 1024 bytes
  218. * fix(sanitizer): non-allowed attributes are not properly stripped
  219. * fix(sanitizer): correct HTML tag name from `tfooter` to `tfoot`
  220. * fix(rss): handle item title with `CDATA` content correctly
  221. * fix(locale): missing hyphen in `de_DE.json`
  222. * fix(css): avoid aside overflow on the pagination menu
  223. * fix(css): `--entry-content-aside-border-color` is missing from `system.css`
  224. * fix(api): return 500 response when JSON serialization fails
  225. * fix(api): JSON encoding is failing with dates at OAD and negative timezone offset
  226. * feat(urlcleaner): add trackers to the blocklist
  227. * feat(ui): open the `<details>` tag in edit feed page when the feature is enabled
  228. * feat(sanitizer): improve text truncation with better space handling
  229. * feat(sanitizer): allow `img` tags with only a `srcset` and no `src` attribute
  230. * feat(rss): add workaround for RSS item title with HTML content
  231. * feat(pushover): add integration with pushover.net
  232. * feat(processor): fetch YouTube watch time in bulk using the API
  233. * feat(locale): update Traditional Chinese translation
  234. * feat(locale): update Polish translation
  235. * feat(locale): update French translation
  236. * feat(locale): add Taiwanese POJ (nan-Latn-pehoeji)
  237. * feat(integration): update Linkace integration to support API v2
  238. * feat(integration): add webhook URL per feed
  239. * feat(integration): add Slack integration
  240. * feat(css): improve aside element position on smartphone
  241. * ci: update GitHub Actions workflows to use Go 1.24
  242. * ci: trigger packaging tests on pull requests
  243. * ci: add `commitlint` to validate PR commit messages
  244. * build(deps): bump `golang` in `/packaging/debian`
  245. * build(deps): bump `golang.org/x/term` from `0.28.0` to `0.29.0`
  246. * build(deps): bump `golang.org/x/oauth2` from `0.25.0` to `0.26.0`
  247. * build(deps): bump `golang.org/x/net` from `0.34.0` to `0.35.0`
  248. * build(deps): bump `golang.org/x/image` from `0.23.0` to `0.24.0`
  249. * build(deps): bump `golang.org/x/crypto` from `0.32.0` to `0.33.0`
  250. * build(deps): bump `github.com/PuerkitoBio/goquery` from `1.10.1` to `1.10.2`
  251. Version 2.2.5 (January 20, 2025)
  252. --------------------------------
  253. * test(js): improve `.jshintrc` (strict comparison, etc...)
  254. * test(sanitizer): add a fuzzer
  255. * refactor(rewriter): use custom title case converter implementation instead of `golang.org/x/text/cases.Title()`
  256. * refactor(readingtime): replace `whatlanggo` package with an ad-hoc implementation
  257. * refactor(oauth2): no need to use `io.WriteString` when sha256 provides a way to obtain a sum in a single call
  258. * refactor(js): simplify a bit `keyboard_handler.js`
  259. * refactor(js): remove an outdated check for `{passive: true}`
  260. * refactor(js): minor refactoring of `touch_handler.js`
  261. * refactor(js): minor improvements in `app.js`
  262. * refactor(database): add special handling for PostgreSQL-specific migrations
  263. * fix(ui): reading preferences are reset if the form values are incorrect
  264. * fix(sanitizer): allow `<hr>` tags
  265. * fix(finder): do not add redirections to the list of subscriptions to avoid confusion
  266. * fix: update Wallabag URL label to avoid confusion
  267. * fix: improve pagination when having identical publication date
  268. * fix: do not strip tags in Atom entry title
  269. * feat(ntfy): Add option to use internal links
  270. * feat(locale): update Polish translation
  271. * feat(locale): update German translation
  272. * feat(integration): add Discord integration
  273. * feat(database): add optional build support for SQLite
  274. * feat: validate usernames upon creation
  275. * feat: replace `%{?systemd_requires}` with `%{?systemd_ordering}`
  276. * feat: bump linter and minifier from ECMAScript 2017 to 2020 (ES11)
  277. * feat: add `fix_ghost_cards` rewrite rule
  278. * ci: tighten the CodeQL rules
  279. * ci: run Docker tests only when the Dockerfiles are modified
  280. * ci: run `-race -cover` only on Ubuntu jobs
  281. * ci: don't specify languages for CodeQL
  282. * ci: don't run `go vet ./...` as it's run as part of `golangci-lint`
  283. * ci: checkout before installing Go to improve cache efficiency
  284. * ci: avoid building Linux packages for each pull-request
  285. * build(deps): bump `golang.org/x/oauth2` from `0.24.0` to `0.25.0`
  286. * build(deps): bump `golang.org/x/net` from `0.33.0` to `0.34.0`
  287. * build(deps): bump `golang.org/x/crypto` from `0.31.0` to `0.32.0`
  288. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.21.2` to `2.21.3`
  289. * build(deps): bump `github.com/PuerkitoBio/goquery` from `1.10.0` to `1.10.1`
  290. * build(deps): bump `github.com/coreos/go-oidc/v3` from `3.11.0` to `3.12.0`
  291. Version 2.2.4 (December 20, 2024)
  292. ---------------------------------
  293. * test(rewrite): add unit test for referer rewrite function
  294. * refactor(subscription): use `strings.HasSuffix` instead of a regex in `FindSubscriptionsFromYouTubePlaylistPage`
  295. * refactor(sanitizer): use `token.String()` instead of `html.EscapeString(token.Data)`
  296. * refactor(sanitizer): simplify `isValidTag`
  297. * refactor(sanitizer): simplify `hasRequiredAttributes`
  298. * refactor(sanitizer): remove condition because `config.Opts` is guaranteed to never be nil
  299. * refactor(sanitizer): remove a now-useless function after refactoring
  300. * refactor(sanitizer): refactor conditions to highlight their similitude, enabling further refactoring
  301. * refactor(sanitizer): optimize `strip_tags.go`
  302. * refactor(sanitizer): micro-optimizations of `srcset.go`
  303. * refactor(sanitizer): merge two conditions
  304. * refactor(sanitizer): inline a function in `sanitizeAttributes` and fix a bug in it
  305. * refactor(sanitizer): inline a condition in `sanitizeSrcsetAttr`
  306. * refactor(sanitizer): improve `rewriteIframeURL()`
  307. * refactor(sanitizer): Google+ isn't a thing anymore
  308. * refactor(sanitizer): change the scope of a variable
  309. * refactor(rewriter): replace regex with URL parsing for referrer override
  310. * refactor(rewriter): avoid the use of regex in `addDynamicImage`
  311. * refactor(rewrite): remove unused function arguments
  312. * refactor(readability): various improvements and optimizations
  313. * refactor(readability): simplify the regexes in `readability.go`
  314. * refactor(processor): use URL parsing instead of a regex
  315. * refactor(processor): improve the `rewrite` URL rule regex
  316. * refactor(locale): delay parsing of translations until they're used
  317. * refactor(js): factorise a line in `app.js`
  318. * refactor(handler): delay `store.UserByID()` as much as possible
  319. * refactor(css): replace `-ms-text-size-adjust` with `text-size-adjust`
  320. * refactor(css): remove `-webkit-clip-path`
  321. * refactor(css): factorise `.pagination-next` and `.pagination-last` together
  322. * refactor: use a better construct than `doc.Find(…).First()`
  323. * refactor: use `min/max` instead of `math.Min/math.Max`
  324. * refactor: refactor `internal/reader/readability/testdata`
  325. * refactor: optimize `sanitizeAttributes`
  326. * refactor: get rid of `numberOfPluralFormsPerLanguage` test-only variable
  327. * fix(storage): replace timezone function call with view
  328. * fix(consistency): align feed modification behavior between API and UI
  329. * fix(ci): fix grammar in pull-request template
  330. * fix: load icon from site URL instead of feed URL
  331. * fix: feed icon from xml ignored during force refresh
  332. * feat(rewrite)!: remove `parse_markdown` rewrite rule
  333. * feat(mediaproxy): update predefined referer spoofing rules for restricted media resources
  334. * feat(locale): update translations to clarify readeck URL instead of readeck API endpoint
  335. * feat(locale): update German translations
  336. * feat(locale): update Chinese translations
  337. * feat(apprise): update `SendNotification` to handle multiple entries and add logging
  338. * feat(apprise): add title in notification request body
  339. * feat: resize favicons before storing them in the database
  340. * feat: optionally fetch watch time from YouTube API instead of website
  341. * feat: only show the commit URL if it's not empty on `/about`
  342. * feat: add predefined scraper rules for `arstechnica.com`
  343. * feat: add date-based entry filtering rules
  344. * chore: remove `blog.laravel.com` rewrite rule
  345. * build(deps): bump `library/alpine` in `/packaging/docker/alpine` to `3.21`
  346. * build(deps): bump `golang.org/x/term` from `0.26.0` to `0.27.0`
  347. * build(deps): bump `golang.org/x/net` from `0.31.0` to `0.33.0`
  348. * build(deps): bump `golang.org/x/crypto` from `0.30.0` to `0.31.0`
  349. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.21.1` to `2.21.2`
  350. Version 2.2.3 (November 10, 2024)
  351. ---------------------------------
  352. * fix: unable to change password due to a typo in SQL parameter
  353. * fix: show only one player when there are several audio/video enclosures
  354. * feat(mediaproxy): pass original filename in `Content-Disposition` header
  355. * feat(mediaproxy): implement referer spoofing for restricted media resources
  356. * feat(integration): update Shiori integration to use new API endpoints for login/bookmark
  357. * build(deps): bump `golang.org/x/text` from `0.19.0` to `0.20.0`
  358. * build(deps): bump `golang.org/x/term` from `0.25.0` to `0.26.0`
  359. * build(deps): bump `golang.org/x/oauth2` from `0.23.0` to `0.24.0`
  360. * build(deps): bump `golang.org/x/net` from `0.30.0` to `0.31.0`
  361. * build(deps): bump `golang.org/x/crypto` from `0.28.0` to `0.29.0`
  362. Version 2.2.2 (October 29, 2024)
  363. --------------------------------
  364. * fix(webauthn): add backup eligibility flag workaround to avoid a 401 response
  365. * fix: update `Last-Modified` if it changes in a 304 response
  366. * feat(webauthn): show help message regarding username and non-discoverable credentials
  367. * feat(rss): calculate hash based on item title/content for feeds without GUID and link
  368. * feat(locale): update Chinese translations
  369. * feat(locale): update Polish translations
  370. * feat(integration): add Cubox integration
  371. * feat(client): add `custom_js` field to Go API client
  372. * feat(api): add endpoint for user integration status
  373. * feat: update feed icon during force refresh
  374. * feat: take `Retry-After` header into consideration for rate limited feeds
  375. * feat: set entry URL to rewritten URL if a rewrite rule is defined
  376. * feat: replace `xurls` third-party module with an ad-hoc regexp
  377. * feat: add new settings option to allow external fonts
  378. * feat: add custom user JavaScript similar to custom CSS
  379. * chore: update test case comment
  380. * build(deps): bump `golang.org/x/net` from `0.29.0` to `0.30.0`
  381. * build(deps): bump `github.com/yuin/goldmark` from `1.7.4` to `1.7.8`
  382. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.20.37` to `2.21.1`
  383. * build(deps): bump `github.com/prometheus/client_golang`
  384. * build(deps): bump `github.com/andybalholm/brotli` from `1.1.0` to `1.1.1`
  385. Version 2.2.1 (September 28, 2024)
  386. ----------------------------------
  387. * refactor: split processor package into smaller files
  388. * fix(mediaproxy): forward client user-agent to origin to bypass bot protection
  389. * fix: use root URL to generate absolute proxy URL
  390. * fix: remove progression save on shared entry
  391. * fix: add datasource variable and upgrade depecrated panels on the Grafana dashboard
  392. * feat(locale): update zh_CN translations
  393. * feat(locale): update Ukrainian translations
  394. * feat(locale): update Spanish translations
  395. * feat(locale): update Dutch translations
  396. * feat: use Bilibili API instead of web scraping to get videos watch time
  397. * feat: add pagination to shared entries listing
  398. * feat: add button to show only starred entries per category
  399. * build(deps): bump `golang.org/x/term` from `0.23.0` to `0.24.0`
  400. * build(deps): bump `golang.org/x/oauth2` from `0.22.0` to `0.23.0`
  401. * build(deps): bump `golang.org/x/net` from `0.28.0` to `0.29.0`
  402. * build(deps): bump `github.com/PuerkitoBio/goquery` from `1.9.2` to `1.10.0`
  403. * build(deps): bump `github.com/prometheus/client_golang` from `1.20.3` to `1.20.4`
  404. * build(deps): bump `github.com/go-webauthn/webauthn` from `0.10.2` to `0.11.2`
  405. * build: update go.mod to Go 1.23
  406. * build: bump devcontainer version to go 1.23
  407. Version 2.2.0 (August 18, 2024)
  408. -------------------------------
  409. * refactor: simplify Youtube feeds discovery
  410. * fix(integration): define content encoding explicitly when sending article body to Readeck
  411. * fix(fever): correct sorting direction when using `max_id` argument
  412. * fix(client): Return `nil` and error if endpoint is an empty string
  413. * fix: video poster image URL is encoded twice when using `MEDIA_PROXY_MODE=all`
  414. * fix: use `BASE_URL` instead of `r.Host` to generate absolute media proxy URL
  415. * fix: panic during YouTube channel feed discovery
  416. * fix: honor `hide_globally` when creating a new feed through the api
  417. * fix: align pagination correctly on small screens with non-English text
  418. * fix: `store.GetEnclosure()` should return `nil` if no rows are returned
  419. * feat(locale): update Turkish translations
  420. * feat(locale): update French translations
  421. * feat(locale): update Chinese` translations
  422. * feat(integration): add ntfy integration
  423. * feat(api): add API routes `/v1/enclosures/{enclosureID}`
  424. * feat: validate `OAUTH2_PROVIDER` config option value
  425. * feat: remove YouTube video page subscription finder because `meta[itemprop="channelId"]` no longer exists
  426. * feat: remove well-known URL parameter trackers
  427. * feat: mark media as read when playback reaches 90%
  428. * feat: change log level to info when running migrations
  429. * feat: allow customizing the display name of the OpenID Connect provider
  430. * feat: add support for `base` HTML element when discovering feeds
  431. * feat: add support for `aside` HTML element in entry content
  432. * feat: Add option to disable local auth form
  433. * feat: add license info to Javascript files for LibreJS compatibility
  434. * feat: add `FETCH_BILIBILI_WATCH_TIME` config option
  435. * docs: update links to filtering rules
  436. * chore: avoid using legacy key/value format in Dockerfile
  437. * build(deps): bump `golang.org/x/oauth2` from `0.21.0` to `0.22.0`
  438. * build(deps): bump `golang.org/x/net` from `0.27.0` to `0.28.0`
  439. * build(deps): bump `golang.org/x/crypto` from `0.25.0` to `0.26.0`
  440. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.20.36` to `2.20.37`
  441. * build(deps): bump `github.com/prometheus/client_golang`
  442. * build: update GitHub Actions to Go 1.23
  443. * build: publish OCI images only if `PUBLISH_DOCKER_IMAGES=true`
  444. * build: bump Alpine Linux build image to v3.20
  445. * build: add sha256 checksum file for published binaries
  446. Version 2.1.4 (July 9, 2024)
  447. ----------------------------
  448. * test: add unit tests for `IsModified()` behaviour
  449. * refactor: improve YouTube page feed detection
  450. * fix(ui): settings form is not populated correctly after validation errors
  451. * fix(ui): playback speed indicator precision
  452. * fix(ui): playback speed indicator on shared entries
  453. * fix(integration): preserve existing Pinboard bookmarks
  454. * fix(googlereader): set `CrawlTimeMsec` to the correct precision
  455. * fix(build): failed to solve container image `arm64v8/golang:1.22-bookworm`
  456. * fix(build): add `distroless` suffix on `latest` tag in GitHub workflow
  457. * fix: use `ETag` as a stronger validator than `Last-Modified`
  458. * fix: update `theverge.com` rewrite rule to avoid duplicate image
  459. * fix: incorrect Go package comment `reader/readingtime`
  460. * fix: error out for improper rewrite regexp when processing feed entries
  461. * fix: ensures that session cookies are not expiring before the session is cleaned up from the database as per `CLEANUP_REMOVE_SESSIONS_DAYS`
  462. * fix: `<img>` aspect ratio with `height: auto`
  463. * feat(ui): add `viewport-fit=cover`
  464. * feat(sanitizer): add support for HTML hidden attribute
  465. * feat(locale): update French translations
  466. * feat(integration): add Raindrop integration
  467. * feat(integration): add feed name to Telegram message
  468. * feat(integration): add Betula integration
  469. * feat: use of insecure TLS ciphers when "Allow self-signed or invalid certificates" is enabled to workaround some broken websites
  470. * feat: discover feeds from a Youtube playlist pages
  471. * feat: add navigation to last/first page
  472. * feat: add global block and keep filters
  473. * feat: add description field to feed settings
  474. * feat: add `pitchfork.com` scraping rule
  475. * feat: add `FETCH_NEBULA_WATCH_TIME` config option
  476. * Bump `github.com/PuerkitoBio/goquery` from` 1.9.1` to` 1.9.2`
  477. * Bump `github.com/prometheus/client_golang` from `1.19.0` to `1.19.1`
  478. * build(deps): bump `library/alpine` in `/packaging/docker/alpine`
  479. * build(deps): bump `golangci/golangci-lint-action` from `4` to `6`
  480. * build(deps): bump `golang.org/x/term` from `0.19.0` to `0.22.0`
  481. * build(deps): bump `golang.org/x/oauth2` from `0.19.0` to `0.21.0`
  482. * build(deps): bump `golang.org/x/net` from `0.22.0` to `0.27.0`
  483. * build(deps): bump `golang.org/x/crypto` from `0.24.0` to `0.25.0`
  484. * build(deps): bump `github.com/yuin/goldmark` from `1.7.1` to `1.7.4`
  485. * build(deps): bump `github.com/tdewolff/minify/v2` from `2.20.20` to `2.20.36`
  486. * build(deps): bump `github.com/coreos/go-oidc/v3` from `3.10.0` to `3.11.0`
  487. * build(deps): bump `docker/build-push-action` from `5` to `6`
  488. Version 2.1.3 (April 27, 2024)
  489. ------------------------------
  490. * `api`: `rand.Intn(math.MaxInt64)` causes tests to fail on 32-bit architectures (use `rand.Int()` instead)
  491. * `ci`: use `docker/metadata-action` instead of deprecated shell-scripts
  492. * `database`: remove `entries_feed_url_idx` index because entry URLs can exceeds btree index size limit
  493. * `finder`: find feeds from YouTube playlist
  494. * `http/response`: add brotli compression support
  495. * `integration/matrix`: fix function name in comment
  496. * `packaging`: specify container registry explicitly (e.g., Podman does not use `docker.io` by default)
  497. * `packaging`: use `make miniflux` instead of duplicating `go build` arguments (this leverages Go's PIE build mode)
  498. * `reader/fetcher`: add brotli content encoding support
  499. * `reader/processor`: minimize feed entries HTML content
  500. * `reader/rewrite`: add a rule for `oglaf.com`
  501. * `storage`: change `GetReadTime()` function to use `entries_feed_id_hash_key` index
  502. * `ui`: add seek and speed controls to media player
  503. * `ui`: add tag entries page
  504. * `ui`: fix JavaScript error when clicking on unread counter
  505. * `ui`: use `FORCE_REFRESH_INTERVAL` config for category refresh
  506. * Bump `github.com/tdewolff/minify/v2` from `2.20.19` to `2.20.20`
  507. * Bump `golang.org/x/net` from `0.22.0` to `0.24.0`
  508. * Bump `golang.org/x/term` from `0.18.0` to `0.19.0`
  509. * Bump `golang.org/x/oauth2` from `0.18.0` to `0.19.0`
  510. * Bump `github.com/yuin/goldmark` from `1.7.0` to `1.7.1`
  511. Version 2.1.2 (March 30, 2024)
  512. ------------------------------
  513. * `api`: rewrite API integration tests without build tags
  514. * `ci`: add basic ESLinter checks
  515. * `ci`: enable go-critic linter and fix various issues detected
  516. * `ci`: fix JavaScript linter path in GitHub Actions
  517. * `cli`: avoid misleading error message when creating an admin user automatically
  518. * `config`: add `FILTER_ENTRY_MAX_AGE_DAYS` option
  519. * `config`: bump the number of simultaneous workers
  520. * `config`: rename `PROXY_*` options to `MEDIA_PROXY_*`
  521. * `config`: use `crypto.GenerateRandomBytes` instead of doing it by hand
  522. * `http/request`: refactor conditions to be more idiomatic
  523. * `http/response`: remove legacy `X-XSS-Protection` header
  524. * `integration/rssbrige`: fix rssbrige import
  525. * `integration/shaarli`: factorize the header+payload concatenation as data
  526. * `integration/shaarli`: no need to base64-encode then remove the padding when we can simply encode without padding
  527. * `integration/shaarli`: the JWT token was declared as using HS256 as algorithm, but was using HS512
  528. * `integration/webhook`: add category title to request body
  529. * `locale`: update Turkish translations
  530. * `man page`: sort config options in alphabetical order
  531. * `mediaproxy`: reduce the internal indentation of `ProxifiedUrl` by inverting some conditions
  532. * `mediaproxy`: simplify and refactor the package
  533. * `model`: replace` Optional{Int,Int64,Float64}` with a generic function `OptionalNumber()`
  534. * `model`: use struct embedding for `FeedCreationRequestFromSubscriptionDiscovery` to reduce code duplication
  535. * `reader/atom`: avoid debug message when the date is empty
  536. * `reader/atom`: change `if !a { a = } if !a {a = }` constructs into `if !a { a = ; if !a {a = }}` to reduce the number of comparisons and improve readability
  537. * `reader/atom`: Move the population of the feed's entries into a new function, to make BuildFeed easier to understand/separate concerns/implementation details
  538. * `reader/atom`: refactor Atom parser to use an adapter
  539. * `reader/atom`: use `sort+compact` instead of `compact+sort` to remove duplicates
  540. * `reader/atom`: when detecting the format, detect its version as well
  541. * `reader/encoding`: inline a one-liner function
  542. * `reader/handler`: fix force refresh feature
  543. * `reader/json`: refactor JSON Feed parser to use an adapter
  544. * `reader/media`: remove a superfluous error-check: `strconv.ParseInt` returns `0` when passed an empty string
  545. * `reader/media`: simplify switch-case by moving a common condition above it
  546. * `reader/processor`: compile block/keep regex only once per feed
  547. * `reader/rdf`: refactor RDF parser to use an adapter
  548. * `reader/rewrite`: inline some one-line functions
  549. * `reader/rewrite`: simplify `removeClickbait`
  550. * `reader/rewrite`: transform a free-standing function into a method
  551. * `reader/rewrite`: use a proper constant instead of a magic number in `applyFuncOnTextContent`
  552. * `reader/rss`: add support for `<media:category>` element
  553. * `reader/rss`: don't add empty tags to RSS items
  554. * `reader/rss`: refactor RSS parser to use a default namespace to avoid some limitations of the Go XML parser
  555. * `reader/rss`: refactor RSS Parser to use an adapter
  556. * `reader/rss`: remove some duplicated code in RSS parser
  557. * `reader`: ensure that enclosure URLs are always absolute
  558. * `reader`: move iTunes and GooglePlay XML definitions to their own packages
  559. * `reader`: parse podcast categories
  560. * `reader`: remove trailing space in `SiteURL` and `FeedURL`
  561. * `storage`: do not store empty tags
  562. * `storage`: simplify `removeDuplicates()` to use a `sort`+`compact` construct instead of doing it by hand with a hashmap
  563. * `storage`: Use plain strings concatenation instead of building an array and then joining it
  564. * `timezone`: make sure the tests pass when the timezone database is not installed on the host
  565. * `ui/css`: align `min-width` with the other `min-width` values
  566. * `ui/css`: fix regression: "Add to Home Screen" button is unreadable
  567. * `ui/js`: don't use lambdas to return a function, use directly the function instead
  568. * `ui/js`: enable trusted-types
  569. * `ui/js`: fix download button loading label
  570. * `ui/js`: fix JavaScript error on the login page when the user not authenticated
  571. * `ui/js`: inline one-line functions
  572. * `ui/js`: inline some `querySelectorAll` calls
  573. * `ui/js`: reduce the scope of some variables
  574. * `ui/js`: remove a hack for "Chrome 67 and earlier" since it was released in 2018
  575. * `ui/js`: replace `DomHelper.findParent` with `.closest`
  576. * `ui/js`: replace `let` with `const`
  577. * `ui/js`: simplify `DomHelper.getVisibleElements` by using a `filter` instead of a loop with an index
  578. * `ui/js`: use a `Set` instead of an array in a `KeyboardHandler`'s member
  579. * `ui/js`: use some ternaries where it makes sense
  580. * `ui/static`: make use of `HashFromBytes` everywhere
  581. * `ui/static`: set minifier ECMAScript version
  582. * `ui`: add keyboard shortcuts for scrolling to top/bottom of the item list
  583. * `ui`: add media player control playback speed
  584. * `ui`: remove unused variables and improve JSON decoding in `saveEnclosureProgression()`
  585. * `validator`: display an error message on edit feed page when the feed URL is not unique
  586. * Bump `github.com/coreos/go-oidc/v3` from `3.9.0` to `3.10.0`
  587. * Bump `github.com/go-webauthn/webauthn` from `0.10.1` to `0.10.2`
  588. * Bump `github.com/tdewolff/minify/v2` from `2.20.18` to `2.20.19`
  589. * Bump `google.golang.org/protobuf` from `1.32.0` to `1.33.0`
  590. Version 2.1.1 (March 10, 2024)
  591. -----------------------------
  592. * Move search form to a dedicated page
  593. * Add Readeck integration
  594. * Add feed option to disable HTTP/2 to avoid fingerprinting
  595. * Add `Enter` key as a hotkey to open selected item
  596. * Proxify `video` element `poster` attribute
  597. * Add a couple of new possible locations for feeds
  598. * Hugo likes to generate `index.xml`
  599. * `feed.atom` and `feed.rss` are used by enterprise-scale/old-school gigantic CMS
  600. * Fix categories import from Thunderbird's OPML
  601. * Fix logo misalignment when using languages that are more verbose than English
  602. * Google Reader: Do not return a 500 error when no items is returned
  603. * Handle RDF feeds with duplicated `<title>` elements
  604. * Sort integrations alphabetically
  605. * Add more URL validation in media proxy
  606. * Add unit test to ensure each translation has the correct number of plurals
  607. * Add missing plurals for some languages
  608. * Makefile: quiet `git describe` and `rev-parse` stderr: When building from a tarball instead of a cloned git repo, there would be two `fatal: not a git repository` errors emitted even though the build succeeds. This is because of how `VERSION` and `COMMIT` are set in the Makefile. This PR suppresses the stderr for these variable assignments.
  609. * Makefile: do not force `CGO_ENABLED=0` for `miniflux` target
  610. * Add GitHub Action pipeline to build packages on-demand
  611. * Remove Golint (deprecated), use `staticcheck` and `golangci-lint` instead
  612. * Build amd64/arm64 Debian packages with CGO disabled
  613. * Update `go.mod` and add `.exe` suffix to Windows binary
  614. * Add a couple of fuzzers
  615. * Fix CodeQL workflow
  616. * Code and performance improvements:
  617. * Use an `io.ReadSeeker` instead of an `io.Reader` to parse feeds
  618. * Speed up the sanitizer:
  619. - Allow Youtube URLs to start with `www`
  620. - Use `strings.Builder` instead of a `bytes.Buffer`
  621. - Use a `strings.NewReader` instead of a `bytes.NewBufferString`
  622. - Sprinkles a couple of `continue` to make the code-flow more obvious
  623. - Inline calls to `inList`, and put their parameters in the right order
  624. - Simplify `isPixelTracker`
  625. - Simplify `isValidIframeSource`, by extracting the hostname and comparing it directly, instead of using the full url and checking if it starts with multiple variations of the same one (`//`, `http:`, `https://` multiplied by `/www.`)
  626. - Add a benchmark
  627. - Instead of having to allocate a ~100 keys map containing possibly dynamic values (at least to the go compiler), allocate it once in a global variable. This significantly speeds things up, by reducing the garbage
  628. - Use constant time access for maps instead of iterating on them
  629. - Build a ~large whitelist map inline instead of constructing it item by item (and remove a duplicate key/value pair)
  630. - Use `slices` instead of hand-rolled loops
  631. collector/allocator involvements.
  632. * Reuse a `Reader` instead of copying to a buffer when parsing an Atom feed
  633. * Preallocate memory when exporting to OPML: This should marginally increase performance when exporting a large amount of feeds to OPML
  634. * Delay call of `view.New` after logging the user in: There is no need to do extra work like creating a session and its associated view until the user has been properly identified and as many possibly-failing sql request have been successfully run
  635. * Use constant-time comparison for anti-csrf tokens: This is probably completely overkill, but since anti-csrf tokens are secrets, they should be compared against untrusted inputs in constant time
  636. * Simplify and optimize `genericProxyRewriter`
  637. - Reduce the amount of nested loops: it's preferable to search the whole page once and filter on it (even with filters that should always be false), than searching it again for every element we're looking for.
  638. - Factorize the proxying conditions into a `shouldProxy` function to reduce the copy-pasta.
  639. * Speed up `removeUnlikelyCandidates`: `.Not` returns a brand new `Selection`, copied element by element
  640. * Improve `EstimateReadingTime`'s speed by a factor 7
  641. - Refactorise the tests and add some
  642. - Use 250 signs instead of the whole text
  643. - Only check for Korean, Chinese and Japanese script
  644. - Add a benchmark
  645. - Use a more idiomatic control flow
  646. * Don't compute reading-time when unused: If the user doesn't display reading times, there is no need to compute them. This should speed things up a bit, since `whatlanggo.Detect` is abysmally slow.
  647. * Simplify `username` generation for the integration tests: No need to generate random numbers 10 times, generate a single big-enough one. A single int64 should be more than enough
  648. * Add missing regex anchor detected by CodeQL
  649. * Don't mix up slices capacity and length
  650. * Use prepared statements for intervals, `ArchiveEntries` and `updateEnclosures`
  651. * Use modern for-loops introduced with Go 1.22
  652. * Remove a superfluous condition: No need to check if the length of `line` is positive since we're checking afterwards that it contains the `=` sign
  653. * Close resources as soon as possible, instead of using `defer()` in a loop
  654. * Remove superfluous escaping in a regex
  655. * Use `strings.ReplaceAll` instead of `strings.Replace(…, -1)`
  656. * Use `strings.EqualFold` instead of `strings.ToLower(…) ==`
  657. * Use `.WriteString(` instead of `.Write([]byte(…`
  658. * Use `%q` instead of `"%s"`
  659. * Make `internal/worker/worker.go` read-only
  660. * Use a switch-case construct in `internal/locale/plural.go` instead of an avalanche of `if`
  661. * Template functions: simplify `formatFileSize` and `duration` implementation
  662. * Inline some templating functions
  663. * Make use of `printer.Print` when possible
  664. * Add a `printer.Print` to `internal/locale/printer.go`: No need to use variadic functions with string format interpolation to generate static strings
  665. * Minor code simplification in `internal/ui/view/view.go`: No need to create the map item by item when we can create it in one go
  666. * Build the map inline in `CountAllFeeds()`: No need to build an empty map to then add more fields in it one by one
  667. * Miscellaneous improvements to `internal/reader/subscription/finder.go`:
  668. - Surface `localizedError` in `FindSubscriptionsFromWellKnownURLs` via `slog`
  669. - Use an inline declaration for new subscriptions, like done elsewhere in the
  670. file, if only for consistency's sake
  671. - Preallocate the `subscriptions` slice when using an RSS-bridge,
  672. * Use an update-where for `MarkCategoryAsRead` instead of a subquery
  673. * Simplify `CleanOldUserSessions`' query: No need for a subquery, filtering on `created_at` directly is enough
  674. * Simplify `cleanupEntries`' query
  675. - `NOT (hash=ANY(%4))` can be expressed as `hash NOT IN $4`
  676. - There is no need for a subquery operating on the same table, moving the conditions out is equivalent.
  677. * Reformat `ArchiveEntries`'s query for consistency's sake and replace the `=ANY` with an `IN`
  678. * Reformat the query in `GetEntryIDs` and `GetReadTime`'s query for consistency's sake
  679. * Simplify `WeeklyFeedEntryCount`: No need for a `BETWEEN`: we want to filter on entries published in the last week, no need to express is as "entries published between now and last week", "entries published after last week" is enough
  680. * Add some tests for `add_image_title`
  681. * Remove `github.com/google/uuid` dependencies: Replace it with a hand-rolled implementation. Heck, an UUID isn't even a requirement according to Omnivore API docs
  682. * Simplify `internal/reader/icon/finder.go`:
  683. - Use a simple regex to parse data uri instead of a hand-rolled parser, and document what fields are considered mandatory.
  684. - Use case-insensitive matching to find (fav)icons, instead of doing the same query twice with different letter cases
  685. - Add `apple-touch-icon-precomposed.png` as a fallback `favicon`
  686. - Reorder the queries to have `icon` first, since it seems to be the most popular one. It used to be last, meaning that pages had to be parsed completely 4 times, instead of one now.
  687. - Minor factorisation in `findIconURLsFromHTMLDocument`
  688. * Small refactoring of `internal/reader/date/parser.go`:
  689. - Split dates formats into those that require local times and those who don't, so that there is no need to have a switch-case in the for loop with around 250 iterations at most.
  690. - Be more strict when it comes to timezones, previously invalid ones like -13 were accepted. Also add a test for this.
  691. - Bail out early if the date is an empty string.
  692. * Make use of Go ≥ 1.21 slices package instead of hand-rolled loops
  693. * Reorder the fields of the `Entry` struct to save some memory
  694. * Dependencies update:
  695. * Bump `golang.org/x/oauth2` from `0.17.0` to `0.18.0`
  696. * Bump `github.com/prometheus/client_golang` from `1.18.0` to `1.19.0`
  697. * Bump `github.com/tdewolff/minify/v2` from `2.20.16` to `2.20.18`
  698. * Bump `github.com/PuerkitoBio/goquery` from `1.8.1` to `1.9.1`
  699. * Bump `golang.org/x/crypto` from `0.19.0` to `0.20.0`
  700. * Bump `github.com/go-jose/go-jose/v3` from `3.0.1` to `3.0.3`
  701. Version 2.1.0 (February 17, 2024)
  702. ---------------------------------
  703. * Add Linkwarden integration
  704. * Add LinkAce integration
  705. * Add `FORCE_REFRESH_INTERVAL` config option
  706. * Add `item-meta-info-reading-time` CSS class
  707. * Add `add_dynamic_iframe` rewrite function
  708. * Add attribute `data-original-mos` to `add_dynamic_image` rewrite candidates
  709. * Update entry processor to allow blocking/keeping entries by tags and/or authors
  710. * Change default `Accept` header when fetching feeds
  711. * Rewrite relative RSS Bridge URL to absolute URL
  712. * Use numeric user ID in Alpine and distroless container image (avoid `securityContext` error in Kubernetes)
  713. * Always try to use HTTP/2 when fetching feeds if available
  714. * Add `type` attribute in OPML export as per OPML 2.0 specs
  715. * Fix missing translation argument for the key `error.unable_to_parse_feed`
  716. * Fix Debian package builder when using Go 1.22 and `armhf` architecture
  717. * Fix typo in log message
  718. * Fix incorrect label shown when saving an article
  719. * Fix incorrect condition in refresh feeds cli
  720. * Fix incorrect label `for` attribute
  721. * Add missing label ID for custom CSS field
  722. * Accessibility improvements:
  723. * Add workaround for macOS VoiceOver that didn't announce `details` and `summary` when expanded
  724. * Add `alert` role to alert message element
  725. * Add a `h2` heading to the article element so that the screen reader users can navigate the article through the heading level
  726. * Add an `aria-label` attribute for the article element for screen readers
  727. * Remove the icon image `alt` attribute in feeds list to prevent screen reader to announce it before entry title
  728. * Add `sr-only` CSS class for screen reader users (provides more context)
  729. * Differentiate between buttons and links
  730. * Change links that could perform actions to buttons
  731. * Improve translation of hidden Aria elements
  732. * Remove the redundant article role
  733. * Add a search landmark for the search form so that the screen reader users can navigate to it
  734. * Add skip to content link
  735. * Add `nav` landmark to page header links
  736. * Limit feed/category entry pagination to unread entries when coming from unread entry list
  737. * Update German translation
  738. * Update GitHub Actions to Go 1.22
  739. * Bump `golang.org/x/term` from `0.16.0` to `0.17.0`
  740. * Bump `github.com/google/uuid` from `1.5.0` to `1.6.0`
  741. * Bump `github.com/yuin/goldmark` from `1.6.0` to `1.7.0`
  742. * Bump `golang.org/x/oauth2` from `0.15.0` to `0.17.0`
  743. * Bump `github.com/tdewolff/minify/v2` from `2.20.10` to `2.20.12`
  744. * Bump `golang.org/x/term` from `0.15.0` to `0.16.0`
  745. * Bump `github.com/prometheus/client_golang` from `1.17.0` to `1.18.0`
  746. * Bump `github.com/tdewolff/minify/v2` from `2.20.9` to `2.20.16`
  747. * Bump `golang.org/x/crypto` from `0.16.0` to `0.19.0`
  748. * Bump `github.com/go-webauthn/webauthn` from `0.9.4` to` 0.10.1`
  749. * Bump `golang.org/x/net` from `0.20.0` to `0.21.0`
  750. Version 2.0.51 (December 13, 2023)
  751. ----------------------------------
  752. * Add Omnivore integration
  753. * Fixes for the regressions introduced in version 2.0.50:
  754. * Ensure all HTML documents are encoded in UTF-8
  755. * Send default User-Agent and HTTP caching headers when making HTTP requests
  756. * Allow Youtube links to be opened outside the `iframe` (avoid `ERR_BLOCKED_BY_RESPONSE` error)
  757. * Fix inaccessible metrics endpoint when listening on Unix socket
  758. * Allow renaming and moving feed at the same time in the Google Reader API
  759. * Log `nb_jobs` only when number of jobs is larger than 0 in background scheduler
  760. * Deduplicate feed URLs when parsing HTML document during discovery process
  761. * Calculate a virtual weekly count based on the average updating frequency (`POLLING_SCHEDULER=entry_frequency`)
  762. * Update GitHub Actions workflow to be able to run the linter and tests on-demand
  763. * Add `SCHEDULER_ROUND_ROBIN_MIN_INTERVAL` config option
  764. * Add links to GitHub for the commit hash and the version in the about page
  765. * Use "starred" rather than "bookmarked" in English translation
  766. * Update Chinese (CN & TW) translation
  767. * Bump `github.com/google/uuid` from `1.4.0` to `1.5.0`
  768. * Bump `github.com/coreos/go-oidc/v3` from `3.7.0` to `3.9.0`
  769. * Bump `github.com/tdewolff/minify/v2` from `2.20.6` to `2.20.9`
  770. * Bump `github.com/go-webauthn/webauthn` from `0.8.6` to `0.9.4`
  771. * Bump `golang.org/x/oauth2` from `0.14.0` to `0.15.0`
  772. Version 2.0.50 (November 12, 2023)
  773. ----------------------------------
  774. * Add WebAuthn / Passkey integration
  775. * Add RSS-Bridge integration
  776. * Take RSS TTL field into consideration to schedule next check date
  777. * Show number of visible entries instead of number of read entries in feed list
  778. * OpenID Connect: Redirect to configured user home page after successful authentication
  779. * Google Reader API fixes:
  780. * `user/{userID}/state/com.google/read` is missing in categories section for read entries
  781. * Take `ExcludeTargets` into consideration in feed stream handler
  782. * Allow iframes pointing to Twitch videos
  783. * Filter feed entries based on URL or title
  784. * Take into consideration `hide_globally` property defined for categories in `/v1/entries` API endpoint
  785. * Add category ID to webhooks request body
  786. * Update date parser to parse more invalid date formats
  787. * Refactor feed discovery handler, and avoid an extra HTTP request if the URL provided is the feed
  788. * Refactor HTTP Client and `LocalizedError` packages
  789. * Refactor Batch Builder, and prevent accidental and excessive refreshes from the web UI
  790. * Refactor icon finder:
  791. - Continue the discovery process when the feed icon is invalid
  792. - Search all icons from the HTML document and do not stop on the first one
  793. * Add support for SVG icons with data URL without encoding
  794. * Expose `next_check_at` in the web ui and API
  795. * Add database indexes to improve performance
  796. * Change log level to warning for failed feeds refresh in cronjob
  797. * Do not log website without icon as warning
  798. * Add GitHub workflow to build binaries
  799. * Add GitHub extensions to devcontainer
  800. * Make sure to pull the latest base image when building the Docker image
  801. * Strip version prefix when building Debian package
  802. * Add `github-cli` and `docker-outside-of-docker` features to devcontainer
  803. * Bump `golang.org/x/*` dependencies
  804. * Bump `github.com/gorilla/mux` from `1.8.0` to `1.8.1`
  805. * Bump `github.com/tdewolff/minify/v2` from `2.19.9` to `2.20.6`
  806. * Bump `github.com/yuin/goldmark` from `1.5.6` to `1.6.0`
  807. * Bump `github.com/coreos/go-oidc/v3` from `3.6.0` to `3.7.0`
  808. Version 2.0.49 (October 15, 2023)
  809. ---------------------------------
  810. * Implement structured logging using `log/slog` package. New config options available:
  811. * `LOG_FORMAT`: `json` or `text`
  812. * `LOG_LEVEL`: `debug`, `info`, `warning`, or `error`
  813. * `LOG_FILE`: `sdterr`, `stdout`, or a file path
  814. * The `DEBUG` option is now deprecated in favor of `LOG_LEVEL`
  815. * API Improvements:
  816. * Add endpoint `/v1/version`
  817. * Add endpoint `PUT /v1/entries` to update entry title and content
  818. * Add endpoint `/v1/icons/{iconID}`
  819. * Add endpoint `/v1/flush-history` to flush history
  820. * Make the category optional when creating feeds for API clients who don't support categories
  821. * Add enclosures to `GET /v1/entries` endpoint
  822. * Add `published_after`, `published_before`, `changed_after` and `changed_before` options to `/v1/entries` endpoint
  823. * Telegram integration improvements:
  824. * Replace feed HTML link with a button to avoid page preview issues
  825. * Add the possibility to disable buttons
  826. * Add Bruno Miniflux API collection in `contrib` folder (Bruno is an open source alternative to Postman/Insomnia)
  827. * Add command line argument to export user feeds as OPML
  828. * Add new rewrite rules `add_hn_links_using_hack` and `add_hn_links_using_opener` to open HN comments with iOS apps
  829. * Fix timestamp format for `Expires` response header
  830. * Fix Javascript error when reading time option is disabled
  831. * Fix Apprise logic to handle feed service URLs
  832. * Fix missing word in force refresh message
  833. * Remove deprecated `PreferServerCipherSuites` TLS option
  834. * Replace `github.com/rylans/getlang` with `github.com/abadojack/whatlanggo` because `getlang` doesn't seems to be updated anymore
  835. * Bump `github.com/mccutchen/go-httpbin/v2` from `2.11.0` to `2.11.1`
  836. * Bump `golang.org/x/*` dependencies
  837. Version 2.0.48 (September 15, 2023)
  838. -----------------------------------
  839. * Add generic webhook integration
  840. * Send webhook events when new entries are detected
  841. * Send wehbook events when saving an entry
  842. * Sign the outgoing requests with HMAC-SHA256
  843. * Improve Telegram integration
  844. * Add built-in Telegram client
  845. * Remove dependency on `go-telegram-bot-api` library
  846. * Add new options:
  847. * Optional topic ID
  848. * Disable page preview
  849. * Disable notifications
  850. * Add new button to go to article
  851. * Improve Matrix integration
  852. * Add built-in Matrix client
  853. * Remove dependency on `gomatrix` library
  854. * Send HTML formatted messages to Matrix
  855. * OpenID Connect authentication improvements:
  856. * Add OAuth2 PKCE support
  857. * Add `profile` scope to OIDC integration to support accounts without email address
  858. * Prevent empty username when using the OIDC integration
  859. * Add `factor` for `entry_frequency` scheduler:
  860. * Allow the user to increase the frequency of the `entry_frequency`
  861. scheduler by a configurable factor in order to shorten the time between
  862. updates.
  863. * Fix: status bar is unreadable when using PWA in dark mode on Firefox Android
  864. * Group form fields into fieldsets to improve page layout
  865. * Update Russian translation
  866. * Make sure icon URLs are always absolute
  867. * Add Apprise service URLs per feed
  868. * Trim `username` and `password` form fields
  869. * Strip HTML tags from DublinCore Creator tags
  870. * Fix scroll up behavior on Firefox Android
  871. * Add missing `return` statement in `fetchContent` UI handler
  872. * Add `replace_title` rewrite rule to adjust entry titles
  873. * Fix Pocket integration redirect URL and Google Reader API HREF
  874. * Fix feed `hide_globally` property to use it with third-party clients.
  875. Version 2.0.47 (August 20, 2023)
  876. --------------------------------
  877. * Update rules for `webtoons.com`
  878. * Use HTTP client from the standard library for third-party integrations
  879. * Rename internal `url` package to `urllib` to avoid overlap with `net/url`
  880. * Add Shaarli integration
  881. * Add Shiori integration
  882. * Add Apprise integration
  883. * Add Readwise Reader integration
  884. * Consider base path when generating third-party services API endpoint
  885. * Use podcast duration tag as reading time
  886. * Move internal packages to an `internal` folder
  887. * For reference: <https://go.dev/doc/go1.4#internalpackages>
  888. * Rename Miniflux package name to follow Go module naming convention
  889. * For reference: <https://go.dev/ref/mod#major-version-suffixes>
  890. * Update RockyLinux image from 8 to 9 (used to build RPM package)
  891. * Add force refresh in feed edit and feed entries page
  892. * Use Odysee video duration as read time
  893. * Upgrade to Go 1.21
  894. * Use details disclosure element to show the list of third-party services
  895. * Use Web Share API for sharing entry
  896. * Add a workaround for parsing some invalid date format
  897. * Add Thunder Client API collection into contrib folder
  898. * Add new API endpoint: `/entries/{entryID}/save`
  899. * Trigger Docker and packages workflows only for semantic tags
  900. * Go module versioning expect Git tags to start with the letter v.
  901. * The goal is to keep the existing naming convention for generated artifacts and
  902. have proper versioning for the Go module.
  903. * Bump `golang.org/x/*` dependencies
  904. * Bump `github.com/yuin/goldmark`
  905. * Bump `github.com/tdewolff/minify/v2`
  906. * Bump `github.com/mccutchen/go-httpbin/v2`
  907. Version 2.0.46 (July 21, 2023)
  908. ------------------------------
  909. * Add scraper and rewrite rules for Webtoons
  910. * Fix regression in integration page and simplify SQL query
  911. * Wallabag integration: add more information in log messages
  912. * Add support for custom Youtube embed URL
  913. * Fix accessibility issues in modal component
  914. * Fix modal aria role
  915. * Trap focusing with tab / shift+tab inside the modal
  916. * Restore keyboard focus when closing modal
  917. * Automatically move keyboard focus to first focusable element unless specified otherwise
  918. * Keyboard shortcut help modal: move keyboard focus to modal title
  919. * Keyboard shortcut help modal: change close control from link to button
  920. * Add Notion integration
  921. * Update `golang.org/x/*` dependencies and `go-oidc` to v3.6.0
  922. * Improve responsive design
  923. * Add user setting for marking entry as read on view
  924. * Improve Russian translation
  925. * Add the possibility to run cleanup tasks from the command line
  926. * Add the possibility to run Miniflux as a cronjob
  927. * Use `go-httpbin` to run tests locally and avoid remote calls to `httpbin.org`
  928. * Display tags when viewing entries
  929. * Update categories API endpoint to return `total_unread` and `feed_count`
  930. * Improve date parser to handle various broken date formats
  931. * Avoid `pq: time zone displacement out of range` errors
  932. * Improve entry existance check to make better use of index
  933. * Add unique index `enclosures_user_entry_url_idx`
  934. * Add mark as unread for Linkding integration
  935. * Add sub-folder support for Wallabag integration
  936. * Use RockyLinux to build RPM package
  937. * Disable CGO when building RPM package
  938. * Disable CGO when building Docker images
  939. Version 2.0.45 (June 21, 2023)
  940. ------------------------------
  941. * Add media player to listen to audio and video podcasts with the possiblity to resume to last playback position
  942. * Add default tag names for Linkding integration
  943. * Mark only globally visible entries when marking all entries from UI
  944. * Use image included in feed as feed icon when available
  945. * Order history by `changed_at` and `published_at`
  946. * Remove title attribute from entry title links
  947. * Fix reading time that is not aligned correctly with the latest version of Safari
  948. * Use glyphs of the same size on keyboard shortcuts page
  949. * Add maskable versions of the PWA icon
  950. * Replace copyright header with SPDX identifier
  951. * Remove the "í" letter from the Portuguese "lido" word
  952. * Increase golangci-lint timeout value
  953. * Bump `github.com/tdewolff/minify/v2`, `github.com/prometheus/client_golang`, `golang.org/x/*` dependencies
  954. Version 2.0.44 (May 6, 2023)
  955. ----------------------------
  956. * Add link to the URL rewrite rules documentation
  957. * Update scraping rules for `ilpost.it`
  958. * Update rewrite rules for `theverge.com`
  959. * Add a rewrite rule to remove clickbait titles
  960. * Make sure `PROXY_IMAGES` option is backward compatible with `PROXY_OPTION` and `PROXY_MEDIA_TYPES`
  961. * Add new rule to remove tables
  962. * Add support for searching well-known URLs in subdirectory
  963. * Add CSS `word-wrap` rule to break very long entry title into multiple lines
  964. * Add swipe as option for gesture navigation between entries. There are now 3 possible choices: `none`, `double-tap`, and `swipe`.
  965. * Prefer typographic punctuation in English translation
  966. * Process older entries first:
  967. - Feed entries are usually ordered from most to least recent.
  968. - Processing older entries first ensures that their creation timestamp
  969. is lower than that of newer entries.
  970. - This is useful when we order by creation, because then we get a
  971. consistent timeline.
  972. * Fix Grafana dashboard
  973. * Push Docker images to `Quay.io` (RedHat)
  974. * Bump `golang.org/x/*`, `github.com/lib/pq`, `mvdan.cc/xurls/v2` and `github.com/prometheus/client_golang` dependencies
  975. Version 2.0.43 (March 16, 2023)
  976. -------------------------------
  977. * Avoid XSS when opening a broken image due to unescaped ServerError in proxy handler (CVE-2023-27592)
  978. Creating an RSS feed item with the inline description containing an `<img>` tag
  979. with a `srcset` attribute pointing to an invalid URL like
  980. `http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error
  981. condition where the invalid URL is returned unescaped and in full.
  982. This results in JavaScript execution on the Miniflux instance as soon as the
  983. user is convinced to open the broken image.
  984. * Use `r.RemoteAddr` to check `/metrics` endpoint network access (CVE-2023-27591)
  985. HTTP headers like `X-Forwarded-For` or `X-Real-Ip` can be easily spoofed. As
  986. such, it cannot be used to test if the client IP is allowed.
  987. The recommendation is to use HTTP Basic authentication to protect the
  988. metrics endpoint, or run Miniflux behind a trusted reverse-proxy.
  989. * Add HTTP Basic authentication for `/metrics` endpoint
  990. * Add proxy support for several media types
  991. * Parse feed categories from RSS, Atom and JSON feeds
  992. * Ignore empty link when discovering feeds
  993. * Disable CGO explicitly to make sure the binary is statically linked
  994. * Add CSS classes to differentiate between category/feed/entry view and icons
  995. * Add rewrite and scraper rules for `blog.cloudflare.com`
  996. * Add `color-scheme` to themes
  997. * Add new keyboard shortcut to toggle open/close entry attachments section
  998. * Sanitizer: allow `id` attribute in `<sup>` element
  999. * Add Indonesian Language
  1000. * Update translations
  1001. * Update Docker Compose examples:
  1002. - Run the application in one command
  1003. - Bring back the health check condition to `depends_on`
  1004. - Remove deprecated `version` element
  1005. * Update scraping rules for `ilpost.it`
  1006. * Bump `github.com/PuerkitoBio/goquery` from `1.8.0` to `1.8.1`
  1007. * Bump `github.com/tdewolff/minify/v2` from `2.12.4` to `2.12.5`
  1008. * Bump `github.com/yuin/goldmark` from `1.5.3` to `1.5.4`
  1009. * Bump `golang.org/x/*` dependencies
  1010. Version 2.0.42 (January 29, 2023)
  1011. ---------------------------------
  1012. * Fix header items wrapping
  1013. * Add option to enable or disable double tap
  1014. * Improve PWA display mode label in settings page
  1015. * Bump `golang.org/x/*` dependencies
  1016. * Update translations
  1017. * Add scraping rule for `ilpost.it`
  1018. * Update reading time HTML element after fetching the original web page
  1019. * Add category feeds refresh feature
  1020. Version 2.0.41 (December 10, 2022)
  1021. ----------------------------------
  1022. * Reverted PR #1290 (follow the only link) because it leads to several panics/segfaults that prevent feed updates
  1023. * Disable double-tap mobile gesture if swipe gesture is disabled
  1024. * Skip integrations if there are no entries to push
  1025. * Enable TLS-ALPN-01 challenge for ACME
  1026. - This type of challenge works purely at the TLS layer and is compatible
  1027. with SNI proxies. The existing HTTP-01 challenge support has been left
  1028. as-is.
  1029. * Preconfigure Miniflux for GitHub Codespaces
  1030. * Updated `golang.org/x/net/*` dependencies
  1031. Version 2.0.40 (November 13, 2022)
  1032. ----------------------------------
  1033. * Update dependencies
  1034. * Pin Postgres image version in Docker Compose examples to avoid unexpected upgrades
  1035. * Make English and Spanish translation more consistent:
  1036. - Use "Feed" everywhere instead of "Subscription"
  1037. - Use "Entry" instead of "Article"
  1038. * Allow Content-Type and Accept headers in CORS policy
  1039. * Use dirs file for Debian package
  1040. * Use custom home page in PWA manifest
  1041. * Fix scraper rule that could be incorrect when there is a redirect
  1042. * Improve web scraper to fetch the only link present as workaround to some landing pages
  1043. * Add Matrix bot integration
  1044. * Proxify images in API responses
  1045. * Add new options in user preferences to configure sorting of entries in the category page
  1046. * Remove dependency on `github.com/mitchellh/go-server-timing`
  1047. * Add support for the `continuation` parameter and result for Google Reader API ID calls
  1048. * Use automatic variable for build target file names
  1049. * Add rewrite rule for `recalbox.com`
  1050. * Improve Dutch translation
  1051. Version 2.0.39 (October 16, 2022)
  1052. ---------------------------------
  1053. * Add support for date filtering in Google Reader API item ID calls
  1054. * Handle RSS entries with only a GUID permalink
  1055. * Go API Client: Accept endpoint URLs ending with `/v1/`
  1056. * CORS API headers: Allow `Basic` authorization header
  1057. * Log feed URL when submitting a subscription that returns an error
  1058. * Update `make run` command to execute migrations automatically
  1059. * Add option to send only the URL to Wallabag
  1060. * Do not convert anchors to absolute links
  1061. * Add config option to use a custom image proxy URL
  1062. * Allow zoom on mobile devices
  1063. * Add scraping rules for `theverge.com`, `royalroad.com`, `swordscomic.com`, and `smbc-comics.com`
  1064. * Add Ukrainian translation
  1065. * Update `golang.org/x/*` dependencies
  1066. * Bump `github.com/tdewolff/minify/v2` from `2.12.0` to `2.12.4`
  1067. * Bump `github.com/yuin/goldmark` from `1.4.13` to `1.5.2`
  1068. * Bump `github.com/lib/pq` from `1.10.6` to `1.10.7`
  1069. Version 2.0.38 (August 13, 2022)
  1070. --------------------------------
  1071. * Rename default branch from master to main
  1072. * Update GitHub Actions
  1073. * Bump `github.com/prometheus/client_golang` from `1.12.2` to `1.13.0`
  1074. * Fix some linter issues
  1075. * Handle Atom links with a text/html type defined
  1076. * Add `parse_markdown` rewrite function
  1077. * Build RPM and Debian packages automatically using GitHub Actions
  1078. * Add `explosm.net` scraper rule
  1079. * Make default home page configurable
  1080. * Add title attribute to entry links because text could be truncated
  1081. * Highlight categories with unread entries
  1082. * Allow option to order by title and author in API entry endpoint
  1083. * Update Russian translation
  1084. * Make reading speed user-configurable
  1085. * Added translation for Hindi language used in India
  1086. * Add rewrite rules for article URL before fetching content
  1087. * Bump `github.com/tdewolff/minify/v2` from `2.11.7` to `2.12.0`
  1088. * Support other repo owners in GitHub Docker Action
  1089. * Proxify empty URL should not crash
  1090. * Avoid stretched image if specified width is larger than Miniflux's layout
  1091. * Add support for OPML files with several nested outlines
  1092. * sanitizer: handle image URLs in `srcset` attribute with comma
  1093. * Allow `width` and `height` attributes for `img` tags
  1094. * Document that `-config-dump` command line argument shows sensitive info
  1095. * Add System-V init service in contrib folder
  1096. * Fix syntax error in `RequestBuilder.getCsrfToken()` method
  1097. Version 2.0.37 (May 27, 2022)
  1098. -----------------------------
  1099. * Add rewrite rule to decode base64 content
  1100. * Add Linkding integration
  1101. * Add comment button to Telegram message
  1102. * Add API endpoint to fetch unread and read counters
  1103. * Fixes logic bug in Google Reader API sanity check
  1104. * Reduce number of CORS preflight check to save network brandwidth
  1105. * Add Espial integration
  1106. * Allow API search for entries which are not starred
  1107. * Try to use outermost element text when title is empty
  1108. * Make swipe gestures feel more natural
  1109. - Removes opacity transition when swiping an article read/unread
  1110. - Adds "resistance" to the swiped entry when the 75px threshold is
  1111. reached
  1112. - Fixes an issue in which a swiped article couldn't be moved <15px
  1113. * Add support for feed streams to Google Reader API IDs API
  1114. * Fix invalid parsing of icon data URL
  1115. * Add Traditional Chinese translation
  1116. * Add distroless Docker image variant
  1117. * Add Go 1.18 to GitHub Action
  1118. * Bump `github.com/tdewolff/minify/v2` from `2.10.0` to `2.11`
  1119. * Bump `github.com/prometheus/client_golang` from `1.12.1` to `1.12.2`
  1120. * Bump `github.com/lib/pq` from `1.10.4` to `1.10.6`
  1121. Version 2.0.36 (March 8, 2022)
  1122. ------------------------------
  1123. * Gray out pagination buttons when they are not applicable
  1124. * Use truncated entry description as title if unavailable
  1125. * Do not fallback to InnerXML if XHTML title is empty
  1126. * Add `+` keyboard shortcut for new subscription page
  1127. * Add `(+)` action next to Feeds to quickly add new feeds
  1128. * Fix unstar not working via Google Reader API
  1129. * Remove circles in front of page header list items
  1130. * Fix CSS hover style for links styled as buttons
  1131. * Avoid showing `undefined` when clicking on read/unread
  1132. * Add new keyboard shortcut `M` to toggle read/unread, and go to previous item
  1133. * Add several icons to menus according to their roles
  1134. * Add missing event argument to `onClick()` function call
  1135. * Add links to scraper/rewrite/filtering docs when editing feeds
  1136. * Add a rewrite rule for Castopod episodes
  1137. * Fix regression: reset touch-item if not in `/unread` page
  1138. * Add API endpoint to fetch original article
  1139. * Show the category first in feed settings
  1140. * Add pagination on top of all entries
  1141. * Display Go version in "About" page
  1142. * Bump `mvdan.cc/xurls/v2` from 2.3.0 to 2.4.0
  1143. * Bump `github.com/prometheus/client_golang` from 1.11.0 to 1.12.1
  1144. * Bump `github.com/tdewolff/minify/v2` from 2.9.28 to 2.10.0
  1145. Version 2.0.35 (January 21, 2022)
  1146. ---------------------------------
  1147. * Set `read-all` permission to `GITHUB_TOKEN` for GitHub Actions
  1148. * Pin `jshint` version in linter job
  1149. * Fix incorrect conversion between integer types
  1150. * Add new GitHub Actions workflows: CodeQL and Scorecards analysis
  1151. * Handle Atom feeds with space around CDATA
  1152. * Bump `github.com/tdewolff/minify/v2` from 2.9.22 to 2.9.28
  1153. * Add Documentation directive to Systemd service
  1154. * Do not reset `touch-item` if successfully swiped
  1155. * Add support for multiple authors in Atom feeds
  1156. * Omit `User-Agent` header in image proxy to avoid being blocked
  1157. * Use custom feed user agent to fetch website icon
  1158. * Make default Invidious instance configurable
  1159. * Add new rewrite rule `add_youtube_video_from_id` to add Youtube videos in Quanta articles
  1160. * Add scrape and rewrite rules for `quantamagazine.org`
  1161. * Expose entry unshare link in the entry and list views
  1162. * Add Google Reader API implementation (experimental)
  1163. * Add `Content-Security-Policy` header to feed icon and image proxy endpoints
  1164. - SVG images could contain Javascript. This CSP blocks inline script.
  1165. - Feed icons are served using `<img>` tag and Javascript is not interpreted.
  1166. * Add Finnish translation
  1167. * Add scraper rule for `ikiwiki.iki.fi`
  1168. * Remove `SystemCallFilter` from `miniflux.service`
  1169. * Fix minor typo in French translation
  1170. Version 2.0.34 (December 16, 2021)
  1171. ----------------------------------
  1172. * Add rewrite rule for comics website http://monkeyuser.com
  1173. * Add `<head>` tag to OPML export
  1174. * Tighten Systemd sandboxing and update comments in `miniflux.service`
  1175. * Add `RuntimeDirectory` to Systemd service
  1176. * Order disabled feeds at the end of the list
  1177. * Add support for theme color based on preferred color scheme of OS
  1178. * Bump `github.com/lib/pq` from 1.10.3 to 1.10.4
  1179. * Bump `github.com/PuerkitoBio/goquery` from 1.7.1 to 1.8.0
  1180. * Fix typos in `model/icon.go`
  1181. * Add `data-srcset` support to `add_dynamic_image rewrite` rewrite rule
  1182. * Fix Docker Compose example files compatibility to v3
  1183. * Added the `role="article"` to `<article>` elements for better accessibility with screen readers
  1184. * Redact secrets shown on the about page
  1185. * Handle `srcset` images with no space after comma
  1186. * Hide the logout link when using auth proxy
  1187. * Fix wrong CSS variable
  1188. * Change `-config-dump` command to use `KEY=VALUE` format
  1189. Version 2.0.33 (September 25, 2021)
  1190. -----------------------------------
  1191. * Build RPM and Debian package with PIE mode enabled
  1192. * Add CSS rule to hide `<template>` tag in old browsers
  1193. * Bump `github.com/tdewolff/minify/v2 from 2.9.21 to 2.9.22`
  1194. * Bump `github.com/lib/pq from 1.10.2 to 1.10.3`
  1195. * Remove `RequestURI()` hack
  1196. * Improve `zh_CN` translation
  1197. * Add ability to change entry sort order in the UI
  1198. * Add minor improvements in integration package
  1199. * Add Telegram integration
  1200. * Add rewrite rule to remove DOM elements
  1201. * Add proxy argument to `scraper.Fetch()`
  1202. * Add mime type `application/feed+json` to discover JSON Feed v1.1
  1203. * Update scraper rule for `theregister.com`
  1204. * Add Go 1.17 to GitHub Actions
  1205. * Display option to hide feed only when category is not already hidden
  1206. * Add option to hide feeds from the global Unread list
  1207. Version 2.0.32 (August 14, 2021)
  1208. --------------------------------
  1209. * Bump `github.com/tdewolff/minify/v2` from 2.9.17 to 2.9.21
  1210. * Bump `mvdan.cc/xurls/v2` from 2.2.0 to 2.3.0
  1211. * Bump `github.com/PuerkitoBio/goquery` from 1.6.1 to 1.7.1
  1212. * Bump `github.com/prometheus/client_golang` from 1.10.0 to 1.11.0
  1213. * Add `/rss/` to the list of well known URLs during feed discovery
  1214. * Use `authors` entry for JSON 1.1 feeds
  1215. * Added Greek translation
  1216. * Added the ability to mark an entire category as read in the web ui
  1217. * Added "in" in "logged in" for en_US `tooltip.logged_user`
  1218. * Added option to hide categories from the global unread list
  1219. * Show "saving" labels for entry status button
  1220. * Golang client: Try to parse response body on `InternalServerError` errors
  1221. * contrib: Add support for a $MINIFLUX_IMAGE env var in docker-compose
  1222. * contrib: Bump docker-compose version to 3.4
  1223. Version 2.0.31 (June 6, 2021)
  1224. -----------------------------
  1225. * Expose comments_url entry field in Golang API client
  1226. * Use unique file names for cache busting instead of query string
  1227. * Highlight and sort feeds with unread entries in feeds list
  1228. * Mark items as read on click/middle click of external links
  1229. * Fix: Firefox on Windows does not show the active link as bold
  1230. * Avoid extra HTTP request for fetching custom stylesheet
  1231. * Remove invalid CSRF HTML meta tag
  1232. * Add lang attribute to root HTML tag
  1233. * Use runes instead of bytes to truncate JSON feed titles (avoid breaking Unicode strings)
  1234. * Expose changed_at time through the API
  1235. * Add new config option CLEANUP_ARCHIVE_BATCH_SIZE
  1236. * Add new option DATABASE_CONNECTION_LIFETIME
  1237. * Add database stats to Prometheus exporter
  1238. * Add Systemd watchdog
  1239. * Avoid custom stylesheet to be cached by third-party CDN
  1240. * Update a shared entry label translation in zh_CN
  1241. * Bump github.com/tdewolff/minify/v2 from 2.9.16 to 2.9.17
  1242. * Bump github.com/lib/pq from 1.10.1 to 1.10.2
  1243. Version 2.0.30 (May 7, 2021)
  1244. ----------------------------
  1245. * Security fix: any user can delete any feed (Regression introduced in commit 51fb949)
  1246. * Fix password reset via CLI
  1247. * Increase default batch size value
  1248. * Handle RSS feed title with encoded Unicode entities
  1249. * Show number of unread per category in category list instead of number of feeds
  1250. * Bump github.com/lib/pq from 1.10.0 to 1.10.1
  1251. * Filtering doesn't work when selecting from multiple found feeds
  1252. * Bump github.com/tdewolff/minify/v2 from 2.9.15 to 2.9.16
  1253. * Use an appropriate color for visited links on dark theme
  1254. * Fix typo in reader/json/doc.go
  1255. * Create SECURITY.md
  1256. * Setup golangci-lint Github Action
  1257. * Add per feed cookies option
  1258. * Bump github.com/prometheus/client_golang from 1.9.0 to 1.10.0
  1259. * Bump github.com/tdewolff/minify/v2 from 2.9.13 to 2.9.15
  1260. Version 2.0.29 (Mar 21, 2021)
  1261. -----------------------------
  1262. * Miniflux requires at least Go 1.16 now
  1263. * Improved support of Atom text constructs
  1264. - Improve handling of CDATA in text elements
  1265. - Omit XHTML root element because it should not be part of the content
  1266. - Fix incorrect parsing of HTML elements
  1267. * Handle RDF feed with HTML encoded entry title
  1268. * Add Turkish language
  1269. * Improve deletion of feeds with lots of entries
  1270. * Add support of Systemd readiness notification using the sd_notify protocol
  1271. * Remove feed_icons service worker cache because it's causing more problems than it solves (and HTTP cache seems faster)
  1272. * Add basic PWA offline page
  1273. - Add basic offline mode when using the service worker
  1274. - Starting in Chrome 93, offline mode is going to be a requirement to install the PWA
  1275. * Replace icon for "Add to home screen" button
  1276. * Use SVG icons for "toast" notifications
  1277. * Use SVG sprite for icons instead of inline elements
  1278. * Reset scroll position on mark page as read
  1279. * Add link to mark all feed entries as read
  1280. * Make web app display mode configurable (The change is visible after reinstalling the web app)
  1281. * Handle RSS feeds with CDATA in author item element
  1282. * Add read time on the article page
  1283. * Avoid showing a broken image when there is no feed icon
  1284. * Add option to allow self-signed or invalid certificates
  1285. * Add new config option to scrape YouTube's website to get video duration as read time (disabled by default)
  1286. * Send full article content to Wallabag
  1287. * Add more extensive health check support
  1288. - Improve endpoint to test database connection
  1289. - Add new cli argument: -healthcheck
  1290. - Update Docker Compose examples
  1291. * Update iframe "allow list" to support Bilibili videos
  1292. * Remove completely generated files and use embed package to bundle JS/CSS/Images/Translations files into the final binary
  1293. * Remove deprecated io/ioutil package
  1294. * Show Postgres version in "About" page
  1295. Version 2.0.28 (Feb 15, 2021)
  1296. -----------------------------
  1297. * Add HTTP header "Referrer-Policy: no-referrer"
  1298. * Handle entry title with double encoded entities
  1299. * Add Open Containers annotations to Docker image
  1300. * Remove iframe inner HTML contents (iframe element never has fallback content)
  1301. * Update date parser to fix another time zone issue
  1302. * Update German translation for blocklist and keeplist
  1303. * Validate Keep list and Block list rules syntax
  1304. * Add support for IPv6 with zone index
  1305. * Allow images with data URLs
  1306. * Limit full-text search indexation to first 500K characters (tsvector has a size limit of 1MB)
  1307. * Change PWA display mode to standalone
  1308. * ETag value is not set correctly in HTTP client (regression)
  1309. * Add database backed Let's Encrypt certificate cache
  1310. * Add global option POLLING_PARSING_ERROR_LIMIT
  1311. * Update systemd service file comments to use `systemctl edit` for editing
  1312. * Update Go version to 1.15 in go.mod
  1313. * Don't discard the "Fetch via Proxy" option
  1314. * Update man page to show the default values
  1315. * Add PostgreSQL indices
  1316. * Add API endpoints to get feeds and entries of a category
  1317. * Create feed query builder
  1318. * Bump github.com/PuerkitoBio/goquery from 1.6.0 to 1.6.1
  1319. * Show global options in the about page
  1320. * Update man page to mention -1 can be used for CLEANUP_ARCHIVE_* options
  1321. Version 2.0.27 (Jan 9, 2021)
  1322. ----------------------------
  1323. * Add spellcheck="false" to input fields
  1324. * Refactoring of entry, feed, category, and user validation
  1325. * Avoid stripping tags for entry title
  1326. * Add the possibility to subscribe to feeds with the Android Share menu
  1327. * API improvements:
  1328. - Change feed creation request to allow setting most fields via API
  1329. - Allow regular users to change settings via API
  1330. - Make user fields editable via API
  1331. - Renaming non-existent category via API should return a 404
  1332. * Update Systemd service file:
  1333. - Add capability CAP_NET_BIND_SERVICE (allow the process to listen on privileged ports)
  1334. - Enable a private /tmp for $CERT_CACHE (required when using Let's Encrypt)
  1335. * Update read/star icons to SVGs
  1336. * Add autocomplete="username" to HTML forms
  1337. * Improve user mass delete to use fewer Goroutines
  1338. * Use SQL transaction when creating user sessions and users
  1339. * Remove extra column (HSTORE field) from users table and migrate key/value pairs to specific columns
  1340. * Bump github.com/prometheus/client_golang from 1.8.0 to 1.9.0
  1341. * Bump github.com/lib/pq from 1.8.0 to 1.9.0
  1342. * Add styles for <abbr> HTML tag
  1343. * Refactor SQL migrations:
  1344. - Avoid embedding SQL files into binary
  1345. - Allow more flexible changes by using Go functions
  1346. * Add Server-Timing header to unread page
  1347. * Show correct User Agent in input placeholders
  1348. * Add autocomplete attribute to login form
  1349. * Add Grafana dashboard in contrib folder
  1350. Version 2.0.26 (Dec 5, 2020)
  1351. ----------------------------
  1352. * Use created_at instead of published_at for archiving entries
  1353. * Add created_at field for entries
  1354. * Handle invalid feeds with relative URLs
  1355. * Add API routes for "mark all as read"
  1356. * Add support for setting a global default User-Agent
  1357. * Add rewrite rule "replace" for custom search and replace
  1358. * Calculate reading time during feed processing
  1359. * Handle various invalid dates
  1360. * systemd: keep /run writeable
  1361. * debian package: add missing post-install script
  1362. * Do not follow redirects when trying known feed URLs
  1363. * Trim spaces around icon URLs
  1364. * Reinstate EXPOSE instruction in Dockerfile
  1365. * Update German and Portuguese translations
  1366. Version 2.0.25 (Nov 3, 2020)
  1367. ----------------------------
  1368. * Rename "original" link to be more explicit
  1369. * Do not escape HTML for Atom 1.0 text content during parsing (Avoid HTML entities issues)
  1370. * Do not use charset.NewReader if the body is a valid UTF-8 document
  1371. * Restore the ability to use a proxy for all HTTP requests (see https://golang.org/pkg/net/http/#ProxyFromEnvironment)
  1372. * Show Git commit in about page
  1373. * Publish Docker images to GitHub Container Registry
  1374. * Added few Docker Compose examples in contrib folder
  1375. * Added Ansible Role + Playbook for Miniflux in contrib folder
  1376. * Add rewrite rule to use noscript content for images rendered with Javascript
  1377. * Bump github.com/prometheus/client_golang from 1.7.1 to 1.8.0
  1378. * Update contributor link and Godoc badge for API client
  1379. * Move Debian package builder to main repository
  1380. * Move RPM build files to main repository
  1381. * Add GitHub Action to generate Docker images
  1382. * Build multi-platform images with Docker Buildx
  1383. * Add keyboard shortcut to scroll current item to the top
  1384. * Add feed filters (Keeplist and Blocklist)
  1385. * Do not proxy image with a data URL
  1386. * Bump github.com/PuerkitoBio/goquery from 1.5.1 to 1.6.0
  1387. * Proxify articles crawled manually
  1388. * Proxify images defined in srcset attribute
  1389. * Remove plaintext Fever password from database
  1390. * Add keyboard shortcut to jump to an item's feed page
  1391. * Add option for swipe gesture on entries on mobile
  1392. Version 2.0.24 (Oct 3, 2020)
  1393. ----------------------------
  1394. * Add rewrite rule to fix Medium.com images
  1395. * Update sanitizer to support responsive images:
  1396. - Add support for picture HTML tag
  1397. - Add support for srcset, media, and sizes attributes to img and source tags
  1398. * Enhance man page formatting
  1399. * Add Prometheus exporter
  1400. * Remove dependency on global config options in HTTP client
  1401. * API:
  1402. - Avoid database lookup if empty credentials are provided
  1403. - Add the possibility to filter entries by category ID
  1404. - Add the possibility to filter entries by a list of statuses
  1405. * Add Feed ID in worker error logs
  1406. * Tweak default HTTP client transport timeout values to reduce the number of file descriptors
  1407. * CSS tweaks and optimizations:
  1408. - Prevent sub and sup from affecting line-height
  1409. - Set touch-action on .items to prevent browser navigation
  1410. - Move font-family specific CSS to the appropriate file
  1411. - Update primary font-family for UI to be even more compatible with various operating systems
  1412. - Make .entry-content font-weight variable depending on font-family used
  1413. * Avoid Javascript minifier to break keyboard shortcuts
  1414. * Rename service worker script to avoid being blocked by uBlock
  1415. * Update date parser to handle Pacific Daylight Time in addition to Pacific Standard Time
  1416. * Create index to speed up bookmark page
  1417. * Do not try to update a duplicated feed after a refresh
  1418. * Use a transaction to refresh and create entries
  1419. * Speed up entries clean up with an index and a goroutine
  1420. * Avoid the accumulation of enclosures by keeping only what is referenced in the feed
  1421. * Add workarounds for parsing an invalid date
  1422. * Archive older entries first
  1423. * Update API client to support more filters
  1424. * Avoid duplication between get feed entries and get entries API endpoints
  1425. * Enable strict slash to avoid a page not found (404) when using a trailing slash in the URLs
  1426. * Add a submit button to each section of the integration page
  1427. * Reload page after making page as read when showing unread entries
  1428. * Add option to archive unread entries
  1429. * Add option to enable maintenance mode
  1430. * Add HTTP proxy option for subscriptions
  1431. * Make add_invidious_video rule applicable for different invidious instances
  1432. * Fix reading time for jp, ko and zh languages
  1433. * Update POLLING_SCHEDULER description in man page
  1434. * Bump gorilla/mux from 1.7.4 to 1.8.0
  1435. * Add link to mark a feed as read
  1436. Version 2.0.23 (Aug 15, 2020)
  1437. -----------------------------
  1438. * Try known URLs when discovering subscriptions
  1439. * Add workarounds to find YouTube channel feeds (YouTube doesn't expose RSS links anymore for new-style URLs)
  1440. * Increase HTTP server timeout values
  1441. * Use stdlib constants for HTTP methods instead of strings
  1442. * Add support for RTL feed content
  1443. * Ignore <media:title> to avoid overriding the default title if they are different
  1444. * Add support for secret keys exposed as a file (useful for containerized environments)
  1445. * Display recent entries first in search results
  1446. * Do not archive shared items
  1447. * Add option to change the number of entries per page
  1448. * Add Brazilian Portuguese (pt_BR) translation
  1449. * Add reading time for entries
  1450. * Redirect to login page if CSRF token is expired
  1451. * Fever API:
  1452. - Use getEntryIDs instead of getEntries to reduce memory consumption
  1453. - Fix max_id argument logic to follow the specs
  1454. - Improve logging
  1455. - Do not send articles to external services when unsaving an item
  1456. - Create index to speed up API calls
  1457. - Log client IP in middleware
  1458. * API client: Do not return body for response with no content
  1459. * REST API:
  1460. - Delete users asynchronously (Deleting large users might lock the tables)
  1461. - Add CORS support
  1462. * Align entry actions to the left
  1463. - Attempt to avoid awkward alignment on smartphone screens
  1464. - Keep the read/star actions aligned to the left
  1465. - Remove CSS flex to allow easier override with custom CSS
  1466. * Upgrade Postgres client library
  1467. * Upgrade CI checks to Go 1.15
  1468. Version 2.0.22 (Jun 19, 2020)
  1469. -----------------------------
  1470. * Remove child-src CSP policy (deprecated)
  1471. * Add /version endpoint
  1472. * Add the ability to use custom css
  1473. * Handle more invalid dates
  1474. * Add CSS styles for textarea
  1475. * Add index to speed up slow query
  1476. * Speed up feed list page rendering
  1477. * Add alternative scheduler based on the number of entries
  1478. * Setup Dependabot on GitHub
  1479. * Update Docker image to Alpine 3.12
  1480. * Add feed option to ignore HTTP cache
  1481. * Fix some Italian and German translations
  1482. * Added scraper rule for RayWenderlich.com, TheOatmeal.com, financialsamurai.com, dilbert.com and turnoff.us
  1483. * Replace link to categories by a link to the list of entries in "Category > Feeds" page
  1484. * Change feed title to a link to the original website
  1485. * Add icons to feeds and categories list
  1486. * Update dependencies and remove vendor folder
  1487. Version 2.0.21 (Mar 28, 2020)
  1488. -----------------------------
  1489. * Add SVG icons to entry actions
  1490. * Add support for Invidious
  1491. - Embed Invidious player for invidio.us feeds
  1492. - Add new rewrite rule to use Invidious player for Youtube feeds
  1493. * Check during application startup if the database schema is up to date
  1494. * Change default theme for public pages to "System Serif"
  1495. * Add feature to share an article (create a public link of a feed entry)
  1496. * Fix SQL injection in full-text search rank ordering
  1497. * Add generic OpenID Connect provider (OAuth2)
  1498. * Use more secure TLS configuration for autocert server (increase SSL Labs score from B to A+)
  1499. * Add feature to create per-application API Keys
  1500. * Add Go 1.14 to GitHub Actions
  1501. * Add scraper rule for wdwnt.com
  1502. * Add API client function to refresh all feeds
  1503. * Add API endpoint to refresh all feeds
  1504. * Add Auth Proxy authentication
  1505. * Use rel=prev/next on pagination links
  1506. Version 2.0.20 (Feb 15, 2020)
  1507. -----------------------------
  1508. * Add Japanese translation
  1509. * History: show entries in the order in which they were read
  1510. * Add button to add to Home screen
  1511. * Ignore enclosures without URL
  1512. * Correct spelling of "toggle"
  1513. * List view: align information to the left side, and the actionable buttons to the right
  1514. * Redirect to /unread when getting a 404 for an unread expired entry
  1515. * Do not advance to the next item when using the 'v' shortcut on the list of starred items
  1516. * Wrap around when navigating with keyboard shortcuts on a list view
  1517. * Remove unused Feed.Entries and Entry.Category from API client
  1518. * Add comments link keyboard shortcut
  1519. * Allow application/xhtml+xml links as comments URL in Atom replies
  1520. * Allow only absolute URLs in comments URL
  1521. * Use internal XML workarounds to detect feed format
  1522. * Make menu consistent across feed pages
  1523. * Make sure external URLs are not encoded incorrectly by Go template engine
  1524. * Make sure whitelisted URI schemes are handled properly by the sanitizer
  1525. * Use white background for favicon (Improve legibility when using a dark theme)
  1526. * Remove dependency on Sed to build Docker images
  1527. * Normalize URL query string before executing HTTP requests
  1528. * Improve Dublin Core support for RDF feeds
  1529. * Improve Podcast support (iTunes and Google Play feeds)
  1530. * Add support for Atom 0.3
  1531. * Add support for Atom "replies" link relation
  1532. * Return outer HTML when scraping elements
  1533. * Update scraper rule for "Le Monde"
  1534. * Filter valid XML characters for UTF-8 XML documents before decoding
  1535. * Trim spaces for RDF entry links
  1536. Version 2.0.19 (Dec 1, 2019)
  1537. ----------------------------
  1538. * Add shortcut "V" to open original link in current tab
  1539. * Add the possibility to add rules during feed creation
  1540. * Wrap attachments into <details> disclosure element
  1541. * Show attachment size on entry page
  1542. * Add support of RSS Media elements (group, description, peer link, and thumbnails)
  1543. * Add rewrite functions: convert_text_link and nl2br
  1544. * Add scraper rule for openingsource.org
  1545. * Add Makefile target to build only amd64 Docker image
  1546. * Make sure to remove integration settings when removing a user
  1547. * Add API parameter to filter entries by category
  1548. * Display list of feeds per category
  1549. * Show the number of read and unread entries for each feed
  1550. * Make sure settings menu is consistent
  1551. * Remove fixed table-layout for entry content
  1552. * Update autocert lib because ACME v1 is EOL
  1553. * Do not lighten blockquote font color
  1554. * Update de_DE translation
  1555. * Send a response when changing status of removed entries in Fever API
  1556. * Add meta tag to disable Google Translate
  1557. * Improve storage module
  1558. * Improve XML decoder to remove illegal characters
  1559. * Compare Fever token case-insensitively
  1560. * Make sure integration tests are marked as failed in Github Actions
  1561. * Add new formats to date parser
  1562. * Add notification message when using keyboard shortcuts: f, s, and m.
  1563. * Avoid keyboard shortcuts to conflict with Firefox’s "Find as you type" feature
  1564. Version 2.0.18 (Sep 25, 2019)
  1565. -----------------------------
  1566. * Add Docker image variant for arm32v7
  1567. * Add theme variants
  1568. - Use CSS variables instead of inherence
  1569. - Rename default theme to "Light - Serif"
  1570. - Rename Black theme to "Dark - Serif"
  1571. - Rename "Sans-Serif" theme to "Light - Sans Serif"
  1572. - Add "System" theme that use system preferences: Dark or Light
  1573. - Add Serif and Sans-Serif variants for each color theme
  1574. * Avoid constraint error when having duplicate entries during feed creation
  1575. * Disable strict XML parsing
  1576. * Ignore invalid content type
  1577. * Update man page
  1578. * Replace Travis by GitHub Actions
  1579. * Rename cleanup config variables and deprecate old ones
  1580. - CLEANUP_FREQUENCY_HOURS instead of CLEANUP_FREQUENCY
  1581. - CLEANUP_ARCHIVE_READ_DAYS instead of ARCHIVE_READ_DAYS
  1582. * Make configurable the number of days to remove old sessions
  1583. * Add native lazy loading for images and iframes
  1584. * Do not buffer responses in the image proxy
  1585. * Update dependencies
  1586. * Add Go 1.13 to test matrix
  1587. * Replace link border by outline to avoid slight content shift
  1588. * New rewrite function: add_mailto_subject
  1589. * Import OPML from URL
  1590. * Fix HTML injection in addImageTitle
  1591. * Accept HTML entities when parsing XML
  1592. Version 2.0.17 (Aug 3, 2019)
  1593. ----------------------------
  1594. * Update Docker image to Alpine Linux 3.10.1
  1595. * Pass auth header to manifest request (crossorigin attribute)
  1596. * Sort feed categories before serialization
  1597. * Fix syntax errors in man page
  1598. * Add .search margin-right
  1599. * Ask for confirmation before flushing history, marking page as read, and mark all as read
  1600. * Add option to disable feeds
  1601. Version 2.0.16 (Jun 8, 2019)
  1602. ----------------------------
  1603. * Add option to toggle date/time in log messages
  1604. * Add optional config file parser in addition to environment variables
  1605. * Make HTTP Client timeout and max body size configurable
  1606. * Refactor config package:
  1607. - Parse configuration only once during startup time
  1608. - Store configuration values in a global variable
  1609. * Flip behavior of j and k keyboard shortcuts
  1610. * Bump Postgresql client library to v1.1.1 to bring in SCRAM-SHA-256 authentication
  1611. * Add option to enable/disable keyboard shortcuts
  1612. * Add missing translation
  1613. * Improve page reload when showing unread/all entries:
  1614. - Show only unread entries = refresh current page
  1615. - Show all entries = go to next page
  1616. * Always display feed entries even when there is a feed error
  1617. * Use loading label instead of saving when submitting login form
  1618. * Add OPML v1 support during importation
  1619. * Add 'allow-popups' to iframe sandbox permissions
  1620. Version 2.0.15 (Mar 16, 2019)
  1621. -----------------------------
  1622. * Move Dockerfile to main repo
  1623. * Change location of the binary from /usr/local/bin to /usr/bin in Docker image
  1624. * Add double tap detection for next/previous page navigation
  1625. * Allow users to disable auto-remove
  1626. * Make parser compatible with Go 1.12
  1627. * Add Golang 1.12 to CI
  1628. * Use feed ID instead of user ID to check entry URLs presence
  1629. * Fix typo in stylesheet
  1630. * Sort search results by relevance
  1631. * Use preferably the published date for Atom feeds
  1632. * Add Spanish translation
  1633. * Rename session cookies
  1634. * Handle the case when application session is expired and not user session
  1635. Version 2.0.14 (Jan 13, 2019)
  1636. -----------------------------
  1637. * Only attempt to change password if the confirmation field is filled in (Firefox)
  1638. * Remove URL from client user agent
  1639. * Make the feed list order case-insensitive
  1640. * Handle XHTML Summary elements for Atom feeds
  1641. * Make UTF-8 the default encoding for XML feeds
  1642. * Add more targets to Makefile
  1643. * Add -mod=vendor in Makefile
  1644. * Move health check endpoint from ui package to httpd service
  1645. * Add workaround for non GMT dates (RFC822, RFC850, and RFC1123)
  1646. * Make sure `<strong>` elements are bold
  1647. * Show scrollbars only when necessary for <pre> elements
  1648. * Add Italian translation
  1649. * Allow to switch between unread only and all entries on category/feed views
  1650. * Add function storage.UpdateFeedError()
  1651. * Add BBC News scraping rule
  1652. * Ignore JSON feeds from EnsureUnicode()
  1653. * Preserve category selection when no feed is found
  1654. * Update XML encoding regex to take single quotes into consideration
  1655. * Send cli errors to stderr
  1656. * Update dependencies
  1657. * Make password prompt compatible with Windows
  1658. * Make configurable the number of days to archive read items
  1659. * Change log level to debug when starting workers
  1660. * Do not show $DATABASE_URL warning when showing application info
  1661. * Move image proxy filter to template functions
  1662. * Update scraper rule for lemonde.fr
  1663. * Refactor manual entry scraper
  1664. * Apply rewriter rules on manual "Fetch Original Content"
  1665. * Add Makefile target for current OS and architecture
  1666. * Improve Makefile
  1667. Version 2.0.13 (Nov 25, 2018)
  1668. -----------------------------
  1669. * Add man page
  1670. * Add support for Systemd Socket Activation (experimental)
  1671. * Add the possibility to listen on Unix sockets
  1672. * Add config options to disable HTTP and scheduler services
  1673. * Archive more read entries in cleanup job
  1674. * Change default database connection string (backward compatible)
  1675. * Improve logging messages in ui package
  1676. * Improve overall Simplified Chinese translations
  1677. * Improve time since post date displays:
  1678. - "15 days" now is "15 days" rather than "3 weeks" ago
  1679. - "32 days" is now "1 month" rather than "2 months" ago
  1680. - "366 days" is now "1 year" rather than "2 years" ago
  1681. * Allow the scraper to parse XHTML documents
  1682. * Remove charset=utf-8 from JSON responses
  1683. * Ignore hotkeys containing Control, Alt or Meta keys
  1684. * Handle more encoding conversion edge cases
  1685. * Disable go test caching
  1686. * Avoid duplication of ldflags in Makefile
  1687. * Fix wrong translation key for category pages
  1688. * Code refactoring:
  1689. - Simplify application HTTP middlewares
  1690. - Replace daemon and scheduler package with service package
  1691. - Move UI middlewares and routes to ui package
  1692. - Move API middleware and routes to api package
  1693. - Move Fever middleware and routes to fever package
  1694. Version 2.0.12 (Oct 26, 2018)
  1695. -----------------------------
  1696. * Add OpenBSD build
  1697. * Improve logging for OAuth2 callback
  1698. * Make "g f" go to feed, or list of feeds
  1699. * Add more details in feed storage errors to facilitate debugging
  1700. * Add entries storage error to feed errors count
  1701. * Set arbitrary maximum size for tsvector column
  1702. * Unsubscribe from feed through link or "#"
  1703. * Simplify feed entries filtering
  1704. * Simplify feed fetcher
  1705. * Simplify feed parser and format detection
  1706. * Improve unit tests in url package
  1707. * Add short cli flags -i and -v
  1708. * Convert text links and line feeds to HTML in YouTube channels
  1709. * Change link state when marking all entries as read
  1710. * Add missing package descriptions for GoDoc
  1711. * Fix typo in license header
  1712. * Refactor HTTP response builder
  1713. * Improve Fever API performances when marking a feed or group as read
  1714. * Set focus on article link when pressing prev/next hotkeys
  1715. * Improve request package and add more unit tests
  1716. * Add more unit tests for config package
  1717. * Simplify locale package usage (refactoring)
  1718. * Translate application in Russian
  1719. * Use disclosure widget <details> for advanced feed options
  1720. * Use unique translation IDs instead of English text as key
  1721. * Add more unit tests for template functions
  1722. * Fix invalid output when truncating Unicode text in templates
  1723. * Add the possibility to override default user agent for each feed
  1724. * Split Makefile linux targets by architecture
  1725. * Add compiler, Arch, and OS to info command
  1726. * Avoid line break between emoji and (un)read/(un)star links
  1727. * Build Docker image for multiple architectures (amd64, arm32v6, arm64v8)
  1728. Version 2.0.11 (Sep 11, 2018)
  1729. -----------------------------
  1730. * Set cookie flag `SameSite` to Lax mode
  1731. * Use predefined ciphers when TLS is configured
  1732. * Avoid displaying an error when shutting down the daemon
  1733. * Add "Mark this page as read" to the bottom
  1734. * Store client IP address in request context
  1735. * Refactor HTTP context handling
  1736. * Make user creation via environment variables idempotent
  1737. * Use regular text version of ✔︎ instead of emoji version on iOS
  1738. * Add toggle status button to entry page
  1739. * Migrate to Go Modules and Go 1.11
  1740. * Show count of feeds with permanent errors in header menu
  1741. * Display remote client IP in logs when having a login failure (Fail2Ban)
  1742. * Add remove button in feed edit page
  1743. * Split integration tests into multiple files
  1744. * Update scraper rule for heise.de
  1745. * Expose real error messages for internal server API errors
  1746. * Move Golang API client in project source tree (the separate project is deprecated)
  1747. * Use canonical imports
  1748. * Add Procfile
  1749. * Create database package (refactoring)
  1750. * Update user agent with new website URL
  1751. * Update German translation
  1752. Version 2.0.10 (July 22, 2018)
  1753. ------------------------------
  1754. * Avoid browser caching issues when assets changes
  1755. * Add Gzip/Deflate compression for HTML, JSON, CSS and Javascript responses
  1756. * Improve themes handling
  1757. * Store user theme in session
  1758. * Logged out users will keep their theme
  1759. * Add theme background color to web manifest and meta tag
  1760. * Update application icon with different sizes
  1761. * Add support for published tag in Atom feeds
  1762. * Add tooltip to feed domain in feeds list (title attribute)
  1763. * Prevent vertical scrolling on swipe
  1764. * Show feed title instead of domain in items list
  1765. * Add service worker to cache feed icons
  1766. * Make image proxy configurable via IMAGE_PROXY environment variable:
  1767. * none = No proxy
  1768. * http-only = Proxy only non-HTTPS images (default)
  1769. * all = Proxy everything
  1770. * Add alt attribute for feed icons
  1771. * Update CI jshint check
  1772. * Add embedly.com to iframe whitelist
  1773. * Use passive event listeners for touch events
  1774. * Add `add_dynamic_image` rewriter for JavaScript-loaded images
  1775. * Change feed password field type to text to avoid auto-completion with Firefox
  1776. * Using autocomplete="off" or autocomplete="new-password" doesn't change anything
  1777. * Changing the input ID doesn't change anything
  1778. * Using a different input name doesn't change anything
  1779. * Only Chrome supports autocomplete="new-password"
  1780. * Add base URL validation
  1781. * Update default stylesheet name in HTML layout
  1782. * Pre-generate themes stylesheets at build time
  1783. * Update vendor dependencies
  1784. * Refactor assets bundler and split Javascript files
  1785. * Run sanitizer after all processing and entry content rewrite
  1786. * Remove timestamp from generated files
  1787. * Add support for protocol relative YouTube URLs
  1788. * Add Postgres full-text search for entries
  1789. * Add search form in user interface
  1790. * Add search parameter to the API
  1791. * Improve Dutch locales
  1792. * Sandbox iframes when sanitizing
  1793. * Keep consistent text size on mobile orientation change
  1794. * Change permission of /etc/miniflux.conf to 600 instead of 644 in RPM package
  1795. * Add tzdata package to Docker image
  1796. * Update Docker image to Alpine Linux 3.8
  1797. Version 2.0.9 (July 1, 2018)
  1798. ----------------------------
  1799. * Avoid Chrome to autocomplete no-login password fields
  1800. * Add cli flag to reset all feed errors
  1801. * Do not ignore errored feeds when a user refresh feeds manually
  1802. * Add specific 404 and 401 error messages
  1803. * Strip binaries to reduce size
  1804. * Make sure we always get the pagination in unread mode
  1805. * Fix incorrect data value when toggling bookmark flag on entry page
  1806. * Set opener to null when opening original URL with JavaScript
  1807. * Remove unnecessary style
  1808. * Refactor AddImageTitle rewriter
  1809. * Only processes images with `src` **and** `title` attributes (others are ignored)
  1810. * Processes **all** images in the document (not just the first one)
  1811. * Wraps the image and its title attribute in a `figure` tag with the title attribute's contents in a `figcaption` tag
  1812. * Improve sanitizer to remove `style`, `noscript` and `script` tag contents
  1813. * Improve feed and user API updates with optional values
  1814. * Add new fields for feed username/password
  1815. * Improve memory usage debug log
  1816. * Disable keep-alive for HTTP client
  1817. * Close HTTP response body even for failed requests
  1818. * Add Sans-Serif theme
  1819. * Rewrite iframe Youtube URLs to https://www.youtube-nocookie.com
  1820. * Add more filters for API call `/entries`:
  1821. * before (unix timestamp)
  1822. * before_entry_id (int64)
  1823. * after (unix timestamp)
  1824. * after_entry_id (int64)
  1825. * starred (boolean)
  1826. * Rewrite individual entry pagination SQL queries
  1827. * Simplify entry query builder
  1828. * Prevent items from sticking on touchend
  1829. * Extended horizontal overflow to feed and category views
  1830. * Translate missing strings
  1831. * Update German translation
  1832. Version 2.0.8 (June 4, 2018)
  1833. ----------------------------
  1834. * Add Pocket integration
  1835. * Rewrite RealIP() to avoid returning an empty string
  1836. * Convert IP field from text to inet type
  1837. * Improve error handling in integration clients
  1838. * Make unread counter clickable
  1839. * Archive read entries automatically after 60 days
  1840. * Hide horizontal overflow when swiping articles on touch devices
  1841. * Add API endpoint to get logged user
  1842. * Fever API: Return response with an empty list if there is no item
  1843. * Handle feeds with dates formatted as Unix timestamp
  1844. Version 2.0.7 (May 7, 2018)
  1845. ---------------------------
  1846. * Add API endpoint to import OPML file
  1847. * Make sure to close request body in HTTP client
  1848. * Do not show save link if no integration is configured
  1849. * Make sure integrations are configured before to make any HTTP requests
  1850. * Avoid people to unlink their OAuth2 account without having a local password
  1851. * Do not use shared variable to translate templates (avoid concurrency issue)
  1852. * Use vanilla HTTP handlers (refactoring)
  1853. * Move HTTP client to its own package (refactoring)
  1854. * Add middleware to read X-Forwarded-Proto header (refactoring)
  1855. * Use Gorilla middleware (refactoring)
  1856. * Scrape parent element for iframe
  1857. * Add SoundCloud and Bandcamp iframe sources
  1858. Version 2.0.6 (Apr 20, 2018)
  1859. ----------------------------
  1860. * Improve graceful shutdown
  1861. * Simplify Heroku deployment
  1862. * Display memory usage and some metrics in logs
  1863. * Increase read/write timeout for HTTP server
  1864. * Add support for Dublin Core date in RDF feeds
  1865. * Do not return an error if the user session is not found
  1866. * Handle some non-english date formats
  1867. * Add missing French translation
  1868. * Rename RSS parser getters
  1869. * Get the right comments URL when having multiple namespaces
  1870. * Ignore caching headers for feeds that send "Expires: 0"
  1871. * Update translations
  1872. Version 2.0.5 (Apr 7, 2018)
  1873. ---------------------------
  1874. * Avoid unread counter to be off by one when reading an entry
  1875. * Add Comments URL to entries
  1876. * Add FreeBSD build target
  1877. * Handle RSS author elements with inner HTML
  1878. * Fix typo in translations
  1879. * Add Dutch translation
  1880. * Convert enclosure size field to bigint
  1881. * Switch CI to Go v1.10
  1882. * Fix broken OPML import when compiling with Go 1.10
  1883. Version 2.0.4 (Mar 5, 2018)
  1884. ---------------------------
  1885. * Add Simplified Chinese translation
  1886. * Add Nunux Keeper integration
  1887. * Filter the list of timezones
  1888. * Add timezone to entries dates for REST and Fever API
  1889. * Show last login and session creation date in current timezone
  1890. * Fix typo in edit user template
  1891. * Improve parser error messages
  1892. * Remove parentheses around feed error messages
  1893. * Support localized feed errors generated by background workers
  1894. * Print info message if DATABASE_URL is not set
  1895. Version 2.0.3 (Feb 19, 2018)
  1896. ----------------------------
  1897. * Add Polish translation
  1898. * Change color of <q> tags for black theme
  1899. * Add database indexes (don't forget to run database migrations)
  1900. * Handle Atom feeds with HTML title
  1901. * Strip invalid XML characters to avoid parsing errors
  1902. * Improve error handling for HTTP client
  1903. Version 2.0.2 (Feb 5, 2018)
  1904. ---------------------------
  1905. * Add support for Let's Encrypt http-01 challenge
  1906. * Move template functions outside engine (refactoring)
  1907. * Take timezone into consideration when calculating relative time
  1908. * Add support for HTTP Strict Transport Security header
  1909. * Add support for base URLs with subfolders
  1910. * Add missing about menu in settings
  1911. * Show API URL endpoints in user interface
  1912. * Do not update entry date while refreshing a feed
  1913. * Add flag to toggle debug logging
  1914. * Improve unread counter updates
  1915. Version 2.0.1 (Jan 22, 2018)
  1916. ----------------------------
  1917. * Change user agent (People are blocking the crawler with mod_security)
  1918. * Move environment variables to config package (refactoring)
  1919. * Add build targets for all ARM architectures
  1920. * Do not crawl existing entry URLs
  1921. * Show translated login page in user language when logged out
  1922. * Handle more encoding edge cases:
  1923. - Feeds with charset specified only in Content-Type header and not in XML document
  1924. - Feeds with charset specified in both places
  1925. - Feeds with charset specified only in XML document and not in HTTP header
  1926. * Add German translation
  1927. * Add mark as read/unread link on list items
  1928. * Add API endpoint for OPML export
  1929. Version 2.0.0 (Jan 11, 2018)
  1930. ----------------------------
  1931. * Initial release of Miniflux 2.