CVS commit: pkgsrc/www/miniflux

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Jan  7 21:19:29 UTC 2026

Modified Files:
        pkgsrc/www/miniflux: Makefile distinfo

Log Message:
miniflux: update to 2.2.16.

Security

    Disallow the media proxy from fetching resources on private networks to mitigate potential SSRF issues. This behavior is configurable at the instance level.
    Disallow fetching feed icons from private networks to reduce the SSRF attack surface. This is also configurable at the instance level.
    Add the TRUSTED_REVERSE_PROXY_NETWORKS configuration option to prevent spoofing of HTTP headers such as X-Forwarded-For, X-Forwarded-Proto, and X-Real-Ip. This option must be configured when 
AUTH_PROXY_HEADER is enabled.
    Stop logging generated Google Reader API tokens, even when debug mode is enabled.
    Remove the CORS handler from the Google Reader API, as it is not intended to be used by web clients, reducing the overall attack surface.

Performance and Storage

    Avoid indexing the content of removed entries, significantly reducing database index size after cleanup.
    Minor storage and database refactoring to simplify code paths and reduce unnecessary formatting overhead.

API and Integrations

    Add a new API endpoint to import entries into an existing feed.
    Execute the content sanitizer when updating or importing entries through the API to ensure consistent sanitization.
    Improve Google Reader API compatibility by removing unnecessary output parameter checks and aligning behavior with other open-source RSS readers.
    Add an auto-push option to the Readeck integration.

User Interface

    Add smooth page transitions for a more polished navigation experience.
    Add a route to view individual starred entries directly from a category’s starred list.
    Add a link to the GitHub contributors page in templates.
    Update all translations.

Documentation and Tooling

    Improve consistency and fix typos in the miniflux(1) manual page.
    Remove the obsolete version key from Docker Compose examples.
    Update the Go devcontainer image to go:1-trixie.
    Update the Distroless container base image to Debian 13.
    Update GitHub Actions dependencies.


To generate a diff of this commit:
cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/miniflux/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/miniflux/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/miniflux/Makefile
diff -u pkgsrc/www/miniflux/Makefile:1.7 pkgsrc/www/miniflux/Makefile:1.8
--- pkgsrc/www/miniflux/Makefile:1.7    Fri Dec 12 20:52:51 2025
+++ pkgsrc/www/miniflux/Makefile        Wed Jan  7 21:19:29 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.7 2025/12/12 20:52:51 wiz Exp $
+# $NetBSD: Makefile,v 1.8 2026/01/07 21:19:29 wiz Exp $
 
-DISTNAME=      miniflux-2.2.15
+DISTNAME=      miniflux-2.2.16
 CATEGORIES=    www
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=miniflux/}
 GITHUB_PROJECT=        v2

Index: pkgsrc/www/miniflux/distinfo
diff -u pkgsrc/www/miniflux/distinfo:1.3 pkgsrc/www/miniflux/distinfo:1.4
--- pkgsrc/www/miniflux/distinfo:1.3    Fri Dec 12 20:52:51 2025
+++ pkgsrc/www/miniflux/distinfo        Wed Jan  7 21:19:29 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.3 2025/12/12 20:52:51 wiz Exp $
+$NetBSD: distinfo,v 1.4 2026/01/07 21:19:29 wiz Exp $
 
 BLAKE2s (github.com__puerkito_bio_goquery_@v_v1.11.0.mod) = 2bb233586966faf1d6063aa3bf75e7c80563500c3d8beec934b77bcf903907cd
 SHA512 (github.com__puerkito_bio_goquery_@v_v1.11.0.mod) = fdb3a6ac5741daf0d847b3fe7e08dd1ac17deb98946aafec1ed9a3bdffe9f737800a4cd7c7ee121a30c61eb09ebc37c73be21dbcad23e49d1c1c402a59f6fb07
@@ -408,6 +408,6 @@ Size (google.golang.org_protobuf_@v_v1.3
 BLAKE2s (gopkg.in_check.v1_@v_v0.0.0-20161208181325-20d25e280405.mod) = 35cd1964700502d06b8c987979fb4dbddc41a5cda3368d037211b89d3587521f
 SHA512 (gopkg.in_check.v1_@v_v0.0.0-20161208181325-20d25e280405.mod) = 9ac0f80ef05881387cb2f48f81560f3207fe586ea16495383662e6d62e43d93fac01dfe72e1d0063d3ab065331dab3a8098d7da4f1830ba1aff6f27f8e1bc1b2
 Size (gopkg.in_check.v1_@v_v0.0.0-20161208181325-20d25e280405.mod) = 25 bytes
-BLAKE2s (miniflux-2.2.15.tar.gz) = af4fb1581609c524567b529e97612a82add367a94dfe45060f55c137c4de68e1
-SHA512 (miniflux-2.2.15.tar.gz) = 64fadcdbb44fad626ff1a93b77bc55ac0c5416bdc5431d318b3eab30b2056b1b9ce6fbbd2a34f119178bc69bce7e7c0755a2f1b2f3327f28211a47bd667d1d6d
-Size (miniflux-2.2.15.tar.gz) = 881741 bytes
+BLAKE2s (miniflux-2.2.16.tar.gz) = 65b4b05c33cc4bdd8ade4e4780a3599ad288b91db1de89b66b91d9f4e0c8a994
+SHA512 (miniflux-2.2.16.tar.gz) = 38bab8ea7a2dba950fcc5d9a9855761e6da7c90525fb0ce2b76ca82469f6babb7fdeb4f23fdb59355c28fff4e9200f26e88cee2debe26b6ba0280572a835d801
+Size (miniflux-2.2.16.tar.gz) = 890245 bytes