Commit Graph

  • 74092a7fda Fix regression sharing links (#9303) edge Alexandre Alapetite 2026-09-14 20:50:09 +02:00
  • 2bb901d9c4 Accept a trusted proxy address given without a subnet (#9301) Jamal Kamaladdinoglu 2026-09-14 00:34:39 +04:00
  • 64ce16db86 Added the missing semicolons to the grid-area manage-labels and the manage-share (#9298) András Marczinkó 2026-09-12 22:20:59 +02:00
  • cc45db5ef8 Fix adaptive reading state after marking articles read (#9290) Morax 2026-09-10 23:18:09 -07:00
  • 61d7925af1 Config + increase default values for search max length and depth (#9280) Alexandre Alapetite 2026-09-10 22:14:55 +02:00
  • d58459a84a Simplify pathInfo() (#9287) Alexandre Alapetite 2026-09-10 15:37:31 +02:00
  • 2cabd29d1b Fix infinite redirect loop due to SCRIPT_NAME in PATH_INFO (#9282) Inverle 2026-09-10 14:20:35 +02:00
  • a1e96a4f69 Small fixes changelog, credits Alexandre Alapetite 2026-09-09 17:01:28 +02:00
  • 11d56601ad Start next version 1.30.1-dev Alexandre Alapetite 2026-09-09 17:01:06 +02:00
  • 62eb3b405e Release 1.30.0 1.30.0 latest Alexandre Alapetite 2026-09-09 16:35:42 +02:00
  • c32b5defc4 Changelog Alexandre Alapetite 2026-09-09 16:16:38 +02:00
  • dc5cf8221b Limit the length and parentheses nesting depth of a search query (#9277) AdamKorcz 2026-09-09 15:12:41 +01:00
  • 970b135190 Ignore security-relevant OPML attributes for dynamic OPML sources (#9276) Ali Gündoğar 2026-09-09 17:11:38 +03:00
  • 7b6ec0f8d6 Log invalid challenge and ignore JSON error during login (#9278) Inverle 2026-09-09 16:11:05 +02:00
  • 54b687b7a1 Add missing contributors to credits Alexandre Alapetite 2026-09-09 00:51:51 +02:00
  • 296084793b Changelog Alexandre Alapetite 2026-09-09 00:17:23 +02:00
  • 18dfada959 Only allow http/https URI schemes for enclosure and thumbnail URLs (#9272) Ali Gündoğar 2026-09-09 01:14:13 +03:00
  • 58e32add92 SimplePie: Harden cache deserialization calls (#9273) Inverle 2026-09-08 23:36:59 +02:00
  • cea88ace69 Reword explanations for edge/latest channels (#9270) Alexandre Alapetite 2026-09-08 23:25:18 +02:00
  • a169035755 Add Jamal Ali to CREDITS (#9271) Jamal Ali 2026-09-08 19:35:51 +04:00
  • 65e402ca41 i18n: add Azerbaijani translation (#9269) Jamal Ali 2026-09-08 16:42:42 +04:00
  • c4b96b253c Fix auth CSRFs (login and register actions) (#9171) Inverle 2026-09-08 09:19:01 +02:00
  • 5a842b25ee Format unread counter in title on page load (#9263) Inverle 2026-09-06 21:36:12 +02:00
  • b182fb94e8 Fix desync between favicon and title unread counters (#9262) Inverle 2026-09-06 21:35:15 +02:00
  • 1a33a2999f Fix typo in alert error border color variable (#9266) András Marczinkó 2026-09-06 21:33:40 +02:00
  • 99ee090236 Fix PHP Warning: Cannot modify header information headers already sent (#9267) András Marczinkó 2026-09-06 21:32:48 +02:00
  • ce6e57ae0f Add XiaoSong1223 to contributors (#9268) SONG ZHIFEI 2026-09-07 03:29:41 +08:00
  • 40b3a7592a Changelog until 2026-08-16 Alexandre Alapetite 2026-09-06 21:28:33 +02:00
  • 148c140843 Fix marking filtered label articles as read in SQLite and PostgreSQL (#9264) Song Zhifei 2026-09-06 23:44:14 +08:00
  • e5f9906781 chore(deps): bump fast-uri from 3.1.5 to 3.1.7 (#9257) dependabot[bot] 2026-09-03 08:57:38 +02:00
  • c83e01f03c chore(deps-dev): bump eslint from 10.8.1 to 10.9.1 in the eslint group (#9253) dependabot[bot] 2026-09-01 21:33:14 +02:00
  • a8b722eee6 chore(deps-dev): bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9254) dependabot[bot] 2026-09-01 21:33:00 +02:00
  • 13703ded5c chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#9255) dependabot[bot] 2026-09-01 21:32:29 +02:00
  • 7a23b44a61 Add SamCyber001 to CREDITS.md (#9250) SamCyber001 2026-09-01 10:35:21 +03:00
  • 12b5be6afc Gate greader/json share formats behind Share by OPML (#9248) SamCyber001 2026-08-31 15:43:55 +03:00
  • 14bf5f8c96 Strip feed URL credentials from anonymous query.php output (#9246) SamCyber001 2026-08-30 20:25:06 +03:00
  • 1e33857256 i18n(es): complete Spanish translations (#9245) ci 2026-08-30 11:53:47 -03:00
  • 518cc9d890 docs: add payaci to contributors list (#9244) ci 2026-08-29 18:43:28 -03:00
  • 0a44b7d017 Follow-up #9169 remove form IDs everywhere (#9205) Inverle 2026-08-29 23:21:39 +02:00
  • bed26d2c93 fix(i18n): resolve pt-BR dirty translations (#9242) ci 2026-08-29 17:38:52 -03:00
  • 5e625d638c fix(i18n): translate missing pt-BR strings (#9240) ci 2026-08-29 17:28:22 -03:00
  • a6a27cb1fe Document CLI example to count all feeds (#9238) Alexandre Alapetite 2026-08-29 22:15:48 +02:00
  • f902047204 Offer to add a prefix when resharing user labels (#9236) Alexandre Alapetite 2026-08-28 08:51:57 +02:00
  • 07c939d84f Fix: infinite recursion in sanitizeHTML() when maxLength truncation doesn't converge (#9043) Luc SANCHEZ 2026-08-28 08:47:04 +02:00
  • a9a5856d0d PostgreSQL: make commitNewEntries resilient to duplicate keys (#9231) Ali Gündoğar 2026-08-26 13:20:16 +03:00
  • 03e871e5be Add configurable log_level system setting (#9185) Luis Carlos Simitana 2026-08-25 11:18:30 -03:00
  • 2701b7dff4 Cleaner limit anonymous mode to default user (#9235) Alexandre Alapetite 2026-08-25 16:17:36 +02:00
  • 95842d81c1 Fix only the last <media:credit> being written to the RSS output (#9174) TowyTowy 2026-08-21 22:49:52 +02:00
  • 3d59aeb476 i18n: Improve Traditional Chinese translations (#9223) IEEE-754 2026-08-20 00:28:47 +08:00
  • a84c0a8bc2 Fix all broken links in the entire repository (#9207) Inverle 2026-08-19 16:19:21 +02:00
  • adfea9092f i18n(id): complete Indonesian translation (#9220) Ihsan Arif 2026-08-19 20:24:56 +07:00
  • c7e6ab76fe Disallow fetching of non remote uri (#9215) Inverle 2026-08-19 15:24:09 +02:00
  • 2ceb78fefb Dev updates: composer, hadolint, typos... (#9219) Alexandre Alapetite 2026-08-18 09:36:01 +02:00
  • 48ece4200f Improve aside keyboard navigation (#9202) Inverle 2026-08-17 20:41:26 +02:00
  • 06faa02290 Refactor user query translation keys (#9049) Gerard Alvear Porras 2026-08-17 11:22:58 +02:00
  • 9f00a04b11 Pin the docker publish actions and scope two workflow tokens (#9200) Thibaud-Vdb 2026-08-16 22:32:36 +02:00
  • 55c0c05cab i18n: manually review Lithuanian (lt) translation (#9213) georatas 2026-08-16 22:32:40 +03:00
  • 24039afb10 Remove stale dynamic favicon links (#9127) Gerard Alvear Porras 2026-08-15 00:08:07 +02:00
  • 4023406fee Add Docker access log toggle (#9191) Morax 2026-08-15 05:40:47 +08:00
  • 994ae75aee Order categories during OPML import/export according to position (#9203) Inverle 2026-08-14 22:51:55 +02:00
  • 7529c71a77 Fix path disclosure in cache error message (#9206) Inverle 2026-08-14 22:44:51 +02:00
  • f3d3d983fc i18n: add Lithuanian translation (#9201) georatas 2026-08-12 22:53:51 +03:00
  • d677efb79a Add 0xdeadrelay to CREDITS.md (#9196) 0xdeadrelay 2026-08-11 09:46:51 +01:00
  • ceb497f3c8 Block CGNAT (RFC6598) and NAT64 (RFC6052) ranges in SSRF guard (#9195) 0xdeadrelay 2026-08-11 07:58:40 +01:00
  • bf16d81d17 Add sungju Kim to CREDITS.md (#9194) sungju Kim 2026-08-10 21:25:16 +09:00
  • 484e4f709d Add CHANGELOG entry for GHSA-p83h-r2jw-9whg fix (#9183) (#9193) sungju Kim 2026-08-10 19:36:34 +09:00
  • ae672979c2 Fix saving user queries (#9190) Alexandre Alapetite 2026-08-09 22:05:41 +02:00
  • 1146d05bdd Allow modifiers for open website shortcut (#9186) Inverle 2026-08-09 20:58:40 +02:00
  • c7b43285a3 docs: Prefer public PRs when submitting security fixes (#9184) Inverle 2026-08-09 20:08:59 +02:00
  • acef1de21f Security: Use hash_equals() for GReader API token comparison (#9183) Alexandre Alapetite 2026-08-08 20:52:55 +02:00
  • 704678f808 chore(deps-dev): bump squizlabs/php_codesniffer (#9179) dependabot[bot] 2026-08-07 10:28:05 +02:00
  • cb482dd836 Bump globals and @eslint/js (#9181) Alexandre Alapetite 2026-08-07 10:27:15 +02:00
  • 324c1e3978 Bump neostandard and blocked eslint (#9178) Alexandre Alapetite 2026-08-07 09:41:22 +02:00
  • 6bd14a6121 Refactor to use CSRF field directly instead of borrowing it from a form (#9169) Inverle 2026-08-05 22:19:43 +02:00
  • e1ce0b0519 Sanitize all fields during JSON import (#9168) Inverle 2026-08-05 22:00:10 +02:00
  • 551427ce38 Issue #9166: Detect JSON Feed URLs when subscribing via the API (#9167) John Brayton 2026-08-05 15:39:35 -04:00
  • d1999fce0a chore(deps): bump fast-uri from 3.1.2 to 3.1.5 (#9176) dependabot[bot] 2026-08-05 21:32:23 +02:00
  • fa8e8a4400 Fix “mark as read older than…” widening the active search (#9173) TowyTowy 2026-08-04 22:09:12 +02:00
  • 0cf8815de1 Fix HTML injection via decoded website attribute in feed menu (#9170) Inverle 2026-08-03 00:02:04 +02:00
  • ee6dd7b731 chore(deps-dev): bump markdownlint-cli2 from 0.23.0 to 0.23.2 (#9159) dependabot[bot] 2026-08-01 23:16:01 +02:00
  • 6ec69fadc2 chore(deps-dev): bump stylelint in the stylelint group (#9158) dependabot[bot] 2026-08-01 23:15:30 +02:00
  • 1dced38fc1 Fix PHPStan 2.2.7 (#9156) Alexandre Alapetite 2026-08-01 23:14:35 +02:00
  • 3b9b453631 chore(deps): bump ruby/setup-ruby from 1.315.0 to 1.321.0 (#9165) dependabot[bot] 2026-08-01 22:42:43 +02:00
  • 6ef1b93a5a chore(deps): bump actions/setup-node from 6 to 7 (#9162) dependabot[bot] 2026-08-01 21:59:06 +02:00
  • e39b5898f1 Ignore empty categories when sizing export feed selector (#9154) Jam Balaya 2026-08-01 22:00:41 +09:00
  • ccff81efe3 Docker dev newest: PHP 8.6 (#9155) Alexandre Alapetite 2026-08-01 14:26:39 +02:00
  • 4546ed13aa Add Jam Balaya to CREDITS (#9153) Jam Balaya 2026-07-30 22:23:29 +09:00
  • f35c970250 Exclude hidden feeds from global view counts (#9152) Jam Balaya 2026-07-30 19:31:51 +09:00
  • 2a42d79cda Fix sharing menu conflicts with extensions (#9074) Gerard Alvear Porras 2026-07-30 12:22:51 +02:00
  • 0acc71359d docs(credits): add Kobi Hikri (#9151) Kobi Hikri 2026-07-30 00:00:15 +03:00
  • dd2ef8ffa6 Group export feeds by category (#9079) Gerard Alvear Porras 2026-07-29 16:58:54 +02:00
  • f3b85383e5 Use global view when searching from subscription page (#9144) Alexandre Alapetite 2026-07-29 16:42:40 +02:00
  • 36d973a3bd Filter global view feed list by state and search (#9132) Gerard Alvear Porras 2026-07-29 16:36:06 +02:00
  • 1884db7bec New CSS class alert-info (#9145) Alexandre Alapetite 2026-07-29 16:34:52 +02:00
  • 7afef6f689 CI: attach provenance and SBOM attestations to the published image (#9150) Kobi Hikri 2026-07-29 17:24:49 +03:00
  • 0348521db3 i18n: update de (#9149) maTh 2026-07-29 15:32:52 +02:00
  • 397612111c chore(deps): bump postcss from 8.5.15 to 8.5.24 (#9148) dependabot[bot] 2026-07-28 14:59:11 +02:00
  • 1b7178a18b Security: apply encodeURIComponent to share template (#9146) Alexandre Alapetite 2026-07-28 11:47:07 +02:00
  • 1460e75730 Fix auto-share shortcut on first use (#9072) Gerard Alvear Porras 2026-07-24 19:17:14 +02:00
  • 09478222ce Docker/OIDC: redirect to a default URL on expired auth state instead of 400-ing (#9143) Cron 2026-07-24 10:55:36 -05:00