FreshRSS - Package Updates

[Package Updates]

[1.23.0]

• Update FreshRSS to 1.25.0
• Full Changelog
• Features
• Bug fixing
• API
• Compatibility
• Deployment
• SimplePie
• Security
• UI
• Extensions
• I18n
• Misc.

[Package Updates]

[1.24.0]

• Update FreshRSS to 1.26.0
• Full Changelog
• Add order-by options to sort articles by received date (existing, default), publication date, title, link, random
• Allow searching in all feeds, also feeds only visible at category level with &get=A, and also those archived with &get=Z
• UI accessible from user-query view
• New shortcuts for adding user labels to articles
• Several improvements and bug fixes

[Package Updates]

[1.24.1]

• Update FreshRSS to 1.26.1
• Full Changelog
• Fix back-compatibility with cURL 7.51 (we require cURL 7.52+ for CURLPROXY_HTTPS)
• Add cURL version to page about system information
• Fix regression with cURL HTTP headers breaking conditional HTTP requests
• Fix regression with saving states of user queries
• Fix regression with dynamic OPML
• Fix update of the users last activity on login action
• Fix setting category option Maximum number of articles to keep per feed
• Fix priority field when processing a new feed from an extension
• Use case-insensitive sort for categories
• Improve dark mode of Origine theme

[Package Updates]

[1.25.0]

• Update base image to 5.0.0

[Package Updates]

[1.25.1]

• Update FreshRSS to 1.26.2
• Full Changelog
• Implement JSON string concatenation with & operator #7414
• Support multiple JSON fragments in HTML+XPath+JSON mode #7369
• Fix escaping of tag search #7468
• Fix CLI parsing of Boolean flags #7430
• Fix API for labels with slash #7437
• Fix support for feeds with XML preamble + DTD #7515, simplepie#914
• Disallow <iframe srcdoc=""> #7494, CVE-2025-32015
• Disallow <button formaction=""> #7506
• Improve favicons hash to avoid favicon pollution #7505, CVE-2025-46339
• Add Content-Security-Policy HTTP headers to favicons #7471, CVE-2025-31136

[Package Updates]

[1.25.2]

• Update FreshRSS to 1.26.3
• Full Changelog
• Keep sort and order criteria during navigation #​7585
• Add info about PDO::ATTR_CLIENT_VERSION (relevant for MySQL / MariaDB with obsolete driver) #​7591
• Fix SQL request for user labels with custom sort (affecting PostgreSQL) #​7588
• Fix regression for favicon in GReader and Fever APIs #​7573
• Fix newest articles (within last second) not shown #​7577
• Fix duplicate HTTP header for POST #​7556
• Fix important articles on reader view #​7602
• Fix remove last share method #​7613
• Fix API handling of default category #​7610
• Fix user self-deletion #​7626

[Package Updates]

[1.26.0]

• Update FreshRSS to 1.27.0
• Full Changelog
• Implement support for HTTP 429 Too Many Requests and 503 Service Unavailable, obey Retry-After #​7760
• Add sort by category title, or by feed title #​7702
• Add search operator c: for categories like c:23,34 or !c:45,56 #​7696
• Custom feed favicons #​7646, #​7704, #​7717, #​7792
• Rework fetch favicons for fewer HTTP requests #​7767
• Add more unicity criteria based on title and/or content #​7789
• Automatically restore user configuration from backup #​7682
• API add support for states in s parameter of streamId #​7695
• Improve sharing via Print #​7728
• Redirect to the login page from bookmarklet instead of 403 #​7782

[Package Updates]

[1.26.1]

• Update FreshRSS to 1.27.1
• Full Changelog
• Automatic database recovery: skip broken entries during CLI export/import #​7949
• Add security option for CSP frame-ancestors #​7857, #​8021
• Lazy-load <track src> #​7997
• Regenerate session ID on login #​7829
• Disallow setting non-existent language #​7878, #​7934
• Safer calling of install.php #​7971
• Prevent log CR/LF injection #​7883
• Restrict allowed cURL parameters #​7979, #​8009
• Fix reauthentication while updating #​7989
• Fix some CSRFs #​8000

[Package Updates]

[1.27.0]

• Update FreshRSS to 1.28.0
• Full Changelog
• Move unsafe autologin to an extension #7958
• Housekeeping of lib_rss.php with potential breaking changes for some extensions #8193
• New sorting and filtering by date of User modified #7886, #8090, #8105, #8118, #8130
• New sorting by article length #8119
• New advanced search form #8103, #8122, #8226
• Add compatibility with PCRE word boundary \b and \B for regex search using PostgreSQL #8141
• More uniform SQL search and PHP search for accents and case-sensitivity (e.g. for automatically marking as read) #8329
• New overview of dates with most unread articles #8089
• Exclude local networks for domain-wide HTTP Retry-After #8195
• Fix OpenID Connect with Debian 13 #8032

[Package Updates]

[1.27.1]

• Update FreshRSS to 1.28.1
• Full Changelog
• Handle Web scraping of text/plain as <pre class="text-plain"> #​8340
• New customisable message for closed registrations #​8462
• Fix unwanted expansion of user queries (saved searches) applied to filters #​8395
• Fix encoding of filter actions for labels #​8368
• Fix searching of tags #​8425
• Fix refreshing feeds with token while anonymous refresh is disabled #​8371
• Fix RSS and OPML access by token #​8434
• Fix MySQL/MariaDB transliterator_transliterate fallback (when the php-intl extension is unavailable) #​8427
• Fix regression with MySQL/MariaDB index hint #​8460
• Auto-add lastUserModified database column also during mark-as-read action #​8346