• Milestone

This is a second security and bug-fixing release in the continuation of 1.30.x.

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

• Fix PHP 8.5+ deprecation warning with SQLite
• Block data: URI scheme in some cases

Performance highlights 🏎️:

• Reduce memory consumption of export

This release has been made by @Alkarex, @Inverle and newcomers @abp002, @Arslan-TR, @Emredinho61, @HawkForge, @lordmarrik, @spa77k, @tomac4t, @tpq2030

Full changelog:

• Security
  • SimplePie sanitizer: block data: URI scheme while keeping data:image for images #9417
  • Mitigate some 404 situations #9435
  • Do not log the Fever API key on authentication failure #9468
  • Fix local DNS leak when fetching feeds through a proxy #9451
• Bug fixes
  • WebSub fix POST, fix warning, better message #9420
  • Fix PHP 8.5+ deprecation of sqliteCreateFunction for SQLite #9421
  • Preserve explicit sort overrides when searching #9467
  • Fix wrong order of args in extension compatibility check #9445
• Performance
  • Reduce memory consumption of export #9350
• Features
  • Better doc and log proxy cases #9436
• Extensions
  • Update registerHook docs with newer PHP 8.1+ syntax for callables #9443, Extensions#548
• UI
  • Disallow user page navigation while refreshing feeds #9446
  • Various UI and style improvements #9426, #9441
• I18n
  • Improve German #9439
  • Improve Polish #9458
  • Improve Turkish #9440
• Misc.
  • Update to GT\CssXPath 1.6.0 #9411
  • CI/CD: Fix login to Docker Hub #9433
  • Fix SVGO zero percent filtering in CI #9422
  • Update dev dependencies #9425