fix(miniflux): update image ghcr.io/miniflux/miniflux 2.2.16 → 2.2.17 (#44883)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/miniflux/miniflux](https://miniflux.app)
([source](https://redirect.github.com/miniflux/v2)) | patch | `1f37163`
→ `802ab7d` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>miniflux/v2 (ghcr.io/miniflux/miniflux)</summary>

###
[`v2.2.17`](https://redirect.github.com/miniflux/v2/releases/tag/2.2.17):
Miniflux 2.2.17

[Compare
Source](https://redirect.github.com/miniflux/v2/compare/2.2.16...2.2.17)

##### Security

- Do not expose the Miniflux version on unauthenticated endpoints
(deprecated since version 2.0.49).
- Improve HTML sanitizer by switching from the tokenizer to the
`golang.org/x/net/html` parser to better match browser behavior and
reduce the risk of injection issues.
- Enforce blocked resource checks on `srcset` URLs.
- Improve blocked resource handling (including updates to blocked URL
substrings).
- Add validation for `TRUSTED_REVERSE_PROXY_NETWORKS` configuration to
prevent silent misconfiguration.
- Prevent possible deadlock when cleaning removed entries.
- Ensure HTTP response bodies are always closed, even on client errors.

##### Improvements

- Rewrite `srcset` parser to follow HTML specifications (WebKit-style
parsing) and handle edge cases more correctly.
- Improve sanitizer performance (various optimizations, including
reduced allocations and better attribute handling).
- Handle deeply nested HTML more robustly in the sanitizer.
- Add scraper and rewrite rules for:

  - `bleepingcomputer.com`
  - `vnexpress.net`
- Improve JSON Feed support:

- Support malformed feeds with `author` objects in the `authors` array.
  - Avoid panic when parsing `null` feeds.
  - Improve title fallback logic.
  - Include `external_url` in JSON entry hash fallback.
- Ignore WordPress `wp-json` API endpoint during JSON feed discovery.
- Add unread status filter to search results.
- Improve timezone handling internals and performance.
- Improve API payload structures and Godoc comments.
- Improve JavaScript code readability and keyboard shortcut handling.
- Restore cmd/ctrl/shift-click behavior on main navigation.
- Fix Safari PWA behavior for the `v` shortcut to open links in the main
browser.

##### Bug Fixes

- Do not keep old enclosures when an updated entry has none.
- Handle `sql.ErrNoRows` properly in `IconByFeedID`.
- Change `FindRemoteIP` to fall back to `127.0.0.1`.

##### Configuration Changes

- Removed `FILTER_ENTRY_MAX_AGE_DAYS`.
This option can be replaced with a filter rule such as
`max-age:<duration>`.
Global environment variables should be reserved for process-level
configuration.

##### Dependencies

- Update `github.com/lib/pq` to 1.11.2.
- Update:

  - `golang.org/x/net` to 0.50.0
  - `golang.org/x/crypto` to 0.48.0
  - `golang.org/x/image` to 0.36.0
  - `golang.org/x/oauth2` to 0.35.0
  - `golang.org/x/term` to 0.40.0
- Update Debian packager Docker image to Trixie.

***

As always, thank you to all contributors who helped improve Miniflux in
this release.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiYXBwL21pbmlmbHV4IiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==-->

charts/stable/miniflux/Chart.yaml

@@ -14,7 +14,7 @@ annotations:
   trueforge.org/min_helm_version: "3.14"
   trueforge.org/train: stable
 apiVersion: v2
-appVersion: 2.2.16
+appVersion: 2.2.17
 dependencies:
   - name: common
     version: 28.29.49
@@ -42,5 +42,5 @@ sources:
   - https://github.com/miniflux/v2
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/miniflux
 type: application
-version: 17.13.18
+version: 17.13.19
 

charts/stable/miniflux/values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: ghcr.io/miniflux/miniflux
-  tag: 2.2.16@sha256:1f37163a178189eba09bf0a1c96d7335aa1fa474d4f958f51e0c5ad9f8136979
+  tag: 2.2.17@sha256:802ab7d045826d047883476e2310bf59f5d9b3875f7a8106fa0c43638d01fd64
 persistence:
   config:
     enabled: true