mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-07-29 08:17:07 -04:00

Files

Gerard Alvear Porras c15171efb5 Fix actualize mutex collision across instances (#9045 )

## What changed

- derive the actualization mutex name from a SHA-256 hash of the canonical `DATA_PATH`
- keep `TMP_PATH` as the configurable location for the mutex file
- add coverage for deterministic per-instance names and independent locks

## Why

Multiple FreshRSS instances that use the default shared system temporary directory currently use the same actualization lock. The data path identifies the instance without exposing or depending on its configured salt.

## Validation

- `vendor/bin/phpunit --bootstrap ./tests/bootstrap.php ./tests/lib/ActualizeMutexTest.php --no-progress`
- `vendor/bin/phpcs app/actualize_script.php lib/lib_rss.php tests/lib/ActualizeMutexTest.php -s`
- `vendor/bin/phpstan analyse --memory-limit 512M --no-progress app/actualize_script.php lib/lib_rss.php tests/lib/ActualizeMutexTest.php`

Fixes #6370

Co-authored-by: Gerard Alvear <gerard.alvear@logiqd.me>

2026-07-18 22:32:38 +02:00

core-extensions

Redirect after saving user CSS/JS so changes apply immediately (#9006 )

2026-07-09 16:37:49 +02:00

marienfressinaud/lib_opml

Fix LibOPML warnings (#8652 )

2026-05-15 12:12:28 +02:00

Minz

Mailer: allow disabling SMTPAutoTLS via config (#9026 )

2026-07-12 23:55:32 +02:00

phpgt/cssxpath

CSSXPath 1.5.0 (#8642 )

2026-03-29 11:39:52 +02:00

phpmailer/phpmailer

chore(deps): update phpmailer/phpmailer requirement from 7.0.2 to 7.1.1 in /lib (#8907 )

2026-06-03 13:06:28 +02:00

simplepie/simplepie

Add SSRF mitigations using filter_var and CURLOPT_RESOLVE (#8400 )

2026-06-28 18:51:04 +02:00

.gitignore

Fix LibOPML warnings (#8652 )

2026-05-15 12:12:28 +02:00

.htaccess

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

composer.json

Add SSRF mitigations using filter_var and CURLOPT_RESOLVE (#8400 )

2026-06-28 18:51:04 +02:00

favicons.php

Add checkUrl() to favicon functions (#8714 )

2026-04-23 15:01:07 +02:00

http-conditional.php

Fix minor backslashes (#8292 )

2025-12-07 20:27:06 +01:00

index.html

Apache protect more non-public folders and files (#6881 )

2024-10-11 09:25:43 +02:00

lib_date.php

Filter on last user modified (#8093 )

2025-10-15 00:12:19 +02:00

lib_install.php

Check GMP during 32-bit installation (#9046 )

2026-07-18 21:54:36 +02:00

lib_rss.php

Fix actualize mutex collision across instances (#9045 )

2026-07-18 22:32:38 +02:00

README.md

Allow SimplePie updates with composer (#4374 )

2024-09-14 23:11:10 +02:00

README.md

Libraries

SimplePie

FreshRSS uses a forked version of SimplePie, with a number of patches.

See the read-me of our fork.

Updating libraries

Some of the libraries in this folder can be updated semi-automatically by invoking:

cd ./FreshRSS/lib/
composer update --no-autoloader

Remember to read the change-logs, proof-read the changes, preserve possible local patches, add irrelevant files to .gitignore (minimal installation), and test before committing.