Hello, ports.

Here is a new version of miniflux that comes with various enhancements.
Building and running tested on today's amd64 snap. QP-encoded diff just
below the changelog. Someone please commit if OK.

Changelog:
- Disallow the media proxy from fetching resources on private networks to
  mitigate potential SSRF issues. This behavior is configurable at the
  instance level.
- Disallow fetching feed icons from private networks to reduce the SSRF
  attack surface. This is also configurable at the instance level.
- Add the 'TRUSTED_REVERSE_PROXY_NETWORKS' configuration option to
  prevent spoofing of HTTP headers such as 'X-Forwarded-For',
  'X-Forwarded-Proto', and 'X-Real-Ip'. This option must be configured
  when 'AUTH_PROXY_HEADER' is enabled.
- Stop logging generated Google Reader API tokens, even when debug mode
  is enabled.
- Remove the CORS handler from the Google Reader API, as it is not
  intended to be used by web clients, reducing the overall attack
  surface.
- Avoid indexing the content of removed entries, significantly reducing
  database index size after cleanup.
- Minor storage and database refactoring to simplify code paths and
  reduce unnecessary formatting overhead.
- Add a new API endpoint to import entries into an existing feed.
- Execute the content sanitizer when updating or importing entries
  through the API to ensure consistent sanitization.
- Improve Google Reader API compatibility by removing unnecessary output
  parameter checks and aligning behavior with other open-source RSS
  readers.
- Add an auto-push option to the Readeck integration.
- Add smooth page transitions for a more polished navigation experience.
- Add a route to view individual starred entries directly from a
  category’s starred list.
- Add a link to the GitHub contributors page in templates.
- Update all translations.
- Improve consistency and fix typos in the 'miniflux(1)' manual page.

Detailed changelog is available at
https://github.com/miniflux/v2/releases/tag/2.2.16

Index: Makefile
===================================================================
RCS file: /cvs/ports/net/miniflux/Makefile,v
retrieving revision 1.28
diff -u -p -u -p -r1.28 Makefile
--- Makefile	30 Dec 2025 23:27:26 -0000	1.28
+++ Makefile	21 Jan 2026 11:24:30 -0000
@@ -1,6 +1,6 @@
 COMMENT =	atom/rss feed reader web application
 
-V =		2.2.15
+V =		2.2.16
 
 MODGO_MODNAME =	miniflux.app/v2
 MODGO_VERSION =	v${V}
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/miniflux/distinfo,v
retrieving revision 1.24
diff -u -p -u -p -r1.24 distinfo
--- distinfo	30 Dec 2025 23:27:26 -0000	1.24
+++ distinfo	21 Jan 2026 11:24:30 -0000
@@ -221,7 +221,7 @@ SHA256 (go_modules/gopkg.in/check.v1/@v/
 SHA256 (go_modules/gopkg.in/check.v1/@v/v1.0.0-20201130134442-10cb98267c6c.zip) = 9VVoTlxdrMKFDd2zRf7xuPk/VGtyaFWJeJ2m0rBicQ4=
 SHA256 (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.mod) = IVeYYKIDBvz0OxvSNNH7oxlJnHdhG3HAX5vzupDauTk=
 SHA256 (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.zip) = qrj7xOYwDqCOav4crqGKIckMefSJ9SxT4vIEMfGpoBU=
-SHA256 (miniflux.app/v2-v2.2.15.zip) = O2FTdWbdKWei7ZeX0826fmPSKfPUYOEujX1YwESOSPA=
+SHA256 (miniflux.app/v2-v2.2.16.zip) = xo8PpkLo8rsn3t4YJZqZAwh6ybP/IhFu2C2xjQXJXRQ=
 SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.3.0.mod) = 53
 SIZE (go_modules/cloud.google.com/go/compute/metadata/@v/v0.3.0.zip) = 19692
 SIZE (go_modules/github.com/!puerkito!bio/goquery/@v/v1.11.0.mod) = 148
@@ -445,4 +445,4 @@ SIZE (go_modules/gopkg.in/check.v1/@v/v1
 SIZE (go_modules/gopkg.in/check.v1/@v/v1.0.0-20201130134442-10cb98267c6c.zip) = 42835
 SIZE (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.mod) = 95
 SIZE (go_modules/gopkg.in/yaml.v3/@v/v3.0.1.zip) = 104623
-SIZE (miniflux.app/v2-v2.2.15.zip) = 1169088
+SIZE (miniflux.app/v2-v2.2.16.zip) = 1177687