summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
23 hours[fix] braveapi: set JSON Accept header (#6666)masterTed Lanham
3 days[upd] web-client (simple): Bump the minor group in /client/simple with 3 ↵dependabot[bot]
updates (#6645) * [upd] web-client (simple): Bump the minor group Bumps the minor group in /client/simple with 3 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [sharp](https://github.com/lovell/sharp). Updates `@biomejs/biome` from 2.5.10 to 2.5.11 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.11/packages/@biomejs/biome) Updates `@types/node` from 26.3.0 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `sharp` from 0.35.3 to 0.35.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](https://github.com/lovell/sharp/compare/v0.35.3...v0.35.4) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor - dependency-name: sharp dependency-version: 0.35.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> * update lock --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ivan Gabaldon <igabaldon@inetol.net>
3 days[upd] pypi: Bump the minor group with 3 updates (#6647)dependabot[bot]
Bumps the minor group with 3 updates: [typer](https://github.com/fastapi/typer), [pylint](https://github.com/pylint-dev/pylint) and [selenium](https://github.com/SeleniumHQ/Selenium). Updates `typer` from 0.27.1 to 0.27.2 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](https://github.com/fastapi/typer/compare/0.27.1...0.27.2) Updates `pylint` from 4.0.7 to 4.0.8 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](https://github.com/pylint-dev/pylint/compare/v4.0.7...v4.0.8) Updates `selenium` from 4.47.0 to 4.48.0 - [Release notes](https://github.com/SeleniumHQ/Selenium/releases) - [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.47.0...selenium-4.48.0) --- updated-dependencies: - dependency-name: typer dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: pylint dependency-version: 4.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor - dependency-name: selenium dependency-version: 4.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 days[del] cara engine: remove because it requires signup for searchingBnyro
3 days[mod] engines: remove uses of `enable_http2 = False`Bnyro
This has only been needed because we were flagged by HTTP2 fingerprinting. Now, since we use curl cffi, we can bypass the fingerpinting, so we can use HTTP2 just fine without getting blocked.
3 days[fix] resulthunter: detect blocked requests instead of returning 0 resultsBnyro
3 days[fix] chatnoir: returns empty responsesBnyro
3 days[fix] engines: update brave images/videos parser and news xpathvojkovic
3 days[fix] engines: resulthunter search_source argvojkovic
3 days[fix] engines: tusksearch referer headervojkovic
3 days[fix] engines: dogpile request api tokenvojkovic
3 days[feat] engines: add searchrockit.com (general, news, images)Bnyro
3 days[fix] neosearch: requests blocked due to missing xsrf tokenBnyro
3 days[fix] searchzee: bypass botblockingBnyro
requires https://github.com/searxng/searxng/pull/6620
3 days[mod] ci: disable armv7 container test (#6661)Ivan Gabaldon
3 days[mod] ci: increase container test delayIvan Gabaldon
Testing under armv7 is having trouble running before the delay ends. Increasing to 20 seconds should help.
4 days[upd] github-actions: Bump docker/setup-qemu-action from 4.2.0 to 4.3.0 (#6644)dependabot[bot]
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.2.0 to 4.3.0. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/96fe6ef7f33517b61c61be40b68a1882f3264fb8...1f40c72289eff860ee54a304f1438e3cff362e0a) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 days[docs] fix some minor reST markup issues in the doc-string (#6646)Markus Heiser
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
4 days[fix] marginalia: crashes with missing filter nameBnyro
4 days[mod] network: migrate to curl_cffivojkovic
4 days[feat] engines: add JS-based s1search engineBnyro
5 days[mod] engines: migrate video engines away from get_embedded_stream_urlBnyro
5 days[feat] results: automatically set embedded stream url for video resultsBnyro
Currently, many engines that provide video results call the same `get_embedded_stream_url` method for setting the `iframe_src`. There is no value in that because this logic is engine-specific and probably many video engines forgot to implement this. With these changes, it's done automatically, so engine implementors don't have to worry about setting an `iframe_src` (unless the engine explicitly has a field for it).
5 days[fix] chatnoir: fails to extract API session parametersBnyro
5 days[fix] engine: braveapi - braveapi pagination sends an invalid offset (#6627)Markus Heiser
Closes: https://github.com/searxng/searxng/issues/6545
6 days[mod] s1search: update mirrors to the ones that are not cloudflaredBnyro
6 days[mod] engines: migrate to setup() from init() for simple tasksOm Alve
6 days[fix] engine: meilisearch - AttributeError: no attribute 'about' (#6626)Markus Heiser
- Closes: https://github.com/searxng/searxng/issues/6622 Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
6 days[del] heexy: remove engine due to cloudflare captcha (#6625)Bnyro
6 days[fix] hardening engine: ddg weather - get GEO location from response (#6623)Markus Heiser
The previous implementation ran into an error if the search term contained words other than just the location (ValueError was raised). To test engine use search terms like: !ddw weather berlin germany Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
7 days[mod] py: clearurls update location (#6618)Ivan Gabaldon
We should opt to retrieve the lists through jsDelivr service as our first choice and avoid hitting the GH (GitHub) and GL (GitLab) servers.
7 days[upd] web-client (simple): Bump the minor group (#6588)dependabot[bot]
Bumps the minor group in /client/simple with 4 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [svgo](https://github.com/svg/svgo) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `@biomejs/biome` from 2.5.9 to 2.5.10 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.10/packages/@biomejs/biome) Updates `@types/node` from 26.2.0 to 26.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `svgo` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/svg/svgo/releases) - [Commits](https://github.com/svg/svgo/compare/v4.0.2...v4.1.0) Updates `vite` from 8.2.1 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor - dependency-name: "@types/node" dependency-version: 26.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor - dependency-name: svgo dependency-version: 4.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
7 days[mod] data: update searx.data - update_external_bangs.py (#6593)github-actions[bot]
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com>
7 days[update] data: update wikidata dataBnyro
7 days[refactor] wikidata: cache wikidata properties in searxng dataBnyro
10 days[mod] data: update searx.data - update_engine_traits.py (#6594)github-actions[bot]
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com>
10 days[mod] data: update searx.data - update_firefox_version.py (#6592)github-actions[bot]
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com>
10 days[mod] data: update searx.data - update_ahmia_blacklist.py (#6591)github-actions[bot]
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com>
11 days[upd] pypi: Bump the minor group with 2 updates (#6589)dependabot[bot]
Bumps the minor group with 2 updates: [granian](https://github.com/emmett-framework/granian) and [lxml](https://github.com/lxml/lxml). Updates `granian` from 2.8.1 to 2.8.2 - [Release notes](https://github.com/emmett-framework/granian/releases) - [Commits](https://github.com/emmett-framework/granian/compare/v2.8.1...v2.8.2) Updates `lxml` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.1...lxml-6.1.2) --- updated-dependencies: - dependency-name: granian dependency-version: 2.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: lxml dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-22[l10n] update translations from Weblate (#6565)github-actions[bot]
930f4d95f - 2026-08-21 - return42 <return42@noreply.codeberg.org> 45e05f3a5 - 2026-08-21 - return42 <return42@noreply.codeberg.org> f97f47265 - 2026-08-21 - return42 <return42@noreply.codeberg.org> c5de4638c - 2026-08-21 - return42 <return42@noreply.codeberg.org> 02aac306b - 2026-08-21 - return42 <return42@noreply.codeberg.org> f88e28cd0 - 2026-08-14 - Mooo <mooo@noreply.codeberg.org>
2026-08-22[mod] data: update searx.data - update_engine_traits.py (#6546)Markus Heiser
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2026-08-22[fix] google: use Nokia UA (#6546)vojkovic
2026-08-21[upd] web-client (simple): Bump the minor group (#6558)dependabot[bot]
Bumps the minor group in /client/simple with 2 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) and [less](https://github.com/less/less.js). Updates `@biomejs/biome` from 2.5.7 to 2.5.9 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome) Updates `less` from 4.8.1 to 4.9.0 - [Release notes](https://github.com/less/less.js/releases) - [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md) - [Commits](https://github.com/less/less.js/compare/v4.8.1...v4.9.0) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor - dependency-name: less dependency-version: 4.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-21[upd] pypi: Bump the minor group with 2 updates (#6559)dependabot[bot]
Bumps the minor group with 2 updates: [basedpyright](https://github.com/detachhead/basedpyright) and [pygments](https://github.com/pygments/pygments). Updates `basedpyright` from 1.39.9 to 1.39.10 - [Release notes](https://github.com/detachhead/basedpyright/releases) - [Commits](https://github.com/detachhead/basedpyright/compare/v1.39.9...v1.39.10) Updates `pygments` from 2.20.0 to 2.21.0 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](https://github.com/pygments/pygments/compare/2.20.0...2.21.0) --- updated-dependencies: - dependency-name: basedpyright dependency-version: 1.39.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor - dependency-name: pygments dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-21[fix] preferences: cap zlib decompressvojkovic
2026-08-20[fix] py: (un)trusted proxies (#6556)Ivan Gabaldon
A missing condition allowed an attacker to mask their IP address from the server. This exploit can only be carried under specific client & server environments. Reported-by: Raffaele Forte <raffaele@backbox.org> Signed-off-by: Ivan Gabaldon <igabaldon@inetol.net>
2026-08-20[feat] marginalia: add support for custom filters (#6543)SVHawk13
2026-08-19[fix] calculator: XSS from innerHTML (#6551)Brock Vojkovic
* [fix] calculator: XSS from innerHTML * [build] /static
2026-08-17[fix] engines: deviantart access deniedvojkovic
2026-08-16[upd] pypi: Bump the minor group across 1 directory with 6 updates (#6540)dependabot[bot]
* [upd] pypi: Bump the minor group across 1 directory with 6 updates Bumps the minor group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [granian](https://github.com/emmett-framework/granian) | `2.7.9` | `2.8.1` | | [pylint](https://github.com/pylint-dev/pylint) | `4.0.6` | `4.0.7` | | [selenium](https://github.com/SeleniumHQ/Selenium) | `4.46.0` | `4.47.0` | | [wlc](https://github.com/WeblateOrg/wlc) | `2.1.0` | `2.1.1` | | [httpx-socks](https://github.com/romis2012/httpx-socks) | `0.10.0` | `0.13.0` | | [typer](https://github.com/fastapi/typer) | `0.27.0` | `0.27.1` | Updates `granian` from 2.7.9 to 2.8.1 - [Release notes](https://github.com/emmett-framework/granian/releases) - [Commits](https://github.com/emmett-framework/granian/compare/v2.7.9...v2.8.1) Updates `pylint` from 4.0.6 to 4.0.7 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](https://github.com/pylint-dev/pylint/compare/v4.0.6...v4.0.7) Updates `selenium` from 4.46.0 to 4.47.0 - [Release notes](https://github.com/SeleniumHQ/Selenium/releases) - [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.46.0...selenium-4.47.0) Updates `wlc` from 2.1.0 to 2.1.1 - [Release notes](https://github.com/WeblateOrg/wlc/releases) - [Changelog](https://github.com/WeblateOrg/wlc/blob/main/CHANGES.rst) - [Commits](https://github.com/WeblateOrg/wlc/compare/2.1.0...2.1.1) Updates `httpx-socks` from 0.10.0 to 0.13.0 - [Release notes](https://github.com/romis2012/httpx-socks/releases) - [Commits](https://github.com/romis2012/httpx-socks/compare/v0.10.0...v0.13.0) Updates `typer` from 0.27.0 to 0.27.1 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](https://github.com/fastapi/typer/compare/0.27.0...0.27.1) --- updated-dependencies: - dependency-name: granian dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: httpx-socks dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: pylint dependency-version: 4.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor - dependency-name: selenium dependency-version: 4.47.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor - dependency-name: typer dependency-version: 0.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: wlc dependency-version: 2.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com> * [fix] network: bump httpx-socks to 0.13.1 for python-socks 3 httpx-socks 0.10.0 calls the default AnyIO Proxy with proxy_ssl. python-socks 3.0.0 dropped that kwarg, so Tor/SOCKS startup checks crash. 0.13.1 uses the v2 API (proxy_ssl still accepted) and allows python-socks<4. Drop the unused loop= argument; 0.13.1 forwards extra kwargs to httpcore.AsyncConnectionPool, which rejects loop. Closes: searxng/searxng#6514 Signed-off-by: Richard Freeman <rich@rich0.org> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Richard Freeman <rich@rich0.org> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Richard Freeman <rich@rich0.org>
generated by cgit v1.2.3 (git 2.46.0) at 2026-09-08 10:00:55 +0000