CommaFeed v7.1.0 Release Notes

Release Date: 2026-04-15 // about 2 months ago
    • 0️⃣ Display the unread count in the header on mobile, since the tree is hidden by default and the unread count is not visible otherwise (#2055)
    • The feed refresh engine is now a little bit more performant (#2089)
    • 0️⃣ On shutdown, give the feed refresh engine some time to finish refreshing feeds before killing it. This is controlled by the new commafeed.shutdown-timeout setting, which defaults to 2 seconds

Previous changes from v7.0.0

    • 🏗 Replaced the JEXL filter expression for marking feed entries as read automatically with a user-friendly visual query builder. Expressions are now evaluated with Common Expression Language, which is safer than JEXL and sanboxed by default.
    • ➕ Added a per-feed setting for sending push notifications to ntfy, Gotify or Pushover when new feed entries are discovered (#1610)
    • ➕ Added a per-feed setting for marking entries as read after a number of days (#2041)
    • 🔒 The default value of commafeed.http-client.block-local-addresses is now false, allowing users to subscribe to feeds only available on their local network. This may be a security risk (SSRF) if your instance is accessible by untrusted users, so you may want to set it to true if you host a public instance of CommaFeed with user registeration enabled.
    • When commafeed.http-client.block-local-addresses is enabled, SSRF is now also mitigated by blocking public websites redirecting to local ones.