Brock Vojkovic
ffe96f8a6f
[fix] engines: bing first word results ( #6671 )
...
Fixes the bing web engine, it was just using the first word of the query for the search and return random junk other times. see: vojkovic#10
Swapped to use bing's setlang and cc params. I found us, cn, ru return complete garbage 100% of the time. I reckon that if you don't have an ip address from there it will just return garbage, so those three are skipped. Also removed accept language override because it didn't change anything anymore.
- Closes: https://github.com/searxng/searxng/issues/4964
- Related: https://github.com/vojkovic/searxng/issues/10
2026-09-11 08:41:13 +02:00
Markus Heiser
931fd9787b
[fix] engine: core.ac.uk - don't split a string into a tag list ( #6689 )
2026-09-10 14:45:43 +02:00
vojkovic
42e1d61296
[fix] engines: startpage anubis solver
2026-09-10 19:12:21 +08:00
vojkovic
765a9999df
[fix] engines: duckduckgo web bypass botdetection
2026-09-10 18:56:12 +08:00
rdurnik
ba055b3e09
[feat] engines: add europepmc (science, scientific publications)
2026-09-10 11:27:28 +02:00
Markus Heiser
3fdc6d753a
[del] remove searx_engine - no use case ( #6680 )
...
There is no meaningful use-case for the engine, moreover the implementation
is 10 years old (formerly searx) and no longer fits the current data model of
SearXNG.
Closes: - https://github.com/searxng/searxng/issues/6676
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de >
2026-09-08 09:29:41 +02:00
Ted Lanham
3e454637fb
[fix] braveapi: set JSON Accept header ( #6666 )
2026-09-07 13:18:07 +02:00
dependabot[bot]
c7f3080aac
[upd] web-client (simple): Bump the minor group in /client/simple with 3 updates ( #6645 )
...
* [upd] web-client (simple): Bump the minor group
Bumps the minor group in /client/simple with 3 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) and [sharp](https://github.com/lovell/sharp ).
Updates `@biomejs/biome` from 2.5.10 to 2.5.11
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.11/packages/@biomejs/biome )
Updates `@types/node` from 26.3.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `sharp` from 0.35.3 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases )
- [Commits](https://github.com/lovell/sharp/compare/v0.35.3...v0.35.4 )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.5.11
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: "@types/node"
dependency-version: 26.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: sharp
dependency-version: 0.35.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* update lock
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gabaldon <igabaldon@inetol.net >
2026-09-05 22:57:09 +02:00
Bnyro
c06e9f0889
[del] cara engine: remove because it requires signup for searching
2026-09-05 22:44:32 +02:00
Bnyro
4781754dc4
[mod] engines: remove uses of enable_http2 = False
...
This has only been needed because we were flagged by HTTP2 fingerprinting.
Now, since we use curl cffi, we can bypass the fingerpinting, so we can
use HTTP2 just fine without getting blocked.
2026-09-05 19:51:58 +02:00
Bnyro
28b61729c7
[fix] resulthunter: detect blocked requests instead of returning 0 results
2026-09-05 19:47:23 +02:00
Bnyro
14a9f84c6c
[fix] chatnoir: returns empty responses
2026-09-05 19:46:48 +02:00
vojkovic
8b01679e8f
[fix] engines: update brave images/videos parser and news xpath
2026-09-06 01:45:40 +08:00
vojkovic
eaf1fcb349
[fix] engines: resulthunter search_source arg
2026-09-06 01:43:11 +08:00
vojkovic
e20e370353
[fix] engines: tusksearch referer header
2026-09-06 01:38:09 +08:00
vojkovic
3605a2d58b
[fix] engines: dogpile request api token
2026-09-06 01:22:09 +08:00
Bnyro
aef258321c
[feat] engines: add searchrockit.com (general, news, images)
2026-09-05 19:16:29 +02:00
Bnyro
a303e9c0ca
[fix] neosearch: requests blocked due to missing xsrf token
2026-09-05 19:14:16 +02:00
Bnyro
ccffbfc164
[fix] searchzee: bypass botblocking
...
requires https://github.com/searxng/searxng/pull/6620
2026-09-05 19:11:49 +02:00
Markus Heiser
15a91992e4
[docs] fix some minor reST markup issues in the doc-string ( #6646 )
...
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de >
2026-09-04 11:18:59 +02:00
Bnyro
03c439a5b9
[fix] marginalia: crashes with missing filter name
2026-09-04 10:33:42 +02:00
vojkovic
be836e614a
[mod] network: migrate to curl_cffi
2026-09-04 16:16:09 +08:00
Bnyro
15b0c8ef3a
[feat] engines: add JS-based s1search engine
2026-09-04 09:49:07 +02:00
Bnyro
a1144dda3e
[mod] engines: migrate video engines away from get_embedded_stream_url
2026-09-03 17:28:29 +02:00
Bnyro
86008c9dd6
[feat] results: automatically set embedded stream url for video results
...
Currently, many engines that provide video results call the same
`get_embedded_stream_url` method for setting the `iframe_src`. There
is no value in that because this logic is engine-specific and probably
many video engines forgot to implement this.
With these changes, it's done automatically, so engine implementors
don't have to worry about setting an `iframe_src` (unless the engine
explicitly has a field for it).
2026-09-03 17:28:29 +02:00
Bnyro
8f452ee892
[fix] chatnoir: fails to extract API session parameters
2026-09-03 10:03:05 +02:00
Markus Heiser
745d5b6fc5
[fix] engine: braveapi - braveapi pagination sends an invalid offset ( #6627 )
...
Closes: https://github.com/searxng/searxng/issues/6545
2026-09-03 07:52:31 +02:00
Bnyro
05cd77f71b
[mod] s1search: update mirrors to the ones that are not cloudflared
2026-09-02 16:59:05 +02:00
Om Alve
b4f616fed7
[mod] engines: migrate to setup() from init() for simple tasks
2026-09-02 16:30:00 +02:00
Markus Heiser
fd29de6c55
[fix] engine: meilisearch - AttributeError: no attribute 'about' ( #6626 )
...
- Closes: https://github.com/searxng/searxng/issues/6622
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de >
2026-09-02 14:26:22 +02:00
Bnyro
eca1af4be1
[del] heexy: remove engine due to cloudflare captcha ( #6625 )
2026-09-02 13:43:03 +02:00
Markus Heiser
7a01f5830c
[fix] hardening engine: ddg weather - get GEO location from response ( #6623 )
...
The previous implementation ran into an error if the search term contained words
other than just the location (ValueError was raised).
To test engine use search terms like:
!ddw weather berlin germany
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de >
2026-09-02 13:40:53 +02:00
Ivan Gabaldon
18af21159b
[mod] py: clearurls update location ( #6618 )
...
We should opt to retrieve the lists through jsDelivr service as our first choice
and avoid hitting the GH (GitHub) and GL (GitLab) servers.
2026-09-01 21:43:50 +02:00
github-actions[bot]
ff424745fd
[mod] data: update searx.data - update_external_bangs.py ( #6593 )
...
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com >
2026-09-01 21:38:36 +02:00
Bnyro
79c8ffe0da
[update] data: update wikidata data
2026-09-01 13:56:11 +02:00
Bnyro
2b1c88c54c
[refactor] wikidata: cache wikidata properties in searxng data
2026-09-01 13:56:11 +02:00
github-actions[bot]
d226b78bc4
[mod] data: update searx.data - update_engine_traits.py ( #6594 )
...
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com >
2026-08-29 10:14:39 +02:00
github-actions[bot]
bdbf9774f5
[mod] data: update searx.data - update_firefox_version.py ( #6592 )
...
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com >
2026-08-29 10:14:25 +02:00
github-actions[bot]
451c46aa32
[mod] data: update searx.data - update_ahmia_blacklist.py ( #6591 )
...
Co-authored-by: searxng-bot <searxng-bot@users.noreply.github.com >
2026-08-29 10:13:59 +02:00
github-actions[bot]
9fea41204f
[l10n] update translations from Weblate ( #6565 )
...
930f4d95f - 2026-08-21 - return42 <return42@noreply.codeberg.org >
45e05f3a5 - 2026-08-21 - return42 <return42@noreply.codeberg.org >
f97f47265 - 2026-08-21 - return42 <return42@noreply.codeberg.org >
c5de4638c - 2026-08-21 - return42 <return42@noreply.codeberg.org >
02aac306b - 2026-08-21 - return42 <return42@noreply.codeberg.org >
f88e28cd0 - 2026-08-14 - Mooo <mooo@noreply.codeberg.org >
2026-08-22 07:32:09 +02:00
Markus Heiser
777ba8fa48
[mod] data: update searx.data - update_engine_traits.py ( #6546 )
...
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de >
2026-08-22 11:00:06 +08:00
vojkovic
a4cb7df053
[fix] google: use Nokia UA ( #6546 )
2026-08-22 11:00:06 +08:00
dependabot[bot]
f31ff05db3
[upd] pypi: Bump the minor group with 2 updates ( #6559 )
...
Bumps the minor group with 2 updates: [basedpyright](https://github.com/detachhead/basedpyright ) and [pygments](https://github.com/pygments/pygments ).
Updates `basedpyright` from 1.39.9 to 1.39.10
- [Release notes](https://github.com/detachhead/basedpyright/releases )
- [Commits](https://github.com/detachhead/basedpyright/compare/v1.39.9...v1.39.10 )
Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases )
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES )
- [Commits](https://github.com/pygments/pygments/compare/2.20.0...2.21.0 )
---
updated-dependencies:
- dependency-name: basedpyright
dependency-version: 1.39.10
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: pygments
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-21 22:32:36 +02:00
vojkovic
5f4005996e
[fix] preferences: cap zlib decompress
2026-08-21 20:55:33 +08:00
Ivan Gabaldon
487d7a96e0
[fix] py: (un)trusted proxies ( #6556 )
...
A missing condition allowed an attacker to mask their IP address from the
server. This exploit can only be carried under specific client & server
environments.
Reported-by: Raffaele Forte <raffaele@backbox.org >
Signed-off-by: Ivan Gabaldon <igabaldon@inetol.net >
2026-08-20 18:06:24 +02:00
SVHawk13
8d3dd0cd45
[feat] marginalia: add support for custom filters ( #6543 )
2026-08-20 14:22:22 +02:00
Brock Vojkovic
5ffd32ca2f
[fix] calculator: XSS from innerHTML ( #6551 )
...
* [fix] calculator: XSS from innerHTML
* [build] /static
2026-08-19 14:09:02 +02:00
vojkovic
374939b888
[fix] engines: deviantart access denied
2026-08-17 20:06:57 +08:00
dependabot[bot]
b2da6b90f2
[upd] pypi: Bump the minor group across 1 directory with 6 updates ( #6540 )
...
* [upd] pypi: Bump the minor group across 1 directory with 6 updates
Bumps the minor group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [granian](https://github.com/emmett-framework/granian ) | `2.7.9` | `2.8.1` |
| [pylint](https://github.com/pylint-dev/pylint ) | `4.0.6` | `4.0.7` |
| [selenium](https://github.com/SeleniumHQ/Selenium ) | `4.46.0` | `4.47.0` |
| [wlc](https://github.com/WeblateOrg/wlc ) | `2.1.0` | `2.1.1` |
| [httpx-socks](https://github.com/romis2012/httpx-socks ) | `0.10.0` | `0.13.0` |
| [typer](https://github.com/fastapi/typer ) | `0.27.0` | `0.27.1` |
Updates `granian` from 2.7.9 to 2.8.1
- [Release notes](https://github.com/emmett-framework/granian/releases )
- [Commits](https://github.com/emmett-framework/granian/compare/v2.7.9...v2.8.1 )
Updates `pylint` from 4.0.6 to 4.0.7
- [Release notes](https://github.com/pylint-dev/pylint/releases )
- [Commits](https://github.com/pylint-dev/pylint/compare/v4.0.6...v4.0.7 )
Updates `selenium` from 4.46.0 to 4.47.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases )
- [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.46.0...selenium-4.47.0 )
Updates `wlc` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/WeblateOrg/wlc/releases )
- [Changelog](https://github.com/WeblateOrg/wlc/blob/main/CHANGES.rst )
- [Commits](https://github.com/WeblateOrg/wlc/compare/2.1.0...2.1.1 )
Updates `httpx-socks` from 0.10.0 to 0.13.0
- [Release notes](https://github.com/romis2012/httpx-socks/releases )
- [Commits](https://github.com/romis2012/httpx-socks/compare/v0.10.0...v0.13.0 )
Updates `typer` from 0.27.0 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases )
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md )
- [Commits](https://github.com/fastapi/typer/compare/0.27.0...0.27.1 )
---
updated-dependencies:
- dependency-name: granian
dependency-version: 2.8.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: httpx-socks
dependency-version: 0.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: pylint
dependency-version: 4.0.7
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: selenium
dependency-version: 4.47.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: typer
dependency-version: 0.27.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: wlc
dependency-version: 2.1.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* [fix] network: bump httpx-socks to 0.13.1 for python-socks 3
httpx-socks 0.10.0 calls the default AnyIO Proxy with proxy_ssl.
python-socks 3.0.0 dropped that kwarg, so Tor/SOCKS startup checks
crash. 0.13.1 uses the v2 API (proxy_ssl still accepted) and allows
python-socks<4.
Drop the unused loop= argument; 0.13.1 forwards extra kwargs to
httpcore.AsyncConnectionPool, which rejects loop.
Closes : searxng/searxng#6514
Signed-off-by: Richard Freeman <rich@rich0.org >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Richard Freeman <rich@rich0.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Richard Freeman <rich@rich0.org >
2026-08-16 11:10:39 +02:00
dependabot[bot]
36698aff6b
[upd] web-client (simple): Bump the minor group across 1 directory with 7 updates ( #6522 )
...
Bumps the minor group with 7 updates in the /client/simple directory:
| Package | From | To |
| --- | --- | --- |
| [ionicons](https://github.com/ionic-team/ionicons ) | `8.0.13` | `8.1.0` |
| [ol](https://github.com/openlayers/openlayers ) | `10.9.0` | `10.10.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) | `2.5.5` | `2.5.7` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `26.1.1` | `26.2.0` |
| [browserslist](https://github.com/browserslist/browserslist ) | `4.28.7` | `4.28.8` |
| [less](https://github.com/less/less.js ) | `4.8.0` | `4.8.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) | `8.1.5` | `8.2.1` |
Updates `ionicons` from 8.0.13 to 8.1.0
- [Release notes](https://github.com/ionic-team/ionicons/releases )
- [Commits](https://github.com/ionic-team/ionicons/compare/v8.0.13...v8.1.0 )
Updates `ol` from 10.9.0 to 10.10.0
- [Release notes](https://github.com/openlayers/openlayers/releases )
- [Commits](https://github.com/openlayers/openlayers/compare/v10.9.0...v10.10.0 )
Updates `@biomejs/biome` from 2.5.5 to 2.5.7
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome )
Updates `@types/node` from 26.1.1 to 26.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `browserslist` from 4.28.7 to 4.28.8
- [Release notes](https://github.com/browserslist/browserslist/releases )
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md )
- [Commits](https://github.com/browserslist/browserslist/compare/4.28.7...4.28.8 )
Updates `less` from 4.8.0 to 4.8.1
- [Release notes](https://github.com/less/less.js/releases )
- [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/less/less.js/compare/v4.8.0...v4.8.1 )
Updates `vite` from 8.1.5 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite )
---
updated-dependencies:
- dependency-name: ionicons
dependency-version: 8.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: ol
dependency-version: 10.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: "@biomejs/biome"
dependency-version: 2.5.7
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: "@types/node"
dependency-version: 26.2.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor
- dependency-name: browserslist
dependency-version: 4.28.8
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: less
dependency-version: 4.8.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: minor
- dependency-name: vite
dependency-version: 8.2.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-16 10:34:47 +02:00