[upd] github-actions: Bump actions/setup-node from 6.4.0 to 7.0.0 (#6423 )

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](48b55a011b...8207627860) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
[upd] pypi: Bump the minor group with 2 updates (#6425 )
2026-07-18 05:51:24 +00:00 · 2026-07-17 14:27:38 +02:00 · 2026-07-17 14:24:17 +02:00 · 2026-07-17 12:27:46 +02:00 · 2026-07-17 12:24:47 +02:00 · 2026-07-16 23:31:59 +02:00
44 changed files with 195 additions and 222 deletions
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -25,25 +25,21 @@ env:

 jobs:
  build:
-    if: github.repository_owner == 'searxng' || github.event_name == 'workflow_dispatch'
+    if: |
+      github.event_name == 'workflow_dispatch'
+      || (github.repository_owner == 'searxng' && github.event.workflow_run.conclusion == 'success')
    name: Build (${{ matrix.arch }})
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
-          - arch: amd64
-            march: amd64
-            os: ubuntu-24.04
-            emulation: false
-          - arch: arm64
-            march: arm64
-            os: ubuntu-24.04-arm
-            emulation: false
-          - arch: armv7
-            march: arm64
-            os: ubuntu-24.04-arm
-            emulation: true
+          - runner: ubuntu-26.04
+            arch: amd64
+          - runner: ubuntu-26.04-arm
+            arch: arm64
+          - runner: ubuntu-26.04-arm
+            arch: armv7

    permissions:
      packages: write
@@ -53,33 +49,25 @@ jobs:
      git_url: ${{ steps.build.outputs.git_url }}

    steps:
-      # yamllint disable rule:line-length
-      - name: Setup podman
-        env:
-          PODMAN_VERSION: "v5.7.1"
-        run: |
-          sudo apt-get purge -y podman runc crun conmon
-
-          curl -fsSLO "https://github.com/mgoltzsche/podman-static/releases/download/${{ env.PODMAN_VERSION }}/podman-linux-${{ matrix.march }}.tar.gz"
-          curl -fsSLO "https://github.com/mgoltzsche/podman-static/releases/download/${{ env.PODMAN_VERSION }}/podman-linux-${{ matrix.march }}.tar.gz.asc"
-          gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 0CCF102C4F95D89E583FF1D4F8B5AF50344BB503
-          gpg --batch --verify "podman-linux-${{ matrix.march }}.tar.gz.asc" "podman-linux-${{ matrix.march }}.tar.gz"
-
-          tar -xzf "podman-linux-${{ matrix.march }}.tar.gz"
-          sudo cp -rfv ./podman-linux-${{ matrix.march }}/etc/. /etc/
-          sudo cp -rfv ./podman-linux-${{ matrix.march }}/usr/. /usr/
-
-          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
-      # yamllint enable rule:line-length
+      - name: Login to GHCR
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
+        with:
+          registry: "ghcr.io"
+          username: "${{ github.repository_owner }}"
+          password: "${{ secrets.GITHUB_TOKEN }}"

      - name: Setup Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
        with:
          python-version: "${{ env.PYTHON_VERSION }}"

+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8  # v4.2.0
+
      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
+          ref: "${{ github.event.workflow_run.head_sha || github.sha }}"
          persist-credentials: "false"
          fetch-depth: "0"

@@ -91,64 +79,36 @@ jobs:
            python-${{ env.PYTHON_VERSION }}-${{ runner.arch }}-
          path: "./local/"

-      - name: Get date
-        id: date
-        run: echo "date=$(date +'%Y%m%d')" >>$GITHUB_OUTPUT
-
      - name: Setup cache container
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
        with:
-          key: "container-${{ matrix.arch }}-${{ steps.date.outputs.date }}-${{ hashFiles('./requirements*.txt') }}"
+          key: "container-${{ matrix.arch }}-${{ hashFiles('./requirements*.txt') }}"
          restore-keys: |
-            container-${{ matrix.arch }}-${{ steps.date.outputs.date }}-
            container-${{ matrix.arch }}-
          path: "/var/tmp/buildah-cache-*/*"

-      - if: ${{ matrix.emulation }}
-        name: Setup QEMU
-        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8  # v4.2.0
-
-      - name: Login to GHCR
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
-        with:
-          registry: "ghcr.io"
-          username: "${{ github.repository_owner }}"
-          password: "${{ secrets.GITHUB_TOKEN }}"
-
      - name: Build
        id: build
        env:
          OVERRIDE_ARCH: "${{ matrix.arch }}"
-        run: make podman.build
+        run: make container.build

  test:
    name: Test (${{ matrix.arch }})
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ matrix.runner }}
    needs: build
    strategy:
      fail-fast: false
      matrix:
        include:
-          - arch: amd64
-            os: ubuntu-24.04
-            emulation: false
-          - arch: arm64
-            os: ubuntu-24.04-arm
-            emulation: false
-          - arch: armv7
-            os: ubuntu-24.04-arm
-            emulation: true
+          - runner: ubuntu-26.04
+            arch: amd64
+          - runner: ubuntu-26.04-arm
+            arch: arm64
+          - runner: ubuntu-26.04-arm
+            arch: armv7

    steps:
-      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
-        with:
-          persist-credentials: "false"
-
-      - if: ${{ matrix.emulation }}
-        name: Setup QEMU
-        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8  # v4.2.0
-
      - name: Login to GHCR
        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
        with:
@@ -156,6 +116,15 @@ jobs:
          username: "${{ github.repository_owner }}"
          password: "${{ secrets.GITHUB_TOKEN }}"

+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8  # v4.2.0
+
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        with:
+          ref: "${{ github.event.workflow_run.head_sha || github.sha }}"
+          persist-credentials: "false"
+
      - name: Test
        env:
          OVERRIDE_ARCH: "${{ matrix.arch }}"
@@ -165,7 +134,7 @@ jobs:
  release:
    if: github.repository_owner == 'searxng' && github.ref_name == 'master'
    name: Release
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
    needs:
      - build
      - test
@@ -174,10 +143,12 @@ jobs:
      packages: write

    steps:
-      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - name: Login to Docker Hub
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
        with:
-          persist-credentials: "false"
+          registry: "docker.io"
+          username: "${{ secrets.DOCKER_USER }}"
+          password: "${{ secrets.DOCKER_TOKEN }}"

      - name: Login to GHCR
        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
@@ -186,12 +157,11 @@ jobs:
          username: "${{ github.repository_owner }}"
          password: "${{ secrets.GITHUB_TOKEN }}"

-      - name: Login to Docker Hub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
+      - name: Checkout
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
-          registry: "docker.io"
-          username: "${{ secrets.DOCKER_USER }}"
-          password: "${{ secrets.DOCKER_TOKEN }}"
+          ref: "${{ github.event.workflow_run.head_sha || github.sha }}"
+          persist-credentials: "false"

      - name: Release
        env:
--- a/.github/workflows/data-update.yml
+++ b/.github/workflows/data-update.yml
@@ -21,7 +21,7 @@ jobs:
  data:
    if: github.repository_owner == 'searxng'
    name: ${{ matrix.fetch }}
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
    strategy:
      fail-fast: false
      matrix:
@@ -64,23 +64,17 @@ jobs:
        run: V=1 ./manage pyenv.cmd python "./searxng_extra/update/${{ matrix.fetch }}"

      - name: Create PR
-        id: cpr
        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          author: "searxng-bot <searxng-bot@users.noreply.github.com>"
          committer: "searxng-bot <searxng-bot@users.noreply.github.com>"
-          title: "[data] update searx.data - ${{ matrix.fetch }}"
-          commit-message: "[data] update searx.data - ${{ matrix.fetch }}"
-          branch: "update_data_${{ matrix.fetch }}"
+          title: "[mod] data: update searx.data - ${{ matrix.fetch }}"
+          commit-message: "[mod] data: update searx.data - ${{ matrix.fetch }}"
+          branch: "ci-data-${{ matrix.fetch }}"
          delete-branch: "true"
          draft: "false"
          signoff: "false"
          body: |
-            [data] update searx.data - ${{ matrix.fetch }}
+            Update searx.data - ${{ matrix.fetch }}
          labels: |
            data
-
-      - name: Display information
-        run: |
-          echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}"
-          echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}"
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -25,7 +25,7 @@ jobs:
  release:
    if: github.repository_owner == 'searxng' || github.event_name == 'workflow_dispatch'
    name: Release
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
    permissions:
      # for JamesIves/github-pages-deploy-action to push
      contents: write
@@ -65,7 +65,7 @@ jobs:
        with:
          folder: "dist/docs"
          branch: "gh-pages"
-          commit-message: "[doc] build from commit ${{ github.sha }}"
+          commit-message: "[mod] docs: build from commit ${{ github.sha }}"
          # Automatically remove deleted files from the deploy branch
          clean: "true"
          single-commit: "true"
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -23,7 +23,7 @@ env:
 jobs:
  test:
    name: Python ${{ matrix.python-version }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
    strategy:
      matrix:
        python-version:
@@ -59,29 +59,24 @@ jobs:

  theme:
    name: Theme
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
    steps:
      - name: Setup Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
        with:
          python-version: "${{ env.PYTHON_VERSION }}"

+      - name: Setup Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # v7.0.0
+        with:
+          node-version: "26"
+          check-latest: "true"
+
      - name: Checkout
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
        with:
          persist-credentials: "false"

-      - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # v6.4.0
-        with:
-          node-version-file: "./.nvmrc"
-
-      - name: Setup cache Node.js
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
-        with:
-          key: "nodejs-${{ runner.arch }}-${{ hashFiles('./.nvmrc', './package.json') }}"
-          path: "./client/simple/node_modules/"
-
      - name: Setup cache Python
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
        with:
@@ -90,6 +85,14 @@ jobs:
            python-${{ env.PYTHON_VERSION }}-${{ runner.arch }}-
          path: "./local/"

+      - name: Setup cache Node.js
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9  # v6.1.0
+        with:
+          key: "nodejs-${{ runner.arch }}-${{ hashFiles('**/package-lock.json') }}"
+          restore-keys: |
+            nodejs-${{ runner.arch }}-
+          path: "./client/simple/node_modules/"
+
      - name: Setup venv
        run: make V=1 install

--- a/.github/workflows/l10n.yml
+++ b/.github/workflows/l10n.yml
@@ -26,9 +26,9 @@ env:

 jobs:
  update:
-    if: github.repository_owner == 'searxng' && github.event.workflow_run.conclusion == 'success'
+    if: github.event.workflow_run.conclusion == 'success' && github.repository_owner == 'searxng'
    name: Update
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
    permissions:
      # For "make V=1 weblate.push.translations"
      contents: write
@@ -59,7 +59,7 @@ jobs:
      - name: Setup Weblate
        run: |
          mkdir -p ~/.config
-          echo "${{ secrets.WEBLATE_CONFIG }}" > ~/.config/weblate
+          echo "${{ secrets.WEBLATE_CONFIG }}" >~/.config/weblate

      - name: Setup Git
        run: |
@@ -74,7 +74,7 @@ jobs:
      github.repository_owner == 'searxng'
      && (github.event_name == 'workflow_dispatch' || github.event_name == 'schedule')
    name: Pull Request
-    runs-on: ubuntu-24.04-arm
+    runs-on: ubuntu-26.04-arm
    permissions:
      # For "make V=1 weblate.translations.commit"
      contents: write
@@ -107,7 +107,7 @@ jobs:
      - name: Setup Weblate
        run: |
          mkdir -p ~/.config
-          echo "${{ secrets.WEBLATE_CONFIG }}" > ~/.config/weblate
+          echo "${{ secrets.WEBLATE_CONFIG }}" >~/.config/weblate

      - name: Setup Git
        run: |
@@ -118,23 +118,17 @@ jobs:
        run: make V=1 weblate.translations.commit

      - name: Create PR
-        id: cpr
        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          author: "searxng-bot <searxng-bot@users.noreply.github.com>"
          committer: "searxng-bot <searxng-bot@users.noreply.github.com>"
-          title: "[l10n] update translations from Weblate"
-          commit-message: "[l10n] update translations from Weblate"
+          title: "[mod] i18n: update translations from Weblate"
+          commit-message: "[mod] i18n: update translations from Weblate"
          branch: "translations_update"
          delete-branch: "true"
          draft: "false"
          signoff: "false"
          body: |
-            [l10n] update translations from Weblate
+            Update translations from Weblate
          labels: |
            area:i18n
-
-      - name: Display information
-        run: |
-          echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}"
-          echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}"
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -1,46 +0,0 @@
---
-name: Security
-
-# yamllint disable-line rule:truthy
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: "42 05 * * *"
-
-concurrency:
-  group: ${{ github.workflow }}
-  cancel-in-progress: false
-
-permissions:
-  contents: read
-
-jobs:
-  container:
-    if: github.repository_owner == 'searxng'
-    name: Container
-    runs-on: ubuntu-24.04-arm
-    permissions:
-      security-events: write
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
-        with:
-          persist-credentials: "false"
-
-      - name: Sync GHCS from Docker Scout
-        uses: docker/scout-action@2688993af7bafd6ba8c6a74ec652442be91dd82b  # v1.23.1
-        with:
-          organization: "searxng"
-          dockerhub-user: "${{ secrets.DOCKER_USER }}"
-          dockerhub-password: "${{ secrets.DOCKER_TOKEN }}"
-          image: "registry://ghcr.io/searxng/searxng:latest"
-          command: "cves"
-          sarif-file: "./scout.sarif"
-          exit-code: "false"
-          write-comment: "false"
-
-      - name: Upload SARIFs
-        uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9  # v4.37.0
-        with:
-          sarif_file: "./scout.sarif"
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -4,7 +4,7 @@ cov-core==1.15.0
 black==25.9.0
 pylint==4.0.6
 splinter==0.21.0
-selenium==4.45.0
+selenium==4.46.0
 Sphinx==8.2.3;python_version <= "3.11"
 Sphinx==9.1.0; python_version > "3.11"
 sphinx-issues==6.0.0
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,7 +13,7 @@ sniffio==1.3.1
 valkey==6.1.1
 markdown-it-py==4.2.0
 msgspec==0.21.1
-typer==0.26.8
+typer==0.27.0
 isodate==0.7.2
 whitenoise==6.12.0
 typing-extensions==4.16.0
--- a/searx/cache.py
+++ b/searx/cache.py
@@ -48,7 +48,7 @@ class ExpireCacheCfg(msgspec.Struct):  # pylint: disable=too-few-public-methods
    MAXHOLD_TIME: int = 60 * 60 * 24 * 7  # 7 days
    """Hold time (default in sec.), after which a value is removed from the cache."""

-    MAINTENANCE_PERIOD: int = 60 * 60  # 2h
+    MAINTENANCE_PERIOD: int = 60 * 60  # 1h
    """Maintenance period in seconds / when :py:obj:`MAINTENANCE_MODE` is set to
    ``auto``."""

@@ -458,12 +458,22 @@ class ExpireCacheSQLite(sqlitedb.SQLiteAppl, ExpireCache):
        # Before values are taken from the table, a maintenance interval may
        # need to be carried out.
        self.maintenance()
-        sql = f"SELECT value FROM {table} WHERE key = ?"
+        sql = f"SELECT value, expire FROM {table} WHERE key = ?"
        row = self.DB.execute(sql, (key,)).fetchone()
        if row is None:
            return default

-        return self.deserialize(row[0])
+        # Check if value is expired. It's possible that it's expired but has not
+        # yet been automatically deleted by the periodic maintenance
+        (value, expire) = row
+        now = time.time()
+        if expire < now:
+            # The record is deleted during the maintenance interval. Deleting
+            # the record at this point offers no advantage, as a SELECT
+            # statement must be executed for every cache.get request anyways.
+            return default
+
+        return self.deserialize(value)

    def pairs(self, ctx: str) -> Iterator[tuple[str, typing.Any]]:
        """Iterate over key/value pairs from table given by argument ``ctx``.
--- a/searx/enginelib/init.py
+++ b/searx/enginelib/init.py
@@ -47,7 +47,7 @@ ENGINES_CACHE: ExpireCacheSQLite = ExpireCacheSQLite.build_cache(
    ExpireCacheCfg(
        name="ENGINES_CACHE",
        MAXHOLD_TIME=60 * 60 * 24 * 7,  # 7 days
-        MAINTENANCE_PERIOD=60 * 60,  # 2h
+        MAINTENANCE_PERIOD=60 * 60,  # 1h
        MAX_VALUE_LEN=1024 * 1024 * 1024,  # 1MB
    )
 )
--- a/searx/engines/acfun.py
+++ b/searx/engines/acfun.py
@@ -83,7 +83,7 @@ def extract_video_data(video_block):
        published_date = None
        if create_time:
            try:
-                published_date = datetime.strptime(create_time.strip(), "%Y-%m-%d")
+                published_date = datetime.fromisoformat(create_time.strip())
            except (ValueError, TypeError):
                pass

--- a/searx/engines/arxiv.py
+++ b/searx/engines/arxiv.py
@@ -109,7 +109,7 @@ def response(resp: "SXNG_Response") -> EngineResults:
        comments_elements = eval_xpath_getindex(entry, xpath_comment, 0, default=None)
        comments: str = "" if comments_elements is None else comments_elements.text

-        publishedDate = datetime.strptime(eval_xpath_getindex(entry, xpath_published, 0).text, "%Y-%m-%dT%H:%M:%SZ")
+        publishedDate = datetime.fromisoformat(eval_xpath_getindex(entry, xpath_published, 0).text.rstrip("Z"))

        res.add(
            res.types.Paper(
--- a/searx/engines/baidu.py
+++ b/searx/engines/baidu.py
@@ -186,7 +186,7 @@ def parse_images(data):
            img_date = item.get("bdImgnewsDate")
            publishedDate = None
            if img_date:
-                publishedDate = datetime.strptime(img_date, "%Y-%m-%d %H:%M")
+                publishedDate = datetime.fromisoformat(img_date)
            results.append(
                {
                    "template": "images.html",
--- a/searx/engines/bitchute.py
+++ b/searx/engines/bitchute.py
@@ -44,7 +44,7 @@ def response(resp):
                "url": 'https://www.bitchute.com/video/' + item['video_id'],
                "content": html_to_text(item['description']),
                "author": item['channel']['channel_name'],
-                "publishedDate": datetime.strptime(item["date_published"], "%Y-%m-%dT%H:%M:%S.%fZ"),
+                "publishedDate": datetime.fromisoformat(item["date_published"].rstrip("Z")),
                "length": item['duration'],
                "views": item['view_count'],
                "thumbnail": item['thumbnail_url'],
--- a/searx/engines/boardreader.py
+++ b/searx/engines/boardreader.py
@@ -104,7 +104,7 @@ def response(resp: "SXNG_Response") -> EngineResults:
                title=_remove_keyword_marker(result["Subject"]),
                content=_remove_keyword_marker(result["Text"]),
                url=result["Url"],
-                publishedDate=datetime.strptime(result["Published"], "%Y-%m-%d %H:%M:%S"),
+                publishedDate=datetime.fromisoformat(result["Published"]),
                metadata=gettext.gettext("Posted by {author}").format(author=result["Author"]),
            )
        )
--- a/searx/engines/chefkoch.py
+++ b/searx/engines/chefkoch.py
@@ -43,7 +43,7 @@ def response(resp):

        publishedDate = None
        if recipe['submissionDate']:
-            publishedDate = datetime.strptime(result['recipe']['submissionDate'][:19], "%Y-%m-%dT%H:%M:%S")
+            publishedDate = datetime.fromisoformat(result['recipe']['submissionDate'][:19])

        content = [
            f"Schwierigkeitsstufe (1-3): {recipe['difficulty']}",
--- a/searx/engines/findthatmeme.py
+++ b/searx/engines/findthatmeme.py
@@ -37,7 +37,7 @@ def response(resp):
    for item in search_res:
        img = 'https://s3.thehackerblog.com/findthatmeme/' + item['image_path']
        thumb = 'https://s3.thehackerblog.com/findthatmeme/thumb/' + item.get('thumbnail', '')
-        date = datetime.strptime(item["updated_at"].split("T")[0], "%Y-%m-%d")
+        date = datetime.fromisoformat(item["updated_at"].split("T")[0])
        formatted_date = datetime.fromtimestamp(date.timestamp())

        results.append(
--- a/searx/engines/fyyd.py
+++ b/searx/engines/fyyd.py
@@ -47,7 +47,7 @@ def response(resp: "SXNG_Response"):
                title=result["title"],
                content=result["description"],
                thumbnail=result["smallImageURL"],
-                publishedDate=datetime.strptime(result["status_since"], "%Y-%m-%d %H:%M:%S"),
+                publishedDate=datetime.fromisoformat(result["status_since"]),
                metadata=f"Rank: {result['rank']} || {result['episode_count']} episodes",
            )
        )
--- a/searx/engines/heexy.py
+++ b/searx/engines/heexy.py
@@ -68,7 +68,9 @@ def _get_api_token(query: str) -> str:
    if cached_token:
        return cached_token

-    resp = get(f"{base_url}/search?q={query}", headers={"User-Agent": gen_useragent()})
+    resp = get(
+        f"{base_url}/search?q={query}", headers={"User-Agent": gen_useragent(), "Accept-Language": "en-US,en:q=0.9"}
+    )
    if not resp.ok:
        raise SearxEngineAPIException("failed to obtain request token: invalid response code")

@@ -76,7 +78,7 @@ def _get_api_token(query: str) -> str:
    if not token:
        raise SearxEngineAPIException("failed to obtain request token: no token found")

-    CACHE.set("token", token)
+    CACHE.set("token", token, expire=3 * 60)
    return token


--- a/searx/engines/huggingface.py
+++ b/searx/engines/huggingface.py
@@ -91,7 +91,7 @@ def response(resp) -> EngineResults:

        published_date = None
        try:
-            published_date = datetime.strptime(entry["createdAt"], "%Y-%m-%dT%H:%M:%S.%fZ")
+            published_date = datetime.fromisoformat(entry["createdAt"].rstrip("Z"))
        except (ValueError, TypeError):
            pass

--- a/searx/engines/iqiyi.py
+++ b/searx/engines/iqiyi.py
@@ -43,7 +43,7 @@ def _result(video: dict[str, typing.Any], album_info: dict[str, typing.Any]):
    release_time = album_info.get("releaseTime", {}).get("value")
    if release_time:
        try:
-            published_date = datetime.strptime(release_time, "%Y-%m-%d")
+            published_date = datetime.fromisoformat(release_time)
        except (ValueError, TypeError):
            pass

--- a/searx/engines/lemmy.py
+++ b/searx/engines/lemmy.py
@@ -92,7 +92,7 @@ def _get_communities(json):
                'title': result['community']['title'],
                'content': markdown_to_text(result['community'].get('description', '')),
                'thumbnail': result['community'].get('icon', result['community'].get('banner')),
-                'publishedDate': datetime.strptime(counts['published'][:19], '%Y-%m-%dT%H:%M:%S'),
+                'publishedDate': datetime.fromisoformat(counts['published'][:19]),
                'metadata': metadata,
            }
        )
@@ -141,7 +141,7 @@ def _get_posts(json):
                'title': result['post']['name'],
                'content': content,
                'thumbnail': thumbnail,
-                'publishedDate': datetime.strptime(result['post']['published'][:19], '%Y-%m-%dT%H:%M:%S'),
+                'publishedDate': datetime.fromisoformat(result['post']['published'][:19]),
                'metadata': metadata,
            }
        )
@@ -170,7 +170,7 @@ def _get_comments(json):
                'url': result['comment']['ap_id'],
                'title': result['post']['name'],
                'content': markdown_to_text(result['comment']['content']),
-                'publishedDate': datetime.strptime(result['comment']['published'][:19], '%Y-%m-%dT%H:%M:%S'),
+                'publishedDate': datetime.fromisoformat(result['comment']['published'][:19]),
                'metadata': metadata,
            }
        )
--- a/searx/engines/mastodon.py
+++ b/searx/engines/mastodon.py
@@ -60,7 +60,7 @@ def response(resp):
                    'title': result['username'] + f" ({result['followers_count']} followers)",
                    'content': result['note'],
                    'thumbnail': result.get('avatar'),
-                    'publishedDate': datetime.strptime(result['created_at'][:10], "%Y-%m-%d"),
+                    'publishedDate': datetime.fromisoformat(result['created_at'][:10]),
                }
            )
        elif mastodon_type == "hashtags":
--- a/searx/engines/nvd.py
+++ b/searx/engines/nvd.py
@@ -44,7 +44,7 @@ def response(resp) -> EngineResults:

        cve_id = item["cve"]["id"]
        description = item["cve"]["descriptions"][0]["value"]
-        date = datetime.strptime(item["cve"]["published"], "%Y-%m-%dT%H:%M:%S.%f")
+        date = datetime.fromisoformat(item["cve"]["published"])

        # Extract severity (Low, Medium, High, or Critical) and CVSS score, if available
        info = item["cve"].get("metrics", {}).get("cvssMetricV31", [{}])[0].get("cvssData", {})
--- a/searx/engines/odysee.py
+++ b/searx/engines/odysee.py
@@ -76,7 +76,7 @@ def response(resp):
        release_time = item["release_time"]
        duration = item["duration"]

-        release_date = datetime.strptime(release_time.split("T")[0], "%Y-%m-%d")
+        release_date = datetime.fromisoformat(release_time.split("T")[0])
        formatted_date = datetime.fromtimestamp(release_date.timestamp())

        url = f"https://odysee.com/{name}:{claim_id}"
--- a/searx/engines/podchaser.py
+++ b/searx/engines/podchaser.py
@@ -54,7 +54,7 @@ def response(resp: "SXNG_Response"):
                title=result["title"],
                content=result["description"],
                thumbnail=result["image_url"],
-                publishedDate=datetime.strptime(result["created_at"], "%Y-%m-%d %H:%M:%S"),
+                publishedDate=datetime.fromisoformat(result["created_at"]),
                metadata=" | ".join(metadata),
            )
        )
--- a/searx/engines/public_domain_image_archive.py
+++ b/searx/engines/public_domain_image_archive.py
@@ -140,7 +140,7 @@ def response(resp):
        results.append(
            {
                'template': 'images.html',
-                'url': _clean_url(f"{about['website']}/images/{result['objectID']}"),
+                'url': _clean_url(f"{pdia_base_url}/images/{result['objectID']}"),
                'img_src': _clean_url(base_image_url),
                'thumbnail_src': _clean_url(base_image_url + THUMBNAIL_SUFFIX),
                'title': f"{result['title'].strip()} by {result['artist']} {result.get('displayYear', '')}",
--- a/searx/engines/quark.py
+++ b/searx/engines/quark.py
@@ -292,7 +292,7 @@ def parse_news_uchq(data):
    results = []
    for item in data.get('feed', []):
        try:
-            published_date = datetime.strptime(item.get('time'), "%Y-%m-%d")
+            published_date = datetime.fromisoformat(item.get('time'))
        except (ValueError, TypeError):
            # Sometime Quark will return non-standard format like "1天前", set published_date as None
            published_date = None
--- a/searx/engines/qwant.py
+++ b/searx/engines/qwant.py
@@ -51,6 +51,7 @@ from urllib.parse import urlencode
 import babel
 from flask_babel import gettext  # pyright: ignore[reportUnknownVariableType]

+from searx.enginelib import EngineCache
 from searx.enginelib.traits import EngineTraits
 from searx.exceptions import (
    SearxEngineAccessDeniedException,
@@ -105,9 +106,19 @@ qwant_news_locales = [
 ]
 # fmt: on

+base_url = "https://www.qwant.com"
 api_url = "https://api.qwant.com/v3/search/"
 """URL of Qwant's API (JSON)"""

+CACHE: EngineCache
+"""Cache for storing the ``datadome`` cookie."""
+
+
+def setup(engine_settings: dict[str, t.Any]) -> bool:
+    global CACHE  # pylint: disable=global-statement
+    CACHE = EngineCache(engine_settings["name"])
+    return True
+

 def request(query: str, params: "OnlineParams") -> None:
    """Qwant search request"""
@@ -129,24 +140,29 @@ def request(query: str, params: "OnlineParams") -> None:
        "tgp": test_group_value,
        "device": "desktop",
        "safesearch": params["safesearch"],
-        "display": True,
-        "llm": True,
+        # True would be encoded to "True", instead of "true", which makes the request
+        # easier to detect and block
+        "displayed": "true",
+        "llm": "true",
    }

-    # shuffle query parameters to be harder to fingerprint
-    args = list(args.items())
-    random.shuffle(args)
-    args = dict(args)
-
    params["raise_for_httperror"] = False

    params["url"] = f"{api_url}{qwant_categ}?{urlencode(args)}"

+    params["cookies"]["datadome"] = CACHE.get("datadome")
+    params["headers"].update({"Accept": "application/json", "Referer": f"{base_url}/", "Origin": base_url})
+

 def response(resp: "SXNG_Response") -> EngineResults:
    """Parse results from Qwant's API"""
    # pylint: disable=too-many-locals, too-many-branches, too-many-statements

+    # cache datadome cookie - changes on each request
+    datadome = resp.cookies.get("datadome")
+    if datadome:
+        CACHE.set("datadome", datadome)
+
    res = EngineResults()

    # Try to load JSON result
@@ -163,8 +179,8 @@ def response(resp: "SXNG_Response") -> EngineResults:
        error_code = data.get("error_code")
        if error_code == 24:
            raise SearxEngineTooManyRequestsException()
-        if search_results.get("data", {}).get("error_data", {}).get("captchaUrl") is not None:
-            raise SearxEngineCaptchaException()
+        if search_results.get("url") is not None:
+            raise SearxEngineCaptchaException(suspended_time=0)
        if resp.status_code == 403:
            raise SearxEngineAccessDeniedException()
        msg = ",".join(data.get("message", ["unknown"]))
@@ -302,7 +318,7 @@ def fetch_traits(engine_traits: EngineTraits):
    from searx.utils import extr

    resp = get(
-        about["website"],  # pyright: ignore[reportArgumentType]
+        base_url,  # pyright: ignore[reportArgumentType]
        timeout=5,
    )
    if not resp.ok:
--- a/searx/engines/rumble.py
+++ b/searx/engines/rumble.py
@@ -58,7 +58,7 @@ def response(resp):
        title = extract_text(result_dom.xpath(title_xpath))
        p_date = extract_text(result_dom.xpath(published_date))
        # fix offset date for line 644 webapp.py check
-        fixed_date = datetime.strptime(p_date, '%Y-%m-%dT%H:%M:%S%z')
+        fixed_date = datetime.fromisoformat(p_date)
        earned = extract_text(result_dom.xpath(earned_xpath))
        views = extract_text(result_dom.xpath(views_xpath))
        rumbles = extract_text(result_dom.xpath(rumbles_xpath))
--- a/searx/engines/semantic_scholar.py
+++ b/searx/engines/semantic_scholar.py
@@ -120,7 +120,7 @@ def response(resp: "SXNG_Response") -> EngineResults:

        publishedDate: datetime | None
        if "pubDate" in result:
-            publishedDate = datetime.strptime(result["pubDate"], "%Y-%m-%d")
+            publishedDate = datetime.fromisoformat(result["pubDate"])
        else:
            publishedDate = None

--- a/searx/engines/sogou.py
+++ b/searx/engines/sogou.py
@@ -95,7 +95,8 @@ def _parse_date(text):
        date_match = re.search(r"(\d{4}-\d{1,2}-\d{1,2})", text)
        if date_match:
            try:
-                return datetime.strptime(date_match.group(1), "%Y-%m-%d")
+                y, m, d = date_match.group(1).split("-")
+                return datetime(year=int(y), month=int(m), day=int(d))
            except (ValueError, TypeError):
                pass
    return None
--- a/searx/engines/sogou_videos.py
+++ b/searx/engines/sogou_videos.py
@@ -54,7 +54,7 @@ def response(resp):
        published_date = None
        if entry.get("date") and entry.get("duration"):
            try:
-                published_date = datetime.strptime(entry['date'], "%Y-%m-%d")
+                published_date = datetime.fromisoformat(entry['date'])
            except (ValueError, TypeError):
                published_date = None

--- a/searx/engines/springer.py
+++ b/searx/engines/springer.py
@@ -134,7 +134,7 @@ def response(resp: "SXNG_Response") -> EngineResults:
        return str(record.get(k, ""))

    for record in json_data["records"]:
-        published = datetime.strptime(record["publicationDate"], "%Y-%m-%d")
+        published = datetime.fromisoformat(record["publicationDate"])
        authors: list[str] = [" ".join(author["creator"].split(", ")[::-1]) for author in record["creators"]]

        pdf_url = ""
--- a/searx/engines/tagesschau.py
+++ b/searx/engines/tagesschau.py
@@ -81,7 +81,7 @@ def _story(item):
    return {
        'title': item['title'],
        'thumbnail': item.get('teaserImage', {}).get('imageVariants', {}).get('16x9-256'),
-        'publishedDate': datetime.strptime(item['date'][:19], '%Y-%m-%dT%H:%M:%S'),
+        'publishedDate': datetime.fromisoformat(item['date'][:19]),
        'content': item.get('firstSentence'),
        'url': item['shareURL'] if use_source_url else item['detailsweb'],
    }
@@ -103,7 +103,7 @@ def _video(item):
        'template': 'videos.html',
        'title': title,
        'thumbnail': item.get('teaserImage', {}).get('imageVariants', {}).get('16x9-256'),
-        'publishedDate': datetime.strptime(item['date'][:19], '%Y-%m-%dT%H:%M:%S'),
+        'publishedDate': datetime.fromisoformat(item['date'][:19]),
        'content': item.get('firstSentence', ''),
        'iframe_src': video_url,
        'url': url,
--- a/searx/engines/tiger.py
+++ b/searx/engines/tiger.py
@@ -117,7 +117,7 @@ def _obtain_session_code() -> str:
    if not code:
        raise SearxEngineAPIException("failed to obtain session code")

-    CACHE.set("session", code, expire=60 * 24 * 60)  # cookie is valid for two months
+    CACHE.set("session", code, expire=60 * 24 * 60 * 60)  # cookie is valid for two months
    return code


--- a/searx/engines/tineye.py
+++ b/searx/engines/tineye.py
@@ -121,7 +121,7 @@ def parse_tineye_match(match_json):

            crawl_date = backlink_json.get("crawl_date")
            if crawl_date:
-                crawl_date = datetime.strptime(crawl_date, '%Y-%m-%d')
+                crawl_date = datetime.fromisoformat(crawl_date)
            else:
                crawl_date = datetime.min

--- a/searx/engines/tootfinder.py
+++ b/searx/engines/tootfinder.py
@@ -51,7 +51,7 @@ def response(resp):
                'title': title,
                'content': html_to_text(result['content']),
                'thumbnail': thumbnail,
-                'publishedDate': datetime.strptime(result['created_at'], '%Y-%m-%d %H:%M:%S'),
+                'publishedDate': datetime.fromisoformat(result['created_at']),
            }
        )

--- a/searx/engines/tusksearch.py
+++ b/searx/engines/tusksearch.py
@@ -13,7 +13,7 @@ from dateutil import parser

 from searx.exceptions import SearxEngineAPIException
 from searx.network import get
-from searx.utils import html_to_text
+from searx.utils import gen_useragent, html_to_text
 from searx.result_types import EngineResults

 if t.TYPE_CHECKING:
@@ -52,7 +52,7 @@ def _obtain_x_sid() -> tuple[str, str]:
    The header key is usually called `x-sid-{UUIDv4}`, and the value is
    usually a plain UUIDv4 (but a different one than in the header key).
    """
-    resp = get(f"{api_url}/revcontent/embed.js")
+    resp = get(f"{api_url}/revcontent/embed.js", headers={"User-Agent": gen_useragent()})
    if not resp.ok:
        raise SearxEngineAPIException("failed to obtain request x-sid token")

@@ -89,12 +89,14 @@ def request(query: str, params: "OnlineParams") -> None:
        params["url"] = f"{api_url}/Search/Web?{urlencode(args)}"

    x_sid_header, x_sid_value = _obtain_x_sid()
-    params["headers"] = {
-        x_sid_header: x_sid_value,
-        # required - we send a random longitude and latitude instead of the actual user location
-        'x-lon': str(random.random() * 90),
-        'x-lat': str(random.random() * 90),
-    }
+    params["headers"].update(
+        {
+            x_sid_header: x_sid_value,
+            # required - we send a random longitude and latitude instead of the actual user location
+            "x-lon": str(round(random.random() * 90, 4)),
+            "x-lat": str(round(random.random() * 90, 4)),
+        }
+    )


 def response(resp: "SXNG_Response"):
--- a/searx/engines/wallhaven.py
+++ b/searx/engines/wallhaven.py
@@ -79,7 +79,7 @@ def response(resp):
                'img_src': result['path'],
                'thumbnail_src': result['thumbs']['small'],
                'resolution': result['resolution'].replace('x', ' x '),
-                'publishedDate': datetime.strptime(result['created_at'], '%Y-%m-%d %H:%M:%S'),
+                'publishedDate': datetime.fromisoformat(result['created_at']),
                'img_format': result['file_type'],
                'filesize': humanize_bytes(result['file_size']),
            }
--- a/searx/result_types/_base.py
+++ b/searx/result_types/_base.py
@@ -52,6 +52,12 @@ def _normalize_url_fields(result: "Result | LegacyResult"):
            result.parsed_url = urllib.parse.urlparse(result.url)

    if result.parsed_url:
+        # properly format special characters (e.g. "ä", "ö") in IDN domains
+        # e.g. "xn--strung-xxa.de" becomes "störung.de"
+        if result.parsed_url.netloc.startswith("xn--"):
+            netloc = result.parsed_url.netloc.encode().decode("idna")
+            result.parsed_url = result.parsed_url._replace(netloc=netloc)
+
        result.parsed_url = result.parsed_url._replace(
            # if the result has no scheme, use http as default
            scheme=result.parsed_url.scheme or "http",
--- a/searx/settings.yml
+++ b/searx/settings.yml
@@ -477,6 +477,24 @@ engines:
    engine: arxiv
    shortcut: arx

+  - name: avalw
+    engine: json_engine
+    shortcut: av
+    categories: general
+    paging: true
+    search_url: https://avalw.org/api/search?q={query}&page={pageno}&limit=10&tbm=all
+    results_query: results
+    url_query: url
+    title_query: title
+    content_query: snippet
+    thumbnail: image_url
+    disabled: true
+    inactive: true
+    about:
+      website: https://avalw.com
+      description: "Search engine from the Romanian news company AVALW S.R.L."
+      results: JSON
+
  - name: ayo
    engine: xpath
    categories: general
--- a/searx/templates/simple/result_templates/images.html
+++ b/searx/templates/simple/result_templates/images.html
@@ -60,7 +60,7 @@
      </p>
      <p class="result-filesize">{{ _label(_("Filesize"), result.filesize) }}</p>
      <p class="result-source">{{ _label(_("Source"), result.source) }}</p>
-      <p class="result-engine">{{ _label(_("Engine"), result.engine) }}</p>
+      <p class="result-engines">{{ _label(_("Engines"), ", ".join(result.engines)) }}</p>
      <p class="result-url"><span>{{ _("View source") }}:</span>{{- "" -}}
        <a {{ _target(results_on_new_tab) }} href="{{ result.url }}">{{ result.url }}</a>
      </p>
--- a/searx/webapp.py
+++ b/searx/webapp.py
@@ -845,7 +845,10 @@ def autocompleter():
        mimetype = 'application/json'
    else:
        # the suggestion request comes from browser's URL bar
-        suggestions = json.dumps([sug_prefix, results])
+        relevances = {
+            'google:suggestrelevance': [600 - i for i in range(len(results))]
+        }  # chromium only shows 3 suggestions unless we attach relevances
+        suggestions = json.dumps([sug_prefix, results, [], [], relevances])
        mimetype = 'application/x-suggestions+json'

    suggestions = escape(suggestions, False)
Author	SHA1	Message	Date
dependabot[bot]	81c9c23862	[upd] github-actions: Bump actions/setup-node from 6.4.0 to 7.0.0 (#6423 ) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](`48b55a011b...8207627860`) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-17 14:27:38 +02:00
dependabot[bot]	6913fba208	[upd] pypi: Bump the minor group with 2 updates (#6425 ) Bumps the minor group with 2 updates: [typer](https://github.com/fastapi/typer) and [selenium](https://github.com/SeleniumHQ/Selenium). Updates `typer` from 0.26.8 to 0.27.0 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](https://github.com/fastapi/typer/compare/0.26.8...0.27.0) Updates `selenium` from 4.45.0 to 4.46.0 - [Release notes](https://github.com/SeleniumHQ/Selenium/releases) - [Commits](https://github.com/SeleniumHQ/Selenium/compare/selenium-4.45.0...selenium-4.46.0)	2026-07-17 14:24:17 +02:00
Bnyro	2daa4d4815	[fix] qwant: can't fetch engine traits because `engine.about` is no longer a dict	2026-07-17 12:27:46 +02:00
Bnyro	de8f73f434	[fix] cache: maintenance period comment duration 2h instead of 1h	2026-07-17 12:24:47 +02:00
Bnyro	9f9c00819e	[fix] tiger: remember auth cookie for 2 months, not 1 day	2026-07-16 23:31:59 +02:00
Bnyro	b72a87676f	[fix] public domain image archive: crashes upon response The code used here has always been "bad" because `about` shouldn't be used as data source, but the engine probably broke when type checks / dataclasses for the about parameter in engines has been added with <https://github.com/searxng/searxng/pull/6258>. Error log: ``` WARNING searx.engines.public domain im: ErrorContext('searx/engines/public_domain_image_archive.py', 143, '\'url\': _clean_url(f"{about[\'website\']}/images/{result[\'objectID\']}"),', 'TypeError', None, ("'EngineAbout' object is not subscriptable",)) False ERROR searx.engines.public domain im: exception : 'EngineAbout' object is not subscriptable Traceback (most recent call last): File "/home/bnyro/Projects/searxng/searx/search/processors/online.py", line 253, in search search_results = self._search_basic(query, params) File "/home/bnyro/Projects/searxng/searx/search/processors/online.py", line 239, in _search_basic return self.engine.response(response) ~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/home/bnyro/Projects/searxng/searx/engines/public_domain_image_archive.py", line 143, in response 'url': _clean_url(f"{about['website']}/images/{result['objectID']}"), ~~~~~^^^^^^^^^^^ TypeError: 'EngineAbout' object is not subscriptable ```	2026-07-16 15:50:58 +02:00
Bnyro	f2432e33d6	[fix] engine cache: return default value when cache entry expired It's possible that it's expired but has not yet been automatically deleted by the periodic maintenance because that, by default, runs only every 2 hours. Related: - see https://github.com/searxng/searxng/pull/6409#discussion_r3584712601	2026-07-16 12:37:26 +02:00
vojkovic	7b2199ecdf	[fix] autocomplete suggestrelevance scores for chromium	2026-07-15 23:45:25 +08:00
Bnyro	4a9c19d7bf	[mod] images.html: display all engines that found the result, not only the first one	2026-07-15 17:44:11 +02:00
Bnyro	5cb4cb2bc5	[fix] qwant: engine blocked with captcha Qwant now requires a `datadome` cookie that it returns in the first search response as a `Set-Cookie`. This cookie has to be sent for all requests, otherwise they will be blocked. This means that now, the first search request is blocked (results in CAPTCHA), and only the subsequent searches work (same happens on the Qwant website for me). However, I don't think it's worth repeating the same search request multiple times very quickly because that also makes us more suspicious.	2026-07-15 17:39:10 +02:00
Bnyro	5a448596ab	[feat] engines: add avalw.org (general) The index is very small, so it often doesn't find anything. It also has news support, but the results are unusable.	2026-07-15 17:38:46 +02:00
Bnyro	9c49b7e0d7	[fix] results: display internationalized domain names human-friendly Some search engines encode domains that contain special characters in the IDN format, i.e. by using Punycode (https://en.wikipedia.org/wiki/Punycode). This means that domains formatted like that are not human readable and thus very unintuive. Also, as only some engines use Punycode, this often causes a result to appear multiple times, once with a Punycode domain (e.g. xn--allestrungen-9ib.de), and once with a normal domain (e.g. allestörungen.de). Always formatting the domains nicely has the caveat that the official sites are harder to distinguish from malicious clones that just swapped out some characters by using Punycode, e.g. replaced `a` with `á`. I don't think that will be much of an issue though - I don't think Punycode results previously stopped users from clicking the link, and I also think that most search engines filter out such bad results or don't even have them indexed.	2026-07-15 17:38:04 +02:00
Bnyro	58e02a01ae	[fix] tusksearch: fix engine blocked by bot protection Changes: - the `embed.js` request now requires a user agent header - we include a user agent in the "actual" request (I dropped it by accident) - we only send the first 4 decimal places of the location instead of 7+ (not required, but harder to detect)	2026-07-14 20:32:31 +02:00
Bnyro	7fa9f16225	[fix] heexy: blocked by cloudflare	2026-07-14 20:32:18 +02:00
Onev	9e25585aec	[refactor] engines: use datetime.fromisoformat instead of datetime.strptime where possible (#6394 ) Refactor engines that parse ISO 8601 dates with strptime to use fromisoformat instead. In most cases this is a direct replacement of strptime(text, "format") with fromisoformat(text). For engines where the source has a trailing "Z" that strptime consumed as a literal (e.g. "%Y-%m-%dT%H:%M:%S.%fZ" in huggingface.py), add rstrip("Z") to keep the output naive and preserve the existing behavior. In sogou.py the date is extracted with a regular expression, which can yield strings like "2026-7-11". strptime accepts this via its format string, but fromisoformat does not. To preserve the existing behavior and satisfy the format fromisoformat expects, add zero-padding for the month and day. Closes: #6098 --------- Signed-off-by: OneVth <onebrotravel@gmail.com>	2026-07-13 17:46:56 +02:00
Ivan Gabaldon	c19d86faa3	[mod] ci: remove security (#6400 ) Manage alerts directly from Docker Hub	2026-07-12 13:09:19 +02:00
Ivan Gabaldon	21fa7b0be1	[mod] ci: rework workflows (#6401 ) * [mod] ci: rework workflows mod: ubuntu 26.04 runners mod: remove podman-static mod: longer container cache mod: remove useless pr information mod: sort steps fix: use commit ref on workflow_run children fix: missing container workflow_run check fix: nodejs cache * [fix] ci: apply suggestions https://github.com/searxng/searxng/pull/6401#discussion_r3566147961 https://github.com/searxng/searxng/pull/6401#discussion_r3566147970	2026-07-12 13:04:11 +02:00