Update freshrss/freshrss Docker tag to v1.27.0 (#1253)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [freshrss/freshrss](https://freshrss.org/) ([source](https://github.com/FreshRSS/FreshRSS)) | minor | `1.26.3` -> `1.27.0` |

---

### Release Notes

<details>
<summary>FreshRSS/FreshRSS (freshrss/freshrss)</summary>

### [`v1.27.0`](https://github.com/FreshRSS/FreshRSS/blob/HEAD/CHANGELOG.md#2025-08-18-FreshRSS-1270)

[Compare Source](https://github.com/FreshRSS/FreshRSS/compare/1.26.3...1.27.0)

- Features
  - Implement support for HTTP `429 Too Many Requests` and `503 Service Unavailable`, obey `Retry-After` [#&#8203;7760](https://github.com/FreshRSS/FreshRSS/pull/7760)
  - Add sort by category title, or by feed title [#&#8203;7702](https://github.com/FreshRSS/FreshRSS/pull/7702)
  - Add search operator `c:` for categories like `c:23,34` or `!c:45,56` [#&#8203;7696](https://github.com/FreshRSS/FreshRSS/pull/7696)
  - Custom feed favicons [#&#8203;7646](https://github.com/FreshRSS/FreshRSS/pull/7646), [#&#8203;7704](https://github.com/FreshRSS/FreshRSS/pull/7704), [#&#8203;7717](https://github.com/FreshRSS/FreshRSS/pull/7717),
    [#&#8203;7792](https://github.com/FreshRSS/FreshRSS/pull/7792)
  - Rework fetch favicons for fewer HTTP requests [#&#8203;7767](https://github.com/FreshRSS/FreshRSS/pull/7767)
  - Add more unicity criteria based on title and/or content [#&#8203;7789](https://github.com/FreshRSS/FreshRSS/pull/7789)
  - Automatically restore user configuration from backup [#&#8203;7682](https://github.com/FreshRSS/FreshRSS/pull/7682)
  - API add support for states in `s` parameter of `streamId` [#&#8203;7695](https://github.com/FreshRSS/FreshRSS/pull/7695)
  - Improve sharing via Print [#&#8203;7728](https://github.com/FreshRSS/FreshRSS/pull/7728)
  - Redirect to the login page from bookmarklet instead of 403 [#&#8203;7782](https://github.com/FreshRSS/FreshRSS/pull/7782)
  - Clean local cache more often, when refreshing feeds [#&#8203;7827](https://github.com/FreshRSS/FreshRSS/pull/7827)
- Security
  - Implement reauthentication (*sudo* mode) [#&#8203;7753](https://github.com/FreshRSS/FreshRSS/pull/7753)
  - Add `Content-Security-Policy: frame-ancestors` [#&#8203;7677](https://github.com/FreshRSS/FreshRSS/pull/7677)
  - Ensure CSP everywhere [#&#8203;7810](https://github.com/FreshRSS/FreshRSS/pull/7810)
  - Show warning when unsafe CSP policy is in use [#&#8203;7804](https://github.com/FreshRSS/FreshRSS/pull/7804)
  - Fix access rights when creating a new user [#&#8203;7783](https://github.com/FreshRSS/FreshRSS/pull/7783)
  - Improve security of form for user details [#&#8203;7771](https://github.com/FreshRSS/FreshRSS/pull/7771), [#&#8203;7786](https://github.com/FreshRSS/FreshRSS/pull/7786)
  - Disallow setting non-existent theme [#&#8203;7722](https://github.com/FreshRSS/FreshRSS/pull/7722)
  - Regenerate cookie ID after logging out [#&#8203;7762](https://github.com/FreshRSS/FreshRSS/pull/7762)
  - Require current password when setting new password [#&#8203;7763](https://github.com/FreshRSS/FreshRSS/pull/7763)
  - Add missing access checks for feed-related actions [#&#8203;7768](https://github.com/FreshRSS/FreshRSS/pull/7768)
  - Strip more unsafe attributes such as `referrerpolicy`, `ping` [#&#8203;7770](https://github.com/FreshRSS/FreshRSS/pull/7770)
  - Remove unneeded execution permissions [#&#8203;7802](https://github.com/FreshRSS/FreshRSS/pull/7802)
- Bug fixing
  - Fix redirections when scraping from HTML [#&#8203;7654](https://github.com/FreshRSS/FreshRSS/pull/7654), [#&#8203;7741](https://github.com/FreshRSS/FreshRSS/pull/7741)
  - Fix multiple authentication HTTP headers [#&#8203;7703](https://github.com/FreshRSS/FreshRSS/pull/7703)
  - Fix HTML queries with a single feed [#&#8203;7730](https://github.com/FreshRSS/FreshRSS/pull/7730)
  - WebSub: only perform a redirection when coming from WebSub [#&#8203;7738](https://github.com/FreshRSS/FreshRSS/pull/7738)
  - Include enclosures in entries’ hash [#&#8203;7719](https://github.com/FreshRSS/FreshRSS/pull/7719)
    - Negative side-effect: users of the option to *automatically mark updated articles as unread* will once have some articles with enclosures re-appear as unread
  - Fix cancellation of slider exit UI [#&#8203;7705](https://github.com/FreshRSS/FreshRSS/pull/7705)
  - Honor *disable update* on update page [#&#8203;7733](https://github.com/FreshRSS/FreshRSS/pull/7733)
  - Fix no registration limit setting [#&#8203;7751](https://github.com/FreshRSS/FreshRSS/pull/7751)
  - Fix XML encoding of sharing functions [#&#8203;7822](https://github.com/FreshRSS/FreshRSS/pull/7822)
- SimplePie
  - Fix propagation of HTTP error codes [#&#8203;7670](https://github.com/FreshRSS/FreshRSS/pull/7670)
  - Fix support for XML feeds with HTML entities [#&#8203;7689](https://github.com/FreshRSS/FreshRSS/pull/7689), [simplepie#915](https://github.com/simplepie/simplepie/pull/915)
  - Fix feeds encoded in UTF-16LE [#&#8203;7691](https://github.com/FreshRSS/FreshRSS/pull/7691), [simplepie#916](https://github.com/simplepie/simplepie/pull/916)
  - Various upstream contributions [simplepie#917](https://github.com/simplepie/simplepie/pull/917), [simplepie#924](https://github.com/simplepie/simplepie/pull/924),
    [simplepie#926](https://github.com/simplepie/simplepie/pull/926), [simplepie#932](https://github.com/simplepie/simplepie/pull/932), [simplepie#933](https://github.com/simplepie/simplepie/pull/933)
  - Sync upstream [#&#8203;7706](https://github.com/FreshRSS/FreshRSS/pull/7706), [FreshRSS/simplepie#45](https://github.com/FreshRSS/simplepie/pull/45), [#&#8203;7775](https://github.com/FreshRSS/FreshRSS/pull/7775),
    [FreshRSS/simplepie#50](https://github.com/FreshRSS/simplepie/pull/50), [#&#8203;7824](https://github.com/FreshRSS/FreshRSS/pull/7824), [#&#8203;7825](https://github.com/FreshRSS/FreshRSS/pull/7825),
  - Fix regex *Backtrack limit was exhausted* in `clean_hash()` [#&#8203;7813](https://github.com/FreshRSS/FreshRSS/pull/7813), [FreshRSS/simplepie#48](https://github.com/FreshRSS/simplepie/pull/48)
- Deployment
  - Docker default image (Debian 12 Bookworm) updated to PHP 8.2.29 [#&#8203;7805](https://github.com/FreshRSS/FreshRSS/pull/7805)
  - Docker alternative image updated to Alpine 3.22 with PHP 8.4.11 and Apache 2.4.65 [#&#8203;7740](https://github.com/FreshRSS/FreshRSS/pull/7740), [#&#8203;7740](https://github.com/FreshRSS/FreshRSS/pull/7740),
    [#&#8203;7803](https://github.com/FreshRSS/FreshRSS/pull/7803)
  - Start supporting PHP 8.5+ [#&#8203;7787](https://github.com/FreshRSS/FreshRSS/pull/7787), [#&#8203;7826](https://github.com/FreshRSS/FreshRSS/pull/7826)
    - Docker Alpine dev image `:newest` updated to PHP 8.5-alpha and Apache 2.4.65 [#&#8203;7773](https://github.com/FreshRSS/FreshRSS/pull/7773)
  - Docker: interpolate `FRESHRSS_INSTALL` and `FRESHRSS_USER` variables [#&#8203;7725](https://github.com/FreshRSS/FreshRSS/pull/7725)
  - Docker: Reduce how much data needs to be chown/chmod’ed on container startup [#&#8203;7793](https://github.com/FreshRSS/FreshRSS/pull/7793)
  - Test for database PDO typing support during install (relevant for MySQL / MariaDB with obsolete driver) [#&#8203;7651](https://github.com/FreshRSS/FreshRSS/pull/7651)
- Extensions
  - Add API endpoint for extensions [#&#8203;7576](https://github.com/FreshRSS/FreshRSS/pull/7576)
  - Expose the reading modes for extensions [#&#8203;7668](https://github.com/FreshRSS/FreshRSS/pull/7668), [#&#8203;7688](https://github.com/FreshRSS/FreshRSS/pull/7688)
  - New extension hook `before_login_btn` [#&#8203;7761](https://github.com/FreshRSS/FreshRSS/pull/7761)
- UI
  - Improve *mark as read* request showing popup due to `onbeforeunload` [#&#8203;7554](https://github.com/FreshRSS/FreshRSS/pull/7554)
  - Fix lazy-loading for `<video poster="...">` and `<image>` [#&#8203;7636](https://github.com/FreshRSS/FreshRSS/pull/7636)
  - Avoid styling `<code>` inside of `<pre>` [#&#8203;7797](https://github.com/FreshRSS/FreshRSS/pull/7797)
  - Improve confirmation logic with `data-auto-leave-validation` [#&#8203;7785](https://github.com/FreshRSS/FreshRSS/pull/7785)
  - Update `chart.js` to 4.5.0 [#&#8203;7752](https://github.com/FreshRSS/FreshRSS/pull/7752), [#&#8203;7816](https://github.com/FreshRSS/FreshRSS/pull/7816)
  - Various UI and style improvements: [#&#8203;7616](https://github.com/FreshRSS/FreshRSS/pull/7616), [#&#8203;7811](https://github.com/FreshRSS/FreshRSS/pull/7811)
- I18n
  - Show translation status in README [#&#8203;7715](https://github.com/FreshRSS/FreshRSS/pull/7715)
  - Improve Indonesian [#&#8203;7654](https://github.com/FreshRSS/FreshRSS/pull/7654), [#&#8203;7721](https://github.com/FreshRSS/FreshRSS/pull/7721)
  - Improve Persian [#&#8203;7795](https://github.com/FreshRSS/FreshRSS/pull/7795)
- Misc.
  - Improve PHP code [#&#8203;7642](https://github.com/FreshRSS/FreshRSS/pull/7642), [#&#8203;7665](https://github.com/FreshRSS/FreshRSS/pull/7665), [#&#8203;7761](https://github.com/FreshRSS/FreshRSS/pull/7761),
    [#&#8203;7781](https://github.com/FreshRSS/FreshRSS/pull/7781), [#&#8203;7794](https://github.com/FreshRSS/FreshRSS/pull/7794)
  - Update dev dependencies [#&#8203;7708](https://github.com/FreshRSS/FreshRSS/pull/7708), [#&#8203;7709](https://github.com/FreshRSS/FreshRSS/pull/7709), [#&#8203;7710](https://github.com/FreshRSS/FreshRSS/pull/7710),
    [#&#8203;7711](https://github.com/FreshRSS/FreshRSS/pull/7711), [#&#8203;7776](https://github.com/FreshRSS/FreshRSS/pull/7776), [#&#8203;7777](https://github.com/FreshRSS/FreshRSS/pull/7777)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #1253
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/applications/freshrss/values.yaml

@@ -80,7 +80,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.26.3
+            tag: 1.27.0
             pullPolicy: IfNotPresent
           env:
             - name: PGID