Commit Graph
209 Commits
Author SHA1 Message Date
Maurus Decimus e7cde9b3fa v1.1.0 2026-11-09 11:40:52 +01:00
Maurus Decimus 8b32686532 v1.0.3 2026-11-04 09:22:00 +01:00
Maurus Decimus 1d66d65daf v1.0.2 2026-11-02 12:15:29 +01:00
Maurus Decimus 23b69755cb v1.0.1 2026-10-28 14:44:59 +01:00
Maurus Decimus 47df4c0bae v1.0.0 2026-10-26 16:45:06 +01:00
Maurus Decimus ee36325cff Bump dns-update to 0.6.0 2026-10-15 16:23:58 +02:00
Maurus Decimus 7d2fbd75d8 Fix JMAP: Mailbox/set allows duplicate sibling names when moving a mailbox and rejects case-only renames 2026-10-08 10:28:28 +02:00
Maurus Decimus 648df2d6f1 Add LLM guidelines 2026-09-30 09:34:22 +02:00
Stalwart Official dc1146ae14 Fix HTTP: Idle keep-alive connections are never closed 2026-09-27 15:54:00 +02:00
Maurus Decimus 912de3d517 Fix Troubleshoot tool: TLSA records are looked up for every MX host, including hosts whose zone is not DNSSEC signed 2026-09-24 18:05:07 +02:00
Maurus Decimus 46e5bada31 Move Redis script to struct 2026-09-24 17:42:51 +02:00
Maurus Decimus e82d78be3f Fix DNS: The DNSSEC resolver queries a single nameserver at a time, working around a hickory-resolver race that cancels the TCP retry when two nameservers return a truncated response in parallel 2026-09-18 11:51:31 +02:00
Maurus Decimus d9dee0ad4f Bump dependencies 2026-09-15 17:01:35 +02:00
Maurus Decimus 115956669c Bump to mail-builder 1.0.0 2026-09-12 22:58:58 +01:00
Maurus Decimus 6d33d47509 Bump mail-parser 2026-09-10 07:45:41 +01:00
Maurus Decimus b0dce3c4aa Bump dependencies 2026-09-03 23:20:25 +02:00
Maurus Decimus e7594d35f3 Fix LDAP: Servers that answer an unauthenticated bind (a non-empty DN with a zero-length password) with success no longer authenticate accounts without a password 2026-09-01 08:59:33 +02:00
Maurus Decimus d5db252e20 HTTP: Do not offer Bearer auth on /api endpoints 2026-08-30 11:59:13 +02:00
Maurus Decimus cf6616727b DANE fixes 2026-08-30 08:29:31 +02:00
Maurus Decimus a542981ab9 Merge scim-dev branch into main 2026-08-27 12:13:22 +02:00
Maurus Decimus 5050f9a638 Calendar: Updated HTTP RSVP page 2026-08-25 14:42:42 +02:00
Maurus Decimus 586d49d2ae Fix Directory: /api/discover splits the account name on @ without accounting for the % master user separator or the recovery administrator 2026-08-23 17:48:08 +02:00
Maurus Decimus babc841e45 Fix Calendar: The RSVP link in an iMIP invitation stamps PARTSTAT on the organizers copy of the event only, leaving a local attendees own copy at NEEDS-ACTION and sending the organizer no reply 2026-08-23 16:50:49 +02:00
Maurus Decimus f7cce88868 Sieve fixes 2026-08-23 15:29:29 +02:00
Maurus Decimus 81767700ba Clippy fixes 2026-08-21 11:20:47 +02:00
Maurus Decimus 9497a5d645 Fix JMAP: Email/set writes display names as an RFC 2047 encoded-word wrapped in a quoted-string, which RFC 2047 forbids 2026-08-18 14:33:06 +02:00
Maurus Decimus 77a3a03492 Fix FoundationDB: Older chunked entries are not deleted 2026-08-18 14:05:01 +02:00
Maurus Decimus 3c00a73a87 Fix MTA: DSN bounces are emitted with a malformed Message-ID wrapped in doubled angle brackets 2026-08-16 11:38:55 +02:00
Maurus Decimus d2d16a0186 Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report 2026-08-12 16:37:16 +02:00
Maurus Decimus 436deaf592 Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version= 2026-08-08 20:02:07 +02:00
Maurus Decimus 61df5a1857 Bump dependencies 2026-08-03 18:11:26 +02:00
Maurus Decimus 092c3217e4 JMAP Email Delivery Push Notifications 2026-07-29 18:41:21 +02:00
Maurus Decimus 94cc6b0ad0 Fix Enterprise: Per-tenant logo is not shown on the OAuth login password and OTP screens, which are served from the servers canonical host rather than the tenant domain 2026-07-26 17:17:17 +02:00
Maurus Decimus aa9f47cdb6 Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights 2026-07-23 15:49:30 +02:00
Maurus Decimus 6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus 764c2c1e1c v0.16.13 2026-07-12 19:18:29 +02:00
Maurus Decimus 2543ec7067 Bump dependencies 2026-07-12 11:39:02 +02:00
Maurus Decimus 548ff03f30 OAuth resource indicators: Accept imap, smtp, pop3 and sieve as valid resource indicators for OAuth access tokens 2026-07-06 15:37:57 +02:00
Maurus Decimus 00ca557340 Fix OIDC: Allow ports in redirect_uri for loopback addresses 2026-07-04 07:39:16 +02:00
Maurus Decimus 94b33187a0 DKIM2 tests 2026-07-03 20:07:37 +02:00
Maurus Decimus 186d9feecb DKIM2 verification 2026-07-01 16:20:02 +02:00
Maurus Decimus e3c6f95bfd Bump to mail-auth 0.11 2026-06-30 11:53:55 +02:00
Maurus Decimus 0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus 88412f9540 Troubleshoot tool: Use the configured source IP address when connecting to remote servers (fixes #2867) 2026-06-19 17:04:43 +02:00
Maurus Decimus 169590208d Fix JMAP: Reject requests that do not specify application/json in the Content-Type header 2026-06-18 18:17:55 +02:00
Maurus Decimus b1880c8670 HTTP: Add redirectRoot option to Http object 2026-06-17 19:30:36 +02:00
Maurus Decimus 8778e1bc45 OAuth client secret verification for confidential clients 2026-06-17 19:04:01 +02:00
Maurus Decimus a6e1f97915 OAuth Profile for Open Public Clients 2026-06-17 18:04:46 +02:00
Maurus Decimus 3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00