Commit Graph

  • 112f919026 Bump github/codeql-action from 4.38.2 to 4.39.3 dependabot/github_actions/github/codeql-action-4.39.3 dependabot[bot] 2026-11-10 12:33:25 +00:00
  • 93a477e1de Bump sigstore/cosign-installer from 4.1.2 to 4.1.3 dependabot/github_actions/sigstore/cosign-installer-4.1.3 dependabot[bot] 2026-11-10 12:33:15 +00:00
  • e7cde9b3fa v1.1.0 main v1.1.0 Maurus Decimus 2026-11-09 11:40:52 +01:00
  • 8b32686532 v1.0.3 v1.0.3 Maurus Decimus 2026-11-04 09:22:00 +01:00
  • 1d66d65daf v1.0.2 v1.0.2 Maurus Decimus 2026-11-02 12:15:29 +01:00
  • 23b69755cb v1.0.1 v1.0.1 Maurus Decimus 2026-10-28 14:44:59 +01:00
  • 47df4c0bae v1.0.0 v1.0.0 Maurus Decimus 2026-10-26 16:45:06 +01:00
  • aa47d8ef7b Pin WebUI to 1.x v0.16.27 Maurus Decimus 2026-10-18 19:54:34 +02:00
  • 2321f1b5aa Add STALWART_INCLUDE_SECRETS migration helper Maurus Decimus 2026-10-18 19:44:35 +02:00
  • 1e38a0e684 Fix iTIP: Merging a received update does not copy the VTIMEZONE definitions it carries, so an occurrence moved by an external organizer can reference a TZID (for example W. Europe Standard Time) the stored event no longer defines, and Apple Calendar shows both the original and the moved occurrence. Maurus Decimus 2026-10-18 19:08:50 +02:00
  • b9bf134066 Fix IMAP: APPEND and COPY/MOVE into another accounts mailbox do not change the JMAP EmailDelivery state Maurus Decimus 2026-10-15 17:27:39 +02:00
  • 6296929fc4 Fix WebDAV: PROPFIND allprop returns DAV:current-user-principal, so Windows Explorer shows every file and folder under the account name Maurus Decimus 2026-10-15 17:21:11 +02:00
  • 21e1831dee Fix OAuth: Loopback redirect URIs without a path (for example http://127.0.0.1:45678) are not matched against registered loopback URIs on any port and are rejected by dynamic client registration Maurus Decimus 2026-10-15 17:07:06 +02:00
  • e27d49154f Fix IMAP: SEARCH RETURN with MIN or MAX alongside ALL returns only the minimum and maximum in ALL, and SAVE combined with MIN or MAX and ALL or COUNT saves only the minimum and maximum instead of every match Maurus Decimus 2026-10-15 16:42:24 +02:00
  • ee36325cff Bump dns-update to 0.6.0 Maurus Decimus 2026-10-15 16:23:58 +02:00
  • 17dfe18c49 Bump ossf/scorecard-action from 2.4.4 to 2.5.0 dependabot/github_actions/ossf/scorecard-action-2.5.0 dependabot[bot] 2026-10-14 17:41:14 +00:00
  • 5f78f6c125 Bump actions/upload-artifact from 7.0.1 to 7.0.2 dependabot/github_actions/actions/upload-artifact-7.0.2 dependabot[bot] 2026-10-14 17:38:44 +00:00
  • 18f4e95050 v0.16.26 v0.16.26 Maurus Decimus 2026-10-11 18:03:07 +02:00
  • d954151e96 Use patched hickory-dns fork with DNSSEC fixes Maurus Decimus 2026-10-11 17:43:45 +02:00
  • c2edf1613b Add sd_notify support (#3331) KateandMaurus Decimus 2026-10-11 16:44:24 +02:00
  • 1ff6e70ea1 Fix JMAP: A VacationResponse/set that only sets isEnabled on an account without a vacation response activates an empty Sieve script Maurus Decimus 2026-10-11 15:54:25 +02:00
  • 8a7e4485df Fix JMAP: onSuccessUpdateEmail and onSuccessDestroyEmail entries in EmailSubmission/set that name an existing submission by id update or destroy the Email with the same id instead of the submissions own Email Maurus Decimus 2026-10-11 15:48:15 +02:00
  • 2f5b9f2c69 CI improvements Maurus Decimus 2026-10-08 15:02:27 +02:00
  • d9d2372a4c Bump to rust-s3 0.38 Maurus Decimus 2026-10-08 11:04:58 +02:00
  • b3982081fd Fix OIDC: When the access token lacks the claimUsername claim but has an email claim, the account is built from email without consulting the userinfo endpoint Maurus Decimus 2026-10-08 10:48:38 +02:00
  • 2af9acfd61 Fix Milter: End-of-headers is not sent to milters that negotiate SMFIP_NOHDRS without SMFIP_NOEOH, so the transaction stalls until it times out Maurus Decimus 2026-10-08 10:37:49 +02:00
  • 92c998138e Fix RocksDB: Blob garbage collection rewrites every stored blob on each compaction of the blobs column family, about once per 128MB of new mail Maurus Decimus 2026-10-08 10:35:25 +02:00
  • 7d2fbd75d8 Fix JMAP: Mailbox/set allows duplicate sibling names when moving a mailbox and rejects case-only renames Maurus Decimus 2026-10-08 10:28:28 +02:00
  • 3f657330c0 Fix CI v0.16.25 Maurus Decimus 2026-10-05 07:04:56 +02:00
  • 6cf6f3c6d0 Fix Spam filter: Removing a duplicate training sample of a message reclassified on the same day clears the blob link of the sample that is kept Maurus Decimus 2026-10-04 19:00:26 +02:00
  • 293c66e4c4 Fix WebUI: A blob store read error at startup, such as an S3 authentication failure, stops the web interface from being downloaded Maurus Decimus 2026-10-04 18:43:53 +02:00
  • 063e4ac90c Fix RocksDB: The info log (LOG, LOG.old.*) grows without limit because log rotation and retention are left at RocksDB defaults Maurus Decimus 2026-10-04 18:39:02 +02:00
  • 4e86c7ad2c DNSBL fixes Maurus Decimus 2026-10-04 18:35:53 +02:00
  • a674be967a Fix MTA: Queue quotas with an empty match expression are never enforced, including the global queue quota created on first start Maurus Decimus 2026-10-04 18:20:21 +02:00
  • 7b3af0dc21 Fix Spam filter: Messages with no text line long enough for a Pyzor digest are checked with the digest of empty input and tagged PYZOR Maurus Decimus 2026-10-04 18:16:58 +02:00
  • 57e6cb10e7 DKIM fixes Maurus Decimus 2026-10-04 18:13:19 +02:00
  • 45133dbca6 Updated dependabot scope Maurus Decimus 2026-10-03 10:08:52 +02:00
  • b48449d8a8 Bump github/codeql-action from 4.37.4 to 4.38.2 (#3321) dependabot[bot] 2026-10-03 10:03:12 +02:00
  • e375b11fa8 Bump actions/github-script from 7 to 9 (#3281) dependabot[bot] 2026-10-03 10:02:10 +02:00
  • 6f6942ae57 Fix IMAP: LOGIN and AUTHENTICATE with a wrong, expired or unknown app password or API key are answered with an untagged NO, so clients keep waiting for the command to complete until the connection times out Stalwart Official 2026-10-01 11:22:27 +02:00
  • 69038eaea8 Fix Autodiscover: Requests for a response schema other than Outlooks, such as ActiveSync (mobilesync), are answered with the Outlook settings instead of error 601 Stalwart Official 2026-10-01 11:00:39 +02:00
  • 51791f5dce Fix JMAP: Creating a MaskedEmail with emailDomain fails with forbidden for every domain when the account has addresses on more than one domain Stalwart Official 2026-10-01 10:49:48 +02:00
  • 96059c2fc6 Fix error message (#3324) MaximAL 2026-10-01 11:32:32 +03:00
  • 648df2d6f1 Add LLM guidelines Maurus Decimus 2026-09-30 09:34:22 +02:00
  • af37a23498 v0.16.24 v0.16.24 Stalwart Official 2026-09-27 18:15:10 +02:00
  • df1e7b3c2b Fix IMAP: COPY and MOVE fail with NO [CONTACTADMIN] when another session changes the same message at the same time Stalwart Official 2026-09-27 16:07:08 +02:00
  • dc1146ae14 Fix HTTP: Idle keep-alive connections are never closed Stalwart Official 2026-09-27 15:54:00 +02:00
  • 69317e49cf Fix MTA: A DATA stage Sieve script does not see headers added by milters or MTA hooks, and discards every milter and MTA hook change when it edits the message Stalwart Official 2026-09-27 15:49:15 +02:00
  • a2d3950a1e Fix JMAP: Email/set with a full mailboxIds object identical to the current mailboxes, together with a keyword change, stores the message with IMAP UID 0, so IMAP clients stop seeing it Stalwart Official 2026-09-27 15:27:07 +02:00
  • 5247a7786e Fix Autodiscover: Implicit TLS ports (993, 995, 465) are advertised with <Encryption>TLS</Encryption>, which Outlook reads as STARTTLS Stalwart Official 2026-09-27 15:17:38 +02:00
  • a0053a70de DNS: PowerDNS Authoritative provider for automatic DNS record management Stalwart Official 2026-09-26 17:53:15 +02:00
  • 0250301558 Fix MySQL: Range deletions and search index removals start with a single unbounded DELETE and switch to chunks only after a timeout Maurus Decimus 2026-09-25 09:29:44 +02:00
  • 3ad3471e12 Fix MTA: MX records are resolved through the DNSSEC-validating resolver even when DANE is disabled Maurus Decimus 2026-09-24 20:22:07 +02:00
  • 23f76bd236 Fix MTA: A node without the outboundMta role stops replying to DATA and to JMAP submissions once about 1024 messages have been queued on it Maurus Decimus 2026-09-24 19:53:23 +02:00
  • c133dd4d11 Fix JMAP: Email/import rejects a blobId that refers to a Blob/upload creation id in the same request ("#u0") with Invalid blob id. Maurus Decimus 2026-09-24 19:37:53 +02:00
  • 9ddc3582f7 JMAP Push fixes Maurus Decimus 2026-09-24 19:27:08 +02:00
  • b16d7289e3 Fix Spam filter: Updating the rules reports success when objects fail to import, or when a configuration error stops the updated settings from being activated Maurus Decimus 2026-09-24 18:29:20 +02:00
  • b3cf4736e0 Fix Spam filter: Updating the rules only adds new objects, so upstream changes to existing rules, DNSBL servers, HTTP lookups, lookup keys and file extensions never reach an existing installation Maurus Decimus 2026-09-24 18:26:22 +02:00
  • 008e97b179 Fix Antispam: Incremental training never advances its position past the first run Maurus Decimus 2026-09-24 18:15:23 +02:00
  • b00ab00f69 Spam filter fixes Maurus Decimus 2026-09-24 18:13:08 +02:00
  • 912de3d517 Fix Troubleshoot tool: TLSA records are looked up for every MX host, including hosts whose zone is not DNSSEC signed Maurus Decimus 2026-09-24 18:05:07 +02:00
  • 46e5bada31 Move Redis script to struct Maurus Decimus 2026-09-24 17:42:51 +02:00
  • 9d1c75ab68 Meilisearch fail on timeout changes v0.16.23 Maurus Decimus 2026-09-21 09:57:45 +02:00
  • 3eb07ea985 Redis fixes Maurus Decimus 2026-09-21 09:34:14 +02:00
  • ca5f18853d Fix Spam filter: Moving or copying a message from one account into another creates no training sample, so the classifier never learns from it Maurus Decimus 2026-09-21 09:17:15 +02:00
  • 66bcba4296 Fix ACME: The _acme-challenge TXT records published for a DNS-01 authorization are never removed Maurus Decimus 2026-09-21 08:50:19 +02:00
  • 87de8601bb Expressions: bit_and function Maurus Decimus 2026-09-21 08:43:47 +02:00
  • e963dddb83 Fix POP3: TOP msg n counts the n lines from the first byte of the message instead of from the first byte of the body Maurus Decimus 2026-09-18 15:33:35 +02:00
  • b5f267f524 Fix MTA: DSNs that cannot be written to the store are discarded, the recipients are flagged as notified and the original message is removed from the queue, losing both the bounce and the message Maurus Decimus 2026-09-18 15:21:13 +02:00
  • 9c63da3611 Fix OIDC: Bearer tokens that carry no email, preferred_username or upn claim are always authenticated against the default directory Maurus Decimus 2026-09-18 14:51:33 +02:00
  • de4aed29e6 Fix MTA: DMARC aggregate reports carry two spf elements per record and the version element of a DMARC aggregate report is written as 1 instead of 1.0 Maurus Decimus 2026-09-18 14:27:24 +02:00
  • 99b843af67 Fix MTA: A mailing list whose recipients include another mailing list is accepted at RCPT TO and then rejected at local delivery with 550 5.5.0 Mailbox not found Maurus Decimus 2026-09-18 13:49:36 +02:00
  • 059e10698a Fix FoundationDB: The cached read version is invalidated when any broadcast is received from another node Maurus Decimus 2026-09-18 12:14:12 +02:00
  • e82d78be3f Fix DNS: The DNSSEC resolver queries a single nameserver at a time, working around a hickory-resolver race that cancels the TCP retry when two nameservers return a truncated response in parallel Maurus Decimus 2026-09-18 11:51:31 +02:00
  • 1f802ab54e Fix WebUI: A failed update no longer takes an Application offline Maurus Decimus 2026-09-18 11:46:30 +02:00
  • 5afbee6166 Retry destroy account actions Maurus Decimus 2026-09-18 09:45:20 +02:00
  • d9dee0ad4f Bump dependencies Maurus Decimus 2026-09-15 17:01:35 +02:00
  • 474dd0229c DMARC fixes v0.16.22 Maurus Decimus 2026-09-13 17:14:38 +01:00
  • 8a893ab25f Fix Sieve: Messages filed with fileinto by a user script are treated as ham and are no longer moved to Junk when classified as spam Maurus Decimus 2026-09-13 08:53:45 +01:00
  • e94af0eab0 Fix JMAP: CalendarEvent/get and ContactCard/get return only id when the properties argument is an empty list, instead of every property Maurus Decimus 2026-09-13 08:35:49 +01:00
  • 5081e39769 Fix JMAP: CalendarEvent/get returns null for requested recurrenceRule and recurrenceOverrides properties on synthetic recurrence instances Maurus Decimus 2026-09-13 08:11:36 +01:00
  • 998bc8c557 Fix JMAP: CalendarEvent/get returns null for baseEventId unless the id is a synthetic recurrence instance Maurus Decimus 2026-09-13 08:07:32 +01:00
  • fc3df39e70 Fix JMAP: CalendarEvent/set stores useDefaultAlerts per user, and CalendarEvent/get returns false when it was never set Maurus Decimus 2026-09-13 08:04:24 +01:00
  • 673948f196 Minor security fixes Maurus Decimus 2026-09-13 07:52:46 +01:00
  • 115956669c Bump to mail-builder 1.0.0 Maurus Decimus 2026-09-12 22:58:58 +01:00
  • 9eca3dcb97 Fix FoundationDB: The cached read version is invalidated when a queue refresh or registry change broadcast is received Maurus Decimus 2026-09-11 09:21:20 +01:00
  • ad5d10a62d Fix MTA: Inbound throttle, outbound throttle and queue quota match expressions evaluate their if/then conditions Maurus Decimus 2026-09-11 08:45:35 +01:00
  • 1cc909e50a Fix DNS: Append . to MX record hostnames Maurus Decimus 2026-09-11 08:35:14 +01:00
  • b86b224967 Fix OIDC: Discovery is retried for 30 seconds before the directory is marked as unavailable, so a provider that is still starting up no longer requires a restart Maurus Decimus 2026-09-10 20:03:54 +01:00
  • 864561ee0d Fix Recovery mode: Automatic IP banning is disabled during recovery and initial setup Maurus Decimus 2026-09-10 19:38:44 +01:00
  • 9d56d7df10 Fix WebUI: The cached bundle of an Application is discarded when its resourceUrl changes or the record is deleted, so the next unpack fetches the new resource Maurus Decimus 2026-09-10 19:34:30 +01:00
  • 9064735363 iMIP: Notification subjects and bodies omit the event start date, time and timezone for recurring events Maurus Decimus 2026-09-10 19:22:00 +01:00
  • 4f7a73a423 Fix WebDAV: PROPFIND responses do not declare the namespace of every requested property on the DAV:multistatus element Maurus Decimus 2026-09-10 19:00:20 +01:00
  • 515d6a90a5 Fix MTA: SMTP session state obtained before STARTTLS is discarded once the TLS handshake completes, as required by RFC 3207 Maurus Decimus 2026-09-10 08:22:27 +01:00
  • 6d33d47509 Bump mail-parser Maurus Decimus 2026-09-10 07:45:41 +01:00
  • e962003857 Fix JMAP: Calendar synthetic ids returned when expanding recurrences identify an occurrence by its recurrence id v0.16.21 Maurus Decimus 2026-09-06 16:57:01 +02:00
  • 7fd75df825 Fix Spam filter: Domain and URL blocklists are queried only for text written as a link Maurus Decimus 2026-09-06 15:51:52 +02:00
  • 0c21fa5030 Fix default schema generation Maurus Decimus 2026-09-06 09:49:09 +02:00
  • 0d20a9578f OpenTelemetry: log exporter does not include the parent spans attributes Maurus Decimus 2026-09-06 09:10:19 +02:00
  • d2b88d195e Fix MTA: Inbound DMARC and TLS aggregate reports that a reporter sends more than once are imported again as a duplicate entry Maurus Decimus 2026-09-04 14:03:55 +02:00