57e2f94254
ASN and GeoIP default location update
2026-08-16 15:23:14 +02:00
73d27006e1
HTTP: Shared reqwest clients
2026-08-14 18:24:55 +02:00
ec86180c0f
MTA queue and RocksDB improvements
2026-08-13 18:58:29 +02:00
d2d16a0186
Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report
2026-08-12 16:37:16 +02:00
436deaf592
Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version=
2026-08-08 20:02:07 +02:00
61df5a1857
Bump dependencies
2026-08-03 18:11:26 +02:00
4df2a66705
Fix Redis: Task and queue locks are never released after a worker dies, because failed lock attempts refresh the lock expiry
2026-08-02 17:59:55 +02:00
cf050ae5b0
S3: accessKey can now be read from an environment variable or file
2026-08-02 12:11:56 +02:00
c86bb66044
Fix Meilisearch: Verify index existence using GET instead of creating a new task which times out on busy servers
2026-07-31 10:04:43 +02:00
092c3217e4
JMAP Email Delivery Push Notifications
2026-07-29 18:41:21 +02:00
aa9f47cdb6
Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights
2026-07-23 15:49:30 +02:00
2553d8ee4c
Fix Telemetry: Tasks are serialized to the wrong store when using separate stores for telemetry and data
2026-07-20 11:35:46 +02:00
6fb4d2b628
IMAP: Mailbox object-quota only enforced in JMAP
2026-07-19 07:52:31 +02:00
2543ec7067
Bump dependencies
2026-07-12 11:39:02 +02:00
448f735d55
Fix Store PostgreSQL channel binding ( #3212 )
...
The former behaviour to always use a SHA-256 hash of the server
certificate for the tls-server-end-point channel binding was
incorrect with regard to RFC5929, which specifies if the signature
algorithm uses a single hash function, that hash function should be
used, unless the signature algorithm uses MD5 or SHA-1, in which
case the channel binding should use an SHA-256 hash.
This change attempts to align with the behaviour of OpenSSL, used
by PostgreSQL, in using the signature algorithm's hash function.
2026-07-08 23:00:16 +02:00
74ac0a7f0d
Fix Meilisearch: Limit the text search scope using attributesToSearchOn
2026-07-05 11:22:09 +02:00
8d229d6c9b
Fix PostgreSQL: Include error chain in error messages
2026-06-28 18:50:47 +02:00
0eb08b9fb3
Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks
2026-06-25 19:24:10 +02:00
93b3b70616
Redis Sentinel support as an in-memory store and cluster coordinator backend ( closes #2430 )
2026-06-25 10:26:23 +02:00
d1dd00558f
S3: Support for allowInvalidCerts option to allow connecting to S3 endpoints with invalid TLS certificates
2026-06-24 14:21:11 +02:00
df164e07c8
DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records
2026-06-22 23:13:45 +02:00
d174e415fb
Fix JMAP: Email/query: Improper anchor handling
2026-06-18 19:16:22 +02:00
30d12588a2
Fix JMAP: Email/query: Wrong sort order on hasKeyword, allInThreadHaveKeyword, and someInThreadHaveKeyword conditions
2026-06-18 17:21:03 +02:00
69c2b052de
RocksDB: Enable blob garbage collection to reclaim disk space from deleted blobs
2026-06-16 22:06:28 +02:00
3f2c5632b8
Fix OIDC: Add default domain name to groups that are not email addresses
2026-06-16 21:51:48 +02:00
e07fb0a7c1
Use testcontainers for integration tests
2026-06-11 18:08:13 +02:00
2cc3903cda
FoundationDB: Fix read version cache expiration logic
2026-06-11 15:54:00 +02:00
33f288d0ea
Fix JMAP: */changes methods leak ids of non-shared objects
2026-06-10 13:51:36 +02:00
bfd8e2cfc6
Fix Rate limiter panics when periods under 1 second are used
2026-06-06 11:24:55 +02:00
0fdcdd4f87
Bump dependencies
2026-06-03 19:57:12 +02:00
838a839290
OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change
2026-06-03 18:14:48 +02:00
777cf1252b
RateLimit header fields for HTTP
2026-05-23 11:41:43 +02:00
83a1543483
Fix ACL: Orphaned ACL entries for deleted accounts cause JMAP session errors
2026-05-19 20:06:09 +02:00
415036dd64
Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege
2026-05-12 15:47:32 +02:00
bdba3f20e1
v0.16.5
2026-05-11 17:14:26 +02:00
0513f5fe57
v0.16.4
2026-05-05 12:14:44 +02:00
8632f9b43a
Allow multiple FoundationDB instances in the same process
2026-05-04 18:05:08 +02:00
9a575d9438
Timezone changes from the AccountSettings object return invalidProperties
2026-05-01 14:55:38 +02:00
eea9203dc1
Replaced STALWART_HTTPS_PORT with STALWART_PUBLIC_URL
2026-04-30 09:41:56 +02:00
450a76d56d
Fix node id renewal
2026-04-29 11:38:13 +02:00
0b7492240b
Fix log viewer: All events show as INFO.
2026-04-29 09:02:34 +02:00
ed849e86ba
v0.16.2
2026-04-28 16:11:49 +02:00
3e07a0fb19
S3: Add verifyAfterWrite option to verify that objects have persisted after writing
2026-04-28 14:33:20 +02:00
52733408dc
Reduce minimum TLS certificate validity from 86400 to 3600 seconds
2026-04-24 20:18:38 +02:00
fb9a1cc211
WebDAV: Fix ACL validation for target folders.
2026-04-24 20:11:48 +02:00
cedefe70bf
Fix JMAP sorting order issues when emails lack receivedAt headers
2026-04-23 16:40:20 +02:00
2fd3f208bd
Add STALWART_HTTPS_PORT variable
2026-04-22 08:41:46 +02:00
8abe783677
Do not include port number when constructing HTTP base URLs
2026-04-21 15:27:02 +02:00
986c71811f
Renamed STALWART_BASE_URL to STALWART_HTTP_PORT
2026-04-21 14:39:30 +02:00
0fac0754e5
HTTP: Added STALWART_BASE_URL to override the base URL used in HTTP responses
2026-04-21 13:59:38 +02:00
Maurus Decimus
Hugh Cole-Baker