Matthew Meszaros 03fd30f9bc feat: merge decoded-byte image validation with download-safe serving, own-domain form and domain redirects, TLS-only SMTP AUTH negotiation and pinned per-server certificate opt-outs, with MAIL_TLS_INSECURE honoured on self-hosted and development instances and resolved by the control plane for joining nodes

2026-10-23 16:20:30 +02:00

..

accounts-and-access.mdx

feat: redact link query strings in the log mail transport unless APP_ENV names development, log warmup arrivals by task id rather than token, and name the matched route instead of the URI in tracking request spans, with the installer, boot warnings and self-host docs saying where codes and links can be read

2026-10-23 16:06:00 +02:00

admin-panel.mdx

feat: merge main into the mobile app redesign branch, keep both the apollo and appattest handler imports, and renumber the app_attest_keys migration to 000291 now that main holds 000290

2026-10-12 10:40:02 +02:00

architecture.mdx

feat: seal mailbox SMTP/IMAP logins and OAuth tokens under KMS-protected workspace DEKs behind MAILBOX_CREDENTIALS_SEALING, carry them sealed in ADD_EMAIL and token refreshes, reseal stored credentials in a resumable consumer job, and cache DEKs in process with singleflight in front of Redis and KMS

2026-10-22 19:11:23 +02:00

aws-fargate.mdx

feat: require direct database sessions and verify authenticated worker dependencies during AWS deployment

2026-10-22 11:01:04 +02:00

bare-metal.mdx

feat: redesign the admin panel in a black and white dark-first theme with grouped sidebar sections, header tabs, a collapsible animated sidebar and a rebuilt sign-in, alert operators on admin sign-ins and admin access changes through opsnotify, and carry first-touch attribution from the marketing site to every dashboard link

2026-10-05 03:01:22 -07:00

configuration.mdx

feat: merge decoded-byte image validation with download-safe serving, own-domain form and domain redirects, TLS-only SMTP AUTH negotiation and pinned per-server certificate opt-outs, with MAIL_TLS_INSECURE honoured on self-hosted and development instances and resolved by the control plane for joining nodes

2026-10-23 16:20:30 +02:00

coolify.mdx

feat: add production image-only Coolify Compose deployment with domain, secret, backup and setup instructions

2026-10-16 11:47:52 +00:00

data-control.mdx

feat: share one cancellation-proof bounded DEK lookup per organization, bound worker token sealing, reseal empty mailbox credential values, refuse an invalid MAILBOX_CREDENTIALS_SEALING in warmblyctl, keep credential exports gated on the instance key and log workspace-key failures in mailbox erasure

2026-10-22 19:11:23 +02:00

deployment-guide.mdx

feat: redact link query strings in the log mail transport unless APP_ENV names development, log warmup arrivals by task id rather than token, and name the matched route instead of the URI in tracking request spans, with the installer, boot warnings and self-host docs saying where codes and links can be read

2026-10-23 16:06:00 +02:00

events.mdx

feat: give worker SEND_EMAIL commands a 120s deadline that covers the SMTP client's 90s budget, run the worker command subscription under a 195s bus budget (NATS ack wait and Kafka handler context via eventbus.WithHandlerTimeout), and add ordered per-mailbox command lanes on NATS with in-progress heartbeats

2026-10-16 06:57:14 +02:00

first-run.mdx

feat: run the dev seeder and the sandbox seed and simulator only when APP_ENV is explicitly dev, development or local, refusing an unset or production APP_ENV before anything is written, and document the guard on the first-run and sandbox pages

2026-10-23 15:46:52 +02:00

install.mdx

feat: document all-backend upgrade and old-replica drain requirements for suppressed-recipient Unibox forwards in send safety and self-host install docs

2026-10-16 07:30:13 +00:00

instance-health.mdx

feat: merge decoded-byte image validation with download-safe serving, own-domain form and domain redirects, TLS-only SMTP AUTH negotiation and pinned per-server certificate opt-outs, with MAIL_TLS_INSECURE honoured on self-hosted and development instances and resolved by the control plane for joining nodes

2026-10-23 16:20:30 +02:00

local-development.mdx

feat: accept only Salesforce domains as an org's API host and call it through the SSRF-guarded client, register the Warmbly Cloud link only on self-hosted instances behind the instance admin with a second factor and dial it through safehttp with fixed error text, keep automation signing secrets in the sealed connection config, answer integration service failures with fixed messages, add security headers to the forms, tracking and docs origins and TLS 1.2+ to the nginx template, compare the captcha bypass in constant time, require TLS 1.2 for IMAP probes, and drop the unused RSA helpers

2026-10-04 02:58:43 -07:00

meta.json

feat: add Terraform AWS hosting with optional Postgres pooling and migration-gated deployments

2026-10-22 08:57:54 +02:00

operator-notifications.mdx

feat: check every mailbox SMTP and IMAP dial against its resolved peer address in netbind, refusing loopback, private, link-local, CGNAT, multicast and metadata addresses on hosted production and wherever MAIL_ALLOW_PRIVATE_HOSTS=false, render that resolved policy into each joining node's env, and honour WARMBLY_ALLOW_UNSAFE_WEBHOOK_URLS only on self-hosted or development instances

2026-10-23 16:02:52 +02:00

sandbox.mdx

feat: merge decoded-byte image validation with download-safe serving, own-domain form and domain redirects, TLS-only SMTP AUTH negotiation and pinned per-server certificate opt-outs, with MAIL_TLS_INSECURE honoured on self-hosted and development instances and resolved by the control plane for joining nodes

2026-10-23 16:20:30 +02:00

send-safety.mdx

feat: release an authentication send hold when a reconnect passes the provider's login check, recorded as credentials_reverified in migration 000320, expose send_recovery_reason on mailbox status and show the reconnect button under the drawer's health when sending is held for authentication

2026-10-21 12:01:28 +02:00

slack-app.mdx

feat: link Slack members to Warmbly automatically by matching email, add Continue with Slack (Sign in with Slack) for mismatched emails, and move the Slack link page to a standalone /slack/link screen

2026-10-05 05:00:22 +00:00

split-deployment.mdx

feat: deploy configurable Cloudflare Pages project lists from exact releases with isolated dashboard, admin, site and docs builds

2026-10-05 09:48:40 +00:00

troubleshooting.mdx

feat: cap workspace invitations and reviewer tester passwords at 48 hours, quote each invitation's real remaining lifetime in its email, list recently expired invitations behind include_expired on GET /organization/invitations, and add a one-click Resend for expired invitations on the members settings page

2026-10-23 15:57:22 +02:00

updates.mdx

feat: run the updater's UPDATER_COMMAND as an argv of an absolute executable and plain arguments without a shell, pass the self-recreate compose arguments to a constant script positionally, and validate the compose project, profiles and git remote names at updater start

2026-10-23 16:03:02 +02:00

warmblyctl.mdx

feat: count workspace-sealed mailbox credentials separately in warmblyctl keys status and reseal, scan KeyDomainMailbox columns under the instance key, and report sealed-format values no key opens as unreadable instead of legacy plaintext

2026-10-22 19:11:23 +02:00

warmup-generation.mdx

feat: integrate workspace-scoped Cloud ownership with durable consent restrictive standing and send safety while preserving legacy enrollments and renumbering unreleased upgrade migrations

2026-10-07 16:32:30 +00:00

whole-domain-connect.mdx

feat: preserve encrypted credentials and MFA enrollments across staged key rotation with scoped token grace periods

2026-10-22 12:37:19 +02:00