warmbly

Merge pull request #926 from warmbly/devin/1791630200-combined-restricted-member-security

2026-10-10 12:07:57 +00:00

Merge pull request #931 from warmbly/devin/1791640209-provider-sync-recovery

2026-10-10 14:53:43 +00:00

feat: make Warmbly Cloud warmup start and explain itself for linked mailboxes: apply the instance's warmup settings, start warmup on adopted mailboxes, read the warmup day mask Monday-first, report the last refused warmup send and the partner cap to the instance and dashboard, hand changed SMTP credentials to the cloud, refuse cleartext mailboxes at enrollment, and show cloud warmup with the warming animation and a clear Cloud marker

2026-10-01 03:01:36 -07:00

cli

fix: address the review on the CLI PR: give the sign-in handshake its own per-IP budget so a 200-poll login cannot lock the address out of the browser login, keep https for a remote host that names a port instead of sending a bearer token in cleartext, report truncation when a paginated walk stops at max-pages, accept a piped secret with no trailing newline, normalise WEBSOCKET_URL on its suffix so a bare /socket becomes a real endpoint, destroy a minted secret the moment its code expires, gate cli-installer-ci on the required status check, print a rejected flag instead of an unbound-variable error, and use a portable sha256 so the packaging runs on macOS

2026-09-04 21:03:58 -07:00

client

feat: preserve complete IMAP folder presence across bounded sync and stop Graph passes on authoritative provider retry deadlines

2026-10-10 14:42:21 +00:00

config

feat: give premium warmup senders all qualified recipients and balance host coverage without paid-receiver bias

2026-10-08 11:31:05 +00:00

email

feat: accept only Salesforce domains as an org's API host and call it through the SSRF-guarded client, register the Warmbly Cloud link only on self-hosted instances behind the instance admin with a second factor and dial it through safehttp with fixed error text, keep automation signing secrets in the sealed connection config, answer integration service failures with fixed messages, add security headers to the forms, tracking and docs origins and TLS 1.2+ to the nginx template, compare the captcha bypass in constant time, require TLS 1.2 for IMAP probes, and drop the unused RSA helpers

2026-10-04 02:58:43 -07:00

errx

feat: integrate warmup observation evidence canonical diagnostics send-result recovery cloud trust exact-parent lineage durable dispatch portability and legacy compatibility

2026-10-07 12:38:58 +00:00

events

feat: patch security dependencies and bound Kafka Avro decoding while rejecting realtime response header injection

2026-10-10 03:54:07 +00:00

formserver

feat: send HSTS from the forms service only on FORMS_DOMAIN and strip it in the installer's Caddy block for customer-owned domains, so no customer apex is pinned to HTTPS

2026-10-04 05:19:22 -07:00

formwire

feat: keep every recipient-facing and self-host-facing address on the deployment's own domain: mint unsubscribe links on a workspace's verified tracking domain (served by the tracking service, proxied to the backend that owns the pages), attach RFC 8058 one-click only over https, resolve all branding through config.Brand() gated on SelfHosted() so a self-host's email footer, sign-in links, stats card, API example and public form badge name nobody else, drop the app.warmbly.com fallback from AppBaseURL, blank TRACKING_DOMAIN and FORMS_DOMAIN on core-only installs, and have install.sh offer to configure a fresh interactive install instead of silently defaulting to localhost

2026-09-09 06:34:43 -07:00

infrastructure

feat: persist monotonic campaign dispatch intent and require locked verified wakeup provenance for every dead-letter replay path

2026-10-10 14:17:10 +00:00

jobrun

feat: run the jobrun scheduler tests on the testing/synctest fake clock and cover a claim that errors with or without its write landing, so each slot still runs exactly once

2026-10-01 22:29:39 -07:00

jobs

feat: expire stale warmup failure warnings and alert persistent fleet stalls while safely retrying blocked dispatches

2026-10-09 05:37:56 +00:00

models

feat: release failed filing commands only after exact backend proof of pending durable recovery while preserving acknowledgements and legacy retries

2026-10-10 11:52:47 +00:00

notify

feat: complete the ADA CASA v2.1.1 AL1 control set across authentication, sessions, access control, cryptography, input validation and configuration, adding a breached-password denylist and per-account login throttling, enforced multi-factor authentication on the admin panel, step-up confirmation before an action that mints a lasting credential, purpose-scoped session tokens, single-use TOTP steps, tenant verification on every cross-referenced identifier, security headers on every surface, encrypted webhook signing secrets, per-organization idempotency, PKCE and a minimal two-scope Gmail consent on the mailbox OAuth flow, bounded spreadsheet and archive decoding, a patched Go toolchain with govulncheck in CI, and the evidence pack under compliance/casa

2026-09-19 08:18:35 +02:00

observability

feat: complete the ADA CASA v2.1.1 AL1 control set across authentication, sessions, access control, cryptography, input validation and configuration, adding a breached-password denylist and per-account login throttling, enforced multi-factor authentication on the admin panel, step-up confirmation before an action that mints a lasting credential, purpose-scoped session tokens, single-use TOTP steps, tenant verification on every cross-referenced identifier, security headers on every surface, encrypted webhook signing secrets, per-organization idempotency, PKCE and a minimal two-scope Gmail consent on the mailbox OAuth flow, bounded spreadsheet and archive decoding, a patched Go toolchain with govulncheck in CI, and the evidence pack under compliance/casa

2026-09-19 08:18:35 +02:00

pkg

feat: preserve fail-closed fleet enrollment fixtures and independent broker deadlines while honoring bounded evidence upload rate limits

2026-10-10 06:57:13 +00:00

repository

Merge pull request #930 from warmbly/devin/1791639319-protect-legacy-dlq-replay

2026-10-10 14:41:43 +00:00

sandbox

fix: skip the onboarding wizard for seeded, sandbox, bootstrap, and warmblyctl-created accounts

2026-10-04 17:49:23 +00:00

scheduler

feat: atomically validate same-day warmup hours and defer invalid configured windows before claiming or sending while preserving visible safety holds

2026-10-10 10:48:15 +00:00

seed

feat: add positive replies, positive reply rate, interested leads and a reply-class breakdown to campaign analytics (summary, per-step, daily series, AI tool, OpenAPI, Zapier/Make samples), show them on the campaign overview with a reply quality card, positive chart series and step column, mirror them in the iOS models, document them, and seed classified replies plus a proof flow

2026-10-09 06:08:28 +02:00

tasks

feat: persist monotonic campaign dispatch intent and require locked verified wakeup provenance for every dead-letter replay path

2026-10-10 14:17:10 +00:00

tasksched

feat: bound local task dispatch across polling rounds using effective database pool capacity without stamping queued work

2026-10-10 13:23:12 +00:00

updater

feat: address the review on the installer branch by keeping the database password out of pg_dump's argv, excluding backup bundles from the blob root they are written into, tolerating blobs that change or vanish mid-archive, making the instance-settings bootstrap a single atomic insert, and validating the release tag before it is written into .env

2026-09-04 06:24:05 -07:00

utils

feat: validate API UUIDs, recover expired Gmail history and guard consumer startup and stale frontend assets

2026-10-07 07:19:15 +00:00

version

feat: preserve self-host upgrades with exact realtime CSP discovery, consumer migration readiness and backend-compatible fleet targets

2026-10-07 06:53:14 +00:00