Commit Graph
1863 Commits
Author SHA1 Message Date
Linus Rath 06a2e37cd9 fix: load app styles on the global error page 2026-09-22 19:39:39 +02:00
Linus Rath 3c59e811a5 chore: remove unused files and dependencies 2026-09-22 19:36:33 +02:00
Linus Rath 9ef7068bd8 fix: include shared accounts in "All folders" mail search #1082 2026-09-22 17:25:43 +02:00
Linus Rath 9893b0a8ad fix: list every file when the account exceeds maxObjectsInGet #1069 2026-09-22 00:17:44 +02:00
Linus Rath 106bc07f04 feat: add OpenID Connect login to the Stalwart Lite bundle 2026-09-21 23:45:08 +02:00
Linus Rath 9e2c1dac85 chore: remove unused e2e smoke tests and leftover assets 2026-09-21 23:02:40 +02:00
Linus Rath 25832a3d69 Merge branch 'main' of https://github.com/bulwarkmail/webmail 2026-09-21 22:57:24 +02:00
Linus Rath a4afc407e5 feat: publish Bulwark Lite as a container image #1081 2026-09-21 22:56:26 +02:00
Linus Rath 5a6c340f18 Merge pull request #1013 from lucamzanon/fix/cross-account-thread-key
fix: scope thread identity to the owning account in unified views
2026-09-21 22:33:26 +02:00
Linus Rath 7a562e1830 Merge pull request #976 from bartfaizoli76/fix/sandbox-locale-automatic
fix: plugin sandbox locale ignores 'Automatic' language resolution
2026-09-21 22:33:14 +02:00
Linus Rath 7d3f3c2f4d chore: release 1.11.0-beta.2 (Bulwark Lite pre-release) 1.11.0-beta.2 2026-09-21 20:54:05 +02:00
Linus Rath ec67ab994b feat: add missing mail action toasts and show sonner toasts again 2026-09-21 20:52:02 +02:00
Linus Rath b03a0c1dd9 feat: show "email sent" toast after immediate sends 2026-09-21 19:36:01 +02:00
Linus Rath 49af83b37a fix: keep staged attachment until upload finishes 2026-09-21 19:18:54 +02:00
Linus Rath 77ef60caae feat: resolve deep links to the local instance 2026-09-20 19:59:37 +02:00
Linus Rath c6bb4aace9 fix(deploy): go back to an image id, not the bulwark-demo:previous tag
Rolling back ran the container from the local tag, so the demo recorded
`bulwark-demo:previous` as its image — and that tag is moved by the very
next deploy. Run the id instead; the tag stays only to keep the image from
being pruned.
2026-09-20 03:03:19 +02:00
Linus Rath c76969522d ci: deploy demo.bulwarkmail.org from here instead of Watchtower
The demo container followed ghcr.io/bulwarkmail/webmail:latest through
Watchtower, so a release reached it silently and there was no way to see,
trigger or undo it. It is now a deployment of this repo:

- .github/workflows/deploy-demo.yml runs after "Publish Docker Image on
  Release" succeeds, or on demand with a tag
  (`gh workflow run deploy-demo.yml -f tag=1.10.0`, or action=rollback).
  It only talks to the server; nothing is built.
- deploy/demo-deploy.sh is the forced command behind the deploy key
  (/usr/local/bin/bulwark-demo-deploy): pulls the tag, recreates the
  container with the demo mounts, checks /api/health and goes back to the
  image it replaced if that fails. A pre-release moves no :latest, so the
  deploy after one finds the same image and does nothing.

Watchtower has been recreated without bulwark-demo; it still updates the
two rbm.systems containers.
2026-09-20 02:57:52 +02:00
Linus Rath 4790101a3b fix: update resourceUrl format in README for release tags 2026-09-19 20:19:10 +02:00
Linus Rath 7b07d25386 chore: release 1.11.0-beta.1 (Bulwark Lite pre-release)
Keep the latest Docker tags on the stable release when a GitHub release is marked as a pre-release, so auto-updating deployments on :latest do not pick up beta builds.
1.11.0-beta.1
2026-09-19 15:04:49 +02:00
Linus Rath 85a3f57bcf docs: add banner and brand badges to README 2026-09-19 14:30:14 +02:00
Linus Rath 043343e3ec fix: correct author name in package.json 2026-09-19 14:15:04 +02:00
Linus Rath f23d87ad60 fix: update author email in package.json 2026-09-19 14:13:50 +02:00
Linus Rath d7548a4bab refactor: migrate icon set from Lucide to Tabler Icons 2026-09-19 13:32:41 +02:00
Linus Rath 5fb29a1174 fix: update .dockerignore to include scripts/lite directory 2026-09-19 13:14:56 +02:00
Linus Rath ab67d9b07e feat: add "Flat fields" theme 2026-09-19 13:01:07 +02:00
Linus Rath fdfcb1711e feat: add Bulwark Lite build for Stalwart Applications 2026-09-19 00:53:53 +02:00
Linus Rath 2d4a562432 fix: harden Bulwark Lite login, deep-link replay and settings gating 2026-09-18 22:16:57 +02:00
lucamzanon 5b63993bfe fix: scope thread identity to the owning account in unified views #1012
JMAP thread ids are only unique within their account - Stalwart hands out
per-account counters such as "b" - so the cross-account views merged
unrelated conversations that happened to share an id, and every
client-side thread map (expansion, cache, loading flag, counts,
virtualizer key) mixed them up the same way.

Give ThreadGroup an account-scoped `threadKey` derived from the email's
source stamps and key grouping and all thread state by it. `threadId`
stays the raw id for Thread/get, which #281 already routes to the owning
account. fetchThreadEmailCounts now asks each source account for its own
threads instead of one client for every id. Single-account views carry no
stamps, so their key is the bare id and nothing changes there.
2026-09-18 18:33:02 +02:00
Linus Rath 5de98bc04b feat: add Bulwark Lite static export build 2026-09-17 23:54:33 +02:00
Linus Rath 321188f08a chore: fix npm audit findings 1.10.0 2026-09-17 23:15:27 +02:00
Linus Rath f12d056522 chore: update version to 1.10.0 2026-09-17 22:53:58 +02:00
Linus Rath 62465e1e80 fix: render "Keep" action as fileinto "INBOX" #1027 2026-09-17 22:42:28 +02:00
Linus Rath f6ad8a5942 feat: add per-message HTML/plain-text toggle #1022 2026-09-17 22:34:20 +02:00
Linus Rath fedfc89d44 fix: list tagged mail from every account in the tag view #1038 2026-09-17 22:26:52 +02:00
Linus Rath df966693b0 Merge pull request #997 from thejdubb02/fix/oauth-discovery-session-url-971
fix(oauth): normalize discovery base so a session JMAP_SERVER_URL can refresh (#971)
2026-09-17 22:03:52 +02:00
Linus Rath dba03bd39a Merge pull request #995 from mulatta/fix/plugin-sandbox-cors
fix: allow plugin sandbox chunks to load with CORS
2026-09-17 22:03:47 +02:00
Linus Rath 863354d5f1 Merge pull request #980 from sanitz/fix/task-toggle-progress-updated-958
fix: omit progressUpdated from task completion payload (#958)
2026-09-17 22:03:43 +02:00
Linus Rath 15308f59e2 Merge pull request #994 from mulatta/fix/calendar-task-progress-normalization
fix: normalize calendar task progress states
2026-09-17 22:03:38 +02:00
Linus Rath bd825fb19f Merge pull request #1034 from shukiv/fix/viewer-image-own-max-width
fix(viewer): stop stretching images that carry their own max-width
2026-09-17 22:03:32 +02:00
Linus Rath ee4763d5c0 Merge pull request #1036 from dealerweb/fix/calendar-principal-fetch
fix(calendar): stop the account principal fetch from failing on every load
2026-09-17 22:03:26 +02:00
Linus Rath 0cc1602933 Merge pull request #1037 from dealerweb/fix/mini-calendar-jump
fix(calendar): jump to the day picked in the mini calendar
2026-09-17 22:03:21 +02:00
Linus Rath 9cd39c109c Merge branch 'main' of https://github.com/bulwarkmail/webmail 2026-09-17 22:03:02 +02:00
Linus Rath 390def8f41 Merge pull request #986 from ibayue/fix/calendar-participants
fix(calendar): dedupe participants and resolve contact names
2026-09-17 22:00:57 +02:00
Linus Rath 2e88a0c830 Merge main into fix/calendar-participants
Resolves the two conflicts in components/calendar/event-modal.tsx created
by #967 (RSVP controls), both keep-both:

- #967's canRsvp memo and #986's resolveContactName hook are both kept;
  they are independent and were simply inserted at the same point.
- #967's RsvpBar component is kept, and StatusBadge takes #986's
  signature ({ status, t }) since #986 drops the isOrganizer prop and
  updates both call sites to match.
2026-09-17 21:54:08 +02:00
Linus Rath a0316302d9 fix: strip local-account prefix from address-book ids on contact update #1043 2026-09-17 21:50:48 +02:00
Linus Rath e2f50cbb88 Merge pull request #967 from wrycu/fix/ui-rsvp
fix: rsvp controls
2026-09-17 21:49:38 +02:00
Linus Rath 168a1c7844 fix: never loop forever when deduping drag-out .eml names #1039 2026-09-17 21:42:16 +02:00
Linus Rath 9bc54a4ef6 fix: keep security headers on dotted app paths and neutralise cid: blobs (GHSA-xvjh-v9c6-qcvc) 2026-09-17 21:08:37 +02:00
Linus Rath 53a6670e60 fix: strip CR/LF from read-receipt header values (GHSA-w38p-hpqv-g89c) 2026-09-17 20:55:39 +02:00
Linus Rath e055ee8201 fix: verify credentials upstream before minting identity cookies (GHSA-wxcm-j4jc-9fxq) 2026-09-17 20:48:42 +02:00