Commit Graph
937 Commits
Author SHA1 Message Date
Linus Rath 92c9110f3c feat: show the third-party traffic switch and what stays reachable in Organisation > Security #903 2026-10-28 02:24:13 +01:00
Linus Rath 794e0b439e test: fail when a new outgoing host appears #903 2026-10-28 02:21:45 +01:00
Linus Rath 553f1e9149 feat: add a switch that stops all third-party traffic #903 2026-10-28 02:19:06 +01:00
Linus Rath 7ea0a7d58d feat: read and write account metadata for shared Bulwark data 2026-10-28 01:14:30 +01:00
Linus Rath 4b69f1307f feat: let admins scope the user policy per domain or group 2026-10-28 00:29:02 +01:00
Linus Rath 87817f545f fix: stop flagging invitations from users on your own domains as unverified #1374 2026-10-27 23:26:14 +01:00
Linus Rath b78968971c fix: send from the account's identity when the composer has no From address #1377 2026-10-27 23:23:49 +01:00
Linus Rath 0e026cab2e fix: list files on Stalwart 1.0 when the account holds more nodes than one get allows #1385 2026-10-27 23:20:07 +01:00
Linus Rath 85fb392ab3 fix: open the account security docs on bulwarkmail.org instead of the webmail's host #1387 2026-10-27 23:17:09 +01:00
Linus Rath be52744a5d Merge pull request #1379 from phumiphat2201/feat/i18n-thai-locale
feat(i18n): Add Enterprise Thai (th) localization catalog & integration
2026-10-27 23:14:18 +01:00
Linus Rath ec295ad59f Merge pull request #1384 from VasilisNtovolos/fix/bulk-delete-partial-results
fix: reconcile confirmed permanent bulk deletions
2026-10-27 23:14:11 +01:00
Linus Rath 73015c7d0e Merge pull request #1380 from HOLOEYE-JZ/fix/task-fetch-race
fix: keep one account's tasks out of another's task list
2026-10-27 23:14:05 +01:00
Linus Rath be5fc12622 feat: let each translation list its own placeholder fill-in words 2026-10-27 23:03:41 +01:00
Linus Rath 6f4a6fee77 feat: catch fill-ins like [Votre nom] or [您的姓名] in every app language 2026-10-27 22:52:23 +01:00
Linus Rath c355b0d552 feat: add a setting to turn off the placeholder warning 2026-10-27 22:32:38 +01:00
Linus Rath f2ed1597f7 feat: detect unfilled placeholders and unfinished text in a message 2026-10-27 22:23:52 +01:00
VasilisNtovolos ac99c68ef3 fix: reconcile confirmed permanent bulk deletions 2026-10-27 14:51:38 +02:00
Jacob ZeitzandClaude Opus 5.5 1509e8c799 fix: keep one account's tasks out of another's task list
The task store was not cleared on an account switch, unlike the calendar,
contacts and the other account-scoped stores, so the next account showed
the previous one's tasks until its own arrived. And a fetch answered after
a later one had started still wrote its list: the outgoing account's
answer could put its tasks back after the switch, and an older answer
could replace a newer one.

clearAllStores now clears the tasks, and each fetch gets a number: only
the latest one's answer or error is kept, and clearing drops the fetches
still under way.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-27 10:31:54 +01:00
Phumiphat Kanjanachotipong f6325e741d feat(i18n): Add Enterprise Thai (th) localization catalog & integration 2026-10-27 07:36:03 +00:00
Linus Rath e8db7f5f45 fix: stop forwarding a loopback client address that a migrated Stalwart 1.0 rejects 2026-10-26 20:51:48 +01:00
Linus Rath 071d57253c fix: stop retrying calendars of an account that only shares mail on Stalwart 1.0 2026-10-26 20:48:00 +01:00
Linus Rath 47e3fd81d7 fix: create folders and upload files on Stalwart 1.0 2026-10-26 20:47:59 +01:00
Linus Rath 261c65c5aa fix: send iCal subscriptions and other server-side fetches through the configured outbound proxy #1367 2026-10-26 20:35:53 +01:00
Linus Rath ad7001cbe8 fix: show new mail of another signed-in login in the unified inbox without a click #1350 2026-10-26 20:35:53 +01:00
Linus Rath 5ac55ef2ab fix: ship the bundle manifest Stalwart 1.0 needs to install Bulwark Lite as an Application 2026-10-26 20:27:18 +01:00
Linus Rath aa860e5a85 fix: sign in to Bulwark Lite with password and TOTP on Stalwart 1.0 2026-10-26 20:27:16 +01:00
Linus Rath 004f0948d5 fix: ask Stalwart 1.0 for mail, contacts, calendar and file access when signing in with SSO 2026-10-26 20:25:42 +01:00
Linus Rath 8860dde005 fix: sign in with password and TOTP on Stalwart 1.0 2026-10-26 20:25:42 +01:00
Linus Rath a3f396df80 fix: point the Lite install guide for Stalwart at the release tag that exists and say what a failed download does 2026-10-26 20:22:41 +01:00
Linus Rath 9de2efb722 fix: open a shared or group account's message from its link instead of the own message with the same id #1351 2026-10-26 20:01:11 +01:00
Linus Rath 2f8b4863ff Merge pull request #1338 from HOLOEYE-JZ/feat/plugin-search-results 2026-10-26 19:32:56 +01:00
Linus Rath 7c00a02319 Merge pull request #1345 from HOLOEYE-JZ/feat/plugin-action-badge 2026-10-26 19:32:08 +01:00
Linus Rath 78efeec7b2 fix: find the quick reply setting in the settings search 2026-10-26 19:25:37 +01:00
Linus Rath 7677b87c5e Merge pull request #1373 from motofix/fix/1371-download-name-slash 2026-10-26 19:23:56 +01:00
Julien Béti 460343d86d fix: show inline images whose part name is a path #1371 2026-10-26 18:34:57 +01:00
Linus Rath bec17e6a7b test: reset the stored-credential budget between pairing tests 2026-10-26 16:33:08 +01:00
Linus Rath d72bff95f9 fix: stop acting on a message of a signed-out account through the active account 2026-10-26 16:11:51 +01:00
Linus Rath f0392a6705 fix: check a meeting reply's sender against the attendee who answers, not the organizer 2026-10-26 15:15:58 +01:00
Linus Rath e120ac6361 fix: let plugins read the message of the account they name, as ids repeat across accounts 2026-10-26 15:15:58 +01:00
Linus Rath f829d4a2e8 fix: ask the next user again before running plugins installed by someone who signed out 2026-10-26 15:15:58 +01:00
Linus Rath d29309ed0d fix: keep plugin embed origins out of the page CSP while plugins are turned off 2026-10-26 15:15:58 +01:00
Linus Rath 42117da498 fix: stop replaying a stored credential the mail server refused, so a stale session cannot get the webmail banned (GHSA-g6c7-r7wq-xrm2) 2026-10-26 15:00:56 +01:00
Linus Rath ae897b42a4 fix: make the impersonation handoff really clear the previous account list and ignore ?impersonated=1 links from elsewhere 2026-10-26 14:58:31 +01:00
Linus Rath f02e96b47a fix: stop the password and TOTP sign-in from re-posting the password to another host when the mail server redirects 2026-10-26 14:58:31 +01:00
Linus Rath eb2787bcc9 fix: end admin sessions on sign-out and when the admin password changes 2026-10-26 14:52:04 +01:00
Linus Rath 121d2d5e31 fix: stop buffering up to 100 MB of every unauthenticated request body before routing 2026-10-26 14:52:04 +01:00
Linus Rath 08969fde67 fix: stop reading a mail server's answer past a size limit in the JMAP, WebDAV, push preview and agenda routes 2026-10-26 14:52:04 +01:00
Linus Rath 07e6ecce1a fix: show a plain new-mail notification instead of another login's message when two signed-in logins have the same account id 2026-10-26 14:52:04 +01:00
Linus Rath 885ecdaa07 fix: keep the server's path prefix in the CalDAV addresses shown in calendar settings 2026-10-26 14:52:04 +01:00
Linus Rath fb793220b7 fix: keep plugin switches from shrinking next to long labels, like the app's settings switches 2026-10-26 14:52:04 +01:00