Linus Rath ceaa81cd9e Merge branch 'feat/do-uxs-plugins' into feat/do-ux-settings-fixes

2026-11-04 08:34:57 +01:00

..

account/stalwart/jmap

fix: stop replaying a stored credential the mail server refused, so a stale session cannot get the webmail banned (GHSA-g6c7-r7wq-xrm2)

2026-10-26 15:00:56 +01:00

account-archive

Merge branch 'feat/multi-instance-auth' into feat/multi-instance

2026-11-01 00:13:17 +01:00

admin

feat: turn plugins an admin installs on for every user, who can turn them off

2026-11-04 08:01:38 +01:00

auth

feat: ask for the email address first and find the mail server on sign-in

2026-11-04 06:18:56 +01:00

bimi

feat: show the sender's BIMI logo as the sender icon when the message passes DMARC

2026-10-30 00:12:24 +01:00

caldav/discover

fix: stop replaying a stored credential the mail server refused, so a stale session cannot get the webmail banned (GHSA-g6c7-r7wq-xrm2)

2026-10-26 15:00:56 +01:00

calendar-agenda

fix: stop replaying a stored credential the mail server refused, so a stale session cannot get the webmail banned (GHSA-g6c7-r7wq-xrm2)

2026-10-26 15:00:56 +01:00

config

fix: keep a desktop sign-in in the browser's page until the user says yes

2026-11-04 02:40:37 +01:00

connector/capabilities

feat: add a switch that stops all third-party traffic #903

2026-10-28 02:19:06 +01:00

dev-jmap/[...path]

feat: limit the page's CSP to the configured hosts with no third-party traffic #903

2026-10-28 04:30:41 +01:00

devices

fix: let the webmail build again with the device registry's rate limit out of its route

2026-11-03 17:19:39 +01:00

errors

fix: stop a page reporting once consent goes, and let nothing on disk aim the desktop app's telemetry

2026-11-03 17:38:04 +01:00

favicon

feat: show the sender's BIMI logo as the sender icon when the message passes DMARC

2026-10-30 00:12:24 +01:00

fetch-ical

fix: fetch a company calendar once for everyone at a time and pause after a failure

2026-11-01 06:51:17 +01:00

health

docs: point code comments at the monitoring guide where the website has it

2026-11-01 03:49:54 +01:00

metrics

docs: point code comments at the monitoring guide where the website has it

2026-11-01 03:49:54 +01:00

offline/shell

feat: keep the local store's engine for a start without a network

2026-11-03 05:54:36 +01:00

og-image

fix: show a re-uploaded logo or icon at once instead of after a restart

2026-11-01 00:24:07 +01:00

plugin-approval-status

feat: share plugin approvals and plugin settings between instances #1066

2026-11-01 00:13:09 +01:00

plugin-proxy

fix: mark the plugin proxy's no-third-party refusal as the proxy's own error

2026-11-02 20:57:56 +01:00

plugin-secrets

fix: stop a page wiping another account's plugin secrets by naming it in the desktop app

2026-11-04 03:15:35 +01:00

plugin-signing-pubkey

fix: refuse to sign plugins on an instance whose signing key differs from the others #1066

2026-11-01 00:54:57 +01:00

plugins

feat: turn plugins an admin installs on for every user, who can turn them off

2026-11-04 08:01:38 +01:00

push

fix: show a generic notification instead of guessing which login a push is for

2026-11-04 03:13:58 +01:00

pwa-icon/[size]

fix: show a re-uploaded logo or icon at once instead of after a restart

2026-11-01 00:24:07 +01:00

pwa-screenshot/[variant]

fix: show a re-uploaded logo or icon at once instead of after a restart

2026-11-01 00:24:07 +01:00

ready

feat: hold each instance back until it has loaded from the shared store and add a readiness check #1066

2026-10-31 22:40:51 +01:00

settings

fix: keep both templates when two settings saves arrive at once #1066

2026-10-31 22:58:14 +01:00

setup

test: mock the wizard session refusal in the setup telemetry consent test

2026-11-01 01:35:20 +01:00

system/update-status

fix: answer 503 on the update status routes while the shared store is down #1066

2026-10-31 23:58:21 +01:00

translate

feat: serve Prometheus metrics and split health into live and ready

2026-11-01 02:59:40 +01:00

version

feat: version the service worker by build and offer a reload after a deploy

2026-11-01 11:13:31 +01:00

webdav

feat: hold each instance back until it has loaded from the shared store and add a readiness check #1066

2026-10-31 22:40:51 +01:00

wopi

fix: keep the server-side device policies on when a login's session or the policy can't be read

2026-11-01 09:44:03 +01:00