Linus Rath 8583c9efef feat: hide the version from the connector probe when the login page hides it #896

2026-10-17 19:18:21 +02:00

..

account/stalwart/jmap

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

account-archive

feat: optional encrypted backup of the account list

2026-10-09 10:54:38 +02:00

admin

fix: load the admin panel when the config is read-only #1249

2026-10-17 19:17:48 +02:00

auth

fix: keep the sign-in response small enough for proxies with large OIDC tokens #1237

2026-10-14 13:59:41 +02:00

caldav/discover

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

calendar-agenda

fix: show shared and group calendars in the Calendar Agenda

2026-10-06 06:24:17 +02:00

config

feat: remember every sign-in unless the admin shows the remember me box

2026-10-13 13:13:56 +02:00

connector/capabilities

feat: hide the version from the connector probe when the login page hides it #896

2026-10-17 19:18:21 +02:00

dev-jmap/[...path]

perf: load conversation sizes with the folder page instead of in a second request

2026-10-15 00:14:57 +02:00

favicon

feat: refresh sender icons that changed on the sender's website #960

2026-10-17 19:18:18 +02:00

fetch-ical

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

health

fix: stop handing instance details to visitors who are not signed in

2026-09-26 17:03:24 +02:00

og-image

fix: don't export OG_WIDTH/OG_HEIGHT from the og-image route

2026-08-17 00:18:59 +02:00

plugin-approval-status

feat: let users install their own plugins, with admin review of the actual code

2026-10-14 02:03:26 +02:00

plugin-proxy

feat: let plugins add buttons, calendar day labels and pages, and use connected accounts from the sandbox

2026-10-14 04:31:43 +02:00

plugin-secrets

feat: let plugin notifications carry a link to the plugin's own server

2026-10-14 10:58:19 +02:00

plugin-signing-pubkey

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

plugins

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

push/preview

fix: preview the named message when the inbox lookups beside it fail #1041

2026-10-02 10:32:22 +02:00

pwa-icon/[size]

feat: branded OpenGraph/Twitter link previews with generated card image

2026-08-16 23:40:25 +02:00

pwa-screenshot/[variant]

feat: branded OpenGraph/Twitter link previews with generated card image

2026-08-16 23:40:25 +02:00

settings

fix: keep synced calendar subscriptions from stale devices and past deletions #1064

2026-10-15 23:54:37 +02:00

setup

fix: pin resolved IP for stored custom JMAP endpoints and branding URLs

2026-08-26 23:02:19 +02:00

system/update-status

fix: stop handing instance details to visitors who are not signed in

2026-09-26 17:03:24 +02:00

translate

Merge pull request #897 from Cameo007/main

2026-09-30 14:22:01 +02:00

webdav

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

wopi

fix: open read-only documents in ONLYOFFICE without the -103 warning #1187

2026-10-08 14:32:39 +02:00