Linus Rath 885ecdaa07 fix: keep the server's path prefix in the CalDAV addresses shown in calendar settings

2026-10-26 14:52:04 +01:00

..

account/stalwart/jmap

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

account-archive

feat: optional encrypted backup of the account list

2026-10-09 10:54:38 +02:00

admin

fix: stop reading a marketplace bundle download once it passes the package size limit

2026-10-26 11:29:37 +01:00

auth

fix: send a password and TOTP sign-in to the server the user typed, not the default one

2026-10-26 11:33:37 +01:00

caldav/discover

fix: keep the server's path prefix in the CalDAV addresses shown in calendar settings

2026-10-26 14:52:04 +01:00

calendar-agenda

fix: show all-day events on their own day in the Calendar Agenda for viewers west of the server's time zone

2026-10-26 11:33:38 +01:00

config

feat: remember every sign-in unless the admin shows the remember me box

2026-10-13 13:13:56 +02:00

connector/capabilities

feat: hide the version from the connector probe when the login page hides it #896

2026-10-17 19:18:21 +02:00

dev-jmap/[...path]

Merge branch 'main' into feat/stalwart-1.0

2026-10-16 01:41:48 +02:00

favicon

fix: cap concurrent upstream favicon fetches

2026-10-19 01:32:29 +02:00

fetch-ical

fix: accept both fetch response types in the capped feed reader

2026-10-19 01:36:16 +02:00

health

fix: stop handing instance details to visitors who are not signed in

2026-09-26 17:03:24 +02:00

og-image

fix: don't export OG_WIDTH/OG_HEIGHT from the og-image route

2026-08-17 00:18:59 +02:00

plugin-approval-status

fix: keep plugin credentials of a bare-name token sign-in under the account it resolved to

2026-10-26 11:36:57 +01:00

plugin-proxy

fix: keep plugin credentials of a bare-name token sign-in under the account it resolved to

2026-10-26 11:36:57 +01:00

plugin-secrets

fix: keep plugin credentials of a bare-name token sign-in under the account it resolved to

2026-10-26 11:36:57 +01:00

plugin-signing-pubkey

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

plugins

feat: let plugins use accounts and API keys through the server without seeing them

2026-10-14 04:00:36 +02:00

push/preview

fix: load push notification previews when the webmail reaches the mail server on an internal address

2026-10-26 11:33:37 +01:00

pwa-icon/[size]

feat: branded OpenGraph/Twitter link previews with generated card image

2026-08-16 23:40:25 +02:00

pwa-screenshot/[variant]

feat: branded OpenGraph/Twitter link previews with generated card image

2026-08-16 23:40:25 +02:00

settings

fix: stop synced settings from piling up a new file for every extra slash after the server address

2026-10-26 11:33:38 +01:00

setup

fix: refuse a session secret under 32 characters in the setup wizard, which broke admin sign-in afterwards

2026-10-26 11:48:39 +01:00

system/update-status

fix: stop handing instance details to visitors who are not signed in

2026-09-26 17:03:24 +02:00

translate

Merge pull request #897 from Cameo007/main

2026-09-30 14:22:01 +02:00

webdav

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

wopi

Merge branch 'main' into feat/stalwart-1.0

2026-10-12 08:35:08 +02:00