Lucas Gaitzsch and GitHub
c4aa0c1772
Merge branch 'bulwarkmail:main' into feature/scheduled-send
2026-05-23 06:39:35 +02:00
Linus Rath
63f2169ae7
fix: add OAUTH_ALLOW_PRIVATE_ENDPOINTS for split-DNS setups
2026-05-22 17:22:14 +02:00
Lucas Gaitzsch
159706a683
Merge branch 'main' into feature/scheduled-send
...
# Conflicts:
# app/(main)/[locale]/page.tsx
# components/layout/sidebar.tsx
# stores/email-store.ts
# stores/settings-store.ts
2026-05-22 12:31:06 +02:00
Lucas Gaitzsch
7dccc2f432
fixes from review
2026-05-22 12:21:32 +02:00
Linus Rath
66b2036e37
feat: expose PWA branding fields in admin Branding tab
2026-05-22 11:22:07 +02:00
Linus Rath
63efd724d2
fix: trust directory version on marketplace install/update
2026-05-22 00:20:00 +02:00
Linus Rath
ba4781910d
feat: marketplace update flow for installed plugins/themes
2026-05-22 00:11:10 +02:00
Linus Rath
fc5f6f43d6
feat: expose PWA, app identity, and extension directory keys in JSON config #312
2026-05-21 23:35:58 +02:00
Linus Rath
628966d3b5
fix: split app into (main)/(sandbox) route groups so plugin iframe hydrates properly
2026-05-20 23:41:49 +02:00
Linus Rath
1c44f59ba1
feat: allow setup wizard over plain HTTP with dismissable warning gate
2026-05-20 19:01:46 +02:00
Lucas Gaitzsch
1a3d359fee
fix bugs
2026-05-20 08:28:31 +02:00
Lucas Gaitzsch
891c3250be
Merge branch 'main' into feature/scheduled-send
2026-05-20 08:17:46 +02:00
Linus Rath
97ddf935a8
fix: mobile handoff flow for OAuth authentication
2026-05-19 00:45:35 +02:00
Linus Rath
973ce1e5bd
feat: add mobile handoff page and JMAP authentication verification
2026-05-19 00:05:40 +02:00
Linus Rath
ecd0467ffa
fix: stop pulling node:dns into client bundle via OAuth discovery
2026-05-18 19:31:38 +02:00
Linus Rath
c2eb2c081b
fix: gate admin routes against cross-origin CSRF
2026-05-18 13:21:01 +02:00
Linus Rath
b299a0b602
fix: validate plugin/theme id in marketplace install to block path traversal
2026-05-18 13:03:49 +02:00
Linus Rath
f275fbe2e4
fix: bind stalwart auth context to credential, not cookie-claimed username
2026-05-18 13:00:40 +02:00
Linus Rath
48aa607b56
feat: lock down plugin runtime in sandbox + signing + approval
2026-05-18 12:44:23 +02:00
Linus Rath
c5ac68e137
fix: prevent plugin config leak to non-admin users
2026-05-18 10:24:29 +02:00
Linus Rath
bb7e1c4538
fix: per-account push subscriptions so multi-account notifications work #298
2026-05-16 22:50:01 +02:00
Linus Rath
356abcfc2d
fix: redact sensitive config secrets from admin API response
2026-05-16 22:48:06 +02:00
Linus Rath
fc641e94ac
fix: carry configSchema + settingsSchema through marketplace install
2026-05-16 19:51:59 +02:00
Linus Rath
3a559479bd
fix: make impersonation cookies session-only
2026-05-16 18:59:46 +02:00
Linus Rath
349406723c
fix: use relative Location header in redirect
2026-05-16 18:33:44 +02:00
Linus Rath
997bedc91b
feat: allow admin password overwrite during setup recovery
2026-05-16 18:21:48 +02:00
Linus Rath
ca1108f455
feat: master-user impersonation route + app-top-banner plugin slot
2026-05-16 17:59:07 +02:00
Linus Rath
f39366b470
fix: read OAUTH_SCOPES at runtime instead of build time
2026-05-15 20:37:00 +02:00
Timo Streule and Linus Rath
d0d6632b24
chore: drop redundant '-- ' prefix from dev identity signatures
...
The signature separator is already controlled by the
signatureSeparatorEnabled setting (lib/email-composer), which prepends
'-- ' at compose time when enabled. Baking it into the fixture
double-prefixed it.
2026-05-15 14:46:43 +02:00
Linus Rath
fae15f073e
fix: honor cookieSameSite admin config override #284
2026-05-14 21:49:37 +02:00
Linus Rath
c646c87030
fix: standardize punctuation in tooltips and comments across multiple locales and code files
2026-05-14 21:44:24 +02:00
Linus Rath
b4a76bc4d1
chore: expand demo fixtures with more emails, contacts, and portrait photos
2026-05-14 15:19:24 +02:00
Linus Rath
32fe871b70
fix: support HTTP basic auth in iCal subscription URLs #275
2026-05-13 14:27:54 +02:00
Linus Rath
9571f2e185
fix: skip upstream JMAP reverify for trusted URLs #237
2026-05-11 19:22:37 +02:00
Linus Rath
2d7e24b513
perf: parallelize login round-trips and drop redundant JMAP re-verify
2026-05-11 11:04:13 +02:00
Linus Rath
876ea370e4
feat: allow file uploads on the wizard branding step
2026-05-09 21:40:39 +02:00
Linus Rath
51745ea03d
feat: web setup wizard + admin config/state dir split ( #226 )
2026-05-09 17:37:41 +02:00
Lucas Gaitzsch
4a3c775b40
fix
2026-05-09 00:31:34 +02:00
Lucas Gaitzsch
f45b67fe19
fix
2026-05-08 22:37:16 +02:00
Lucas Gaitzsch
37cd5ca635
Merge remote-tracking branch 'origin/main' into feature/scheduled-send
...
# Conflicts:
# app/[locale]/page.tsx
# components/email/email-composer.tsx
# components/email/email-viewer.tsx
2026-05-07 18:01:41 +02:00
Linus Rath
5f464d4ee2
feat: lift 5-account cap on HTTP/2
2026-05-07 12:28:33 +02:00
Linus Rath
178922323d
chore: update version to 1.6.2
2026-05-06 20:07:36 +02:00
Linus Rath
d3d79be64c
feat: multi-server JMAP support
2026-05-06 17:33:55 +02:00
Linus Rath
09302684da
fix: propagate settingsSchema
2026-05-06 01:48:49 +02:00
Linus Rath
0885d3c13e
feat: http:fetch permission + httpOrigins manifest field
2026-05-05 21:50:04 +02:00
Linus Rath
9f67bc078a
feat: ingest icon/banner/screenshots from source repo
2026-05-05 21:12:23 +02:00
Linus Rath
265908b05b
fix: resolve PLUGIN_DEV_DIR plugins in admin config route
2026-05-05 20:17:45 +02:00
Lucas Gaitzsch
154ae84247
Scheduld Send
2026-05-05 20:11:11 +02:00
Linus Rath
1b0ca8967e
feat: bundle plugin src/ on demand via esbuild
2026-05-05 18:35:22 +02:00
Linus Rath
3e336d459c
feat: plugin hot-reload + dev-folder loading
2026-05-05 18:05:17 +02:00
