v0.7.0

Added

• Attachments preview #676
• Add link to a CalDAV instance to accept events directly #584

Changed

• Improve sending experience #681
• Remove deprecated model fields from tiered storage migration #678

Fixed

• Unmount thread view immediately on unselect thread #680
• Prevent refetch thread messages on draft deletion #682

v0.6.0

Added

• Add thread assignation feature #645
• Add mention notifications via UserEvent #621
• Allow sending internal messages through ThreadEvent #566
• Add thread deep linking #664
• Add label assignment with archive and bulk label widget
• Enable inviting users that haven't logged in yet #644
• Add configurable inbound auth backends #636
• Add encryption, custom scopes, levels and auditing on channels #599
• Add recursive SPF check and optional send-time validation #625
• Add tiered storage and refactor blobs/attachments
• Add mandatory TOTP field and search field in admin #667
• Add silent login support
• Make panel sections resizable
• Add read/unread action on thread action bar #659
• Add lprobe healthchecks and checksum verification for lprobe + Caddy #600

Changed

• Improve message composer
• Switch back to Python's stdlib for email composition
• Put split thread feature behind a feature flag #624
• Show tooltip to confirm mailbox refresh
• Disable application menu when no option is available
• Focus to field on forward
• Align send button on the left
• Upgrade Cunningham and ui-kit
• Localize attachment separator
• Force default language on frontend #647
• Add DNS propagation delay info #654
• Allow specifying a channel id for the home feedback widget #655
• Support legacy and new widget attribute #650
• Update widget logic to latest version #649
• Refactor thread query cache management #642
• Allow reindexing from a given date
• Defer indexation tasks for better throughput
• Improve search_reindex bulk payload
• Move imports and reindex worker queues to dedicated containers #643
• Bump Keycloak to 26.6.1 #637

Fixed

• Improve PST import logic
• Allow thread editor to destroy thread accesses #668
• Enforce full edit rights on thread mutations
• Fix race condition in last-editor deletion guard
• Fix thread panel header with nested label #658
• Fix label popup stacking with create-label modal #635
• Fix email parsing edge cases with UTF-8 in flanker #656
• Fix threads ordering #617
• Fix double request and flickering on search #596
• Handle non-serializable Celery task errors and stop infinite polling #633
• Quote error field and log SOCKS proxy in outbound delivery #626
• Do not mark thread as read when sending autoreply #594

Security

• Stop flagging inbound From=To mails as is_sender #652
• Force including special characters in generated passwords #640
• Factorize SSRF code and allow redirects in image proxy #631

v0.5.0

Added

• Add autoreply feature with scheduling support #569
• Add an action to split a thread from a message #561
• Add starred/important thread feature scoped per mailbox #581
• Add unread and starred filters in thread panel #581
• Add better filtering and granularity for usage metrics
• Expose oidc_autojoin and identity_sync flags in provisioning API

Changed

• Customize thread panel bulk actions according to selection state

• Rename usage API params to be more generic #589

• Remove per-message starred in favor of thread-level starred #588

  ⚠️ This migration requires a search reindex to be run after the upgrade.

• Use url_permalink from Drive and limit requests to Drive resource server #587

Fixed

• Make DNS checking more resilient
• Remove mailbox.id from metrics

v0.4.0

Added

• Store thread read state per thread access #568

  ⚠️ This migration requires a search reindex to be run after the upgrade.

• Store and display the user who sent a message #574

• Display selected threads count in right panel #576

• Add skip navigation link for keyboard users #573

• Add DeployCenter backend for syncing maildomain admins #572

• Add management command to print all users of the instance

Changed

• Bump keycloak to 26.5.4 #571
• Add migrations-check Makefile command

Fixed

• Preserve scroll position across renders #578
• Convert newlines to <br> in styled text #577
• Scope labels and user_role to the requested mailbox

v0.3.0

Added

• Add configurable help center button in header #537
• Add outbound message recipients throttling #506
• Add webhook and logging for selfchecks, replacing pushgateway #550
• Add mailbox export in mbox format with labels #553
• Add PST import support and streaming for mbox #544
• Add denylist for personal mailbox prefixes #540
• Add multi-column layout block for signature editor #551
• Add celery task events for worker monitoring #549
• Add image block in template, signature and message composers
• Add storage usage metrics API endpoint #538
• Add conditional outbox folder
• Add stronger DNS checks with configurable records #522
• Add print button in messages context menu #518
• Add autofocus option to message, template and signature composers
• Add arm64 platform support for Docker image builds #554

Changed

• ❗ BREAKING: Update the Drive third-party API logic to comply with the new Drive logic. Messages now interops with Drive >= 0.13.0
• Replace queue-based save/send orchestration with async promise ref
• Use display_name for labels and auto-unfold active parents #547
• Optimize MessageTemplate serialization and body handling #545
• Defer HTML/text body export to send/save time
• Add composer tools (text color, side menu and drag block handle)
• Improve outbox wording #539
• Replace nginx with Caddy for frontend reverse proxy and Scalingo deployment #556
• Replace MinIO with RustFS for object storage in development #556
• Migrate Python packaging from Poetry to uv #556
• Standardize and rename Makefile targets #556
• Upgrade Python to 3.14 #556
• Remove Django i18n and backend translation catalogs #556

Fixed

• Delete orphan attachments when removed from draft #532
• Fix cursor position when clicking in combobox input #534
• Close left panel when clicking active folder on mobile
• Close thread after send only if needed

Security

• Prevent IDOR on ThreadAccess thread and mailbox fields #557
• Add defense in-depth for XSS vulnerabilities #520

v0.2.0

Added

• Display calendar invites in messages #481
• Add integrations view in mailbox settings #488
• Allow to retry send Message in Django Admin and filter Message by delivery status #499
• When forwarding a message, the attachments are added to the draft as new attachments #485
• Add InboundMessage admin view #505
• Add worker.py command and improve task routing on queues #504

Changed

• Add loading state to the refresh button #511
• Refactor permissions code for viewsets #503

Fixed

• Strip NUL bytes from email content #524
• Raise new "DUPLICATE" error when there are 2 SPF records #521
• Fix memory leak with large mbox file import #516
• Fix env var still overriding the Celery default
• Add default "invitation.ics" name for invite downloads
• Make celery app name explicit to fix potential $APP override
• Fix a few edge cases in email parser #507
• Fix duplicate recipient creation errors #496
• Fix SSL error and improve authentication failure #495

v0.1.1

Fixed

• Now DJANGO_ADMIN_URL must not end with /.

v0.1.0

Added

• Allow to save an attachment into Drive workspace #408
• Add a SPAM folder in mailbox panel
• Allow to search for spam messages
• Add is_trashed flag to thread model
• Add to select multiple threads in thread panel
• Add image proxy endpoint to display external images in messages
• Add to_exact modifier to search query
• Allow to toggle spam status of a thread

Changed

• Configure Drive App Name through environment variable (DRIVE_APP_NAME)
• Inherit OIDC Authentication backend from django-lasuite #408
• Exclude is_trashed and is_spam threads from search results by default
• to search modifier now looks for messages where recipient fields (to, cc, bcc) contain the given email address.