Ralph Slooten
ffb3067680
Merge tag 'v1.29.2' into develop
...
Release v1.29.2
2026-02-25 12:28:48 +13:00
Ralph Slooten
dc3e7e701f
Merge branch 'release/v1.29.2'
2026-02-25 12:28:45 +13:00
Ralph Slooten
f1d0bcda90
Release v1.29.2
2026-02-25 12:28:44 +13:00
Ralph Slooten
4f651e4f14
Chore: Update caniemail test database
2026-02-25 12:10:33 +13:00
Ralph Slooten
c3819ca26d
Chore: Update node dependencies
2026-02-25 12:09:34 +13:00
Ralph Slooten
4febeb1acd
Chore: Update Go dependencies
2026-02-25 12:07:32 +13:00
Ralph Slooten
10ad4df8cc
Security: Prevent Server-Side Request Forgery (SSRF) via Link Check API ([GHSA-mpf7-p9x7-96r3]( https://github.com/axllent/mailpit/security/advisories/GHSA-mpf7-p9x7-96r3 ))
...
By default all internal HTTP requests are now blocked, unless mailpit is started with the `--allow-internal-http-requests` flag (env `MP_ALLOW_INTERNAL_HTTP_REQUESTS=true`).
2026-02-24 14:22:02 +13:00
Ralph Slooten
632113fcc5
Fix: Include 8BITMIME in SMTPD EHLO response ( #648 )
2026-02-24 11:25:19 +13:00
Ralph Slooten
08ed46fc46
Use const instead of let
2026-02-21 22:43:51 +13:00
Ralph Slooten
6927c2b73b
Chore: Upgrade eslint JavaScript linting
2026-02-21 22:43:34 +13:00
Matthew Spahr
ac81da5ae0
Fix: Update install instructions when setting INSTALL_PATH
2026-02-17 20:51:14 +13:00
Ralph Slooten
f1d55e4e39
Release v1.29.1
2026-02-13 20:57:09 +13:00
Ralph Slooten
b622252411
Merge tag 'v1.29.1' into develop
...
Release v1.29.1
2026-02-13 20:47:03 +13:00
Ralph Slooten
5527379475
Merge branch 'release/v1.29.1'
2026-02-13 20:46:59 +13:00
Ralph Slooten
1d87f1164e
Chore: Update node dependencies
2026-02-13 20:44:34 +13:00
Ralph Slooten
b4ca68eb48
Chore: Update Go dependencies
2026-02-13 20:38:19 +13:00
dependabot[bot]
971ae95a67
Chore: Bump axios from 1.13.4 to 1.13.5
...
Bumps [axios](https://github.com/axios/axios ) from 1.13.4 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.4...v1.13.5 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.13.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-13 18:27:21 +13:00
Ralph Slooten
c8caa29e24
Fix: Enable "Mark all read" button (Inbox) when new message is received
2026-02-09 15:38:11 +13:00
Ralph Slooten
7d314d2b50
Chore: Add CORS error logging and update error messages for failed CORS requests
2026-02-08 11:19:54 +13:00
Ralph Slooten
9d2f30787a
Fix spelling
2026-02-08 11:17:17 +13:00
Ralph Slooten
b9d071db81
Update contributing document
2026-02-05 17:05:12 +13:00
Ralph Slooten
a5ee550ba3
Rebuild changelog
2026-02-01 16:15:27 +13:00
Ralph Slooten
3e41beb214
Merge tag 'v1.29.0' into develop
...
Release v1.29.0
2026-02-01 16:12:05 +13:00
Ralph Slooten
43b8ba3dc6
Merge branch 'release/v1.29.0'
2026-02-01 16:12:00 +13:00
Ralph Slooten
d41eca3df7
Release v1.29.0
2026-02-01 16:11:59 +13:00
Ralph Slooten
e6fd638067
Detect if copy to clipboard is supported
2026-02-01 16:09:49 +13:00
Ralph Slooten
e2b1b2d0fe
Code cleanup
2026-02-01 15:58:31 +13:00
Ralph Slooten
9b4ec97483
Minor UI tweaks
2026-02-01 15:44:13 +13:00
Ralph Slooten
e735904167
Chore: Update node dependencies
2026-02-01 15:40:59 +13:00
Ralph Slooten
94113222cc
Chore: Update Go dependencies
2026-02-01 15:37:40 +13:00
Ralph Slooten
5414695508
Test: Add message summary attachment checksum tests
2026-02-01 15:34:06 +13:00
Ralph Slooten
dd74d46880
Feature: Option to display/hide attachment information in message view in web UI including checksums, content type & disposition
...
Resolves #625
2026-02-01 15:34:06 +13:00
Ralph Slooten
0bfbb4cc5f
Feature: Include message attachment checksums (MD5, SHA1 & SHA254) in API message summary
2026-02-01 15:34:05 +13:00
Ralph Slooten
38c0c4fd47
Update webhook delay flag description
2026-02-01 15:34:05 +13:00
Roman Urbanovich
9391b075d0
Chore: Add support for webhook delay ( #627 )
2026-02-01 15:33:54 +13:00
Ralph Slooten
a87b2a9455
Update API CORS flag description
2026-02-01 15:33:53 +13:00
Ralph Slooten
8d18618e4a
Test: Add CORS tests
2026-02-01 15:33:53 +13:00
Ralph Slooten
a63bcd9bd3
Chore: Add support for multi-origin CORS settings and apply to events websocket ( #630 )
2026-02-01 15:33:53 +13:00
Ralph Slooten
f33f9bec2d
Merge branch 'release/v1.28.4'
2026-01-25 10:07:35 +13:00
Ralph Slooten
ff47ba96b8
Release v1.28.4
2026-01-25 10:07:35 +13:00
Ralph Slooten
b9f36312d7
Fix: Avoid error on image type assertion in thumbnail generation
...
Use imaging.Clone to ensure the image is always *image.NRGBA, preventing panics when decoding non-NRGBA images (e.g., JPEGs as *image.YCbCr).
2026-01-25 10:05:39 +13:00
Ralph Slooten
291c449591
Chore: Update node dependencies
2026-01-25 10:05:38 +13:00
Ralph Slooten
d7a4a60536
Chore: Update Go dependencies
2026-01-25 10:05:38 +13:00
Ralph Slooten
464ff68c34
Fix: Prevent nested MAIL command during an active SMTP transaction ( #623 )
2026-01-25 10:05:28 +13:00
Ralph Slooten
9383c5876b
Fix: Ensure SMTP HELO/EHLO command is issued before MAIL FROM as per RFC 5321 ( #621 )
2026-01-23 17:27:13 +13:00
Ralph Slooten
a3616e52d9
Chore: Increase allowed SMTP email address length to 1024 chars & return clearer SMTP responses for failures ( #620 )
...
This goes against the RFC5321 recommendation, however enforcing the recommended limits is clearly causing issues with users, and it appears no investigated SMTP servers enforce the strict limits either.
2026-01-23 16:46:29 +13:00
Ralph Slooten
980e54c21f
Merge tag 'v1.28.3' into develop
...
Release v1.28.3
2026-01-18 21:36:02 +13:00
Ralph Slooten
eac491cd89
Merge branch 'release/v1.28.3'
2026-01-18 21:35:55 +13:00
Ralph Slooten
12076bca72
Release v1.28.3
2026-01-18 21:35:54 +13:00
Ralph Slooten
028ca1d715
Chore: Update node dependencies
2026-01-18 12:24:54 +13:00
