Commit Graph

  • ffb3067680 Merge tag 'v1.29.2' into develop develop Ralph Slooten 2026-02-25 12:28:48 +13:00
  • dc3e7e701f Merge branch 'release/v1.29.2' v1.29.2 master Ralph Slooten 2026-02-25 12:28:45 +13:00
  • f1d0bcda90 Release v1.29.2 Ralph Slooten 2026-02-25 12:28:44 +13:00
  • 4f651e4f14 Chore: Update caniemail test database Ralph Slooten 2026-02-25 12:10:33 +13:00
  • c3819ca26d Chore: Update node dependencies Ralph Slooten 2026-02-25 12:09:34 +13:00
  • 4febeb1acd Chore: Update Go dependencies Ralph Slooten 2026-02-25 12:07:32 +13:00
  • 10ad4df8cc Security: Prevent Server-Side Request Forgery (SSRF) via Link Check API ([GHSA-mpf7-p9x7-96r3](https://github.com/axllent/mailpit/security/advisories/GHSA-mpf7-p9x7-96r3)) Ralph Slooten 2026-02-24 14:22:02 +13:00
  • 632113fcc5 Fix: Include 8BITMIME in SMTPD EHLO response (#648) Ralph Slooten 2026-02-24 11:25:19 +13:00
  • 08ed46fc46 Use const instead of let Ralph Slooten 2026-02-21 22:43:51 +13:00
  • 6927c2b73b Chore: Upgrade eslint JavaScript linting Ralph Slooten 2026-02-21 22:43:34 +13:00
  • ac81da5ae0 Fix: Update install instructions when setting INSTALL_PATH Matthew Spahr 2026-02-16 22:51:00 -06:00
  • f1d55e4e39 Release v1.29.1 Ralph Slooten 2026-02-13 20:57:09 +13:00
  • b622252411 Merge tag 'v1.29.1' into develop Ralph Slooten 2026-02-13 20:47:03 +13:00
  • 5527379475 Merge branch 'release/v1.29.1' v1.29.1 Ralph Slooten 2026-02-13 20:46:59 +13:00
  • 1d87f1164e Chore: Update node dependencies Ralph Slooten 2026-02-13 20:44:34 +13:00
  • b4ca68eb48 Chore: Update Go dependencies Ralph Slooten 2026-02-13 20:38:19 +13:00
  • 971ae95a67 Chore: Bump axios from 1.13.4 to 1.13.5 dependabot[bot] 2026-02-11 20:23:27 +00:00
  • c8caa29e24 Fix: Enable "Mark all read" button (Inbox) when new message is received Ralph Slooten 2026-02-09 15:38:11 +13:00
  • 7d314d2b50 Chore: Add CORS error logging and update error messages for failed CORS requests Ralph Slooten 2026-02-08 11:19:54 +13:00
  • 9d2f30787a Fix spelling Ralph Slooten 2026-02-08 11:17:17 +13:00
  • b9d071db81 Update contributing document Ralph Slooten 2026-02-05 17:05:12 +13:00
  • a5ee550ba3 Rebuild changelog Ralph Slooten 2026-02-01 16:15:27 +13:00
  • 3e41beb214 Merge tag 'v1.29.0' into develop Ralph Slooten 2026-02-01 16:12:05 +13:00
  • 43b8ba3dc6 Merge branch 'release/v1.29.0' v1.29.0 Ralph Slooten 2026-02-01 16:12:00 +13:00
  • d41eca3df7 Release v1.29.0 Ralph Slooten 2026-02-01 16:11:59 +13:00
  • e6fd638067 Detect if copy to clipboard is supported Ralph Slooten 2026-02-01 16:09:49 +13:00
  • e2b1b2d0fe Code cleanup Ralph Slooten 2026-02-01 15:58:31 +13:00
  • 9b4ec97483 Minor UI tweaks Ralph Slooten 2026-02-01 15:44:13 +13:00
  • e735904167 Chore: Update node dependencies Ralph Slooten 2026-02-01 15:40:59 +13:00
  • 94113222cc Chore: Update Go dependencies Ralph Slooten 2026-02-01 15:37:40 +13:00
  • 5414695508 Test: Add message summary attachment checksum tests Ralph Slooten 2026-02-01 15:28:55 +13:00
  • dd74d46880 Feature: Option to display/hide attachment information in message view in web UI including checksums, content type & disposition Ralph Slooten 2026-02-01 15:19:06 +13:00
  • 0bfbb4cc5f Feature: Include message attachment checksums (MD5, SHA1 & SHA254) in API message summary Ralph Slooten 2026-02-01 14:58:36 +13:00
  • 38c0c4fd47 Update webhook delay flag description Ralph Slooten 2026-01-31 23:13:03 +13:00
  • 9391b075d0 Chore: Add support for webhook delay (#627) Roman Urbanovich 2026-01-23 13:50:35 +03:00
  • a87b2a9455 Update API CORS flag description Ralph Slooten 2026-01-31 23:08:15 +13:00
  • 8d18618e4a Test: Add CORS tests Ralph Slooten 2026-01-31 22:54:55 +13:00
  • a63bcd9bd3 Chore: Add support for multi-origin CORS settings and apply to events websocket (#630) Ralph Slooten 2026-01-31 22:54:32 +13:00
  • f33f9bec2d Merge branch 'release/v1.28.4' v1.28.4 Ralph Slooten 2026-01-25 10:07:35 +13:00
  • ff47ba96b8 Release v1.28.4 Ralph Slooten 2026-01-25 10:07:35 +13:00
  • b9f36312d7 Fix: Avoid error on image type assertion in thumbnail generation Ralph Slooten 2026-01-25 09:47:06 +13:00
  • 291c449591 Chore: Update node dependencies Ralph Slooten 2026-01-25 09:30:31 +13:00
  • d7a4a60536 Chore: Update Go dependencies Ralph Slooten 2026-01-25 09:27:24 +13:00
  • 464ff68c34 Fix: Prevent nested MAIL command during an active SMTP transaction (#623) Ralph Slooten 2026-01-23 17:41:33 +13:00
  • 9383c5876b Fix: Ensure SMTP HELO/EHLO command is issued before MAIL FROM as per RFC 5321 (#621) Ralph Slooten 2026-01-23 17:27:13 +13:00
  • a3616e52d9 Chore: Increase allowed SMTP email address length to 1024 chars & return clearer SMTP responses for failures (#620) Ralph Slooten 2026-01-23 16:46:29 +13:00
  • 980e54c21f Merge tag 'v1.28.3' into develop Ralph Slooten 2026-01-18 21:36:02 +13:00
  • eac491cd89 Merge branch 'release/v1.28.3' v1.28.3 Ralph Slooten 2026-01-18 21:35:55 +13:00
  • 12076bca72 Release v1.28.3 Ralph Slooten 2026-01-18 21:35:54 +13:00
  • 028ca1d715 Chore: Update node dependencies Ralph Slooten 2026-01-18 12:24:54 +13:00
  • 7d7ba88e9c Chore: Update Go dependencies Ralph Slooten 2026-01-18 12:22:46 +13:00
  • 973fc1f975 Merge branch 'feature/GHSA-6jxm-fv7w-rw5j' into develop Ralph Slooten 2026-01-18 12:00:09 +13:00
  • 1679a0aba5 Security: Prevent Server-Side Request Forgery (SSRF) via HTML Check API ([GHSA-6jxm-fv7w-rw5j](https://github.com/axllent/mailpit/security/advisories/GHSA-6jxm-fv7w-rw5j)) Ralph Slooten 2026-01-13 15:59:00 +13:00
  • 4a4c149eed Formatting Ralph Slooten 2026-01-13 15:01:55 +13:00
  • c01335f0e3 Merge branch 'feature/GHSA-54wq-72mp-cq7c' into develop Ralph Slooten 2026-01-18 11:53:11 +13:00
  • 181cb0714a Test: Add maximum email length validation tests - RFC5321 (section 4.5.3.1) Ralph Slooten 2026-01-16 11:51:32 +13:00
  • 00d52d5931 Fix: Validate maximum lengths of email addresses - RFC5321 (section 4.5.3.1) Ralph Slooten 2026-01-16 11:33:24 +13:00
  • 050da038af Test: Add SMTP tests for address compliancy (RFC 5322) and header injection Ralph Slooten 2026-01-15 12:02:56 +13:00
  • 36cc06c125 Security: Ensure SMTP TO & FROM addresses are RFC 5322 compliant and prevent header injection ([GHSA-54wq-72mp-cq7c](https://github.com/axllent/mailpit/security/advisories/GHSA-54wq-72mp-cq7c)) Ralph Slooten 2026-01-15 11:59:59 +13:00
  • 2734efbc66 Test: Update tag tests with length limits and @ character Ralph Slooten 2026-01-17 11:22:19 +13:00
  • 7cda4a36f1 Chore: Allow @ character in message tags & set max length to 100 characters per tag Ralph Slooten 2026-01-17 11:12:45 +13:00
  • 45b3676e52 Fix: Auto-tagging using SMTP username using plain auth (#617) Ralph Slooten 2026-01-16 13:50:15 +13:00
  • d50347d667 Fix: Correctly detect macOS group in install.sh (#619) BTC-Tim 2026-01-15 22:12:11 +01:00
  • c035139b54 Chore: Fix formatting and update reporting instructions in SECURITY.md (#614) Omar Kurt 2026-01-11 00:24:58 +03:00
  • 3108d82e06 Fix: Correctly render default addresses in release modal after settings change (#594) Ralph Slooten 2026-01-10 22:19:18 +13:00
  • 648d5863da Merge tag 'v1.28.2' into develop Ralph Slooten 2026-01-10 16:16:14 +13:00
  • 585ea1dc30 Merge branch 'release/v1.28.2' v1.28.2 Ralph Slooten 2026-01-10 16:16:06 +13:00
  • c66a06379a Release v1.28.2 Ralph Slooten 2026-01-10 16:16:05 +13:00
  • c5c9292863 More reliable handling for default release email editing Ralph Slooten 2026-01-10 15:56:19 +13:00
  • 6f1f4f34c9 Security: Prevent Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to message data [CVE-2026-22689](https://github.com/axllent/mailpit/security/advisories/GHSA-524m-q5m7-79mm) Ralph Slooten 2026-01-10 15:42:14 +13:00
  • 877a9159ce Delay bootstrap-tags init until after render Ralph Slooten 2026-01-08 16:23:24 +13:00
  • c4582889ad Update default release address wording Ralph Slooten 2026-01-08 16:20:00 +13:00
  • cd1cf695b9 Merge branch 'feature/default-release-address' into develop Ralph Slooten 2026-01-08 16:04:23 +13:00
  • 392904fd23 Chore: Avoid empty URL query parameter when returning to inbox from message view Ralph Slooten 2026-01-08 15:54:37 +13:00
  • f0160c0e29 Feature: Allow default mail addresses to be set when releasing message (#594) Ralph Slooten 2026-01-08 15:49:53 +13:00
  • f9024d1f77 Chore: Remove webkit warnings about missing template / render functions Ralph Slooten 2026-01-07 12:58:44 +13:00
  • 061f159293 Merge tag 'v1.28.1' into develop Ralph Slooten 2026-01-06 15:38:14 +13:00
  • e69a0d75c9 Merge branch 'release/v1.28.1' v1.28.1 Ralph Slooten 2026-01-06 15:38:11 +13:00
  • 0847167694 Release v1.28.1 Ralph Slooten 2026-01-06 15:38:11 +13:00
  • 6dd3587ec6 Move security commits to top of list Ralph Slooten 2026-01-06 15:35:49 +13:00
  • 2d1e38d4fd Chore: Update node dependencies Ralph Slooten 2026-01-06 15:31:30 +13:00
  • 153174f928 Chore: Update Go dependencies Ralph Slooten 2026-01-06 15:28:50 +13:00
  • 3b9b470c09 Security: Restrict screenshot proxy to only support asset links contained in messages [CVE-2026-21859](https://github.com/axllent/mailpit/security/advisories/GHSA-8v65-47jx-7mfr) Ralph Slooten 2026-01-06 15:25:48 +13:00
  • dd99a4bcf0 Chore: Bump esbuild from 0.25.12 to 0.27.2 (#611) dependabot[bot] 2026-01-01 22:16:37 +13:00
  • 5bf2f2796b Chore: Bump actions/setup-node from 5 to 6 (#598) dependabot[bot] 2026-01-01 22:13:15 +13:00
  • a469655f65 Chore: Bump actions/stale from 10.0.0 to 10.1.1 (#604) dependabot[bot] 2026-01-01 22:12:43 +13:00
  • 432fedeafa Chore: Bump actions/cache from 4 to 5 (#607) dependabot[bot] 2026-01-01 22:12:15 +13:00
  • 37e4ff4139 Chore: Bump actions/checkout from 5 to 6 (#610) dependabot[bot] 2026-01-01 22:11:51 +13:00
  • 2808316dd2 Temporarily disable swagger validation due to persistent service issues Ralph Slooten 2025-12-22 17:12:35 +13:00
  • 43d759b0fc Update close-stale-issues workflow to include close-issue-reason Ralph Slooten 2025-12-22 16:45:44 +13:00
  • 264222d599 Test: Increase swagger test timeout Ralph Slooten 2025-12-20 17:07:36 +13:00
  • 5e4bdb78b8 Test: Add inline message tests Ralph Slooten 2025-12-20 16:45:57 +13:00
  • fc9572156b Merge tag 'v1.28.0' into develop Ralph Slooten 2025-11-26 17:44:28 +13:00
  • d52a0d550f Merge branch 'release/v1.28.0' v1.28.0 Ralph Slooten 2025-11-26 17:44:26 +13:00
  • fcce621f18 Release v1.28.0 Ralph Slooten 2025-11-26 17:44:26 +13:00
  • f4cd19aac2 Merge branch 'feature/updates' into develop Ralph Slooten 2025-11-26 17:33:38 +13:00
  • 46ccf866b2 Chore: Update caniemail test database Ralph Slooten 2025-11-26 17:32:49 +13:00
  • 266611fda0 Chore: Update node dependencies Ralph Slooten 2025-11-26 17:32:18 +13:00
  • fe3920e3c6 Chore: Update Go dependencies Ralph Slooten 2025-11-26 17:29:03 +13:00
  • ac02802d62 Merge branch 'feature/relay-smtp-errors' into develop Ralph Slooten 2025-11-26 16:34:39 +13:00