WEBDIENSTE/lasuite-messages
1
0
Fork 0
mirror of https://github.com/suitenumerique/messages.git synced 2026-10-19 14:51:36 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
python-3.14.7
lasuite-messages/CHANGELOG.md
T
BastienandGitHub ac387db978 🔒️(frontend) upgrade deps, add an ip allowlist for django admin, harden github actions 
The Scalingo build script pins Caddy a second time, so both pins move
together. The checksums come from the official release checksum files.

DJANGO_ADMIN_IP_ALLOWLIST limits the Django admin URL to a CIDR
list; unset keeps the current open behavior. The client_ip matcher
reads X-Forwarded-For only from MESSAGES_FRONTEND_TRUSTED_PROXIES,
and trusted_proxies_strict takes the rightmost untrusted address, so
a spoofed or appended header never passes the filter. On Scalingo,
set the trusted proxies to private_ranges; the router IP ranges are
not published.

make test-front-distroless builds the production image and smoke-tests
it: heartbeat, lprobe healthcheck, allow/deny cases, spoofed headers,
and the trusted-proxy path. The CI runs it; the published image had no
test before. The script picks bridge or host network mode from the
daemon, so it also runs on Docker Desktop.

A moving major tag can change after a compromise of the action
repository. Each pin keeps the version as a comment. The pins also
upgrade every action to its latest major: the new majors only move the
runtime to node24 and remove inputs these workflows do not use.
crowdin v3 changes only custom CLI args, which we do not pass.

Set persist-credentials: false on every checkout step, so the job
token does not stay in .git/config for later steps. Remove the unused
GITHUB_TOKEN from the crowdin upload workflow: the action reads it
only in the push and pull-request paths, and this workflow disables
both. Restrict the crowdin workflow permissions to contents: read.
2026-09-06 20:50:32 +02:00

13 KiB
Raw Permalink Blame History

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Added

  • Setup guides for the authentication provider and the identity provider
  • IP allowlist for the Django admin URL in the frontend Caddy proxy
  • Smoke test for the frontend production image (make test-front-distroless)

Changed

  • Bump keycloak to 26.7.2
  • Bump Caddy to 2.11.4 and lprobe to v0.2.0 in the frontend image

Fixed

  • Grant view-realm to the Keycloak service account, needed by the 2FA toggle
  • Run make test-keycloak against a freshly imported Keycloak realm

Security

  • Turn the direct access grant off on the Keycloak rest-api client

0.9.0 - 2026-07-22

Added

  • Push notification system for iOS, Android and Web
  • Bootstrap Capacitor mobile apps (iOS/Android) sharing the existing SPA
  • Self-hosted OTA update chain for mobile apps
  • Mobile OIDC session handoff via a one-time token on an allowlisted deep link
  • Inbound webhooks and message postmarks
  • Host allowlist to bypass SSRF checks on internal networks
  • Detect raw text links in HTML bodies and warn the user before redirect #744
  • Support a next param at login to restore the requested route after auth
  • Display unread count in the mailbox dropdown #738
  • Add X-Mailer header on outbound messages
  • Cache-busting source version in build
  • Full documentation on spam processing

Changed

  • Rewrite MTA-in in pure Python to remove the Postfix dependency #692
  • Refactor imports: retries, continuous mode, direct-to-offload storage, cancellation and a list UI in the settings modal #742
  • Serve frontend configuration from the backend #734
  • Deliver the CSRF token via the session instead of a cookie
  • Generate message-id with the builtin email.utils.make_msgid #730
  • Set up browserslist and Vite legacy plugin to support Chrome >= 109 #741 #750
  • Reset search when switching mailbox #743
  • Clearer message on the no-mailbox view
  • Explicit feedback when a user is authenticated on the IdP but has no account
  • Improve make bootstrap setup time and overall DevX
  • Bump django-lasuite to 0.0.27
  • Upgrade Keycloak theme to 2.3.4 #732

Removed

  • Remove the TESTDOMAIN feature, superseded by autojoin domains
  • Remove the react-email component from outbound message rendering

Fixed

  • Fix relay block indentation breaking SASL auth in MTA out #733
  • Fix Outlook Web handler in the unquote logic #754
  • Fix premature line wrapping in the composer on Safari 26 #735 #740
  • Fix line break in the composer on Chrome for Android #725
  • Set an attachment name fallback
  • Fix hardcoded lang=en that might trigger auto-translate
  • Improve re-processing of inbound messages from the admin
  • Save the origin IP across STARTTLS restarts (pymta)

Security

  • Bump keycloak to 26.6.4 (CERTFR-2026-AVI-0815) #729

0.8.0 - 2026-06-18

Added

  • Allow permanently deleting drafts and improve draft edition
  • Allow passwordless mailbox creation when identity sync is off #707
  • Gather mailbox settings into a dialog
  • Translate template placeholder and add user_name builtin variable
  • Report selfcheck status to Sentry crons #694

Changed

  • Drop Next.js for Vite + TanStack Router #675
  • Move email parser & composer to new jmap-email library #700
  • Add PyPI release scripts for jmap-email
  • Use LaGaufreV2 component
  • Improve thread navigation a11y and multiselect UX #708
  • Refine mailbox dropdown menu #705
  • New homepage illustration #702
  • Internationalize missing strings
  • Wrap autoreply date column
  • Bump dompurify to 3.4.11
  • Bump django-lasuite to 0.0.26 #689

Fixed

  • Fix composer issues
  • Add To header to outbound mails missing one #712
  • Manage message/delivery-status attachments at compose
  • Persist mailbox name when contact is missing
  • Fix order and default calendar selection when RSVPing #699
  • Fix display of recurring events with exceptions #686
  • Fix opportunistic TLS against MXes with mismatched certs #687
  • Fix mbox detection as text/html with some libmagic versions #696
  • Complete PST email folder prefixes list
  • Fix milter socket permission race on startup #693

Security

  • Add some defense-in-depth bits #706
  • Harden SMTP connection & proxies config
  • Harden inbound email parsing #695

0.7.0 - 2026-05-28

Added

  • Attachments preview #676
  • Add link to a CalDAV instance to accept events directly #584

Changed

  • Improve sending experience #681
  • Remove deprecated model fields from tiered storage migration #678

Fixed

  • Unmount thread view immediately on unselect thread #680
  • Prevent refetch thread messages on draft deletion #682

0.6.0 - 2026-05-20

Added

  • Add thread assignation feature #645
  • Add mention notifications via UserEvent #621
  • Allow sending internal messages through ThreadEvent #566
  • Add thread deep linking #664
  • Add label assignment with archive and bulk label widget
  • Enable inviting users that haven't logged in yet #644
  • Add configurable inbound auth backends #636
  • Add encryption, custom scopes, levels and auditing on channels #599
  • Add recursive SPF check and optional send-time validation #625
  • Add tiered storage and refactor blobs/attachments
  • Add mandatory TOTP field and search field in admin #667
  • Add silent login support
  • Make panel sections resizable
  • Add read/unread action on thread action bar #659
  • Add lprobe healthchecks and checksum verification for lprobe + Caddy #600

Changed

  • Improve message composer
  • Switch back to Python's stdlib for email composition
  • Put split thread feature behind a feature flag #624
  • Show tooltip to confirm mailbox refresh
  • Disable application menu when no option is available
  • Focus to field on forward
  • Align send button on the left
  • Upgrade Cunningham and ui-kit
  • Localize attachment separator
  • Force default language on frontend #647
  • Add DNS propagation delay info #654
  • Allow specifying a channel id for the home feedback widget #655
  • Support legacy and new widget attribute #650
  • Update widget logic to latest version #649
  • Refactor thread query cache management #642
  • Allow reindexing from a given date
  • Defer indexation tasks for better throughput
  • Improve search_reindex bulk payload
  • Move imports and reindex worker queues to dedicated containers #643
  • Bump Keycloak to 26.6.1 #637

Fixed

  • Improve PST import logic
  • Allow thread editor to destroy thread accesses #668
  • Enforce full edit rights on thread mutations
  • Fix race condition in last-editor deletion guard
  • Fix thread panel header with nested label #658
  • Fix label popup stacking with create-label modal #635
  • Fix email parsing edge cases with UTF-8 in flanker #656
  • Fix threads ordering #617
  • Fix double request and flickering on search #596
  • Handle non-serializable Celery task errors and stop infinite polling #633
  • Quote error field and log SOCKS proxy in outbound delivery #626
  • Do not mark thread as read when sending autoreply #594

Security

  • Stop flagging inbound From=To mails as is_sender #652
  • Force including special characters in generated passwords #640
  • Factorize SSRF code and allow redirects in image proxy #631

0.5.0 - 2026-03-16

Added

  • Add autoreply feature with scheduling support #569
  • Add an action to split a thread from a message #561
  • Add starred/important thread feature scoped per mailbox #581
  • Add unread and starred filters in thread panel #581
  • Add better filtering and granularity for usage metrics
  • Expose oidc_autojoin and identity_sync flags in provisioning API

Changed

  • Customize thread panel bulk actions according to selection state

  • Rename usage API params to be more generic #589

  • Remove per-message starred in favor of thread-level starred #588

    ⚠️ This migration requires a search reindex to be run after the upgrade.

  • Use url_permalink from Drive and limit requests to Drive resource server #587

Fixed

  • Make DNS checking more resilient
  • Remove mailbox.id from metrics

Security

  • Prevent XSS and URL redirect in shallow navigation

0.4.0 - 2026-03-05

Added

  • Store thread read state per thread access #575

    ⚠️ This migration requires a search reindex to be run after the upgrade.

  • Store and display the user who sent a message #574

  • Display selected threads count in right panel #576

  • Add skip navigation link for keyboard users #573

  • Add DeployCenter backend for syncing maildomain admins #572

  • Add management command to print all users of the instance

Changed

  • Bump keycloak to 26.5.4 #571
  • Add migrations-check Makefile command

Fixed

  • Preserve scroll position across renders #578
  • Convert newlines to <br> in styled text #577
  • Scope labels and user_role to the requested mailbox

0.3.0 - 2026-02-24

Added

  • Add configurable help center button in header #537
  • Add outbound message recipients throttling #506
  • Add webhook and logging for selfchecks, replacing pushgateway #550
  • Add mailbox export in mbox format with labels #553
  • Add PST import support and streaming for mbox #544
  • Add denylist for personal mailbox prefixes #540
  • Add multi-column layout block for signature editor #551
  • Add celery task events for worker monitoring #549
  • Add image block in template, signature and message composers
  • Add storage usage metrics API endpoint #538
  • Add conditional outbox folder
  • Add stronger DNS checks with configurable records #522
  • Add print button in messages context menu #518
  • Add autofocus option to message, template and signature composers
  • Add arm64 platform support for Docker image builds #554

Changed

  • ❗ BREAKING: Update the Drive third party api logic to comply with the new Drive logic. Messages now interops with Drive >= 0.13.0
  • Replace queue-based save/send orchestration with async promise ref
  • Use display_name for labels and auto-unfold active parents #547
  • Optimize MessageTemplate serialization and body handling #545
  • Defer HTML/text body export to send/save time
  • Add composer tools (text color, side menu and drag block handle)
  • Improve outbox wording #539
  • Replace nginx with Caddy for frontend reverse proxy and Scalingo deployment #556
  • Replace MinIO with RustFS for object storage in development #556
  • Migrate Python packaging from Poetry to uv #556
  • Standardize and rename Makefile targets #556
  • Upgrade Python to 3.14 #556
  • Remove Django i18n and backend translation catalogs #556

Fixed

  • Delete orphan attachments when removed from draft #532
  • Fix cursor position when clicking in combobox input #534
  • Close left panel when clicking active folder on mobile
  • Close thread after send only if needed

Security

  • Prevent IDOR on ThreadAccess thread and mailbox fields #557
  • Add defense in-depth for XSS vulnerabilities #520

0.2.0 - 2026-02-03

Added

  • Display calendar invites in messages #481
  • Add integrations view in mailbox settings #488
  • Allow to retry send Message in Django Admin and filter Message by delivery status #499
  • When forwarding a message, the attachments are added to the draft as new attachments #485
  • Add InboundMessage admin view #505
  • Add worker.py command and improve task routing on queues #504

Changed

  • Add loading state to the refresh button #511
  • Refactor permissions code for viewsets #503

Fixed

  • Strip NUL bytes from email content #524
  • Raise new "DUPLICATE" error when there are 2 SPF records #521
  • Fix memory leak with large mbox file import #516
  • Fix env var still overriding the Celery default
  • Add default "invitation.ics" name for invite downloads
  • Make celery app name explicit to fix potential $APP override
  • Fix a few edge cases in email parser #507
  • Fix duplicate recipient creation errors #496
  • Fix SSL error and improve authentication failure #495

0.1.1 - 2026-01-22

Fixed

  • Now DJANGO_ADMIN_URL must not end with /.

0.1.0 - 2026-01-20

Added

  • Allow to save an attachment into Drive workspace #408
  • Add a SPAM folder in mailbox panel
  • Allow to search for spam messages
  • Add is_trashed flag to thread model
  • Add to select multiple threads in thread panel
  • Add image proxy endpoint to display external images in messages
  • Add to_exact modifier to search query
  • Allow to toggle spam status of a thread

Changed

  • Configure Drive App Name through environment variable (DRIVE_APP_NAME)
  • Inherit OIDC Authentication backend from django-lasuite #408
  • Exclude is_trashed and is_spam threads from search results by default
  • to search modifier now looks for messages where recipient fields (to, cc, bcc) contain the given email address.
Reference in New Issue View Git Blame Copy Permalink