webmail

v1.7.7 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 17d Communication & Email

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

calendar contacts email email-client jmap mail

+4 more

nextjs self-hosted typescript webmail

Summary

AI summary

Broad release touches 2026-07-09, https://github.com/sponsors/bulwarkmail, https://github.com/ivikssia, and https://github.com/proxforge.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds Jalali (Persian) calendar support with Saturday week start Adds Jalali (Persian) calendar support with Saturday week start Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds Hebrew locale with full RTL support Adds Hebrew locale with full RTL support Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds Slovak translation Adds Slovak translation Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds user‑selectable regional date format option Adds user‑selectable regional date format option Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Enables trusted‑senders address book sync by default when contacts are available Enables trusted‑senders address book sync by default when contacts are available Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds pin emails to top of folder list in Mail UI Adds pin emails to top of folder list in Mail UI Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds setting to disable tag‑color row tint in message list Adds setting to disable tag‑color row tint in message list Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds click sender avatar to select a message/thread (Thunderbird‑style) Adds click sender avatar to select a message/thread (Thunderbird‑style) Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds pin default account on top and drag‑to‑reorder account switcher in Accounts UI Adds pin default account on top and drag‑to‑reorder account switcher in Accounts UI Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds recipient autocomplete from Sent with on‑demand server search in Composer Adds recipient autocomplete from Sent with on‑demand server search in Composer Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Introduces `ui.rerenderEmail` API and restyled read‑receipt banner for plugins Introduces `ui.rerenderEmail` API and restyled read‑receipt banner for plugins Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Adds new plugin hooks: onBeforeBlobUpload, onBeforeDraftAutoSave, onBeforeEditDraft Adds new plugin hooks: onBeforeBlobUpload, onBeforeDraftAutoSave, onBeforeEditDraft Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Provides `ui.prompt` dialog and first‑class settings‑section tabs for plugins Provides `ui.prompt` dialog and first‑class settings‑section tabs for plugins Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Allows quick reply with Ctrl/Cmd+Enter in Email view Allows quick reply with Ctrl/Cmd+Enter in Email view Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Parses Stalwart spam headers in Header processing Parses Stalwart spam headers in Header processing Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Makes login logo size configurable and heading/subtitle hideable Makes login logo size configurable and heading/subtitle hideable Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Feature	Low	Adds Apple Touch icons for iOS home‑screen PWA support Adds Apple Touch icons for iOS home‑screen PWA support Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix
Bugfix	Medium	Hides Files when account lacks filenode capability in Mail UI Hides Files when account lacks filenode capability in Mail UI Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Keeps advanced search filters applied when switching folders in Mail UI Keeps advanced search filters applied when switching folders in Mail UI Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Routes keyword writes to the email's own account in unified view Mail UI Routes keyword writes to the email's own account in unified view Mail UI Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Shows storage quota with Stalwart in Mail UI Shows storage quota with Stalwart in Mail UI Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Fixes stale folder counters and opens message after spam actions Fixes stale folder counters and opens message after spam actions Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Waits for in‑flight attachment uploads before sending in Composer Waits for in‑flight attachment uploads before sending in Composer Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Medium	Stores event organizer as owner‑only to prevent duplicate ORGANIZER/ATTENDEE in Calendar Stores event organizer as owner‑only to prevent duplicate ORGANIZER/ATTENDEE in Calendar Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Maintains email list scrollability with bottom reading pane enabled and no conversation selected Maintains email list scrollability with bottom reading pane enabled and no conversation selected Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Renders emails that set height:100% on a wrapper element Renders emails that set height:100% on a wrapper element Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Hides images that fail to load in Mail UI Hides images that fail to load in Mail UI Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Hides spam action in Sent, Drafts and Scheduled folders Hides spam action in Sent, Drafts and Scheduled folders Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Commits a recipient on Space only when input is valid email in Composer Commits a recipient on Space only when input is valid email in Composer Source: granite4.1:30b@2026-07-16-audit Confidence: low	—
Bugfix	Low	Ignores quoted text for attachment reminder on reply/forward in Composer Ignores quoted text for attachment reminder on reply/forward in Composer Source: granite4.1:30b@2026-07-16-audit Confidence: low	—

Full changelog

1.7.7 (2026-07-09)

Thank you for your donations:

You? Become a sponsor!

One-time

@ivikssia

Monthly

Features

Plugins: ui.rerenderEmail API and restyled read-receipt banner
Plugins: New hooks — onBeforeBlobUpload, onBeforeDraftAutoSave, onBeforeEditDraft (#586)
Plugins: ui.prompt dialog and first-class settings-section tabs
Calendar: Jalali (Persian/Shamsi) calendar support with Saturday as week start (#490)
i18n: Hebrew locale with full RTL support
i18n: Slovak translation
i18n: User-selectable regional date format
Contacts: Enable trusted-senders address book sync by default when contacts are available
Mail: Pin emails to the top of the folder list
Mail: Setting to disable the tag-color row tint in the message list
Mail: Click the sender avatar to select a message/thread (Thunderbird-style)
Accounts: Pin the default account on top and drag-to-reorder the account switcher
Composer: Recipient autocomplete from Sent, with on-demand server search
Composer: Preselect the identity of the active mailbox for new messages
Email: Send a quick reply with Ctrl/Cmd+Enter
Headers: Parse Stalwart spam headers
Login: Configurable logo size and hideable heading/subtitle
PWA: Apple Touch icons for the iOS home screen

Fixes

Mail: Hide Files when the account lacks the filenode capability (#563)
Mail: Keep advanced search filters applied when switching folders (#553)
Mail: Keep the email list scrollable when the bottom reading pane is enabled with no conversation selected
Mail: Route keyword writes to the email's own account in unified view
Mail: Render emails that set height:100% on a wrapper element
Mail: Hide images that fail to load
Mail: Storage quota not shown with Stalwart (#577)
Spam: Hide the spam action in Sent, Drafts and Scheduled
Spam: Fix stale folder counters and open message after spam actions
Composer: Wait for in-flight attachment uploads before sending
Composer: Only commit a recipient on Space when the input is a valid email (#571)
Composer: Attachment reminder now ignores quoted text on reply/forward (#570)
Calendar: Store the event organizer as owner-only to prevent duplicate ORGANIZER/ATTENDEE
Calendar: Strike through cancelled events and mute their reminders (#572)
Calendar: Use calendarAddress/organizerCalendarAddress for scheduling, drop retired sendTo/replyTo (#500)
Auth: Keep the session when the auth server is briefly unreachable
Shortcuts: Make keyboard shortcuts layout-agnostic and map by physical position
Shortcuts: Don't toggle mailbox subfolders on Arrow keys while typing
Contacts: Clear the photo on the server by sending media: null when removed
Plugins: Preserve the settings slot and privileged tier
Pro: Prompt to save or discard a draft when closing a compose tab via the tab-bar X
Pro: Show the Edit button on draft emails opened in a new tab
List: Shift-click on the checkbox extends the selection (range)
CSP: Allow external/data fonts so email webfonts render
Notifications: Brand push notifications with the configured PWA icon
Notifications: Notification sound preview — base-path prefix and longer default beep
Unsubscribe: Send mailto: unsubscribe ourselves instead of via the OS handler
Branding: Apply per-domain favicon override in root metadata (#585)
Settings: Load the trusted-senders address book on the settings page so the count isn't 0
Setup: Clone source when setup.sh runs detached from a checkout (#518)
Server: Use a callable .get to detect Headers in pickRequestHost

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track webmail

Get notified when new releases ship.

About webmail

Webmail built for the 21st Century. A modern, self-hosted email client for Stalwart Mail Server powered by the JMAP protocol. Email, calendar, contacts and files. Fast, private, and open source.

All releases →

Related context

Related tools

Earlier breaking changes

v1.7.0 Server‑managed plugin bundles must be Ed25519‑signed and admin‑approved before loading.
v1.7.0 Bundle hash is now full SHA-256; legacy hashes auto-migrated.
v1.7.0 Server-managed bundles require Ed25519 signature verification.
v1.7.0 Plugins run in sandboxed iframe with postMessage RPC bridge.