This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+6 more
Affected surfaces
Summary
AI summaryNew features across scheduled sends, backend exclusions, login lockout, MTA-STS/TLS-RPT display, contact page revamp, folder search, plus bug fixes in Docker, frontend alignment, EWS errors, deprecations, tests, cache handling, typo correction, SMTP SCRAM, SPA navigation, and inline message panel.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
List scheduled messages in a combined view. List scheduled messages in a combined view. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Option to exclude auto BCC from messages added. Option to exclude auto BCC from messages added. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Brute force login lockout protection implemented. Brute force login lockout protection implemented. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Display recipient MTA-STS and TLS-RPT policy status. Display recipient MTA-STS and TLS-RPT policy status. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Update php-ews dependency version to >=0.11.2 in composer files. Update php-ews dependency version to >=0.11.2 in composer files. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Revamp contacts page design. Revamp contacts page design. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Feature | Medium |
Allow search flagged messages in all folders if enabled in settings. Allow search flagged messages in all folders if enabled in settings. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Dependency | Medium |
Bump urllib3 from 2.6.3 to 2.7.0 in /tests/selenium. Bump urllib3 from 2.6.3 to 2.7.0 in /tests/selenium. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Deprecation | Medium |
Remove PHP 7.1, 7.2, and 7.4 deprecations. Remove PHP 7.1, 7.2, and 7.4 deprecations. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Point Docker Compose to latest Cypht release 2.8.0. Point Docker Compose to latest Cypht release 2.8.0. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Resolve errors related to EWS when manipulating folders. Resolve errors related to EWS when manipulating folders. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Clear cached mailbox on any cache type, including subfolders, and reset cache when triggering folders reload from client. Clear cached mailbox on any cache type, including subfolders, and reset cache when triggering folders reload from client. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Correct SCRAM authentication command and mechanism selection in SMTP module. Correct SCRAM authentication command and mechanism selection in SMTP module. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Fix extra headers buttons missalignment in frontend. Fix extra headers buttons missalignment in frontend. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
CSS fixes for advanced search on mobile in frontend. CSS fixes for advanced search on mobile in frontend. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Resolve intermittent test failures in search and servers. Resolve intermittent test failures in search and servers. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Correct 'booelan' typo to 'boolean' in Hm_MessagesStore. Correct 'booelan' typo to 'boolean' in Hm_MessagesStore. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Prevent SPA navigation from overriding inline message click. Prevent SPA navigation from overriding inline message click. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Closing right-style message panel no longer redirects to home; restores list view instead. Closing right-style message panel no longer redirects to home; restores list view instead. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Other | Medium |
Add tests for sievefilters. Add tests for sievefilters. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
Full changelog
126 changes from 8 contributors (0 new contributor). 87 files were affected.
What's Changed
New features
- feat(module/scheduled_sends): list scheduled messages in a combined view by @mercihabam in https://github.com/cypht-org/cypht/pull/1943
- feat(backend): add option to exclude auto BCC from messages by @Shadow243 in https://github.com/cypht-org/cypht/pull/1740
- feat(backend): add brute force login lockout protection by @Danelif in https://github.com/cypht-org/cypht/pull/1938
- feat(frontend/backend): show recipient MTA-STS and TLS-RPT policy status by @Danelif in https://github.com/cypht-org/cypht/pull/1736
- feat(backend): update php-ews dependency version to >=0.11.2 in composer files by @kambereBr in https://github.com/cypht-org/cypht/pull/1953
- feat(frontend): revamp contacts page design by @Shadow243 in https://github.com/cypht-org/cypht/pull/1728
- feat(backend): allow search flagged in all folders if enabled in settings by @Shadow243 in https://github.com/cypht-org/cypht/pull/1582
Bug fixes
- fix(docker): point docker compose to latest Cypht release 2.8.0 by @IrAlfred in https://github.com/cypht-org/cypht/pull/1947
- fix(frontend): extra headers buttons missalignment by @camilevahviraki in https://github.com/cypht-org/cypht/pull/1952
- fix(frontend): css fixes for the advanced search on mobile by @pom2ter in https://github.com/cypht-org/cypht/pull/1946
- fix(backend): fix errors related to EWS when manipulating folders by @Shadow243 in https://github.com/cypht-org/cypht/pull/1937
- fix(other): remove php 7.1 7.2 and 7.4 deprecations by @IrAlfred in https://github.com/cypht-org/cypht/pull/1949
- fix(e2e): resolve intermittent test failures in search and servers by @IrAlfred in https://github.com/cypht-org/cypht/pull/1948
- build(deps): bump urllib3 from 2.6.3 to 2.7.0 in /tests/selenium by @dependabot[bot] in https://github.com/cypht-org/cypht/pull/1954
- fix(frontend/backend): clear cached mailbox on any cache type, clearing also subfolders, and reset cache when triggering folders reload from client by @mercihabam in https://github.com/cypht-org/cypht/pull/1955
- test(unit): add tests for sievefilters by @camilevahviraki in https://github.com/cypht-org/cypht/pull/1920
- fix(other): correct 'booelan' typo to 'boolean' in Hm_MessagesStore to respect "Don't flag message as read on open" setting by @IrAlfred in https://github.com/cypht-org/cypht/pull/1958
- fix(module/smtp): correct SCRAM authentication command and mechanism selection by @IrAlfred in https://github.com/cypht-org/cypht/pull/1959
- fix(frontend): prevent SPA navigation from overriding inline message click by @IrAlfred in https://github.com/cypht-org/cypht/pull/1930
- fix(module/inline_message): closing right-style message panel redirects to home instead of restoring list view by @IrAlfred in https://github.com/cypht-org/cypht/pull/1963
- fix(other): update version reference to 2.9.0 for upcoming release by @IrAlfred in https://github.com/cypht-org/cypht/pull/1966
Full Changelog: https://github.com/cypht-org/cypht/compare/v2.8.0...v2.9.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About cypht
Cypht: Lightweight Open Source webmail aggregator [PHP, JS]. Supports IMAP/SMTP, JMAP and EWS (Exchange Web Services)
Beta — feedback welcome: [email protected]