Xandikos

v0.4.1 Feature

This release adds 5 notable features for engineering teams evaluating rollout.

Published 9d File Storage & Sync

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

caldav carddav dulwich git python webdav

Affected surfaces

auth

Summary

AI summary

Added support for exporting calendar collections as a single iCalendar feed.

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds exporting calendar collection as single iCalendar feed. Adds exporting calendar collection as single iCalendar feed. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Low	Serves calendar collections over the webcal:// scheme. Serves calendar collections over the webcal:// scheme. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Low	Allows per‑principal calendar‑home‑set and addressbook‑home‑set overrides via .xandikos config. Allows per‑principal calendar‑home‑set and addressbook‑home‑set overrides via .xandikos config. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Low	Adds --autocert option for self‑signed HTTPS. Adds --autocert option for self‑signed HTTPS. Source: llm_adapter@2026-05-25 Confidence: high	—
Feature	Low	Adds --htpasswd flag for HTTP Basic authentication. Adds --htpasswd flag for HTTP Basic authentication. Source: llm_adapter@2026-05-25 Confidence: high	—
Bugfix	Medium	Fixes crash when VTODO with RRULE lacks DTSTART by checking and skipping RRULE expansion. Fixes crash when VTODO with RRULE lacks DTSTART by checking and skipping RRULE expansion. Source: llm_adapter@2026-05-25 Confidence: high	—
Bugfix	Low	Explicitly sets PYTHONPATH in container image so WORKDIR correctness is no longer required. Explicitly sets PYTHONPATH in container image so WORKDIR correctness is no longer required. Source: llm_adapter@2026-05-25 Confidence: high	—

Full changelog

Allow exporting a calendar collection as a single iCalendar feed. Issue a GET with Accept: text/calendar or append ?export to the collection URL to get one merged .ics file suitable for consumers such as Google Calendar's "Add by URL". (#164)
Serve calendar collections over the webcal:// scheme.
Allow per-principal calendar-home-set and addressbook-home-set overrides via the [principal] section of the principal's .xandikos config. (#17)
Add --autocert option for self-signed HTTPS.
Add --htpasswd flag for HTTP Basic authentication.
Check that VTODO with RRULE has DTSTART, and skip RRULE expansion without DTSTART instead of crashing.
Explicitly set PYTHONPATH in the container image so the WORKDIR no longer has to be correct.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Xandikos

Get notified when new releases ship.

About Xandikos

Open source CardDAV and CalDAV server with minimal administrative overhead, backed by a Git repository. `GPL-3.0` `Python/deb`