listmonk

v6.2.0 has important security fixes in addition to several improvements and general bug fixes.

As always, take a backup of your Postgres database before upgrading.

Security

This version has fixes for multiple campaign/list permission validation issues in multi-user environments.

What's new

• Embed inline images (CID) in e-mails.
• Define trusted URLs and redirect to them after subscriber form submission.
• SMTP-server selection based on 'from e-mail' domains.
• Template expression support in campaign custom headers.
• "Outlook compatbility mode" option in the Visual e-mail builder UI.
• Support for Azure bounce webhooks.

How to upgrade

As always, take a backup of your database before upgrading.

Binary

Download the latest binary. Stop and replace the old binary. Run ./listmonk --upgrade. Start the app again.

Docker

# cd /directory/with/docker-compose.yml

docker-compose down
docker-compose pull && docker-compose run --rm app ./listmonk --upgrade
docker-compose up -d app db

What's Changed

• feat(i18n): add Arabic (ar) translation by @imohad in https://github.com/knadh/listmonk/pull/2977

• Bump golang.org/x/image from 0.29.0 to 0.38.0 by @dependabot[bot] in https://github.com/knadh/listmonk/pull/2979
• Update Lettermint webhook documentation link by @Bjornftw in https://github.com/knadh/listmonk/pull/2984
• Fix september traduction by @jiimmyy1 in https://github.com/knadh/listmonk/pull/3000
• Add quick settings for azure smtp by @oskari in https://github.com/knadh/listmonk/pull/3002
• Bump axios from 1.13.5 to 1.15.0 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/2999
• Bump vite from 5.4.20 to 6.4.2 in /frontend/email-builder by @dependabot[bot] in https://github.com/knadh/listmonk/pull/2995
• Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.4 by @dependabot[bot] in https://github.com/knadh/listmonk/pull/2985
• Bump lodash from 4.17.23 to 4.18.1 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/2986
• Fix container spanish translation typo by @Ggpsv in https://github.com/knadh/listmonk/pull/3005
• Fix issues in spanish translations by @Ggpsv in https://github.com/knadh/listmonk/pull/3007
• Bump follow-redirects from 1.15.11 to 1.16.0 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3003
• Bump postcss from 8.4.49 to 8.5.12 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3020
• Fixs #2987 - Prevent confirmed subscriber becoming unconfirmed when re-subscribing. by @blu3id in https://github.com/knadh/listmonk/pull/2996
• Bump axios from 1.15.0 to 1.15.2 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3032
• Bump systeminformation from 5.31.1 to 5.31.6 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3046
• Update campaign translations to 营销活动 and change field name to 名称 by @egghurt in https://github.com/knadh/listmonk/pull/3038
• Bump postcss from 8.5.9 to 8.5.14 in /frontend/email-builder by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3036
• fix(analytics): correct per-campaign unique view counting by @wucm667 in https://github.com/knadh/listmonk/pull/3024
• fix: prevent nil pointer crash in BounceWebhook when bounce processing disabled by @Koushik-1729 in https://github.com/knadh/listmonk/pull/2993
• Add LumaDock as a hosting option by @AXR9 in https://github.com/knadh/listmonk/pull/3062
• Bump qs from 6.14.2 to 6.15.2 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3061
• Bump js-cookie from 3.0.5 to 3.0.7 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3059
• Updated German translation for new refresh button by @althaus in https://github.com/knadh/listmonk/pull/3060
• Update nl.json by @RichardJong in https://github.com/knadh/listmonk/pull/3052
• fix: italian localization is now more natural by @cmargiotta in https://github.com/knadh/listmonk/pull/3048
• Add per-domain SMTP routing by @jaymzh in https://github.com/knadh/listmonk/pull/2953
• Fix: ZIP Slip path traversal in CSV import by @Yunkaiwjs in https://github.com/knadh/listmonk/pull/3065
• Bump tmp from 0.2.5 to 0.2.7 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3064
• Bump axios from 1.15.2 to 1.16.0 in /frontend by @dependabot[bot] in https://github.com/knadh/listmonk/pull/3066
• fix: protect SES cert cache map with sync.RWMutex to prevent concurrent map writes crash by @Abzaek in https://github.com/knadh/listmonk/pull/3050
• Add Indonesian translations (i18n/id.json) by @reynaldiarya in https://github.com/knadh/listmonk/pull/3069
• Update subscription confirmation message in Spanish by @altomarketing in https://github.com/knadh/listmonk/pull/3070
• Fix typo in es.json: "inválido" → "individual" by @al10101 in https://github.com/knadh/listmonk/pull/3072
• Fix dev environment when $GOPATH is not set by @dfabulich in https://github.com/knadh/listmonk/pull/3097
• Added API endpoint for SQL based list changes by @NWTrident in https://github.com/knadh/listmonk/pull/3093
• Support robots.txt in static content by @dfabulich in https://github.com/knadh/listmonk/pull/3096
• Show the "Links" chart heading on the campaign analytics page by @sysrow in https://github.com/knadh/listmonk/pull/3091
• Add Azure ACS bounce webhooks and settings support by @oskari in https://github.com/knadh/listmonk/pull/3001
• Outlook-safe rendering for visual email builder output by @MrJoky in https://github.com/knadh/listmonk/pull/2978
• Add support for embedding images (inline attachments) via CID in campaign bodies by @knadh in https://github.com/knadh/listmonk/pull/3034
• Update Italian translation by @albanobattistella in https://github.com/knadh/listmonk/pull/3109
• Fix api tokens hashing by @knadh in https://github.com/knadh/listmonk/pull/3114

New Contributors

• @imohad made their first contribution in https://github.com/knadh/listmonk/pull/2977
• @jiimmyy1 made their first contribution in https://github.com/knadh/listmonk/pull/3000
• @oskari made their first contribution in https://github.com/knadh/listmonk/pull/3002
• @Ggpsv made their first contribution in https://github.com/knadh/listmonk/pull/3005
• @blu3id made their first contribution in https://github.com/knadh/listmonk/pull/2996
• @egghurt made their first contribution in https://github.com/knadh/listmonk/pull/3038
• @wucm667 made their first contribution in https://github.com/knadh/listmonk/pull/3024
• @Koushik-1729 made their first contribution in https://github.com/knadh/listmonk/pull/2993
• @AXR9 made their first contribution in https://github.com/knadh/listmonk/pull/3062
• @althaus made their first contribution in https://github.com/knadh/listmonk/pull/3060
• @RichardJong made their first contribution in https://github.com/knadh/listmonk/pull/3052
• @cmargiotta made their first contribution in https://github.com/knadh/listmonk/pull/3048
• @jaymzh made their first contribution in https://github.com/knadh/listmonk/pull/2953
• @Yunkaiwjs made their first contribution in https://github.com/knadh/listmonk/pull/3065
• @Abzaek made their first contribution in https://github.com/knadh/listmonk/pull/3050
• @reynaldiarya made their first contribution in https://github.com/knadh/listmonk/pull/3069
• @altomarketing made their first contribution in https://github.com/knadh/listmonk/pull/3070
• @al10101 made their first contribution in https://github.com/knadh/listmonk/pull/3072
• @dfabulich made their first contribution in https://github.com/knadh/listmonk/pull/3097
• @NWTrident made their first contribution in https://github.com/knadh/listmonk/pull/3093
• @MrJoky made their first contribution in https://github.com/knadh/listmonk/pull/2978

Full Changelog: https://github.com/knadh/listmonk/compare/v6.1.0...v6.2.0