This release adds 4 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryScreen lock with PIN & auto-lock adds server‑enforced security for all accounts.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds screen lock with PIN and optional auto-lock. Adds screen lock with PIN and optional auto-lock. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds drag-to-reorder filter rules in Settings. Adds drag-to-reorder filter rules in Settings. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds Getting‑Things‑Done workflow with Todo/Watch/Delegated states. Adds Getting‑Things‑Done workflow with Todo/Watch/Delegated states. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds new‑release notifications with server‑side check and toggle. Adds new‑release notifications with server‑side check and toggle. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Serves all fonts locally; no longer uses Google Fonts. Serves all fonts locally; no longer uses Google Fonts. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Groups Ko‑fi and GitHub Sponsors under "Support development" in About. Groups Ko‑fi and GitHub Sponsors under "Support development" in About. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Shows sidebar row name on hover when collapsed. Shows sidebar row name on hover when collapsed. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes compose tab order to jump from Subject to message body. Fixes compose tab order to jump from Subject to message body. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes AI Assistant settings layout issues (opaque button, Delete cutoff). Fixes AI Assistant settings layout issues (opaque button, Delete cutoff). Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes sidebar collapse button hover state, tooltip, and color. Fixes sidebar collapse button hover state, tooltip, and color. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Ensures read and starred states stay consistent across devices. Ensures read and starred states stay consistent across devices. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Features
- Screen lock with PIN & auto-lock (#235) — Lock MailFlow behind a 4–6 digit PIN, enforced on the server, with an optional auto-lock timer. Decoupled from your sign-in method, so it works even on SSO-only accounts that have no password.
- Drag-to-reorder filter rules (#253) — Reorder your filter rules by dragging them in Settings; the order is saved and rules run in sequence.
- GTD workflow (#250) — Opt-in Getting-Things-Done workflow with Todo / Watch / Delegated states backed by real IMAP folders, so your triage stays in sync with any IMAP client.
- New-release notifications (#261) — MailFlow now lets you know when a newer version is available. The check is server-side, cached, host-pinned, and can be turned off.
- Self-hosted fonts — All fonts (across every supported language/script) are now served locally. MailFlow no longer phones home to Google Fonts.
- Support development section — Ko-fi and GitHub Sponsors are now grouped under a single "Support development" heading in About.
- Named collapsed sidebar rows (#259) — Hovering a collapsed sidebar icon now shows its name.
Fixes
- Compose tab order (#266) — Pressing Tab after the Subject field now jumps straight to the message body instead of cycling through the formatting toolbar.
- AI Assistant settings (#258) — Opaque button surfaces, the Delete button is no longer cut off, and the configuration sits below the toggle.
- Sidebar collapse button (#254) — Corrected hover state, tooltip, and secondary-gray tone.
- Read/star sync — Read and starred state now stays consistent across devices.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]