MailFlow

v2.7.1

Maintenance release: connection stability, several fixes, and dependency/security hardening.

Fixes

• PurelyMail accounts no longer keep getting "logged out." The IMAP connection now stays on IDLE with a short 4-minute keepalive instead of re-logging in on a long timer, so the connection no longer goes deaf and drops. Resolves the repeated reconnect/logout churn. (#299)
• New mail appears without a manual refresh after the laptop wakes from sleep. The message list now refetches on any reconnect, not only backoff-driven ones.
• Attached HTML/text files no longer vanish from the attachment list. A part marked Content-Disposition: attachment is now classified as an attachment before the text-body branches. Thanks to @Monkey7539. (#298)
• Admin panel toggle switches are visible in light mode. Off-state tracks use a visible border color instead of white-on-white. Thanks to @dcoffin88. (#300)

Security & dependencies

• Cleared runtime dependency advisories via brace-expansion / postcss overrides (no functional change).
• Scoped CI's npm audit gate to production dependencies so build-tooling advisories don't block releases.
• Bumped transitive dependencies to clear high-severity advisories.

Docs

• Corrected the README (Node 22, security headers, version pin, native apps not yet published).

Upgrade: pull the 2.7.1 images (ghcr.io/maathimself/mailflow-backend:2.7.1 and ghcr.io/maathimself/mailflow-frontend:2.7.1) and restart. No migration or config changes required.