This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+1 more
ReleasePort's take
Light signalVersion 2607.2 adds per‑account sync scheduling and CSV bulk import for IMAP accounts, introduces a configurable email deletion lock policy, and restores Bcc recipients during IMAP restore.
Why it matters: New configuration options (sync schedule, deletion lock) let operators tailor behavior; bug fixes ensure CSP respects resource blocking and MSA alias authentication succeeds.
Summary
AI summaryUpdates ✨ New Features, 🐛 Bug Fixes, and ⚙️ Improvements across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds per-account sync scheduling configuration in frontend. Adds per-account sync scheduling configuration in frontend. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds CSV bulk import for IMAP accounts. Adds CSV bulk import for IMAP accounts. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Adds configurable email deletion lock policy setting. Adds configurable email deletion lock policy setting. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Preserves sender and recipient display names during restore and export. Preserves sender and recipient display names during restore and export. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Makes concurrent sync job count configurable per poll cycle. Makes concurrent sync job count configurable per poll cycle. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Medium |
Restores Bcc recipients during IMAP restore. Restores Bcc recipients during IMAP restore. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Performance | Medium |
Improves MS Graph memory management with background Gen‑2 GCs and duplicate detection. Improves MS Graph memory management with background Gen‑2 GCs and duplicate detection. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Deprecation | Low |
Removes legacy CSV and JSON export formats from UI. Removes legacy CSV and JSON export formats from UI. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes CSP blocking external email images despite `View:BlockExternalResources` setting. Fixes CSP blocking external email images despite `View:BlockExternalResources` setting. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Medium |
Fixes MSA sync authentication failures for secondary email aliases. Fixes MSA sync authentication failures for secondary email aliases. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Bugfix | Low |
Corrects accounts table overflow on narrow desktop browsers. Corrects accounts table overflow on narrow desktop browsers. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
✨ New Features
- Per-Account Sync Scheduling - The sync interval can now be configured per mail account from the frontend (Create/Edit).
- CSV Bulk Import for IMAP Accounts - Import hundreds of IMAP mailboxes at once.
- Configurable Email Deletion Lock - A new
DeletionPolicy:DeletionAllowedsetting controls whether archived emails may be deleted. See documentation here. - Display Names Preservation - Sender and recipient display names (e.g. "Max Mustermann") are now stored alongside email addresses and faithfully restored during IMAP/Graph restore and EML export. Previously, only the bare email addresses were kept.
- Concurrent Sync Jobs - The number of account syncs running in parallel within one poll cycle is now configurable. See documentation here.
⚙️ Improvements
- Import Pages UX Harmonization - Unified visual structure across MBOX, EML, and CSV import pages.
- Sync Jobs Progress/Status Tooltips - The Progress and Status column headers in the Sync Jobs table now show an explanatory tooltip (via a "?" icon) describing how progress is calculated (per completed folders) and what each status code means.
- Removed legacy CSV/JSON export formats - The UI only offered EML/MBox export; the unused CSV/JSON export code paths have been removed for maintainability.
- IMAP Restore now restores Bcc recipients - Previously only From/To/Cc were restored via IMAP; Bcc addresses (with display names) are now included.
🐛 Bug Fixes
- External Email Images Blocked by CSP - The Content-Security-Policy header on the email view iframe blocked all remote (http/https) images unconditionally, ignoring the
View:BlockExternalResourcessetting. - Updates MS Graph Memory Management - Memory grew steadily during M365 syncs because only Gen-0 GCs ran while large bodies/attachments accumulated as uncollected Large Object Heap garbage; per-page GCs are now background Gen-2 collections. Duplicates are now detected before the per-message detail fetch, avoiding needless body downloads in the 12h overlap window.
- MSA Sync Authentication Failure - Personal Microsoft accounts could fail to sync with "Authentication failed" despite successful authorization when the entered email address was a secondary alias of the mailbox. The actually authorized login name is now extracted from the OAuth id_token.
- MSA Account Status on Details Page - Account Details page always showed "Not yet authorized" for MSA accounts because the controller action did not map OAuth fields.
- Mail Accounts Table Overflow - On narrow desktop browser windows the accounts table overflowed its container.
Breaking Changes
- Removed legacy CSV and JSON export formats
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About mail-archiver
Mail-Archiver is a web application for archiving, searching, and exporting emails from multiple accounts. Featuring folder sync, attachment support, mailbox migration and a dashboard.
Beta — feedback welcome: [email protected]