This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Summary
AI summarySync onboarding completion state across devices, add folder icons, raise signature length cap, and allow <img> tags in signatures.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Sync onboarding completion state across devices so welcome flow runs once per account Sync onboarding completion state across devices so welcome flow runs once per account Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Distinct icons for Shared, Important, Memos, Scheduled, and Snoozed folders in Mail Distinct icons for Shared, Important, Memos, Scheduled, and Snoozed folders in Mail Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Raise HTML identity signature length cap to 50,000 characters in Compose Raise HTML identity signature length cap to 50,000 characters in Compose Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Allow <img> tags in HTML identity signatures for inline logos and banners in Compose Allow <img> tags in HTML identity signatures for inline logos and banners in Compose Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Add Danish localization Add Danish localization Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Hide Files settings entry and sidebar nav when filesEnabled policy is off Hide Files settings entry and sidebar nav when filesEnabled policy is off Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Honor cookieSameSite admin config override instead of always defaulting Honor cookieSameSite admin config override instead of always defaulting Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Standardize punctuation in tooltips and inline comments across locales Standardize punctuation in tooltips and inline comments across locales Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Clean up Danish locale wiring and sort language picker alphabetically Clean up Danish locale wiring and sort language picker alphabetically Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
1.6.6 (2026-05-15)
Features
- Mail: Sync onboarding completion state across devices so the welcome flow only runs once per account (#285)
- Mail: Distinct icons for Shared, Important, Memos, Scheduled, and Snoozed folders (#288)
- Compose: Raise HTML identity signature length cap to 50,000 characters
- Compose: Allow
<img>tags in HTML identity signatures for inline logos and banners
Fixes
- Files: Hide Files settings entry and sidebar nav when the
filesEnabledpolicy is off (#291) - Admin: Honor the
cookieSameSiteadmin config override instead of always defaulting (#284) - UI: Standardize punctuation in tooltips and inline comments across locales
i18n
- Add Danish localization
- Clean up Danish locale wiring and sort the language picker alphabetically (#286)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About webmail
Webmail built for the 21st Century. A modern, self-hosted email client for Stalwart Mail Server powered by the JMAP protocol. Email, calendar, contacts and files. Fast, private, and open source.
Related context
Earlier breaking changes
- v1.7.0 Server‑managed plugin bundles must be Ed25519‑signed and admin‑approved before loading.
- v1.7.0 Bundle hash is now full SHA-256; legacy hashes auto-migrated.
- v1.7.0 Server-managed bundles require Ed25519 signature verification.
- v1.7.0 Plugins run in sandboxed iframe with postMessage RPC bridge.
Beta — feedback welcome: [email protected]