This release adds 5 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryUpdates 2026-06-15, https://github.com/sponsors/bulwarkmail, and https://github.com/umakers across a mixed release.
Full changelog
1.7.4 (2026-06-15)
Thank you for your donations:
- You? Become a sponsor!
One-time
- Anonymous
Monthly
Features
- Mail: New "All Mail" view across folders and accounts
- Mail: Edit contact directly from the email viewer contact sidebar
- Calendar: Recurrence editor, set-default calendar, and timezone-aware calendar queries
- Calendar: Agenda plugin sidecar
- Composer: Email display name support
- Composer: Drag-and-drop recipient chips between To/CC/BCC fields, with the address shown in the drag preview
- Composer: Avatars in recipient autocomplete suggestions, including directory users
- Files: JMAP file/folder sharing in the Files app (#408)
- Auth: QR-code SSO login and device pairing between webmail and the mobile app
- Auth: Require re-authentication for device pairing and SSO
- Accounts: Manage shared/group account settings from the Accounts page
- Setup: Opt-in telemetry in the web setup wizard
- Mail: Persist the email detail sidebar state
Fixes
- Mail: Preserve line breaks in the generated
text/plainalternative (#421) - Mail: Fix inconsistent threading of email messages in the inbox and folders
- Mail: Stop draft emails from being marked as unread
- Mail: Prevent wide email tables from rendering with rotated headers (#409)
- Mail: Preserve the folder list when a mailbox refetch hits the concurrent-request limit
- Mail: Correct dark-mode background-image inversion and height clipping in the email viewer
- Calendar: Dedupe scheduling emails and use Stalwart-compatible calendar filters
- Calendar: Redesign the custom recurrence editor to match the modal UI
- Files: Don't send the connected-account key as the JMAP
accountIdwhen sharing files (#408) - Routing: Strip the build-time
basePathfromrouter.pushredirects after login (#390) - Nav: Open recent contact emails at
/instead of 404ing on/mail - Nav: Hide the Add App button when
sidebarAppsEnabledis false - Settings: Move the "Plain Text Only" setting from Reading to Composing (#422)
- Privacy: Make telemetry opt-in
- UI: Fix the context menu being invisible on first right-click after page load
- Admin: Remove the JMAP status from the admin dashboard
- i18n: Add missing translation keys across 17 locales
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About webmail
Webmail built for the 21st Century. A modern, self-hosted email client for Stalwart Mail Server powered by the JMAP protocol. Email, calendar, contacts and files. Fast, private, and open source.
Related context
Earlier breaking changes
- v1.7.0 Server‑managed plugin bundles must be Ed25519‑signed and admin‑approved before loading.
- v1.7.0 Bundle hash is now full SHA-256; legacy hashes auto-migrated.
- v1.7.0 Server-managed bundles require Ed25519 signature verification.
- v1.7.0 Plugins run in sandboxed iframe with postMessage RPC bridge.
Beta — feedback welcome: [email protected]