Skip to content

Release history

Modoboa releases

Mail hosting and management platform including a modern and simplified web user interface.

All releases

7 shown

Upgrade now
2.9.0 Security relevant
Auth

IDOR fix

2.8.2 Bug fix

Prevent login issues in certain scenarios.

Full changelog

What's Changed

  • Bump vite from 6.4.1 to 6.4.2 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/4000
  • ci(mergify): upgrade configuration to current format by @mergify[bot] in https://github.com/modoboa/modoboa/pull/3999
  • Sieve filters editor fixes by @tonioo in https://github.com/modoboa/modoboa/pull/4001
  • Prevent login issue in some cases. by @tonioo in https://github.com/modoboa/modoboa/pull/4002
  • Bump django from 5.2.12 to 5.2.13 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/4003

Full Changelog: https://github.com/modoboa/modoboa/compare/2.8.1...2.8.2

2.8.1 Security relevant
Security fixes
  • Various security fixes applied (no CVE IDs provided)
Notable features
  • Use domain from headers if not available within an auth result
Full changelog

What's Changed

  • Use domain from headers if not available within an auth result. by @tonioo in https://github.com/modoboa/modoboa/pull/3853
  • Various security fixes by @tonioo in https://github.com/modoboa/modoboa/pull/3997

Full Changelog: https://github.com/modoboa/modoboa/compare/2.8.0...2.8.1

Thanks to @zwique for his contribution.

2.8.0 Breaking risk
Security fixes
  • Fixed several security issues.
Full changelog

What's Changed

  • fix: prevent http 401 on API by @kryskool in https://github.com/modoboa/modoboa/pull/3942
  • Updates for file frontend/src/locale/en/app.po in ja_JP by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3946
  • Fixed several security issues. by @tonioo in https://github.com/modoboa/modoboa/pull/3949
  • fix: rewrite port detection value by @kryskool in https://github.com/modoboa/modoboa/pull/3948
  • docs: add self signed certificate tips by @kryskool in https://github.com/modoboa/modoboa/pull/3954
  • Pin chardet version in pyproject.toml by @kryskool in https://github.com/modoboa/modoboa/pull/3958
  • Bump django from 5.2.11 to 5.2.12 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3957
  • chore(deps): update dependancies by @kryskool in https://github.com/modoboa/modoboa/pull/3952
  • Bump immutable from 5.1.4 to 5.1.5 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3960
  • Prevent form closing when clicking on Modify link. by @tonioo in https://github.com/modoboa/modoboa/pull/3966
  • Replaced chardet by chardet_normalizer, by @tonioo in https://github.com/modoboa/modoboa/pull/3967
  • refactor: remove six module by @kryskool in https://github.com/modoboa/modoboa/pull/3969
  • Compatibility with caldav 3.x by @tonioo in https://github.com/modoboa/modoboa/pull/3968
  • Removed useless chapter. by @tonioo in https://github.com/modoboa/modoboa/pull/3971
  • feat: add server on openapi schema by @kryskool in https://github.com/modoboa/modoboa/pull/3972
  • Make sure domain resources can be viewed/updated from the frontend by @tonioo in https://github.com/modoboa/modoboa/pull/3978
  • Make webmail menu resizable. by @tonioo in https://github.com/modoboa/modoboa/pull/3981
  • Bump caldav from 3.0.1 to 3.0.2 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3976
  • Added webmail options to ask for delivery information. by @tonioo in https://github.com/modoboa/modoboa/pull/3982
  • Migration to vuetify 4 by @tonioo in https://github.com/modoboa/modoboa/pull/3987
  • Update djangorestframework requirement from <3.17,>=3.16 to >=3.16,<3.18 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3984
  • Bump caldav from 3.0.2 to 3.1.0 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3986
  • Bump flatted from 3.3.3 to 3.4.2 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3988
  • Send null values instead of empty strings for integer fields. by @tonioo in https://github.com/modoboa/modoboa/pull/3990
  • fix FutureWarning in python3.13 by @DeanHawking in https://github.com/modoboa/modoboa/pull/3980
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3991
  • Updates for file frontend/src/locale/en/app.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3992
  • Initialize counter if key does not exist by @jwinterm in https://github.com/modoboa/modoboa/pull/3955

New Contributors

  • @DeanHawking made their first contribution in https://github.com/modoboa/modoboa/pull/3980
  • @jwinterm made their first contribution in https://github.com/modoboa/modoboa/pull/3955

Full Changelog: https://github.com/modoboa/modoboa/compare/2.7.2...2.8.0

2.7.2 Bug fix

Replies no longer load messages from the Drafts folder.

Full changelog

What's Changed

  • Do not load message from Drafts folder when replying. by @tonioo in https://github.com/modoboa/modoboa/pull/3940

Full Changelog: https://github.com/modoboa/modoboa/compare/2.7.1...2.7.2

2.7.1 Breaking risk
⚠ Upgrade required
  • Install pip < 26 to avoid compatibility issue with pip-tools
  • Update mysqlclient requirement to <2.2.9
  • Bump axios from 1.13.2 to 1.13.5 in /frontend
Breaking changes
  • Set django-rq minimum version to 3.2.2
Security fixes
  • Prevent OS command injection using exec_cmd()
Notable features
  • Webmail: save message as draft
  • Improved DKIM key creation to avoid duplicate runs
  • Added last DNS checks execution date field to Domain model
Full changelog

What's Changed

  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in ja_JP by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3902
  • Updates for file frontend/src/locale/en/app.po in ja_JP by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3903
  • Install pip < 26 to avoid compatibility issue with pip-tools. by @tonioo in https://github.com/modoboa/modoboa/pull/3897
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in pl_PL by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3905
  • Updates for file frontend/src/locale/en/app.po in pl_PL by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3907
  • Update mysqlclient requirement from <2.2.8 to <2.2.9 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3915
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in ko_KR by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3912
  • Updates for file frontend/src/locale/en/app.po in ko_KR by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3914
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in ko_KR by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3917
  • Bump axios from 1.13.2 to 1.13.5 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3916
  • Bump markdown-it from 14.1.0 to 14.1.1 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3922
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in it by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3920
  • Updates for file frontend/src/locale/en/app.po in it by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3921
  • Webmail: save message as draft by @tonioo in https://github.com/modoboa/modoboa/pull/3923
  • Improved dkim key creation to avoid duplicate runs. by @tonioo in https://github.com/modoboa/modoboa/pull/3927
  • Set django-rq 3.2.2 as minimal version by @tonioo in https://github.com/modoboa/modoboa/pull/3929
  • Added link to "Moving to Modoboa" section. by @tonioo in https://github.com/modoboa/modoboa/pull/3930
  • Updated email field label to make a distinction with Address field. by @tonioo in https://github.com/modoboa/modoboa/pull/3931
  • Make sure to use ISO based weeks in every case. by @tonioo in https://github.com/modoboa/modoboa/pull/3932
  • Use django authentication function to check password. by @tonioo in https://github.com/modoboa/modoboa/pull/3933
  • Prevent OS command injection using exec_cmd() by @tonioo in https://github.com/modoboa/modoboa/pull/3934
  • Make graphics rendering work again after change to Popen execution mode. by @tonioo in https://github.com/modoboa/modoboa/pull/3936
  • Added last DNS checks execution date to Domain model. by @tonioo in https://github.com/modoboa/modoboa/pull/3937
  • Updates for file frontend/src/locale/en/app.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3938

Full Changelog: https://github.com/modoboa/modoboa/compare/2.7.0...2.7.1

2.7.0 Breaking risk
Breaking changes
  • Removed default top redirection setting.
Notable features
  • Added new RQ queue for operations requiring root privileges
  • Webmail: email scheduling
Full changelog

What's Changed

  • Bump django from 5.2.8 to 5.2.9 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3829
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in ru by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3828
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in ru by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3830
  • Replaced call to deprecated caldav method. by @tonioo in https://github.com/modoboa/modoboa/pull/3831
  • Fixed issues with with Provider domains edition. by @tonioo in https://github.com/modoboa/modoboa/pull/3835
  • Bump caldav from 2.1.2 to 2.2.3 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3834
  • Asynchronous sync from existing Address book by @tonioo in https://github.com/modoboa/modoboa/pull/3837
  • Bump django-reversion from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3839
  • Apply theme color to account sidebar. by @tonioo in https://github.com/modoboa/modoboa/pull/3841
  • Contacts listing improvements. by @tonioo in https://github.com/modoboa/modoboa/pull/3840
  • Contacts UI improvements by @tonioo in https://github.com/modoboa/modoboa/pull/3842
  • Updates for file frontend/src/locale/en/app.po in ja_JP by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3848
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in ja_JP by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3847
  • Fix broken link for docs by @pionsys-mhs in https://github.com/modoboa/modoboa/pull/3845
  • Replaced passlib by libpass. by @tonioo in https://github.com/modoboa/modoboa/pull/3852
  • Make sure passwords are properly generated in config file. by @tonioo in https://github.com/modoboa/modoboa/pull/3856
  • chore: use stale process as Github Actions by @kryskool in https://github.com/modoboa/modoboa/pull/3861
  • feat: add new bsd flavor for psycopg by @kryskool in https://github.com/modoboa/modoboa/pull/3866
  • chore(deps): update Django 5.2.10 by @kryskool in https://github.com/modoboa/modoboa/pull/3870
  • Update project URL on Transifex. by @tonioo in https://github.com/modoboa/modoboa/pull/3871
  • Bump django-otp from 1.6.3 to 1.7.0 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3873
  • Add autofocus to TFA code input field by @ByteSizedMarius in https://github.com/modoboa/modoboa/pull/3874
  • chore: Add DeepWiki badge to README by @kryskool in https://github.com/modoboa/modoboa/pull/3876
  • Replaced FullCalendar by Vuetify internal calendar by @tonioo in https://github.com/modoboa/modoboa/pull/3851
  • Use RQ instead of cron by @Spitfireap in https://github.com/modoboa/modoboa/pull/3505
  • fix(imap): issue when pattern is empty by @kryskool in https://github.com/modoboa/modoboa/pull/3872
  • chore(ci): add Python 3.14 for tests by @kryskool in https://github.com/modoboa/modoboa/pull/3868
  • Bump fido2 from 2.0.0 to 2.1.0 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3880
  • docs: migrate documentation from sphinx to vitepress by @kryskool in https://github.com/modoboa/modoboa/pull/3875
  • Better menu behavior when clicking on 'set small' btn. by @tonioo in https://github.com/modoboa/modoboa/pull/3882
  • Some fixes and improvements around the autoconfig service. by @tonioo in https://github.com/modoboa/modoboa/pull/3883
  • Removed old documentation by @tonioo in https://github.com/modoboa/modoboa/pull/3884
  • Added new RQ queue for operations requiring root privileges by @tonioo in https://github.com/modoboa/modoboa/pull/3885
  • Fixed typo in modoboa.md by @mirtouf in https://github.com/modoboa/modoboa/pull/3886
  • Make sure migration deletion is working. by @tonioo in https://github.com/modoboa/modoboa/pull/3888
  • Bump fido2 from 2.1.0 to 2.1.1 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3889
  • Bump lodash from 4.17.21 to 4.17.23 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3890
  • Webmail: display message even when there is no To field. by @tonioo in https://github.com/modoboa/modoboa/pull/3891
  • Webmail: email scheduling by @tonioo in https://github.com/modoboa/modoboa/pull/3893
  • Removed default top redirection setting. by @tonioo in https://github.com/modoboa/modoboa/pull/3896
  • Bump django from 5.2.10 to 5.2.11 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3898
  • Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3899
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3900
  • Updates for file frontend/src/locale/en/app.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3901
  • Bump caldav from 2.2.3 to 2.2.6 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3894

New Contributors

  • @ByteSizedMarius made their first contribution in https://github.com/modoboa/modoboa/pull/3874

Full Changelog: https://github.com/modoboa/modoboa/compare/2.6.5...2.7.0

Beta — feedback welcome: [email protected]