1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-12 10:45:38 +02:00
Commit Graph

601 Commits

Author SHA1 Message Date
Dimitri Huisman
3613a8bcee
Re-add the newsfragments directory 2024-06-18 08:43:03 +00:00
Dimitri Huisman
f3c55cc5f9
Update CHANGELOG.md with latest towncrier entries 2024-06-09 15:03:15 +00:00
Dimitri Huisman
412c8c48d6
Merge branch 'master' into preparations-release 2024-06-09 11:43:02 +00:00
bors-mailu[bot]
c5d246e08c
Merge #3209
3209: Add missing translations for Dutch, German, French and Polish r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Adds missing translations for Dutch. These strings were introduced after 2.0. Practically **all** translations must be updated with these strings.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 10:28:23 +00:00
Dimitri Huisman
e5d2fc5de0
Update newsfragment 2024-06-09 10:18:43 +00:00
bors-mailu[bot]
d91a04dd00
Merge #3221
3221: Better PROXY_PROTOCOL r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

- Disable IMAP, POP3 and Submission by default; see https://nostarttls.secvuln.info/ on why explicit TLS is going away.
- Change the semantic of PROXY_PROTOCOL to make it configurable per port
- fix TLS_FLAVOR=notls not working with snappymail
- fix TLS_PERMISSIVE
- remove KUBERNETES_INGRESS; shouldn't be needed anymore
- update the documentation and the reverse proxy example

### Related issue(s)
- close #3162
- close #3061

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-09 10:17:32 +00:00
bors-mailu[bot]
a5858afda3
Merge #3207
3207: Add Belarusian translation. r=mergify[bot] a=spoooyders

## What type of PR?

Translation.

## What does this PR do?
Adds Belarusian translation.

### Related issue(s)
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: pavuki <tech@i2p.cc>
2024-06-09 09:55:35 +00:00
Florent Daigniere
7df8cdbe01 Ensure we normalize for all languages 2024-05-27 18:33:25 +02:00
Florent Daigniere
47c53a429c towncrier 2024-05-27 15:42:42 +02:00
Florent Daigniere
eddcedf5cf Alpine 3.20 2024-05-27 15:34:53 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
ctrl-i
a53b869d8a
Create 3261.bugfix
Updated roundcube to 1.6.7 due to known XSS vulnerabilities
2024-05-20 07:49:49 +01:00
Florent Daigniere
3565ab9a3b Fix #3260: double-quotes should be allowed in ooo 2024-05-17 08:32:39 +02:00
Florent Daigniere
5b5d526d79 Fix CVE-2024-1135 2024-05-08 16:10:10 +02:00
Florent Daigniere
67a53671f4 Fix purge_user.sh 2024-05-03 14:31:18 +02:00
Florent Daigniere
614042344d document 2024-04-08 09:46:39 +02:00
Florent Daigniere
e0b64a9e54 simplify config with TLS, PORTS and PROXY_PROTOCOL 2024-04-06 18:00:57 +02:00
Dimitri Huisman
a0877e6181
Add changelog entry for PR 3029 2024-03-27 10:01:12 +00:00
pavuki
6ef37cad74 Add an entry to newsfragments. 2024-03-26 08:58:58 +01:00
Dimitri Huisman
9935cb48cd
Fix bug 3068. Spam messages were always marked as read. 2024-03-22 16:53:11 +00:00
bors-mailu[bot]
8bf5299f21
Merge #3194
3194: Fix 3113 r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Fixes swaggerui documentation of all RESTful api end points. The API documentation should now be valid for each endpoint. 

### Related issue(s)
- close #3113 


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-03-18 08:10:44 +00:00
Dimitri Huisman
c2348fc28f
Initial changes for new release. Releases.rst and CHANGELOG.md must still be updated. 2024-03-16 16:35:34 +00:00
Florent Daigniere
7089cfea48 Ensure we also pin ISRG X2 in TLSA 2024-03-11 10:21:54 +01:00
Florent Daigniere
86adf07461 Ensure we always send an ISRG root for DANE 2024-03-10 12:19:40 +01:00
Florent Daigniere
dec5fecdb4 Ensure that nginx and dovecot are reloaded 2024-03-05 10:12:45 +01:00
Florent Daigniere
2afa9dca51 Fix ooo/sieve when proxy protocol is in use 2024-02-29 13:06:15 +01:00
darkclip
dba60c1c59 add changelog 2024-02-22 14:47:11 +08:00
Florent Daigniere
98a6bab0ca towncrier 2024-02-05 18:33:48 +01:00
Dimitri Huisman
8f86ffc6fd
Fix #3113. RESTful API was not correctly documented. 2024-01-22 10:44:30 +00:00
ctrl-i
3e187206ac
Create 3130.misc
Updated roundcube to 1.6.6
2024-01-21 09:34:00 +00:00
Florent Daigniere
bbfde0badc Fix 3129, thanks to Games-Crack 2024-01-18 17:30:01 +01:00
bors-mailu[bot]
5fcbe7a2fe
Merge #3097
3097: Upgrade alpine and node r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade alpine to 3.19.0 and node to node 21

That's php 8.3 and snappymail 2.31.0

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-01-10 16:41:32 +00:00
Florent Daigniere
ec7dbc6a90 Add url 2023-12-28 09:04:44 +01:00
Florent Daigniere
bc863b4bbc Long term fix against SMTP smuggling 2023-12-28 08:51:50 +01:00
bors-mailu[bot]
df5b48a52d
Merge #3100
3100: Do not block webmail when we have a valid SSO session r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Ensure we do not block webmail when we have a valid SSO session

### Related issue(s)
- close  #3094

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-12-22 08:43:12 +00:00
Florent Daigniere
64d83d061e Prevent SMTP smuggling 2023-12-21 18:17:29 +01:00
Florent Daigniere
325aa5452b Do not block webmail when we have a valid SSO sess 2023-12-21 12:37:08 +01:00
Florent Daigniere
0e522fceb7 Upgrade alpine, node, PHP and snappymail 2023-12-20 14:08:49 +01:00
Florent Daigniere
422f005c3f Fix 3095 2023-12-19 18:25:04 +01:00
Florent Daigniere
1f19ac5d8d Slow down the turtle policy 2023-11-30 18:17:53 +01:00
bors-mailu[bot]
bddbfabd82
Merge #3025
3025: Fix SETUP generating invalid files. r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
If JavaScript script is disabled or JS files are blocked from the setup website, the SETUP website would generate invalid configuration. Checks were added to prevent this situation from occurring.

Bootstrap loaded an outdated jquery version 1. We already use Jquery 2. I have disabled this and configured bootstrap to load our jquery js file.

Also fixed a regular expression that makes sure the specified Mailu storage path is valid.

### Related issue(s)
- closes #2396
- closes #2890
- closes #1524  

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2023-11-18 12:10:14 +00:00
Dimitri Huisman
e43fb69864
Update changelog fragment of 2890 2023-11-18 11:16:22 +00:00
Florent Daigniere
aefbd9552c fix clamav handling 2023-11-10 12:00:29 +01:00
bors-mailu[bot]
fd66c76c83
Merge #3033
3033: Enable snowball on FTS r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Enable [snowball](http://snowball.tartarus.org/algorithms/english/stemmer.html), a filter that will significantly cut down the size of FTS indexes.

It looks like the packages for aarch64 haven't been built yet... but this works on x64_86.
Don't unblock as long as  https://dl-cdn.alpinelinux.org/alpine/edge/testing/aarch64/dovecot-fts-flatcurve-0.3.4-r3.apk is 404

### Related issue(s)
- close #2977 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-11-07 15:07:07 +00:00
bors-mailu[bot]
b7ca4eb9f0
Merge #3032
3032: Update all python dependencies r=mergify[bot] a=Diman0

## What type of PR?

enhancement

## What does this PR do?
Updates all dependencies. Unfortunately multiple things were deprecated such as
* `@babel.localeselector` decorator
* app.app.session_cookie_name
* app.before_first_request

Unfortunately flask_debugtoolbar is not compatible with the updated version of flask.
Flask-SQLAlchemy cannot be updated to 3.0.5 because this introduces an error/bug.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2023-11-06 14:48:09 +00:00
ctrl-i
b74cd17bdd
Upgrade to roundcube 1.6.5 (fix XSS) 2023-11-06 07:55:23 +00:00
Alexander Graf
fa8e8f4f73
Rename 3008.feature to 3023.feature 2023-11-01 18:02:40 +01:00
Alexander Graf
e77b3f0a36
Update newsfragment 2023-11-01 18:01:39 +01:00
Florent Daigniere
b5ecaa278e Enable snowball 2023-11-01 08:12:03 +01:00
Dimitri Huisman
bf79df5c80
Add changelog entry 2023-10-31 20:02:34 +00:00