1
0
mirror of https://github.com/Mailu/Mailu.git synced 2024-12-14 10:53:30 +02:00
Commit Graph

4817 Commits

Author SHA1 Message Date
Dimitri Huisman
423387051a
Use correct order for versions for docs 2024-06-18 07:46:58 +00:00
bors-mailu[bot]
df117338fa
Merge #3195
3195: Initial changes for new release.  r=mergify[bot] a=Diman0

Releases.rst and CHANGELOG.md must still be updated.

## What type of PR?

preparations for new release

## What does this PR do?
Preparations for new release. I must still write full changelog, new features overview and upgrade instructions.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-18 07:26:34 +00:00
Florent Daigniere
caf4b1359a
Apply suggestions from code review 2024-06-14 17:47:31 +02:00
Dimitri Huisman
897d0acf75
Update release notes 2024-06-09 15:19:29 +00:00
Dimitri Huisman
f3c55cc5f9
Update CHANGELOG.md with latest towncrier entries 2024-06-09 15:03:15 +00:00
Dimitri Huisman
415c55e73b
Update version numbers 2024-06-09 14:56:34 +00:00
Dimitri Huisman
f5cc8163c5
Further finish release notes 2024-06-09 13:46:39 +00:00
Dimitri Huisman
412c8c48d6
Merge branch 'master' into preparations-release 2024-06-09 11:43:02 +00:00
bors-mailu[bot]
c5d246e08c
Merge #3209
3209: Add missing translations for Dutch, German, French and Polish r=mergify[bot] a=Diman0

## What type of PR?

bug-fix

## What does this PR do?
Adds missing translations for Dutch. These strings were introduced after 2.0. Practically **all** translations must be updated with these strings.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 10:28:23 +00:00
Dimitri Huisman
e5d2fc5de0
Update newsfragment 2024-06-09 10:18:43 +00:00
bors-mailu[bot]
d91a04dd00
Merge #3221
3221: Better PROXY_PROTOCOL r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

- Disable IMAP, POP3 and Submission by default; see https://nostarttls.secvuln.info/ on why explicit TLS is going away.
- Change the semantic of PROXY_PROTOCOL to make it configurable per port
- fix TLS_FLAVOR=notls not working with snappymail
- fix TLS_PERMISSIVE
- remove KUBERNETES_INGRESS; shouldn't be needed anymore
- update the documentation and the reverse proxy example

### Related issue(s)
- close #3162
- close #3061

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2024-06-09 10:17:32 +00:00
Dimitri Huisman
712f5f48a8
Add missing translation for German 2024-06-09 10:13:10 +00:00
Florent Daigniere
52e02d4c56
Update core/nginx/dovecot/proxy.conf
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2024-06-09 11:59:12 +02:00
Florent Daigniere
c63bd0ce38
Update core/nginx/conf/nginx.conf
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2024-06-09 11:59:05 +02:00
bors-mailu[bot]
a5858afda3
Merge #3207
3207: Add Belarusian translation. r=mergify[bot] a=spoooyders

## What type of PR?

Translation.

## What does this PR do?
Adds Belarusian translation.

### Related issue(s)
## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: pavuki <tech@i2p.cc>
2024-06-09 09:55:35 +00:00
bors-mailu[bot]
c18eb3a33c
Merge #3232
3232: simplify the logic, add an extra check on the API auth handler r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

simplify the logic of API authentication, ensure that the API token is at least 3 characters

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-06-09 09:47:25 +00:00
Dimitri Huisman
12ccdebd20
Update documentation with new length requirement for API_TOKEN 2024-06-09 09:44:42 +00:00
bors-mailu[bot]
6a08a6ed14
Merge #3279
3279: Alpine 3.20 r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Switch to alpine 3.20. We still need edge for hardened-malloc.

Ensure we use 'normalize-icu' when indexing keywords in mails.

### Related issue(s)
- #2977

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-28 11:24:52 +00:00
Florent Daigniere
7df8cdbe01 Ensure we normalize for all languages 2024-05-27 18:33:25 +02:00
Florent Daigniere
72bf53105c doh2 2024-05-27 16:03:03 +02:00
Florent Daigniere
6dbceeeefa doh 2024-05-27 15:43:50 +02:00
Florent Daigniere
47c53a429c towncrier 2024-05-27 15:42:42 +02:00
Florent Daigniere
eddcedf5cf Alpine 3.20 2024-05-27 15:34:53 +02:00
bors-mailu[bot]
2a0791dd79
Merge #3270
3270: Use the new image name for Tika r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Use the new image name for Tika. See https://github.com/Mailu/Mailu/pull/3269#issuecomment-2123274960 for context.

### Related issue(s)
- 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-24 11:24:00 +00:00
Florent Daigniere
8c92bd5b4f Use the new image name 2024-05-21 21:14:13 +02:00
bors-mailu[bot]
16d99b71d2
Merge #3269
3269: Upgrade Tika and switch to the upstream image r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Upgrade Tika to 2.9.2 and switch to the upstream image

We couldn't do it before as there was no multi-arch image upstream
See https://github.com/apache/tika-docker/pull/19

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-21 09:16:34 +00:00
Florent Daigniere
3c9f825e4f Pin a version of requests that works
See https://github.com/psf/requests/issues/6707
2024-05-21 10:36:53 +02:00
Florent Daigniere
2bf19ead47 Switch to the upstream image of Tika
See https://github.com/apache/tika-docker/pull/19
Upgrade to 2.9.2 while at it
2024-05-21 10:15:27 +02:00
bors-mailu[bot]
6e08e591fb
Merge #3247
3247: Update all dependencies r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Update all dependencies including snappymail to 2.36.1

### Related issue(s)
- close #3032 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-20 12:03:01 +00:00
Florent Daigniere
4c5ad20459 doh 2024-05-20 11:08:06 +02:00
Florent Daigniere
dbd32cabf9 retry with cargo 2024-05-20 11:08:06 +02:00
Florent Daigniere
155a4cce5e maybe fix tests 2024-05-20 11:08:06 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
bors-mailu[bot]
d84c73a9d4
Merge #3267
3267: Update Roundcube 1.6.7 due to XSS vulnerabilities r=mergify[bot] a=ctrl-i

## What type of PR?

Bug fix

## What does this PR do?

Updates roundcube to 1.6.7

### Related issue(s)

Due to XSS vulnerabilities see [here](https://github.com/roundcube/roundcubemail/releases/tag/1.6.7)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: ctrl-i <1422608+ctrl-i@users.noreply.github.com>
2024-05-20 07:19:42 +00:00
ctrl-i
a53b869d8a
Create 3261.bugfix
Updated roundcube to 1.6.7 due to known XSS vulnerabilities
2024-05-20 07:49:49 +01:00
ctrl-i
e79e055ac1
Update Dockerfile
Roundcube incremented to 1.6.7 due to XSS vulnerabilities
2024-05-20 07:47:39 +01:00
bors-mailu[bot]
66721f260d
Merge #3261
3261: Fix #3260: double-quotes should be escaped/allowed in ooo r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

double-quotes should be allowed in ooo messages

### Related issue(s)
- closes #3260 
- #3249

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-17 12:24:22 +00:00
Florent Daigniere
3565ab9a3b Fix #3260: double-quotes should be allowed in ooo 2024-05-17 08:32:39 +02:00
bors-mailu[bot]
935266bc65
Merge #3235
3235: Tweaks to logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Make the default ``LOG_LEVEL=INFO`` ; ensure that admin does not log the access log unless it's set to ``DEBUG``
This ensures we see the authentication related messages.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-10 11:16:50 +00:00
bors-mailu[bot]
c728fa88e4
Merge #3251
3251: Fix CVE-2024-1135 r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix CVE-2024-1135

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-10 11:03:47 +00:00
Florent Daigniere
5b5d526d79 Fix CVE-2024-1135 2024-05-08 16:10:10 +02:00
bors-mailu[bot]
d90ecae8b8
Merge #3239
3239: Fix purge_user.sh r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Fix purge_user.sh; thanks to [nike7o0](https://github.com/nike7o0)

### Related issue(s)
- close #3238 
- #2858

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-05-03 14:24:07 +00:00
Florent Daigniere
67a53671f4 Fix purge_user.sh 2024-05-03 14:31:18 +02:00
Florent Daigniere
1d8f041b87 access_logs are DEBUG on admin 2024-04-20 23:38:37 +02:00
Florent Daigniere
2db75921a2
Ensure we have an api_token 2024-04-20 08:46:47 +02:00
Florent Daigniere
4837a05c71 simplify the logic 2024-04-18 19:37:02 +02:00
bors-mailu[bot]
da36ac0e92
Merge #3203
3203: Add automatic tests for RESTful API r=mergify[bot] a=Diman0

and fix all remaining issues that I could find with the API.

## What type of PR?

internal feature / bug-fix

## What does this PR do?
I first wanted to finish #3113 before continuing on the tests to keep the scope smaller of the PR.

This PR adds automatic tests that tests **all** the interfaces of the RESTful API. Practically it only tests the normal Ok (http 200) situations. Maybe in the future we could add more tests to check if the validation checks work correctly for each interface.

I also fixed any issues I could find with the RESTful API. I can at least confirm that all interfaces work now. I think the validation checks are also complete now.

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a] In case of feature or enhancement: documentation updated accordingly
- [n/a] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2024-04-17 18:09:31 +00:00
Florent Daigniere
4e28a053e3 enable all ports for tests 2024-04-08 09:55:20 +02:00
Florent Daigniere
614042344d document 2024-04-08 09:46:39 +02:00
Florent Daigniere
c701358c9d simplify 2024-04-08 09:09:43 +02:00